From 1397e2fb972a948f04efcbca62aab1dca8d0f174 Mon Sep 17 00:00:00 2001
From: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
Date: Wed, 9 Jul 2025 14:20:29 +0200
Subject: [PATCH] Update vulnerable dependencies

- update commons-io (2.8.0 -> 2.19.0)
- update h2 (2.1.214 -> 2.3.232)
- update swagger-jaxrs2 (2.1.7 -> 2.1.13)
- update swagger-parser (2.0.24 -> 2.0.33)
- update msb-java-sdk (1.1.1 -> 1.2.0)

Issue-ID: SO-4199
Change-Id: I63a00b83c0e1a29fc8a390ec6c710182af0a509a
Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
---
 bpmn/so-bpmn-infrastructure-common/pom.xml          | 2 +-
 graph-inventory/fluent-builder-maven-plugin/pom.xml | 2 +-
 pom.xml                                             | 6 +++---
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/bpmn/so-bpmn-infrastructure-common/pom.xml b/bpmn/so-bpmn-infrastructure-common/pom.xml
index 66a4c23432..fec5c1e699 100644
--- a/bpmn/so-bpmn-infrastructure-common/pom.xml
+++ b/bpmn/so-bpmn-infrastructure-common/pom.xml
@@ -199,7 +199,7 @@
     <dependency>
       <groupId>org.onap.msb.java-sdk</groupId>
       <artifactId>msb-java-sdk</artifactId>
-      <version>1.1.1</version>
+      <version>1.2.0</version>
       <exclusions>
         <exclusion>
           <groupId>com.eclipsesource.jaxrs</groupId>
diff --git a/graph-inventory/fluent-builder-maven-plugin/pom.xml b/graph-inventory/fluent-builder-maven-plugin/pom.xml
index 83a6e56bd6..9feca097d5 100644
--- a/graph-inventory/fluent-builder-maven-plugin/pom.xml
+++ b/graph-inventory/fluent-builder-maven-plugin/pom.xml
@@ -70,7 +70,7 @@
     <dependency>
       <groupId>io.swagger.parser.v3</groupId>
       <artifactId>swagger-parser</artifactId>
-      <version>2.0.24</version>
+      <version>2.0.33</version>
     </dependency>
     <dependency>
       <groupId>com.squareup</groupId>
diff --git a/pom.xml b/pom.xml
index 6b891041fc..40072a1030 100644
--- a/pom.xml
+++ b/pom.xml
@@ -939,7 +939,7 @@
       <dependency>
         <groupId>commons-io</groupId>
         <artifactId>commons-io</artifactId>
-        <version>2.8.0</version>
+        <version>2.19.0</version>
         <scope>compile</scope>
       </dependency>
       <dependency>
@@ -1102,7 +1102,7 @@
       <dependency>
         <groupId>com.h2database</groupId>
         <artifactId>h2</artifactId>
-        <version>2.1.214</version>
+        <version>2.3.232</version>
       </dependency>
       <dependency>
         <groupId>org.camunda.bpm</groupId>
@@ -1118,7 +1118,7 @@
       <dependency>
         <groupId>io.swagger.core.v3</groupId>
         <artifactId>swagger-jaxrs2</artifactId>
-        <version>2.1.7</version>
+        <version>2.1.13</version>
       </dependency>
       <dependency>
         <groupId>org.camunda.bpm</groupId>
-- 
2.16.6