fix security alerts reported by github (#4344)

2019-11-01 11:16:36 +08:00
parent a9ea8636e5
commit 931908c77c
11 changed files with 11 additions and 11 deletions
--- a/modules/openapi-generator/src/main/resources/Java/libraries/feign/build.gradle.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/feign/build.gradle.mustache
@@ -121,7 +121,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
    swagger_annotations_version = "1.5.22"
    jackson_version = "2.9.10"
-    jackson_databind_version = "2.9.10"
+    jackson_databind_version = "2.9.10.1"
    jackson_databind_nullable_version = "0.2.0"
    {{#threetenbp}}
    jackson_threetenbp_version = "2.9.10"
--- a/modules/openapi-generator/src/main/resources/Java/libraries/feign/build.sbt.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/feign/build.sbt.mustache
@@ -16,7 +16,7 @@ lazy val root = (project in file(".")).
      "io.github.openfeign.form" % "feign-form" % "2.1.0" % "compile",
      "com.fasterxml.jackson.core" % "jackson-core" % "2.9.10" % "compile",
      "com.fasterxml.jackson.core" % "jackson-annotations" % "2.9.10" % "compile",
-      "com.fasterxml.jackson.core" % "jackson-databind" % "2.9.10" % "compile",
+      "com.fasterxml.jackson.core" % "jackson-databind" % "2.9.10.1" % "compile",
      "com.fasterxml.jackson.datatype" % "jackson-datatype-{{^java8}}joda{{/java8}}{{#java8}}jsr310{{/java8}}" % "2.9.10" % "compile",
      "com.github.joschi.jackson" % "jackson-datatype-threetenbp" % "2.9.10" % "compile",
      "org.apache.oltu.oauth2" % "org.apache.oltu.oauth2.client" % "1.0.1" % "compile",
--- a/modules/openapi-generator/src/main/resources/Java/libraries/feign/pom.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/feign/pom.mustache
@@ -316,7 +316,7 @@
        <feign-form-version>2.1.0</feign-form-version>
        <jackson-version>2.9.10</jackson-version>
        <jackson-databind-nullable-version>0.2.0</jackson-databind-nullable-version>
-        <jackson-databind-version>2.9.10</jackson-databind-version>
+        <jackson-databind-version>2.9.10.1</jackson-databind-version>
        {{#threetenbp}}
        <jackson-threetenbp-version>2.9.10</jackson-threetenbp-version>
        {{/threetenbp}}
--- a/modules/openapi-generator/src/main/resources/Java/libraries/webclient/pom.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/webclient/pom.mustache
@@ -144,7 +144,7 @@
        <swagger-annotations-version>1.5.22</swagger-annotations-version>
        <spring-web-version>5.0.7.RELEASE</spring-web-version>
        <jackson-version>2.9.10</jackson-version>
-        <jackson-databind-version>2.9.10</jackson-databind-version>
+        <jackson-databind-version>2.9.10.1</jackson-databind-version>
        <jackson-databind-nullable-version>0.2.0</jackson-databind-nullable-version>
        <junit-version>4.12</junit-version>
        <reactor-version>3.1.8.RELEASE</reactor-version>
--- a/samples/client/petstore/java/feign/build.gradle
+++ b/samples/client/petstore/java/feign/build.gradle
@@ -97,7 +97,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
    swagger_annotations_version = "1.5.22"
    jackson_version = "2.9.10"
-    jackson_databind_version = "2.9.10"
+    jackson_databind_version = "2.9.10.1"
    jackson_databind_nullable_version = "0.2.0"
    jackson_threetenbp_version = "2.9.10"
    feign_version = "9.7.0"
--- a/samples/client/petstore/java/feign/build.sbt
+++ b/samples/client/petstore/java/feign/build.sbt
@@ -16,7 +16,7 @@ lazy val root = (project in file(".")).
      "io.github.openfeign.form" % "feign-form" % "2.1.0" % "compile",
      "com.fasterxml.jackson.core" % "jackson-core" % "2.9.10" % "compile",
      "com.fasterxml.jackson.core" % "jackson-annotations" % "2.9.10" % "compile",
-      "com.fasterxml.jackson.core" % "jackson-databind" % "2.9.10" % "compile",
+      "com.fasterxml.jackson.core" % "jackson-databind" % "2.9.10.1" % "compile",
      "com.fasterxml.jackson.datatype" % "jackson-datatype-joda" % "2.9.10" % "compile",
      "com.github.joschi.jackson" % "jackson-datatype-threetenbp" % "2.9.10" % "compile",
      "org.apache.oltu.oauth2" % "org.apache.oltu.oauth2.client" % "1.0.1" % "compile",
--- a/samples/client/petstore/java/feign/pom.xml
+++ b/samples/client/petstore/java/feign/pom.xml
@@ -283,7 +283,7 @@
        <feign-form-version>2.1.0</feign-form-version>
        <jackson-version>2.9.10</jackson-version>
        <jackson-databind-nullable-version>0.2.0</jackson-databind-nullable-version>
-        <jackson-databind-version>2.9.10</jackson-databind-version>
+        <jackson-databind-version>2.9.10.1</jackson-databind-version>
        <jackson-threetenbp-version>2.9.10</jackson-threetenbp-version>
        <junit-version>4.12</junit-version>
        <maven-plugin-version>1.0.0</maven-plugin-version>
--- a/samples/client/petstore/java/feign10x/build.gradle
+++ b/samples/client/petstore/java/feign10x/build.gradle
@@ -97,7 +97,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
    swagger_annotations_version = "1.5.22"
    jackson_version = "2.9.10"
-    jackson_databind_version = "2.9.10"
+    jackson_databind_version = "2.9.10.1"
    jackson_databind_nullable_version = "0.2.0"
    jackson_threetenbp_version = "2.9.10"
    feign_version = "10.2.3"
--- a/samples/client/petstore/java/feign10x/build.sbt
+++ b/samples/client/petstore/java/feign10x/build.sbt
@@ -16,7 +16,7 @@ lazy val root = (project in file(".")).
      "io.github.openfeign.form" % "feign-form" % "2.1.0" % "compile",
      "com.fasterxml.jackson.core" % "jackson-core" % "2.9.10" % "compile",
      "com.fasterxml.jackson.core" % "jackson-annotations" % "2.9.10" % "compile",
-      "com.fasterxml.jackson.core" % "jackson-databind" % "2.9.10" % "compile",
+      "com.fasterxml.jackson.core" % "jackson-databind" % "2.9.10.1" % "compile",
      "com.fasterxml.jackson.datatype" % "jackson-datatype-joda" % "2.9.10" % "compile",
      "com.github.joschi.jackson" % "jackson-datatype-threetenbp" % "2.9.10" % "compile",
      "org.apache.oltu.oauth2" % "org.apache.oltu.oauth2.client" % "1.0.1" % "compile",
--- a/samples/client/petstore/java/feign10x/pom.xml
+++ b/samples/client/petstore/java/feign10x/pom.xml
@@ -283,7 +283,7 @@
        <feign-form-version>2.1.0</feign-form-version>
        <jackson-version>2.9.10</jackson-version>
        <jackson-databind-nullable-version>0.2.0</jackson-databind-nullable-version>
-        <jackson-databind-version>2.9.10</jackson-databind-version>
+        <jackson-databind-version>2.9.10.1</jackson-databind-version>
        <jackson-threetenbp-version>2.9.10</jackson-threetenbp-version>
        <junit-version>4.12</junit-version>
        <maven-plugin-version>1.0.0</maven-plugin-version>
--- a/samples/client/petstore/java/webclient/pom.xml
+++ b/samples/client/petstore/java/webclient/pom.xml
@@ -123,7 +123,7 @@
        <swagger-annotations-version>1.5.22</swagger-annotations-version>
        <spring-web-version>5.0.7.RELEASE</spring-web-version>
        <jackson-version>2.9.10</jackson-version>
-        <jackson-databind-version>2.9.10</jackson-databind-version>
+        <jackson-databind-version>2.9.10.1</jackson-databind-version>
        <jackson-databind-nullable-version>0.2.0</jackson-databind-nullable-version>
        <junit-version>4.12</junit-version>
        <reactor-version>3.1.8.RELEASE</reactor-version>