Upgrade to springboot 2.1.0 to resolve NexusIQ 37/73037/1 casablanca 3.0.1-ONAP
authorSanchez, Gabriel (gs882h) <gabriel.sanchez@amdocs.com>
Mon, 19 Nov 2018 14:27:59 +0000 (14:27 +0000)
committerSanchez, Gabriel (gs882h) <gabriel.sanchez@amdocs.com>
Mon, 19 Nov 2018 14:27:59 +0000 (14:27 +0000)
Upgrade to springboot 2.1.0 to resolve NexusIQ
vulnerabilities (i.e. spring-web), a spike microservice
uses springboot Dependency Management in the pom
file to organisation its dependencies.

Issue-ID: AAI-1902

Change-Id: I8ef3348888b4b76f892ebdf77cf6c9f9dde73ff8
Signed-off-by: Sanchez, Gabriel (gs882h) <gabriel.sanchez@amdocs.com>
pom.xml

diff --git a/pom.xml b/pom.xml
index e41dce6..281c570 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -45,7 +45,7 @@
                 <!-- Import dependency management from Spring Boot -->
                 <groupId>org.springframework.boot</groupId>
                 <artifactId>spring-boot-dependencies</artifactId>
-                <version>2.0.3.RELEASE</version>
+                <version>2.1.0.RELEASE</version>
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>