fix some medium/low vulnerabilities

Author: jhua-vmware

.github/workflows/main.yml

@@ -85,6 +85,9 @@ jobs:
       - name: Clean duplicates
         run: |
           jq '.runs |= unique_by({tool, invocations, results})' results.sarif > final-results.sarif
+          ls -l
+          cat results.sarif
+          cat final-results.sarif
       - name: Upload SARIF results file
         uses: github/codeql-action/upload-sarif@main
         with:

g11n-ws/build.gradle

@@ -3,7 +3,7 @@
 
 buildscript {
     ext {
-     springBootVersion = '3.3.11'
+     springBootVersion = '3.3.13'
     }
     repositories {
         mavenLocal()
@@ -50,7 +50,7 @@ subprojects{
         httpclient='4.5.13'
         jacksonVersion = '2.16.0'
         springdocVersion='2.6.0'
-        tomcatVersion= '10.1.42'
+        tomcatVersion= '10.1.43'
         springWebMvcVersion= '6.1.16'
 
     	ehCacheVersion = '3.10.8'
@@ -59,7 +59,7 @@ subprojects{
     	junitVersion = '4.13.2'
     	jsonSimpleVersion = '1.1.1'
     	commonsCollectionsVersion = '3.2.2'
-    	commonsLangVersion = '3.12.0'
+    	commonsLangVersion = '3.18.0'
     	commonsIoVersion = '2.17.0'
     	commonsCodecVersion='1.15'
 

g11n-ws/modules/md-service-authen/build.gradle

@@ -39,7 +39,7 @@ dependencies {
     compileOnly("io.jsonwebtoken:jjwt:$jjwtVersion")
     compileOnly("org.apache.commons:commons-lang3:$commonsLangVersion")
     compileOnly("org.springdoc:springdoc-openapi-starter-webmvc-api:$springdocVersion")
-    implementation("com.nimbusds:nimbus-jose-jwt:9.37.3")
+    implementation("com.nimbusds:nimbus-jose-jwt:9.37.4")
 }
 
 bootJar {