fnproject / fdk-java

Java API and runtime for fn.
Apache License 2.0
142 stars 53 forks source link

Updated dependency versions to reduce security problems #143

Closed mjg123 closed 6 years ago

mjg123 commented 6 years ago

Updated dependency versions to reduce security problems

Using snyk.io tools we found several dependencies had security vulnerabilities and could be updated. This does not remove all of them, but the remaining CVEs are in transitive dependencies brought in by 3rd party code.

CVEs remain in:

async-thumbnails example (low priority to fix) through

fn-spring-cloud-function through

Additional changes were needed to adjust for API changes in updated dependencies:

async-thumbnails example:

fn-spring-cloud-function:

zootalures commented 6 years ago

build failed