Merge pull request #110 from datorama/vulnerabilities-fix

Vulnerabilities fixes

Author: edengal

timbermill-java/timbermill-api/pom.xml

@@ -16,7 +16,7 @@
     <properties>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <java.source-target.version>1.8</java.source-target.version>
-        <timbermill.version>2.4.3</timbermill.version>
+        <timbermill.version>2.4.4</timbermill.version>
         <slf4jVersion>1.7.28</slf4jVersion>
     </properties>
 
@@ -51,12 +51,12 @@
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
-            <version>2.10.5.1</version>
+            <version>2.13.2.2</version>
         </dependency>
         <dependency>
             <groupId>com.google.code.gson</groupId>
             <artifactId>gson</artifactId>
-            <version>2.8.5</version>
+            <version>2.9.0</version>
         </dependency>
         <dependency>
             <groupId>javax.validation</groupId>
@@ -66,7 +66,7 @@
         <dependency>
             <groupId>com.google.guava</groupId>
             <artifactId>guava</artifactId>
-            <version>27.1-jre</version>
+            <version>31.1-jre</version>
         </dependency>
         <dependency>
             <groupId>org.apache.commons</groupId>

timbermill-java/timbermill-client/pom.xml

@@ -15,9 +15,9 @@
     <properties>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <java.source-target.version>1.8</java.source-target.version>
-        <timbermill.version>2.4.3</timbermill.version>
+        <timbermill.version>2.4.4</timbermill.version>
         <aspectj.version>1.9.6</aspectj.version>
-        <org.springframework.version>5.3.4</org.springframework.version>
+        <org.springframework.version>5.3.18</org.springframework.version>
     </properties>
 
     <licenses>

timbermill-java/timbermill-local/pom.xml

@@ -14,7 +14,7 @@
 
     <properties>
         <java.source-target.version>1.8</java.source-target.version>
-        <timbermill.version>2.4.3</timbermill.version>
+        <timbermill.version>2.4.4</timbermill.version>
         <kamon.bundle.version>2.0.4</kamon.bundle.version>
     </properties>
 
@@ -83,7 +83,7 @@
         <dependency>
             <groupId>com.amazonaws</groupId>
             <artifactId>aws-java-sdk-core</artifactId>
-            <version>1.11.965</version>
+            <version>1.12.190</version>
         </dependency>
         <dependency>
             <groupId>org.xerial</groupId>

timbermill-java/timbermill-local/src/main/java/com/datorama/oss/timbermill/pipe/LocalOutputPipe.java

@@ -221,7 +221,7 @@ public static class Builder {
         private int fetchByIdsPartitions = 10000;
         private int expiredMaxIndicesToDeleteInParallel = 2;
         private String timbermillVersion = "";
-        private int limitForPeriod = 10000;
+        private int limitForPeriod = 30000;
         private Duration limitRefreshPeriodMinutes = Duration.ofMinutes(1);
         private int rateLimiterCapacity = 30000;
 

timbermill-java/timbermill-server/pom.xml

@@ -5,7 +5,8 @@
     <parent>
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-starter-parent</artifactId>
-        <version>2.3.3.RELEASE</version>
+        <version>2.6.6</version>
+        <relativePath></relativePath>
     </parent>
     <modelVersion>4.0.0</modelVersion>
 
@@ -16,7 +17,7 @@
     <properties>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <java.source-target.version>1.8</java.source-target.version>
-        <timbermill.version>2.4.3</timbermill.version>
+        <timbermill.version>2.4.4</timbermill.version>
         <slf4jVersion>1.7.28</slf4jVersion>
     </properties>
 
@@ -44,7 +45,7 @@
         <dependency>
             <groupId>org.springframework.cloud</groupId>
             <artifactId>spring-cloud-starter-config</artifactId>
-            <version>2.2.1.RELEASE</version>
+            <version>2.2.8.RELEASE</version>
         </dependency>
         <dependency>
             <groupId>com.datorama.oss</groupId>
@@ -54,7 +55,7 @@
         <dependency>
             <groupId>commons-io</groupId>
             <artifactId>commons-io</artifactId>
-            <version>2.6</version>
+            <version>2.11.0</version>
         </dependency>
         <dependency>
             <groupId>junit</groupId>
@@ -77,6 +78,21 @@
 
     </dependencies>
 
+    <dependencyManagement>
+        <dependencies>
+            <dependency>
+                <groupId>org.elasticsearch.client</groupId>
+                <artifactId>elasticsearch-rest-high-level-client</artifactId>
+                <version>7.8.1</version>
+            </dependency>
+            <dependency>
+                <groupId>org.elasticsearch</groupId>
+                <artifactId>elasticsearch</artifactId>
+                <version>7.8.1</version>
+            </dependency>
+        </dependencies>
+    </dependencyManagement>
+
     <build>
         <pluginManagement>
             <plugins>