Merge pull request #125 from vmware/rpraveen-vmware-dependencyFix

Resolving vulnerablities by upgrading versions and excluding dependen…

Author: rpraveen-vmware

mangle-byteman-root/pom.xml

@@ -50,6 +50,7 @@
 		<pushChanges>false</pushChanges>
 		<autoVersionSubmodules>true</autoVersionSubmodules>
 		<gson.version>2.8.5</gson.version>
+		<plexus-archiver.version>3.6.0</plexus-archiver.version>
 	</properties>
 	<dependencyManagement>
 		<dependencies>
@@ -111,7 +112,7 @@
 						<dependency>
 							<groupId>org.codehaus.plexus</groupId>
 							<artifactId>plexus-archiver</artifactId>
-							<version>3.0.3</version>
+							<version>${plexus-archiver.version}</version>
 						</dependency>
 					</dependencies>
 				</plugin>
@@ -128,7 +129,7 @@
 						<dependency>
 							<groupId>org.codehaus.plexus</groupId>
 							<artifactId>plexus-archiver</artifactId>
-							<version>3.0.3</version>
+							<version>${plexus-archiver.version}</version>
 						</dependency>
 					</dependencies>
 				</plugin>
@@ -155,7 +156,7 @@
 						<dependency>
 							<groupId>org.codehaus.plexus</groupId>
 							<artifactId>plexus-archiver</artifactId>
-							<version>3.0.3</version>
+							<version>${plexus-archiver.version}</version>
 						</dependency>
 					</dependencies>
 				</plugin>
@@ -256,4 +257,4 @@
 			</build>
 		</profile>
 	</profiles>
-</project>
+</project>

mangle-models/pom.xml

@@ -73,6 +73,10 @@
 			<groupId>org.apache.tomcat.embed</groupId>
 			<artifactId>tomcat-embed-websocket</artifactId>
 		</dependency>
+		<dependency>
+		      <groupId>org.jetbrains.kotlin</groupId>
+                       <artifactId>kotlin-stdlib</artifactId>
+		</dependency>
 		<dependency>
 			<groupId>org.springframework.hateoas</groupId>
 			<artifactId>spring-hateoas</artifactId>

mangle-utils/pom.xml

@@ -29,7 +29,7 @@
 	<properties>
 		<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
 		<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
-		<apache-log4j-api.version>2.17.0</apache-log4j-api.version>
+		<apache-log4j-api.version>2.17.1</apache-log4j-api.version>
 	</properties>
 
 	<dependencies>

pom.xml

@@ -95,11 +95,11 @@
 		<hazelcast-kubernetes.version>1.3.1</hazelcast-kubernetes.version>
 		<org.json.version>20180130</org.json.version>
 		<net.jpountz.lz4.version>1.3.0</net.jpountz.lz4.version>
-		<log4j.version>2.17.1</log4j.version>
 		<avro-version>1.10.2</avro-version>
+                <log4j.version>2.17.1</log4j.version>
 		<asynchttpclient.version>2.12.3</asynchttpclient.version>
-		<netty.version>4.1.86.Final</netty.version>
 		<tomcat.version>9.0.54</tomcat.version>
+		<netty.version>4.1.86.Final</netty.version>
 		<netty-reactive-streams-version>2.0.5</netty-reactive-streams-version>
 		<aws-sdk.version>1.11.579</aws-sdk.version>
 		<azure-sdk.version>1.29.0</azure-sdk.version>
@@ -138,10 +138,10 @@
 				<artifactId>spring-core</artifactId>
 				<version>${springframework.version}</version>
 				<exclusions>
-				   <exclusion>
-				      <groupId>org.jetbrains.kotlin</groupId>
-                                      <artifactId>kotlin-stdlib</artifactId>
-				   </exclusion>
+				    <exclusion>
+				       <groupId>org.jetbrains.kotlin</groupId>
+                                       <artifactId>kotlin-stdlib</artifactId>
+				    </exclusion>
 				</exclusions>
 			</dependency>
 			<dependency>
@@ -155,9 +155,9 @@
 				<version>${springframework-plugin.version}</version>
 			</dependency>
 			<dependency>
-                               <groupId>org.jetbrains.kotlin</groupId>
-                               <artifactId>kotlin-stdlib</artifactId>
-                               <version>${kotlin-stdlib.version}</version>
+                                <groupId>org.jetbrains.kotlin</groupId>
+                                <artifactId>kotlin-stdlib</artifactId>
+                                <version>${kotlin-stdlib.version}</version>
                         </dependency>
 			<dependency>
 				<groupId>org.springframework.plugin</groupId>
@@ -320,23 +320,23 @@
 				<artifactId>spring-security-core</artifactId>
 				<version>${spring.security.core.version}</version>
 				<exclusions>
-				    <exclusion>
-				       <groupId>com.fasterxml.jackson.core</groupId>
-                                       <artifactId>jackson-databind</artifactId>
+				     <exclusion>
+				        <groupId>com.fasterxml.jackson.core</groupId>
+                                        <artifactId>jackson-databind</artifactId>
+				     </exclusion>
+				     <exclusion>
+				       <groupId>org.springframework</groupId>
+                                       <artifactId>spring-beans</artifactId>
+				     </exclusion>
+				     <exclusion>
+				       <groupId>org.springframework</groupId>
+                                       <artifactId>spring-core</artifactId>
 				    </exclusion>
-				    <exclusion>
-				      <groupId>org.springframework</groupId>
-                                      <artifactId>spring-beans</artifactId>
-				    </exclusion>
-				    <exclusion>
-				      <groupId>org.springframework</groupId>
-                                      <artifactId>spring-core</artifactId>
-				   </exclusion>
-				    <exclusion>
-				      <groupId>org.springframework</groupId>
-                                      <artifactId>spring-expression</artifactId>
-				    </exclusion>
-				</exclusions>
+				     <exclusion>
+				       <groupId>org.springframework</groupId>
+                                       <artifactId>spring-expression</artifactId>
+				     </exclusion>
+				 </exclusions>
 			</dependency>
 			<dependency>
 				<groupId>org.springframework.security</groupId>