Fix ves-openapi-manager vulnerabilities
- Update spring to version 2.7.2
- Update jackson-databind to version 2.13.3
Issue-ID: DCAEGEN2-3215
Signed-off-by: Tomasz Wrobel <tomasz.wrobel@nokia.com>
Change-Id: I3e48d930424712d17cec3d1a01b55c14dcf23deb
diff --git a/Changelog.md b/Changelog.md
index dfd7cc1..38f651f 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -4,6 +4,11 @@
The format is based on [Keep a Changelog](http://keepachangelog.com/)
and this project adheres to [Semantic Versioning](http://semver.org/).
+## [1.2.0] - 2022/08/19
+ - [DCAEGEN2-3215](https://jira.onap.org/browse/DCAEGEN2-3215)
+ - Update spring to version 2.7.2
+ - Update jackson-databind to version 2.13.3
+
## [1.1.0] - 2021/03/01
- [DCAEGEN2-3092](https://jira.onap.org/browse/DCAEGEN2-3092)
- Update spring to version 2.6.4
diff --git a/pom.xml b/pom.xml
index 9045204..dfe02ed 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1,4 +1,23 @@
<?xml version="1.0" encoding="UTF-8"?>
+<!--
+ ============LICENSE_START=======================================================
+ Copyright (C) 2021-2022 Nokia. All rights reserved.
+ ================================================================================
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+
+ SPDX-License-Identifier: Apache-2.0
+ ============LICENSE_END=========================================================
+-->
<project xmlns="http://maven.apache.org/POM/4.0.0"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
@@ -13,7 +32,7 @@
<groupId>org.onap.dcaegen2.platform.ves-openapi-manager</groupId>
<artifactId>ves-openapi-manager</artifactId>
- <version>1.1.0-SNAPSHOT</version>
+ <version>1.2.0-SNAPSHOT</version>
<packaging>jar</packaging>
<properties>
@@ -27,9 +46,9 @@
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
<hibernate-validator.version>6.1.6.Final</hibernate-validator.version>
- <jackson-databind.version>2.13.1</jackson-databind.version>
+ <jackson-databind.version>2.13.3</jackson-databind.version>
<mockito-core.version>2.22.0</mockito-core.version>
- <spring.version>2.6.4</spring.version>
+ <spring.version>2.7.2</spring.version>
<docker-maven-plugin.version>0.31.0</docker-maven-plugin.version>
<skipDockerPush>false</skipDockerPush>
<nexusproxy>https://nexus.onap.org</nexusproxy>
diff --git a/version.properties b/version.properties
index 7b8b963..00ef564 100644
--- a/version.properties
+++ b/version.properties
@@ -1,5 +1,5 @@
major=1
-minor=1
+minor=2
patch=0
base_version=${major}.${minor}.${patch}
release_version=${base_version}