From daff3582b40762febc65aedfb4f2be159e48287e Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Wed, 5 Oct 2022 18:12:26 +0000
Subject: [PATCH] fix: core/pom.xml to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-COMGITHUBJNR-1570422
- https://snyk.io/vuln/SNYK-JAVA-COMMONSBEANUTILS-460111
- https://snyk.io/vuln/SNYK-JAVA-COMMONSFILEUPLOAD-30082
- https://snyk.io/vuln/SNYK-JAVA-COMMONSFILEUPLOAD-30401
- https://snyk.io/vuln/SNYK-JAVA-COMMONSFILEUPLOAD-31540
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHECOMMONS-1316638
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHECOMMONS-1316639
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHECOMMONS-1316640
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHECOMMONS-1316641
- https://snyk.io/vuln/SNYK-JAVA-ORGDOM4J-565810
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2329097
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2330878
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2436751
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2689634
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-2823313
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-31332
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-31512
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-32202
---
 core/pom.xml | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/core/pom.xml b/core/pom.xml
index 0402553742ec..a673984c13ed 100644
--- a/core/pom.xml
+++ b/core/pom.xml
@@ -39,8 +39,8 @@ THE SOFTWARE.
 
   <properties>
     <staplerFork>true</staplerFork>
-    <stapler.version>1.258</stapler.version>
-    <spring.version>2.5.6.SEC03</spring.version>
+    <stapler.version>1.263</stapler.version>
+    <spring.version>5.2.22.RELEASE</spring.version>
     <groovy.version>2.4.12</groovy.version>
   </properties>
 
@@ -126,7 +126,7 @@ THE SOFTWARE.
     <dependency>
       <groupId>com.github.jnr</groupId>
       <artifactId>jnr-posix</artifactId>
-      <version>3.0.45</version>
+      <version>3.1.8</version>
     </dependency>
     <dependency>
       <groupId>org.kohsuke.stapler</groupId>
@@ -306,12 +306,12 @@ THE SOFTWARE.
     <dependency>
       <groupId>commons-beanutils</groupId>
       <artifactId>commons-beanutils</artifactId>
-      <version>1.9.3</version>
+      <version>1.9.4</version>
     </dependency>
     <dependency>
         <groupId>org.apache.commons</groupId>
         <artifactId>commons-compress</artifactId>
-        <version>1.19</version>
+        <version>1.21</version>
     </dependency>
     <dependency>
       <groupId>javax.mail</groupId>
@@ -364,7 +364,7 @@ THE SOFTWARE.
     <dependency>
       <groupId>commons-jelly</groupId>
       <artifactId>commons-jelly-tags-xml</artifactId>
-      <version>1.1</version>
+      <version>20030211.142705</version>
       <exclusions>
         <exclusion>
           <groupId>commons-jelly</groupId>
@@ -609,7 +609,7 @@ THE SOFTWARE.
     <dependency>
       <groupId>commons-fileupload</groupId>
       <artifactId>commons-fileupload</artifactId>
-      <version>1.3.1-jenkins-2</version> 
+      <version>1.3.3</version> 
     </dependency>
 
     <!-- offline profiler API to put in the classpath if we need it -->
@@ -808,7 +808,7 @@ THE SOFTWARE.
             <manifest>
               <mainClass>hudson.Main</mainClass>
               <addClasspath>true</addClasspath>
-              <classpathPrefix />
+              <classpathPrefix/>
             </manifest>
           </archive>
         </configuration>