From: wr148d <wr148d@att.com>
Date: Mon, 7 Mar 2022 14:49:28 +0000 (-0500)
Subject: [AAI] Update schema-service to fix security vulnerabilities
X-Git-Tag: 1.9.5~3
X-Git-Url: https://gerrit.onap.org/r/gitweb?p=aai%2Fschema-service.git;a=commitdiff_plain;h=18f4b071105ff353a2c180c311f1595c807db301

[AAI] Update schema-service to fix security vulnerabilities

Issue-ID: AAI-3414
Signed-off-by: wr148d <wr148d@att.com>
Change-Id: I1f820955dafb3a2961e9566ae0ae12a07e061ec2
---

diff --git a/aai-schema-gen/pom.xml b/aai-schema-gen/pom.xml
index 122abb0..358d1e6 100644
--- a/aai-schema-gen/pom.xml
+++ b/aai-schema-gen/pom.xml
@@ -654,7 +654,7 @@
         <dependency>
             <groupId>org.yaml</groupId>
             <artifactId>snakeyaml</artifactId>
-            <version>1.18</version>
+            <version>1.29</version>
             <scope>compile</scope>
         </dependency>
         <dependency>
diff --git a/aai-schema-service/pom.xml b/aai-schema-service/pom.xml
index 3c08ce3..ce62491 100644
--- a/aai-schema-service/pom.xml
+++ b/aai-schema-service/pom.xml
@@ -42,6 +42,8 @@
         <docker.push.registry>localhost:5000</docker.push.registry>
         <aai.docker.version>1.0.0</aai.docker.version>
 
+        <logback.version>1.2.7</logback.version>
+
         <!--
              Location where assembly of our scripts, resources and main jar will be held
 	         Check the ${project.artifactId}/src/main/assembly/descriptor.xml for more info
@@ -314,6 +316,7 @@
         <dependency>
             <groupId>ch.qos.logback</groupId>
             <artifactId>logback-core</artifactId>
+            <version>${logback.version}</version>
         </dependency>
         <dependency>
             <groupId>ch.qos.logback</groupId>