KNOX-2514 - Upgrade spotbugs to 4.2.0

spolavarpau1 · Dec 21, 2020 · 447f953 · 447f953
1 parent 68b98c1
commit 447f953
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 1 deletion.
diff --git a/build-tools/src/main/resources/build-tools/spotbugs-filter.xml b/build-tools/src/main/resources/build-tools/spotbugs-filter.xml
@@ -80,4 +80,14 @@ limitations under the License.
     <Class name="org.apache.knox.gateway.performance.test.PerformanceTestConfiguration" />
     <Bug pattern="PATH_TRAVERSAL_IN" />
   </Match>
+
+  <Match>
+    <Class name="org.apache.knox.gateway.audit.log4j.correlation.Log4jCorrelationContext" />
+    <Bug pattern="OBJECT_DESERIALIZATION" />
+  </Match>
+
+  <Match>
+    <Class name="org.apache.knox.gateway.audit.log4j.correlation.Log4jCorrelationService" />
+    <Bug pattern="OBJECT_DESERIALIZATION" />
+  </Match>
 </FindBugsFilter>
diff --git a/pom.xml b/pom.xml
@@ -256,7 +256,7 @@
         <shrinkwrap.version>1.2.6</shrinkwrap.version>
         <shrinkwrap.descriptors.version>2.0.0</shrinkwrap.descriptors.version>
         <slf4j.version>1.7.30</slf4j.version>
-        <spotbugs.version>4.1.2</spotbugs.version>
+        <spotbugs.version>4.2.0</spotbugs.version>
         <spotbugs-maven-plugin.version>4.1.4</spotbugs-maven-plugin.version>
         <spring.version>5.3.2</spring.version>
         <spring-vault.version>2.2.3.RELEASE</spring-vault.version>