From 13efe4bada60e7bc5e30a1c7888d713f0366fc05 Mon Sep 17 00:00:00 2001
From: Nico Athanassiadis <nico@dsv.su.se>
Date: Thu, 23 Jan 2025 20:50:18 +0100
Subject: [PATCH] Updated Spring Boot and Springdoc versions (#91)
The updated versions should fix CVE-2024-45801.
Was forced to update spring-boot 3.4.1 to be able to use the latest version of springdoc as per the
springdoc compability matrix.
The compability matrix can be found [here](https://springdoc.org/#what-is-the-compatibility-matrix-of-springdoc-openapi-with-spring-boot)
fixes issue #80
Reviewed-on: https://gitea.dsv.su.se/DMC/scipro/pulls/91
Reviewed-by: Andreas Svanberg <andreass@dsv.su.se>
Co-authored-by: Nico Athanassiadis <nico@dsv.su.se>
Co-committed-by: Nico Athanassiadis <nico@dsv.su.se>
---
pom.xml | 6 ++++--
1 file changed, 4 insertions(+), 2 deletions(-)
diff --git a/pom.xml b/pom.xml
index a4b4f57961..3e5972cbae 100755
--- a/pom.xml
+++ b/pom.xml
@@ -39,6 +39,8 @@
<jersey.version>3.1.6</jersey.version>
<poi.version>5.2.5</poi.version>
<jackson.version>2.17.0</jackson.version>
+ <spring.boot.version>3.4.1</spring.boot.version>
+ <springdoc.openapi.version>2.8.3</springdoc.openapi.version>
<!-- Database stuff -->
<database.showSql>false</database.showSql>
@@ -100,7 +102,7 @@
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-dependencies</artifactId>
- <version>3.2.12</version>
+ <version>${spring.boot.version}</version>
<scope>import</scope>
<type>pom</type>
</dependency>
@@ -261,7 +263,7 @@
<dependency>
<groupId>org.springdoc</groupId>
<artifactId>springdoc-openapi-starter-webmvc-ui</artifactId>
- <version>2.5.0</version>
+ <version>${springdoc.openapi.version}</version>
</dependency>
</dependencies>
</dependencyManagement>