From ef140509fcc5a9b49dce5185414ab7c95928129e Mon Sep 17 00:00:00 2001 From: allanmckenzie Date: Mon, 6 Nov 2023 10:25:11 +0000 Subject: [PATCH] Update common bom to 17.2.0 --- CHANGELOG.md | 7 ++++--- pom.xml | 6 +++--- 2 files changed, 7 insertions(+), 6 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index c0c40002..3a6085e1 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,17 +6,18 @@ on [Keep a CHANGELOG](http://keepachangelog.com/). This project adheres to ## [Unreleased] ### Changed - Updated to Junit 5 +- Centralise all generic library dependencies and versions into maven-common-bom +- Update to Junit5 and surefire, failsafe plugin versions ### Fixed - Fix Logging of missing event ranges to only log on debug - Limit logging of MissingEventRanges logged to sensible maximum number. -- Update to Junit5 and surefire, failsafe plugin versions ### Added - New JNDI value `catchup.max.number.of.missing.event.ranges.to.log` ### Removed - Removed dependency on apache-drools as it's not used by any of the framework code ### Security -- Update org.json to version 20230227 to fix **security vulnerability CVE-2022-45688** - Detail: https://nvd.nist.gov/vuln/detail/CVE-2022-45688 +- Update common-bom to fix various security vulnerabilities in org.json, plexus-codehaus, apache-tika and google-guava + ## [17.0.0] - 2023-02-07 ### Changed diff --git a/pom.xml b/pom.xml index fb1e8d1c..512b9bcf 100644 --- a/pom.xml +++ b/pom.xml @@ -34,9 +34,9 @@ 26.1.2.Final 4.1.1.Final - 17.2.0-M2 - 17.2.0-M2 - 17.2.0-M2 + 17.2.0 + 17.2.0 + 17.2.0 1.2.2.Final