PLUTO-799 Upgrade to Spring Framework 5.3.18 and Thymeleaf 3.0.13.RELEASE due to CVE-2022-22965
diff --git a/maven-archetypes/mvcbean-thymeleaf-portlet-archetype/src/main/resources/archetype-resources/build.gradle b/maven-archetypes/mvcbean-thymeleaf-portlet-archetype/src/main/resources/archetype-resources/build.gradle
index 41e4360..d7bd9a0 100644
--- a/maven-archetypes/mvcbean-thymeleaf-portlet-archetype/src/main/resources/archetype-resources/build.gradle
+++ b/maven-archetypes/mvcbean-thymeleaf-portlet-archetype/src/main/resources/archetype-resources/build.gradle
@@ -5,7 +5,7 @@
}
dependencies {
- compile group: 'org.apache.portals.pluto', name: 'thymeleaf-mvc-portlet-cdi', version:'3.1.1'
+ compile group: 'org.apache.portals.pluto', name: 'thymeleaf-mvc-portlet-cdi', version:'3.1.2'
compile group: 'org.slf4j', name: 'slf4j-api', version:'1.7.25'
compile group: 'org.apache.logging.log4j', name: 'log4j-slf4j-impl', version:'2.17.1'
providedCompile group: 'javax.mvc', name: 'javax.mvc-api', version:'1.0-pfd'
diff --git a/maven-archetypes/mvcbean-thymeleaf-portlet-archetype/src/main/resources/archetype-resources/pom.xml b/maven-archetypes/mvcbean-thymeleaf-portlet-archetype/src/main/resources/archetype-resources/pom.xml
index a81f552..6b4c70a 100644
--- a/maven-archetypes/mvcbean-thymeleaf-portlet-archetype/src/main/resources/archetype-resources/pom.xml
+++ b/maven-archetypes/mvcbean-thymeleaf-portlet-archetype/src/main/resources/archetype-resources/pom.xml
@@ -80,7 +80,7 @@
<dependency>
<groupId>org.apache.portals.pluto.templating</groupId>
<artifactId>thymeleaf-mvc-portlet-cdi</artifactId>
- <version>3.1.1</version>
+ <version>3.1.2</version>
</dependency>
<dependency>
<groupId>org.slf4j</groupId>
diff --git a/pom.xml b/pom.xml
index 61f33fd..bdd56ea 100644
--- a/pom.xml
+++ b/pom.xml
@@ -245,7 +245,7 @@
<commons-digester.version>1.8</commons-digester.version>
<commons-cli.version>1.0</commons-cli.version>
<slf4j.version>1.7.5</slf4j.version>
- <springframework.version>5.3.14</springframework.version>
+ <springframework.version>5.3.18</springframework.version>
<springsecurity.version>5.5.1</springsecurity.version>
<maven.version>2.0.5</maven.version>
<ant.version>1.6.5</ant.version>
@@ -569,7 +569,7 @@
<dependency>
<groupId>org.thymeleaf</groupId>
<artifactId>thymeleaf</artifactId>
- <version>3.0.11.RELEASE</version>
+ <version>3.0.13.RELEASE</version>
</dependency>
<dependency>
<groupId>commons-io</groupId>
