Merge pull request #59 from cloudevents/develop

Release 0.3.1 - CVE issues

CHANGELOG.md

@@ -6,7 +6,13 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 
 ## [Unreleased]
 
-TODO 
+TODO
+
+## [0.3.1]
+
+### Fixed
+
+- Vulnerable dependency `com.fasterxml.jackson.core:jackson-databind`
 
 ## [0.3.0]
 
@@ -50,5 +56,6 @@ abstract envelope signature
 - interface: `io.cloudevents.Extension` in favor of
 `io.cloudevents.extensions.ExtensionFormat`
 
-[Unreleased]: https://github.com/cloudevents/sdk-java/compare/v0.3.0...HEAD
+[Unreleased]: https://github.com/cloudevents/sdk-java/compare/v0.3.1...HEAD
+[0.3.1]: https://github.com/cloudevents/sdk-java/compare/v0.3.0...v0.3.1
 [0.3.0]: https://github.com/cloudevents/sdk-java/compare/v0.2.1...v0.3.0

README.md

@@ -11,7 +11,7 @@ __Checkout the [changelog](./CHANGELOG.md)__
 
 ## Motivation
 
-The [CloudEvents specification](https://github.com/cloudevents/spec) is a vendor-neutral specification for defining the format of event data that is being exchanged between different cloud systems. The specification basically defines an abstract envelope for any event data payload, without knowing specific implementation details of the actual underlying event. The current version of the spec is at `0.2` and it describes a simple event format, which was demonstrated at [KubeCon 2018](https://youtu.be/TZPPjAv12KU) using different _Serverless platforms_, such as [Apache Openwhisk](https://github.com/apache/incubator-openwhisk).
+The [CloudEvents specification](https://github.com/cloudevents/spec) is a vendor-neutral specification for defining the format of event data that is being exchanged between different cloud systems. The specification basically defines an abstract envelope for any event data payload, without knowing specific implementation details of the actual underlying event. The current version of the spec is at `0.3` and it describes a simple event format, which was demonstrated at [KubeCon 2018](https://youtu.be/TZPPjAv12KU) using different _Serverless platforms_, such as [Apache Openwhisk](https://github.com/apache/incubator-openwhisk).
 
 ## Java API
 
@@ -21,7 +21,7 @@ For Maven based projects, use the following to configure the CloudEvents Java SD
 <dependency>
     <groupId>io.cloudevents</groupId>
     <artifactId>cloudevents-api</artifactId>
-    <version>0.3.0</version>
+    <version>0.3.1</version>
 </dependency>
 ```
 

api/pom.xml

@@ -20,16 +20,21 @@
     <parent>
         <groupId>io.cloudevents</groupId>
         <artifactId>cloudevents-parent</artifactId>
-        <version>0.3.0</version>
+        <version>0.3.1</version>
     </parent>
 
     <groupId>io.cloudevents</groupId>
     <artifactId>cloudevents-api</artifactId>
     <name>CloudEvents - API</name>
-    <version>0.3.0</version>
+    <version>0.3.1</version>
     <packaging>jar</packaging>
 
     <dependencies>
+        <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-core</artifactId>
+            <version>${jackson.version}</version>
+        </dependency>
 
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
@@ -42,13 +47,13 @@
             <artifactId>jackson-datatype-jdk8</artifactId>
             <version>${jackson.version}</version>
         </dependency>
-        
+
         <dependency>
             <groupId>org.hibernate.validator</groupId>
             <artifactId>hibernate-validator</artifactId>
             <version>${hibernate-validator.version}</version>
         </dependency>
-        
+
         <dependency>
              <groupId>org.glassfish</groupId>
              <artifactId>javax.el</artifactId>
@@ -72,10 +77,9 @@
     </dependencies>
 
     <properties>
-        <jackson.version>2.9.6</jackson.version>
+        <jackson.version>2.10.0.pr3</jackson.version>
         <hibernate-validator.version>6.0.17.Final</hibernate-validator.version>
         <javax.el.version>3.0.1-b11</javax.el.version>
     </properties>
 
 </project>
-

cdi/README.md

@@ -8,7 +8,7 @@ For Maven based projects, use the following to configure the CloudEvents CDI lib
 <dependency>
     <groupId>io.cloudevents</groupId>
     <artifactId>cdi</artifactId>
-    <version>0.3.0</version>
+    <version>0.3.1</version>
 </dependency>
 ```
 

cdi/pom.xml

@@ -20,7 +20,7 @@
     <parent>
         <groupId>io.cloudevents</groupId>
         <artifactId>cloudevents-parent</artifactId>
-        <version>0.3.0</version>
+        <version>0.3.1</version>
         <relativePath>../</relativePath>
     </parent>
 

http/vertx/README.md

@@ -8,7 +8,7 @@ For Maven based projects, use the following to configure the CloudEvents Vertx H
 <dependency>
     <groupId>io.cloudevents</groupId>
     <artifactId>http-vertx</artifactId>
-    <version>0.3.0</version>
+    <version>0.3.1</version>
 </dependency>
 ```
 

http/vertx/pom.xml

@@ -20,7 +20,7 @@
     <parent>
         <groupId>io.cloudevents</groupId>
         <artifactId>cloudevents-parent</artifactId>
-        <version>0.3.0</version>
+        <version>0.3.1</version>
         <relativePath>../..</relativePath>
     </parent>
 
@@ -111,11 +111,9 @@
 
     <properties>
         <vertx.version>3.6.0</vertx.version>
-        <jackson.version>2.9.6</jackson.version>
         <maven-surefire-plugin.version>2.22.0</maven-surefire-plugin.version>
         <assertj-core.version>3.11.0</assertj-core.version>
         <junit-jupiter.version>5.3.2</junit-jupiter.version>
     </properties>
 
 </project>
-

kafka/README.md

@@ -14,7 +14,7 @@ Add the dependency in your project:
 <dependency>
     <groupId>io.cloudevents</groupId>
     <artifactId>cloudevents-kafka</artifactId>
-    <version>0.3.0</version>
+    <version>0.3.1</version>
 </dependency>
 ```
 

kafka/pom.xml

@@ -14,12 +14,12 @@
   <parent>
     <groupId>io.cloudevents</groupId>
     <artifactId>cloudevents-parent</artifactId>
-    <version>0.3.0</version>
+    <version>0.3.1</version>
   </parent>
 
   <groupId>io.cloudevents</groupId>
   <artifactId>cloudevents-kafka</artifactId>
-  <version>0.3.0</version>
+  <version>0.3.1</version>
   <packaging>jar</packaging>
 
   <name>CloudEvents - Kafka Transport Binding</name>

pom.xml

@@ -26,7 +26,7 @@
     <groupId>io.cloudevents</groupId>
     <artifactId>cloudevents-parent</artifactId>
     <name>CloudEvents</name>
-    <version>0.3.0</version>
+    <version>0.3.1</version>
     <packaging>pom</packaging>
 
     <scm>