From c08b3fac8f741be2e885304135eb0d76a738090a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 9 Sep 2024 00:36:16 +0000 Subject: [PATCH] fix: upgrade multiple dependencies with Snyk Snyk has created this PR to upgrade: - io.springfox:springfox-swagger-ui from 2.6.1 to 2.10.5. See this package in maven: https://mvnrepository.com/artifact/io.springfox/springfox-swagger-ui/ - io.springfox:springfox-swagger2 from 2.6.1 to 2.10.5. See this package in maven: https://mvnrepository.com/artifact/io.springfox/springfox-swagger2/ - mysql:mysql-connector-java from 5.1.43 to 5.1.49. See this package in maven: https://mvnrepository.com/artifact/mysql/mysql-connector-java/ - net.lingala.zip4j:zip4j from 1.3.2 to 1.3.3. See this package in maven: https://mvnrepository.com/artifact/net.lingala.zip4j/zip4j/ - org.projectlombok:lombok from 1.18.0 to 1.18.34. See this package in maven: https://mvnrepository.com/artifact/org.projectlombok/lombok/ - org.springframework.boot:spring-boot-devtools from 2.0.6.RELEASE to 2.7.18. See this package in maven: https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-devtools/ - org.springframework.boot:spring-boot-starter from 2.0.6.RELEASE to 2.7.18. See this package in maven: https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter/ - org.springframework.boot:spring-boot-starter-actuator from 2.0.6.RELEASE to 2.7.18. See this package in maven: https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-actuator/ - org.springframework.boot:spring-boot-starter-data-jpa from 2.0.6.RELEASE to 2.7.18. See this package in maven: https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-data-jpa/ - org.springframework.boot:spring-boot-starter-web from 2.0.6.RELEASE to 2.7.18. See this package in maven: https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-web/ - org.springframework.cloud:spring-cloud-starter-netflix-eureka-client from 2.0.1.RELEASE to 2.2.10.RELEASE. See this package in maven: https://mvnrepository.com/artifact/org.springframework.cloud/spring-cloud-starter-netflix-eureka-client/ - org.springframework.cloud:spring-cloud-starter-netflix-hystrix from 2.0.1.RELEASE to 2.2.10.RELEASE. See this package in maven: https://mvnrepository.com/artifact/org.springframework.cloud/spring-cloud-starter-netflix-hystrix/ - org.springframework.cloud:spring-cloud-starter-openfeign from 2.0.1.RELEASE to 2.2.10.RELEASE. See this package in maven: https://mvnrepository.com/artifact/org.springframework.cloud/spring-cloud-starter-openfeign/ - org.springframework.cloud:spring-cloud-starter-zipkin from 2.0.1.RELEASE to 2.2.8.RELEASE. See this package in maven: https://mvnrepository.com/artifact/org.springframework.cloud/spring-cloud-starter-zipkin/ See this project in Snyk: https://app.snyk.io/org/t438879/project/9e10e1aa-9230-4447-a18b-682be4a7844b?utm_source=github&utm_medium=referral&page=upgrade-pr --- mall-backend/backend-file/pom.xml | 2 +- pom.xml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/mall-backend/backend-file/pom.xml b/mall-backend/backend-file/pom.xml index 4a8cd5c2..2786077f 100644 --- a/mall-backend/backend-file/pom.xml +++ b/mall-backend/backend-file/pom.xml @@ -59,7 +59,7 @@ net.lingala.zip4j zip4j - 1.3.2 + 1.3.3 mysql diff --git a/pom.xml b/pom.xml index 9bb25cf9..8f5da3bc 100644 --- a/pom.xml +++ b/pom.xml @@ -28,10 +28,10 @@ Finchley.SR1 2.0.6.RELEASE - 1.18.0 + 1.18.34 5.1.43 3.12.0 - 2.9.2 + 2.10.5 1.0.28 1.2.31 1.1.0.Final