From f774239ebcd72d73decc9c809088b00586945805 Mon Sep 17 00:00:00 2001
From: itsKedar <37594766+itsKedar@users.noreply.github.com>
Date: Fri, 18 Nov 2022 12:41:47 +0530
Subject: [PATCH 1/3] Vulnerabilities fix
---
pom.xml | 9 +++++++--
1 file changed, 7 insertions(+), 2 deletions(-)
diff --git a/pom.xml b/pom.xml
index ae2646f4..b0758cfc 100644
--- a/pom.xml
+++ b/pom.xml
@@ -5,7 +5,7 @@
org.springframework.boot
spring-boot-starter-parent
- 2.6.6
+ 2.6.13
com.github.checkmarx-ltd
@@ -40,6 +40,11 @@
httpclient
4.5.13
+
+ org.yaml
+ snakeyaml
+ 1.33
+
org.apache.commons
commons-compress
@@ -68,7 +73,7 @@
com.google.code.gson
gson
- 2.8.8
+ 2.8.9
org.apache.commons
From d0a05bbe94ab2ff189ad2e21ce3acc95751463f4 Mon Sep 17 00:00:00 2001
From: itsKedar <37594766+itsKedar@users.noreply.github.com>
Date: Fri, 18 Nov 2022 12:42:10 +0530
Subject: [PATCH 2/3] Update pom.xml
---
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index b0758cfc..0f66a43c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -12,7 +12,7 @@
cx-spring-boot-sdk
- 0.5.29
+ 0.5.30
cx-spring-boot-sdk
From 7c79ecb59b5ac81a0a73cda56f02d3b2820cd8ff Mon Sep 17 00:00:00 2001
From: satyamchaurasiapersistent
<102941840+satyamchaurasiapersistent@users.noreply.github.com>
Date: Sun, 20 Nov 2022 12:43:39 +0530
Subject: [PATCH 3/3] Pipeline Fix.
---
.circleci/config.yml | 10 ++++++----
.circleci/maven.settings.xml | 2 +-
2 files changed, 7 insertions(+), 5 deletions(-)
diff --git a/.circleci/config.yml b/.circleci/config.yml
index bbe930e2..21b32d56 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -1,4 +1,6 @@
-version: 2
+version: '2.1'
+orbs:
+ circleci-maven-release-orb: sonatype-nexus-community/circleci-maven-release-orb@0.0.18
jobs:
build:
docker:
@@ -12,9 +14,9 @@ jobs:
keys:
- v1-dependencies-{{ checksum "pom.xml" }}
- v1-dependencies-
- - run: echo $GPG_ASC_BASE64 | base64 --decode | gpg --batch --no-tty --import --yes
+ - run: echo $GPG_ASC_BASE64NEW | base64 --decode | gpg --batch --no-tty --import --yes
- run: chmod u+x mvnw
- - run: ./mvnw -s .circleci/maven.settings.xml clean verify
+ - run: ./mvnw -s .circleci/maven.settings.xml clean verify -X
- run: mvn help:evaluate -Dexpression=project.version -q -DforceStdout > target/version.txt
- save_cache:
paths:
@@ -40,7 +42,7 @@ jobs:
keys:
- v1-dependencies-{{ checksum "pom.xml" }}
- v1-dependencies-
- - run: echo $GPG_ASC_BASE64 | base64 --decode | gpg --batch --no-tty --import --yes
+ - run: echo $GPG_ASC_BASE64NEW | base64 --decode | gpg --version --batch --no-tty --import --yes
- run: chmod u+x mvnw
- run: ./mvnw -s .circleci/maven.settings.xml clean deploy -DskipTests
- save_cache:
diff --git a/.circleci/maven.settings.xml b/.circleci/maven.settings.xml
index fdfd40f5..34e4c866 100644
--- a/.circleci/maven.settings.xml
+++ b/.circleci/maven.settings.xml
@@ -21,7 +21,7 @@
gpg
gpg
- ${env.GPG_PASSPHRASE}
+ ${env.GPG_PASSPHRASENEW}