#24: Upgrade dependencies (#25)

.vscode/settings.json

@@ -0,0 +1,21 @@
+{
+    "editor.formatOnSave": true,
+    "editor.codeActionsOnSave": {
+        "source.organizeImports": true,
+        "source.generate.finalModifiers": true,
+        "source.fixAll": true
+    },
+    "java.codeGeneration.useBlocks": true,
+    "java.saveActions.organizeImports": true,
+    "java.sources.organizeImports.starThreshold": 3,
+    "java.sources.organizeImports.staticStarThreshold": 3,
+    "java.test.config": {
+        "vmArgs": [
+            "-Djava.util.logging.config.file=src/test/resources/logging.properties"
+        ]
+    },
+    "sonarlint.connectedMode.project": {
+        "connectionId": "exasol",
+        "projectKey": "com.exasol:virtual-schema-shared-integration-tests"
+    }
+}

doc/changes/changes_2.2.2.md

@@ -0,0 +1,28 @@
+# virtual-schema-shared-integration-tests 2.2.2, released 2022-09-27
+
+Code name: Fix vulnerabilities in dependencies
+
+## Summary
+
+This release fixes CVE-2022-38751 and CVE-2022-38752 in snakeyaml.
+
+## Features
+
+* #24: Fix vulnerabilities in dependencies
+
+## Dependency Updates
+
+### Compile Dependency Updates
+
+* Updated `com.exasol:error-reporting-java:0.4.1` to `1.0.0`
+* Updated `com.exasol:virtual-schema-common-java:15.3.3` to `16.1.2`
+* Updated `org.junit.jupiter:junit-jupiter:5.9.0` to `5.9.1`
+* Updated `org.yaml:snakeyaml:1.31` to `1.33`
+
+### Test Dependency Updates
+
+* Updated `org.mockito:mockito-junit-jupiter:4.7.0` to `4.8.0`
+
+### Plugin Dependency Updates
+
+* Updated `com.exasol:project-keeper-maven-plugin:2.6.2` to `2.8.0`

pom.xml

@@ -3,30 +3,10 @@
     <modelVersion>4.0.0</modelVersion>
     <groupId>com.exasol</groupId>
     <artifactId>virtual-schema-shared-integration-tests</artifactId>
-    <version>2.2.1</version>
+    <version>2.2.2</version>
     <name>virtual-schema-shared-integration-tests</name>
     <description>Abstract integration tests for virtual schemas</description>
     <url>https://github.com/exasol/virtual-schema-shared-integration-tests/</url>
-    <licenses>
-        <license>
-            <name>MIT</name>
-            <url>https://opensource.org/licenses/MIT</url>
-            <distribution>repo</distribution>
-        </license>
-    </licenses>
-    <developers>
-        <developer>
-            <name>Exasol</name>
-            <email>[email protected]</email>
-            <organization>Exasol AG</organization>
-            <organizationUrl>https://www.exasol.com/</organizationUrl>
-        </developer>
-    </developers>
-    <scm>
-        <connection>scm:git:https://github.com/exasol/virtual-schema-shared-integration-tests.git</connection>
-        <developerConnection>scm:git:https://github.com/exasol/virtual-schema-shared-integration-tests.git</developerConnection>
-        <url>https://github.com/exasol/virtual-schema-shared-integration-tests/tree/main</url>
-    </scm>
     <distributionManagement>
         <snapshotRepository>
             <id>ossrh</id>
@@ -62,17 +42,17 @@
         <dependency>
             <groupId>org.yaml</groupId>
             <artifactId>snakeyaml</artifactId>
-            <version>1.31</version>
+            <version>1.33</version>
         </dependency>
         <dependency>
             <groupId>com.exasol</groupId>
             <artifactId>error-reporting-java</artifactId>
-            <version>0.4.1</version>
+            <version>1.0.0</version>
         </dependency>
         <dependency>
             <groupId>org.junit.jupiter</groupId>
             <artifactId>junit-jupiter</artifactId>
-            <version>5.9.0</version>
+            <version>5.9.1</version>
         </dependency>
         <dependency>
             <groupId>org.hamcrest</groupId>
@@ -82,7 +62,7 @@
         <dependency>
             <groupId>com.exasol</groupId>
             <artifactId>virtual-schema-common-java</artifactId>
-            <version>15.3.3</version>
+            <version>16.1.2</version>
         </dependency>
         <!-- Test dependencies -->
         <dependency>
@@ -106,13 +86,14 @@
         <dependency>
             <groupId>org.mockito</groupId>
             <artifactId>mockito-junit-jupiter</artifactId>
-            <version>4.7.0</version>
+            <version>4.8.0</version>
             <scope>test</scope>
         </dependency>
         <dependency>
             <groupId>org.apache.derby</groupId>
             <artifactId>derby</artifactId>
-            <version>10.15.2.0</version> <!-- Versions >= 10.16.x require Java 17-->
+            <version>10.15.2.0</version>
+            <!-- Versions >= 10.16.x require Java 17-->
             <scope>test</scope>
         </dependency>
     </dependencies>
@@ -121,7 +102,7 @@
             <plugin>
                 <groupId>com.exasol</groupId>
                 <artifactId>project-keeper-maven-plugin</artifactId>
-                <version>2.6.2</version>
+                <version>2.8.0</version>
                 <executions>
                     <execution>
                         <goals>
@@ -130,12 +111,23 @@
                     </execution>
                 </executions>
             </plugin>
+            <plugin>
+                <groupId>org.sonatype.ossindex.maven</groupId>
+                <artifactId>ossindex-maven-plugin</artifactId>
+                <configuration>
+                    <excludeVulnerabilityIds>
+                        <!-- False positive in snakeyaml. According to https://bitbucket.org/snakeyaml/snakeyaml/issues/531/stackoverflow-oss-fuzz-47081
+                             this is already fixed in 1.32. -->
+                        <exclude>CVE-2022-38752</exclude>
+                    </excludeVulnerabilityIds>
+                </configuration>
+            </plugin>
         </plugins>
     </build>
     <parent>
         <artifactId>virtual-schema-shared-integration-tests-generated-parent</artifactId>
         <groupId>com.exasol</groupId>
-        <version>2.2.1</version>
+        <version>2.2.2</version>
         <relativePath>pk_generated_parent.pom</relativePath>
     </parent>
-</project>
+</project>