Skip to content

Commit 35d604d

Browse files
Ian Sigmonlabkey-adam
andauthored
Update dependency checker tool to 12.1.0 (#1002)
* Suppress erroneous labkey-client-api "CVEs" * Bump dependency checker --------- Co-authored-by: Adam Rauch <adam@labkey.com>
1 parent 4084887 commit 35d604d

File tree

2 files changed

+26
-1
lines changed

2 files changed

+26
-1
lines changed

dependencyCheckSuppression.xml

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -387,5 +387,30 @@
387387
<packageUrl regex="true">^pkg:maven/org\.apache\.tomcat/tomcat-catalina@.*$</packageUrl>
388388
<vulnerabilityName>CVE-2024-56337</vulnerabilityName>
389389
</suppress>
390+
391+
<!--
392+
False positives: labkey-api-client.jar is getting tagged as an old version of LabKey Server
393+
-->
394+
<suppress>
395+
<notes><![CDATA[
396+
file name: labkey-client-api-6.2.0.jar
397+
]]></notes>
398+
<packageUrl regex="true">^pkg:maven/org\.labkey\.api/labkey-client-api@.*$</packageUrl>
399+
<cve>CVE-2019-3911</cve>
400+
</suppress>
401+
<suppress>
402+
<notes><![CDATA[
403+
file name: labkey-client-api-6.2.0.jar
404+
]]></notes>
405+
<packageUrl regex="true">^pkg:maven/org\.labkey\.api/labkey-client-api@.*$</packageUrl>
406+
<cve>CVE-2019-3912</cve>
407+
</suppress>
408+
<suppress>
409+
<notes><![CDATA[
410+
file name: labkey-client-api-6.2.0.jar
411+
]]></notes>
412+
<packageUrl regex="true">^pkg:maven/org\.labkey\.api/labkey-client-api@.*$</packageUrl>
413+
<cve>CVE-2019-3913</cve>
414+
</suppress>
390415
</suppressions>
391416

gradle.properties

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -60,7 +60,7 @@ windowsProteomicsBinariesVersion=1.0
6060
artifactoryPluginVersion=5.2.5
6161
gradleNodePluginVersion=3.5.1
6262
gradlePluginsVersion=4.2.0
63-
owaspDependencyCheckPluginVersion=11.0.0
63+
owaspDependencyCheckPluginVersion=12.1.0
6464
versioningPluginVersion=1.1.2
6565

6666
# Versions of node and npm to use during the build. If set, these versions

0 commit comments

Comments
 (0)