From cb6701efb8138995895cada38e619cbf8b131868 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 17 Jul 2024 05:55:47 +0000 Subject: [PATCH] fix: kernel-bio-converter/pom.xml to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-6597980 --- kernel-bio-converter/pom.xml | 740 +++++++++++++++++------------------ 1 file changed, 370 insertions(+), 370 deletions(-) diff --git a/kernel-bio-converter/pom.xml b/kernel-bio-converter/pom.xml index e78994c..58dcd20 100644 --- a/kernel-bio-converter/pom.xml +++ b/kernel-bio-converter/pom.xml @@ -1,373 +1,373 @@ - + - 4.0.0 - io.mosip.kernel - kernel-bio-converter - 1.2.1-java21-SNAPSHOT - kernel-bio-converter - kernel-bio-converter - https://github.com/mosip/converters - - - - MPL 2.0 - https://www.mozilla.org/en-US/MPL/2.0/ - - - - - scm:git:git://github.com/mosip/converters.git - scm:git:ssh://github.com:mosip/converters.git - https://github.com/mosip/converters - HEAD - - - - - Mosip - mosip.emailnotifier@gmail.com - io.mosip - https://github.com/mosip/converters - - - - - UTF-8 - 21 - - - ${java.version} - ${java.version} - 3.11.0 - 3.0.2 - 3.1.0 - 3.2.0 - 2.3 - 0.8.11 - 3.1.1 - 3.3.1 - 3.2.0 - 3.2.3 - 3.0.2 - 3.1.0 - 2.22.0 - 1.6.7 - 3.2.5 - 3.7.0.1746 - - - 3.0.1 - - - 2.5.0 - - - 2.5 - - - 4.2 - 1.3.0 - 2.0.2 - 2.14.0 - - - 1.2.1-java21-SNAPSHOT - 1.2.1-java21-SNAPSHOT - 1.2.1-java21-SNAPSHOT - 1.2.1-java21-SNAPSHOT - - - - - - - io.mosip.kernel - kernel-bom - ${kernel.bom.version} - pom - import - - - - - - - org.springframework.security - spring-security-web - - - org.springframework.security - spring-security-core - - - org.springframework.security - spring-security-config - - - org.springframework.boot - spring-boot-starter-web - - - org.springframework.security - spring-security-test - - - org.springframework.boot - spring-boot-starter-security - - - io.mosip.kernel - kernel-logger-logback - ${kernel.logger.logback.version} - - - org.springdoc - springdoc-openapi-starter-webmvc-ui - ${springdoc.openapi.starter.webmvc.ui.version} - - - org.springframework.boot - spring-boot-configuration-processor - provided - - - org.springframework.cloud - spring-cloud-starter-config - - - org.projectlombok - lombok - provided - - - io.mosip.kernel - kernel-core - ${kernel.core.version} - - - com.fasterxml.jackson.core - jackson-databind - - - com.fasterxml.jackson.core - jackson-annotations - - - com.fasterxml.jackson.core - jackson-dataformat-xml - - - com.fasterxml.jackson.core - jackson-core - - - - - io.mosip.biometric.util - biometrics-util - ${mosip.biometrics.util.version} - - - com.fasterxml.jackson.dataformat - jackson-dataformat-xml - - - - - org.imgscalr - imgscalr-lib - ${imgscalr.lib.version} - - - com.github.jai-imageio - jai-imageio-jpeg2000 - ${jai.imageio.jpeg2000.version} - - - jakarta.servlet - jakarta.servlet-api - - - org.junit.vintage - junit-vintage-engine - - - com.fasterxml.jackson.dataformat - jackson-dataformat-xml - - - - - - ossrh - https://oss.sonatype.org/content/repositories/snapshots - - - ossrh - https://oss.sonatype.org/service/local/staging/deploy/maven2/ - - - - - - - org.apache.maven.plugins - maven-compiler-plugin - ${maven.compiler.version} - - ${java.version} - - --enable-preview - - - - - org.apache.maven.plugins - maven-source-plugin - ${maven.source.plugin.version} - - - attach-sources - - jar-no-fork - - - - - - org.apache.maven.plugins - maven-javadoc-plugin - ${maven.javadoc.plugin.version} - - - attach-javadocs - - jar - - - - - none - - - - - pl.project13.maven - git-commit-id-plugin - ${git.commit.id.plugin.version} - - - get-the-git-infos - - revision - - validate - - - - true - - ${project.build.outputDirectory}/service-git.properties - - ^git.build.(time|version)$ - ^git.commit.id.(abbrev|full)$ - - full - ${project.basedir}/.git - - - - org.apache.maven.plugins - maven-gpg-plugin - ${maven.gpg.plugin.version} - - - sign-artifacts - verify - - sign - - - - --pinentry-mode - loopback - - - - - - - org.springframework.boot - spring-boot-maven-plugin - ${spring.boot.maven.plugin.version} - - true - ZIP - - - - - build-info - repackage - - - - - - maven-jar-plugin - ${maven.jar.plugin.version} - - - package - - jar - - - - **/constant/* - **/dto/* - **/exception/* - **/service/** - - lib - - - - - - - - - - sonar - - . - src/main/java/**,src/main/resources/** - ${sonar.coverage.exclusions} - https://sonarcloud.io - - - false - - - - - org.sonarsource.scanner.maven - sonar-maven-plugin - ${maven.sonar.plugin.version} - - - verify - - sonar - - - - - - - - + xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd"> + 4.0.0 + io.mosip.kernel + kernel-bio-converter + 1.2.1-java21-SNAPSHOT + kernel-bio-converter + kernel-bio-converter + https://github.com/mosip/converters + + + + MPL 2.0 + https://www.mozilla.org/en-US/MPL/2.0/ + + + + + scm:git:git://github.com/mosip/converters.git + scm:git:ssh://github.com:mosip/converters.git + https://github.com/mosip/converters + HEAD + + + + + Mosip + mosip.emailnotifier@gmail.com + io.mosip + https://github.com/mosip/converters + + + + + UTF-8 + 21 + + + ${java.version} + ${java.version} + 3.11.0 + 3.0.2 + 3.1.0 + 3.2.0 + 2.3 + 0.8.11 + 3.1.1 + 3.3.1 + 3.2.0 + 3.2.3 + 3.0.2 + 3.1.0 + 2.22.0 + 1.6.7 + 3.2.5 + 3.7.0.1746 + + + 3.0.1 + + + 2.6.0 + + + 2.5 + + + 4.2 + 1.3.0 + 2.0.2 + 2.14.0 + + + 1.2.1-java21-SNAPSHOT + 1.2.1-java21-SNAPSHOT + 1.2.1-java21-SNAPSHOT + 1.2.1-java21-SNAPSHOT + + + + + + + io.mosip.kernel + kernel-bom + ${kernel.bom.version} + pom + import + + + + + + + org.springframework.security + spring-security-web + + + org.springframework.security + spring-security-core + + + org.springframework.security + spring-security-config + + + org.springframework.boot + spring-boot-starter-web + + + org.springframework.security + spring-security-test + + + org.springframework.boot + spring-boot-starter-security + + + io.mosip.kernel + kernel-logger-logback + ${kernel.logger.logback.version} + + + org.springdoc + springdoc-openapi-starter-webmvc-ui + ${springdoc.openapi.starter.webmvc.ui.version} + + + org.springframework.boot + spring-boot-configuration-processor + provided + + + org.springframework.cloud + spring-cloud-starter-config + + + org.projectlombok + lombok + provided + + + io.mosip.kernel + kernel-core + ${kernel.core.version} + + + com.fasterxml.jackson.core + jackson-databind + + + com.fasterxml.jackson.core + jackson-annotations + + + com.fasterxml.jackson.core + jackson-dataformat-xml + + + com.fasterxml.jackson.core + jackson-core + + + + + io.mosip.biometric.util + biometrics-util + ${mosip.biometrics.util.version} + + + com.fasterxml.jackson.dataformat + jackson-dataformat-xml + + + + + org.imgscalr + imgscalr-lib + ${imgscalr.lib.version} + + + com.github.jai-imageio + jai-imageio-jpeg2000 + ${jai.imageio.jpeg2000.version} + + + jakarta.servlet + jakarta.servlet-api + + + org.junit.vintage + junit-vintage-engine + + + com.fasterxml.jackson.dataformat + jackson-dataformat-xml + + + + + + ossrh + https://oss.sonatype.org/content/repositories/snapshots + + + ossrh + https://oss.sonatype.org/service/local/staging/deploy/maven2/ + + + + + + + org.apache.maven.plugins + maven-compiler-plugin + ${maven.compiler.version} + + ${java.version} + + --enable-preview + + + + + org.apache.maven.plugins + maven-source-plugin + ${maven.source.plugin.version} + + + attach-sources + + jar-no-fork + + + + + + org.apache.maven.plugins + maven-javadoc-plugin + ${maven.javadoc.plugin.version} + + + attach-javadocs + + jar + + + + + none + + + + + pl.project13.maven + git-commit-id-plugin + ${git.commit.id.plugin.version} + + + get-the-git-infos + + revision + + validate + + + + true + + ${project.build.outputDirectory}/service-git.properties + + ^git.build.(time|version)$ + ^git.commit.id.(abbrev|full)$ + + full + ${project.basedir}/.git + + + + org.apache.maven.plugins + maven-gpg-plugin + ${maven.gpg.plugin.version} + + + sign-artifacts + verify + + sign + + + + --pinentry-mode + loopback + + + + + + + org.springframework.boot + spring-boot-maven-plugin + ${spring.boot.maven.plugin.version} + + true + ZIP + + + + + build-info + repackage + + + + + + maven-jar-plugin + ${maven.jar.plugin.version} + + + package + + jar + + + + **/constant/* + **/dto/* + **/exception/* + **/service/** + + lib + + + + + + + + + + sonar + + . + src/main/java/**,src/main/resources/** + ${sonar.coverage.exclusions} + https://sonarcloud.io + + + false + + + + + org.sonarsource.scanner.maven + sonar-maven-plugin + ${maven.sonar.plugin.version} + + + verify + + sonar + + + + + + + +