You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@kylin.apache.org by xx...@apache.org on 2023/05/06 06:59:29 UTC

[kylin] 28/38: mirror: fix snyk, upgrade tomcat-embed-core from 9.0.69 to 9.0.71 fix snyk, upgrade commons-fileupload from 1.3.3 to 1.5

This is an automated email from the ASF dual-hosted git repository.

xxyu pushed a commit to branch kylin5
in repository https://gitbox.apache.org/repos/asf/kylin.git

commit 10a180422c2544dc82c2205d76096e5fc39624e0
Author: huangsheng <hu...@163.com>
AuthorDate: Thu Mar 2 10:26:34 2023 +0800

    mirror: fix snyk, upgrade tomcat-embed-core from 9.0.69 to 9.0.71
    fix snyk, upgrade commons-fileupload from 1.3.3 to 1.5
---
 pom.xml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 53a49fb81c..f7a6740b8f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -146,7 +146,7 @@
         <commons-cli.version>1.2</commons-cli.version>
         <commons-lang.version>2.6</commons-lang.version>
         <commons-io.version>2.7</commons-io.version>
-        <commons-upload.version>1.3.3</commons-upload.version>
+        <commons-upload.version>1.5</commons-upload.version>
         <commons-math3.version>3.4.1</commons-math3.version>
         <commons-collections.version>3.2.2</commons-collections.version>
         <commons-codec.version>1.10</commons-codec.version>
@@ -2363,6 +2363,12 @@
                 <artifactId>spring-session-data-redis</artifactId>
                 <version>${spring-session.version}</version>
             </dependency>
+            <dependency>
+                <groupId>org.apache.tomcat.embed</groupId>
+                <artifactId>tomcat-embed-core</artifactId>
+                <version>9.0.71</version>
+            </dependency>
+
 
             <!-- Spring Security -->
             <dependency>