From 5effd3e52928ede69c0a350a20eca746ad2266e6 Mon Sep 17 00:00:00 2001
From: ZhangJian He <shoothzj@gmail.com>
Date: Mon, 13 Feb 2023 14:49:31 +0800
Subject: [PATCH] fix review questions

---
 CHANGES.md |  1 +
 pom.xml    | 13 ++-----------
 2 files changed, 3 insertions(+), 11 deletions(-)

diff --git a/CHANGES.md b/CHANGES.md
index 43ae47cb177..fa0ff3f685d 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -6,6 +6,7 @@ Apollo 2.2.0
 
 ------------------
 * [Fix the problem of inconsistent length of appId column](https://github.com/apolloconfig/apollo/pull/4725)
+* [Bump springcloud springboot version to solve cve problems](https://github.com/apolloconfig/apollo/pull/4712)
 
 ------------------
 All issues and pull requests are [here](https://github.com/apolloconfig/apollo/milestone/13?closed=1)
\ No newline at end of file
diff --git a/pom.xml b/pom.xml
index fff0883a5fb..b385619c186 100644
--- a/pom.xml
+++ b/pom.xml
@@ -64,9 +64,8 @@
 		<java.version>1.8</java.version>
 		<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
 		<apollo-java.version>2.1.0</apollo-java.version>
-		<spring-boot.version>2.6.8</spring-boot.version>
-		<spring-cloud.version>2021.0.2</spring-cloud.version>
-		<spring-security.version>5.7.3</spring-security.version>
+		<spring-boot.version>2.7.8</spring-boot.version>
+		<spring-cloud.version>2021.0.5</spring-cloud.version>
 		<jaxb.version>2.3.1</jaxb.version>
 		<javax.activation.version>1.1.1</javax.activation.version>
 		<javax.mail.version>1.6.2</javax.mail.version>
@@ -201,14 +200,6 @@
 				<version>1.2.0</version>
 				<scope>test</scope>
 			</dependency>
-			<!-- Spring-security BOMs -->
-			<dependency>
-				<groupId>org.springframework.security</groupId>
-				<artifactId>spring-security-bom</artifactId>
-				<version>${spring-security.version}</version>
-				<type>pom</type>
-				<scope>import</scope>
-			</dependency>
 			<!-- declare Spring BOMs in order -->
 			<dependency>
 				<groupId>org.springframework.boot</groupId>