Merge pull request #3017 from mapfish/audit327

Fix CVE
mapfish · Aug 3, 2023 · ee8f707 · ee8f707
2 parents e9857d4 + 2936df2
commit ee8f707
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/build.gradle b/build.gradle
@@ -26,7 +26,7 @@ allprojects {
     version = '1.0.0'
     ext.junitVersion = "4.13.2"
     ext.groovyVersion = "3.0.18"
-    ext.spotbugsVersion = '4.1.4'
+    ext.spotbugsVersion = '4.2.2'
     ext.jasperreportVersion = "6.20.5"
 
     apply plugin: 'org.owasp.dependencycheck'

diff --git a/core/build.gradle b/core/build.gradle
@@ -179,7 +179,7 @@ dependencies {
             "org.slf4j:jul-to-slf4j:${slf4jVersion}",
             "ch.qos.logback:logback-classic:${logbackVersion}",
             "ch.qos.logback:logback-access:${logbackVersion}",
-            'org.json:json:20201115',
+            'org.json:json:20230227',
             'org.yaml:snakeyaml:2.0',
             'com.github.spullara.cli-parser:cli-parser:1.1.6',
             'org.apache.httpcomponents:httpclient:4.5.14',

diff --git a/core/src/main/java/org/mapfish/print/processor/map/scalebar/ScalebarGraphic.java b/core/src/main/java/org/mapfish/print/processor/map/scalebar/ScalebarGraphic.java
@@ -232,7 +232,7 @@ protected static String createLabelText(
         scaledValue = Math.round(scaledValue * 10000) / 10000;
         String decimals = Double.toString(scaledValue).split("\\.")[1];
 
-        if (Double.valueOf(decimals) == 0) {
+        if (Double.parseDouble(decimals) == 0) {
             return Long.toString(Math.round(scaledValue));
         } else {
             return Double.toString(scaledValue);