From 33e94214bea81bbe15733e506f7f97ed137d4fbd Mon Sep 17 00:00:00 2001
From: Patrick Favre-Bulle <patrick@favre.at>
Date: Sun, 5 Mar 2023 20:59:57 +0100
Subject: [PATCH] Update various dependencies

---
 dependency-check-suppressions.xml                           | 3 +++
 modules/id-mask/pom.xml                                     | 4 ++--
 .../src/main/java/at/favre/lib/idmask/IdMaskEngine.java     | 2 +-
 pom.xml                                                     | 6 +++---
 4 files changed, 9 insertions(+), 6 deletions(-)

diff --git a/dependency-check-suppressions.xml b/dependency-check-suppressions.xml
index 4d85bde..3f4713f 100644
--- a/dependency-check-suppressions.xml
+++ b/dependency-check-suppressions.xml
@@ -3,6 +3,9 @@
     <suppress>
         <cve>CVE-2022-45688</cve>
     </suppress>
+    <suppress>
+        <cve>CVE-2020-8908</cve>
+    </suppress>
     <suppress>
         <notes><![CDATA[This suppresses all CVE entries that have a score below CVSS x.]]></notes>
         <cvssBelow>5</cvssBelow>
diff --git a/modules/id-mask/pom.xml b/modules/id-mask/pom.xml
index f358c5b..92bd06a 100644
--- a/modules/id-mask/pom.xml
+++ b/modules/id-mask/pom.xml
@@ -71,7 +71,7 @@
         <dependency>
             <groupId>at.favre.lib</groupId>
             <artifactId>hkdf</artifactId>
-            <version>1.0.1</version>
+            <version>2.0.0</version>
         </dependency>
         <dependency>
             <groupId>com.google.auto.value</groupId>
@@ -87,7 +87,7 @@
         <dependency>
             <groupId>org.jetbrains</groupId>
             <artifactId>annotations</artifactId>
-            <version>15.0</version>
+            <version>24.0.1</version>
         </dependency>
         <dependency>
             <groupId>net.markenwerk</groupId>
diff --git a/modules/id-mask/src/main/java/at/favre/lib/idmask/IdMaskEngine.java b/modules/id-mask/src/main/java/at/favre/lib/idmask/IdMaskEngine.java
index 812a4a9..48f5f26 100644
--- a/modules/id-mask/src/main/java/at/favre/lib/idmask/IdMaskEngine.java
+++ b/modules/id-mask/src/main/java/at/favre/lib/idmask/IdMaskEngine.java
@@ -1,7 +1,7 @@
 package at.favre.lib.idmask;
 
 import at.favre.lib.bytes.Bytes;
-import at.favre.lib.crypto.HKDF;
+import at.favre.lib.hkdf.HKDF;
 
 import javax.crypto.Cipher;
 import javax.crypto.Mac;
diff --git a/pom.xml b/pom.xml
index cc97593..99ad0a9 100644
--- a/pom.xml
+++ b/pom.xml
@@ -6,7 +6,7 @@
     <parent>
         <groupId>at.favre.lib</groupId>
         <artifactId>common-parent</artifactId>
-        <version>19</version>
+        <version>20</version>
     </parent>
 
     <artifactId>id-mask-parent</artifactId>
@@ -44,9 +44,9 @@
 
     <properties>
         <maven.deploy.skip>true</maven.deploy.skip>
-        <autoValueVersion>1.6.3</autoValueVersion>
+        <autoValueVersion>1.10.1</autoValueVersion>
         <!-- set this to true if fail because of missing credentials -->
-        <commonConfig.jarSign.skip>false</commonConfig.jarSign.skip>
+        <commonConfig.jarSign.skip>true</commonConfig.jarSign.skip>
         <!-- SonarQube Config -->
         <sonar.organization>patrickfav</sonar.organization>
         <sonar.host.url>https://sonarcloud.io</sonar.host.url>