This is an automated email from the ASF dual-hosted git repository.
tbouron pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/brooklyn-server.git
The following commit(s) were added to refs/heads/master by this push:
new e6e29a3 bumps Jetty and Xstreams based on Snyk suggestions
new 349ba81 Merge pull request #1216 from
jcabrerizo/feature/bump-vulnerable-version-2108
e6e29a3 is described below
commit e6e29a3e80aa7f5171174b02ca16aa7ac83600c0
Author: Juan Cabrerizo <[email protected]>
AuthorDate: Tue Aug 3 11:12:57 2021 +0100
bumps Jetty and Xstreams based on Snyk suggestions
---
pom.xml | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/pom.xml b/pom.xml
index b6e68fc..8fd6e50 100644
--- a/pom.xml
+++ b/pom.xml
@@ -115,7 +115,7 @@
<failureaccess.version>1.0.1</failureaccess.version>
<!-- xstream -->
- <xstream.version>1.4.15</xstream.version>
+ <xstream.version>1.4.17</xstream.version>
<xpp3.servicemix.version>1.1.4c_7</xpp3.servicemix.version>
<kxml2.servicemix.version>2.3.0_3</kxml2.servicemix.version>
@@ -180,7 +180,7 @@
<!-- Dependencies shipped with vanilla karaf; update these when we
update the karaf version -->
<karaf.version>4.3.0</karaf.version>
<karaf.plugin.version>${karaf.version}</karaf.plugin.version>
- <jetty.version>9.4.35.v20201120</jetty.version> <!-- 9.4.31.v20200723
from Karaf 4.3.0 -->
+ <jetty.version>9.4.39.v20210325</jetty.version> <!-- 9.4.31.v20200723
from Karaf 4.3.0 -->
<commons-collections.version>3.2.2</commons-collections.version>
<pax-web.version>7.3.9</pax-web.version>
<jaxb-api.version>2.3.3</jaxb-api.version>
