From 0afc1624c1f552bb4ffd248ce124fc838c4460a9 Mon Sep 17 00:00:00 2001 From: Neil Frow <675806+worthydolt@users.noreply.github.com> Date: Tue, 10 Dec 2024 10:49:59 +0000 Subject: [PATCH 1/2] API-8035: update dependencies to those without CVEs --- project/AppDependencies.scala | 16 +++++++++------- 1 file changed, 9 insertions(+), 7 deletions(-) diff --git a/project/AppDependencies.scala b/project/AppDependencies.scala index b7b6aa6..a11ec88 100644 --- a/project/AppDependencies.scala +++ b/project/AppDependencies.scala @@ -5,13 +5,15 @@ object AppDependencies { val bootstrapPlayVersion = "9.0.0" val mongoVersion = "1.7.0" val compile = Seq( - "uk.gov.hmrc" %% "bootstrap-backend-play-30" % bootstrapPlayVersion, - "uk.gov.hmrc.mongo" %% "hmrc-mongo-play-30" % mongoVersion, - "org.apache.pekko" %% "pekko-connectors-mongodb" % "1.0.2", - "org.apache.axis2" % "axis2-kernel" % "1.8.2", - "org.apache.wss4j" % "wss4j-ws-security-dom" % "3.0.4", - "commons-io" % "commons-io" % "2.18.0", - "com.sun.activation" % "javax.activation" % "1.2.0", + "uk.gov.hmrc" %% "bootstrap-backend-play-30" % bootstrapPlayVersion, + "uk.gov.hmrc.mongo" %% "hmrc-mongo-play-30" % mongoVersion, + "org.apache.pekko" %% "pekko-connectors-mongodb" % "1.0.2", + "org.apache.axis2" % "axis2-kernel" % "1.8.2", + "org.apache.james" % "apache-mime4j-core" % "0.8.11", + "org.apache.wss4j" % "wss4j-ws-security-dom" % "3.0.4", + "org.apache.velocity" % "velocity-engine-core" % "2.4.1", + "commons-io" % "commons-io" % "2.18.0", + "com.sun.activation" % "javax.activation" % "1.2.0", caffeine ) val test = Seq( From 06cb03cdcfed376d6cd37f89ed05864a446655b3 Mon Sep 17 00:00:00 2001 From: Neil Frow <675806+worthydolt@users.noreply.github.com> Date: Tue, 10 Dec 2024 12:30:00 +0000 Subject: [PATCH 2/2] API-8035: pr-bot recommendation --- project/plugins.sbt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/project/plugins.sbt b/project/plugins.sbt index da04ec6..ae12a9d 100644 --- a/project/plugins.sbt +++ b/project/plugins.sbt @@ -2,7 +2,7 @@ resolvers += MavenRepository("HMRC-open-artefacts-maven2", "https://open.artefac resolvers += Resolver.url("HMRC-open-artefacts-ivy2", url("https://open.artefacts.tax.service.gov.uk/ivy2"))(Resolver.ivyStylePatterns) resolvers += Resolver.typesafeRepo("releases") -addSbtPlugin("uk.gov.hmrc" % "sbt-auto-build" % "3.22.0") +addSbtPlugin("uk.gov.hmrc" % "sbt-auto-build" % "3.24.0") addSbtPlugin("uk.gov.hmrc" % "sbt-distributables" % "2.5.0") addSbtPlugin("org.playframework" % "sbt-plugin" % "3.0.3") addSbtPlugin("org.scoverage" % "sbt-scoverage" % "2.0.9")