lingwei.kong/hawkbit
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity

Improve commons-fileupload override method (#2815)

Browse Source 
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
This commit is contained in:
Avgustin Marinov
2025-11-18 11:13:14 +02:00
committed by GitHub
parent d09f782de8
commit 5011641789
2 changed files with 10 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
hawkbit-sdk/hawkbit-sdk-commons/pom.xml
View File

@@ -24,18 +24,7 @@
<name>hawkBit :: SDK :: Commons</name> <name>hawkBit :: SDK :: Commons</name>
<description>SDK commons</description> <description>SDK commons</description>
<properties>
<commons.fileupload.version>1.6.0</commons.fileupload.version>
</properties>
<dependencies> <dependencies>
<!-- Override vulnerable feign-form-spring dependency on commons-fileupload -->
<dependency>
<groupId>commons-fileupload</groupId>
<artifactId>commons-fileupload</artifactId>
<version>${commons.fileupload.version}</version>
</dependency>
<dependency> <dependency>
<groupId>org.springframework.cloud</groupId> <groupId>org.springframework.cloud</groupId>
<artifactId>spring-cloud-starter-openfeign</artifactId> <artifactId>spring-cloud-starter-openfeign</artifactId>

10
pom.xml
View File

@@ -48,6 +48,9 @@
as libraries in other projects might be compiled with a different, lower, java version. --> as libraries in other projects might be compiled with a different, lower, java version. -->
<java.client.version>17</java.client.version> <java.client.version>17</java.client.version>
<!-- Override vulnerable commons-fileupload used by feign-form-spring (via spring-cloud-starter-openfeign) -->
<commons-fileupload.version>1.6.0</commons-fileupload.version>
<!-- must be the same as the parent version --> <!-- must be the same as the parent version -->
<spring.boot.version>3.5.7</spring.boot.version> <spring.boot.version>3.5.7</spring.boot.version>
<spring.cloud.version>2025.0.0</spring.cloud.version> <spring.cloud.version>2025.0.0</spring.cloud.version>
@@ -198,6 +201,13 @@
<dependencyManagement> <dependencyManagement>
<dependencies> <dependencies>
<!-- Override vulnerable commons-fileupload used by feign-form-spring (via spring-cloud-starter-openfeign) -->
<dependency>
<groupId>commons-fileupload</groupId>
<artifactId>commons-fileupload</artifactId>
<version>${commons-fileupload.version}</version>
</dependency>
<!-- Misc --> <!-- Misc -->
<dependency> <dependency>
<groupId>com.rabbitmq</groupId> <groupId>com.rabbitmq</groupId>