v3.8.10

ahdis · Aug 13, 2024 · 10f162f · 10f162f
1 parent 6780474
commit 10f162f
Show file tree

Hide file tree

Showing 5 changed files with 14 additions and 4 deletions.
diff --git a/docs/changelog.md b/docs/changelog.md
@@ -1,3 +1,7 @@
+2024/08/13 Release 3.8.10
+
+- upgrade graphql to fix [CVE-2024-40094](https://github.com/ahdis/matchbox/security/code-scanning/83)
+
 2024/07/10 Release 3.8.9
 
 - add support for dateTime [#243](https://github.com/ahdis/matchbox/issues/243)

diff --git a/matchbox-engine/pom.xml b/matchbox-engine/pom.xml
@@ -6,7 +6,7 @@
     <parent>
         <artifactId>matchbox</artifactId>
         <groupId>health.matchbox</groupId>
-        <version>3.8.9</version>
+        <version>3.8.10</version>
     </parent>
 
     <artifactId>matchbox-engine</artifactId>

diff --git a/matchbox-frontend/package.json b/matchbox-frontend/package.json
@@ -1,6 +1,6 @@
 {
   "name": "matchbox",
-  "version": "3.8.9",
+  "version": "3.8.10",
   "license": "MIT",
   "scripts": {
     "ng": "ng",

diff --git a/matchbox-server/pom.xml b/matchbox-server/pom.xml
@@ -5,7 +5,7 @@
     <parent>
         <artifactId>matchbox</artifactId>
         <groupId>health.matchbox</groupId>
-        <version>3.8.9</version>
+        <version>3.8.10</version>
     </parent>
 
     <artifactId>matchbox-server</artifactId>

diff --git a/pom.xml b/pom.xml
@@ -9,7 +9,7 @@
 
     <groupId>health.matchbox</groupId>
     <artifactId>matchbox</artifactId>
-    <version>3.8.9</version>
+    <version>3.8.10</version>
     <packaging>pom</packaging>
     <name>matchbox</name>
     <description>An open-source implementation to support testing and implementation of FHIR based solutions and map or
@@ -220,6 +220,12 @@
                     </exclusion>
                 </exclusions>
             </dependency>
+            <!-- https://github.com/ahdis/matchbox/security/code-scanning/83 -->
+            <dependency>
+                <groupId>com.graphql-java</groupId>
+                <artifactId>graphql-java</artifactId>
+                <version>21.5</version>
+            </dependency>    
             <dependency>
                 <groupId>ca.uhn.hapi.fhir</groupId>
                 <artifactId>hapi-fhir-jpaserver-mdm</artifactId>