Merge pull request #366 from RADAR-base/security-updates

Security updates
RADAR-base · Mar 15, 2024 · eae5111 · eae5111
2 parents 7e7c4af + 98ffafb
commit eae5111
Show file tree

Hide file tree

Showing 5 changed files with 15 additions and 13 deletions.
diff --git a/.github/workflows/snyk.yaml b/.github/workflows/snyk.yaml
@@ -34,4 +34,6 @@ jobs:
           --all-sub-projects
           --configuration-matching='^runtimeClasspath$'
           --org=radar-base
-          --policy-path=$PWD/.snyk
+          --policy-path=.snyk
+          --json-file-output=snyk.json
+          --severity-threshold=high
diff --git a/java-sdk/build.gradle.kts b/java-sdk/build.gradle.kts
@@ -57,7 +57,7 @@ configure(listOf(
     apply(plugin = "org.radarbase.radar-publishing")
 
     radarKotlin {
-        javaVersion.set(11)
+        javaVersion.set(Versions.java)
     }
 
     radarPublishing {

diff --git a/java-sdk/buildSrc/build.gradle.kts b/java-sdk/buildSrc/build.gradle.kts
@@ -2,7 +2,7 @@ import org.jetbrains.kotlin.gradle.dsl.JvmTarget
 import org.jetbrains.kotlin.gradle.tasks.KotlinCompile
 
 plugins {
-    kotlin("jvm") version "1.9.10"
+    kotlin("jvm") version "1.9.22"
 }
 
 repositories {

diff --git a/java-sdk/buildSrc/src/main/kotlin/Versions.kt b/java-sdk/buildSrc/src/main/kotlin/Versions.kt
@@ -3,18 +3,18 @@ object Versions {
 
     const val kotlin = "1.9.10"
     const val java = 17
-    const val avroGenerator = "1.5.0"
+    const val avroGenerator = "1.9.1"
 
-    const val radarCommons = "1.1.1-SNAPSHOT"
-    const val avro = "1.11.1"
-    const val jackson = "2.15.2"
+    const val radarCommons = "1.1.2"
+    const val avro = "1.11.3"
+    const val jackson = "2.16.1"
     const val argparse = "0.9.0"
-    const val radarJersey = "0.11.1-SNAPSHOT"
-    const val junit = "5.10.0"
-    const val confluent = "7.5.0"
+    const val radarJersey = "0.11.1"
+    const val junit = "5.10.1"
+    const val confluent = "7.6.0"
     const val kafka = "$confluent-ce"
-    const val okHttp = "4.11.0"
-    const val ktor = "2.3.0"
+    const val okHttp = "4.12.0"
+    const val ktor = "2.3.4"
     const val slf4j = "2.0.9"
     const val jakartaValidation = "3.0.2"
     const val log4j2 = "2.20.0"

diff --git a/java-sdk/radar-schemas-registration/build.gradle.kts b/java-sdk/radar-schemas-registration/build.gradle.kts
@@ -16,5 +16,5 @@ dependencies {
     implementation("io.confluent:kafka-schema-registry-client:${Versions.confluent}")
 
     implementation("org.apache.kafka:connect-json:${Versions.kafka}")
-    implementation("io.ktor:ktor-client-auth:2.3.4")
+    implementation("io.ktor:ktor-client-auth:${Versions.ktor}")
 }