From 9980653129155973f31e599d7789aae9c65828c9 Mon Sep 17 00:00:00 2001
From: GuangrongFu <fu.guangrong@zte.com.cn>
Date: Wed, 2 Mar 2022 15:56:13 +0800
Subject: [PATCH] security - update some dependencies

Issue-ID: HOLMES-510
Signed-off-by: GuangrongFu <fu.guangrong@zte.com.cn>
Change-Id: I2559c3185462d89c8d19fead3683550f51ca3e47
---
 holmes-actions/pom.xml |  9 +++++++++
 pom.xml                | 21 +++++++++++++++++++--
 2 files changed, 28 insertions(+), 2 deletions(-)

diff --git a/holmes-actions/pom.xml b/holmes-actions/pom.xml
index c553b53..b44e021 100644
--- a/holmes-actions/pom.xml
+++ b/holmes-actions/pom.xml
@@ -81,8 +81,17 @@
                     <groupId>org.yaml</groupId>
                     <artifactId>snakeyaml</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>com.fasterxml.jackson.core</groupId>
+                    <artifactId>jackson-databind</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
+        <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-databind</artifactId>
+            <version>2.13.0</version>
+        </dependency>
         <dependency>
             <groupId>org.projectlombok</groupId>
             <artifactId>lombok</artifactId>
diff --git a/pom.xml b/pom.xml
index c7aa53c..35f7954 100644
--- a/pom.xml
+++ b/pom.xml
@@ -39,11 +39,12 @@
         <powermock.version>2.0.7</powermock.version>
 
         <dropwizard.version>2.0.9</dropwizard.version>
-        <swagger.version>1.6.1</swagger.version>
+        <swagger.version>1.6.4</swagger.version>
         <lombok.version>1.18.4</lombok.version>
-        <jersey.version>2.34</jersey.version>
+        <jersey.version>2.31</jersey.version>
         <slf4j.version>1.7.25</slf4j.version>
         <jacoco.version>0.8.5</jacoco.version>
+        <jackson.version>2.13.0</jackson.version>
         <sonar.coverage.jacoco.xmlReportPaths>
             ${project.reporting.outputDirectory}/jacoco-ut/jacoco.xml
         </sonar.coverage.jacoco.xmlReportPaths>
@@ -103,6 +104,22 @@
                 <groupId>io.swagger</groupId>
                 <artifactId>swagger-jersey2-jaxrs</artifactId>
                 <version>${swagger.version}</version>
+                <exclusions>
+                    <exclusion>
+                        <groupId>com.fasterxml.jackson.core</groupId>
+                        <artifactId>jackson-databind</artifactId>
+                    </exclusion>
+                </exclusions>
+            </dependency>
+            <dependency>
+                <groupId>com.fasterxml.jackson.core</groupId>
+                <artifactId>jackson-databind</artifactId>
+                <version>${jackson.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>com.fasterxml.jackson.core</groupId>
+                <artifactId>jackson-core</artifactId>
+                <version>${jackson.version}</version>
             </dependency>
             <dependency>
                 <groupId>org.projectlombok</groupId>
-- 
2.16.6