From 0a2bfcaed2d2624b840d8be6c34e9684f1661856 Mon Sep 17 00:00:00 2001
From: Jeremy Long <jeremy.long@gmail.com>
Date: Mon, 27 Nov 2017 23:14:17 -0500
Subject: [PATCH] upgrades

---
 .../analyzer/CentralAnalyzerTest.java         |  4 +-
 pom.xml                                       | 38 +++++++++----------
 2 files changed, 21 insertions(+), 21 deletions(-)

diff --git a/dependency-check-core/src/test/java/org/owasp/dependencycheck/analyzer/CentralAnalyzerTest.java b/dependency-check-core/src/test/java/org/owasp/dependencycheck/analyzer/CentralAnalyzerTest.java
index f6a2f4fb9..2146d5cc8 100644
--- a/dependency-check-core/src/test/java/org/owasp/dependencycheck/analyzer/CentralAnalyzerTest.java
+++ b/dependency-check-core/src/test/java/org/owasp/dependencycheck/analyzer/CentralAnalyzerTest.java
@@ -61,7 +61,7 @@ public class CentralAnalyzerTest {
         new Expectations() {
             {
                 centralSearch.searchSha1(SHA1_SUM);
-                returns(expectedMavenArtifacts);
+                returns(expectedMavenArtifacts, expectedMavenArtifacts);
             }
         };
 
@@ -176,7 +176,7 @@ public class CentralAnalyzerTest {
         new Expectations() {
             {
                 dependency.getSha1sum();
-                returns(SHA1_SUM);
+                returns(SHA1_SUM, SHA1_SUM);
             }
         };
     }
diff --git a/pom.xml b/pom.xml
index 1a0420bf4..d7b804fd9 100644
--- a/pom.xml
+++ b/pom.xml
@@ -125,55 +125,55 @@ Copyright (c) 2012 - Jeremy Long
         <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
         <github.global.server>github</github.global.server>
         <apache.lucene.version>4.7.2</apache.lucene.version>
-        <apache.ant.version>1.9.8</apache.ant.version>
-        <slf4j.version>1.7.24</slf4j.version>
-        <logback.version>1.2.0</logback.version>
+        <apache.ant.version>1.10.1</apache.ant.version>
+        <slf4j.version>1.8.0-beta0</slf4j.version>
+        <logback.version>1.2.3</logback.version>
         <!-- Note that Maven will use classes from the distro, ignoring declared dependencies for Maven core... -->
-        <maven.api.version>3.0</maven.api.version>
+        <maven.api.version>3.5.2</maven.api.version>
         <reporting.checkstyle-plugin.version>2.17</reporting.checkstyle-plugin.version>
         <reporting.pmd-plugin.version>3.6</reporting.pmd-plugin.version>
         <doxia-module-markdown.version>1.7</doxia-module-markdown.version>
         <maven-antrun-plugin.version>1.8</maven-antrun-plugin.version>
-        <maven-dependency-plugin.version>2.10</maven-dependency-plugin.version>
-        <maven-javadoc-plugin.version>2.10.4</maven-javadoc-plugin.version>
+        <maven-dependency-plugin.version>3.0.2</maven-dependency-plugin.version>
+        <maven-javadoc-plugin.version>3.0.0-M1</maven-javadoc-plugin.version>
         <maven-jxr-plugin.version>2.5</maven-jxr-plugin.version>
         <maven-project-info-reports-plugin.version>2.9</maven-project-info-reports-plugin.version>
-        <maven-surefire-report-plugin.version>2.19.1</maven-surefire-report-plugin.version>
+        <maven-surefire-report-plugin.version>2.20.1</maven-surefire-report-plugin.version>
         <jacoco-maven-plugin.version>0.7.9</jacoco-maven-plugin.version>
-        <findbugs-maven-plugin.version>3.0.4</findbugs-maven-plugin.version>
+        <findbugs-maven-plugin.version>3.0.5</findbugs-maven-plugin.version>
         <taglist-maven-plugin.version>2.4</taglist-maven-plugin.version>
-        <versions-maven-plugin.version>2.3</versions-maven-plugin.version>
+        <versions-maven-plugin.version>2.5</versions-maven-plugin.version>
 
         <!-- analysis core (used by Jenkins) uses 1.6-->
         <joda-time.version>1.6</joda-time.version>
         <com.google.code.findbugs.annotations.version>3.0.1u2</com.google.code.findbugs.annotations.version>
-        <com.google.code.gson.version>2.4</com.google.code.gson.version>
+        <com.google.code.gson.version>2.8.2</com.google.code.gson.version>
         <com.h2database.version>1.4.196</com.h2database.version>
         <commons-cli.version>1.4</commons-cli.version>
-        <commons-io.version>2.5</commons-io.version>
+        <commons-io.version>2.6</commons-io.version>
 
         <!--upgrading beyond lang3 3.4 may cause issues with the Jenkins plugin-->
         <commons-lang3.version>3.4</commons-lang3.version>
-        <com.sun.mail.mailapi.version>1.5.6</com.sun.mail.mailapi.version>
+        <com.sun.mail.mailapi.version>1.6.0</com.sun.mail.mailapi.version>
         <junit.version>4.12</junit.version>
         <hamcrest-core.version>1.3</hamcrest-core.version>
-        <org.jmockit.version>1.27</org.jmockit.version>
+        <org.jmockit.version>1.37</org.jmockit.version>
 
-        <jsoup.version>1.10.2</jsoup.version>
-        <commons-compress.version>1.14</commons-compress.version>
+        <jsoup.version>1.11.2</jsoup.version>
+        <commons-compress.version>1.15</commons-compress.version>
         <org.apache.maven.shared.file-management.version>3.0.0</org.apache.maven.shared.file-management.version>
         <maven-plugin-testing-harness.version>3.3.0</maven-plugin-testing-harness.version>
         <maven-plugin-annotations.version>3.5</maven-plugin-annotations.version>
         <maven-reporting-api.version>3.0</maven-reporting-api.version>
-        <commons-collections.version>3.2.2</commons-collections.version>
+        <commons-collections.version>20040616</commons-collections.version>
         <org.apache.velocity.version>1.7</org.apache.velocity.version>
         <plexus-sec-dispatcher.version>1.4</plexus-sec-dispatcher.version>
 
         <!-- upgrading beyond 2.2 requires reworking the dependency resolution -->
         <maven-dependency-tree.version>2.2</maven-dependency-tree.version>
 
-        <org.glassfish.javax.json.version>1.0.4</org.glassfish.javax.json.version>
-        <maven-artifact-transfer.version>0.9.0</maven-artifact-transfer.version>
+        <org.glassfish.javax.json.version>1.1.2</org.glassfish.javax.json.version>
+        <maven-artifact-transfer.version>0.9.1</maven-artifact-transfer.version>
 
         
         <surefireArgLine/>
@@ -237,7 +237,7 @@ Copyright (c) 2012 - Jeremy Long
                 <plugin>
                     <groupId>org.codehaus.mojo</groupId>
                     <artifactId>animal-sniffer-maven-plugin</artifactId>
-                    <version>1.15</version>
+                    <version>1.16</version>
                 </plugin>
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>