Fixes #3981 - Set Apache Compress as a direct dependency (#3982)

piranhacloud · Sep 25, 2024 · d042c71 · d042c71
1 parent 78eaf32
commit d042c71
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 1 deletion.
diff --git a/pom.xml b/pom.xml
@@ -77,7 +77,8 @@
  <angus.mail.version>2.0.3</angus.mail.version>
  <arquillian.version>1.8.0.Final</arquillian.version>
  <bcel.version>6.10.0</bcel.version>
- <checkstyle.version>10.17.0</checkstyle.version>
+ <checkstyle.version>10.18.1</checkstyle.version>
+ <commons-compress.version>1.26.2</commons-compress.version>
  <commons-fileupload2-jakarta-servlet6.version>2.0.0-M2</commons-fileupload2-jakarta-servlet6.version>
  <crac.version>0.1.3</crac.version>
  <eclipselink.version>5.0.0-B02</eclipselink.version>
@@ -169,6 +170,12 @@
 
  <dependencyManagement>
  <dependencies>
+ <!-- Apache Commons Compress -->
+ <dependency>
+ <groupId>org.apache.commons</groupId>
+ <artifactId>commons-compress</artifactId>
+ <version>${commons-compress.version}</version>
+ </dependency>
  <!-- Apache Commons File Upload -->
  <dependency>
  <groupId>org.apache.commons</groupId>

diff --git a/resource/shrinkwrap/pom.xml b/resource/shrinkwrap/pom.xml
@@ -16,6 +16,12 @@
 
  <dependencies>
  <!-- compile -->
+ <!-- declared as a direct dependency to deal with CVEs -->
+ <dependency>
+ <groupId>org.apache.commons</groupId>
+ <artifactId>commons-compress</artifactId>
+ <scope>compile</scope>
+ </dependency>
  <dependency>
  <groupId>org.jboss.shrinkwrap</groupId>
  <artifactId>shrinkwrap-impl-base</artifactId>