From: egernug <gerard.nugent@est.tech>
Date: Fri, 20 Jun 2025 11:31:58 +0000 (+0100)
Subject: Fix vulnerabilities
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;h=refs%2Fchanges%2F47%2F141347%2F1;p=cps.git

Fix vulnerabilities

-Upgraded postgres to 42.7.7
-Upgraded springboot to 3.4.7
-Upgraded httpclient to 5.4.4

Issue-ID: CPS-89

Change-Id: I26c967eb305335fe7c36924122c28369d786503f
Signed-off-by: egernug <gerard.nugent@est.tech>
---

diff --git a/cps-dependencies/pom.xml b/cps-dependencies/pom.xml
index 9ac4728305..4839b0b2cb 100644
--- a/cps-dependencies/pom.xml
+++ b/cps-dependencies/pom.xml
@@ -86,14 +86,14 @@
             <dependency>
                 <groupId>org.springframework.boot</groupId>
                 <artifactId>spring-boot-dependencies</artifactId>
-                <version>3.4.4</version>
+                <version>3.4.7</version>
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
             <dependency>
                 <groupId>org.springframework.boot</groupId>
                 <artifactId>spring-boot-starter-cache</artifactId>
-                <version>3.4.4</version>
+                <version>3.4.7</version>
             </dependency>
             <dependency>
                 <groupId>org.springframework.cloud</groupId>
diff --git a/cps-ncmp-service/pom.xml b/cps-ncmp-service/pom.xml
index 2f8bdcbea2..1e415c06b6 100644
--- a/cps-ncmp-service/pom.xml
+++ b/cps-ncmp-service/pom.xml
@@ -60,6 +60,7 @@
         <dependency>
             <groupId>org.apache.httpcomponents.client5</groupId>
             <artifactId>httpclient5</artifactId>
+            <version>5.4.4</version>
         </dependency>
         <dependency>
             <groupId>${project.groupId}</groupId>
diff --git a/cps-parent/pom.xml b/cps-parent/pom.xml
index 3b14ce7948..e741b04e87 100644
--- a/cps-parent/pom.xml
+++ b/cps-parent/pom.xml
@@ -55,7 +55,7 @@
         <maven.resources.plugin.version>3.3.1</maven.resources.plugin.version>
         <maven.site.plugin.version>4.0.0-M13</maven.site.plugin.version>
         <maven.surefire.plugin.version>3.3.1</maven.surefire.plugin.version>
-        <postgres.version>42.5.5</postgres.version>
+        <postgres.version>42.7.7</postgres.version>
         <slf4j.simple.version>2.0.6</slf4j.simple.version>
         <sonar.version>4.0.0.4121</sonar.version>
         <spotbugs.plugin.version>4.8.6.4</spotbugs.plugin.version>