You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@cayenne.apache.org by "Nikita Timofeev (Jira)" <ji...@apache.org> on 2024/07/31 14:27:00 UTC

[jira] [Commented] (CAY-2865) Upgrade dependencies

    [ https://issues.apache.org/jira/browse/CAY-2865?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17869913#comment-17869913 ] 

Nikita Timofeev commented on CAY-2865:
--------------------------------------

Most deps are updated per https://github.com/apache/cayenne/commit/7123e4ea67f6584e92649d7d5ad5c85c8c31f8be

There's still transitive dependency in testcontainers that's reported as vulnerable.

> Upgrade dependencies
> --------------------
>
>                 Key: CAY-2865
>                 URL: https://issues.apache.org/jira/browse/CAY-2865
>             Project: Cayenne
>          Issue Type: Task
>            Reporter: Nikita Timofeev
>            Assignee: Nikita Timofeev
>            Priority: Major
>             Fix For: 5.0-M1
>
>
> There are several test dependencies with vulnerabilities, need to upgrade those or exclude vulnerable transitive dependencies.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)