Bump wk-wrap to 1.1.13 to avoid outdated log4j dependency (#5903)

scalableminds · Dec 13, 2021 · febf50d · febf50d
1 parent d5b32cb
commit febf50d
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/CHANGELOG.unreleased.md b/CHANGELOG.unreleased.md
@@ -17,7 +17,7 @@ For upgrade instructions, please check the [migration guide](MIGRATIONS.released
 -
 
 ### Fixed
--
+- Fixed a security vulnerability by upgrading log4j to newest version. [#5900](https://github.com/scalableminds/webknossos/pull/5900)
 
 ### Removed
 -

diff --git a/project/Dependencies.scala b/project/Dependencies.scala
@@ -4,8 +4,8 @@ import sbt._
 object Dependencies {
   private val akkaVersion = "2.6.14"
   private val akkaHttpVersion = "10.2.6"
-  private val log4jVersion = "2.13.3"
-  private val webknossosWrapVersion = "1.1.11"
+  private val log4jVersion = "2.15.0"
+  private val webknossosWrapVersion = "1.1.13"
 
   private val akkaLogging = "com.typesafe.akka" %% "akka-slf4j" % akkaVersion
   private val akkaTest = "com.typesafe.akka" %% "akka-testkit" % akkaVersion