Update Spring Boot to 2.7.2 (#6)

* Update Spring Boot to 2.7.2 Update Spring Cloud Dependencies to 2021.0.3 Update Shedlock to 4.39.0 Update Liquibase to 4.14.0 Update AWS SDK to 1.12.272 Update SAP SDK to 3.73.0 * Update suppressions.xml * Update suppressions.xml
corona-warn-app · Aug 1, 2022 · 56fb83b · 56fb83b
1 parent 485ab1d
commit 56fb83b
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 14 deletions.
diff --git a/owasp/suppressions.xml b/owasp/suppressions.xml
@@ -18,5 +18,16 @@
         <notes>CVE is matching for Spring Framework up to 5.3.20, but we have 5.3.21</notes>
         <cve>CVE-2016-1000027</cve>
     </suppress>
+
+    <suppress>
+        <notes>False Positive matches</notes>
+        <cve>CVE-2022-31514</cve>
+        <cve>CVE-2022-2393</cve>
+    </suppress>
+
+    <suppress>
+        <notes>Keycloak Update is currentlyn not possible</notes>
+        <cve>CVE-2022-1245</cve>
+    </suppress>
 
-</suppressions>
+</suppressions>
diff --git a/pom.xml b/pom.xml
@@ -59,27 +59,21 @@
             <dependency>
                 <groupId>org.springframework.boot</groupId>
                 <artifactId>spring-boot-dependencies</artifactId>
-                <version>2.7.1</version>
+                <version>2.7.2</version>
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
             <dependency>
                 <groupId>org.springframework.cloud</groupId>
                 <artifactId>spring-cloud-dependencies</artifactId>
-                <version>2021.0.1</version>
+                <version>2021.0.3</version>
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
             <dependency>
                 <groupId>org.springframework.cloud</groupId>
                 <artifactId>spring-cloud-starter-openfeign</artifactId>
                 <version>3.1.3</version>
-                <exclusions>
-                    <exclusion>
-                        <groupId>commons-io</groupId>
-                        <artifactId>commons-io</artifactId>
-                    </exclusion>
-                </exclusions>
             </dependency>
             <dependency>
                 <groupId>org.springdoc</groupId>
@@ -105,7 +99,7 @@
             <dependency>
                 <groupId>net.javacrumbs.shedlock</groupId>
                 <artifactId>shedlock-provider-jdbc-template</artifactId>
-                <version>4.37.0</version>
+                <version>4.39.0</version>
             </dependency>
 
             <!-- Commons IO -->
@@ -150,7 +144,7 @@
             <dependency>
                 <groupId>org.liquibase</groupId>
                 <artifactId>liquibase-core</artifactId>
-                <version>4.12.0</version>
+                <version>4.14.0</version>
             </dependency>
             <dependency>
                 <groupId>com.h2database</groupId>
@@ -239,7 +233,7 @@
             <dependency>
                 <groupId>com.amazonaws</groupId>
                 <artifactId>aws-java-sdk-s3</artifactId>
-                <version>1.12.250</version>
+                <version>1.12.272</version>
             </dependency>
 
             <!-- SAP Cloud Foundry -->
@@ -251,7 +245,7 @@
             <dependency>
                 <groupId>com.sap.cloud.sdk.cloudplatform</groupId>
                 <artifactId>scp-cf</artifactId>
-                <version>3.70.0</version>
+                <version>3.73.0</version>
             </dependency>
             <dependency>
                 <groupId>com.sap.hcp.cf.logging</groupId>
@@ -274,7 +268,7 @@
                 <plugin>
                     <groupId>org.springframework.boot</groupId>
                     <artifactId>spring-boot-maven-plugin</artifactId>
-                    <version>2.7.1</version>
+                    <version>2.7.2</version>
                     <executions>
                         <execution>
                             <goals>