Update dependencies

groovy · Jun 5, 2024 · 398420b · 398420b
1 parent 4a186f6
commit 398420b
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 21 deletions.
diff --git a/pom.xml b/pom.xml
@@ -57,25 +57,13 @@
     <dependency>
       <groupId>org.apache.maven.plugin-tools</groupId>
       <artifactId>maven-plugin-annotations</artifactId>
-      <version>3.10.2</version>
+      <version>3.13.1</version>
       <scope>provided</scope>
     </dependency>
     <dependency>
       <groupId>org.apache.maven</groupId>
       <artifactId>maven-archiver</artifactId>
-      <version>3.6.0</version>
-    </dependency>
-    <dependency>
-      <!-- fix CVE-2023-37460 from org.apache.maven:maven-archiver -->
-      <groupId>org.codehaus.plexus</groupId>
-      <artifactId>plexus-archiver</artifactId>
-      <version>4.8.0</version>
-    </dependency>
-    <dependency>
-      <!-- fix CVE-2023-42503 from org.codehaus.plexus:plexus-archiver -->
-      <groupId>org.apache.commons</groupId>
-      <artifactId>commons-compress</artifactId>
-      <version>1.26.0</version>
+      <version>3.6.2</version>
     </dependency>
     <dependency>
       <groupId>org.apache.maven.shared</groupId>
@@ -86,14 +74,14 @@
       <!-- fix CVE-2022-4244 and CVE-2022-4245 from org.apache.maven:maven-artifact -->
       <groupId>org.codehaus.plexus</groupId>
       <artifactId>plexus-utils</artifactId>
-      <version>3.5.1</version>
+      <version>4.0.1</version>
       <scope>runtime</scope>
     </dependency>
     <dependency>
       <!-- fix CVE-2018-10237, CVE-2020-8908, and CVE-2023-2976 from org.apache.maven:maven-core -->
       <groupId>com.google.guava</groupId>
       <artifactId>guava</artifactId>
-      <version>32.1.3-jre</version>
+      <version>33.2.1-jre</version>
       <scope>runtime</scope>
     </dependency>
     <!-- main groovy support -->
@@ -119,7 +107,7 @@
       <!-- this is to support use of Groovysh (Groovy jars don't include) -->
       <groupId>org.fusesource.jansi</groupId>
       <artifactId>jansi</artifactId>
-      <version>2.4.0</version>
+      <version>2.4.1</version>
       <scope>runtime</scope>
     </dependency>
     <dependency>
@@ -154,13 +142,13 @@
     <dependency>
       <groupId>org.mockito</groupId>
       <artifactId>mockito-core</artifactId>
-      <version>5.3.1</version>
+      <version>5.12.0</version>
       <scope>test</scope>
     </dependency>
     <dependency>
       <groupId>org.slf4j</groupId>
       <artifactId>slf4j-simple</artifactId>
-      <version>2.0.7</version>
+      <version>2.0.13</version>
       <scope>test</scope>
     </dependency>
   </dependencies>

diff --git a/src/it/pom.xml b/src/it/pom.xml
@@ -11,9 +11,9 @@
 
   <properties>
     <project.build.sourceEncoding>@project.build.sourceEncoding@</project.build.sourceEncoding>
-    <commonsLang3Version>3.12.0</commonsLang3Version>
+    <commonsLang3Version>3.14.0</commonsLang3Version>
     <mavenVersion>3.9.7</mavenVersion>
-    <junit5Version>5.9.3</junit5Version>
+    <junit5Version>5.10.2</junit5Version>
   </properties>
 
   <dependencyManagement>