security - update some dependencies

Issue-ID: HOLMES-510
Signed-off-by: GuangrongFu <fu.guangrong@zte.com.cn>
Change-Id: I2559c3185462d89c8d19fead3683550f51ca3e47

diff --git a/holmes-actions/pom.xml b/holmes-actions/pom.xml
index c553b53..b44e021 100644 (file)
--- a/holmes-actions/pom.xml
+++ b/holmes-actions/pom.xml
@@ -81,8 +81,17 @@
                     <groupId>org.yaml</groupId>\r
                     <artifactId>snakeyaml</artifactId>\r
                 </exclusion>\r
+                <exclusion>\r
+                    <groupId>com.fasterxml.jackson.core</groupId>\r
+                    <artifactId>jackson-databind</artifactId>\r
+                </exclusion>\r
             </exclusions>\r
         </dependency>\r
+        <dependency>\r
+            <groupId>com.fasterxml.jackson.core</groupId>\r
+            <artifactId>jackson-databind</artifactId>\r
+            <version>2.13.0</version>\r
+        </dependency>\r
         <dependency>\r
             <groupId>org.projectlombok</groupId>\r
             <artifactId>lombok</artifactId>\r

diff --git a/pom.xml b/pom.xml
index c7aa53c..35f7954 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -39,11 +39,12 @@
         <powermock.version>2.0.7</powermock.version>\r
 \r
         <dropwizard.version>2.0.9</dropwizard.version>\r
-        <swagger.version>1.6.1</swagger.version>\r
+        <swagger.version>1.6.4</swagger.version>\r
         <lombok.version>1.18.4</lombok.version>\r
-        <jersey.version>2.34</jersey.version>\r
+        <jersey.version>2.31</jersey.version>\r
         <slf4j.version>1.7.25</slf4j.version>\r
         <jacoco.version>0.8.5</jacoco.version>\r
+        <jackson.version>2.13.0</jackson.version>\r
         <sonar.coverage.jacoco.xmlReportPaths>\r
             ${project.reporting.outputDirectory}/jacoco-ut/jacoco.xml\r
         </sonar.coverage.jacoco.xmlReportPaths>\r
@@ -103,6 +104,22 @@
                 <groupId>io.swagger</groupId>\r
                 <artifactId>swagger-jersey2-jaxrs</artifactId>\r
                 <version>${swagger.version}</version>\r
+                <exclusions>\r
+                    <exclusion>\r
+                        <groupId>com.fasterxml.jackson.core</groupId>\r
+                        <artifactId>jackson-databind</artifactId>\r
+                    </exclusion>\r
+                </exclusions>\r
+            </dependency>\r
+            <dependency>\r
+                <groupId>com.fasterxml.jackson.core</groupId>\r
+                <artifactId>jackson-databind</artifactId>\r
+                <version>${jackson.version}</version>\r
+            </dependency>\r
+            <dependency>\r
+                <groupId>com.fasterxml.jackson.core</groupId>\r
+                <artifactId>jackson-core</artifactId>\r
+                <version>${jackson.version}</version>\r
             </dependency>\r
             <dependency>\r
                 <groupId>org.projectlombok</groupId>\r