Update version of Apache Tomcat dependency as per security scan

[ccsdk/parent.git] / dependencies-bom / pom.xml

diff --git a/dependencies-bom/pom.xml b/dependencies-bom/pom.xml
index a799da3..054f031 100644 (file)
--- a/dependencies-bom/pom.xml
+++ b/dependencies-bom/pom.xml
@@ -1,15 +1,22 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
-         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
-
-
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
     <modelVersion>4.0.0</modelVersion>
-    <packaging>pom</packaging>
+
     <groupId>org.onap.ccsdk.parent</groupId>
     <artifactId>dependencies-bom</artifactId>
-    <version>1.3.0-SNAPSHOT</version>
-
+    <version>1.5.0-SNAPSHOT</version>
+    <packaging>pom</packaging>
 
+    <distributionManagement>
+        <repository>
+            <id>ecomp-releases</id>
+            <url>https://nexus.onap.org/content/repositories/releases</url>
+        </repository>
+        <snapshotRepository>
+            <id>ecomp-snapshots</id>
+            <url>https://nexus.onap.org/content/repositories/snapshots</url>
+        </snapshotRepository>
+    </distributionManagement>
 
     <dependencyManagement>
         <dependencies>
@@ -37,7 +44,7 @@
             <dependency>
                 <groupId>com.fasterxml.jackson</groupId>
                 <artifactId>jackson-bom</artifactId>
-                <version>2.8.11.20181123</version>
+                <version>2.9.0</version>
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
@@ -121,17 +128,17 @@
             <dependency>
                 <groupId>org.apache.httpcomponents</groupId>
                 <artifactId>httpcore</artifactId>
-                <version>4.4.4</version>
+                <version>4.4.10</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.httpcomponents</groupId>
                 <artifactId>httpclient</artifactId>
-                <version>4.5.2</version>
+                <version>4.5.6</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.tomcat</groupId>
                 <artifactId>tomcat-jdbc</artifactId>
-                <version>8.5.14</version>
+                <version>9.0.27</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.velocity</groupId>
@@ -179,4 +186,4 @@
         </dependencies>
 
     </dependencyManagement>
-</project>
\ No newline at end of file
+</project>