diff --git a/pom.xml b/pom.xml
index c9c64abc4..5b37afacb 100644
--- a/pom.xml
+++ b/pom.xml
@@ -23,7 +23,7 @@
2.17.0
32.0.1-jre
6.4.1
- 1.7.0-SNAPSHOT
+ 1.7.0
2.17.0
5.9.2
1.8.2
diff --git a/security.md b/security.md
index 0c2d9400d..99520397b 100644
--- a/security.md
+++ b/security.md
@@ -20,6 +20,11 @@ to particular sub-directories. See ManagedFileAccess for details.
Note that libraries that this library depends on still access the filesystem directly. Review
of the use of these libraries is ongoing.
+Dependency Notes:
+ SQLite: This library uses the SQLite library for database access. SQLite accesses the files directly,
+ but the file is always touched using ManagedFileAccess to ensure that access is not denied before
+ being used
+
Validator: The validator CLI also accesses local files as specified in the command line parameters,
and runs in the user context. TODO: we are considering whether to support a command line parameter
restricting path access to particular directories.