Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Override postgresql version defined by spring-boot-dependencies #1416

Merged
merged 2 commits into from
Nov 12, 2024

Conversation

bennavapbc
Copy link
Contributor

🎫 Ticket

https://jira.cms.gov/browse/AB2D-6397

🛠 Changes

ℹ️ Context

The postgres version defined by spring-boot-dependencies is 42.3.8. Snyk flags this version as vulnerable.

Modules common and job override this version to 42.7.3. However, when another module imports one of these modules, Maven does not select this overridden version and instead selects the version defined by spring-boot-dependencies.

🧪 Validation

Running mvn dependency:tree on main shows different versions being used for different modules.
On the feature branch, the same version is used across all modules.

image

@bennavapbc bennavapbc requested a review from a team as a code owner November 6, 2024 20:47
@bennavapbc bennavapbc merged commit 554c4ee into main Nov 12, 2024
9 of 11 checks passed
@bennavapbc bennavapbc deleted the AB2D-6397-postgres-version branch November 12, 2024 22:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants