fix: vulnerable dependencies

EasyPost · Sep 24, 2024 · c96cacb · c96cacb
1 parent 71b20e3
commit c96cacb
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 14 deletions.
diff --git a/dependency-check-suppressions.xml b/dependency-check-suppressions.xml
@@ -5,14 +5,7 @@
         Below vulnerabilities are from outdated Protocol Buffers which is the dependency of Error Prone.
         This will not affect our code.
         -->
-        <vulnerabilityName>CVE-2022-3171</vulnerabilityName>
-        <vulnerabilityName>CVE-2022-3509</vulnerabilityName>
-        <vulnerabilityName>CVE-2022-3510</vulnerabilityName>
         <vulnerabilityName>CVE-2023-2976</vulnerabilityName>
-        <!--
-        Vulnerability in the Dependency Check itself, used during testing.
-        Will not affect end-users.
-        Ref: https://github.com/jeremylong/DependencyCheck/issues/5943 -->
-        <vulnerabilityName>CVE-2023-4759</vulnerabilityName>
+        <vulnerabilityName>CVE-2024-7254</vulnerabilityName>
     </suppress>
 </suppressions>
diff --git a/pom.xml b/pom.xml
@@ -51,7 +51,7 @@
         <dependency>
             <groupId>com.google.errorprone</groupId>
             <artifactId>error_prone_core</artifactId>
-            <version>2.19.0</version>
+            <version>2.32.0</version>
             <scope>provided</scope>
         </dependency>
         <dependency>
@@ -225,14 +225,12 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-compiler-plugin</artifactId>
-                <version>3.11.0</version>
+                <version>3.13.0</version>
                 <configuration>
                     <release>8</release>
                     <encoding>UTF-8</encoding>
                     <fork>true</fork>
                     <compilerArgs>
-                        <arg>-XDcompilePolicy=simple</arg>
-                        <arg>-Xplugin:ErrorProne</arg>
                         <arg>-XDcompilePolicy=simple</arg>
                         <arg>-Xplugin:ErrorProne</arg>
                         <arg>-J--add-exports=jdk.compiler/com.sun.tools.javac.api=ALL-UNNAMED</arg>
@@ -250,7 +248,7 @@
                         <path>
                             <groupId>com.google.errorprone</groupId>
                             <artifactId>error_prone_core</artifactId>
-                            <version>2.17.0</version>
+                            <version>2.32.0</version>
                         </path>
                         <path>
                             <groupId>org.projectlombok</groupId>

diff --git a/src/main/java/com/easypost/service/AddressService.java b/src/main/java/com/easypost/service/AddressService.java
@@ -68,7 +68,7 @@ public Address retrieve(final String id) throws EasyPostException {
      *
      * @param params Map of parameters.
      * @return AddressCollection object.
-     * @throws APIException when the request fails.
+     * @throws EasyPostException when the request fails.
      */
     public AddressCollection all(final Map<String, Object> params) throws EasyPostException {
         String endpoint = "addresses";