Fix some CVEs with jenkinscore and workflow (opensearch-project#1648)

* Fix some CVEs with jenkinscore and workflow Signed-off-by: Zelin Hao <[email protected]> * Add worklflow-cps with latest version Signed-off-by: Zelin Hao <[email protected]>
kavilla · Feb 18, 2022 · 18c173c · 18c173c
1 parent 803c15f
commit 18c173c
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/build.gradle b/build.gradle
@@ -69,16 +69,17 @@ sourceSets {
 }
 
 sharedLibrary {
-    coreVersion = '2.330' // https://mvnrepository.com/artifact/org.jenkins-ci.main/jenkins-core?repo=jenkins-releases
+    coreVersion = '2.334' // https://mvnrepository.com/artifact/org.jenkins-ci.main/jenkins-core?repo=jenkins-releases
     testHarnessVersion = '2.72' // https://mvnrepository.com/artifact/org.jenkins-ci.main/jenkins-test-harness?repo=jenkins-releases
     pluginDependencies {
-        workflowCpsGlobalLibraryPluginVersion = '2.18' // https://mvnrepository.com/artifact/org.jenkins-ci.plugins.workflow/workflow-cps-global-lib?repo=jenkins-releases
+        workflowCpsGlobalLibraryPluginVersion = '2.21.1' // https://mvnrepository.com/artifact/org.jenkins-ci.plugins.workflow/workflow-cps-global-lib?repo=jenkins-releases
         // see https://mvnrepository.com/artifact/org.jenkins-ci.plugins/<name>?repo=jenkins-releases for latest
+        dependency('org.jenkins-ci.plugins.workflow', 'workflow-cps', '2.94.1')
         dependency('org.jenkins-ci.plugins', 'pipeline-input-step', '2.12')
         dependency('org.jenkins-ci.plugins', 'script-security', '1.78')
         dependency('org.jenkins-ci.plugins', 'credentials', '2.6.2')
         dependency('org.jenkins-ci.plugins', 'git-client', '3.10.1')
-        dependency('org.jenkins-ci.plugins', 'junit', '1.53')
+        dependency('org.jenkins-ci.plugins', 'junit', '1.55')
         dependency('org.jenkins-ci.plugins', 'mailer', '1.34.2')
     }
 }