diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index fa63306..d26cc76 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -11,7 +11,7 @@ jobs: clojure-version: ["1.10.3", "1.11.1"] runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@v4.1.1 + - uses: actions/checkout@v4.1.7 - name: Set up Java uses: actions/setup-java@v4 with: diff --git a/deps.edn b/deps.edn index 20e3d68..1438a5c 100644 --- a/deps.edn +++ b/deps.edn @@ -14,12 +14,12 @@ org.clojure/data.xml {:mvn/version "0.2.0-alpha9"} org.clojure/tools.gitlibs {:mvn/version "2.5.197"} org.clojure/tools.cli {:mvn/version "1.1.230"} - com.cognitect.aws/api {:mvn/version "0.8.686" :exclusions [org.eclipse.jetty/jetty-http org.eclipse.jetty/jetty-client org.eclipse.jetty/jetty-util]} ;; override for CVEs + com.cognitect.aws/api {:mvn/version "0.8.692" :exclusions [org.eclipse.jetty/jetty-http org.eclipse.jetty/jetty-client org.eclipse.jetty/jetty-util]} ;; override for CVEs org.eclipse.jetty/jetty-http {:mvn/version "9.4.53.v20231009"} org.eclipse.jetty/jetty-client {:mvn/version "9.4.53.v20231009"} org.eclipse.jetty/jetty-util {:mvn/version "9.4.53.v20231009"} - com.cognitect.aws/endpoints {:mvn/version "1.1.12.626"} - com.cognitect.aws/s3 {:mvn/version "848.2.1413.0"} + com.cognitect.aws/endpoints {:mvn/version "1.1.12.718"} + com.cognitect.aws/s3 {:mvn/version "868.2.1580.0"} javax.inject/javax.inject {:mvn/version "1"} } :aliases { @@ -30,7 +30,7 @@ :main-opts ["-m" "clj-kondo.main" "--lint" "src/main/clojure" "--lint" "src/test/clojure"]} ;; clj -M:cve - :cve {:extra-deps {io.github.clj-holmes/clj-watson {:git/tag "v5.0.0" :git/sha "c2349f5"}} + :cve {:extra-deps {io.github.clj-holmes/clj-watson {:git/tag "v5.1.2" :git/sha "c2349f5"}} :extra-paths [".clj-watson"] :jvm-opts ["--illegal-access=deny"] :main-opts ["-m" "clj-watson.cli" "scan" "-p" "deps.edn"]} diff --git a/pom.xml b/pom.xml index 459abcb..592e8bc 100644 --- a/pom.xml +++ b/pom.xml @@ -109,7 +109,7 @@ com.cognitect.aws api - 0.8.686 + 0.8.692 org.eclipse.jetty @@ -143,12 +143,12 @@ com.cognitect.aws endpoints - 1.1.12.626 + 1.1.12.718 com.cognitect.aws s3 - 848.2.1413.0 + 868.2.1580.0 javax.inject