Bump guava from 30.1.1-jre to 31.0.1-jre in /api-tests (#191)

* Bump guava from 30.1.1-jre to 31.0.1-jre in /api-tests Bumps [guava](https://github.com/google/guava) from 30.1.1-jre to 31.0.1-jre. - [Release notes](https://github.com/google/guava/releases) - [Commits](https://github.com/google/guava/commits) --- updated-dependencies: - dependency-name: com.google.guava:guava dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> * fix: update versions following dependabot recommendations * fix: bump logback version Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: guillermo <[email protected]> Co-authored-by: GuillermoGT <[email protected]>
Ensono · Dec 16, 2021 · 4920a7a · 4920a7a
1 parent 7b0dea0
commit 4920a7a
Show file tree

Hide file tree

Showing 3 changed files with 26 additions and 11 deletions.
diff --git a/api-tests-karate/pom.xml b/api-tests-karate/pom.xml
@@ -17,8 +17,8 @@
         <maven-checkstyle-plugin.version>3.1.2</maven-checkstyle-plugin.version>
         <maven-surefire-plugin.version>2.22.2</maven-surefire-plugin.version>
         <puppycrawl-tools-checkstyle.version>8.44</puppycrawl-tools-checkstyle.version>
-        <spotbugs-maven-plugin.version>4.2.3</spotbugs-maven-plugin.version>
-        <spotbugs.version>4.2.3</spotbugs.version>
+        <spotbugs-maven-plugin.version>4.5.0.0</spotbugs-maven-plugin.version>
+        <spotbugs.version>4.5.2</spotbugs.version>
         <exec-maven-plugin.version>3.0.0</exec-maven-plugin.version>
     </properties>
 

diff --git a/api-tests/pom.xml b/api-tests/pom.xml
@@ -15,7 +15,7 @@
         <serenity.maven.version>3.1.10</serenity.maven.version>
         <serenity.cucumber.version>2.6.0</serenity.cucumber.version>
         <cucumber.version>6.10.4</cucumber.version>
-        <logback.version>1.2.7</logback.version>
+        <logback.version>1.2.8</logback.version>
         <encoding>UTF-8</encoding>
         <parallel.tests>4</parallel.tests>
         <webdriver.base.url/>
@@ -28,27 +28,28 @@
         <pact.jvm.consumer.junit.version>4.0.10</pact.jvm.consumer.junit.version>
         <pact.jvm.consumer.version>4.0.10</pact.jvm.consumer.version>
         <pact.jvm.provider.junit.version>4.0.10</pact.jvm.provider.junit.version>
-        <spotbugs.version>4.2.3</spotbugs.version>
+        <spotbugs.version>4.5.0</spotbugs.version>
         <puppycrawl-tools-checkstyle.version>9.2</puppycrawl-tools-checkstyle.version>
         <junit.version>4.13.2</junit.version>
-        <assertj.core.version>3.20.2</assertj.core.version>
+        <assertj.core.version>3.21.0</assertj.core.version>
         <hamcrest.all.version>1.3</hamcrest.all.version>
-        <byte.buddy.version>1.11.5</byte.buddy.version>
+        <byte.buddy.version>1.12.4</byte.buddy.version>
         <springfox.swagger2.version>3.0.0</springfox.swagger2.version>
         <springfox.swagger-ui.version>3.0.0</springfox.swagger-ui.version>
         <netty.codec.http.version>4.1.72.Final</netty.codec.http.version>
         <netty.codec.http2.version>4.1.72.Final</netty.codec.http2.version>
         <netty.transport.native.epoll.version>4.1.72.Final</netty.transport.native.epoll.version>
         <json.version>20211205</json.version>
-        <guava.version>30.1.1-jre</guava.version>
+        <guava.version>31.0.1-jre</guava.version>
         <httpclient.version>4.5.13</httpclient.version>
         <xerces.version>2.12.1</xerces.version>
         <commons.codec.version>1.15</commons.codec.version>
         <spring.web.version>5.3.8</spring.web.version>
+        <com.google.code.gson-version>2.8.9</com.google.code.gson-version>
 
         <!-- Maven plugins -->
-        <spotbugs-maven-plugin.version>4.2.3</spotbugs-maven-plugin.version>
-        <owasp-dependency-check-plugin.version>6.2.2</owasp-dependency-check-plugin.version>
+        <spotbugs-maven-plugin.version>4.5.0.0</spotbugs-maven-plugin.version>
+        <owasp-dependency-check-plugin.version>6.5.0</owasp-dependency-check-plugin.version>
         <fmt-maven-plugin.version>2.13</fmt-maven-plugin.version>
         <maven-checkstyle-plugin.version>3.1.2</maven-checkstyle-plugin.version>
         <maven-surefire-plugin.version>3.0.0-M5</maven-surefire-plugin.version>
@@ -61,6 +62,12 @@
     </properties>
 
     <dependencies>
+        <!-- https://security.snyk.io/vuln/SNYK-JAVA-COMGOOGLECODEGSON-1730327 -->
+        <dependency>
+            <groupId>com.google.code.gson</groupId>
+            <artifactId>gson</artifactId>
+            <version>${com.google.code.gson-version}</version>
+        </dependency>
         <dependency>
             <groupId>ch.qos.logback</groupId>
             <artifactId>logback-classic</artifactId>

diff --git a/java/pom.xml b/java/pom.xml
@@ -51,12 +51,13 @@
         <netty.codec.http2.version>4.1.72.Final</netty.codec.http2.version>
         <netty.transport.native.epoll.version>4.1.72.Final</netty.transport.native.epoll.version>
         <log4j-version>2.16.0</log4j-version>
-        <logback.version>1.2.7</logback.version>
+        <logback.version>1.2.8</logback.version>
+        <com.google.code.gson-version>2.8.9</com.google.code.gson-version>
 
         <fmt-maven-plugin.version>2.13</fmt-maven-plugin.version>
         <maven-checkstyle-plugin.version>3.1.2</maven-checkstyle-plugin.version>
         <puppycrawl-tools-checkstyle.version>9.2</puppycrawl-tools-checkstyle.version>
-        <spotbugs-maven-plugin.version>4.2.3</spotbugs-maven-plugin.version>
+        <spotbugs-maven-plugin.version>4.5.0.0</spotbugs-maven-plugin.version>
         <spotbugs.version>4.5.2</spotbugs.version>
         <exec-maven-plugin.version>3.0.0</exec-maven-plugin.version>
 
@@ -83,6 +84,13 @@
 
     <dependencies>
 
+        <!-- https://security.snyk.io/vuln/SNYK-JAVA-COMGOOGLECODEGSON-1730327 -->
+        <dependency>
+            <groupId>com.google.code.gson</groupId>
+            <artifactId>gson</artifactId>
+            <version>${com.google.code.gson-version}</version>
+        </dependency>
+
         <!-- NETTY dependencies -->
         <dependency>
             <groupId>io.netty</groupId>