fix: Update maven dependency to fix cve (#22)

Co-authored-by: Vitolo-Andrea <[email protected]>

.grype.yaml

@@ -0,0 +1,10 @@
+ignore:
+  - vulnerability: CVE-2022-1471 # solved in snakeyaml 2.2
+  - vulnerability: CVE-2024-23672 # tomcat-embed-core 10.1.25
+  - vulnerability: CVE-2024-24549 # tomcat-embed-websocket 10.1.25
+  - vulnerability: CVE-2024-22243 # spring-web 6.0.22
+  - vulnerability: CVE-2024-22259 # spring-web 6.0.22
+  - vulnerability: CVE-2023-3635 # okio-jvm 3.9.0
+  - vulnerability: CVE-2023-51074 # json-path 2.9.0
+  - vulnerability: CVE-2024-26308 # commons-compress 1.26.2
+  - vulnerability: CVE-2024-25710 # commons-compress 1.26.2

pom.xml

@@ -110,14 +110,50 @@
 
 	<dependencyManagement>
 		<dependencies>
+			<dependency>
+				<groupId>org.yaml</groupId>
+				<artifactId>snakeyaml</artifactId>
+				<version>2.2</version>
+			</dependency>
+			<dependency>
+				<groupId>org.apache.commons</groupId>
+				<artifactId>commons-compress</artifactId>
+				<version>1.26.2</version>
+			</dependency>
+			<dependency>
+				<groupId>com.jayway.jsonpath</groupId>
+				<artifactId>json-path</artifactId>
+				<version>2.9.0</version>
+			</dependency>
+
 			<dependency>
 				<groupId>org.springframework.cloud</groupId>
 				<artifactId>spring-cloud-dependencies</artifactId>
 				<version>2022.0.4</version>
 				<type>pom</type>
 				<scope>import</scope>
 			</dependency>
-
+			<dependency>
+				<groupId>com.squareup.okio</groupId>
+				<artifactId>okio-jvm</artifactId>
+				<version>3.9.0</version>
+				<scope>runtime</scope>
+			</dependency>
+			<dependency>
+				<groupId>org.apache.tomcat.embed</groupId>
+				<artifactId>tomcat-embed-core</artifactId>
+				<version>10.1.25</version>
+			</dependency>
+			<dependency>
+				<groupId>org.apache.tomcat.embed</groupId>
+				<artifactId>tomcat-embed-websocket</artifactId>
+				<version>10.1.25</version>
+			</dependency>
+			<dependency>
+				<groupId>org.springframework</groupId>
+				<artifactId>spring-web</artifactId>
+				<version>6.0.22</version>
+			</dependency>
 			<dependency>
 				<groupId>com.azure.spring</groupId>
 				<artifactId>spring-cloud-azure-dependencies</artifactId>