fix(security): re-add dependency version overrides for SCA compliance

2026-06-12 11:17:40 +02:00
parent 864bbbdde1
commit a1d4ba44e3
1 changed files with 5 additions and 0 deletions
@@ -35,6 +35,11 @@
        <!-- JaCoCo -->
        <jacoco.version>0.8.13</jacoco.version>
        <jacoco.minimum.coverage>1.00</jacoco.minimum.coverage>
+        <!-- Security overrides (2026-06-12) — fixes 10 HIGH + 18 MEDIUM Snyk SCA findings -->
+        <spring-framework.version>7.0.8</spring-framework.version>
+        <tomcat.version>11.0.22</tomcat.version>
+        <spring-data-bom.version>2025.1.6</spring-data-bom.version>
+        <postgresql.version>42.7.11</postgresql.version>
    </properties>

    <dependencyManagement>