Fix/Bump Log4j to 2.16 (#255)

* Bump Log4J Version to 2.16 * Bump Spring Version to 2.5.7 * bump verification-server version Co-authored-by: Andreas Scheibal <[email protected]>
corona-warn-app · Dec 15, 2021 · 32735e3 · 32735e3
1 parent 4ecb0ba
commit 32735e3
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/pom.xml b/pom.xml
@@ -5,7 +5,7 @@
 
   <groupId>app.coronawarn.verification</groupId>
   <artifactId>cwa-verification-server</artifactId>
-  <version>1.5.3-SNAPSHOT</version>
+  <version>1.5.4-SNAPSHOT</version>
   <packaging>jar</packaging>
 
   <name>cwa-verification-server</name>
@@ -34,7 +34,7 @@
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
     <!-- dependencies -->
-    <spring.boot.version>2.5.4</spring.boot.version>
+    <spring.boot.version>2.5.7</spring.boot.version>
     <spring-security.version>5.3.10.RELEASE</spring-security.version>
     <spring.cloud.version>2020.0.4</spring.cloud.version>
     <lombok.version>1.18.16</lombok.version>
@@ -91,6 +91,12 @@
         <artifactId>liquibase-core</artifactId>
         <version>${liquibase.version}</version>
       </dependency>
+      <dependency>
+        <groupId>org.apache.logging.log4j</groupId>
+        <artifactId>log4j-bom</artifactId>
+        <version>2.16.0</version>
+        <scope>import</scope>
+      </dependency>
     </dependencies>
   </dependencyManagement>