Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Mend: high confidence minor and patch dependency updates #74

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Jan 26, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
org.slf4j:slf4j-log4j12 (source) 1.7.5 -> 1.7.36 age adoption passing confidence
org.slf4j:slf4j-api (source, changelog) 1.7.5 -> 1.7.36 age adoption passing confidence
io.dropwizard.metrics:metrics-core (source) 4.1.0 -> 4.2.25 age adoption passing confidence
com.fasterxml.jackson.core:jackson-databind (source) 2.10.0 -> 2.17.1 age adoption passing confidence
com.fasterxml.jackson.core:jackson-core 2.10.0 -> 2.17.1 age adoption passing confidence
org.apache.commons:commons-lang3 (source) 3.4 -> 3.14.0 age adoption passing confidence
commons-cli:commons-cli (source) 1.2 -> 1.8.0 age adoption passing confidence
org.apache.avro:avro (source) 1.9.2 -> 1.11.3 age adoption passing confidence
org.apache.httpcomponents:httpclient 4.5.3 -> 4.5.14 age adoption passing confidence

By merging this PR, the issue #72 will be automatically resolved and closed:

Severity CVSS Score CVE Reachability
High High 7.5 CVE-2023-39410

Release Notes

dropwizard/metrics (io.dropwizard.metrics:metrics-core)

v4.2.24

What's Changed

Full Changelog: dropwizard/metrics@v4.2.23...v4.2.24

v4.2.23

What's Changed

Full Changelog: dropwizard/metrics@v4.2.22...v4.2.23

v4.2.22

What's Changed

Full Changelog: dropwizard/metrics@v4.2.21...v4.2.22

v4.2.21

What's Changed

Full Changelog: dropwizard/metrics@v4.2.20...v4.2.21

v4.2.20

What's Changed

New Contributors

Full Changelog: dropwizard/metrics@v4.2.19...v4.2.20

v4.2.19

What's Changed


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Jan 26, 2024
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 2 times, most recently from 3732a36 to e6b757d Compare January 31, 2024 07:13
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch from e6b757d to 71ff5c2 Compare February 9, 2024 06:22
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 2 times, most recently from c906c22 to 4c0b946 Compare February 23, 2024 06:32
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch from 4c0b946 to 6c099de Compare March 10, 2024 05:51
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 3 times, most recently from 5878e20 to 7a1dc78 Compare March 23, 2024 06:02
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch from 7a1dc78 to 8423c76 Compare March 25, 2024 06:37
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch from 8423c76 to a8f65f7 Compare April 2, 2024 06:14
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 3 times, most recently from 4cbb932 to 9c90800 Compare April 18, 2024 07:05
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 3 times, most recently from 1639311 to 1886cee Compare April 30, 2024 06:29
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 3 times, most recently from c19792b to 7d1bd40 Compare May 9, 2024 06:02
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch from 7d1bd40 to eae48ed Compare May 14, 2024 05:37
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch from eae48ed to c6508c4 Compare May 24, 2024 00:37
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch from c6508c4 to 6229029 Compare May 24, 2024 06:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by Mend
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants