Skip to content

Commit 83b38f0

Browse files
committed
Add dependencyManagement for jackson and okhttp
1 parent f08d8f6 commit 83b38f0

File tree

1 file changed

+20
-7
lines changed

1 file changed

+20
-7
lines changed

spotify-web-api-java/pom.xml

Lines changed: 20 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -21,28 +21,42 @@
2121

2222
<properties>
2323
<okhttp.version>4.9.3</okhttp.version>
24-
<jackson.version>2.13.2</jackson.version>
24+
<jackson.version>2.13.2.20220328</jackson.version>
2525

2626
<moditect.module.name>de.sonallux.spotify.api</moditect.module.name>
2727
</properties>
2828

29+
<dependencyManagement>
30+
<dependencies>
31+
<dependency>
32+
<groupId>com.fasterxml.jackson</groupId>
33+
<artifactId>jackson-bom</artifactId>
34+
<version>${jackson.version}</version>
35+
<type>pom</type>
36+
<scope>import</scope>
37+
</dependency>
38+
<dependency>
39+
<groupId>com.squareup.okhttp3</groupId>
40+
<artifactId>okhttp-bom</artifactId>
41+
<version>${okhttp.version}</version>
42+
<type>pom</type>
43+
<scope>import</scope>
44+
</dependency>
45+
</dependencies>
46+
</dependencyManagement>
47+
2948
<dependencies>
3049
<dependency>
3150
<groupId>com.squareup.okhttp3</groupId>
3251
<artifactId>okhttp</artifactId>
33-
<version>${okhttp.version}</version>
3452
</dependency>
3553
<dependency>
3654
<groupId>com.fasterxml.jackson.core</groupId>
3755
<artifactId>jackson-databind</artifactId>
38-
<!-- fixes CVE-2020-36518. Only for the affected artifact jackson-databind a release was made. Once a new
39-
full jackson release is available replace the hardcoded version and use property jackson.version again -->
40-
<version>2.13.2.1</version>
4156
</dependency>
4257
<dependency>
4358
<groupId>com.fasterxml.jackson.datatype</groupId>
4459
<artifactId>jackson-datatype-jsr310</artifactId>
45-
<version>${jackson.version}</version>
4660
</dependency>
4761
<dependency>
4862
<groupId>org.projectlombok</groupId>
@@ -65,7 +79,6 @@
6579
<dependency>
6680
<groupId>com.squareup.okhttp3</groupId>
6781
<artifactId>mockwebserver</artifactId>
68-
<version>${okhttp.version}</version>
6982
<scope>test</scope>
7083
<exclusions>
7184
<exclusion>

0 commit comments

Comments
 (0)