Merge pull request #305 from groovy/updates

Update dependencies
groovy · Jun 6, 2024 · 61eb031 · 61eb031
2 parents b510678 + 44ce820
commit 61eb031
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 19 deletions.
diff --git a/pom.xml b/pom.xml
@@ -57,25 +57,13 @@
     <dependency>
       <groupId>org.apache.maven.plugin-tools</groupId>
       <artifactId>maven-plugin-annotations</artifactId>
-      <version>3.10.2</version>
+      <version>3.13.1</version>
       <scope>provided</scope>
     </dependency>
     <dependency>
       <groupId>org.apache.maven</groupId>
       <artifactId>maven-archiver</artifactId>
-      <version>3.6.0</version>
-    </dependency>
-    <dependency>
-      <!-- fix CVE-2023-37460 from org.apache.maven:maven-archiver -->
-      <groupId>org.codehaus.plexus</groupId>
-      <artifactId>plexus-archiver</artifactId>
-      <version>4.8.0</version>
-    </dependency>
-    <dependency>
-      <!-- fix CVE-2023-42503 from org.codehaus.plexus:plexus-archiver -->
-      <groupId>org.apache.commons</groupId>
-      <artifactId>commons-compress</artifactId>
-      <version>1.26.0</version>
+      <version>3.6.2</version>
     </dependency>
     <dependency>
       <groupId>org.apache.maven.shared</groupId>
@@ -93,7 +81,7 @@
       <!-- fix CVE-2018-10237, CVE-2020-8908, and CVE-2023-2976 from org.apache.maven:maven-core -->
       <groupId>com.google.guava</groupId>
       <artifactId>guava</artifactId>
-      <version>32.1.3-jre</version>
+      <version>33.2.1-jre</version>
       <scope>runtime</scope>
     </dependency>
     <!-- main groovy support -->
@@ -119,7 +107,7 @@
       <!-- this is to support use of Groovysh (Groovy jars don't include) -->
       <groupId>org.fusesource.jansi</groupId>
       <artifactId>jansi</artifactId>
-      <version>2.4.0</version>
+      <version>2.4.1</version>
       <scope>runtime</scope>
     </dependency>
     <dependency>
@@ -160,7 +148,7 @@
     <dependency>
       <groupId>org.slf4j</groupId>
       <artifactId>slf4j-simple</artifactId>
-      <version>2.0.7</version>
+      <version>2.0.13</version>
       <scope>test</scope>
     </dependency>
   </dependencies>

diff --git a/src/it/pom.xml b/src/it/pom.xml
@@ -11,9 +11,9 @@
 
   <properties>
     <project.build.sourceEncoding>@project.build.sourceEncoding@</project.build.sourceEncoding>
-    <commonsLang3Version>3.12.0</commonsLang3Version>
+    <commonsLang3Version>3.14.0</commonsLang3Version>
     <mavenVersion>3.9.7</mavenVersion>
-    <junit5Version>5.9.3</junit5Version>
+    <junit5Version>5.10.2</junit5Version>
   </properties>
 
   <dependencyManagement>