lingwei.kong/hawkbit
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

Remove netty override (#3142)

Browse Source 
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
This commit is contained in:
Avgustin Marinov
2026-06-15 09:58:43 +03:00
committed by GitHub
parent 0ed056c7f1
commit 90842f382a
1 changed files with 2 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
pom.xml
View File

@@ -42,12 +42,12 @@
<properties> <properties>
<!-- Overrides START - to be reviewed regularly --> <!-- Overrides START - to be reviewed regularly -->
<!-- Spring boot version overrides (should be reviewed with every Spring boot upgrade) - START -->
<!-- Spring boot version overrides - END -->
<!-- Override vulnerable commons-fileupload used by feign-form-spring (via spring-cloud-starter-openfeign) --> <!-- Override vulnerable commons-fileupload used by feign-form-spring (via spring-cloud-starter-openfeign) -->
<commons-fileupload.version>1.6.0</commons-fileupload.version> <commons-fileupload.version>1.6.0</commons-fileupload.version>
<!-- Override commons-lang3 version since 3.17 is vulnerable --> <!-- Override commons-lang3 version since 3.17 is vulnerable -->
<commons-lang.version>3.20.0</commons-lang.version> <commons-lang.version>3.20.0</commons-lang.version>
<!-- Override Netty 4.2.12 due to CVE -->
<netty.version>4.2.13.Final</netty.version>
<!-- Overrides END --> <!-- Overrides END -->
<revision>0-SNAPSHOT</revision> <revision>0-SNAPSHOT</revision>
@@ -67,11 +67,6 @@
<spring-cloud-openfeign.version>5.0.1</spring-cloud-openfeign.version> <spring-cloud-openfeign.version>5.0.1</spring-cloud-openfeign.version>
<openfeign-hc5.version>13.12</openfeign-hc5.version> <openfeign-hc5.version>13.12</openfeign-hc5.version>
<!-- Spring boot version overrides (should be reviewed with every Spring boot upgrade) - START -->
<!-- Newer versions needed than defined in the Spring boot -->
<!-- Spring boot version overrides - END -->
<!-- Eclipselink - START --> <!-- Eclipselink - START -->
<!-- <!--
Ethlo plugin uses 4.x dependencies - since it only does static weaving - it should be fine - but should eventually upgrade its dependencies. Ethlo plugin uses 4.x dependencies - since it only does static weaving - it should be fine - but should eventually upgrade its dependencies.