Merge pull request #117 from CJSCommonPlatform/update-common-bom

Update common bom to 17.2.0

CHANGELOG.md

@@ -6,17 +6,18 @@ on [Keep a CHANGELOG](http://keepachangelog.com/). This project adheres to
 ## [Unreleased]
 ### Changed
 - Updated to Junit 5
+- Centralise all generic library dependencies and versions into maven-common-bom
+- Update to Junit5 and surefire, failsafe plugin versions
 ### Fixed
 - Fix Logging of missing event ranges to only log on debug
 - Limit logging of MissingEventRanges logged to sensible maximum number.
-- Update to Junit5 and surefire, failsafe plugin versions
 ### Added
 - New JNDI value `catchup.max.number.of.missing.event.ranges.to.log`
 ### Removed
 - Removed dependency on apache-drools as it's not used by any of the framework code
 ### Security
-- Update org.json to version 20230227 to fix **security vulnerability CVE-2022-45688**
-  Detail: https://nvd.nist.gov/vuln/detail/CVE-2022-45688
+- Update common-bom to fix various security vulnerabilities in org.json, plexus-codehaus, apache-tika and google-guava
+
 
 ## [17.0.0] - 2023-02-07
 ### Changed

pom.xml

@@ -34,9 +34,9 @@
         <wildfly.version>26.1.2.Final</wildfly.version>
         <wildfly.maven.plugin.version>4.1.1.Final</wildfly.maven.plugin.version>
 
-        <framework-libraries.version>17.2.0-M2</framework-libraries.version>
-        <framework.version>17.2.0-M2</framework.version>
-        <event-store.version>17.2.0-M2</event-store.version>
+        <framework-libraries.version>17.2.0</framework-libraries.version>
+        <framework.version>17.2.0</framework.version>
+        <event-store.version>17.2.0</event-store.version>
 
         <!-- TODO - move to common bom -->
         <weld-junit5.version>1.2.2.Final</weld-junit5.version>