[jira] [Commented] (GEODE-8980) bump dependencies for 1.15.0 [PERMANENT]

["ASF subversion and git services (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/GEODE-8980?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17329236#comment-17329236 ] 

ASF subversion and git services commented on GEODE-8980:
--------------------------------------------------------

Commit e933b51d8535a83c33e9761286f5e51df0434c25 in geode's branch refs/heads/develop from Owen Nichols
[ https://gitbox.apache.org/repos/asf?p=geode.git;h=e933b51 ]

GEODE-8980: bump deps (#6342)

* Bump cargo from 1.9.2 to 1.9.3
* Bump classgraph from 4.8.52 to 4.8.104
* Bump fastutil from 8.5.2 to 8.5.4
* Bump guava from 30.1-jre to 30.1.1-jre
* Bump istack-commons-runtime from 4.0.0 to 4.0.1
* Bump jackson from 2.12.2 to 2.12.3
* Bump jetty from 9.4.39.v20210325 to 9.4.40.v20210413
* Bump jna from 5.7.0 to 5.8.0
* Bump jproc from 2.5.1 to 2.6.0
* Bump lettuce from 6.0.3.RELEASE to 6.1.1.RELEASE
* Bump micrometer from 1.6.5 to 1.6.6
* Bump mockito-core from 3.8.0 to 3.9.0
* Bump pmd from 6.32.0 to 6.33.0
* Bump spring from 5.3.5 to 5.3.6
* Bump spring-boot-starter from 2.4.3 to 2.4.5
* Bump spring-hateoas from 1.2.5 to 1.3.0
* Bump spring-security from 5.4.5 to 5.4.6
* Bump spring-session-data-redis from 2.4.2 to 2.4.3
* Bump tomcat-catalina from 8.5.64 to 8.5.65
* Bump tomcat-catalina from 9.0.44 to 9.0.45

> bump dependencies for 1.15.0 [PERMANENT]
> ----------------------------------------
>
>                 Key: GEODE-8980
>                 URL: https://issues.apache.org/jira/browse/GEODE-8980
>             Project: Geode
>          Issue Type: Improvement
>          Components: build
>    Affects Versions: 1.15.0
>            Reporter: Owen Nichols
>            Priority: Major
>              Labels: pull-request-available
>
> keeping up with the latest versions of 3rd-party libraries used by Geode is a proactive way to reduce bugs and avoid security vulnerabilities.  this ticket will be used for ~monthly dependency bumps on develop until we get close to cutting support/1.15



--
This message was sent by Atlassian Jira
(v8.3.4#803005)