diff --git a/dependencyCheckSuppression.xml b/dependencyCheckSuppression.xml index 1bcc0d5a8b..67b14dd54a 100644 --- a/dependencyCheckSuppression.xml +++ b/dependencyCheckSuppression.xml @@ -246,5 +246,128 @@ CVE-2005-1260 + + + + ^pkg:maven/org\.apache\.lucene/lucene-analysis-common@.*$ + CVE-2024-45772 + + + + + ^pkg:maven/org\.apache\.lucene/lucene-backward-codecs@.*$ + CVE-2024-45772 + + + + + ^pkg:maven/org\.apache\.lucene/lucene-core@.*$ + CVE-2024-45772 + + + + + ^pkg:maven/org\.apache\.lucene/lucene-queries@.*$ + CVE-2024-45772 + + + + + ^pkg:maven/org\.apache\.lucene/lucene-queryparser@.*$ + CVE-2024-45772 + + + + + ^pkg:maven/org\.apache\.lucene/lucene-sandbox@.*$ + CVE-2024-45772 + + + + + + + ^pkg:maven/org\.glassfish\.jaxb/jaxb-core@.*$ + CVE-2024-9329 + + + + + ^pkg:maven/org\.glassfish\.jaxb/jaxb-core@.*$ + CVE-2024-9329 + + + + + ^pkg:maven/org\.glassfish\.jaxb/jaxb-core@.*$ + CVE-2024-9329 + + + + + ^pkg:maven/org\.glassfish\.jaxb/jaxb-runtime@.*$ + CVE-2024-9329 + + + + + ^pkg:maven/org\.glassfish\.jaxb/jaxb-runtime@.*$ + CVE-2024-9329 + + + + + ^pkg:maven/org\.glassfish\.hk2/osgi-resource-locator@.*$ + CVE-2024-9329 + + + + + ^pkg:maven/org\.glassfish\.jaxb/txw2@.*$ + CVE-2024-9329 + + + + + ^pkg:maven/org\.glassfish\.jaxb/txw2@.*$ + CVE-2024-9329 + + + diff --git a/gradle.properties b/gradle.properties index d9f2de25fb..0d3934214f 100644 --- a/gradle.properties +++ b/gradle.properties @@ -47,7 +47,7 @@ buildFromSource=true # The default version for LabKey artifacts that are built or that we depend on. # override in an individual module's gradle.properties file as necessary -labkeyVersion=24.7.7 +labkeyVersion=24.7.8 labkeyClientApiVersion=6.1.0 # Version numbers for the various binary artifacts that are included when @@ -111,7 +111,7 @@ apacheTomcatVersion=10.1.30 asmVersion=9.7 # Apache Batik -- Batik version needs to be compatible with Apache FOP, but we need to pull in batik-codec separately -batikVersion=1.17 +batikVersion=1.18 # sync with Tika version (or later) bouncycastlePgpVersion=1.78 @@ -152,7 +152,7 @@ eigenbaseXomVersion=1.3.7 flyingsaucerVersion=R8 # Apache FOP -- linked to Apache Batik version above -fopVersion=2.9 +fopVersion=2.10 # Force latest for consistency googleAutoValueAnnotationsVersion=1.10.4