Skip to content
This repository was archived by the owner on Dec 28, 2023. It is now read-only.
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: davidmc24/gradle-avro-plugin
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 1.7.0
Choose a base ref
...
head repository: davidmc24/gradle-avro-plugin
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 1.7.1
Choose a head ref
  • 4 commits
  • 2 files changed
  • 2 contributors

Commits on Apr 5, 2023

  1. version: 1.7.1-SNAPSHOT

    @davidmc24
    davidmc24 committed Apr 5, 2023
    Copy the full SHA
    55608b3 View commit details

Commits on May 3, 2023

  1. Fix vulnerabilities in transitive dependencies

    @trains-are-super
    trains-are-super committed May 3, 2023
    Copy the full SHA
    036875f View commit details

  2. Merge pull request #229 from BlacCello/fix-vuln 

    Fix vulnerabilities in transitive dependencies
    @davidmc24
    davidmc24 authored May 3, 2023

    Verified

    This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
    GPG key ID: 4AEE18F83AFDEB23
    Expired
    Verified
    Learn about vigilant mode
    Copy the full SHA
    92a6fd9 View commit details

  3. version: 1.7.1

    @davidmc24
    davidmc24 committed May 3, 2023
    Copy the full SHA
    a81ffc6 View commit details
Showing with 13 additions and 2 deletions.
  1. +4 −1 CHANGES.md
  2. +9 −1 build.gradle
5 changes: 4 additions & 1 deletion CHANGES.md
View file
Original file line number Diff line number Diff line change
@@ -2,8 +2,11 @@

## Unreleased

## 1.7.1
* Fix vulnerabilities in transitive dependencies (contribution from [BlacCello](https://github.com/BlacCello)); see https://github.com/davidmc24/gradle-avro-plugin/pull/229

## 1.7.0
* Support for using conversions and type factories located outside of build classpath (contribution from [erdi](https://github.com/erdi)); see https://github.com/davidmc24/gradle-avro-plugin/pull/228
* Support for using conversions and type factories located outside of build classpath (contribution from [erdi](https://github.com/erdi)); see https://github.com/davidmc24/gradle-avro-plugin/pull/228

## 1.6.0
* Add support for configuring classpath for `GenerateAvroJavaTask` (thanks to [crtlib](https://github.com/crtlib)); see https://github.com/davidmc24/gradle-avro-plugin/pull/222
10 changes: 9 additions & 1 deletion build.gradle
View file
Original file line number Diff line number Diff line change
@@ -21,7 +21,7 @@ plugins {
// support.

group = "com.github.davidmc24.gradle.plugin"
version = "1.7.0"
version = "1.7.1"

def isCI = System.getenv("CI") == "true"

@@ -52,6 +52,14 @@ task createClasspathManifest {
dependencies {
implementation localGroovy()
implementation "org.apache.avro:avro-compiler:${compileAvroVersion}"
constraints {
implementation ('com.fasterxml.jackson.core:jackson-databind:2.12.7.1') {
because 'previous versions have vulnerabilities: CVE-2022-42004, CVE-2022-42003'
}
implementation ('org.apache.commons:commons-text:1.10.0') {
because 'previous versions have vulnerability: CVE-2022-42889'
}
}
testImplementation "org.spockframework:spock-core:2.0-M5-groovy-3.0"
testImplementation gradleTestKit()
testImplementation "uk.co.datumedge:hamcrest-json:0.2"