bump swagger-ui version to resolve security issues

Signed-off-by: Thomas Jäckle <thomas.jaeckle@beyonnex.io>
eclipse-ditto · Oct 26, 2023 · ec02764 · ec02764
1 parent 38af233
commit ec02764
Show file tree

Hide file tree

Showing 7 changed files with 9 additions and 9 deletions.
diff --git a/deployment/docker/docker-compose.yml b/deployment/docker/docker-compose.yml
@@ -180,7 +180,7 @@ services:
     restart: always
 
   swagger-ui:
-    image: docker.io/swaggerapi/swagger-ui:v5.7.2
+    image: docker.io/swaggerapi/swagger-ui:v5.9.1
     mem_limit: 32m
     restart: always
     environment:

diff --git a/deployment/docker/sandbox/docker-compose.yml b/deployment/docker/sandbox/docker-compose.yml
@@ -159,7 +159,7 @@ services:
     restart: always
 
   swagger-ui:
-    image: docker.io/swaggerapi/swagger-ui:v5.7.2
+    image: docker.io/swaggerapi/swagger-ui:v5.9.1
     mem_limit: 32m
     cpu_shares: 50
     restart: always

diff --git a/deployment/helm/ditto/Chart.yaml b/deployment/helm/ditto/Chart.yaml
@@ -16,7 +16,7 @@ description: |
   A digital twin is a virtual, cloud based, representation of his real world counterpart
   (real world “Things”, e.g. devices like sensors, smart heating, connected cars, smart grids, EV charging stations etc).
 type: application
-version: 3.4.0  # chart version is effectively set by release-job
+version: 3.4.1  # chart version is effectively set by release-job
 appVersion: 3.4.0
 keywords:
   - iot-chart

diff --git a/deployment/helm/ditto/templates/swaggerui-deployment.yaml b/deployment/helm/ditto/templates/swaggerui-deployment.yaml
@@ -46,7 +46,7 @@ spec:
       {{- end }}
       initContainers:
         - name: {{ .Chart.Name }}-swaggerui-init
-          image: "docker.io/boky/alpine-bootstrap:latest"
+          image: "docker.io/curlimages/curl:8.3.0"
           imagePullPolicy: {{ .Values.swaggerui.image.pullPolicy }}
           command:
             - sh

diff --git a/deployment/helm/ditto/values.yaml b/deployment/helm/ditto/values.yaml
@@ -1691,7 +1691,7 @@ swaggerui:
     # repository for the swagger ui docker image
     repository: docker.io/swaggerapi/swagger-ui
     # tag for the swagger ui docker image
-    tag: v4.19.1
+    tag: v5.9.1
     # pullPolicy for the swagger ui docker image
     pullPolicy: IfNotPresent
   # extraEnv to add arbitrary environment variable to swagger ui container

diff --git a/deployment/kubernetes/deploymentFiles/swagger/swagger.yaml b/deployment/kubernetes/deploymentFiles/swagger/swagger.yaml
@@ -32,7 +32,7 @@ spec:
     spec:
       containers:
       - name: swagger-ui
-        image: docker.io/swaggerapi/swagger-ui:v5.7.2
+        image: docker.io/swaggerapi/swagger-ui:v5.9.1
         env:
         - name: QUERY_CONFIG_ENABLED
           value: "true"

diff --git a/documentation/src/main/resources/_layouts/swagger_layout.html b/documentation/src/main/resources/_layouts/swagger_layout.html
@@ -3,7 +3,7 @@
 <head>
     {% include head.html %}
 
-    <link rel="stylesheet" type="text/css" href="https://cdnjs.cloudflare.com/ajax/libs/swagger-ui/5.7.2/swagger-ui.css" >
+    <link rel="stylesheet" type="text/css" href="https://cdnjs.cloudflare.com/ajax/libs/swagger-ui/5.9.1/swagger-ui.css" >
     <link rel="stylesheet" type="text/css" href="css/swagger.css" >
     <style>
         html
@@ -34,8 +34,8 @@
     {% include footer.html %}
 </div>
 
-<script src="https://cdnjs.cloudflare.com/ajax/libs/swagger-ui/5.7.2/swagger-ui-bundle.js"> </script>
-<script src="https://cdnjs.cloudflare.com/ajax/libs/swagger-ui/5.7.2/swagger-ui-standalone-preset.js"> </script>
+<script src="https://cdnjs.cloudflare.com/ajax/libs/swagger-ui/5.9.1/swagger-ui-bundle.js"> </script>
+<script src="https://cdnjs.cloudflare.com/ajax/libs/swagger-ui/5.9.1/swagger-ui-standalone-preset.js"> </script>
 {{content}}
 
 </body>