Skip to content

Changes

Summary

  1. [Snyk] Security upgrade com.google.guava:guava from 21.0 to 30.0-jre (#140) (commit: c3c28e4) (details)
  2. [Snyk] Security upgrade org.apache.jena:apache-jena-libs from 3.13.0 to 3.14.0 (#136) (commit: 1210ced) (details)
  3. Bump xercesImpl from 2.8.0 to 2.12.0 in /oslc4j-core-build (#133) (commit: d881827) (details)
Commit c3c28e4093b8c2344327ea0876fea6179c46afaa by noreply
[Snyk] Security upgrade com.google.guava:guava from 21.0 to 30.0-jre (#140)

Using 30.0-jre manually because the version Snyk suggested is wrong

Co-authored-by: Andrew Berezovskyi <andriib@kth.se>
(commit: c3c28e4)
The file was modified oslc4j-core-build/pom.xml
Commit 1210cedc96e96d481b83c53c63da9f9aee56272e by noreply
[Snyk] Security upgrade org.apache.jena:apache-jena-libs from 3.13.0 to 3.14.0 (#136)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETHRIFT-474610
(commit: 1210ced)
The file was modified oslc4j-core-build/pom.xml
Commit d88182744f33c8c7fe08571f8e0bc51c6b5c5903 by noreply
Bump xercesImpl from 2.8.0 to 2.12.0 in /oslc4j-core-build (#133)

Bumps xercesImpl from 2.8.0 to 2.12.0.

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(commit: d881827)
The file was modified oslc4j-core-build/pom.xml