From: Ivan Hrasko <ivan.hrasko@pantheon.tech>
Date: Wed, 8 Feb 2023 16:03:21 +0000 (+0100)
Subject: Bump json-unit-assertj to 2.36.1
X-Git-Tag: v4.0.6~21
X-Git-Url: https://git.opendaylight.org/gerrit/gitweb?p=netconf.git;a=commitdiff_plain;h=f0c547ddb5603e3df46a909421c545c5ec62652c

Bump json-unit-assertj to 2.36.1

Fix CVE-2022-42003 by bumping json-unit-assertj to 2.36.1
which uses fixed jackson-databind version 2.14.0.

Change-Id: I3ab3cb9e03393ea1d223616e0b013f7f10e6a74c
Signed-off-by: Ivan Hrasko <ivan.hrasko@pantheon.tech>
(cherry picked from commit 4c0bdb9e23281e579ec9b90a510bd2f0844de502)
---

diff --git a/restconf/restconf-nb/pom.xml b/restconf/restconf-nb/pom.xml
index 72e7476344..dcd0d434d7 100644
--- a/restconf/restconf-nb/pom.xml
+++ b/restconf/restconf-nb/pom.xml
@@ -289,7 +289,7 @@
     <dependency>
       <groupId>net.javacrumbs.json-unit</groupId>
       <artifactId>json-unit-assertj</artifactId>
-      <version>2.36.0</version>
+      <version>2.36.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>