2024 CVE Fixes - stage 1

- Resolves all critical CVEs, according to grype
cfpb · Dec 5, 2024 · 6756ca2 · 6756ca2
1 parent f01b132
commit 6756ca2
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/build.sbt b/build.sbt
@@ -64,7 +64,7 @@ lazy val dockerSettings = Seq(
     } else dockerBuildCommand.value
   },
   Docker / maintainer := "Hmda-Ops",
-  dockerBaseImage := "eclipse-temurin:21.0.2_13-jdk-alpine",
+  dockerBaseImage := "eclipse-temurin:23.0.1_11-jdk-alpine",
   dockerRepository := Some("hmda"),
   dockerCommands := dockerCommands.value.flatMap {
     case cmd@Cmd("FROM",_) => List(cmd, Cmd("RUN", "apk update"),
@@ -152,7 +152,7 @@ lazy val `hmda-platform` = (project in file("hmda"))
   .settings(hmdaBuildSettings: _*)
   .settings(
     Seq(
-      libraryDependencies += zeroAllocationHashing,
+      libraryDependencies ++= List(guava, zeroAllocationHashing),
       Compile / mainClass := Some("hmda.HmdaPlatform"),
       assembly / assemblyJarName := "hmda2.jar",
       assembly / assemblyMergeStrategy := {

diff --git a/project/Version.scala b/project/Version.scala
@@ -33,7 +33,7 @@ object Version {
   val lettuce                = "6.2.4.RELEASE"
   val java8Compat            = "1.0.2"
   val scalaMock              = "4.3.0"
-  val guava                  = "33.0.0-jre"
+  val guava                  = "33.3.1-jre"
   val awsSesSdk              = "1.12.484"
   val zeroAllocation         = "0.16"
   val cormorant              = "0.3.0"