From 97ee581aed260b6da51b84ffd26f957060c0eb9a Mon Sep 17 00:00:00 2001
From: Tien Nguyen Minh <tiennm99@outlook.com>
Date: Sat, 25 Jul 2026 20:53:33 +0700
Subject: [PATCH] @ (#4)

chore: update vulnerable dependencies and add Maven CI

Bump jackson-databind 2.15.2 -> 2.22.1, logback-classic 1.4.8 -> 1.5.38,
slf4j-api 2.0.7 -> 2.0.17, and netty-all 4.1.94 -> 4.1.136 to clear all
open Dependabot security advisories.

Add a GitHub Actions workflow building on JDK 11, and a .gitignore for
Maven/IDE artifacts.
@
---
 .github/workflows/ci.yml | 24 ++++++++++++++++++++++++
 .gitignore               | 11 +++++++++++
 pom.xml                  |  8 ++++----
 3 files changed, 39 insertions(+), 4 deletions(-)
 create mode 100644 .github/workflows/ci.yml
 create mode 100644 .gitignore

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 0000000..6d090db
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,24 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  workflow_dispatch:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up JDK 11
+        uses: actions/setup-java@v4
+        with:
+          java-version: '11'
+          distribution: temurin
+          cache: maven
+
+      - name: Build
+        run: mvn -B --no-transfer-progress clean verify
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..c2afa0a
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,11 @@
+target/
+*.class
+*.log
+
+# IDE
+.idea/
+*.iml
+.vscode/
+.settings/
+.classpath
+.project
diff --git a/pom.xml b/pom.xml
index b5093f9..9f790bc 100644
--- a/pom.xml
+++ b/pom.xml
@@ -11,7 +11,7 @@
     <properties>
         <maven.compiler.source>11</maven.compiler.source>
         <maven.compiler.target>11</maven.compiler.target>
-        <netty.version>4.1.94.Final</netty.version>
+        <netty.version>4.1.136.Final</netty.version>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     </properties>
 
@@ -24,17 +24,17 @@
         <dependency>
             <groupId>org.slf4j</groupId>
             <artifactId>slf4j-api</artifactId>
-            <version>2.0.7</version>
+            <version>2.0.17</version>
         </dependency>
         <dependency>
             <groupId>ch.qos.logback</groupId>
             <artifactId>logback-classic</artifactId>
-            <version>1.4.8</version>
+            <version>1.5.38</version>
         </dependency>
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
-            <version>2.15.2</version>
+            <version>2.22.1</version>
         </dependency>
     </dependencies>