Skip to content

Commit

Permalink
fix CVE-2023-34034
Browse files Browse the repository at this point in the history
  • Loading branch information
@liugddx
liugddx committed Aug 29, 2023
1 parent e3841c8 commit 05a5909
Showing 1 changed file with 52 additions and 52 deletions.
104 changes: 52 additions & 52 deletions pom.xml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -17,28 +17,28 @@
<project xmlns="http://maven.apache.org/POM/4.0.0"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">

<modelVersion>4.0.0</modelVersion>
<inceptionYear>2018</inceptionYear>
<groupId>com.alibaba.nacos</groupId>
<artifactId>nacos-all</artifactId>
<version>${revision}</version>
<packaging>pom</packaging>

<name>Alibaba NACOS ${project.version}</name>
<description>Top Nacos project pom.xml file</description>
<url>https://nacos.io</url>
<prerequisites>
<maven>3.2.5</maven>
</prerequisites>

<scm>
<url>[email protected]:alibaba/nacos.git</url>
<connection>scm:[email protected]:alibaba/nacos.git</connection>
<developerConnection>scm:[email protected]:alibaba/nacos.git</developerConnection>
<tag>nacos-all-${revision}</tag>
</scm>

<mailingLists>
<mailingList>
<name>Development List</name>
Expand All @@ -59,7 +59,7 @@
<post>[email protected]</post>
</mailingList>
</mailingLists>

<developers>
<developer>
<id>Alibaba Nacos</id>
Expand All @@ -68,25 +68,25 @@
<email>[email protected]</email>
</developer>
</developers>

<licenses>
<license>
<name>Apache License, Version 2.0</name>
<url>http://www.apache.org/licenses/LICENSE-2.0</url>
<distribution>repo</distribution>
</license>
</licenses>

<organization>
<name>Alibaba Group</name>
<url>https://github.com/alibaba</url>
</organization>

<issueManagement>
<system>github</system>
<url>https://github.com/alibaba/nacos/issues</url>
</issueManagement>

<properties>
<revision>2.3.0-SNAPSHOT</revision>
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
Expand All @@ -100,7 +100,7 @@
<maven.javadoc.skip>true</maven.javadoc.skip>
<!-- Exclude all generated code -->
<sonar.exclusions>file:**/generated-sources/**,**/test/**</sonar.exclusions>

<!-- plugin version -->
<versions-maven-plugin.version>2.2</versions-maven-plugin.version>
<dependency-mediator-maven-plugin.version>1.0.2</dependency-mediator-maven-plugin.version>
Expand All @@ -125,16 +125,16 @@
<!-- dependency version related to plugin -->
<extra-enforcer-rules.version>1.0-beta-4</extra-enforcer-rules.version>
<p3c-pmd.version>1.3.0</p3c-pmd.version>

<!-- dependency version -->
<spring-boot-dependencies.version>2.7.11</spring-boot-dependencies.version>
<spring-boot-dependencies.version>2.7.15</spring-boot-dependencies.version>
<servlet-api.version>3.0</servlet-api.version>
<commons-io.version>2.7</commons-io.version>
<commons-collections.version>3.2.2</commons-collections.version>
<slf4j-api.version>1.7.26</slf4j-api.version>
<logback.version>1.2.9</logback.version>
<log4j.version>2.17.1</log4j.version>

<mysql-connector-java.version>8.0.28</mysql-connector-java.version>
<derby.version>10.14.2.0</derby.version>
<jackson-core.version>2.12.6</jackson-core.version>
Expand Down Expand Up @@ -454,7 +454,7 @@
</plugin>
</plugins>
</build>

<profiles>
<profile>
<id>jdk8</id>
Expand Down Expand Up @@ -493,11 +493,11 @@
<value>true</value>
</property>
</activation>

<properties>
<maven.javadoc.skip>false</maven.javadoc.skip>
</properties>

<build>
<plugins>
<plugin>
Expand Down Expand Up @@ -590,7 +590,7 @@
</plugin>
</plugins>
</reporting>

<!-- Submodule management -->
<modules>
<module>config</module>
Expand All @@ -614,10 +614,10 @@
<module>prometheus</module>
<module>persistence</module>
</modules>

<!-- Default dependencies in all subprojects -->
<dependencies>

<dependency>
<groupId>junit</groupId>
<artifactId>junit</artifactId>
Expand All @@ -633,9 +633,9 @@
<artifactId>mockito-inline</artifactId>
<scope>test</scope>
</dependency>

</dependencies>

<!-- Manage the version numbers of dependencies,
sub-modules will not introduce these dependencies by default -->
<dependencyManagement>
Expand All @@ -648,7 +648,7 @@
<type>pom</type>
<scope>import</scope>
</dependency>

<!-- Internal libs -->
<dependency>
<groupId>${project.groupId}</groupId>
Expand Down Expand Up @@ -715,7 +715,7 @@
<artifactId>nacos-address</artifactId>
<version>${project.version}</version>
</dependency>

<dependency>
<groupId>${project.groupId}</groupId>
<artifactId>nacos-istio</artifactId>
Expand Down Expand Up @@ -776,92 +776,92 @@
<artifactId>nacos-sys</artifactId>
<version>${project.version}</version>
</dependency>

<dependency>
<groupId>javax.servlet</groupId>
<artifactId>servlet-api</artifactId>
<version>${servlet-api.version}</version>
<scope>provided</scope>
</dependency>

<!-- HikariCP -->
<dependency>
<groupId>com.zaxxer</groupId>
<artifactId>HikariCP</artifactId>
<version>${HikariCP.version}</version>
</dependency>

<!-- hessian -->

<dependency>
<groupId>com.caucho</groupId>
<artifactId>hessian</artifactId>
<version>${hessian.version}</version>
</dependency>

<!-- Apache commons -->
<dependency>
<groupId>commons-io</groupId>
<artifactId>commons-io</artifactId>
<version>${commons-io.version}</version>
</dependency>

<dependency>
<groupId>commons-collections</groupId>
<artifactId>commons-collections</artifactId>
<version>${commons-collections.version}</version>
</dependency>

<!-- Logging libs -->
<dependency>
<groupId>org.slf4j</groupId>
<artifactId>slf4j-api</artifactId>
<version>${slf4j-api.version}</version>
</dependency>

<dependency>
<groupId>ch.qos.logback</groupId>
<artifactId>logback-classic</artifactId>
<version>${logback.version}</version>
</dependency>

<dependency>
<groupId>ch.qos.logback</groupId>
<artifactId>logback-core</artifactId>
<version>${logback.version}</version>
</dependency>

<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-core</artifactId>
<version>${log4j.version}</version>
</dependency>

<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-api</artifactId>
<version>${log4j.version}</version>
</dependency>

<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-slf4j-impl</artifactId>
<version>${log4j.version}</version>
</dependency>

<!-- JDBC libs -->
<dependency>
<groupId>mysql</groupId>
<artifactId>mysql-connector-java</artifactId>
<version>${mysql-connector-java.version}</version>
</dependency>

<dependency>
<groupId>org.apache.derby</groupId>
<artifactId>derby</artifactId>
<version>${derby.version}</version>
</dependency>

<!-- JRaft -->
<dependency>
<groupId>com.alipay.sofa</groupId>
Expand Down Expand Up @@ -890,20 +890,20 @@
</exclusion>
</exclusions>
</dependency>

<dependency>
<groupId>com.alipay.sofa</groupId>
<artifactId>rpc-grpc-impl</artifactId>
<version>${rpc-grpc-impl.version}</version>
</dependency>

<!-- Third-party libs -->
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-core</artifactId>
<version>${jackson-core.version}</version>
</dependency>

<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
Expand All @@ -919,7 +919,7 @@
<artifactId>jackson-core-asl</artifactId>
<version>${jackson-core-asl.version}</version>
</dependency>

<dependency>
<groupId>io.jsonwebtoken</groupId>
<artifactId>jjwt-api</artifactId>
Expand All @@ -937,19 +937,19 @@
<version>${jjwt.version}</version>
<scope>runtime</scope>
</dependency>

<dependency>
<groupId>javax.annotation</groupId>
<artifactId>javax.annotation-api</artifactId>
<version>1.3.2</version>
</dependency>

<dependency>
<groupId>org.javatuples</groupId>
<artifactId>javatuples</artifactId>
<version>${javatuples.version}</version>
</dependency>

<!-- gRPC dependency start -->
<dependency>
<groupId>io.grpc</groupId>
Expand Down Expand Up @@ -978,46 +978,46 @@
<version>${proto-google-common-protos.version}</version>
</dependency>
<!-- gRPC dependency end -->

<dependency>
<groupId>com.google.protobuf</groupId>
<artifactId>protobuf-java</artifactId>
<version>${protobuf-java.version}</version>
</dependency>

<dependency>
<groupId>org.mockito</groupId>
<artifactId>mockito-all</artifactId>
<version>${mockito-all.version}</version>
</dependency>

<dependency>
<groupId>org.mockito</groupId>
<artifactId>mockito-core</artifactId>
<version>${mockito-core.version}</version>
</dependency>

<dependency>
<groupId>org.mockito</groupId>
<artifactId>mockito-inline</artifactId>
<version>${mockito-core.version}</version>
</dependency>

<dependency>
<groupId>com.google.code.gson</groupId>
<artifactId>gson</artifactId>
<version>2.9.0</version>
<scope>compile</scope>
</dependency>

<dependency>
<groupId>org.yaml</groupId>
<artifactId>snakeyaml</artifactId>
<version>${SnakeYaml.version}</version>
</dependency>
</dependencies>
</dependencyManagement>

<distributionManagement>
<snapshotRepository>
<!-- The ID here must be exactly the same as the value
Expand Down

0 comments on commit 05a5909

Please sign in to comment.