From f834ca437b3591c63b5ca5b8537454a8bdf9b469 Mon Sep 17 00:00:00 2001
From: Cliff Casey <cliff@yetanalytics.com>
Date: Fri, 13 Oct 2023 10:04:08 -0400
Subject: [PATCH] jetty vuln version bump

---
 deps.edn | 21 ++++++++++++++++++---
 1 file changed, 18 insertions(+), 3 deletions(-)

diff --git a/deps.edn b/deps.edn
index 2c9bbea72..4844d8df4 100644
--- a/deps.edn
+++ b/deps.edn
@@ -23,9 +23,24 @@
   com.layerware/hugsql-adapter-next-jdbc   {:mvn/version "0.5.1"}
   com.zaxxer/HikariCP                      {:mvn/version "5.0.0"
                                             :exclusions  [org.slf4j/slf4j-api]}
-  ;; Pedestal and Jetty webserver deps
-  io.pedestal/pedestal.jetty               {:mvn/version "0.6.1"}
-  org.eclipse.jetty/jetty-alpn-java-server {:mvn/version "9.4.52.v20230823"}
+  ;; Pedestal and Jetty webserver deps 
+  io.pedestal/pedestal.jetty
+  {:mvn/version "0.6.1"
+   :exclusions
+   [org.eclipse.jetty/jetty-server
+    org.eclipse.jetty/jetty-servlet
+    org.eclipse.jetty.alpn/alpn-api
+    org.eclipse.jetty/jetty-alpn-server
+    org.eclipse.jetty.http2/http2-server
+    org.eclipse.jetty.websocket/websocket-api
+    org.eclipse.jetty.websocket/websocket-servlet
+    org.eclipse.jetty.websocket/websocket-server]}
+  org.eclipse.jetty/jetty-server           {:mvn/version "9.4.53.v20231009"}
+  org.eclipse.jetty/jetty-servlet          {:mvn/version "9.4.53.v20231009"}
+  org.eclipse.jetty.alpn/alpn-api          {:mvn/version "1.1.3.v20160715"}
+  org.eclipse.jetty/jetty-alpn-server      {:mvn/version "9.4.53.v20231009"}
+  org.eclipse.jetty.http2/http2-server     {:mvn/version "9.4.53.v20231009"}
+  org.eclipse.jetty/jetty-alpn-java-server {:mvn/version "9.4.53.v20231009"}
   ;; Security deps
   buddy/buddy-core    {:mvn/version "1.11.418"
                        :exclusions [org.bouncycastle/bcprov-jdk18on]}