Skip to content

Commit 2bdb12c

Browse files
committed
NPFM-1026 Library upgrades to fix reported vulnerabilities
1 parent 6d79fca commit 2bdb12c

File tree

3 files changed

+7
-5
lines changed

3 files changed

+7
-5
lines changed

build.sbt

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ ThisBuild / homepage := Some(url("https://github.com/intenthq/action-processor-i
66
ThisBuild / developers := List(Developer("intenthq", "Intent HQ", null, url("https://www.intenthq.com/")))
77
ThisBuild / licenses := Seq(("MIT", url("http://opensource.org/licenses/MIT")))
88

9-
ThisBuild / scalaVersion := "2.13.7"
9+
ThisBuild / scalaVersion := "2.13.10"
1010
ThisBuild / semanticdbEnabled := true
1111
ThisBuild / semanticdbVersion := scalafixSemanticdb.revision
1212

@@ -33,11 +33,12 @@ lazy val root = (project in file("."))
3333
"org.tpolecat" %% "doobie-core" % "1.0.0-RC2",
3434
"org.tpolecat" %% "doobie-hikari" % "1.0.0-RC2",
3535
"org.tpolecat" %% "doobie-postgres" % "1.0.0-RC2",
36-
"org.postgresql" % "postgresql" % "42.4.1",
36+
"org.postgresql" % "postgresql" % "42.4.3", // CVE-2022-41946, CVE-2022-31197
3737
"com.google.code.gson" % "gson" % "2.8.9", // overriden because of a vulnerability
3838
"com.disneystreaming" %% "weaver-cats" % "0.7.7" % Test,
3939
"com.disneystreaming" %% "weaver-core" % "0.7.7" % Test,
40-
"org.tpolecat" %% "doobie-h2" % "1.0.0-RC1" % Test
40+
"org.tpolecat" %% "doobie-h2" % "1.0.0-RC1" % Test,
41+
"org.jetbrains.kotlin" % "kotlin-stdlib" % "1.6.0" // override to avoid CVE-2022-24329, CVE-2020-29582 vulnerabilities
4142
),
4243
/*
4344
https://github.com/sbt/sbt/issues/3249#issuecomment-534757714

project/build.properties

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
sbt.version=1.5.5
1+
sbt.version=1.8.2

project/plugins.sbt

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,4 +2,5 @@ addSbtPlugin("com.geirsson" % "sbt-ci-release" % "1.5.3")
22
addSbtPlugin("com.timushev.sbt" % "sbt-updates" % "0.5.1")
33
addSbtPlugin("io.github.davidgregory084" % "sbt-tpolecat" % "0.1.13")
44
addSbtPlugin("org.scalameta" % "sbt-scalafmt" % "2.4.2")
5-
addSbtPlugin("ch.epfl.scala" % "sbt-scalafix" % "0.9.32")
5+
addSbtPlugin("ch.epfl.scala" % "sbt-scalafix" % "0.10.4")
6+
addSbtPlugin("net.virtual-void" % "sbt-dependency-graph" % "0.10.0-RC1")

0 commit comments

Comments
 (0)