This is an automated email from the ASF dual-hosted git repository.
jinwoo pushed a commit to branch support/1.15
in repository https://gitbox.apache.org/repos/asf/geode.git
The following commit(s) were added to refs/heads/support/1.15 by this push:
new 605c14a2a2 GEODE-10415: bump dependencies due to vulnerability scan
(#7855)
605c14a2a2 is described below
commit 605c14a2a2aa1518242c528e9d60291751d02b10
Author: Mario Kevo <[email protected]>
AuthorDate: Wed Sep 14 20:49:46 2022 +0200
GEODE-10415: bump dependencies due to vulnerability scan (#7855)
(cherry picked from commit 0b0c6f8d38f7127949d9fe9d396ec68e5bde45a5)
---
.../src/integrationTest/resources/assembly_content.txt | 10 +++++-----
.../integrationTest/resources/gfsh_dependency_classpath.txt | 12 ++++++------
.../src/integrationTest/resources/dependency_classpath.txt | 10 +++++-----
3 files changed, 16 insertions(+), 16 deletions(-)
diff --git a/geode-assembly/src/integrationTest/resources/assembly_content.txt
b/geode-assembly/src/integrationTest/resources/assembly_content.txt
index 5cc276bf64..d2fce4f87b 100644
--- a/geode-assembly/src/integrationTest/resources/assembly_content.txt
+++ b/geode-assembly/src/integrationTest/resources/assembly_content.txt
@@ -1004,11 +1004,11 @@ lib/gfsh-dependencies.jar
lib/httpclient-4.5.13.jar
lib/httpcore-4.4.15.jar
lib/istack-commons-runtime-4.0.1.jar
-lib/jackson-annotations-2.13.2.jar
-lib/jackson-core-2.13.2.jar
-lib/jackson-databind-2.13.2.2.jar
-lib/jackson-datatype-joda-2.13.2.jar
-lib/jackson-datatype-jsr310-2.13.2.jar
+lib/jackson-annotations-2.13.3.jar
+lib/jackson-core-2.13.3.jar
+lib/jackson-databind-2.13.3.jar
+lib/jackson-datatype-joda-2.13.3.jar
+lib/jackson-datatype-jsr310-2.13.3.jar
lib/javax.activation-api-1.2.0.jar
lib/javax.mail-api-1.6.2.jar
lib/javax.resource-api-1.7.1.jar
diff --git
a/geode-assembly/src/integrationTest/resources/gfsh_dependency_classpath.txt
b/geode-assembly/src/integrationTest/resources/gfsh_dependency_classpath.txt
index 1ad1ef4d1d..ba2caaa985 100644
--- a/geode-assembly/src/integrationTest/resources/gfsh_dependency_classpath.txt
+++ b/geode-assembly/src/integrationTest/resources/gfsh_dependency_classpath.txt
@@ -21,12 +21,12 @@ spring-shell-1.2.0.RELEASE.jar
spring-web-5.3.20.jar
commons-lang3-3.12.0.jar
rmiio-2.1.2.jar
-jackson-datatype-joda-2.13.2.jar
-jackson-annotations-2.13.2.jar
-jackson-core-2.13.2.jar
-jackson-datatype-jsr310-2.13.2.jar
-jackson-databind-2.13.2.2.jar
-swagger-annotations-2.2.0.jar
+jackson-datatype-joda-2.13.3.jar
+jackson-annotations-2.13.3.jar
+jackson-core-2.13.3.jar
+jackson-datatype-jsr310-2.13.3.jar
+jackson-databind-2.13.3.jar
+swagger-annotations-2.2.1.jar
jopt-simple-5.0.4.jar
log4j-slf4j-impl-2.17.2.jar
log4j-core-2.17.2.jar
diff --git
a/geode-server-all/src/integrationTest/resources/dependency_classpath.txt
b/geode-server-all/src/integrationTest/resources/dependency_classpath.txt
index 8c297a4216..132acb6271 100644
--- a/geode-server-all/src/integrationTest/resources/dependency_classpath.txt
+++ b/geode-server-all/src/integrationTest/resources/dependency_classpath.txt
@@ -17,7 +17,7 @@ javax.resource-api-1.7.1.jar
LatencyUtils-2.0.3.jar
jline-2.12.jar
jetty-servlet-9.4.47.v20220610.jar
-spring-core-5.3.20.jar
+spring-core-5.3.21.jar
jetty-util-ajax-9.4.47.v20220610.jar
geode-cq-0.0.0.jar
geode-old-client-support-0.0.0.jar
@@ -44,7 +44,7 @@ rmiio-2.1.2.jar
geode-tcp-server-0.0.0.jar
log4j-jcl-2.17.2.jar
geode-connectors-0.0.0.jar
-jackson-core-2.13.2.jar
+jackson-core-2.13.3.jar
jetty-util-9.4.47.v20220610.jar
log4j-slf4j-impl-2.17.2.jar
lucene-analyzers-common-6.6.6.jar
@@ -76,7 +76,7 @@ micrometer-core-1.9.1.jar
shiro-config-ogdl-1.13.0.jar
geode-log4j-0.0.0.jar
lucene-analyzers-phonetic-6.6.6.jar
-spring-context-5.3.20.jar
+spring-context-5.3.21.jar
jetty-security-9.4.47.v20220610.jar
geode-logging-0.0.0.jar
commons-io-2.11.0.jar
@@ -87,6 +87,6 @@ antlr-2.7.7.jar
jetty-xml-9.4.47.v20220610.jar
geode-rebalancer-0.0.0.jar
jetty-server-9.4.47.v20220610.jar
-jackson-datatype-jsr310-2.13.2.jar
-jackson-datatype-joda-2.13.2.jar
+jackson-datatype-jsr310-2.13.3.jar
+jackson-datatype-joda-2.13.3.jar
joda-time-2.10.14.jar
\ No newline at end of file
