From 52e29365e8c1d656964137f1b1af7a185a0878ab Mon Sep 17 00:00:00 2001
From: Quinten <quinten.plevier@health-ri.nl>
Date: Tue, 23 Jun 2026 11:42:05 +0200
Subject: [PATCH] Fix high snyk cve by versionbumping springboot & libexpat

---
 Dockerfile | 18 ++++++++++++++++--
 pom.xml    |  2 +-
 2 files changed, 17 insertions(+), 3 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 8ff5311..c5e06e3 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,11 +1,25 @@
 FROM maven:3-eclipse-temurin-26 AS build
+
 WORKDIR /tmp
 COPY . .
-RUN mvn -q install:install-file -Dfile=./xls2rdf-lib-3.2.1.jar -DgroupId=fr.sparna.rdf.xls2rdf -DartifactId=xls2rdf-pom -Dversion=3.2.1 -Dpackaging=jar 
+
+RUN mvn -q install:install-file \
+    -Dfile=./xls2rdf-lib-3.2.1.jar \
+    -DgroupId=fr.sparna.rdf.xls2rdf \
+    -DartifactId=xls2rdf-pom \
+    -Dversion=3.2.1 \
+    -Dpackaging=jar
+
 RUN mvn -q package -DskipTests=true
 
+
 FROM eclipse-temurin:26-jre-alpine-3.23
+
+RUN apk add --no-cache expat=2.8.1-r0
+
 WORKDIR /opt/app
+
 COPY --from=build /tmp/target/FairDataPointSchemaTool-1.0.jar /opt/app
 COPY --from=build /tmp/FdpSettings.json /opt/app
-ENTRYPOINT ["java", "-jar", "FairDataPointSchemaTool-1.0.jar"]
+
+ENTRYPOINT ["java", "-jar", "FairDataPointSchemaTool-1.0.jar"]
\ No newline at end of file
diff --git a/pom.xml b/pom.xml
index 75e591c..520aed0 100644
--- a/pom.xml
+++ b/pom.xml
@@ -20,7 +20,7 @@
         <xls2rdf.version>3.2.1</xls2rdf.version>
         <poi.version>5.5.1</poi.version>
         <poi-ooxml.version>4.1.2</poi-ooxml.version>
-        <spring-boot.version>4.0.6</spring-boot.version>
+        <spring-boot.version>4.0.7</spring-boot.version>
         <modelmapper.version>3.2.6</modelmapper.version>
         
         <junit-jupiter.version>6.0.3</junit-jupiter.version>