From: adheli.tavares <adheli.tavares@est.tech>
Date: Wed, 24 Apr 2024 10:09:27 +0000 (+0100)
Subject: Fix security vulnerabilities.
X-Git-Tag: 4.1.2~2
X-Git-Url: https://gerrit.onap.org/r/gitweb?p=policy%2Fparent.git;a=commitdiff_plain;h=926cab5f4804e132c17e1274119838e5c95561f2

Fix security vulnerabilities.

Issue-ID: POLICY-4945
Change-Id: I42c628357b4e042c3f9f24ff6212debbbd3fe91b
Signed-off-by: adheli.tavares <adheli.tavares@est.tech>
---

diff --git a/integration/pom.xml b/integration/pom.xml
index 20ba7faf..cb2fd514 100644
--- a/integration/pom.xml
+++ b/integration/pom.xml
@@ -52,6 +52,7 @@
         <docker.push.registry>nexus3.onap.org:10003</docker.push.registry>
         <!-- Dependency Versions -->
         <version.beanutils>1.9.4</version.beanutils>
+        <version.bytebuddy>1.14.13</version.bytebuddy>
         <version.ccsdk>1.5.3</version.ccsdk>
         <version.cucumber>7.15.0</version.cucumber>
         <version.docker-java>3.3.2</version.docker-java>
@@ -179,6 +180,11 @@
                 <artifactId>simpleclient_logback</artifactId>
                 <version>${version.io.prometheus}</version>
             </dependency>
+            <dependency>
+                <groupId>io.prometheus</groupId>
+                <artifactId>simpleclient_httpserver</artifactId>
+                <version>${version.io.prometheus}</version>
+            </dependency>
             <dependency>
                 <groupId>com.google.re2j</groupId>
                 <artifactId>re2j</artifactId>
@@ -252,6 +258,11 @@
                 <artifactId>jakarta.persistence-api</artifactId>
                 <version>3.1.0</version>
             </dependency>
+            <dependency>
+                <groupId>jakarta.transaction</groupId>
+                <artifactId>jakarta.transaction-api</artifactId>
+                <version>2.0.1</version>
+            </dependency>
             <!-- Swagger -->
             <dependency>
                 <groupId>io.swagger.core.v3</groupId>
@@ -358,6 +369,11 @@
                 <artifactId>slf4j-ext</artifactId>
                 <version>${version.slf4j}</version>
             </dependency>
+            <dependency>
+                <groupId>org.slf4j</groupId>
+                <artifactId>jcl-over-slf4j</artifactId>
+                <version>${version.slf4j}</version>
+            </dependency>
             <dependency>
                 <groupId>ch.qos.logback</groupId>
                 <artifactId>logback-core</artifactId>
@@ -904,6 +920,11 @@
                 <artifactId>bcpkix-fips</artifactId>
                 <version>1.0.7</version>
             </dependency>
+            <dependency>
+                <groupId>io.micrometer</groupId>
+                <artifactId>micrometer-tracing-bridge-otel</artifactId>
+                <version>1.1.8</version>
+            </dependency>
             <dependency>
                 <groupId>io.opentelemetry.instrumentation</groupId>
                 <artifactId>opentelemetry-kafka-clients-2.6</artifactId>
@@ -919,11 +940,6 @@
                 <artifactId>opentelemetry-sdk-extension-autoconfigure</artifactId>
                 <version>${version.opentel}-alpha</version>
             </dependency>
-            <dependency>
-                <groupId>io.micrometer</groupId>
-                <artifactId>micrometer-tracing-bridge-otel</artifactId>
-                <version>1.1.8</version>
-            </dependency>
             <dependency>
                 <groupId>io.opentelemetry</groupId>
                 <artifactId>opentelemetry-sdk-extension-jaeger-remote-sampler</artifactId>
@@ -934,6 +950,11 @@
                 <artifactId>opentelemetry-context</artifactId>
                 <version>${version.opentel}</version>
             </dependency>
+            <dependency>
+                <groupId>io.opentelemetry</groupId>
+                <artifactId>opentelemetry-api</artifactId>
+                <version>${version.opentel}</version>
+            </dependency>
 
             <!-- Kotlin dependencies -->
             <dependency>
@@ -961,6 +982,34 @@
                 <artifactId>kotlin-stdlib-common</artifactId>
                 <version>${version.kotlin}</version>
             </dependency>
+
+            <!-- Transient dependencies -->
+            <dependency>
+                <groupId>com.squareup.okhttp3</groupId>
+                <artifactId>okhttp</artifactId>
+                <version>4.12.0</version>
+            </dependency>
+            <dependency>
+                <groupId>io.projectreactor</groupId>
+                <artifactId>reactor-core</artifactId>
+                <version>3.6.5</version>
+            </dependency>
+            <dependency>
+                <groupId>net.bytebuddy</groupId>
+                <artifactId>byte-buddy</artifactId>
+                <version>${version.bytebuddy}</version>
+            </dependency>
+            <dependency>
+                <groupId>net.bytebuddy</groupId>
+                <artifactId>byte-buddy-agent</artifactId>
+                <version>${version.bytebuddy}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.jboss.logging</groupId>
+                <artifactId>jboss-logging</artifactId>
+                <version>3.5.3.Final</version>
+                <scope>runtime</scope>
+            </dependency>
         </dependencies>
     </dependencyManagement>
     <scm>
@@ -1323,11 +1372,6 @@
                     <artifactId>maven-failsafe-plugin</artifactId>
                     <version>3.2.5</version>
                 </plugin>
-                <plugin>
-                    <groupId>org.sonarsource.scanner.maven</groupId>
-                    <artifactId>sonar-maven-plugin</artifactId>
-                    <version>${version.sonar}</version>
-                </plugin>
             </plugins>
         </pluginManagement>
         <plugins>