⬆️ 升级guava版本修复 CVE-2023-2976,同时升级其他依赖包版本

This commit is contained in:
Bincent
2023-09-03 03:36:52 +00:00
committed by Binary Wang
parent 189bcdc1d3
commit e61cf93a12
4 changed files with 31 additions and 26 deletions

25
pom.xml
View File

@@ -12,7 +12,7 @@
<licenses>
<license>
<name>The Apache License, Version 2.0</name>
<url>http://www.apache.org/licenses/LICENSE-2.0.txt</url>
<url>https://www.apache.org/licenses/LICENSE-2.0.txt</url>
</license>
</licenses>
@@ -102,6 +102,11 @@
<email>wangkaikate@163.com</email>
<url>https://github.com/0katekate0</url>
</developer>
<developer>
<name>Bincent</name>
<email>hongbin.hsu@qq.com</email>
<url>https://gitee.com/bincent</url>
</developer>
</developers>
<scm>
@@ -139,12 +144,12 @@
<dependency>
<groupId>com.github.binarywang</groupId>
<artifactId>qrcode-utils</artifactId>
<version>1.1</version>
<version>1.3</version>
</dependency>
<dependency>
<groupId>org.jodd</groupId>
<artifactId>jodd-http</artifactId>
<version>6.2.1</version>
<version>6.3.0</version>
<scope>provided</scope>
</dependency>
<dependency>
@@ -192,17 +197,17 @@
<dependency>
<groupId>com.google.guava</groupId>
<artifactId>guava</artifactId>
<version>32.0.0-jre</version>
<version>32.1.2-jre</version>
</dependency>
<dependency>
<groupId>com.google.code.gson</groupId>
<artifactId>gson</artifactId>
<version>2.8.9</version>
<version>2.10.1</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.dataformat</groupId>
<artifactId>jackson-dataformat-xml</artifactId>
<version>2.13.0</version>
<version>2.15.2</version>
</dependency>
<!-- 测试所用依赖 -->
@@ -287,7 +292,7 @@
<dependency>
<groupId>org.redisson</groupId>
<artifactId>redisson</artifactId>
<version>3.12.0</version>
<version>3.23.3</version>
<optional>true</optional>
<scope>provided</scope>
<exclusions>
@@ -355,7 +360,7 @@
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-source-plugin</artifactId>
<version>2.2.1</version>
<version>3.1.0</version>
<executions>
<execution>
<id>attach-sources</id>
@@ -368,7 +373,7 @@
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-javadoc-plugin</artifactId>
<version>2.9.1</version>
<version>3.5.0</version>
<executions>
<execution>
<id>attach-javadocs</id>
@@ -386,7 +391,7 @@
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-gpg-plugin</artifactId>
<version>1.6</version>
<version>3.1.0</version>
<executions>
<execution>
<id>sign-artifacts</id>