From 9c5111a9571dbbb7af18c6631a288a63c17e0efa Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Fri, 13 Sep 2024 09:58:07 +0000
Subject: [PATCH] fix: upgrade multiple dependencies with Snyk

Snyk has created this PR to upgrade:
  - org.apache.logging.log4j:log4j-api from 2.7 to 2.23.1.
    See this package in maven: https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-api/
  - org.apache.logging.log4j:log4j-core from 2.17.1 to 2.23.1.
    See this package in maven: https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-core/
  - org.apache.struts:struts2-core from 6.3.0.2 to 6.6.0.
    See this package in maven: https://mvnrepository.com/artifact/org.apache.struts/struts2-core/
  - org.apache.struts:struts2-spring-plugin from 6.3.0.2 to 6.6.0.
    See this package in maven: https://mvnrepository.com/artifact/org.apache.struts/struts2-spring-plugin/
  - org.springframework:spring-web from 5.3.38 to 5.3.39.
    See this package in maven: https://mvnrepository.com/artifact/org.springframework/spring-web/
  - org.zeroturnaround:zt-zip from 1.13 to 1.17.
    See this package in maven: https://mvnrepository.com/artifact/org.zeroturnaround/zt-zip/

See this project in Snyk:
https://app.snyk.io/org/mongeme/project/ae9595a9-2b99-4086-a6e5-458ce1874838?utm_source=github&utm_medium=referral&page=upgrade-pr
---
 todolist/pom.xml                     | 4 ++--
 todolist/todolist-web-struts/pom.xml | 6 +++---
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/todolist/pom.xml b/todolist/pom.xml
index 5a2ad0e..49d9e52 100644
--- a/todolist/pom.xml
+++ b/todolist/pom.xml
@@ -10,10 +10,10 @@
     <url>https://github.com/snyk/java-goof</url>
 
     <properties>
-        <spring.version>5.3.38</spring.version>
+        <spring.version>5.3.39</spring.version>
         <hibernate.version>4.3.7.Final</hibernate.version>
         <tapestry.version>5.3.8</tapestry.version>
-        <struts2.version>6.3.0.2</struts2.version>
+        <struts2.version>6.6.0</struts2.version>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     </properties>
 
diff --git a/todolist/todolist-web-struts/pom.xml b/todolist/todolist-web-struts/pom.xml
index c0c7d9f..041a9a1 100644
--- a/todolist/todolist-web-struts/pom.xml
+++ b/todolist/todolist-web-struts/pom.xml
@@ -27,12 +27,12 @@
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-core</artifactId>
-            <version>2.17.1</version>
+            <version>2.23.1</version>
         </dependency>
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-api</artifactId>
-            <version>2.7</version>
+            <version>2.23.1</version>
         </dependency>
 
         <!-- javaee web api -->
@@ -90,7 +90,7 @@
         <dependency>
             <groupId>org.zeroturnaround</groupId>
             <artifactId>zt-zip</artifactId>
-            <version>1.13</version>
+            <version>1.17</version>
             <type>jar</type>
         </dependency>
     </dependencies>