[0.30.4] NO-ISSUE: Fix CVEs on dmn-dev-deployment-base-image and upda…

…te Quarkus and Kogito versions (#2049)
apache · Nov 14, 2023 · 37ac242 · 37ac242
1 parent 218761e
commit 37ac242
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 7 deletions.
diff --git a/packages/dmn-dev-deployment-base-image/Containerfile b/packages/dmn-dev-deployment-base-image/Containerfile
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM registry.access.redhat.com/ubi8/openjdk-11:1.16
+FROM registry.access.redhat.com/ubi8/openjdk-11:1.17
 
 ARG QUARKUS_PLATFORM_VERSION
 ARG KOGITO_RUNTIME_VERSION

diff --git a/packages/dmn-dev-deployment-quarkus-app/pom.xml b/packages/dmn-dev-deployment-quarkus-app/pom.xml
@@ -22,14 +22,14 @@
   <version>${revision}</version>
 
   <properties>
-    <compiler-plugin.version>3.8.1</compiler-plugin.version>
+    <compiler-plugin.version>3.11.0</compiler-plugin.version>
     <maven.compiler.parameters>true</maven.compiler.parameters>
     <maven.compiler.source>11</maven.compiler.source>
     <maven.compiler.target>11</maven.compiler.target>
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
-    <surefire-plugin.version>3.0.0-M5</surefire-plugin.version>
-    <version.junit>4.13.1</version.junit>
+    <surefire-plugin.version>3.2.2</surefire-plugin.version>
+    <version.junit>4.13.2</version.junit>
   </properties>
 
   <dependencyManagement>
@@ -151,7 +151,7 @@
       <plugin>
         <groupId>org.codehaus.mojo</groupId>
         <artifactId>flatten-maven-plugin</artifactId>
-        <version>1.3.0</version>
+        <version>1.5.0</version>
         <configuration>
           <updatePomFile>true</updatePomFile>
           <flattenMode>resolveCiFriendliesOnly</flattenMode>

diff --git a/packages/root-env/env/index.js b/packages/root-env/env/index.js
@@ -48,11 +48,11 @@ module.exports = composeEnv([], {
       description: "Enables/disables building example packages during the build.",
     },
     QUARKUS_PLATFORM_version: {
-      default: "2.16.7.Final",
+      default: "2.16.12.Final",
       description: "Quarkus version to be used on dependency declaration.",
     },
     KOGITO_RUNTIME_version: {
-      default: "1.40.0.Final",
+      default: "1.40.2.Final",
       description: "Kogito version to be used on dependency declaration.",
     },
   }),