fix(1.5.0-beta1): 修复 CVE 漏洞

This commit is contained in:
dhb52 2025-04-10 22:28:52 +08:00 committed by opensnail
parent 1e8ab55d7e
commit 0c97cdada8

17
pom.xml
View File

@ -5,7 +5,7 @@
<parent>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-parent</artifactId>
<version>3.3.5</version>
<version>3.3.10</version>
<relativePath/> <!-- lookup parent from repository -->
</parent>
@ -23,14 +23,13 @@
<revision>1.5.0-beta1</revision>
<skipTests>true</skipTests>
<netty-all.version>4.1.114.Final</netty-all.version>
<netty-all.version>4.1.119.Final</netty-all.version>
<hutool.version>5.8.32</hutool.version>
<mybatis-spring.version>3.0.3</mybatis-spring.version>
<mybatis-plus.version>3.5.9</mybatis-plus.version>
<tinylog.version>1.3.6</tinylog.version>
<tinylog2.version>2.6.2</tinylog2.version>
<logtube.version>0.45.0</logtube.version>
<log4j.version>1.2.17</log4j.version>
<commons-logging.version>1.3.4</commons-logging.version>
<guava.version>33.3.0-jre</guava.version>
<guava-retrying.version>2.0.0</guava-retrying.version>
@ -44,9 +43,9 @@
<QLExpress.version>3.3.4</QLExpress.version>
<!-- grpc & protobuf -->
<grpc-java.version>1.66.0</grpc-java.version>
<proto-google-common-protos.version>2.41.0</proto-google-common-protos.version>
<protobuf-java.version>3.25.3</protobuf-java.version>
<grpc-java.version>1.71.0</grpc-java.version>
<proto-google-common-protos.version>2.54.1</proto-google-common-protos.version>
<protobuf-java.version>3.25.6</protobuf-java.version>
<!-- non-springboot database connectors -->
<mariadb.version>3.1.4</mariadb.version>
@ -234,12 +233,6 @@
</dependency>
<!-- logging -->
<dependency>
<groupId>log4j</groupId>
<artifactId>log4j</artifactId>
<version>${log4j.version}</version>
<optional>true</optional>
</dependency>
<dependency>
<groupId>commons-logging</groupId>
<artifactId>commons-logging</artifactId>