fix synk failures

hypertrace · May 26, 2022 · f173f0c · f173f0c
1 parent f4faa93
commit f173f0c
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 7 deletions.
diff --git a/platform-metrics/build.gradle.kts b/platform-metrics/build.gradle.kts
@@ -11,19 +11,19 @@ tasks.test {
 
 dependencies {
   api("com.typesafe:config:1.4.1")
-  api("io.dropwizard.metrics:metrics-core:4.1.16")
+  api("io.dropwizard.metrics:metrics-core:4.2.9")
   api("io.micrometer:micrometer-core:1.5.3")
   api("javax.servlet:javax.servlet-api:3.1.0")
 
   implementation("io.micrometer:micrometer-registry-prometheus:1.7.5")
 
   implementation("io.github.mweirauch:micrometer-jvm-extras:0.2.0")
   implementation("org.slf4j:slf4j-api:1.7.30")
-  implementation("io.dropwizard.metrics:metrics-jvm:4.1.16")
+  implementation("io.dropwizard.metrics:metrics-jvm:4.2.9")
   implementation("io.prometheus:simpleclient_dropwizard:0.12.0")
   implementation("io.prometheus:simpleclient_servlet:0.12.0")
   implementation("io.prometheus:simpleclient_pushgateway:0.12.0")
-  implementation("org.eclipse.jetty:jetty-servlet:9.4.44.v20210927")
+  implementation("org.eclipse.jetty:jetty-servlet:9.4.46.v20220331")
   implementation ("com.google.guava:guava:30.1.1-jre")
 
   testImplementation("org.junit.jupiter:junit-jupiter:5.7.1")

diff --git a/platform-service-framework/build.gradle.kts b/platform-service-framework/build.gradle.kts
@@ -17,8 +17,8 @@ dependencies {
   api("com.typesafe:config:1.4.1")
 
   // Use for thread dump servlet
-  implementation("io.dropwizard.metrics:metrics-servlets:4.2.8")
-  implementation("org.eclipse.jetty:jetty-servlet:9.4.44.v20210927")
+  implementation("io.dropwizard.metrics:metrics-servlets:4.2.9")
+  implementation("org.eclipse.jetty:jetty-servlet:9.4.46.v20220331")
 
   // Use for metrics servlet
   implementation("io.prometheus:simpleclient_servlet:0.12.0")
@@ -30,11 +30,15 @@ dependencies {
     implementation("commons-codec:commons-codec:1.15") {
       because("version 1.12 has a vulnerability https://snyk.io/vuln/SNYK-JAVA-COMMONSCODEC-561518")
     }
+    implementation("com.fasterxml.jackson.core:jackson-databind:2.12.6.1") {
+      because("version 2.12.6 has vulnerability https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-2421244")
+    }
+
   }
 
   testImplementation("org.apache.logging.log4j:log4j-slf4j-impl:2.17.0")
   testImplementation("org.junit.jupiter:junit-jupiter:5.7.1")
   testImplementation("org.mockito:mockito-core:3.8.0")
-  testImplementation("org.eclipse.jetty:jetty-servlet:9.4.44.v20210927:tests")
-  testImplementation("org.eclipse.jetty:jetty-http:9.4.44.v20210927:tests")
+  testImplementation("org.eclipse.jetty:jetty-servlet:9.4.46.v20220331:tests")
+  testImplementation("org.eclipse.jetty:jetty-http:9.4.46.v20220331:tests")
 }