From 1b7f259ff3105b275ede5cf335a342bbadee27e8 Mon Sep 17 00:00:00 2001 From: Chris Bono Date: Fri, 24 Jan 2025 16:02:43 -0600 Subject: [PATCH] Update Groovy to 3.0.23 (#620) This updates `org.codehaus.groovy:groovy-all` used by the `stream-applications-release-train` module to `3.0.23` to fix `CVE-2022-4065` from transitive depepdency `org.testng:testng`. --- .../stream-applications-descriptor/pom.xml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/stream-applications-release-train/stream-applications-descriptor/pom.xml b/stream-applications-release-train/stream-applications-descriptor/pom.xml index c84675a5..5d18d1cf 100644 --- a/stream-applications-release-train/stream-applications-descriptor/pom.xml +++ b/stream-applications-release-train/stream-applications-descriptor/pom.xml @@ -15,12 +15,13 @@ jar false + 3.0.23 org.codehaus.groovy groovy-all - 3.0.17 + ${groovy.version} pom compile @@ -52,7 +53,7 @@ org.codehaus.groovy groovy-all - 3.0.17 + ${groovy.version} pom