You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@myfaces.apache.org by lo...@apache.org on 2021/03/09 07:37:49 UTC
[myfaces-tobago] branch tobago-2.x updated: build: CVE fix
This is an automated email from the ASF dual-hosted git repository.
lofwyr pushed a commit to branch tobago-2.x
in repository https://gitbox.apache.org/repos/asf/myfaces-tobago.git
The following commit(s) were added to refs/heads/tobago-2.x by this push:
new d0c7ee2 build: CVE fix
d0c7ee2 is described below
commit d0c7ee2c2fae1e3b1e9f1ee2e1fc31a593196850
Author: Udo Schnurpfeil <ud...@irian.eu>
AuthorDate: Tue Mar 9 08:35:34 2021 +0100
build: CVE fix
* update batik
* change JSR 303 impl
---
tobago-example/tobago-example-demo/pom.xml | 16 ++++++++++++++--
tobago-example/tobago-example-test/pom.xml | 6 +++---
2 files changed, 17 insertions(+), 5 deletions(-)
diff --git a/tobago-example/tobago-example-demo/pom.xml b/tobago-example/tobago-example-demo/pom.xml
index 09c98d3..b175ba1 100644
--- a/tobago-example/tobago-example-demo/pom.xml
+++ b/tobago-example/tobago-example-demo/pom.xml
@@ -175,10 +175,22 @@
</dependency>
<dependency>
- <groupId>org.hibernate</groupId>
- <artifactId>hibernate-validator</artifactId>
+ <groupId>javax.validation</groupId>
+ <artifactId>validation-api</artifactId>
+ <version>2.0.1.Final</version>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.bval</groupId>
+ <artifactId>bval-jsr</artifactId>
+ <version>2.0.5</version>
+ </dependency>
+ <!--
+ <dependency>
+ <groupId>org.hibernate</groupId>
+ <artifactId>hibernate-validator</artifactId>
<version>4.3.2.Final</version>
</dependency>
+ -->
</dependencies>
diff --git a/tobago-example/tobago-example-test/pom.xml b/tobago-example/tobago-example-test/pom.xml
index e2f1266..74a96dc 100644
--- a/tobago-example/tobago-example-test/pom.xml
+++ b/tobago-example/tobago-example-test/pom.xml
@@ -148,17 +148,17 @@
<dependency>
<groupId>org.apache.xmlgraphics</groupId>
<artifactId>batik-awt-util</artifactId>
- <version>1.13</version>
+ <version>1.14</version>
</dependency>
<dependency>
<groupId>org.apache.xmlgraphics</groupId>
<artifactId>batik-gui-util</artifactId>
- <version>1.13</version>
+ <version>1.14</version>
</dependency>
<dependency>
<groupId>org.apache.xmlgraphics</groupId>
<artifactId>batik-util</artifactId>
- <version>1.13</version>
+ <version>1.14</version>
</dependency>
<!-- overrides the tomahawk version -->
<dependency>