Merge pull request #1535 from Consensys/update-dependencies

Update dependencies
Consensys · Jun 11, 2024 · 6f3fee6 · 6f3fee6
2 parents 30108c3 + bb38645
commit 6f3fee6
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 4 deletions.
diff --git a/build.gradle b/build.gradle
@@ -119,7 +119,7 @@ allprojects {
         implementation "org.bouncycastle:bcpkix-jdk18on:1.78"
         implementation "org.bouncycastle:bcprov-jdk18on:1.78"
 
-        implementation "com.h2database:h2:2.1.214"
+        implementation "com.h2database:h2:2.2.224"
         implementation "com.zaxxer:HikariCP:5.0.1"
 
         implementation "org.hsqldb:hsqldb:2.7.1"

diff --git a/cvss-suppressions.xml b/cvss-suppressions.xml
@@ -11,10 +11,9 @@
     </suppress>
     <suppress>
         <notes><![CDATA[
-   file name: h2-2.1.214.jar (pkg:maven/com.h2database/h2@2.1.214, cpe:2.3:a:h2database:h2:2.1.214:*:*:*:*:*:*:*) : CVE-2022-45868
+   file name: h2-2.2.224.jar (pkg:maven/com.h2database/h2@2.2.224, cpe:2.3:a:h2database:h2:2.2.224:*:*:*:*:*:*:*) : CVE-2018-14335
    ]]></notes>
         <packageUrl regex="true">^pkg:maven/com\.h2database/h2@.*$</packageUrl>
-        <cve>CVE-2022-45868</cve>
         <cve>CVE-2018-14335</cve>
     </suppress>
     <suppress>

diff --git a/docker/tessera.Dockerfile b/docker/tessera.Dockerfile
@@ -1,5 +1,5 @@
 # Create Tessera installation from pre-built .tar distributions
-FROM alpine:3.13 as extractor
+FROM alpine:3.20 as extractor
 
 COPY . /ctx/