Upgrade spring.boot version

yahoo · Dec 14, 2020 · 00858c6 · 00858c6
1 parent a8c8647
commit 00858c6
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 16 deletions.
diff --git a/elide-spring/elide-spring-boot-autoconfigure/pom.xml b/elide-spring/elide-spring-boot-autoconfigure/pom.xml
@@ -113,15 +113,11 @@
             <groupId>org.apache.tomcat.embed</groupId>
             <artifactId>tomcat-embed-core</artifactId>
             <optional>true</optional>
-            <!-- Till new spring-boot-dependencies release. CVE-2020-17527 -->
-            <version>9.0.40</version>
         </dependency>
         <dependency>
             <groupId>org.apache.tomcat.embed</groupId>
             <artifactId>tomcat-embed-websocket</artifactId>
             <optional>true</optional>
-            <!-- Till new spring-boot-dependencies release. CVE-2020-17527 -->
-            <version>9.0.40</version>
         </dependency>
 
         <dependency>

diff --git a/elide-spring/pom.xml b/elide-spring/pom.xml
@@ -40,7 +40,7 @@
 
     <properties>
         <parent.pom.dir>${project.basedir}/../..</parent.pom.dir>
-        <spring.boot.version>2.4.0</spring.boot.version>
+        <spring.boot.version>2.4.1</spring.boot.version>
         <groovy.version>3.0.6</groovy.version>
     </properties>
 
@@ -81,17 +81,6 @@
                 <version>${groovy.version}</version>
                 <scope>test</scope>
             </dependency>
-            <!-- Till new spring-boot-dependencies release. CVE-2020-25638-->
-            <dependency>
-                <groupId>org.hibernate</groupId>
-                <artifactId>hibernate-core</artifactId>
-                <version>${hibernate5.version}</version>
-            </dependency>
-            <dependency>
-                <groupId>org.hibernate</groupId>
-                <artifactId>hibernate-entitymanager</artifactId>
-                <version>${hibernate5.version}</version>
-            </dependency>
             <dependency>
                 <groupId>org.springframework.boot</groupId>
                 <artifactId>spring-boot-dependencies</artifactId>