Skip to content

Commit

Permalink
SNOW-471177: [Snyk] Security upgrade com.google.auth:google-auth-libr…
Browse files Browse the repository at this point in the history
…ary-oauth2-http from 1.5.3 to 1.11.0 (#1135)

fix: FIPS/pom.xml to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEGUAVA-1015415

Co-authored-by: snyk-bot <snyk-bot@snyk.io>
  • Loading branch information
sfc-gh-snyk-sca-sa and snyk-bot authored Sep 26, 2022
1 parent 8cbec1d commit e4e521f
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions FIPS/pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -308,7 +308,7 @@
<dependency>
<groupId>com.google.auth</groupId>
<artifactId>google-auth-library-oauth2-http</artifactId>
<version>1.5.3</version>
<version>1.11.0</version>
</dependency>
<dependency>
<groupId>com.google.cloud</groupId>
Expand Down Expand Up @@ -690,7 +690,7 @@
<timestampFormat>yyyyMMddHHmmss</timestampFormat>
<timestampPropertyName>buildNumber.timestamp</timestampPropertyName>
<doCheck>false</doCheck>
<revisionOnScmFailure />
<revisionOnScmFailure/>
<doUpdate>false</doUpdate>
<!--- Note for those who come later. If you specify "buildNumber" in the items field, it becomes an incrememting buildNumber
AFAIK (and I spent a lot of time on this) it is impossible to get the SCM rev number and incrememting build number at the same time -->
Expand Down Expand Up @@ -897,7 +897,7 @@
</filter>
</filters>
<transformers>
<transformer implementation="org.apache.maven.plugins.shade.resource.ServicesResourceTransformer" />
<transformer implementation="org.apache.maven.plugins.shade.resource.ServicesResourceTransformer"/>
<transformer implementation="org.apache.maven.plugins.shade.resource.ManifestResourceTransformer">
</transformer>
</transformers>
Expand Down

0 comments on commit e4e521f

Please sign in to comment.