From 1d7baa9110798c8359c370e86e6ccacafc5fabc0 Mon Sep 17 00:00:00 2001
From: Felix Dittrich <31076102+f11h@users.noreply.github.com>
Date: Mon, 26 Sep 2022 15:56:22 +0200
Subject: [PATCH] Update Dependencies (#207)

---
 owasp/suppressions.xml |  5 ++++-
 pom.xml                | 22 +++++-----------------
 2 files changed, 9 insertions(+), 18 deletions(-)

diff --git a/owasp/suppressions.xml b/owasp/suppressions.xml
index 5786d342..e6791d3d 100644
--- a/owasp/suppressions.xml
+++ b/owasp/suppressions.xml
@@ -19,7 +19,10 @@
     <suppress>
         <notes>Only affecting example code shipped with tomcat.</notes>
         <cve>CVE-2022-34305</cve>
-
+    </suppress>
+    <suppress>
+        <notes>Bug is fixed with SnameYAML 1.32, but CVE Matcher is invalid</notes>
+        <cve>CVE-2022-38752</cve>
     </suppress>
 
 </suppressions>
diff --git a/pom.xml b/pom.xml
index 3c4a02b1..54f04299 100644
--- a/pom.xml
+++ b/pom.xml
@@ -7,7 +7,7 @@
     <parent>
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-starter-parent</artifactId>
-        <version>2.7.3</version>
+        <version>2.7.4</version>
         <relativePath/>
     </parent>
 
@@ -46,16 +46,15 @@
         <owasp.version>7.1.2</owasp.version>
         <spring.security.version>5.7.3</spring.security.version>
         <lombok.version>1.18.24</lombok.version>
-        <liquibase.version>4.15.0</liquibase.version>
+        <liquibase.version>4.16.1</liquibase.version>
         <springdoc.version>1.6.11</springdoc.version>
         <mapstruct.version>1.5.2.Final</mapstruct.version>
         <bcpkix.version>1.70</bcpkix.version>
         <semver4j.version>3.1.0</semver4j.version>
         <json-schema.version>1.14.1</json-schema.version>
-        <shedlock.version>4.41.0</shedlock.version>
-        <spring.cloud.version>2021.0.3</spring.cloud.version>
+        <shedlock.version>4.42.0</shedlock.version>
+        <spring.cloud.version>2021.0.4</spring.cloud.version>
         <h2.version>2.1.214</h2.version>
-        <hibernate.version>5.6.11.Final</hibernate.version>
         <dgc.lib.version>1.3.1</dgc.lib.version>
         <!-- plugins -->
         <plugin.maven-assembly.version>3.4.2</plugin.maven-assembly.version>
@@ -178,17 +177,11 @@
         <dependency>
             <groupId>org.yaml</groupId>
             <artifactId>snakeyaml</artifactId>
-            <version>1.31</version>
+            <version>1.32</version>
         </dependency>
         <dependency>
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-starter-data-jpa</artifactId>
-            <exclusions>
-                <exclusion>
-                    <groupId>org.hibernate</groupId>
-                    <artifactId>hibernate-core</artifactId>
-                </exclusion>
-            </exclusions>
         </dependency>
         <dependency>
             <groupId>org.springframework.boot</groupId>
@@ -245,11 +238,6 @@
             <version>${h2.version}</version>
             <scope>runtime</scope>
         </dependency>
-        <dependency>
-            <groupId>org.hibernate</groupId>
-            <artifactId>hibernate-core</artifactId>
-            <version>${hibernate.version}</version>
-        </dependency>
         <dependency>
             <groupId>org.mapstruct</groupId>
             <artifactId>mapstruct</artifactId>