🔒️ Fiks noen sårbarheter

Co-authored-by: Jakob Havstein Eriksen <[email protected]>
navikt · Oct 11, 2024 · 616bcd4 · 616bcd4
1 parent c12def1
commit 616bcd4
Show file tree

Hide file tree

Showing 5 changed files with 14 additions and 8 deletions.
diff --git a/build.gradle.kts b/build.gradle.kts
@@ -61,10 +61,16 @@ allprojects {
         implementation("com.github.seratch:kotliquery:$kotliqueryVersion")
         implementation("io.ktor:ktor-client-cio:$ktorVersion")
         implementation("io.ktor:ktor-client-apache:$ktorVersion")
+
         constraints {
-            implementation("commons-codec:commons-codec") {
-                version { require("1.13") }
-                because("ktor-client-apache v2.3.7 -> httpclient -> commons-codec v1.11 har en sårbarhet")
+            implementation("io.netty:netty-all:4.1.108.final") {
+                because("sårbarhet i 4.1.107.final")
+            }
+            implementation("org.apache.commons:commons-compress:1.26.0") {
+                because("org.testcontainers:postgresql:1.19.7 -> 1.24.0 har en sårbarhet")
+            }
+            implementation("com.google.protobuf:protobuf-java:4.28.2") {
+                because("com.expediagroup:graphql-kotlin-server:8.1.0 -> 4.27.1 har en sårbarhet")
             }
         }
         implementation("io.ktor:ktor-client-jackson:$ktorVersion") {

diff --git a/spesialist-api/build.gradle.kts b/spesialist-api/build.gradle.kts
@@ -1,7 +1,7 @@
 import com.expediagroup.graphql.plugin.gradle.config.GraphQLScalar
 import com.expediagroup.graphql.plugin.gradle.tasks.GraphQLIntrospectSchemaTask
 
-val testcontainersVersion = "1.19.7"
+val testcontainersVersion = "1.20.2"
 val graphQLKotlinVersion = "8.1.0"
 val ktorVersion = "2.3.12"
 

diff --git a/spesialist-migrering/build.gradle.kts b/spesialist-migrering/build.gradle.kts
@@ -1,4 +1,4 @@
-val testcontainersVersion = "1.19.7"
+val testcontainersVersion = "1.20.2"
 val cloudSqlVersion = "1.16.0"
 val postgresqlVersion = "42.7.3"
 

diff --git a/spesialist-opprydding-dev/build.gradle.kts b/spesialist-opprydding-dev/build.gradle.kts
@@ -1,4 +1,4 @@
-val testcontainersVersion = "1.19.7"
+val testcontainersVersion = "1.20.2"
 val cloudSqlVersion = "1.16.0"
 val postgresqlVersion = "42.7.3"
 

diff --git a/spesialist-selve/build.gradle.kts b/spesialist-selve/build.gradle.kts
@@ -1,6 +1,6 @@
 val graphQLKotlinVersion = "8.1.0"
-val testcontainersVersion = "1.19.7"
-val mockOAuth2ServerVersion = "2.1.2"
+val testcontainersVersion = "1.20.2"
+val mockOAuth2ServerVersion = "2.1.9"
 
 plugins {
     kotlin("plugin.serialization") version "2.0.20"