Skip to content

Commit 6f20500

Browse files
authored
Update http4s, cats-effect and fs2 in order to patch CVEs (#336)
1 parent e2e3196 commit 6f20500

3 files changed

Lines changed: 7 additions & 7 deletions

File tree

modules/common-fs2/src/main/scala/com/snowplowanalytics/snowplow/enrich/common/fs2/Telemetry.scala

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ import cats.data.NonEmptyList
1919
import cats.implicits._
2020

2121
import cats.effect.kernel.{Async, Resource, Sync}
22-
import cats.effect.std.Random
22+
import cats.effect.std.SecureRandom
2323

2424
import fs2.Stream
2525

@@ -72,7 +72,7 @@ object Telemetry {
7272
client: HttpClient[F]
7373
): Resource[F, Tracker[F]] =
7474
for {
75-
implicit0(random: Random[F]) <- Resource.eval(Random.scalaUtilRandom[F])
75+
implicit0(random: SecureRandom[F]) <- Resource.eval(SecureRandom.javaSecuritySecureRandom[F])
7676
emitter <- Http4sEmitter.build(
7777
EndpointParams(config.collectorUri, port = Some(config.collectorPort), https = config.secure),
7878
client,

modules/common-fs2/src/main/scala/com/snowplowanalytics/snowplow/enrich/common/fs2/io/experimental/Metadata.scala

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ import cats.Applicative
2323
import cats.data.NonEmptyList
2424
import cats.kernel.Semigroup
2525
import cats.effect.kernel.{Async, Clock, Ref, Resource, Spawn, Sync}
26-
import cats.effect.std.Random
26+
import cats.effect.std.SecureRandom
2727
import fs2.Stream
2828
import io.circe.Json
2929
import io.circe.parser._
@@ -119,7 +119,7 @@ object Metadata {
119119
client: Client[F]
120120
): Resource[F, Tracker[F]] =
121121
for {
122-
implicit0(random: Random[F]) <- Resource.eval(Random.scalaUtilRandom[F])
122+
implicit0(random: SecureRandom[F]) <- Resource.eval(SecureRandom.javaSecuritySecureRandom[F])
123123
emitter <- Http4sEmitter.build(
124124
Emitter.EndpointParams(
125125
config.endpoint.host.map(_.toString()).getOrElse("localhost"),

project/Dependencies.scala

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -85,15 +85,15 @@ object Dependencies {
8585
val config = "1.3.4"
8686

8787
val decline = "2.4.1"
88-
val fs2 = "3.11.0"
88+
val fs2 = "3.12.2"
8989
val refined = "0.10.3"
90-
val catsEffect = "3.5.4"
90+
val catsEffect = "3.6.3"
9191
val fs2PubSub = "0.22.1"
9292
val fs2Aws = "4.1.0"
9393
val fs2Kafka = "3.5.1"
9494
val fs2BlobStorage = "0.9.12"
9595
val azureIdentity = "1.17.0"
96-
val http4s = "0.23.29"
96+
val http4s = "0.23.32"
9797
val log4cats = "2.7.0"
9898
val catsRetry = "3.1.3"
9999
val specsDiff = "0.9.0"

0 commit comments

Comments
 (0)