[jtrac-svn] SF.net SVN: j-trac:[1421] trunk/jtrac/pom.xml

[<udi...@us...>]

Revision: 1421
          http://sourceforge.net/p/j-trac/code/1421
Author:   udittmer
Date:     2021-12-13 10:27:43 +0000 (Mon, 13 Dec 2021)
Log Message:
-----------
updated dependencies

Modified Paths:
--------------
    trunk/jtrac/pom.xml

Modified: trunk/jtrac/pom.xml
===================================================================
--- trunk/jtrac/pom.xml	2021-11-23 08:12:45 UTC (rev 1420)
+++ trunk/jtrac/pom.xml	2021-12-13 10:27:43 UTC (rev 1421)
@@ -356,7 +356,19 @@
             <groupId>org.apache.poi</groupId>
             <artifactId>poi</artifactId>
             <version>5.1.0</version>
+            <exclusions>
+                <exclusion>
+					<groupId>org.apache.logging.log4j</groupId>
+					<artifactId>log4j-api</artifactId>
+                </exclusion>
+            </exclusions>
         </dependency>
+		<dependency>
+			<!-- POI needs this, but pulls in 2.14.1, which is insecure -->
+			<groupId>org.apache.logging.log4j</groupId>
+			<artifactId>log4j-api</artifactId>
+			<version>2.15.0</version>
+		</dependency>
         <dependency>
             <groupId>org.tmate</groupId>
             <artifactId>javasvn</artifactId>
@@ -375,6 +387,7 @@
             <scope>runtime</scope>
         </dependency>
 		<dependency>
+			<!-- 2.6.1 would be fine, but is built for Java 11 -->
 			<groupId>org.hsqldb</groupId>
 			<artifactId>hsqldb</artifactId>
 			<version>2.5.2</version>
@@ -397,6 +410,7 @@
             </exclusions>
         </dependency>
 		<dependency>
+			<!-- 5.0 would probably be fine, but it's built for Java 11 -->
 		   <groupId>com.zaxxer</groupId>
 		   <artifactId>HikariCP</artifactId>
 		   <version>4.0.3</version>
@@ -524,6 +538,6 @@
 		<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
 		<timestamp>${maven.build.timestamp}</timestamp>
 		<maven.build.timestamp.format>yyyy-MM-dd HH:mm z</maven.build.timestamp.format>
-		<commonmark.version>0.18.0</commonmark.version>
+		<commonmark.version>0.18.1</commonmark.version>
 	</properties>
 </project>

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.