Merge pull request #223 from FAIRDataTeam/hotfix/1.12.2

Hotfix 1.12.2

CHANGELOG.md

@@ -7,6 +7,12 @@ to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+## [1.12.2]
+
+### Changed
+
+- Forcing log4j (indirect dependency) to v2.16.0 due to [vulnerability](https://spring.io/blog/2021/12/10/log4j2-vulnerability-and-spring-boot) (again)
+
 ## [1.12.1]
 
 ### Changed
@@ -246,3 +252,4 @@ The first release of reference FAIR Data Point implementation.
 [1.11.0]: /../../tree/v1.11.0
 [1.12.0]: /../../tree/v1.12.0
 [1.12.1]: /../../tree/v1.12.1
+[1.12.2]: /../../tree/v1.12.2

pom.xml

@@ -10,7 +10,7 @@
     </parent>
     <groupId>nl.dtls</groupId>
     <artifactId>fairdatapoint</artifactId>
-    <version>1.12.1</version>
+    <version>1.12.2</version>
     <packaging>jar</packaging>
 
     <name>FairDataPoint</name>
@@ -64,7 +64,7 @@
         <jwt.version>0.11.2</jwt.version>
         <lombok.version>1.18.20</lombok.version>
         <rdf-resolver.version>0.1.2-SNAPSHOT</rdf-resolver.version>
-        <log4j2.version>2.15.0</log4j2.version>
+        <log4j2.version>2.16.0</log4j2.version>
 
         <!-- Plugins -->
         <plugin.license.version>4.1</plugin.license.version>

src/main/resources/application.yml

@@ -59,7 +59,7 @@ metadataProperties:
 
 openapi:
   title: FAIR Data Point API
-  version: 1.12.1
+  version: 1.12.2
   description: "The reference implementation of the metadata registration service: A service implementing the API specification. It contains an authentication system to allow maintainers to define and update metadata. Read-only access to the data is public."
   contact:
     name: Luiz Bonino