Skip to content

Commit 62ee791

Browse files
oshandooshando
authored
Merge pull request #43 from secure-software-engineering/hotfix/update-dependencies
Update dependencies and plugin versions
2 parents 2f90bf4 + 35f9a36 commit 62ee791

File tree

2 files changed

+26
-35
lines changed

2 files changed

+26
-35
lines changed

‎swan-javadoc-coverage/pom.xml‎

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -104,7 +104,7 @@
104104
<dependency>
105105
<groupId>junit</groupId>
106106
<artifactId>junit</artifactId>
107-
<version>4.13.1</version>
107+
<version>4.13.2</version>
108108
<scope>test</scope>
109109
</dependency>
110110
<!--dependency>
@@ -117,13 +117,14 @@
117117
<dependency>
118118
<groupId>jdk.tools</groupId>
119119
<artifactId>jdk.tools</artifactId>
120+
<version>1.8</version>
120121
<scope>system</scope>
121122
<systemPath>${java.home}/../lib/tools.jar</systemPath>
122123
</dependency>
123124
<dependency>
124125
<groupId>commons-io</groupId>
125126
<artifactId>commons-io</artifactId>
126-
<version>2.7</version>
127+
<version>2.11.0</version>
127128
<scope>compile</scope>
128129
</dependency>
129130
</dependencies>
@@ -133,7 +134,7 @@
133134
<plugin>
134135
<groupId>org.apache.maven.plugins</groupId>
135136
<artifactId>maven-compiler-plugin</artifactId>
136-
<version>3.7.0</version>
137+
<version>3.10.0</version>
137138
<configuration>
138139
<source>1.8</source>
139140
<target>1.8</target>
@@ -155,7 +156,7 @@
155156
<plugin>
156157
<groupId>org.apache.maven.plugins</groupId>
157158
<artifactId>maven-javadoc-plugin</artifactId>
158-
<version>3.0.0</version>
159+
<version>3.3.2</version>
159160
<executions>
160161
<!-- Exports JavaDocs of the JavaDoc Coverage Plugin to regular HTML files -->
161162
<execution>

‎swan-pipeline/pom.xml‎

Lines changed: 21 additions & 31 deletions
Original file line numberDiff line numberDiff line change
@@ -9,11 +9,16 @@
99
<packaging>jar</packaging>
1010

1111

12-
<name>SWAN Core</name>
13-
<description>SWAN uses fully automated machine-learning approaches to classify Java methods into security-relevant methods (SRM) and software vulnerabilities categories.
14-
The methods are classified into the following security-relevant method categories sources, sinks, sanitizers and authentication. For the software vulnerability classes,
15-
the following Common Weakness Enumeration (CWE) vulnerabilities are supported: OS Command Injection, Cross-site Scripting, SQL Injection, Missing Authentication, Open Redirect, Missing Authorisation, and Incorrect Authorisation.
16-
SWAN detects methods from the provided source code and outputs a list of methods that can be used to configure static analysis tools.
12+
<name>SWAN</name>
13+
<description>SWAN uses fully automated machine-learning approaches to classify Java methods into security-relevant
14+
methods (SRM) and software vulnerabilities categories.
15+
The methods are classified into the following security-relevant method categories sources, sinks, sanitizers and
16+
authentication. For the software vulnerability classes,
17+
the following Common Weakness Enumeration (CWE) vulnerabilities are supported: OS Command Injection, Cross-site
18+
Scripting, SQL Injection, Missing Authentication, Open Redirect, Missing Authorisation, and Incorrect
19+
Authorisation.
20+
SWAN detects methods from the provided source code and outputs a list of methods that can be used to configure
21+
static analysis tools.
1722
</description>
1823
<url>https://github.com/secure-software-engineering/swan</url>
1924

@@ -80,7 +85,7 @@
8085
<dependency>
8186
<groupId>nz.ac.waikato.cms.weka</groupId>
8287
<artifactId>weka-stable</artifactId>
83-
<version>3.8.5</version>
88+
<version>3.8.6</version>
8489
</dependency>
8590
<dependency>
8691
<groupId>com.googlecode.json-simple</groupId>
@@ -100,12 +105,12 @@
100105
<dependency>
101106
<groupId>edu.stanford.nlp</groupId>
102107
<artifactId>stanford-corenlp</artifactId>
103-
<version>4.3.0</version>
108+
<version>4.4.0</version>
104109
</dependency>
105110
<dependency>
106111
<groupId>edu.stanford.nlp</groupId>
107112
<artifactId>stanford-corenlp</artifactId>
108-
<version>4.3.0</version>
113+
<version>4.4.0</version>
109114
<classifier>models-english</classifier>
110115
</dependency>
111116
<dependency>
@@ -121,9 +126,8 @@
121126
<dependency>
122127
<groupId>dev.jeka</groupId>
123128
<artifactId>jeka-core</artifactId>
124-
<version>0.9.0.M10</version>
129+
<version>0.9.15.RELEASE</version>
125130
</dependency>
126-
<!-- deeplearning4j-core: contains swanPipeline functionality and neural networks -->
127131
<dependency>
128132
<groupId>org.deeplearning4j</groupId>
129133
<artifactId>deeplearning4j-core</artifactId>
@@ -152,7 +156,7 @@
152156
<dependency>
153157
<groupId>ai.libs</groupId>
154158
<artifactId>mlplan-weka</artifactId>
155-
<version>0.2.3</version>
159+
<version>0.2.7</version>
156160
</dependency>
157161
<dependency>
158162
<groupId>org.graphstream</groupId>
@@ -162,24 +166,22 @@
162166
<dependency>
163167
<groupId>ai.libs</groupId>
164168
<artifactId>hasco-core</artifactId>
165-
<version>0.2.5</version>
169+
<version>0.2.7</version>
166170
</dependency>
167-
<!-- https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-api -->
168171
<dependency>
169172
<groupId>org.slf4j</groupId>
170173
<artifactId>slf4j-api</artifactId>
171-
<version>1.7.32</version>
174+
<version>1.7.36</version>
172175
</dependency>
173-
<!-- https://mvnrepository.com/artifact/org.slf4j/slf4j-simple -->
174176
<dependency>
175177
<groupId>org.slf4j</groupId>
176178
<artifactId>slf4j-simple</artifactId>
177-
<version>1.7.32</version>
179+
<version>1.7.36</version>
178180
</dependency>
179181
<dependency>
180182
<groupId>info.picocli</groupId>
181183
<artifactId>picocli</artifactId>
182-
<version>4.6.2</version>
184+
<version>4.6.3</version>
183185
</dependency>
184186
<dependency>
185187
<groupId>commons-io</groupId>
@@ -192,7 +194,6 @@
192194
<artifactId>jackson-databind</artifactId>
193195
<version>2.13.1</version>
194196
</dependency>
195-
<!-- https://mvnrepository.com/artifact/net.sf.meka/meka --><!-- https://mvnrepository.com/artifact/net.sf.meka/meka -->
196197
<dependency>
197198
<groupId>net.sf.meka</groupId>
198199
<artifactId>meka</artifactId>
@@ -244,17 +245,6 @@
244245
<target>1.8</target>
245246
</configuration>
246247
</plugin>
247-
<plugin>
248-
<artifactId>maven-clean-plugin</artifactId>
249-
<configuration>
250-
<filesets>
251-
<fileset>
252-
<directory>${basedir}/target</directory>
253-
<followSymlinks>false</followSymlinks>
254-
</fileset>
255-
</filesets>
256-
</configuration>
257-
</plugin>
258248
<plugin>
259249
<groupId>org.apache.maven.plugins</groupId>
260250
<artifactId>maven-source-plugin</artifactId>
@@ -306,7 +296,7 @@
306296
<plugin>
307297
<groupId>org.apache.maven.plugins</groupId>
308298
<artifactId>maven-javadoc-plugin</artifactId>
309-
<version>3.3.1</version>
299+
<version>3.3.2</version>
310300
<executions>
311301
<execution>
312302
<id>attach-javadocs</id>
@@ -332,7 +322,7 @@
332322
<plugin>
333323
<groupId>org.apache.maven.plugins</groupId>
334324
<artifactId>maven-gpg-plugin</artifactId>
335-
<version>1.6</version>
325+
<version>3.0.1</version>
336326
<executions>
337327
<execution>
338328
<id>sign-artifacts</id>

0 commit comments

Comments
 (0)