Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[dependabot] Dependencies upgrades #336

Closed
wants to merge 33 commits into from

Conversation

afabiani
Copy link
Member

No description provided.

dependabot bot and others added 30 commits February 12, 2024 15:43
Bumps [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) from 2.13.1 to 2.13.4.2.
- [Commits](https://github.com/FasterXML/jackson/commits)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [org.codehaus.jettison:jettison](https://github.com/jettison-json/jettison) from 1.4.0 to 1.5.4.
- [Release notes](https://github.com/jettison-json/jettison/releases)
- [Commits](jettison-json/jettison@jettison-1.4.0...jettison-1.5.4)

---
updated-dependencies:
- dependency-name: org.codehaus.jettison:jettison
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps org.mortbay.jetty:jetty from 6.1.14 to 6.1.23.

---
updated-dependencies:
- dependency-name: org.mortbay.jetty:jetty
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [org.springframework:spring-context](https://github.com/spring-projects/spring-framework) from 5.3.18 to 5.3.19.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v5.3.18...v5.3.19)

---
updated-dependencies:
- dependency-name: org.springframework:spring-context
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
…ml.jackson.core-jackson-databind-2.13.4.2

Bump com.fasterxml.jackson.core:jackson-databind from 2.13.1 to 2.13.4.2 in /src
…pendabot/maven/src/org.codehaus.jettison-jettison-1.5.4
…s.jettison-jettison-1.5.4

Bump org.codehaus.jettison:jettison from 1.4.0 to 1.5.4 in /src
…ramework-spring-context-5.3.19

Bump org.springframework:spring-context from 5.3.18 to 5.3.19 in /src
Bumps [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) from 42.2.23 to 42.3.8.
- [Release notes](https://github.com/pgjdbc/pgjdbc/releases)
- [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md)
- [Commits](pgjdbc/pgjdbc@REL42.2.23...REL42.3.8)

---
updated-dependencies:
- dependency-name: org.postgresql:postgresql
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
….mortbay.jetty-jetty-6.1.23

Bump org.mortbay.jetty:jetty from 6.1.14 to 6.1.23 in /src/web/app
Bumps [org.springframework:spring-beans](https://github.com/spring-projects/spring-framework) from 5.3.18 to 5.3.20.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v5.3.18...v5.3.20)

---
updated-dependencies:
- dependency-name: org.springframework:spring-beans
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [org.springframework.security:spring-security-core](https://github.com/spring-projects/spring-security) from 5.3.10.RELEASE to 5.5.7.
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](spring-projects/spring-security@5.3.10.RELEASE...5.5.7)

---
updated-dependencies:
- dependency-name: org.springframework.security:spring-security-core
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
…ramework-spring-beans-5.3.20

Bump org.springframework:spring-beans from 5.3.18 to 5.3.20 in /src
…sql-postgresql-42.3.8

Bump org.postgresql:postgresql from 42.2.23 to 42.3.8 in /src
Bumps commons-beanutils:commons-beanutils from 1.7.0 to 1.9.4.

---
updated-dependencies:
- dependency-name: commons-beanutils:commons-beanutils
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps commons-io:commons-io from 2.1 to 2.7.

---
updated-dependencies:
- dependency-name: commons-io:commons-io
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [junit:junit](https://github.com/junit-team/junit4) from 4.12 to 4.13.1.
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.12.md)
- [Commits](junit-team/junit4@r4.12...r4.13.1)

---
updated-dependencies:
- dependency-name: junit:junit
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
…-4.13.1

Bump junit:junit from 4.12 to 4.13.1 in /src
Bumps [org.springframework.security.oauth:spring-security-oauth2](https://github.com/SpringSource/spring-security-oauth) from 2.0.16.RELEASE to 2.0.17.RELEASE.
- [Commits](spring-attic/spring-security-oauth@2.0.16.RELEASE...2.0.17.RELEASE)

---
updated-dependencies:
- dependency-name: org.springframework.security.oauth:spring-security-oauth2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
…commons-io-2.7

Bump commons-io:commons-io from 2.1 to 2.7 in /src
…nutils-commons-beanutils-1.9.4

Bump commons-beanutils:commons-beanutils from 1.7.0 to 1.9.4 in /src
…ramework.security-spring-security-core-5.5.7

Bump org.springframework.security:spring-security-core from 5.3.10.RELEASE to 5.5.7 in /src
Bumps [com.h2database:h2](https://github.com/h2database/h2database) from 1.3.175 to 2.2.220.
- [Release notes](https://github.com/h2database/h2database/releases)
- [Commits](https://github.com/h2database/h2database/commits/version-2.2.220)

---
updated-dependencies:
- dependency-name: com.h2database:h2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [com.h2database:h2](https://github.com/h2database/h2database) from 1.3.175 to 2.2.220.
- [Release notes](https://github.com/h2database/h2database/releases)
- [Commits](https://github.com/h2database/h2database/commits/version-2.2.220)

---
updated-dependencies:
- dependency-name: com.h2database:h2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps org.jasypt:jasypt from 1.8 to 1.9.2.

---
updated-dependencies:
- dependency-name: org.jasypt:jasypt
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
…t/impl/org.springframework.security.oauth-spring-security-oauth2-2.0.17.RELEASE

Bump org.springframework.security.oauth:spring-security-oauth2 from 2.0.16.RELEASE to 2.0.17.RELEASE in /src/modules/rest/impl
…tence/com.h2database-h2-2.2.220

Bump com.h2database:h2 from 1.3.175 to 2.2.220 in /src/core/persistence
…atabase-h2-2.2.220

Bump com.h2database:h2 from 1.3.175 to 2.2.220 in /src/cli
afabiani and others added 3 commits February 12, 2024 18:20
…jasypt-1.9.2

Bump org.jasypt:jasypt from 1.8 to 1.9.2 in /src
Bumps [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) from 42.3.8 to 42.6.1.
- [Release notes](https://github.com/pgjdbc/pgjdbc/releases)
- [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md)
- [Commits](pgjdbc/pgjdbc@REL42.3.8...REL42.6.1)

---
updated-dependencies:
- dependency-name: org.postgresql:postgresql
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
…sql-postgresql-42.6.1

Bump org.postgresql:postgresql from 42.3.8 to 42.6.1 in /src
@tdipisa tdipisa changed the title [dependabot] Dependencies and critical security fixes [dependabot] Dependencies upgrades Feb 21, 2024
@tdipisa tdipisa closed this Feb 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants