Updated pom.xml by Safer

[safer-bot]

This PR was automatically created by Safer, an open-source tool that updates vulnerable dependencies with compatible and more secure versions.

Analyzed commit: 6795214
File updated: pom.xml
Vulnerabilities reduced: 279 -> 72

Let us know if you have questions.

Thanks,
Safer Bot

[safer-bot]

See details in issue #187

[vertesia-code-review]

Changes

This pull request updates the versions of several dependencies in the pom.xml file. The versions of org.immutables:value, com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.dataformat:jackson-dataformat-csv, com.fasterxml.jackson.module:jackson-module-parameter-names, com.fasterxml.jackson.datatype:jackson-datatype-jdk8, com.fasterxml.jackson.datatype:jackson-datatype-jsr310, net.javacrumbs.json-unit:json-unit-assertj, org.elasticsearch.client:elasticsearch-rest-high-level-client, org.elasticsearch.test:framework, org.apache.logging.log4j:log4j-core, and org.assertj:assertj-core have been updated.

Here is a breakdown of the changes:

Path

Description

pom.xml

Updated dependency versions:* org.immutables:value from ${immutables.version} to 2.8.9-ea-1* com.fasterxml.jackson.core:jackson-databind from ${jackson.version} to 2.13.4.2* com.fasterxml.jackson.dataformat:jackson-dataformat-csv from ${jackson.version} to 2.13.5* com.fasterxml.jackson.module:jackson-module-parameter-names from ${jackson.version} to 2.13.5* com.fasterxml.jackson.datatype:jackson-datatype-jdk8 from ${jackson.version} to 2.13.5* com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from ${jackson.version} to 2.13.5* net.javacrumbs.json-unit:json-unit-assertj from ${json.unit.version} to 3.2.4* org.elasticsearch.client:elasticsearch-rest-high-level-client from ${elasticsearch.version} to 7.14.0* org.elasticsearch.test:framework from ${elasticsearch.version} to 7.17.29* org.apache.logging.log4j:log4j-core from ${apache.log4j.version} to 2.17.1* org.assertj:assertj-core from ${assertj.version} to 3.19.0

Purpose

The motivation for this pull request is to reduce the number of vulnerabilities in the project's dependencies. Safer, an open-source tool, identified and updated vulnerable dependencies in the pom.xml file with more secure versions. By applying these changes, the project aims to improve its security posture and reduce the risk of potential exploits.

The context of this pull request is an automated dependency update performed by the Safer bot. The bot analyzed the project's pom.xml file, identified vulnerable dependencies, and updated them to compatible, more secure versions. The specific commit analyzed was 6795214, and the update resulted in a significant reduction of vulnerabilities, from 279 to 72.

Related issues: N/A

Code Review

You can start a code review by adding a comment: "Vertesia, please review".

Note that the motivation and context are rated as very clear (5/5). The agent has a very good understanding of the purpose of the pull request.