Merge pull request #9 from catenax-ng/release/v0.4.5

Release/v0.4.5: Snake Yaml Library Version Updated to 2.0
eclipse-tractusx · Feb 28, 2023 · d789b3c · d789b3c
2 parents 991995d + 2daf964
commit d789b3c
Show file tree

Hide file tree

Showing 8 changed files with 22 additions and 9 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -20,6 +20,13 @@ The changelog format is based on [Keep a Changelog](https://keepachangelog.com/e
 
 ## [released]
 
+## [0.4.5] - 2023-02-28
+
+# Security Issues
+- Insecure SnakeYaml library version 1.33 updated to Secure version 2.0
+
+## [released]
+
 ## [0.4.4] - 2023-02-27 
 
 ## Updated

diff --git a/DEPENDENCIES_BACKEND b/DEPENDENCIES_BACKEND
@@ -128,4 +128,4 @@ maven/mavencentral/org.springframework/spring-webflux/6.0.4, Apache-2.0, approve
 maven/mavencentral/org.springframework/spring-webmvc/6.0.4, Apache-2.0, approved, #5944
 maven/mavencentral/org.webjars/swagger-ui/4.15.5, Apache-2.0 AND MIT, approved, #5921
 maven/mavencentral/org.webjars/webjars-locator-core/0.52, MIT, approved, clearlydefined
-maven/mavencentral/org.yaml/snakeyaml/1.33, Apache-2.0, approved, clearlydefined
+maven/mavencentral/org.yaml/snakeyaml/2.0, , restricted, clearlydefined
diff --git a/charts/consumer-backend/Chart.yaml b/charts/consumer-backend/Chart.yaml
@@ -29,10 +29,10 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.2.3
+version: 0.2.4
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "0.4.4"
+appVersion: "0.4.5"
diff --git a/charts/consumer-ui/Chart.yaml b/charts/consumer-ui/Chart.yaml
@@ -29,10 +29,10 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.2.3
+version: 0.2.4
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "0.4.4"
+appVersion: "0.4.5"
diff --git a/consumer-backend/productpass/pom.xml b/consumer-backend/productpass/pom.xml
@@ -66,7 +66,7 @@
         <dependency>
             <groupId>org.yaml</groupId>
             <artifactId>snakeyaml</artifactId>
-            <version>1.33</version>
+            <version>2.0</version>
         </dependency>
         <dependency>
             <groupId>org.springframework.boot</groupId>

diff --git a/docs/RELEASE_USER.md b/docs/RELEASE_USER.md
@@ -16,6 +16,12 @@
 
 # Release Notes Digital Product Pass Application
 
+**February 28 (initial release, version 0.4.5)**  
+*28.02.2023*
+
+## Security Issues
+Updated security issues related with a library.
+
 **February 27 (initial release, version 0.4.4)**  
 *27.02.2023*
 

diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "productpass-consumer-ui",
-  "version": "0.4.4",
+  "version": "0.4.5",
   "private": true,
   "scripts": {
     "serve": "vite --host localhost",