Bump spring-boot-starter-parent from 2.6.3 to 2.6.4 (#541)

* Bump spring-boot-starter-parent from 2.6.3 to 2.6.4

Bumps [spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) from 2.6.3 to 2.6.4.
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](https://github.com/spring-projects/spring-boot/compare/v2.6.3...v2.6.4)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* ATS-981 / ACS-2626: Reverse temp workaround (as we upgrade to Spring Boot 2.6.4)

- note:
  - Spring Boot 2.6.3 - tomcat-embed-core 9.0.56 (=> CVE-2022-23181)
  - Spring Boot 2.6.4 - tomcat-embed-core 9.0.58

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jan Vonka <jan.vonka@alfresco.com>

[skip ci] as we need to pick up upstream projects
This commit is contained in:
dependabot[bot] 2022-03-16 14:27:38 +00:00 committed by GitHub
parent bd8cd2467b
commit d3f046212f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

11
pom.xml
View File

@ -9,7 +9,7 @@
<parent> <parent>
<groupId>org.springframework.boot</groupId> <groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-parent</artifactId> <artifactId>spring-boot-starter-parent</artifactId>
<version>2.6.3</version> <version>2.6.4</version>
<relativePath /> <relativePath />
</parent> </parent>
@ -249,15 +249,6 @@
</dependencies> </dependencies>
</dependencyManagement> </dependencyManagement>
<!-- ATS-981: Avoid CVE-2022-23181 with spring-boot-starter-web 2.6.3 -->
<dependencies>
<dependency>
<groupId>org.apache.tomcat.embed</groupId>
<artifactId>tomcat-embed-core</artifactId>
<version>9.0.58</version>
</dependency>
</dependencies>
<distributionManagement> <distributionManagement>
<snapshotRepository> <snapshotRepository>
<id>alfresco-public-snapshots</id> <id>alfresco-public-snapshots</id>