Crannou/fix/bump version cve (#20)

* Bump jetty.version from 9.4.19.v20190610 to 9.4.34.v20201102 in /api

Bumps `jetty.version` from 9.4.19.v20190610 to 9.4.34.v20201102.

Updates `jetty-servlet` from 9.4.19.v20190610 to 9.4.34.v20201102
- [Release notes](https://github.com/eclipse/jetty.project/releases)
- [Commits](jetty/jetty.project@jetty-9.4.19.v20190610...jetty-9.4.34.v20201102)

Updates `jetty-webapp` from 9.4.19.v20190610 to 9.4.34.v20201102
- [Release notes](https://github.com/eclipse/jetty.project/releases)
- [Commits](jetty/jetty.project@jetty-9.4.19.v20190610...jetty-9.4.34.v20201102)

Signed-off-by: dependabot[bot] <support@github.com>

* Bump log4j2.version from 2.7 to 2.14.0 in /api

Bumps `log4j2.version` from 2.7 to 2.14.0.

Updates `log4j-api` from 2.7 to 2.14.0

Updates `log4j-core` from 2.7 to 2.14.0

Updates `log4j-slf4j-impl` from 2.7 to 2.14.0

Signed-off-by: dependabot[bot] <support@github.com>

* update tensorflow version and fix h5py

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: christophe-rannou

api/pom.xml

@@ -12,12 +12,12 @@
     <artifactId>api</artifactId>
 
     <properties>
-        <jetty.version>9.4.19.v20190610</jetty.version>
+        <jetty.version>9.4.34.v20201102</jetty.version>
         <serving.version>1.0.1-SNAPSHOT</serving.version>
         <guice.version>4.2.2</guice.version>
         <typesafe-guice.version>0.1.0</typesafe-guice.version>
         <resteasy.version>4.1.1.Final</resteasy.version>
-        <log4j2.version>2.7</log4j2.version>
+        <log4j2.version>2.14.0</log4j2.version>
         <metrics.version>0.5.0</metrics.version>
         <swagger-jaxrs2.version>2.0.9</swagger-jaxrs2.version>
 

evaluator-tensorflow/h5_converter/requirements.txt

@@ -1,4 +1,5 @@
-tensorflow==1.15.2
+tensorflow==1.15.4
 pyinstaller>=3.5,<=3.6
 absl-py==0.8.1
-setuptools>=41.0.1,<45.0.0
+setuptools>=41.0.1,<45.0.0
+h5py==2.10.0