fix: bumping overrides for Snyk on Snyk

snyk · Nov 30, 2023 · 532c4ce · 532c4ce
1 parent 5bb8e54
commit 532c4ce
Showing 1 changed file with 20 additions and 2 deletions.
diff --git a/pom.xml b/pom.xml
@@ -119,6 +119,14 @@
             <groupId>ch.qos.logback</groupId>
             <artifactId>logback-classic</artifactId>
           </exclusion>
+          <exclusion>
+            <groupId>ch.qos.logback</groupId>
+            <artifactId>logback-core</artifactId>
+          </exclusion>
+          <exclusion>
+            <groupId>org.bouncycastle</groupId>
+            <artifactId>bcprov-jdk15on</artifactId>
+          </exclusion>
         </exclusions>
       </dependency>
       <dependency>
@@ -146,7 +154,17 @@
         <artifactId>jackson-annotations</artifactId>
         <version>${jackson-annotations.version}</version>
       </dependency>
-      <!-- Add a safe version of logback-classic as an override -->
+      <!-- Add a safe versions for SoS as overrides -->
+      <dependency>
+        <groupId>org.bouncycastle</groupId>
+        <artifactId>bcprov-jdk15on</artifactId>
+        <version>1.70</version>
+      </dependency>
+      <dependency>
+        <groupId>ch.qos.logback</groupId>
+        <artifactId>logback-core</artifactId>
+        <version>1.4.13</version>
+      </dependency>
       <dependency>
         <groupId>ch.qos.logback</groupId>
         <artifactId>logback-classic</artifactId>
@@ -167,4 +185,4 @@
       <url>https://releases.jfrog.io/artifactory/jcenter/</url>
     </repository>
   </repositories>
-</project>
+</project>