Skip to content

Commit e855102

Browse files
authored
chore(deps): commons-compress to follow test container version (#149)
* chore(deps): Override commons-compress and transitive deps to fix vulnerabilities and ensure Testcontainers compatibility Signed-off-by: see-quick <[email protected]> * move to 1.24.0 and accept CVEs Signed-off-by: see-quick <[email protected]> --------- Signed-off-by: see-quick <[email protected]>
1 parent 8845c80 commit e855102

File tree

1 file changed

+0
-19
lines changed

1 file changed

+0
-19
lines changed

pom.xml

Lines changed: 0 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -128,9 +128,6 @@
128128
<pit-junit-plugin.version>1.2.1</pit-junit-plugin.version>
129129
<pit-plugin.version>1.18.1</pit-plugin.version>
130130

131-
<!-- FIX VULNERABILITY VERSIONS -->
132-
<commons-compress.version>1.27.1</commons-compress.version>
133-
<commons-codec.version>1.18.0</commons-codec.version>
134131
<junit4.version>4.13.2</junit4.version>
135132

136133
<!-- properties to skip surefire tests during failsafe execution -->
@@ -245,22 +242,6 @@
245242
<scope>test</scope>
246243
</dependency>
247244

248-
<!-- overriding version of commons-compress for Test container - Vulnerability -->
249-
<dependency>
250-
<groupId>org.apache.commons</groupId>
251-
<artifactId>commons-compress</artifactId>
252-
<version>${commons-compress.version}</version>
253-
</dependency>
254-
<!-- address compatibility issues that arise
255-
from upgrading `commons-compress`. Version 1.26.0 of `commons-compress` relies on functionalities provided
256-
by `commons-codec` 1.16.1, leading to a requirement for this specific version of `commons-codec` to avoid
257-
classpath conflicts and ensure runtime compatibility.
258-
-->
259-
<dependency>
260-
<groupId>commons-codec</groupId>
261-
<artifactId>commons-codec</artifactId>
262-
<version>${commons-codec.version}</version>
263-
</dependency>
264245
</dependencies>
265246

266247
<build>

0 commit comments

Comments
 (0)