Update vulnerable dependencies

- update commons-io (2.8.0 -> 2.19.0)
- update h2 (2.1.214 -> 2.3.232)
- update swagger-jaxrs2 (2.1.7 -> 2.1.13)
- update swagger-parser (2.0.24 -> 2.0.33)
- update msb-java-sdk (1.1.1 -> 1.2.0)

Issue-ID: SO-4199
Change-Id: I63a00b83c0e1a29fc8a390ec6c710182af0a509a
Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>

diff --git a/bpmn/so-bpmn-infrastructure-common/pom.xml b/bpmn/so-bpmn-infrastructure-common/pom.xml
index 66a4c23..fec5c1e 100644 (file)
--- a/bpmn/so-bpmn-infrastructure-common/pom.xml
+++ b/bpmn/so-bpmn-infrastructure-common/pom.xml
@@ -199,7 +199,7 @@
     <dependency>
       <groupId>org.onap.msb.java-sdk</groupId>
       <artifactId>msb-java-sdk</artifactId>
-      <version>1.1.1</version>
+      <version>1.2.0</version>
       <exclusions>
         <exclusion>
           <groupId>com.eclipsesource.jaxrs</groupId>

diff --git a/graph-inventory/fluent-builder-maven-plugin/pom.xml b/graph-inventory/fluent-builder-maven-plugin/pom.xml
index 83a6e56..9feca09 100644 (file)
--- a/graph-inventory/fluent-builder-maven-plugin/pom.xml
+++ b/graph-inventory/fluent-builder-maven-plugin/pom.xml
@@ -70,7 +70,7 @@
     <dependency>
       <groupId>io.swagger.parser.v3</groupId>
       <artifactId>swagger-parser</artifactId>
-      <version>2.0.24</version>
+      <version>2.0.33</version>
     </dependency>
     <dependency>
       <groupId>com.squareup</groupId>

diff --git a/pom.xml b/pom.xml
index 6b89104..40072a1 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -939,7 +939,7 @@
       <dependency>
         <groupId>commons-io</groupId>
         <artifactId>commons-io</artifactId>
-        <version>2.8.0</version>
+        <version>2.19.0</version>
         <scope>compile</scope>
       </dependency>
       <dependency>
@@ -1102,7 +1102,7 @@
       <dependency>
         <groupId>com.h2database</groupId>
         <artifactId>h2</artifactId>
-        <version>2.1.214</version>
+        <version>2.3.232</version>
       </dependency>
       <dependency>
         <groupId>org.camunda.bpm</groupId>
@@ -1118,7 +1118,7 @@
       <dependency>
         <groupId>io.swagger.core.v3</groupId>
         <artifactId>swagger-jaxrs2</artifactId>
-        <version>2.1.7</version>
+        <version>2.1.13</version>
       </dependency>
       <dependency>
         <groupId>org.camunda.bpm</groupId>