-
Notifications
You must be signed in to change notification settings - Fork 95
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[dependabot] Dependencies upgrades #336
Closed
Closed
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) from 2.13.1 to 2.13.4.2. - [Commits](https://github.com/FasterXML/jackson/commits) --- updated-dependencies: - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>
Bumps [org.codehaus.jettison:jettison](https://github.com/jettison-json/jettison) from 1.4.0 to 1.5.4. - [Release notes](https://github.com/jettison-json/jettison/releases) - [Commits](jettison-json/jettison@jettison-1.4.0...jettison-1.5.4) --- updated-dependencies: - dependency-name: org.codehaus.jettison:jettison dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>
Bumps org.mortbay.jetty:jetty from 6.1.14 to 6.1.23. --- updated-dependencies: - dependency-name: org.mortbay.jetty:jetty dependency-type: direct:development ... Signed-off-by: dependabot[bot] <[email protected]>
Bumps [org.springframework:spring-context](https://github.com/spring-projects/spring-framework) from 5.3.18 to 5.3.19. - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](spring-projects/spring-framework@v5.3.18...v5.3.19) --- updated-dependencies: - dependency-name: org.springframework:spring-context dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>
…ml.jackson.core-jackson-databind-2.13.4.2 Bump com.fasterxml.jackson.core:jackson-databind from 2.13.1 to 2.13.4.2 in /src
…pendabot/maven/src/org.codehaus.jettison-jettison-1.5.4
…s.jettison-jettison-1.5.4 Bump org.codehaus.jettison:jettison from 1.4.0 to 1.5.4 in /src
…ramework-spring-context-5.3.19 Bump org.springframework:spring-context from 5.3.18 to 5.3.19 in /src
Bumps [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) from 42.2.23 to 42.3.8. - [Release notes](https://github.com/pgjdbc/pgjdbc/releases) - [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md) - [Commits](pgjdbc/pgjdbc@REL42.2.23...REL42.3.8) --- updated-dependencies: - dependency-name: org.postgresql:postgresql dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>
….mortbay.jetty-jetty-6.1.23 Bump org.mortbay.jetty:jetty from 6.1.14 to 6.1.23 in /src/web/app
Bumps [org.springframework:spring-beans](https://github.com/spring-projects/spring-framework) from 5.3.18 to 5.3.20. - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](spring-projects/spring-framework@v5.3.18...v5.3.20) --- updated-dependencies: - dependency-name: org.springframework:spring-beans dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>
Bumps [org.springframework.security:spring-security-core](https://github.com/spring-projects/spring-security) from 5.3.10.RELEASE to 5.5.7. - [Release notes](https://github.com/spring-projects/spring-security/releases) - [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc) - [Commits](spring-projects/spring-security@5.3.10.RELEASE...5.5.7) --- updated-dependencies: - dependency-name: org.springframework.security:spring-security-core dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>
…ramework-spring-beans-5.3.20 Bump org.springframework:spring-beans from 5.3.18 to 5.3.20 in /src
…sql-postgresql-42.3.8 Bump org.postgresql:postgresql from 42.2.23 to 42.3.8 in /src
Bumps commons-beanutils:commons-beanutils from 1.7.0 to 1.9.4. --- updated-dependencies: - dependency-name: commons-beanutils:commons-beanutils dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>
Bumps commons-io:commons-io from 2.1 to 2.7. --- updated-dependencies: - dependency-name: commons-io:commons-io dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>
Bumps [junit:junit](https://github.com/junit-team/junit4) from 4.12 to 4.13.1. - [Release notes](https://github.com/junit-team/junit4/releases) - [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.12.md) - [Commits](junit-team/junit4@r4.12...r4.13.1) --- updated-dependencies: - dependency-name: junit:junit dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>
…-4.13.1 Bump junit:junit from 4.12 to 4.13.1 in /src
Bumps [org.springframework.security.oauth:spring-security-oauth2](https://github.com/SpringSource/spring-security-oauth) from 2.0.16.RELEASE to 2.0.17.RELEASE. - [Commits](spring-attic/spring-security-oauth@2.0.16.RELEASE...2.0.17.RELEASE) --- updated-dependencies: - dependency-name: org.springframework.security.oauth:spring-security-oauth2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>
…commons-io-2.7 Bump commons-io:commons-io from 2.1 to 2.7 in /src
…nutils-commons-beanutils-1.9.4 Bump commons-beanutils:commons-beanutils from 1.7.0 to 1.9.4 in /src
…ramework.security-spring-security-core-5.5.7 Bump org.springframework.security:spring-security-core from 5.3.10.RELEASE to 5.5.7 in /src
Bumps [com.h2database:h2](https://github.com/h2database/h2database) from 1.3.175 to 2.2.220. - [Release notes](https://github.com/h2database/h2database/releases) - [Commits](https://github.com/h2database/h2database/commits/version-2.2.220) --- updated-dependencies: - dependency-name: com.h2database:h2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>
Bumps [com.h2database:h2](https://github.com/h2database/h2database) from 1.3.175 to 2.2.220. - [Release notes](https://github.com/h2database/h2database/releases) - [Commits](https://github.com/h2database/h2database/commits/version-2.2.220) --- updated-dependencies: - dependency-name: com.h2database:h2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>
Bumps org.jasypt:jasypt from 1.8 to 1.9.2. --- updated-dependencies: - dependency-name: org.jasypt:jasypt dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>
…t/impl/org.springframework.security.oauth-spring-security-oauth2-2.0.17.RELEASE Bump org.springframework.security.oauth:spring-security-oauth2 from 2.0.16.RELEASE to 2.0.17.RELEASE in /src/modules/rest/impl
…tence/com.h2database-h2-2.2.220 Bump com.h2database:h2 from 1.3.175 to 2.2.220 in /src/core/persistence
…atabase-h2-2.2.220 Bump com.h2database:h2 from 1.3.175 to 2.2.220 in /src/cli
…jasypt-1.9.2 Bump org.jasypt:jasypt from 1.8 to 1.9.2 in /src
Bumps [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) from 42.3.8 to 42.6.1. - [Release notes](https://github.com/pgjdbc/pgjdbc/releases) - [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md) - [Commits](pgjdbc/pgjdbc@REL42.3.8...REL42.6.1) --- updated-dependencies: - dependency-name: org.postgresql:postgresql dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>
…sql-postgresql-42.6.1 Bump org.postgresql:postgresql from 42.3.8 to 42.6.1 in /src
tdipisa
changed the title
[dependabot] Dependencies and critical security fixes
[dependabot] Dependencies upgrades
Feb 21, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
No description provided.