From 6a5d8ba9bea247c06afd695be701f67881aaa7f4 Mon Sep 17 00:00:00 2001
From: Mahesh-Binayak <76687012+Mahesh-Binayak@users.noreply.github.com>
Date: Thu, 18 Jul 2024 18:37:57 +0530
Subject: [PATCH 1/2] [MOSIP-34442]Update push-trigger.yml (#235)

Signed-off-by: Mahesh-Binayak <76687012+Mahesh-Binayak@users.noreply.github.com>
Signed-off-by: rajapandi.m <rajapandi.m@technoforte.co.in>
---
 .github/workflows/push-trigger.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/push-trigger.yml b/.github/workflows/push-trigger.yml
index 5f699c3d..608ab4a1 100644
--- a/.github/workflows/push-trigger.yml
+++ b/.github/workflows/push-trigger.yml
@@ -107,7 +107,7 @@ jobs:
   sonar_analysis:
     needs: build-maven-print
     if: "${{  github.event_name != 'pull_request' }}"
-    uses: mosip/kattu/.github/workflows/maven-sonar-analysis.yml@develop
+    uses: mosip/kattu/.github/workflows/maven-sonar-analysis.yml@master-java21
     with:
       SERVICE_LOCATION: ./
     secrets:

From c09c2be4474c856b0fb6745ec5c144405ad7a6d1 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Tue, 23 Jul 2024 04:57:17 +0000
Subject: [PATCH 2/2] fix: pom.xml to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-COMITEXTPDF-2320389
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETOMCATEMBED-7430175
- https://snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-6613077
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-6444790
- https://snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-2848001
- https://snyk.io/vuln/SNYK-JAVA-COMITEXTPDF-541282
- https://snyk.io/vuln/SNYK-JAVA-COMGOOGLECODEGSON-1730327
- https://snyk.io/vuln/SNYK-JAVA-COMITEXTPDF-541284
- https://snyk.io/vuln/SNYK-JAVA-COMBEUST-174815
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-6597980
- https://snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-6613078
- https://snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-5771489
- https://snyk.io/vuln/SNYK-JAVA-COMITEXTPDF-2391484
- https://snyk.io/vuln/SNYK-JAVA-COMITEXTPDF-2391485
- https://snyk.io/vuln/SNYK-JAVA-COMITEXTPDF-2391486

Signed-off-by: rajapandi.m <rajapandi.m@technoforte.co.in>
---
 pom.xml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pom.xml b/pom.xml
index 9b6b4071..6b9d8ac8 100644
--- a/pom.xml
+++ b/pom.xml
@@ -49,15 +49,15 @@
         <io.micrometer.prometheus.version>1.4.2</io.micrometer.prometheus.version>
         <gson.version>2.8.4</gson.version>
         <kernel.websub.version>1.2.1-SNAPSHOT</kernel.websub.version>
-		<itextcore.version>7.1.0</itextcore.version>
+		<itextcore.version>7.2.4</itextcore.version>
 		<itexthtml2pdf.version>2.0.0</itexthtml2pdf.version>
 		<itext.version>5.5.13</itext.version>
 		<commons-math3>3.6.1</commons-math3>
 		<commons-io>2.6</commons-io>
 		<commons-codec>1.11</commons-codec>
-		<bouncycastle.version>1.68</bouncycastle.version>
+		<bouncycastle.version>1.78</bouncycastle.version>
 		<jwt.version> 3.8.1</jwt.version>
-		<google.zxing.version>3.3.3</google.zxing.version>
+		<google.zxing.version>3.4.1</google.zxing.version>
 	</properties>
 	<dependencyManagement>
 		<dependencies>