Merge pull request #194 from refactorfirst/#193-update-vulnerable-dependencies

Update jackson-databind and maven-core to address vulnerabilities

Author: jimbethancourt

codebase-graph-builder/pom.xml

@@ -18,7 +18,7 @@
             <dependency>
                 <groupId>org.openrewrite.recipe</groupId>
                 <artifactId>rewrite-recipe-bom</artifactId>
-                <version>3.33.0</version>
+                <version>3.34.0</version>
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>

pom.xml

@@ -62,7 +62,7 @@
         <sonar.organization>jimbethancourt-github</sonar.organization>
         <sonar.host.url>https://sonarcloud.io</sonar.host.url>
 
-        <maven.core.version>3.9.9</maven.core.version>
+        <maven.core.version>3.9.16</maven.core.version>
     </properties>
 
     <modules>
@@ -186,7 +186,7 @@
             <dependency>
                 <groupId>com.fasterxml.jackson.core</groupId>
                 <artifactId>jackson-databind</artifactId>
-                <version>2.18.3</version>
+                <version>2.18.8</version>
             </dependency>
 
             <!-- Needed to suppress CVE-2023-2976-->