From 024a48c46d5aa2359b34b5ed5dc41a865ea9dedc Mon Sep 17 00:00:00 2001
From: Thomas <>
Date: Mon, 22 Aug 2022 10:38:03 +0200
Subject: chore(core): update third-party libs

---
 eaaf_modules/eaaf_module_pvp2_core/pom.xml | 14 ++++++++++++++
 pom.xml                                    | 19 ++++++++++++-------
 2 files changed, 26 insertions(+), 7 deletions(-)

diff --git a/eaaf_modules/eaaf_module_pvp2_core/pom.xml b/eaaf_modules/eaaf_module_pvp2_core/pom.xml
index 748f81b8..0fd59856 100644
--- a/eaaf_modules/eaaf_module_pvp2_core/pom.xml
+++ b/eaaf_modules/eaaf_module_pvp2_core/pom.xml
@@ -28,6 +28,16 @@
     <dependency>
       <groupId>org.opensaml</groupId>
       <artifactId>opensaml-saml-impl</artifactId>
+      <exclusions>
+        <exclusion>
+          <groupId>org.bouncycastle</groupId>
+          <artifactId>bcpkix-jdk15on</artifactId>
+        </exclusion>
+        <exclusion>
+          <groupId>org.bouncycastle</groupId>
+          <artifactId>bcprov-jdk15on</artifactId>
+        </exclusion>
+      </exclusions>
     </dependency>
     <dependency>
       <groupId>org.opensaml</groupId>
@@ -67,6 +77,10 @@
       <groupId>org.bouncycastle</groupId>
       <artifactId>bcprov-jdk18on</artifactId>
     </dependency>
+    <dependency>
+      <groupId>org.bouncycastle</groupId>
+      <artifactId>bcpkix-jdk18on</artifactId>
+    </dependency>    
 
     <dependency>
       <groupId>org.springframework</groupId>
diff --git a/pom.xml b/pom.xml
index 60b3a789..09e4dfef 100644
--- a/pom.xml
+++ b/pom.xml
@@ -47,16 +47,16 @@
     <io.grpc-core.version>1.42.1</io.grpc-core.version>
 
     <!-- Other third-party libs -->
-    <spring-boot-starter-web.version>2.6.8</spring-boot-starter-web.version>
-    <org.springframework.version>5.3.21</org.springframework.version>
+    <spring-boot-starter-web.version>2.6.11</spring-boot-starter-web.version>
+    <org.springframework.version>5.3.22</org.springframework.version>
     <org.opensaml.version>4.0.1</org.opensaml.version>
     <org.apache.santuario.xmlsec.version>2.3.1</org.apache.santuario.xmlsec.version>
     <org.cryptacular.version>1.2.5</org.cryptacular.version>
-    <org.bouncycastle.bcprov-jdk18on.version>1.71</org.bouncycastle.bcprov-jdk18on.version>
-    <org.bouncycastle.bctls-jdk18on.version>1.71</org.bouncycastle.bctls-jdk18on.version>
+    <org.bouncycastle.bcprov-jdk18on.version>1.71.1</org.bouncycastle.bcprov-jdk18on.version>
+    <org.bouncycastle.bctls-jdk18on.version>1.71.1</org.bouncycastle.bctls-jdk18on.version>
 
     <org.slf4j.version>1.7.36</org.slf4j.version>
-    <log4j.version>2.17.2</log4j.version>
+    <log4j.version>2.18.0</log4j.version>
     <ch.qos.logback.version>1.2.11</ch.qos.logback.version>
     
     <commons-codec.version>1.15</commons-codec.version>
@@ -71,7 +71,7 @@
     
     <org.apache.velocity.version>2.3</org.apache.velocity.version>
     <javax.annotation-api>1.3.2</javax.annotation-api>
-    <joda-time.version>2.10.14</joda-time.version>
+    <joda-time.version>2.11.0</joda-time.version>
     <jsr305.version>3.0.2</jsr305.version>
     <com.google.guava.version>31.1-jre</com.google.guava.version>
     <org.owasp.encoder.version>1.2.3</org.owasp.encoder.version>
@@ -81,7 +81,7 @@
 
     <com.fasterxml.jackson.core.version>2.13.3</com.fasterxml.jackson.core.version>
     <com.fasterxml.jackson.databind.version>2.13.3</com.fasterxml.jackson.databind.version>
-    <gson.version>2.8.9</gson.version>
+    <gson.version>2.9.1</gson.version>
     <org.bitbucket.b_c.jose4j.version>0.7.12</org.bitbucket.b_c.jose4j.version>
 
     <jaxen.jaxen.version>1.2.0</jaxen.jaxen.version>
@@ -546,6 +546,11 @@
         <artifactId>bcprov-jdk18on</artifactId>
         <version>${org.bouncycastle.bcprov-jdk18on.version}</version>
       </dependency>
+      <dependency>
+        <groupId>org.bouncycastle</groupId>
+        <artifactId>bcpkix-jdk18on</artifactId>
+        <version>${org.bouncycastle.bcprov-jdk18on.version}</version>
+      </dependency>
       <dependency>
         <groupId>org.bouncycastle</groupId>
         <artifactId>bctls-jdk18on</artifactId>
-- 
cgit v1.2.3