Skip to content

Commit ff6eea6

Browse files
mp-orkesmp-orkes
authored
Merge pull request #117 from conductor-oss/fix/osv-bump-example-deps
fix: bump vulnerable deps in example pom.xml files
2 parents 4ac99db + 3543bc5 commit ff6eea6

793 files changed

Lines changed: 4756 additions & 824 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎.github/workflows/osv-scanner-scheduled.yml‎

Lines changed: 0 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,6 @@ on:
55
- cron: '0 6 * * 1' # Weekly Monday 6am UTC
66
push:
77
branches: [main]
8-
98
permissions:
109
actions: read
1110
contents: read
@@ -14,19 +13,3 @@ permissions:
1413
jobs:
1514
scan-scheduled:
1615
uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v2.3.3"
17-
with:
18-
# Scan only the published modules. examples/ pins old dependency versions and
19-
# is excluded for now to keep the scan green. Add it back once examples are
20-
# bumped to the same versions as the production modules.
21-
scan-args: |-
22-
-r
23-
buildSrc
24-
conductor-client
25-
conductor-client-metrics
26-
conductor-client-spring
27-
conductor-client-spring-boot4
28-
harness
29-
java-sdk
30-
orkes-client
31-
orkes-spring
32-
tests

‎.github/workflows/osv-scanner.yml‎

Lines changed: 0 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -18,19 +18,3 @@ concurrency:
1818
jobs:
1919
scan-pr:
2020
uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@v2.3.3"
21-
with:
22-
# Scan only the published modules. examples/ pins old dependency versions and
23-
# is excluded for now to keep the scan green. Add it back once examples are
24-
# bumped to the same versions as the production modules.
25-
scan-args: |-
26-
-r
27-
buildSrc
28-
conductor-client
29-
conductor-client-metrics
30-
conductor-client-spring
31-
conductor-client-spring-boot4
32-
harness
33-
java-sdk
34-
orkes-client
35-
orkes-spring
36-
tests

‎examples/advanced/aggregator-pattern/pom.xml‎

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,12 @@
2121
<dependency>
2222
<groupId>com.fasterxml.jackson.core</groupId>
2323
<artifactId>jackson-databind</artifactId>
24-
<version>2.17.1</version>
24+
<version>2.18.6</version>
25+
</dependency>
26+
<dependency>
27+
<groupId>com.fasterxml.jackson.core</groupId>
28+
<artifactId>jackson-core</artifactId>
29+
<version>2.18.6</version>
2530
</dependency>
2631
<dependency>
2732
<groupId>org.slf4j</groupId>

‎examples/advanced/at-least-once/pom.xml‎

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,12 @@
2121
<dependency>
2222
<groupId>com.fasterxml.jackson.core</groupId>
2323
<artifactId>jackson-databind</artifactId>
24-
<version>2.17.1</version>
24+
<version>2.18.6</version>
25+
</dependency>
26+
<dependency>
27+
<groupId>com.fasterxml.jackson.core</groupId>
28+
<artifactId>jackson-core</artifactId>
29+
<version>2.18.6</version>
2530
</dependency>
2631
<dependency>
2732
<groupId>org.slf4j</groupId>

‎examples/advanced/backpressure/pom.xml‎

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,12 @@
2121
<dependency>
2222
<groupId>com.fasterxml.jackson.core</groupId>
2323
<artifactId>jackson-databind</artifactId>
24-
<version>2.17.1</version>
24+
<version>2.18.6</version>
25+
</dependency>
26+
<dependency>
27+
<groupId>com.fasterxml.jackson.core</groupId>
28+
<artifactId>jackson-core</artifactId>
29+
<version>2.18.6</version>
2530
</dependency>
2631
<dependency>
2732
<groupId>org.slf4j</groupId>

‎examples/advanced/batch-ml-training/pom.xml‎

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,12 @@
2121
<dependency>
2222
<groupId>com.fasterxml.jackson.core</groupId>
2323
<artifactId>jackson-databind</artifactId>
24-
<version>2.17.1</version>
24+
<version>2.18.6</version>
25+
</dependency>
26+
<dependency>
27+
<groupId>com.fasterxml.jackson.core</groupId>
28+
<artifactId>jackson-core</artifactId>
29+
<version>2.18.6</version>
2530
</dependency>
2631
<dependency>
2732
<groupId>org.slf4j</groupId>

‎examples/advanced/claim-check/pom.xml‎

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,12 @@
2424
<dependency>
2525
<groupId>com.fasterxml.jackson.core</groupId>
2626
<artifactId>jackson-databind</artifactId>
27-
<version>2.17.1</version>
27+
<version>2.18.6</version>
28+
</dependency>
29+
<dependency>
30+
<groupId>com.fasterxml.jackson.core</groupId>
31+
<artifactId>jackson-core</artifactId>
32+
<version>2.18.6</version>
2833
</dependency>
2934
<dependency>
3035
<groupId>org.slf4j</groupId>

‎examples/advanced/competing-consumers/pom.xml‎

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,12 @@
2121
<dependency>
2222
<groupId>com.fasterxml.jackson.core</groupId>
2323
<artifactId>jackson-databind</artifactId>
24-
<version>2.17.1</version>
24+
<version>2.18.6</version>
25+
</dependency>
26+
<dependency>
27+
<groupId>com.fasterxml.jackson.core</groupId>
28+
<artifactId>jackson-core</artifactId>
29+
<version>2.18.6</version>
2530
</dependency>
2631
<dependency>
2732
<groupId>org.slf4j</groupId>

‎examples/advanced/container-orchestration/pom.xml‎

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,12 @@
2424
<dependency>
2525
<groupId>com.fasterxml.jackson.core</groupId>
2626
<artifactId>jackson-databind</artifactId>
27-
<version>2.17.1</version>
27+
<version>2.18.6</version>
28+
</dependency>
29+
<dependency>
30+
<groupId>com.fasterxml.jackson.core</groupId>
31+
<artifactId>jackson-core</artifactId>
32+
<version>2.18.6</version>
2833
</dependency>
2934
<dependency>
3035
<groupId>org.slf4j</groupId>

‎examples/advanced/content-enricher/pom.xml‎

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,12 @@
2424
<dependency>
2525
<groupId>com.fasterxml.jackson.core</groupId>
2626
<artifactId>jackson-databind</artifactId>
27-
<version>2.17.1</version>
27+
<version>2.18.6</version>
28+
</dependency>
29+
<dependency>
30+
<groupId>com.fasterxml.jackson.core</groupId>
31+
<artifactId>jackson-core</artifactId>
32+
<version>2.18.6</version>
2833
</dependency>
2934
<dependency>
3035
<groupId>org.slf4j</groupId>

0 commit comments

Comments
 (0)