update some dependencies

apache · Oct 17, 2023 · d8a85c7 · d8a85c7
1 parent f24a11c
commit d8a85c7
Showing 1 changed file with 3 additions and 9 deletions.
diff --git a/tika-parent/pom.xml b/tika-parent/pom.xml
@@ -306,7 +306,7 @@
 
     <!-- dependency versions -->
     <google.cloud.version>2.28.0</google.cloud.version>
-    <aws.version>1.12.565</aws.version>
+    <aws.version>1.12.567</aws.version>
     <!-- WARNING: when you upgrade asm make sure that you update the
         OpCode in the initializer in org.apache.tika.parser.asm.XHTMLClassVisitor
         See TIKA-2992.
@@ -331,7 +331,7 @@
     <commons.fileupload.version>1.5</commons.fileupload.version>
     <ctakes.version>4.0.0.1</ctakes.version>
     <!-- can't update to 3.6.0, needs jdk11 ? -->
-    <cxf.version>3.5.6</cxf.version>
+    <cxf.version>3.5.7</cxf.version>
     <ddplist.version>1.27</ddplist.version>
     <dl4j.version>1.0.0-M2</dl4j.version>
     <!-- fakeload versions > 0.4.0 require java > 8 -->
@@ -343,7 +343,7 @@
     <icu4j.version>62.2</icu4j.version>
     <imageio.version>1.4.0</imageio.version>
     <jackrabbit.version>2.21.19</jackrabbit.version>
-    <jackson.version>2.15.2</jackson.version>
+    <jackson.version>2.15.3</jackson.version>
     <javax.annotation.version>1.3.2</javax.annotation.version>
     <javax.jcr.version>2.0</javax.jcr.version>
     <javax.rest.version>2.1.1</javax.rest.version>
@@ -1061,12 +1061,6 @@
                 <artifactId>h2</artifactId>
                 <version>2.2.224</version>
             </exclude>
-            <!-- Project disagrees with CVE https://github.com/FasterXML/jackson-databind/issues/3972 -->
-            <exclude>
-                <groupId>com.fasterxml.jackson.core</groupId>
-                <artifactId>jackson-databind</artifactId>
-                <version>2.15.2</version>
-            </exclude>
           </excludeCoordinates>
           <fail>true</fail>
         </configuration>