From a59d9e2437a08e3c7bd5db6dba7ee3c92965b44f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Olivier=20Lem=C3=A9e?= <olivier@agnet.fr>
Date: Thu, 29 Aug 2024 10:07:14 +0200
Subject: [PATCH] Feature 157 (#50)

* redefine inherited dependency (by testcontainers) which include 2 CVE not solved

Allow overriding of declared dependency that include CVE corrections
---
 demonstrators-line/demonstrator-v0/pom.xml           | 12 ++++++++++--
 .../demonstrator-v0/sample-project-pom.xml           |  2 +-
 .../demonstrator-v0/v0-technologies-stack.md         |  6 +++---
 3 files changed, 14 insertions(+), 6 deletions(-)

diff --git a/demonstrators-line/demonstrator-v0/pom.xml b/demonstrators-line/demonstrator-v0/pom.xml
index 42a4d92..c51a284 100644
--- a/demonstrators-line/demonstrator-v0/pom.xml
+++ b/demonstrators-line/demonstrator-v0/pom.xml
@@ -2,7 +2,7 @@
 	<modelVersion>4.0.0</modelVersion>
 	<groupId>org.cybnity</groupId>
 	<artifactId>techstack</artifactId>
-	<version>0.37.0</version>
+	<version>0.38.0</version>
 	<packaging>pom</packaging>
 	<name>CYBNITY Official Standard Techstack</name>
 
@@ -270,11 +270,19 @@
 				<version>${janusgraph.driver}</version>
 				<scope>test</scope>
 			</dependency>
+			<dependency>
+				<!-- redefine default dependency version which is embedded by testcontainers and that include 2 vulnerabilities -->
+				<!-- Take care that dependency shall be before the testcontainers dependency declared, to force replacement of inherited version with CVE -->
+				<groupId>org.apache.commons</groupId>
+				<artifactId>commons-compress</artifactId>
+				<version>1.27.1</version>
+				<scope>compile</scope>
+			</dependency>
 			<dependency>
 				<!-- Test containers components supporting test mode for Cassandra, Elasticsearch, Kafka, Grafana, Influxdb, K3S, Mongodb, Solr, Redis or Generic containers -->
 				<groupId>org.testcontainers</groupId>
 				<artifactId>testcontainers-bom</artifactId>
-				<version>1.20.0</version>
+				<version>1.20.1</version>
 				<type>pom</type>
 				<scope>import</scope>
 			</dependency>
diff --git a/demonstrators-line/demonstrator-v0/sample-project-pom.xml b/demonstrators-line/demonstrator-v0/sample-project-pom.xml
index 9a777f8..99fc916 100644
--- a/demonstrators-line/demonstrator-v0/sample-project-pom.xml
+++ b/demonstrators-line/demonstrator-v0/sample-project-pom.xml
@@ -3,7 +3,7 @@
 	<parent>
 		<groupId>org.cybnity</groupId>
 		<artifactId>techstack</artifactId>
-		<version>0.37.0</version>
+		<version>0.38.0</version>
 	</parent>
 
 	<groupId>org.cybnity.techstack.quality</groupId>
diff --git a/demonstrators-line/demonstrator-v0/v0-technologies-stack.md b/demonstrators-line/demonstrator-v0/v0-technologies-stack.md
index 5a5e1df..26535d6 100644
--- a/demonstrators-line/demonstrator-v0/v0-technologies-stack.md
+++ b/demonstrators-line/demonstrator-v0/v0-technologies-stack.md
@@ -68,8 +68,8 @@ Should allow definition and test of basic software factory implementation allowi
 None supervision requirements required regarding the step of the CYBNITY Foundation project.
 
 # CURRENT MPP OFFICIAL VERSION
-- Version: 0.37.0
-- Released at: August, 28, 2024
+- Version: 0.38.0
+- Released at: August, 29, 2024
 - Status: `RELEASED`
 - Documentation: [technologies-stack-analysis](technologies-stack-analysis.md)
 - Deliverables:
@@ -80,7 +80,7 @@ None supervision requirements required regarding the step of the CYBNITY Foundat
     <parent>
       <groupId>org.cybnity</groupId>
       <artifactId>techstack</artifactId>
-      <version>0.37.0</version>
+      <version>0.38.0</version>
     </parent>
 
     <repositories>