Update dependencies

Updated commons-compress, log4j & jackson-databind to close some critical and high threats.
metafacture · Nov 26, 2021 · a81f2bf · a81f2bf · blackwinter · Nov 26, 2021
1 parent 88ca5fc
commit a81f2bf
Show file tree

Hide file tree

Showing 6 changed files with 7 additions and 7 deletions.
diff --git a/metafacture-biblio/build.gradle b/metafacture-biblio/build.gradle
@@ -27,7 +27,7 @@ dependencies {
     exclude group: 'xercesImpl', module: 'xercesImpl'
     exclude group: 'xml-apis', module: 'xml-apis'
   }
-  implementation 'log4j:log4j:1.2.12'
+  implementation 'org.apache.logging.log4j:log4j-core:2.14.1'
   testImplementation 'junit:junit:4.12'
   testImplementation 'org.mockito:mockito-core:2.5.5'
 }
diff --git a/metafacture-elasticsearch/build.gradle b/metafacture-elasticsearch/build.gradle
@@ -19,7 +19,7 @@ description = 'Modules for sending data to an Elasticsearch instance'
 
 dependencies {
   api project(':metafacture-framework')
-  implementation 'com.fasterxml.jackson.core:jackson-databind:2.8.5'
+  implementation 'com.fasterxml.jackson.core:jackson-databind:2.13.0'
   testImplementation 'junit:junit:4.12'
   testImplementation 'org.mockito:mockito-core:2.5.5'
 }
diff --git a/metafacture-html/build.gradle b/metafacture-html/build.gradle
@@ -21,7 +21,7 @@ dependencies {
   api project(':metafacture-framework')
   implementation project(':metafacture-commons')
   implementation 'org.slf4j:slf4j-api:1.7.21'
-  implementation 'org.apache.commons:commons-compress:1.12'
+  implementation 'org.apache.commons:commons-compress:1.21'
   implementation 'commons-io:commons-io:2.6'
   implementation 'org.jsoup:jsoup:1.12.1'
   testImplementation 'junit:junit:4.12'

diff --git a/metafacture-io/build.gradle b/metafacture-io/build.gradle
@@ -21,7 +21,7 @@ dependencies {
   api project(':metafacture-framework')
   implementation project(':metafacture-commons')
   implementation 'commons-io:commons-io:2.5'
-  implementation 'org.apache.commons:commons-compress:1.20'
+  implementation 'org.apache.commons:commons-compress:1.21'
   runtimeOnly 'org.tukaani:xz:1.6'
   testImplementation 'junit:junit:4.12'
   testImplementation 'org.mockito:mockito-core:2.5.5'

diff --git a/metafacture-json/build.gradle b/metafacture-json/build.gradle
@@ -19,8 +19,8 @@ description = 'Modules for processing JSON data in Metafacture'
 
 dependencies {
   api project(':metafacture-framework')
-  implementation 'com.fasterxml.jackson.core:jackson-core:2.8.5'
-  implementation 'com.fasterxml.jackson.core:jackson-databind:2.8.5'
+  implementation 'com.fasterxml.jackson.core:jackson-core:2.13.0'
+  implementation 'com.fasterxml.jackson.core:jackson-databind:2.13.0'
   implementation 'com.jayway.jsonpath:json-path:2.6.0'
   testImplementation 'junit:junit:4.12'
   testImplementation 'org.mockito:mockito-core:2.5.5'

diff --git a/metafacture-xml/build.gradle b/metafacture-xml/build.gradle
@@ -21,7 +21,7 @@ dependencies {
   api project(':metafacture-framework')
   implementation project(':metafacture-commons')
   implementation 'org.slf4j:slf4j-api:1.7.21'
-  implementation 'org.apache.commons:commons-compress:1.12'
+  implementation 'org.apache.commons:commons-compress:1.21'
   testImplementation 'junit:junit:4.12'
   testImplementation 'org.mockito:mockito-core:2.5.5'
   testRuntimeOnly 'org.slf4j:slf4j-simple:1.7.21'