diff --git a/dependency-suppressions.xml b/dependency-suppressions.xml index 0b7969ae..d9909b8d 100644 --- a/dependency-suppressions.xml +++ b/dependency-suppressions.xml @@ -27,4 +27,25 @@ ^pkg:maven/org\.yaml/snakeyaml@.*$ CVE-2022-1471 + + + ^pkg:maven/io\.opentelemetry\.instrumentation/opentelemetry\-grpc\-1\.6@.*$ + CVE-2023-33953 + + + + ^pkg:maven/io\.opentelemetry\.instrumentation/opentelemetry\-grpc\-1\.6@.*$ + CVE-2023-32732 + + + + ^pkg:maven/com\.ibm\.cloud/cloudant(-common)?@.*$ + CVE-2023-26268 + diff --git a/pom.xml b/pom.xml index fdfbd791..3764ba22 100644 --- a/pom.xml +++ b/pom.xml @@ -38,7 +38,7 @@ UTF-8 8 - 3.4.1 + 3.5.0 @@ -46,14 +46,14 @@ io.cucumber cucumber-bom - 7.11.2 + 7.13.0 pom import org.junit junit-bom - 5.9.2 + 5.10.0 pom import @@ -111,12 +111,12 @@ commons-codec commons-codec - 1.15 + 1.16.0 com.ibm.cloud cloudant - 0.5.0 + 0.5.4 @@ -126,7 +126,7 @@ maven-clean-plugin - 3.2.0 + 3.3.1 maven-site-plugin @@ -134,16 +134,16 @@ maven-project-info-reports-plugin - 3.4.1 + 3.4.5 maven-resources-plugin - 3.3.0 + 3.3.1 maven-compiler-plugin - 3.10.1 + 3.11.0 ${javaVersion} ${javaVersion} @@ -160,7 +160,7 @@ maven-surefire-plugin - 3.0.0-M7 + 3.1.2 **/scenario/** @@ -224,11 +224,34 @@ maven-install-plugin - 3.0.1 + 3.1.1 maven-deploy-plugin - 3.0.0 + 3.1.1 + + + org.apache.maven.plugins + maven-enforcer-plugin + 3.3.0 + + + enforce-version + + enforce + + + + + ${javaVersion} + + + 3.2.5 + + + + + @@ -265,7 +288,7 @@ org.apache.maven.plugins maven-source-plugin - 3.2.1 + 3.3.0 attach-sources @@ -306,7 +329,7 @@ org.apache.maven.plugins maven-checkstyle-plugin - 3.2.0 + 3.3.0 checkstyle.xml true @@ -318,7 +341,7 @@ com.puppycrawl.tools checkstyle - 10.9.3 + 10.12.2 @@ -341,7 +364,7 @@ org.owasp dependency-check-maven - 8.2.1 + 8.3.1 true true @@ -377,7 +400,7 @@ maven-assembly-plugin - 3.5.0 + 3.6.0 jar-with-dependencies @@ -395,7 +418,7 @@ org.apache.maven.plugins maven-gpg-plugin - 3.0.1 + 3.1.0 sign-artifacts