Update springboot to 2.7.11 (#764)

finos · May 4, 2023 · a7f1435 · a7f1435
1 parent 4a5a88f
commit a7f1435
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/allow-list.xml b/allow-list.xml
@@ -35,15 +35,15 @@
         Testing false positives by suppressing a CVE
         https://github.com/jeremylong/DependencyCheck/issues/4528 (Do not use deprecated method)
         ]]></notes>
-        <gav>org.springframework.security:spring-security-crypto:5.7.7</gav>
+        <gav>org.springframework.security:spring-security-crypto:5.7.8</gav>
         <cve>CVE-2020-5408</cve>
     </suppress>
     <suppress>
         <notes><![CDATA[
         Testing false positives by suppressing a CVE
         https://github.com/spring-projects/spring-framework/issues/24434 (Do not expose HttpInvoker)
         ]]></notes>
-        <gav>org.springframework:spring-web:5.3.26</gav>
+        <gav>org.springframework:spring-web:5.3.27</gav>
         <cve>CVE-2016-1000027</cve>
     </suppress>
     <suppress base="true">

diff --git a/symphony-bdk-bom/build.gradle b/symphony-bdk-bom/build.gradle
@@ -16,7 +16,7 @@ repositories {
 
 dependencies {
     // import Spring Boot's BOM
-    api platform('org.springframework.boot:spring-boot-dependencies:2.7.10')
+    api platform('org.springframework.boot:spring-boot-dependencies:2.7.11')
     // import Jackson's BOM
     api platform('com.fasterxml.jackson:jackson-bom:2.14.1')
     // define all our dependencies versions