Update various dependencies

patrickfav · Mar 5, 2023 · 33e9421 · 33e9421
1 parent dab8627
commit 33e9421
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 6 deletions.
diff --git a/dependency-check-suppressions.xml b/dependency-check-suppressions.xml
@@ -3,6 +3,9 @@
     <suppress>
         <cve>CVE-2022-45688</cve>
     </suppress>
+    <suppress>
+        <cve>CVE-2020-8908</cve>
+    </suppress>
     <suppress>
         <notes><![CDATA[This suppresses all CVE entries that have a score below CVSS x.]]></notes>
         <cvssBelow>5</cvssBelow>

diff --git a/modules/id-mask/pom.xml b/modules/id-mask/pom.xml
@@ -71,7 +71,7 @@
         <dependency>
             <groupId>at.favre.lib</groupId>
             <artifactId>hkdf</artifactId>
-            <version>1.0.1</version>
+            <version>2.0.0</version>
         </dependency>
         <dependency>
             <groupId>com.google.auto.value</groupId>
@@ -87,7 +87,7 @@
         <dependency>
             <groupId>org.jetbrains</groupId>
             <artifactId>annotations</artifactId>
-            <version>15.0</version>
+            <version>24.0.1</version>
         </dependency>
         <dependency>
             <groupId>net.markenwerk</groupId>

diff --git a/modules/id-mask/src/main/java/at/favre/lib/idmask/IdMaskEngine.java b/modules/id-mask/src/main/java/at/favre/lib/idmask/IdMaskEngine.java
@@ -1,7 +1,7 @@
 package at.favre.lib.idmask;
 
 import at.favre.lib.bytes.Bytes;
-import at.favre.lib.crypto.HKDF;
+import at.favre.lib.hkdf.HKDF;
 
 import javax.crypto.Cipher;
 import javax.crypto.Mac;

diff --git a/pom.xml b/pom.xml
@@ -6,7 +6,7 @@
     <parent>
         <groupId>at.favre.lib</groupId>
         <artifactId>common-parent</artifactId>
-        <version>19</version>
+        <version>20</version>
     </parent>
 
     <artifactId>id-mask-parent</artifactId>
@@ -44,9 +44,9 @@
 
     <properties>
         <maven.deploy.skip>true</maven.deploy.skip>
-        <autoValueVersion>1.6.3</autoValueVersion>
+        <autoValueVersion>1.10.1</autoValueVersion>
         <!-- set this to true if fail because of missing credentials -->
-        <commonConfig.jarSign.skip>false</commonConfig.jarSign.skip>
+        <commonConfig.jarSign.skip>true</commonConfig.jarSign.skip>
         <!-- SonarQube Config -->
         <sonar.organization>patrickfav</sonar.organization>
         <sonar.host.url>https://sonarcloud.io</sonar.host.url>