diff --git a/.github/workflows/java_swagger_doc.yml b/.github/workflows/java_swagger_doc.yml index 3e71c24a8..c0c6a2e80 100644 --- a/.github/workflows/java_swagger_doc.yml +++ b/.github/workflows/java_swagger_doc.yml @@ -21,6 +21,11 @@ jobs: distribution: "temurin" - name: Clean install run: ./mvnw --no-transfer-progress clean install -DskipTests -Ddependency-check.skip -Dcyclonedx.skip=true -Dexec.skip + - name: Show npm logs on failure + if: failure() + run: | + ls -la /home/runner/.npm/_logs || true + cat /home/runner/.npm/_logs/*-debug-0.log || true - name: Compile javadoc run: ./mvnw --no-transfer-progress compile javadoc:javadoc - name: Start wrongsecrets diff --git a/Dockerfile b/Dockerfile index d8e815e57..3865ddfdc 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,12 +1,12 @@ FROM bellsoft/liberica-openjre-debian:25-cds AS builder WORKDIR /builder -ARG argBasedVersion="1.12.10" +ARG argBasedVersion="1.12.11" COPY --chown=wrongsecrets target/wrongsecrets-${argBasedVersion}-SNAPSHOT.jar application.jar RUN java -Djarmode=tools -jar application.jar extract --layers --destination extracted -FROM eclipse-temurin:25-jre-alpine +FROM eclipse-temurin:25.0.2_10-jre-alpine WORKDIR /application ARG argBasedPassword="default" diff --git a/Dockerfile.web b/Dockerfile.web index bb7cb0d66..5167e13ec 100644 --- a/Dockerfile.web +++ b/Dockerfile.web @@ -1,5 +1,5 @@ -FROM jeroenwillemsen/wrongsecrets:1.12.10-no-vault -ARG argBasedVersion="1.12.10-no-vault" +FROM jeroenwillemsen/wrongsecrets:1.12.11-no-vault +ARG argBasedVersion="1.12.11-no-vault" ARG CANARY_URLS="http://canarytokens.com/terms/about/s7cfbdakys13246ewd8ivuvku/post.jsp,http://canarytokens.com/terms/about/y0all60b627gzp19ahqh7rl6j/post.jsp" ARG CTF_ENABLED=false ARG HINTS_ENABLED=true diff --git a/aws/k8s/secret-challenge-vault-deployment.yml b/aws/k8s/secret-challenge-vault-deployment.yml index f662100f5..53da17f54 100644 --- a/aws/k8s/secret-challenge-vault-deployment.yml +++ b/aws/k8s/secret-challenge-vault-deployment.yml @@ -58,7 +58,7 @@ spec: volumeAttributes: secretProviderClass: "wrongsecrets-aws-secretsmanager" containers: - - image: jeroenwillemsen/wrongsecrets:1.12.10-k8s-vault + - image: jeroenwillemsen/wrongsecrets:1.12.11-k8s-vault imagePullPolicy: IfNotPresent name: secret-challenge command: ["/bin/sh"] diff --git a/azure/k8s/secret-challenge-vault-deployment.yml.tpl b/azure/k8s/secret-challenge-vault-deployment.yml.tpl index 48538f9be..1a9f8d1dd 100644 --- a/azure/k8s/secret-challenge-vault-deployment.yml.tpl +++ b/azure/k8s/secret-challenge-vault-deployment.yml.tpl @@ -61,7 +61,7 @@ spec: volumeAttributes: secretProviderClass: "azure-wrongsecrets-vault" containers: - - image: jeroenwillemsen/wrongsecrets:1.12.10-k8s-vault + - image: jeroenwillemsen/wrongsecrets:1.12.11-k8s-vault imagePullPolicy: IfNotPresent name: secret-challenge command: ["/bin/sh"] diff --git a/docs/VERSION_MANAGEMENT.md b/docs/VERSION_MANAGEMENT.md index 15ae56efe..c1ae6d054 100644 --- a/docs/VERSION_MANAGEMENT.md +++ b/docs/VERSION_MANAGEMENT.md @@ -12,9 +12,9 @@ The project maintains version consistency between: ## Version Schema ``` -pom.xml version: 1.12.10-SNAPSHOT -Dockerfile version: 1.12.10 -Dockerfile.web version: 1.12.10-no-vault +pom.xml version: 1.12.11-SNAPSHOT +Dockerfile version: 1.12.11 +Dockerfile.web version: 1.12.11-no-vault ``` ## Automated Solutions diff --git a/fly.toml b/fly.toml index b3b72ffaa..13f30c78c 100644 --- a/fly.toml +++ b/fly.toml @@ -8,7 +8,7 @@ app = "wrongsecrets" primary_region = "ams" [build] - image = "docker.io/jeroenwillemsen/wrongsecrets:1.12.10-no-vault" + image = "docker.io/jeroenwillemsen/wrongsecrets:1.12.11-no-vault" [env] K8S_ENV = "Fly(Docker)" diff --git a/gcp/k8s/secret-challenge-vault-deployment.yml.tpl b/gcp/k8s/secret-challenge-vault-deployment.yml.tpl index f201cccc0..12bf05256 100644 --- a/gcp/k8s/secret-challenge-vault-deployment.yml.tpl +++ b/gcp/k8s/secret-challenge-vault-deployment.yml.tpl @@ -58,7 +58,7 @@ spec: volumeAttributes: secretProviderClass: "wrongsecrets-gcp-secretsmanager" containers: - - image: jeroenwillemsen/wrongsecrets:1.12.10-k8s-vault + - image: jeroenwillemsen/wrongsecrets:1.12.11-k8s-vault imagePullPolicy: IfNotPresent name: secret-challenge command: ["/bin/sh"] diff --git a/js/index.js b/js/index.js index 212284d86..16c04e29e 100644 --- a/js/index.js +++ b/js/index.js @@ -1,5 +1,5 @@ function secret() { - var password = "ZRufb8k=" + 9 + "Kmzl" + 6 + "ro4=" + 2 + "RrQz" + 7; + var password = "3F4QBCQ=" + 9 + "RGlS" + 6 + "W9g=" + 2 + "Hk2F" + 7; return password; } diff --git a/js/package-lock.json b/js/package-lock.json index d3887b0f2..b00429813 100644 --- a/js/package-lock.json +++ b/js/package-lock.json @@ -1017,9 +1017,9 @@ } }, "node_modules/libphonenumber-js": { - "version": "1.12.10", - "resolved": "https://registry.npmjs.org/libphonenumber-js/-/libphonenumber-js-1.12.10.tgz", - "integrity": "sha512-E91vHJD61jekHHR/RF/E83T/CMoaLXT7cwYA75T4gim4FZjnM6hbJjVIGg7chqlSqRsSvQ3izGmOjHy1SQzcGQ==", + "version": "1.12.11", + "resolved": "https://registry.npmjs.org/libphonenumber-js/-/libphonenumber-js-1.12.11.tgz", + "integrity": "sha512-D2O/Ff8a1US4/SjuZR91Zx7z4xqV5IuaPep92W6MKS2DNuJUp7yzh8s7DkbYl5oJrWdeg339yRCCi5gA4+Yr0Q==", "dev": true, "license": "MIT" }, diff --git a/k8s/challenge53/secret-challenge53-sidecar.yml b/k8s/challenge53/secret-challenge53-sidecar.yml index f6bfd058b..efa3931bc 100644 --- a/k8s/challenge53/secret-challenge53-sidecar.yml +++ b/k8s/challenge53/secret-challenge53-sidecar.yml @@ -21,7 +21,7 @@ spec: runAsGroup: 2000 fsGroup: 2000 containers: - - image: jeroenwillemsen/wrongsecrets-challenge53:1.12.10 + - image: jeroenwillemsen/wrongsecrets-challenge53:1.12.11 name: secret-challenge-53 imagePullPolicy: IfNotPresent resources: @@ -45,7 +45,7 @@ spec: command: ["/bin/sh", "-c"] args: - cp /home/wrongsecrets/* /shared-data/ && exec /home/wrongsecrets/start-on-arch.sh - - image: jeroenwillemsen/wrongsecrets-challenge53-debug:1.12.10 + - image: jeroenwillemsen/wrongsecrets-challenge53-debug:1.12.11 name: sidecar imagePullPolicy: IfNotPresent command: ["/bin/sh", "-c", "while true; do ls /shared-data; sleep 10; done"] diff --git a/k8s/challenge53/secret-challenge53.yml b/k8s/challenge53/secret-challenge53.yml index 4f70c7884..6109ef822 100644 --- a/k8s/challenge53/secret-challenge53.yml +++ b/k8s/challenge53/secret-challenge53.yml @@ -21,7 +21,7 @@ spec: runAsGroup: 2000 fsGroup: 2000 containers: - - image: jeroenwillemsen/wrongsecrets-challenge53:1.12.10 + - image: jeroenwillemsen/wrongsecrets-challenge53:1.12.11 name: secret-challenge-53 imagePullPolicy: IfNotPresent resources: diff --git a/okteto/k8s/secret-challenge-ctf-deployment.yml b/okteto/k8s/secret-challenge-ctf-deployment.yml index e8f92a120..21937e905 100644 --- a/okteto/k8s/secret-challenge-ctf-deployment.yml +++ b/okteto/k8s/secret-challenge-ctf-deployment.yml @@ -28,7 +28,7 @@ spec: runAsGroup: 2000 fsGroup: 2000 containers: - - image: jeroenwillemsen/wrongsecrets:1.12.10-no-vault + - image: jeroenwillemsen/wrongsecrets:1.12.11-no-vault name: secret-challenge-ctf imagePullPolicy: IfNotPresent securityContext: diff --git a/okteto/k8s/secret-challenge-deployment.yml b/okteto/k8s/secret-challenge-deployment.yml index 66df1a064..c1c610549 100644 --- a/okteto/k8s/secret-challenge-deployment.yml +++ b/okteto/k8s/secret-challenge-deployment.yml @@ -28,7 +28,7 @@ spec: runAsGroup: 2000 fsGroup: 2000 containers: - - image: jeroenwillemsen/wrongsecrets:1.12.10-no-vault + - image: jeroenwillemsen/wrongsecrets:1.12.11-no-vault name: secret-challenge imagePullPolicy: IfNotPresent securityContext: diff --git a/package-lock.json b/package-lock.json index 240c4407c..009257e01 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1907,9 +1907,9 @@ } }, "node_modules/ajv": { - "version": "6.12.6", - "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz", - "integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==", + "version": "6.14.0", + "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.14.0.tgz", + "integrity": "sha512-IWrosm/yrn43eiKqkfkHis7QioDleaXQHdDVPKg0FSwwd/DuvyX79TZnFOnYpB7dcsFAMmtFztZuXPDvSePkFw==", "dev": true, "license": "MIT", "dependencies": { diff --git a/pom.xml b/pom.xml index 41f046b64..ee09bff9a 100644 --- a/pom.xml +++ b/pom.xml @@ -5,13 +5,13 @@ org.springframework.boot spring-boot-starter-parent - 3.5.10 + 3.5.11 org.owasp wrongsecrets - 1.12.10-SNAPSHOT + 1.12.11-SNAPSHOT OWASP WrongSecrets Examples with how to not use secrets @@ -44,14 +44,21 @@ 2.2.4 + 1.4.1 3.2.0 3.0.1 2.40.9 5.3.8 + 3.6.0 + 13.2.0 6.0.0 - 11.0.1 + 2.9.1 + 12.1.0 2.3.7 - 12.1.9 + 12.2.0 + 3.6.3 + 1.14.0 + 1.15.4 4.21.0 3.14.9 7.4.5 @@ -62,13 +69,26 @@ 10.0.3.0 1.18.42 3.15.0 + 3.5.4 full 25 + v24.14.0 + 11.8.0 + 4.9.8.2 + 4.9.8 + 3.2.1 + 3.5.11 + 3.2.0 2025.0.0 - 6.2.3 + 6.5.8 + 1.5 + 2.8.15 2.1.8 + 1.10.0 + 1.21.4 3.1.3.RELEASE 3.4.0 + 1.4.0 @@ -104,7 +124,7 @@ io.netty netty-bom ${io.netty.version} - + pom import @@ -147,17 +167,17 @@ org.springframework.security spring-security-config - ${spring-security.version} + ${spring.security.version} org.springframework.security spring-security-web - ${spring-security.version} + ${spring.security.version} org.springframework.security spring-security-test - ${spring-security.version} + ${spring.security.version} test @@ -172,7 +192,7 @@ org.testcontainers testcontainers - 1.21.4 + ${testcontainers.version} test @@ -264,7 +284,7 @@ org.springdoc springdoc-openapi-starter-webmvc-ui - 2.8.15 + ${springdoc.version} com.azure.spring @@ -306,24 +326,24 @@ com.tngtech.archunit archunit-junit5 - 1.4.1 + ${archunit.version} test com.github.spotbugs spotbugs-annotations - 4.9.8 + ${spotbugs.version} io.github.wimdeblauwe testcontainers-cypress - 1.10.0 + ${testcontainers-cypress.version} test org.springframework.vault spring-vault-core - 3.2.0 + ${spring-vault.version} @@ -342,26 +362,26 @@ org.apache.maven.plugins maven-checkstyle-plugin - 3.6.0 + ${checkstyle-maven.version} com.puppycrawl.tools checkstyle - 11.1.0 + ${checkstyle.version} com.github.spotbugs spotbugs-maven-plugin - 4.9.8.2 + ${spotbugs-maven.version} FindReturnRef com.h3xstream.findsecbugs findsecbugs-plugin - 1.14.0 + ${findsecbugs.version} @@ -370,7 +390,7 @@ com.github.spotbugs spotbugs - 4.9.8 + ${spotbugs.version} @@ -401,7 +421,7 @@ org.apache.maven.plugins maven-checkstyle-plugin - 3.6.0 + ${checkstyle-maven.version} true true @@ -439,7 +459,7 @@ org.cyclonedx cyclonedx-maven-plugin - 2.9.1 + ${cyclonedx-maven.version} library 1.3 @@ -485,7 +505,13 @@ com.github.eirslett frontend-maven-plugin - 1.15.4 + ${frontend-maven-plugin.version} + + js + ${node.version} + ${npm.version} + js + install node and npm @@ -494,11 +520,23 @@ generate-resources - v24.5.0 + ${node.version} + ${npm.version} js + + npm ci + + npm + + generate-resources + + ci --no-audit --no-fund --prefer-online + js + + npm install @@ -506,7 +544,7 @@ generate-resources - install + cache clean --force js @@ -515,12 +553,12 @@ org.springdoc springdoc-openapi-maven-plugin - 1.5 + ${springdoc-maven.version} org.codehaus.mojo exec-maven-plugin - 3.6.3 + ${exec-maven-plugin.version} ./js/node_modules/.bin/javascript-obfuscator${script.extension} @@ -543,14 +581,14 @@ maven-compiler-plugin ${maven-compiler-plugin.version} - 23 - 23 + 25 + 25 org.codehaus.mojo tidy-maven-plugin - 1.4.0 + ${tidy-maven-plugin.version} validate @@ -564,7 +602,7 @@ com.diffplug.spotless spotless-maven-plugin - 3.2.1 + ${spotless-maven-plugin.version} @@ -623,7 +661,7 @@ org.apache.maven.plugins maven-surefire-plugin - 3.5.4 + ${maven-surefire-plugin.version} -Dspring.profiles.active=test,maven-test diff --git a/src/main/resources/templates/about.html b/src/main/resources/templates/about.html index d25df671b..c96e973f6 100644 --- a/src/main/resources/templates/about.html +++ b/src/main/resources/templates/about.html @@ -49,8 +49,8 @@
🎯 Learning Objectives
  • Lists of 362 third-party dependencies.
  • -
  • (Eclipse Public License - v 1.0) (GNU Lesser General Public License) Logback Classic Module (ch.qos.logback:logback-classic:1.5.21 - http://logback.qos.ch/logback-classic)
  • -
  • (Eclipse Public License - v 1.0) (GNU Lesser General Public License) Logback Core Module (ch.qos.logback:logback-core:1.5.21 - http://logback.qos.ch/logback-core)
  • +
  • (Eclipse Public License - v 1.0) (GNU Lesser General Public License) Logback Classic Module (ch.qos.logback:logback-classic:1.5.25 - http://logback.qos.ch/logback-classic)
  • +
  • (Eclipse Public License - v 1.0) (GNU Lesser General Public License) Logback Core Module (ch.qos.logback:logback-core:1.5.25 - http://logback.qos.ch/logback-core)
  • (The MIT License (MIT)) Microsoft Azure Java Core Library (com.azure:azure-core:1.56.0 - https://github.com/Azure/azure-sdk-for-java)
  • (The MIT License (MIT)) Microsoft Azure Java Core AMQP Library (com.azure:azure-core-amqp:2.11.0 - https://github.com/Azure/azure-sdk-for-java)
  • (The MIT License (MIT)) Microsoft Azure Netty HTTP Client Library (com.azure:azure-core-http-netty:1.16.0 - https://github.com/Azure/azure-sdk-for-java)
  • @@ -68,7 +68,7 @@
    🎯 Learning Objectives
  • (3-Clause BSD License) MinLog (com.esotericsoftware:minlog:1.3.1 - https://github.com/EsotericSoftware/minlog)
  • (Apache License, Version 2.0) Internet Time Utility (com.ethlo.time:itu:1.14.0 - https://github.com/ethlo/itu)
  • (The Apache Software License, Version 2.0) aalto-xml (com.fasterxml:aalto-xml:1.3.3 - https://github.com/FasterXML/aalto-xml)
  • -
  • (Apache License, Version 2.0) ClassMate (com.fasterxml:classmate:1.7.1 - https://github.com/FasterXML/java-classmate)
  • +
  • (Apache License, Version 2.0) ClassMate (com.fasterxml:classmate:1.7.3 - https://github.com/FasterXML/java-classmate)
  • (The Apache Software License, Version 2.0) Jackson-annotations (com.fasterxml.jackson.core:jackson-annotations:2.19.4 - https://github.com/FasterXML/jackson)
  • (The Apache Software License, Version 2.0) Jackson-core (com.fasterxml.jackson.core:jackson-core:2.19.4 - https://github.com/FasterXML/jackson-core)
  • (The Apache Software License, Version 2.0) jackson-databind (com.fasterxml.jackson.core:jackson-databind:2.19.4 - https://github.com/FasterXML/jackson)
  • @@ -79,44 +79,44 @@
    🎯 Learning Objectives
  • (The Apache Software License, Version 2.0) Jackson module: Blackbird (com.fasterxml.jackson.module:jackson-module-blackbird:2.19.4 - https://github.com/FasterXML/jackson-modules-base)
  • (The Apache Software License, Version 2.0) Jackson-module-parameter-names (com.fasterxml.jackson.module:jackson-module-parameter-names:2.19.4 - https://github.com/FasterXML/jackson-modules-java8/jackson-module-parameter-names)
  • (The Apache License, Version 2.0) Woodstox (com.fasterxml.woodstox:woodstox-core:7.0.0 - https://github.com/FasterXML/woodstox)
  • -
  • (GNU Lesser General Public License version 3) (The Apache Software License, Version 2.0) jffi (com.github.jnr:jffi:1.3.13 - http://github.com/jnr/jffi)
  • +
  • (GNU Lesser General Public License version 3) (The Apache Software License, Version 2.0) jffi (com.github.jnr:jffi:1.3.14 - http://github.com/jnr/jffi)
  • (The Apache Software License, Version 2.0) jnr-a64asm (com.github.jnr:jnr-a64asm:1.0.0 - http://nexus.sonatype.org/oss-repository-hosting.html/jnr-a64asm)
  • (The Apache Software License, Version 2.0) jnr-constants (com.github.jnr:jnr-constants:0.10.4 - http://github.com/jnr/jnr-constants)
  • -
  • (The Apache Software License, Version 2.0) jnr-enxio (com.github.jnr:jnr-enxio:0.32.18 - http://github.com/jnr/jnr-enxio)
  • -
  • (The Apache Software License, Version 2.0) jnr-ffi (com.github.jnr:jnr-ffi:2.2.17 - http://github.com/jnr/jnr-ffi)
  • +
  • (The Apache Software License, Version 2.0) jnr-enxio (com.github.jnr:jnr-enxio:0.32.19 - http://github.com/jnr/jnr-enxio)
  • +
  • (The Apache Software License, Version 2.0) jnr-ffi (com.github.jnr:jnr-ffi:2.2.18 - http://github.com/jnr/jnr-ffi)
  • (The Apache Software License, Version 2.0) jnr-netdb (com.github.jnr:jnr-netdb:1.2.0 - http://github.com/jnr/jnr-netdb)
  • -
  • (Eclipse Public License - v 2.0) (GNU General Public License Version 2) (GNU Lesser General Public License Version 2.1) jnr-posix (com.github.jnr:jnr-posix:3.1.20 - http://nexus.sonatype.org/oss-repository-hosting.html/jnr-posix)
  • -
  • (The Apache Software License, Version 2.0) jnr-unixsocket (com.github.jnr:jnr-unixsocket:0.38.23 - http://github.com/jnr/jnr-unixsocket)
  • +
  • (Eclipse Public License - v 2.0) (GNU General Public License Version 2) (GNU Lesser General Public License Version 2.1) jnr-posix (com.github.jnr:jnr-posix:3.1.21 - http://github.com/jnr/jnr-posix)
  • +
  • (The Apache Software License, Version 2.0) jnr-unixsocket (com.github.jnr:jnr-unixsocket:0.38.24 - http://github.com/jnr/jnr-unixsocket)
  • (MIT License) jnr-x86asm (com.github.jnr:jnr-x86asm:1.0.2 - http://github.com/jnr/jnr-x86asm)
  • (MIT) Package URL (com.github.package-url:packageurl-java:1.5.0 - https://github.com/package-url/packageurl-java)
  • (GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1) SpotBugs Annotations (com.github.spotbugs:spotbugs-annotations:4.9.8 - https://spotbugs.github.io/)
  • (Apache License 2.0) compiler (com.github.spullara.mustache.java:compiler:0.9.6 - http://github.com/spullara/mustache.java)
  • (Apache License, Version 2.0) JCIP Annotations under Apache License (com.github.stephenc.jcip:jcip-annotations:1.0-1 - http://stephenc.github.com/jcip-annotations)
  • (Apache 2.0) Google Android Annotations Library (com.google.android:annotations:4.1.1.4 - http://source.android.com/)
  • -
  • (BSD-3-Clause) API Common (com.google.api:api-common:2.54.0 - https://github.com/googleapis/sdk-platform-java)
  • -
  • (BSD-3-Clause) GAX (Google Api eXtensions) for Java (Core) (com.google.api:gax:2.71.0 - https://github.com/googleapis/sdk-platform-java)
  • -
  • (BSD-3-Clause) GAX (Google Api eXtensions) for Java (gRPC) (com.google.api:gax-grpc:2.71.0 - https://github.com/googleapis/sdk-platform-java)
  • -
  • (BSD-3-Clause) GAX (Google Api eXtensions) for Java (HTTP JSON) (com.google.api:gax-httpjson:2.71.0 - https://github.com/googleapis/sdk-platform-java)
  • -
  • (Apache-2.0) proto-google-cloud-secretmanager-v1 (com.google.api.grpc:proto-google-cloud-secretmanager-v1:2.78.0 - https://github.com/googleapis/google-cloud-java)
  • -
  • (Apache-2.0) proto-google-cloud-secretmanager-v1beta1 (com.google.api.grpc:proto-google-cloud-secretmanager-v1beta1:2.78.0 - https://github.com/googleapis/google-cloud-java)
  • -
  • (Apache-2.0) proto-google-cloud-secretmanager-v1beta2 (com.google.api.grpc:proto-google-cloud-secretmanager-v1beta2:2.78.0 - https://github.com/googleapis/google-cloud-java)
  • -
  • (Apache-2.0) proto-google-common-protos (com.google.api.grpc:proto-google-common-protos:2.62.0 - https://github.com/googleapis/sdk-platform-java)
  • -
  • (Apache-2.0) proto-google-iam-v1 (com.google.api.grpc:proto-google-iam-v1:1.57.0 - https://github.com/googleapis/sdk-platform-java)
  • -
  • (BSD New license) Google Auth Library for Java - Credentials (com.google.auth:google-auth-library-credentials:1.40.0 - https://github.com/googleapis/google-auth-library-java/google-auth-library-credentials)
  • -
  • (BSD New license) Google Auth Library for Java - OAuth2 HTTP (com.google.auth:google-auth-library-oauth2-http:1.40.0 - https://github.com/googleapis/google-auth-library-java/google-auth-library-oauth2-http)
  • +
  • (BSD-3-Clause) API Common (com.google.api:api-common:2.57.1 - https://github.com/googleapis/sdk-platform-java)
  • +
  • (BSD-3-Clause) GAX (Google Api eXtensions) for Java (Core) (com.google.api:gax:2.74.1 - https://github.com/googleapis/sdk-platform-java)
  • +
  • (BSD-3-Clause) GAX (Google Api eXtensions) for Java (gRPC) (com.google.api:gax-grpc:2.74.1 - https://github.com/googleapis/sdk-platform-java)
  • +
  • (BSD-3-Clause) GAX (Google Api eXtensions) for Java (HTTP JSON) (com.google.api:gax-httpjson:2.74.1 - https://github.com/googleapis/sdk-platform-java)
  • +
  • (Apache-2.0) proto-google-cloud-secretmanager-v1 (com.google.api.grpc:proto-google-cloud-secretmanager-v1:2.85.0 - https://github.com/googleapis/google-cloud-java)
  • +
  • (Apache-2.0) proto-google-cloud-secretmanager-v1beta1 (com.google.api.grpc:proto-google-cloud-secretmanager-v1beta1:2.85.0 - https://github.com/googleapis/google-cloud-java)
  • +
  • (Apache-2.0) proto-google-cloud-secretmanager-v1beta2 (com.google.api.grpc:proto-google-cloud-secretmanager-v1beta2:2.85.0 - https://github.com/googleapis/google-cloud-java)
  • +
  • (Apache-2.0) proto-google-common-protos (com.google.api.grpc:proto-google-common-protos:2.65.1 - https://github.com/googleapis/sdk-platform-java)
  • +
  • (Apache-2.0) proto-google-iam-v1 (com.google.api.grpc:proto-google-iam-v1:1.60.1 - https://github.com/googleapis/sdk-platform-java)
  • +
  • (BSD New license) Google Auth Library for Java - Credentials (com.google.auth:google-auth-library-credentials:1.42.1 - https://github.com/googleapis/google-auth-library-java/google-auth-library-credentials)
  • +
  • (BSD New license) Google Auth Library for Java - OAuth2 HTTP (com.google.auth:google-auth-library-oauth2-http:1.42.1 - https://github.com/googleapis/google-auth-library-java/google-auth-library-oauth2-http)
  • (Apache 2.0) AutoValue Annotations (com.google.auto.value:auto-value-annotations:1.11.0 - https://github.com/google/auto/tree/main/value)
  • -
  • (Apache-2.0) Google Cloud Secret Manager (com.google.cloud:google-cloud-secretmanager:2.78.0 - https://github.com/googleapis/google-cloud-java)
  • +
  • (Apache-2.0) Google Cloud Secret Manager (com.google.cloud:google-cloud-secretmanager:2.85.0 - https://github.com/googleapis/google-cloud-java)
  • (The Apache Software License, Version 2.0) FindBugs-jsr305 (com.google.code.findbugs:jsr305:3.0.2 - http://findbugs.sourceforge.net/)
  • (Apache-2.0) Gson (com.google.code.gson:gson:2.13.2 - https://github.com/google/gson)
  • (Apache 2.0) error-prone annotations (com.google.errorprone:error_prone_annotations:2.42.0 - https://errorprone.info/error_prone_annotations)
  • (Apache License, Version 2.0) Guava InternalFutureFailureAccess and InternalFutures (com.google.guava:failureaccess:1.0.3 - https://github.com/google/guava/failureaccess)
  • (Apache License, Version 2.0) Guava: Google Core Libraries for Java (com.google.guava:guava:33.5.0-jre - https://github.com/google/guava)
  • (The Apache Software License, Version 2.0) Guava ListenableFuture only (com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava - https://github.com/google/guava/listenablefuture)
  • -
  • (The Apache Software License, Version 2.0) Google HTTP Client Library for Java (com.google.http-client:google-http-client:2.0.2 - https://github.com/googleapis/google-http-java-client/google-http-client)
  • -
  • (The Apache Software License, Version 2.0) GSON extensions to the Google HTTP Client Library for Java. (com.google.http-client:google-http-client-gson:2.0.2 - https://github.com/googleapis/google-http-java-client/google-http-client-gson)
  • +
  • (The Apache Software License, Version 2.0) Google HTTP Client Library for Java (com.google.http-client:google-http-client:2.1.0 - https://github.com/googleapis/google-http-java-client/google-http-client)
  • +
  • (The Apache Software License, Version 2.0) GSON extensions to the Google HTTP Client Library for Java. (com.google.http-client:google-http-client-gson:2.1.0 - https://github.com/googleapis/google-http-java-client/google-http-client-gson)
  • (Apache License, Version 2.0) J2ObjC Annotations (com.google.j2objc:j2objc-annotations:3.1 - https://github.com/google/j2objc/)
  • -
  • (BSD-3-Clause) Protocol Buffers [Core] (com.google.protobuf:protobuf-java:4.33.0 - https://developers.google.com/protocol-buffers/protobuf-java/)
  • -
  • (BSD-3-Clause) Protocol Buffers [Util] (com.google.protobuf:protobuf-java-util:4.33.0 - https://developers.google.com/protocol-buffers/protobuf-java-util/)
  • +
  • (BSD-3-Clause) Protocol Buffers [Core] (com.google.protobuf:protobuf-java:4.33.2 - https://developers.google.com/protocol-buffers/protobuf-java/)
  • +
  • (BSD-3-Clause) Protocol Buffers [Util] (com.google.protobuf:protobuf-java-util:4.33.2 - https://developers.google.com/protocol-buffers/protobuf-java-util/)
  • (Go License) RE2/J (com.google.re2j:re2j:1.8 - http://github.com/google/re2j)
  • (EPL 1.0) (MPL 2.0) H2 Database Engine (com.h2database:h2:2.3.232 - https://h2database.com)
  • (The Apache Software License, Version 2.0) retirejs-core (com.h3xstream.retirejs:retirejs-core:3.0.4 - https://github.com/h3xstream/burp-retire-js/retirejs-core)
  • @@ -145,55 +145,55 @@
    🎯 Learning Objectives
  • (Apache-2.0) Apache Commons Validator (commons-validator:commons-validator:1.10.0 - http://commons.apache.org/proper/commons-validator/)
  • (The Apache License, Version 2.0) jcs3-slf4j (io.github.jeremylong:jcs3-slf4j:1.0.5 - https://github.com/jeremylong/jcs3-slf4j/)
  • (The Apache License, Version 2.0) open-vulnerability-clients (io.github.jeremylong:open-vulnerability-clients:7.3.2 - https://github.com/jeremylong/vuln-tools/)
  • -
  • (Apache 2.0) io.grpc:grpc-alts (io.grpc:grpc-alts:1.71.0 - https://github.com/grpc/grpc-java)
  • -
  • (Apache 2.0) io.grpc:grpc-api (io.grpc:grpc-api:1.71.0 - https://github.com/grpc/grpc-java)
  • -
  • (Apache 2.0) io.grpc:grpc-auth (io.grpc:grpc-auth:1.71.0 - https://github.com/grpc/grpc-java)
  • -
  • (Apache 2.0) io.grpc:grpc-context (io.grpc:grpc-context:1.71.0 - https://github.com/grpc/grpc-java)
  • -
  • (Apache 2.0) io.grpc:grpc-core (io.grpc:grpc-core:1.71.0 - https://github.com/grpc/grpc-java)
  • -
  • (Apache 2.0) io.grpc:grpc-googleapis (io.grpc:grpc-googleapis:1.71.0 - https://github.com/grpc/grpc-java)
  • -
  • (Apache 2.0) io.grpc:grpc-grpclb (io.grpc:grpc-grpclb:1.71.0 - https://github.com/grpc/grpc-java)
  • -
  • (Apache 2.0) io.grpc:grpc-inprocess (io.grpc:grpc-inprocess:1.71.0 - https://github.com/grpc/grpc-java)
  • -
  • (Apache 2.0) io.grpc:grpc-netty-shaded (io.grpc:grpc-netty-shaded:1.71.0 - https://github.com/grpc/grpc-java)
  • -
  • (Apache 2.0) io.grpc:grpc-protobuf (io.grpc:grpc-protobuf:1.71.0 - https://github.com/grpc/grpc-java)
  • -
  • (Apache 2.0) io.grpc:grpc-protobuf-lite (io.grpc:grpc-protobuf-lite:1.71.0 - https://github.com/grpc/grpc-java)
  • -
  • (Apache 2.0) io.grpc:grpc-services (io.grpc:grpc-services:1.71.0 - https://github.com/grpc/grpc-java)
  • -
  • (Apache 2.0) io.grpc:grpc-stub (io.grpc:grpc-stub:1.71.0 - https://github.com/grpc/grpc-java)
  • -
  • (Apache 2.0) io.grpc:grpc-util (io.grpc:grpc-util:1.71.0 - https://github.com/grpc/grpc-java)
  • -
  • (Apache 2.0) io.grpc:grpc-xds (io.grpc:grpc-xds:1.71.0 - https://github.com/grpc/grpc-java)
  • -
  • (The Apache Software License, Version 2.0) micrometer-commons (io.micrometer:micrometer-commons:1.15.6 - https://github.com/micrometer-metrics/micrometer)
  • -
  • (The Apache Software License, Version 2.0) micrometer-core (io.micrometer:micrometer-core:1.15.6 - https://github.com/micrometer-metrics/micrometer)
  • -
  • (The Apache Software License, Version 2.0) micrometer-jakarta9 (io.micrometer:micrometer-jakarta9:1.15.6 - https://github.com/micrometer-metrics/micrometer)
  • -
  • (The Apache Software License, Version 2.0) micrometer-observation (io.micrometer:micrometer-observation:1.15.6 - https://github.com/micrometer-metrics/micrometer)
  • -
  • (Apache License, Version 2.0) Netty/Buffer (io.netty:netty-buffer:4.1.118.Final - https://netty.io/netty-buffer/)
  • -
  • (Apache License, Version 2.0) Netty/Codec (io.netty:netty-codec:4.1.118.Final - https://netty.io/netty-codec/)
  • -
  • (Apache License, Version 2.0) Netty/Codec/DNS (io.netty:netty-codec-dns:4.1.118.Final - https://netty.io/netty-codec-dns/)
  • -
  • (Apache License, Version 2.0) Netty/Codec/HTTP (io.netty:netty-codec-http:4.1.118.Final - https://netty.io/netty-codec-http/)
  • -
  • (Apache License, Version 2.0) Netty/Codec/HTTP2 (io.netty:netty-codec-http2:4.1.118.Final - https://netty.io/netty-codec-http2/)
  • -
  • (Apache License, Version 2.0) Netty/Codec/Socks (io.netty:netty-codec-socks:4.1.118.Final - https://netty.io/netty-codec-socks/)
  • -
  • (Apache License, Version 2.0) Netty/Common (io.netty:netty-common:4.1.118.Final - https://netty.io/netty-common/)
  • -
  • (Apache License, Version 2.0) Netty/Handler (io.netty:netty-handler:4.1.118.Final - https://netty.io/netty-handler/)
  • -
  • (Apache License, Version 2.0) Netty/Handler/Proxy (io.netty:netty-handler-proxy:4.1.118.Final - https://netty.io/netty-handler-proxy/)
  • -
  • (Apache License, Version 2.0) Netty/Resolver (io.netty:netty-resolver:4.1.118.Final - https://netty.io/netty-resolver/)
  • -
  • (Apache License, Version 2.0) Netty/Resolver/DNS (io.netty:netty-resolver-dns:4.1.118.Final - https://netty.io/netty-resolver-dns/)
  • -
  • (Apache License, Version 2.0) Netty/Resolver/DNS/Classes/MacOS (io.netty:netty-resolver-dns-classes-macos:4.1.118.Final - https://netty.io/netty-resolver-dns-classes-macos/)
  • -
  • (Apache License, Version 2.0) Netty/Resolver/DNS/Native/MacOS (io.netty:netty-resolver-dns-native-macos:4.1.118.Final - https://netty.io/netty-resolver-dns-native-macos/)
  • -
  • (The Apache Software License, Version 2.0) Netty/TomcatNative [BoringSSL - Static] (io.netty:netty-tcnative-boringssl-static:2.0.70.Final - https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/)
  • -
  • (The Apache Software License, Version 2.0) Netty/TomcatNative [OpenSSL - Classes] (io.netty:netty-tcnative-classes:2.0.70.Final - https://github.com/netty/netty-tcnative/netty-tcnative-classes/)
  • -
  • (Apache License, Version 2.0) Netty/Transport (io.netty:netty-transport:4.1.118.Final - https://netty.io/netty-transport/)
  • -
  • (Apache License, Version 2.0) Netty/Transport/Classes/Epoll (io.netty:netty-transport-classes-epoll:4.1.118.Final - https://netty.io/netty-transport-classes-epoll/)
  • -
  • (Apache License, Version 2.0) Netty/Transport/Classes/KQueue (io.netty:netty-transport-classes-kqueue:4.1.118.Final - https://netty.io/netty-transport-classes-kqueue/)
  • -
  • (Apache License, Version 2.0) Netty/Transport/Native/Epoll (io.netty:netty-transport-native-epoll:4.1.118.Final - https://netty.io/netty-transport-native-epoll/)
  • -
  • (Apache License, Version 2.0) Netty/Transport/Native/KQueue (io.netty:netty-transport-native-kqueue:4.1.118.Final - https://netty.io/netty-transport-native-kqueue/)
  • -
  • (Apache License, Version 2.0) Netty/Transport/Native/Unix/Common (io.netty:netty-transport-native-unix-common:4.1.118.Final - https://netty.io/netty-transport-native-unix-common/)
  • +
  • (Apache 2.0) io.grpc:grpc-alts (io.grpc:grpc-alts:1.76.2 - https://github.com/grpc/grpc-java)
  • +
  • (Apache 2.0) io.grpc:grpc-api (io.grpc:grpc-api:1.76.2 - https://github.com/grpc/grpc-java)
  • +
  • (Apache 2.0) io.grpc:grpc-auth (io.grpc:grpc-auth:1.76.2 - https://github.com/grpc/grpc-java)
  • +
  • (Apache 2.0) io.grpc:grpc-context (io.grpc:grpc-context:1.76.2 - https://github.com/grpc/grpc-java)
  • +
  • (Apache 2.0) io.grpc:grpc-core (io.grpc:grpc-core:1.76.2 - https://github.com/grpc/grpc-java)
  • +
  • (Apache 2.0) io.grpc:grpc-googleapis (io.grpc:grpc-googleapis:1.76.2 - https://github.com/grpc/grpc-java)
  • +
  • (Apache 2.0) io.grpc:grpc-grpclb (io.grpc:grpc-grpclb:1.76.2 - https://github.com/grpc/grpc-java)
  • +
  • (Apache 2.0) io.grpc:grpc-inprocess (io.grpc:grpc-inprocess:1.76.2 - https://github.com/grpc/grpc-java)
  • +
  • (Apache 2.0) io.grpc:grpc-netty-shaded (io.grpc:grpc-netty-shaded:1.76.2 - https://github.com/grpc/grpc-java)
  • +
  • (Apache 2.0) io.grpc:grpc-protobuf (io.grpc:grpc-protobuf:1.76.2 - https://github.com/grpc/grpc-java)
  • +
  • (Apache 2.0) io.grpc:grpc-protobuf-lite (io.grpc:grpc-protobuf-lite:1.76.2 - https://github.com/grpc/grpc-java)
  • +
  • (Apache 2.0) io.grpc:grpc-services (io.grpc:grpc-services:1.76.2 - https://github.com/grpc/grpc-java)
  • +
  • (Apache 2.0) io.grpc:grpc-stub (io.grpc:grpc-stub:1.76.2 - https://github.com/grpc/grpc-java)
  • +
  • (Apache 2.0) io.grpc:grpc-util (io.grpc:grpc-util:1.76.2 - https://github.com/grpc/grpc-java)
  • +
  • (Apache 2.0) io.grpc:grpc-xds (io.grpc:grpc-xds:1.76.2 - https://github.com/grpc/grpc-java)
  • +
  • (The Apache Software License, Version 2.0) micrometer-commons (io.micrometer:micrometer-commons:1.15.8 - https://github.com/micrometer-metrics/micrometer)
  • +
  • (The Apache Software License, Version 2.0) micrometer-core (io.micrometer:micrometer-core:1.15.8 - https://github.com/micrometer-metrics/micrometer)
  • +
  • (The Apache Software License, Version 2.0) micrometer-jakarta9 (io.micrometer:micrometer-jakarta9:1.15.8 - https://github.com/micrometer-metrics/micrometer)
  • +
  • (The Apache Software License, Version 2.0) micrometer-observation (io.micrometer:micrometer-observation:1.15.8 - https://github.com/micrometer-metrics/micrometer)
  • +
  • (Apache License, Version 2.0) Netty/Buffer (io.netty:netty-buffer:4.1.123.Final - https://netty.io/netty-buffer/)
  • +
  • (Apache License, Version 2.0) Netty/Codec (io.netty:netty-codec:4.1.123.Final - https://netty.io/netty-codec/)
  • +
  • (Apache License, Version 2.0) Netty/Codec/DNS (io.netty:netty-codec-dns:4.1.123.Final - https://netty.io/netty-codec-dns/)
  • +
  • (Apache License, Version 2.0) Netty/Codec/HTTP (io.netty:netty-codec-http:4.1.123.Final - https://netty.io/netty-codec-http/)
  • +
  • (Apache License, Version 2.0) Netty/Codec/HTTP2 (io.netty:netty-codec-http2:4.1.123.Final - https://netty.io/netty-codec-http2/)
  • +
  • (Apache License, Version 2.0) Netty/Codec/Socks (io.netty:netty-codec-socks:4.1.123.Final - https://netty.io/netty-codec-socks/)
  • +
  • (Apache License, Version 2.0) Netty/Common (io.netty:netty-common:4.1.123.Final - https://netty.io/netty-common/)
  • +
  • (Apache License, Version 2.0) Netty/Handler (io.netty:netty-handler:4.1.123.Final - https://netty.io/netty-handler/)
  • +
  • (Apache License, Version 2.0) Netty/Handler/Proxy (io.netty:netty-handler-proxy:4.1.123.Final - https://netty.io/netty-handler-proxy/)
  • +
  • (Apache License, Version 2.0) Netty/Resolver (io.netty:netty-resolver:4.1.123.Final - https://netty.io/netty-resolver/)
  • +
  • (Apache License, Version 2.0) Netty/Resolver/DNS (io.netty:netty-resolver-dns:4.1.123.Final - https://netty.io/netty-resolver-dns/)
  • +
  • (Apache License, Version 2.0) Netty/Resolver/DNS/Classes/MacOS (io.netty:netty-resolver-dns-classes-macos:4.1.123.Final - https://netty.io/netty-resolver-dns-classes-macos/)
  • +
  • (Apache License, Version 2.0) Netty/Resolver/DNS/Native/MacOS (io.netty:netty-resolver-dns-native-macos:4.1.123.Final - https://netty.io/netty-resolver-dns-native-macos/)
  • +
  • (The Apache Software License, Version 2.0) Netty/TomcatNative [BoringSSL - Static] (io.netty:netty-tcnative-boringssl-static:2.0.72.Final - https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/)
  • +
  • (The Apache Software License, Version 2.0) Netty/TomcatNative [OpenSSL - Classes] (io.netty:netty-tcnative-classes:2.0.72.Final - https://github.com/netty/netty-tcnative/netty-tcnative-classes/)
  • +
  • (Apache License, Version 2.0) Netty/Transport (io.netty:netty-transport:4.1.123.Final - https://netty.io/netty-transport/)
  • +
  • (Apache License, Version 2.0) Netty/Transport/Classes/Epoll (io.netty:netty-transport-classes-epoll:4.1.123.Final - https://netty.io/netty-transport-classes-epoll/)
  • +
  • (Apache License, Version 2.0) Netty/Transport/Classes/KQueue (io.netty:netty-transport-classes-kqueue:4.1.123.Final - https://netty.io/netty-transport-classes-kqueue/)
  • +
  • (Apache License, Version 2.0) Netty/Transport/Native/Epoll (io.netty:netty-transport-native-epoll:4.1.123.Final - https://netty.io/netty-transport-native-epoll/)
  • +
  • (Apache License, Version 2.0) Netty/Transport/Native/KQueue (io.netty:netty-transport-native-kqueue:4.1.123.Final - https://netty.io/netty-transport-native-kqueue/)
  • +
  • (Apache License, Version 2.0) Netty/Transport/Native/Unix/Common (io.netty:netty-transport-native-unix-common:4.1.123.Final - https://netty.io/netty-transport-native-unix-common/)
  • (The Apache License, Version 2.0) OpenCensus (io.opencensus:opencensus-api:0.31.1 - https://github.com/census-instrumentation/opencensus-java)
  • (The Apache License, Version 2.0) OpenCensus (io.opencensus:opencensus-contrib-http-util:0.31.1 - https://github.com/census-instrumentation/opencensus-java)
  • (Apache 2.0) perfmark:perfmark-api (io.perfmark:perfmark-api:0.27.0 - https://github.com/perfmark/perfmark)
  • -
  • (Apache License, Version 2.0) Non-Blocking Reactive Foundation for the JVM (io.projectreactor:reactor-core:3.7.13 - https://github.com/reactor/reactor-core)
  • -
  • (The Apache Software License, Version 2.0) Core functionality for the Reactor Netty library (io.projectreactor.netty:reactor-netty-core:1.2.12 - https://github.com/reactor/reactor-netty)
  • -
  • (The Apache Software License, Version 2.0) HTTP functionality for the Reactor Netty library (io.projectreactor.netty:reactor-netty-http:1.2.12 - https://github.com/reactor/reactor-netty)
  • -
  • (Apache License 2.0) swagger-annotations-jakarta (io.swagger.core.v3:swagger-annotations-jakarta:2.2.38 - https://github.com/swagger-api/swagger-core/modules/swagger-annotations-jakarta)
  • -
  • (Apache License 2.0) swagger-core-jakarta (io.swagger.core.v3:swagger-core-jakarta:2.2.38 - https://github.com/swagger-api/swagger-core/modules/swagger-core-jakarta)
  • -
  • (Apache License 2.0) swagger-models-jakarta (io.swagger.core.v3:swagger-models-jakarta:2.2.38 - https://github.com/swagger-api/swagger-core/modules/swagger-models-jakarta)
  • +
  • (Apache License, Version 2.0) Non-Blocking Reactive Foundation for the JVM (io.projectreactor:reactor-core:3.7.15 - https://github.com/reactor/reactor-core)
  • +
  • (The Apache Software License, Version 2.0) Core functionality for the Reactor Netty library (io.projectreactor.netty:reactor-netty-core:1.2.14 - https://github.com/reactor/reactor-netty)
  • +
  • (The Apache Software License, Version 2.0) HTTP functionality for the Reactor Netty library (io.projectreactor.netty:reactor-netty-http:1.2.14 - https://github.com/reactor/reactor-netty)
  • +
  • (Apache License 2.0) swagger-annotations-jakarta (io.swagger.core.v3:swagger-annotations-jakarta:2.2.41 - https://github.com/swagger-api/swagger-core/modules/swagger-annotations-jakarta)
  • +
  • (Apache License 2.0) swagger-core-jakarta (io.swagger.core.v3:swagger-core-jakarta:2.2.41 - https://github.com/swagger-api/swagger-core/modules/swagger-core-jakarta)
  • +
  • (Apache License 2.0) swagger-models-jakarta (io.swagger.core.v3:swagger-models-jakarta:2.2.41 - https://github.com/swagger-api/swagger-core/modules/swagger-models-jakarta)
  • (EDL 1.0) Jakarta Activation API (jakarta.activation:jakarta.activation-api:2.1.4 - https://github.com/jakartaee/jaf-api)
  • (EPL 2.0) (GPL2 w/ CPE) Jakarta Annotations API (jakarta.annotation:jakarta.annotation-api:2.1.1 - https://projects.eclipse.org/projects/ee4j.ca)
  • (EPL 2.0) (GPL2 w/ CPE) jakarta.transaction API (jakarta.transaction:jakarta.transaction-api:2.0.1 - https://projects.eclipse.org/projects/ee4j.jta)
  • @@ -226,8 +226,8 @@
    🎯 Learning Objectives
  • (The Apache Software License, Version 2.0) Apache Groovy (org.apache.groovy:groovy:4.0.29 - https://groovy-lang.org)
  • (Apache License, Version 2.0) Apache HttpClient (org.apache.httpcomponents:httpclient:4.5.14 - http://hc.apache.org/httpcomponents-client-ga)
  • (Apache License, Version 2.0) Apache HttpCore (org.apache.httpcomponents:httpcore:4.4.16 - http://hc.apache.org/httpcomponents-core-ga)
  • -
  • (Apache License, Version 2.0) Apache HttpClient (org.apache.httpcomponents.client5:httpclient5:5.5.1 - https://hc.apache.org/httpcomponents-client-5.5.x/5.5.1/httpclient5/)
  • -
  • (Apache License, Version 2.0) Apache HttpClient Cache (org.apache.httpcomponents.client5:httpclient5-cache:5.5.1 - https://hc.apache.org/httpcomponents-client-5.5.x/5.5.1/httpclient5-cache/)
  • +
  • (Apache License, Version 2.0) Apache HttpClient (org.apache.httpcomponents.client5:httpclient5:5.5.2 - https://hc.apache.org/httpcomponents-client-5.5.x/5.5.2/httpclient5/)
  • +
  • (Apache License, Version 2.0) Apache HttpClient Cache (org.apache.httpcomponents.client5:httpclient5-cache:5.5.2 - https://hc.apache.org/httpcomponents-client-5.5.x/5.5.2/httpclient5-cache/)
  • (Apache License, Version 2.0) Apache HttpComponents Core HTTP/1.1 (org.apache.httpcomponents.core5:httpcore5:5.3.6 - https://hc.apache.org/httpcomponents-core-5.3.x/5.3.6/httpcore5/)
  • (Apache License, Version 2.0) Apache HttpComponents Core HTTP/2 (org.apache.httpcomponents.core5:httpcore5-h2:5.3.6 - https://hc.apache.org/httpcomponents-core-5.3.x/5.3.6/httpcore5-h2/)
  • (Apache-2.0) Apache Log4j API (org.apache.logging.log4j:log4j-api:2.24.3 - https://logging.apache.org/log4j/2.x/log4j/log4j-api/)
  • @@ -256,9 +256,9 @@
    🎯 Learning Objectives
  • (Apache-2.0) Apache Maven Common Artifact Filters (org.apache.maven.shared:maven-common-artifact-filters:3.4.0 - https://maven.apache.org/shared/maven-common-artifact-filters/)
  • (Apache-2.0) Apache Maven Dependency Tree (org.apache.maven.shared:maven-dependency-tree:3.3.0 - https://maven.apache.org/shared/maven-dependency-tree/)
  • (Apache License, Version 2.0) Proton-J (org.apache.qpid:proton-j:0.34.1 - https://qpid.apache.org/proton/proton-j)
  • -
  • (Apache License, Version 2.0) tomcat-embed-core (org.apache.tomcat.embed:tomcat-embed-core:10.1.49 - https://tomcat.apache.org/)
  • -
  • (Apache License, Version 2.0) tomcat-embed-el (org.apache.tomcat.embed:tomcat-embed-el:10.1.49 - https://tomcat.apache.org/)
  • -
  • (Apache License, Version 2.0) tomcat-embed-websocket (org.apache.tomcat.embed:tomcat-embed-websocket:10.1.49 - https://tomcat.apache.org/)
  • +
  • (Apache License, Version 2.0) tomcat-embed-core (org.apache.tomcat.embed:tomcat-embed-core:10.1.50 - https://tomcat.apache.org/)
  • +
  • (Apache License, Version 2.0) tomcat-embed-el (org.apache.tomcat.embed:tomcat-embed-el:10.1.50 - https://tomcat.apache.org/)
  • +
  • (Apache License, Version 2.0) tomcat-embed-websocket (org.apache.tomcat.embed:tomcat-embed-websocket:10.1.50 - https://tomcat.apache.org/)
  • (Apache-2.0) Apache Velocity - Engine (org.apache.velocity:velocity-engine-core:2.4.1 - http://velocity.apache.org/engine/devel/velocity-engine-core/)
  • (The Apache Software License, Version 2.0) asciidoctorj (org.asciidoctor:asciidoctorj:3.0.1 - https://github.com/asciidoctor/asciidoctorj)
  • (The Apache Software License, Version 2.0) asciidoctorj-api (org.asciidoctor:asciidoctorj-api:3.0.1 - https://github.com/asciidoctor/asciidoctorj)
  • @@ -288,10 +288,10 @@
    🎯 Learning Objectives
  • (Apache License 2.0) (LGPL 2.1) (MPL 1.1) Javassist (org.javassist:javassist:3.29.0-GA - http://www.javassist.org/)
  • (Apache License 2.0) JBoss Logging 3 (org.jboss.logging:jboss-logging:3.6.1.Final - http://www.jboss.org)
  • (EPL) Dirgra (org.jruby:dirgra:0.5 - https://github.com/jruby/dirgra)
  • -
  • (EPL-2.0) (GPL-2.0) (LGPL-2.1) JRuby Main Maven Artifact (org.jruby:jruby:10.0.2.0 - https://github.com/jruby/jruby/jruby-artifacts/jruby)
  • -
  • (EPL-2.0) (GPL-2.0) (LGPL-2.1) JRuby Base (org.jruby:jruby-base:10.0.2.0 - https://github.com/jruby/jruby/jruby-base)
  • -
  • (EPL-2.0) (GPL-2.0) (LGPL-2.1) JRuby Complete (org.jruby:jruby-complete:10.0.2.0 - https://github.com/jruby/jruby/jruby-artifacts/jruby-complete)
  • -
  • (EPL-2.0) (GPL-2.0) (LGPL-2.1) JRuby Lib Setup (org.jruby:jruby-stdlib:10.0.2.0 - https://github.com/jruby/jruby/jruby-stdlib)
  • +
  • (EPL-2.0) (GPL-2.0) (LGPL-2.1) JRuby Main Maven Artifact (org.jruby:jruby:10.0.3.0 - https://github.com/jruby/jruby/jruby-artifacts/jruby)
  • +
  • (EPL-2.0) (GPL-2.0) (LGPL-2.1) JRuby Base (org.jruby:jruby-base:10.0.3.0 - https://github.com/jruby/jruby/jruby-base)
  • +
  • (EPL-2.0) (GPL-2.0) (LGPL-2.1) JRuby Complete (org.jruby:jruby-complete:10.0.3.0 - https://github.com/jruby/jruby/jruby-artifacts/jruby-complete)
  • +
  • (EPL-2.0) (GPL-2.0) (LGPL-2.1) JRuby Lib Setup (org.jruby:jruby-stdlib:10.0.3.0 - https://github.com/jruby/jruby/jruby-stdlib)
  • (BSD) JZlib (org.jruby:jzlib:1.1.5 - http://www.jcraft.com/jzlib/)
  • (MIT License) JCodings (org.jruby.jcodings:jcodings:1.0.63 - http://nexus.sonatype.org/oss-repository-hosting.html/jcodings)
  • (MIT License) Joni (org.jruby.joni:joni:2.2.6 - http://nexus.sonatype.org/oss-repository-hosting.html/joni)
  • @@ -332,29 +332,29 @@
    🎯 Learning Objectives
  • (The Apache Software License, Version 2.0) Sisu - Guice (org.sonatype.sisu:sisu-guice:2.1.7 - http://forge.sonatype.com/sisu-guice/)
  • (The Apache Software License, Version 2.0) Sisu - Inject (JSR330 bean support) (org.sonatype.sisu:sisu-inject-bean:1.4.2 - http://sisu.sonatype.org/sisu-inject/guice-bean/sisu-inject-bean/)
  • (The Apache Software License, Version 2.0) Sisu - Inject (Plexus bean support) (org.sonatype.sisu:sisu-inject-plexus:1.4.2 - http://sisu.sonatype.org/sisu-inject/guice-bean/guice-plexus/sisu-inject-plexus/)
  • -
  • (The Apache License, Version 2.0) springdoc-openapi-starter-common (org.springdoc:springdoc-openapi-starter-common:2.8.14 - https://springdoc.org/springdoc-openapi-starter-common/)
  • -
  • (The Apache License, Version 2.0) springdoc-openapi-starter-webmvc-api (org.springdoc:springdoc-openapi-starter-webmvc-api:2.8.14 - https://springdoc.org/springdoc-openapi-starter-webmvc-api/)
  • -
  • (The Apache License, Version 2.0) springdoc-openapi-starter-webmvc-ui (org.springdoc:springdoc-openapi-starter-webmvc-ui:2.8.14 - https://springdoc.org/springdoc-openapi-starter-webmvc-ui/)
  • -
  • (Apache License, Version 2.0) Spring AOP (org.springframework:spring-aop:6.2.14 - https://github.com/spring-projects/spring-framework)
  • -
  • (Apache License, Version 2.0) Spring Beans (org.springframework:spring-beans:6.2.14 - https://github.com/spring-projects/spring-framework)
  • -
  • (Apache License, Version 2.0) Spring Context (org.springframework:spring-context:6.2.14 - https://github.com/spring-projects/spring-framework)
  • -
  • (Apache License, Version 2.0) Spring Core (org.springframework:spring-core:6.2.14 - https://github.com/spring-projects/spring-framework)
  • -
  • (Apache License, Version 2.0) Spring Expression Language (SpEL) (org.springframework:spring-expression:6.2.14 - https://github.com/spring-projects/spring-framework)
  • -
  • (Apache License, Version 2.0) Spring Commons Logging Bridge (org.springframework:spring-jcl:6.2.14 - https://github.com/spring-projects/spring-framework)
  • -
  • (Apache License, Version 2.0) Spring Web (org.springframework:spring-web:6.2.14 - https://github.com/spring-projects/spring-framework)
  • -
  • (Apache License, Version 2.0) Spring Web MVC (org.springframework:spring-webmvc:6.2.14 - https://github.com/spring-projects/spring-framework)
  • -
  • (Apache License, Version 2.0) spring-boot (org.springframework.boot:spring-boot:3.5.8 - https://spring.io/projects/spring-boot)
  • -
  • (Apache License, Version 2.0) spring-boot-actuator (org.springframework.boot:spring-boot-actuator:3.5.8 - https://spring.io/projects/spring-boot)
  • -
  • (Apache License, Version 2.0) spring-boot-actuator-autoconfigure (org.springframework.boot:spring-boot-actuator-autoconfigure:3.5.8 - https://spring.io/projects/spring-boot)
  • -
  • (Apache License, Version 2.0) spring-boot-autoconfigure (org.springframework.boot:spring-boot-autoconfigure:3.5.8 - https://spring.io/projects/spring-boot)
  • -
  • (Apache License, Version 2.0) spring-boot-starter (org.springframework.boot:spring-boot-starter:3.5.8 - https://spring.io/projects/spring-boot)
  • -
  • (Apache License, Version 2.0) spring-boot-starter-actuator (org.springframework.boot:spring-boot-starter-actuator:3.5.8 - https://spring.io/projects/spring-boot)
  • -
  • (Apache License, Version 2.0) spring-boot-starter-json (org.springframework.boot:spring-boot-starter-json:3.5.8 - https://spring.io/projects/spring-boot)
  • -
  • (Apache License, Version 2.0) spring-boot-starter-logging (org.springframework.boot:spring-boot-starter-logging:3.5.8 - https://spring.io/projects/spring-boot)
  • -
  • (Apache License, Version 2.0) spring-boot-starter-thymeleaf (org.springframework.boot:spring-boot-starter-thymeleaf:3.5.8 - https://spring.io/projects/spring-boot)
  • -
  • (Apache License, Version 2.0) spring-boot-starter-tomcat (org.springframework.boot:spring-boot-starter-tomcat:3.5.8 - https://spring.io/projects/spring-boot)
  • -
  • (Apache License, Version 2.0) spring-boot-starter-validation (org.springframework.boot:spring-boot-starter-validation:3.5.8 - https://spring.io/projects/spring-boot)
  • -
  • (Apache License, Version 2.0) spring-boot-starter-web (org.springframework.boot:spring-boot-starter-web:3.5.8 - https://spring.io/projects/spring-boot)
  • +
  • (The Apache License, Version 2.0) springdoc-openapi-starter-common (org.springdoc:springdoc-openapi-starter-common:2.8.15 - https://springdoc.org/springdoc-openapi-starter-common/)
  • +
  • (The Apache License, Version 2.0) springdoc-openapi-starter-webmvc-api (org.springdoc:springdoc-openapi-starter-webmvc-api:2.8.15 - https://springdoc.org/springdoc-openapi-starter-webmvc-api/)
  • +
  • (The Apache License, Version 2.0) springdoc-openapi-starter-webmvc-ui (org.springdoc:springdoc-openapi-starter-webmvc-ui:2.8.15 - https://springdoc.org/springdoc-openapi-starter-webmvc-ui/)
  • +
  • (Apache License, Version 2.0) Spring AOP (org.springframework:spring-aop:6.2.15 - https://github.com/spring-projects/spring-framework)
  • +
  • (Apache License, Version 2.0) Spring Beans (org.springframework:spring-beans:6.2.15 - https://github.com/spring-projects/spring-framework)
  • +
  • (Apache License, Version 2.0) Spring Context (org.springframework:spring-context:6.2.15 - https://github.com/spring-projects/spring-framework)
  • +
  • (Apache License, Version 2.0) Spring Core (org.springframework:spring-core:6.2.15 - https://github.com/spring-projects/spring-framework)
  • +
  • (Apache License, Version 2.0) Spring Expression Language (SpEL) (org.springframework:spring-expression:6.2.15 - https://github.com/spring-projects/spring-framework)
  • +
  • (Apache License, Version 2.0) Spring Commons Logging Bridge (org.springframework:spring-jcl:6.2.15 - https://github.com/spring-projects/spring-framework)
  • +
  • (Apache License, Version 2.0) Spring Web (org.springframework:spring-web:6.2.15 - https://github.com/spring-projects/spring-framework)
  • +
  • (Apache License, Version 2.0) Spring Web MVC (org.springframework:spring-webmvc:6.2.15 - https://github.com/spring-projects/spring-framework)
  • +
  • (Apache License, Version 2.0) spring-boot (org.springframework.boot:spring-boot:3.5.10 - https://spring.io/projects/spring-boot)
  • +
  • (Apache License, Version 2.0) spring-boot-actuator (org.springframework.boot:spring-boot-actuator:3.5.10 - https://spring.io/projects/spring-boot)
  • +
  • (Apache License, Version 2.0) spring-boot-actuator-autoconfigure (org.springframework.boot:spring-boot-actuator-autoconfigure:3.5.10 - https://spring.io/projects/spring-boot)
  • +
  • (Apache License, Version 2.0) spring-boot-autoconfigure (org.springframework.boot:spring-boot-autoconfigure:3.5.10 - https://spring.io/projects/spring-boot)
  • +
  • (Apache License, Version 2.0) spring-boot-starter (org.springframework.boot:spring-boot-starter:3.5.10 - https://spring.io/projects/spring-boot)
  • +
  • (Apache License, Version 2.0) spring-boot-starter-actuator (org.springframework.boot:spring-boot-starter-actuator:3.5.10 - https://spring.io/projects/spring-boot)
  • +
  • (Apache License, Version 2.0) spring-boot-starter-json (org.springframework.boot:spring-boot-starter-json:3.5.10 - https://spring.io/projects/spring-boot)
  • +
  • (Apache License, Version 2.0) spring-boot-starter-logging (org.springframework.boot:spring-boot-starter-logging:3.5.10 - https://spring.io/projects/spring-boot)
  • +
  • (Apache License, Version 2.0) spring-boot-starter-thymeleaf (org.springframework.boot:spring-boot-starter-thymeleaf:3.5.10 - https://spring.io/projects/spring-boot)
  • +
  • (Apache License, Version 2.0) spring-boot-starter-tomcat (org.springframework.boot:spring-boot-starter-tomcat:3.5.10 - https://spring.io/projects/spring-boot)
  • +
  • (Apache License, Version 2.0) spring-boot-starter-validation (org.springframework.boot:spring-boot-starter-validation:3.5.10 - https://spring.io/projects/spring-boot)
  • +
  • (Apache License, Version 2.0) spring-boot-starter-web (org.springframework.boot:spring-boot-starter-web:3.5.10 - https://spring.io/projects/spring-boot)
  • (Apache License, Version 2.0) Spring Cloud Commons (org.springframework.cloud:spring-cloud-commons:4.3.0 - https://projects.spring.io/spring-cloud/spring-cloud-commons/)
  • (Apache License, Version 2.0) Spring Cloud Context (org.springframework.cloud:spring-cloud-context:4.3.0 - https://projects.spring.io/spring-cloud/spring-cloud-context/)
  • (Apache License, Version 2.0) spring-cloud-starter (org.springframework.cloud:spring-cloud-starter:4.3.0 - https://projects.spring.io/spring-cloud)
  • @@ -365,7 +365,7 @@
    🎯 Learning Objectives
  • (Apache License, Version 2.0) spring-security-crypto (org.springframework.security:spring-security-crypto:6.5.7 - https://spring.io/projects/spring-security)
  • (Apache License, Version 2.0) spring-security-web (org.springframework.security:spring-security-web:6.5.7 - https://spring.io/projects/spring-security)
  • (Apache License, Version 2.0) Spring Vault Core (org.springframework.vault:spring-vault-core:3.2.0 - https://projects.spring.io/spring-vault/spring-vault-core/)
  • -
  • (MIT) Testcontainers :: JUnit Jupiter Extension (org.testcontainers:junit-jupiter:1.21.3 - https://java.testcontainers.org)
  • +
  • (MIT) Testcontainers :: JUnit Jupiter Extension (org.testcontainers:junit-jupiter:1.21.4 - https://java.testcontainers.org)
  • (BSD-3-Clause) ThreeTen backport (org.threeten:threetenbp:1.7.0 - https://www.threeten.org/threetenbp)
  • (The Apache Software License, Version 2.0) thymeleaf (org.thymeleaf:thymeleaf:3.1.3.RELEASE - http://www.thymeleaf.org/thymeleaf-lib/thymeleaf)
  • (The Apache Software License, Version 2.0) thymeleaf-spring6 (org.thymeleaf:thymeleaf-spring6:3.1.3.RELEASE - http://www.thymeleaf.org/thymeleaf-lib/thymeleaf-spring6)
  • @@ -373,10 +373,10 @@
    🎯 Learning Objectives
  • (Public Domain) XZ for Java (org.tukaani:xz:1.9 - https://tukaani.org/xz/java.html)
  • (The Apache Software License, Version 2.0) unbescape (org.unbescape:unbescape:1.1.6.RELEASE - http://www.unbescape.org)
  • (Apache License, Version 2.0) Bootstrap (org.webjars:bootstrap:5.3.8 - http://webjars.org)
  • -
  • (MIT) datatables (org.webjars:datatables:2.3.2 - https://www.webjars.org)
  • +
  • (MIT) datatables (org.webjars:datatables:2.3.7 - https://www.webjars.org)
  • (MIT License) jquery (org.webjars:jquery:3.7.1 - http://webjars.org)
  • -
  • (Apache-2.0) Swagger UI (org.webjars:swagger-ui:5.30.1 - https://www.webjars.org)
  • -
  • (MIT) webjars-locator-lite (org.webjars:webjars-locator-lite:1.1.2 - https://webjars.org)
  • +
  • (Apache-2.0) Swagger UI (org.webjars:swagger-ui:5.31.0 - https://www.webjars.org)
  • +
  • (MIT) webjars-locator-lite (org.webjars:webjars-locator-lite:1.1.3 - https://webjars.org)
  • (BSD 2-Clause) github-buttons (org.webjars.npm:github-buttons:2.14.1 - https://www.webjars.org)
  • (Common Public 1.0) pecoff4j (org.whitesource:pecoff4j:0.0.2.1 - https://github.com/whitesource/pecoff4j-maven)
  • (Apache License, Version 2.0) SnakeYAML (org.yaml:snakeyaml:2.4 - https://bitbucket.org/snakeyaml/snakeyaml)
  • diff --git a/src/test/java/org/owasp/wrongsecrets/oauth/TokenControllerTest.java b/src/test/java/org/owasp/wrongsecrets/oauth/TokenControllerTest.java index e524f2088..3cc87606b 100644 --- a/src/test/java/org/owasp/wrongsecrets/oauth/TokenControllerTest.java +++ b/src/test/java/org/owasp/wrongsecrets/oauth/TokenControllerTest.java @@ -6,6 +6,7 @@ import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status; import org.junit.jupiter.api.Test; +import org.owasp.wrongsecrets.WrongSecretsApplication; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.boot.test.autoconfigure.web.servlet.AutoConfigureMockMvc; import org.springframework.boot.test.context.SpringBootTest; @@ -13,7 +14,7 @@ import org.springframework.test.web.servlet.MockMvc; @AutoConfigureMockMvc -@SpringBootTest +@SpringBootTest(classes = WrongSecretsApplication.class) class TokenControllerTest { @Autowired MockMvc mvc;