From 4037343fd2bbf486c2ba13d204d6d9f38c1277d5 Mon Sep 17 00:00:00 2001 From: Ian Nara Date: Thu, 7 Nov 2024 10:58:18 -0700 Subject: [PATCH 1/9] patch vulnerability --- pom.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/pom.xml b/pom.xml index 4637e30d..002eedf6 100644 --- a/pom.xml +++ b/pom.xml @@ -191,6 +191,7 @@ com.google.cloud google-cloud-logging + 3.15.12 com.azure From 8858e13dca45fbc0dd4c3a7e202b6600063b3ae2 Mon Sep 17 00:00:00 2001 From: Ian Nara Date: Thu, 7 Nov 2024 11:00:05 -0700 Subject: [PATCH 2/9] patch vulnerability --- .github/workflows/build-and-test.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build-and-test.yaml b/.github/workflows/build-and-test.yaml index 7df275d9..577b1178 100644 --- a/.github/workflows/build-and-test.yaml +++ b/.github/workflows/build-and-test.yaml @@ -3,7 +3,7 @@ on: [pull_request, push, workflow_dispatch] jobs: build: - uses: IABTechLab/uid2-shared-actions/.github/workflows/shared-build-and-test.yaml@v2 + uses: IABTechLab/uid2-shared-actions/.github/workflows/shared-build-and-test.yaml@v3 with: java_version: "21" secrets: inherit \ No newline at end of file From 2c2e531078914277b843f228d7a6ff03942f368c Mon Sep 17 00:00:00 2001 From: Ian Nara Date: Thu, 7 Nov 2024 11:03:44 -0700 Subject: [PATCH 3/9] patch vulnerability --- pom.xml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/pom.xml b/pom.xml index 002eedf6..bb139d72 100644 --- a/pom.xml +++ b/pom.xml @@ -193,6 +193,11 @@ google-cloud-logging 3.15.12 + + com.google.protobuf + protobuf-java + 3.25.5 + com.azure azure-security-attestation From 20aea9e81f87e74f304e548868fcc91f9c3f8574 Mon Sep 17 00:00:00 2001 From: Ian Nara Date: Thu, 7 Nov 2024 11:04:42 -0700 Subject: [PATCH 4/9] patch vulnerability --- pom.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/pom.xml b/pom.xml index bb139d72..c623cb29 100644 --- a/pom.xml +++ b/pom.xml @@ -205,6 +205,7 @@ com.azure azure-core-http-netty + 1.15.2 co.nstant.in From 1178e64578c8acd87a2599869b3051a6998e45b9 Mon Sep 17 00:00:00 2001 From: Ian Nara Date: Thu, 7 Nov 2024 11:16:33 -0700 Subject: [PATCH 5/9] patch vulnerability --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index c623cb29..64a1ac43 100644 --- a/pom.xml +++ b/pom.xml @@ -205,7 +205,7 @@ com.azure azure-core-http-netty - 1.15.2 + 1.15.6 co.nstant.in From 4a72115dd7b4a9b54ae74283ae208df5b86ddb98 Mon Sep 17 00:00:00 2001 From: Ian Nara Date: Thu, 7 Nov 2024 11:21:44 -0700 Subject: [PATCH 6/9] patch vulnerability --- pom.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/pom.xml b/pom.xml index 64a1ac43..7ceafeb3 100644 --- a/pom.xml +++ b/pom.xml @@ -201,6 +201,7 @@ com.azure azure-security-attestation + 1.1.29 com.azure From 861e36c4929fe5ecdb3584002511be641fe7692d Mon Sep 17 00:00:00 2001 From: Ian Nara Date: Thu, 7 Nov 2024 11:23:38 -0700 Subject: [PATCH 7/9] patch vulnerability --- pom.xml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/pom.xml b/pom.xml index 7ceafeb3..b6bde712 100644 --- a/pom.xml +++ b/pom.xml @@ -203,6 +203,11 @@ azure-security-attestation 1.1.29 + + io.netty + netty-codec-http2 + 4.1.100.Final + com.azure azure-core-http-netty From 8afec855f3a89673363d2b3ce6a9503a3046ceae Mon Sep 17 00:00:00 2001 From: Ian Nara Date: Thu, 7 Nov 2024 13:43:54 -0700 Subject: [PATCH 8/9] patch vulnerability --- .github/workflows/build-and-publish.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build-and-publish.yaml b/.github/workflows/build-and-publish.yaml index 53669dc1..cf7cc569 100644 --- a/.github/workflows/build-and-publish.yaml +++ b/.github/workflows/build-and-publish.yaml @@ -33,7 +33,7 @@ on: jobs: build-and-pubish: name: Build and publish JAR packages to Maven repository - uses: IABTechLab/uid2-shared-actions/.github/workflows/shared-publish-to-maven-versioned.yaml@v2 + uses: IABTechLab/uid2-shared-actions/.github/workflows/shared-publish-to-maven-versioned.yaml@v3 with: release_type: ${{ inputs.release_type }} publish_to_maven: ${{ inputs.publish_to_maven }} From 87e814c5b9952f31e91a8ac5df9423f7da711bc5 Mon Sep 17 00:00:00 2001 From: Release Workflow Date: Thu, 7 Nov 2024 21:10:58 +0000 Subject: [PATCH 9/9] [CI Pipeline] Released Patch version: 7.20.4 --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 7f0775f4..ac850224 100644 --- a/pom.xml +++ b/pom.xml @@ -5,7 +5,7 @@ com.uid2 uid2-shared - 7.20.0 + 7.20.4 ${project.groupId}:${project.artifactId} Library for all the shared uid2 operations https://github.com/IABTechLab/uid2docs