🔒 Fixing security issues. 升级依赖避免CVE

pigx-common/pigx-common-bom/pom.xml

@@ -18,33 +18,33 @@
 
     <properties>
         <pigx.version>5.3.0</pigx.version>
-        <mybatis-plus.version>3.5.4</mybatis-plus.version>
-        <mybatis-plus-join.version>1.4.6</mybatis-plus-join.version>
-        <dynamic-ds.version>4.2.0</dynamic-ds.version>
+        <mybatis-plus.version>3.5.5</mybatis-plus.version>
+        <mybatis-plus-join.version>1.4.10</mybatis-plus-join.version>
+        <dynamic-ds.version>4.3.0</dynamic-ds.version>
         <druid.version>1.2.20</druid.version>
-        <hutool.version>5.8.22</hutool.version>
+        <hutool.version>5.8.23</hutool.version>
         <mysql.connector.version>8.0.33</mysql.connector.version>
         <oracle.version>21.3.0.0</oracle.version>
         <sqlserver.version>8.4.1.jre8</sqlserver.version>
         <dm.version>8.1.2.192</dm.version>
         <highgo.version>6.2.0</highgo.version>
         <knife4j.version>3.0.3</knife4j.version>
-        <swagger.core.version>2.2.8</swagger.core.version>
         <springdoc.version>1.6.15</springdoc.version>
+        <swagger.core.version>2.2.14</swagger.core.version>
         <mp.weixin.version>4.4.0</mp.weixin.version>
         <ijpay.version>2.8.0</ijpay.version>
         <groovy.version>3.0.3</groovy.version>
         <javax.version>4.0.1</javax.version>
-        <jsoup.version>1.13.1</jsoup.version>
-        <aviator.version>5.3.3</aviator.version>
+        <jsoup.version>1.15.3</jsoup.version>
+        <aviator.version>5.4.1</aviator.version>
         <flowable.version>6.8.0</flowable.version>
         <security.oauth.version>2.5.2.RELEASE</security.oauth.version>
         <fastjson.version>1.2.83</fastjson.version>
         <xxl.job.version>2.3.0</xxl.job.version>
         <aliyun.version>3.0.52.ALL</aliyun.version>
         <aws.version>1.12.261</aws.version>
-        <javers.version>6.10.0</javers.version>
-        <seata.version>1.6.1</seata.version>
+        <javers.version>7.3.3</javers.version>
+        <seata.version>1.7.0</seata.version>
         <asm.version>7.1</asm.version>
         <log4j2.version>2.17.1</log4j2.version>
         <javaformat.plugin.version>0.0.23</javaformat.plugin.version>
@@ -140,6 +140,11 @@
                 <artifactId>pigx-common-xss</artifactId>
                 <version>${pigx.version}</version>
             </dependency>
+            <dependency>
+                <groupId>com.pig4cloud</groupId>
+                <artifactId>pigx-common-sse</artifactId>
+                <version>${pigx.version}</version>
+            </dependency>
             <dependency>
                 <groupId>com.pig4cloud</groupId>
                 <artifactId>pigx-common-websocket</artifactId>
@@ -379,6 +384,12 @@
                 <artifactId>jsoup</artifactId>
                 <version>${jsoup.version}</version>
             </dependency>
+            <!--工作流依赖-->
+            <dependency>
+                <groupId>org.flowable</groupId>
+                <artifactId>flowable-spring-boot-starter-process</artifactId>
+                <version>${flowable.version}</version>
+            </dependency>
             <!--  指定 log4j 版本-->
             <dependency>
                 <groupId>org.apache.logging.log4j</groupId>

pigx-common/pigx-common-xss/src/main/java/com/pig4cloud/pigx/common/xss/utils/XssUtil.java

@@ -61,7 +61,7 @@ public class XssUtil {
 	 *
 	 * @author michael
 	 */
-	public static class HtmlWhitelist extends org.jsoup.safety.Whitelist {
+	public static class HtmlWhitelist extends org.jsoup.safety.Safelist {
 
 		public HtmlWhitelist() {
 			addTags("a", "b", "blockquote", "br", "caption", "cite", "code", "col", "colgroup", "dd", "div", "span",

pom.xml

@@ -54,6 +54,8 @@
         <jasypt.version>3.0.5</jasypt.version>
         <ttl.version>2.12.6</ttl.version>
         <jaxb.version>2.3.5</jaxb.version>
+        <jimu.version>1.6.6-beta2</jimu.version>
+        <aws.version>1.12.261</aws.version>
         <ureport.version>2.2.9</ureport.version>
         <jimu.version>1.6.5</jimu.version>
         <aws.version>1.11.543</aws.version>
@@ -239,7 +241,7 @@
                     <target>${maven.compiler.target}</target>
                     <source>${maven.compiler.source}</source>
                     <encoding>UTF-8</encoding>
-                    <skip>true</skip>
+                    <parameters>true</parameters>
                 </configuration>
             </plugin>
             <!--打包关联最新 git commit 信息插件-->