Merge pull request #434 from getyoti/versions_bump

Versions bump
getyoti · Mar 11, 2024 · 5362fde · 5362fde
2 parents fc46c63 + d5336a2
commit 5362fde
Show file tree

Hide file tree

Showing 6 changed files with 21 additions and 16 deletions.
diff --git a/.github/workflows/sonar.yml b/.github/workflows/sonar.yml
@@ -11,13 +11,14 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
           # Disabling shallow clone is recommended for improving relevancy of reporting
           fetch-depth: 0
       - name: Set up Java 17
-        uses: actions/setup-java@v1
+        uses: actions/setup-java@v4
         with:
+          distribution: 'zulu'
           java-version: 17
           architecture: x64
       - name: Scan SDK

diff --git a/examples/doc-scan/pom.xml b/examples/doc-scan/pom.xml
@@ -6,7 +6,7 @@
   <parent>
     <groupId>org.springframework.boot</groupId>
     <artifactId>spring-boot-starter-parent</artifactId>
-    <version>2.7.17</version>
+    <version>2.7.18</version>
     <relativePath/> <!-- lookup parent from repository -->
   </parent>
 

diff --git a/pom.xml b/pom.xml
@@ -27,7 +27,7 @@
     <!-- plugin versions -->
     <maven-deploy-plugin.version>3.1.1</maven-deploy-plugin.version>
     <properties-maven-plugin.version>1.2.0</properties-maven-plugin.version>
-    <spotbugs-maven-plugin.version>4.7.3.6</spotbugs-maven-plugin.version>
+    <spotbugs-maven-plugin.version>4.8.3.1</spotbugs-maven-plugin.version>
     <maven-enforcer-plugin.version>3.4.1</maven-enforcer-plugin.version>
     <extra-enforcer-rules.version>1.7.0</extra-enforcer-rules.version>
   </properties>

diff --git a/yoti-sdk-api/spotbugs/exclude-filter.xml b/yoti-sdk-api/spotbugs/exclude-filter.xml
@@ -22,6 +22,10 @@
     <Bug pattern="CRLF_INJECTION_LOGS"/>
   </Match>
 
+  <Match>
+    <Bug pattern="CT_CONSTRUCTOR_THROW"/>
+  </Match>
+
   <Match>
     <Class name="com.yoti.api.client.spi.remote.call.SignedRequest"/>
     <Bug pattern="PZLA_PREFER_ZERO_LENGTH_ARRAYS"/>

diff --git a/yoti-sdk-parent/pom.xml b/yoti-sdk-parent/pom.xml
@@ -100,13 +100,13 @@
     <!-- sdk dependency versions -->
     <slf4j.version>2.0.9</slf4j.version>
     <bouncy.castle.version>1.70</bouncy.castle.version>
-    <jackson.version>2.15.3</jackson.version>
-    <protobuf-java.version>3.24.4</protobuf-java.version>
+    <jackson.version>2.16.1</jackson.version>
+    <protobuf-java.version>3.25.3</protobuf-java.version>
     <httpmime.version>4.5.14</httpmime.version>
 
     <!-- spring versions -->
     <!-- Spring Framework 6.0.x requires JDK 17+   -->
-    <spring-boot-dependencies.version>2.7.17</spring-boot-dependencies.version>
+    <spring-boot-dependencies.version>2.7.18</spring-boot-dependencies.version>
     <javax.servlet.version>4.0.1</javax.servlet.version>
 
     <!-- test libraries -->
@@ -120,11 +120,11 @@
 
     <maven-compiler-plugin.version>3.11.0</maven-compiler-plugin.version>
 
-    <spotbugs.version>4.7.3</spotbugs.version>
-    <spotbugs-maven-plugin.version>4.7.3.6</spotbugs-maven-plugin.version>
-    <findsecbugs-plugin.version>1.12.0</findsecbugs-plugin.version>
+    <spotbugs.version>4.8.3</spotbugs.version>
+    <spotbugs-maven-plugin.version>4.8.3.1</spotbugs-maven-plugin.version>
+    <findsecbugs-plugin.version>1.13.0</findsecbugs-plugin.version>
 
-    <dependency-check-maven.version>8.4.2</dependency-check-maven.version>
+    <dependency-check-maven.version>8.4.3</dependency-check-maven.version>
     <dependency-check-maven.cve.update.limit>12</dependency-check-maven.cve.update.limit>
 
     <animal-sniffer-maven-plugin.version>1.23</animal-sniffer-maven-plugin.version>
@@ -138,12 +138,12 @@
 
     <maven-source-plugin.version>3.3.0</maven-source-plugin.version>
 
-    <maven-javadoc-plugin.version>3.6.0</maven-javadoc-plugin.version>
+    <maven-javadoc-plugin.version>3.6.3</maven-javadoc-plugin.version>
     <maven-javadoc-plugin.source>8</maven-javadoc-plugin.source>
 
     <maven-gpg-plugin.version>3.1.0</maven-gpg-plugin.version>
 
-    <maven-project-info-reports-plugin.version>3.4.5</maven-project-info-reports-plugin.version>
+    <maven-project-info-reports-plugin.version>3.5.0</maven-project-info-reports-plugin.version>
 
     <coveralls-maven-plugin.version>4.3.0</coveralls-maven-plugin.version>
 

diff --git a/yoti-sdk-spring-boot-example/pom.xml b/yoti-sdk-spring-boot-example/pom.xml
@@ -11,7 +11,7 @@
   <parent>
     <groupId>org.springframework.boot</groupId>
     <artifactId>spring-boot-starter-parent</artifactId>
-    <version>2.7.17</version>
+    <version>2.7.18</version>
     <relativePath /> <!-- lookup parent from repository -->
   </parent>
 
@@ -45,9 +45,9 @@
 
     <maven.min.version>3.8.5</maven.min.version>
 
-    <guava.version>32.1.1-jre</guava.version>
+    <guava.version>33.0.0-jre</guava.version>
 
-    <spotbugs-maven-plugin.version>4.7.3.6</spotbugs-maven-plugin.version>
+    <spotbugs-maven-plugin.version>4.8.3.1</spotbugs-maven-plugin.version>
     <maven-enforcer-plugin.version>3.4.1</maven-enforcer-plugin.version>
     <extra-enforcer-rules.version>1.7.0</extra-enforcer-rules.version>
     <maven-compiler-plugin.version>3.11.0</maven-compiler-plugin.version>