Hotfix 1.0.0-beta.7 (#176)

* Fix dependencies

Co-authored-by: Steffengreiner <[email protected]>

Author: sven1103

.github/workflows/codeql-analysis.yml

@@ -45,6 +45,13 @@ jobs:
         java-version: 1.8
         settings-path: ${{ github.workspace }}
 
+    - name: Load local Maven repository cache
+      uses: actions/cache@v2
+      with:
+        path: ~/.m2/repository
+        key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
+        restore-keys: |
+          ${{ runner.os }}-maven-
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL

CHANGELOG.rst

@@ -4,6 +4,20 @@ Changelog
 
 This project adheres to `Semantic Versioning <https://semver.org/>`_.
 
+1.0.0-beta.7 (2021-12-15)
+---------------------------
+
+**Added**
+
+**Fixed**
+
+* CVE-2021-45046
+
+**Dependencies**
+
+* ``org.apache.logging.log4j:log4j-core:2.15.0`` -> ``2.16.0``
+* ``org.apache.logging.log4j:log4j-api:2.15.0`` -> ``2.16.0``
+
 1.0.0-beta.6 (2021-12-13)
 ---------------------------
 

pom.xml

@@ -10,7 +10,7 @@
   </modules>
   <artifactId>sample-tracking-status-overview</artifactId>
   <groupId>life.qbic</groupId>
-  <version>1.0.0-beta.6</version> <!-- <<QUBE_FORCE_BUMP>> -->
+  <version>1.0.0-beta.7</version> <!-- <<QUBE_FORCE_BUMP>> -->
   <name>Sample Tracking Status Overview</name>
   <url>http://github.com/qbicsoftware/sample-tracking-status-overview</url>
   <description>Gives a visual overview of sample statuses</description>
@@ -133,6 +133,16 @@
         <artifactId>data-model-lib</artifactId>
         <version>2.12.0</version>
       </dependency>
+      <dependency>
+        <groupId>org.apache.logging.log4j</groupId>
+        <artifactId>log4j-api</artifactId>
+        <version>2.16.0</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apache.logging.log4j</groupId>
+        <artifactId>log4j-core</artifactId>
+        <version>2.16.0</version>
+      </dependency>
     </dependencies>
   </dependencyManagement>
   <dependencies>

sample-tracking-status-overview-app/pom.xml

@@ -5,12 +5,12 @@
     <parent>
         <artifactId>sample-tracking-status-overview</artifactId>
         <groupId>life.qbic</groupId>
-        <version>1.0.0-beta.6</version> <!-- <<QUBE_FORCE_BUMP>> -->
+        <version>1.0.0-beta.7</version> <!-- <<QUBE_FORCE_BUMP>> -->
     </parent>
     <modelVersion>4.0.0</modelVersion>
     <packaging>war</packaging>
     <properties>
-        <log4j.version>2.15.0</log4j.version>
+        <log4j.version>2.16.0</log4j.version>
     </properties>
     <artifactId>sample-tracking-status-overview-app</artifactId>
     <name>The sample tracking status overview portlet</name>
@@ -19,7 +19,7 @@
         <dependency>
             <groupId>life.qbic</groupId>
             <artifactId>sample-tracking-status-overview-domain</artifactId>
-            <version>1.0.0-beta.6</version> <!-- <<QUBE_FORCE_BUMP>> -->
+            <version>1.0.0-beta.7</version> <!-- <<QUBE_FORCE_BUMP>> -->
             <scope>compile</scope>
         </dependency>
         <dependency>

sample-tracking-status-overview-domain/pom.xml

@@ -7,7 +7,7 @@
     <parent>
         <artifactId>sample-tracking-status-overview</artifactId>
         <groupId>life.qbic</groupId>
-        <version>1.0.0-beta.6</version> <!-- <<QUBE_FORCE_BUMP>> -->
+        <version>1.0.0-beta.7</version> <!-- <<QUBE_FORCE_BUMP>> -->
     </parent>
     <dependencies>
         <dependency>