fix(cve): Upgrade kafka_2.13 from 3.4.0 to 3.4.1 (#1464)

This fixes the GHSA-jgvc-jfgh-rjvv from the jose4j dependency from the kafka_2.13 package.
GIScience · Jun 12, 2023 · db108a1 · db108a1
1 parent 84c04e3
commit db108a1
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -61,6 +61,8 @@ RELEASING:
 - Upgrade geotools from 28.2 to 29.0 [#1422](https://github.com/GIScience/openrouteservice/pull/1422)
 - upgrade graphhopper version to v4.6 [#1427](https://github.com/GIScience/openrouteservice/pull/1427)
 - Map matching of traffic data ([#1430](https://github.com/GIScience/openrouteservice/pull/1430))
+- Upgrade kafka_2.13 from 3.4.0 to 3.4.1 ([#1463](https://github.com/GIScience/openrouteservice/issues/1463))
+
 ### Removed
 - AccelerationWeighting ([#1454](https://github.com/GIScience/openrouteservice/pull/1454))
 

diff --git a/openrouteservice/pom.xml b/openrouteservice/pom.xml
@@ -50,7 +50,7 @@
         <geotools.version>29.0</geotools.version>
         <slf4j.version>2.0.7</slf4j.version>
         <log4j.version>2.20.0</log4j.version>
-        <kafka.version>3.4.0</kafka.version>
+        <kafka.version>3.4.1</kafka.version>
         <fasterxml.jackson.version>2.15.0</fasterxml.jackson.version>
         <sonar.projectKey>GIScience_openrouteservice</sonar.projectKey>
         <sonar.organization>giscience</sonar.organization>