From bc52045b6793de94135c7185b69cd7bdd338e610 Mon Sep 17 00:00:00 2001
From: Jannik Hollenbach <Jannik.Hollenbach@iteratec.de>
Date: Fri, 18 Oct 2019 14:23:51 +0200
Subject: [PATCH 1/6] Update spring boot version

---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 541441bd..098808ef 100644
--- a/pom.xml
+++ b/pom.xml
@@ -60,7 +60,7 @@
         <camunda.spring.boot.starter.version>3.2.0</camunda.spring.boot.starter.version>
         <!-- END IMPORTANT -->
 
-        <spring-boot.version>2.1.8.RELEASE</spring-boot.version>
+        <spring-boot.version>2.2.0.RELEASE</spring-boot.version>
         <swagger-version>2.9.0</swagger-version>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     </properties>

From 3ad785c73b023de09bf806f82ec33bf828f7e621 Mon Sep 17 00:00:00 2001
From: Jannik Hollenbach <Jannik.Hollenbach@iteratec.de>
Date: Fri, 18 Oct 2019 14:24:11 +0200
Subject: [PATCH 2/6] Update s3 java client

---
 scb-persistenceproviders/s3-persistenceprovider/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scb-persistenceproviders/s3-persistenceprovider/pom.xml b/scb-persistenceproviders/s3-persistenceprovider/pom.xml
index b3a1182d..6fdfde42 100644
--- a/scb-persistenceproviders/s3-persistenceprovider/pom.xml
+++ b/scb-persistenceproviders/s3-persistenceprovider/pom.xml
@@ -39,7 +39,7 @@
         <dependency>
             <groupId>com.amazonaws</groupId>
             <artifactId>aws-java-sdk-s3</artifactId>
-            <version>1.11.453</version>
+            <version>1.11.653</version>
         </dependency>
         <dependency>
             <groupId>org.powermock</groupId>

From 0bc101d7fea69fd6ab7af43fadbd59d0f4a95c9e Mon Sep 17 00:00:00 2001
From: Jannik Hollenbach <Jannik.Hollenbach@iteratec.de>
Date: Fri, 18 Oct 2019 13:53:17 +0200
Subject: [PATCH 3/6] Update dependency check version

---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 098808ef..5e07f90b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -256,7 +256,7 @@
                     <plugin>
                         <groupId>org.owasp</groupId>
                         <artifactId>dependency-check-maven</artifactId>
-                        <version>3.3.1</version>
+                        <version>5.2.2</version>
                         <configuration>
                             <failBuildOnCVSS>8</failBuildOnCVSS>
                             <format>ALL</format>

From 489765bf55a12a6cec0c1e8315f54fe3c9d37aa6 Mon Sep 17 00:00:00 2001
From: Jannik Hollenbach <Jannik.Hollenbach@iteratec.de>
Date: Fri, 18 Oct 2019 14:41:13 +0200
Subject: [PATCH 4/6] Update spring boot starter

---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 5e07f90b..61a11d3e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -57,7 +57,7 @@
             please see org.camunda.bpm.springboot.project:camunda-bpm-spring-boot-starter-root
          -->
         <camunda.version>7.10.0</camunda.version>
-        <camunda.spring.boot.starter.version>3.2.0</camunda.spring.boot.starter.version>
+        <camunda.spring.boot.starter.version>3.2.7</camunda.spring.boot.starter.version>
         <!-- END IMPORTANT -->
 
         <spring-boot.version>2.2.0.RELEASE</spring-boot.version>

From 5674f919c8f11d29cf50d9aa93cb34703da1b073 Mon Sep 17 00:00:00 2001
From: Jannik Hollenbach <Jannik.Hollenbach@iteratec.de>
Date: Fri, 18 Oct 2019 15:13:17 +0200
Subject: [PATCH 5/6] Add dependency check suppression

---
 dependency-check-suppression.xml | 17 ++++++++++++++++-
 1 file changed, 16 insertions(+), 1 deletion(-)

diff --git a/dependency-check-suppression.xml b/dependency-check-suppression.xml
index 55143e31..b4f1abf0 100644
--- a/dependency-check-suppression.xml
+++ b/dependency-check-suppression.xml
@@ -21,7 +21,7 @@
 <!--
     This file is used to suppress false positives in the dependency check
 -->
-<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.1.xsd">
+<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
 
     <!--
         The issue CVE-2008-0732 seems to only affect SUSE LINUX init scripts. We are not using them.
@@ -45,5 +45,20 @@
         <cve>CVE-2019-0232</cve>
     </suppress>
 
+    <suppress until="2020-01-01Z">
+        <!--
+        Introduced through: spring-security-core-5.2.0.RELEASE.jar
+        -->
+        <cve>CVE-2018-1258</cve>
+
+        <!--
+        Not fixable until camunda-spin updates its jackson dependency
+        Introduced through: camunda-spin-dataformat-all-1.6.3.jar/META-INF/maven/com.fasterxml.jackson.core/jackson-databind/pom.xml
+        -->
+        <cve>CVE-2019-14379</cve>
+        <cve>CVE-2018-19362</cve>
+        <cve>CVE-2018-19361</cve>
+        <cve>CVE-2018-19360</cve>
+    </suppress>
 
 </suppressions>

From f02397f72632878cd061878c6229446fa7e7429c Mon Sep 17 00:00:00 2001
From: Jannik Hollenbach <Jannik.Hollenbach@iteratec.de>
Date: Fri, 18 Oct 2019 15:24:37 +0200
Subject: [PATCH 6/6] Pin travis java version to java 8

---
 .travis.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.travis.yml b/.travis.yml
index 5c32d3c6..7792b772 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -1,5 +1,7 @@
 sudo: true
 language: java
+jdk:
+  - openjdk8
 services:
 - docker
 cache: