@@ -6,7 +6,7 @@ ThisBuild / homepage := Some(url("https://github.com/intenthq/action-processor-i
6
6
ThisBuild / developers := List (Developer (" intenthq" , " Intent HQ" , null , url(" https://www.intenthq.com/" )))
7
7
ThisBuild / licenses := Seq ((" MIT" , url(" http://opensource.org/licenses/MIT" )))
8
8
9
- ThisBuild / scalaVersion := " 2.13.7 "
9
+ ThisBuild / scalaVersion := " 2.13.10 "
10
10
ThisBuild / semanticdbEnabled := true
11
11
ThisBuild / semanticdbVersion := scalafixSemanticdb.revision
12
12
@@ -33,11 +33,12 @@ lazy val root = (project in file("."))
33
33
" org.tpolecat" %% " doobie-core" % " 1.0.0-RC2" ,
34
34
" org.tpolecat" %% " doobie-hikari" % " 1.0.0-RC2" ,
35
35
" org.tpolecat" %% " doobie-postgres" % " 1.0.0-RC2" ,
36
- " org.postgresql" % " postgresql" % " 42.4.1 " ,
36
+ " org.postgresql" % " postgresql" % " 42.4.3 " , // CVE-2022-41946, CVE-2022-31197
37
37
" com.google.code.gson" % " gson" % " 2.8.9" , // overriden because of a vulnerability
38
38
" com.disneystreaming" %% " weaver-cats" % " 0.7.7" % Test ,
39
39
" com.disneystreaming" %% " weaver-core" % " 0.7.7" % Test ,
40
- " org.tpolecat" %% " doobie-h2" % " 1.0.0-RC1" % Test
40
+ " org.tpolecat" %% " doobie-h2" % " 1.0.0-RC1" % Test ,
41
+ " org.jetbrains.kotlin" % " kotlin-stdlib" % " 1.6.0" // override to avoid CVE-2022-24329, CVE-2020-29582 vulnerabilities
41
42
),
42
43
/*
43
44
https://github.com/sbt/sbt/issues/3249#issuecomment-534757714
0 commit comments