Skip to content

Conversation

@expxx
Copy link

@expxx expxx commented Sep 1, 2024

critical security vulnerability in org.json:json, updated that and junit

expxx and others added 17 commits September 1, 2024 16:54
Bumps [org.json:json](https://github.com/douglascrockford/JSON-java) from 20231013 to 20240303.
- [Release notes](https://github.com/douglascrockford/JSON-java/releases)
- [Changelog](https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md)
- [Commits](https://github.com/douglascrockford/JSON-java/commits)

---
updated-dependencies:
- dependency-name: org.json:json
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [org.hamcrest:hamcrest-library](https://github.com/hamcrest/JavaHamcrest) from 1.3 to 3.0.
- [Release notes](https://github.com/hamcrest/JavaHamcrest/releases)
- [Changelog](https://github.com/hamcrest/JavaHamcrest/blob/master/CHANGES.md)
- [Commits](hamcrest/JavaHamcrest@hamcrest-java-1.3...v3.0)

---
updated-dependencies:
- dependency-name: org.hamcrest:hamcrest-library
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [org.skyscreamer:jsonassert](https://github.com/skyscreamer/JSONassert) from 1.5.0 to 1.5.3.
- [Release notes](https://github.com/skyscreamer/JSONassert/releases)
- [Changelog](https://github.com/skyscreamer/JSONassert/blob/master/CHANGELOG.md)
- [Commits](skyscreamer/JSONassert@jsonassert-1.5.0...jsonassert-1.5.3)

---
updated-dependencies:
- dependency-name: org.skyscreamer:jsonassert
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) from 3.5.1 to 3.13.0.
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.5.1...maven-compiler-plugin-3.13.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [org.apache.maven.plugins:maven-source-plugin](https://github.com/apache/maven-source-plugin) from 3.0.1 to 3.3.1.
- [Release notes](https://github.com/apache/maven-source-plugin/releases)
- [Commits](apache/maven-source-plugin@maven-source-plugin-3.0.1...maven-source-plugin-3.3.1)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-source-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the npm_and_yarn group with 1 update in the /src/test/resources directory: [socket.io](https://github.com/socketio/socket.io).


Updates `socket.io` from 2.0.3 to 2.5.0
- [Release notes](https://github.com/socketio/socket.io/releases)
- [Changelog](https://github.com/socketio/socket.io/blob/2.5.0/CHANGELOG.md)
- [Commits](socketio/socket.io@2.0.3...2.5.0)

Updates `debug` from 2.3.3 to 3.1.0
- [Release notes](https://github.com/debug-js/debug/releases)
- [Changelog](https://github.com/debug-js/debug/blob/3.1.0/CHANGELOG.md)
- [Commits](debug-js/debug@2.3.3...3.1.0)

Updates `engine.io` from 3.1.0 to 3.6.2
- [Release notes](https://github.com/socketio/engine.io/releases)
- [Changelog](https://github.com/socketio/engine.io/blob/3.6.2/CHANGELOG.md)
- [Commits](socketio/engine.io@3.1.0...3.6.2)

Updates `ms` from 0.7.2 to 2.0.0
- [Release notes](https://github.com/vercel/ms/releases)
- [Commits](vercel/ms@0.7.2...2.0.0)

Updates `socket.io-parser` from 3.1.2 to 3.3.4
- [Release notes](https://github.com/Automattic/socket.io-parser/releases)
- [Changelog](https://github.com/socketio/socket.io-parser/blob/3.3.4/CHANGELOG.md)
- [Commits](socketio/socket.io-parser@3.1.2...3.3.4)

Updates `ws` from 2.3.1 to 7.5.10
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@2.3.1...7.5.10)

Updates `xmlhttprequest-ssl` from 1.5.3 to 1.6.3
- [Commits](https://github.com/mjwwit/node-XMLHttpRequest/commits/1.6.3)

---
updated-dependencies:
- dependency-name: socket.io
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: debug
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: engine.io
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ms
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: socket.io-parser
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ws
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: xmlhttprequest-ssl
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
…ugins-maven-source-plugin-3.3.1

Bump org.apache.maven.plugins:maven-source-plugin from 3.0.1 to 3.3.1
Bump org.json:json from 20231013 to 20240303
…st-library-3.0

Bump org.hamcrest:hamcrest-library from 1.3 to 3.0
…nassert-1.5.3

Bump org.skyscreamer:jsonassert from 1.5.0 to 1.5.3
…ugins-maven-compiler-plugin-3.13.0

Bump org.apache.maven.plugins:maven-compiler-plugin from 3.5.1 to 3.13.0
…ources/npm_and_yarn-1571f6bb58

Bump the npm_and_yarn group across 1 directory with 7 updates
Bumps the npm_and_yarn group with 2 updates in the /src/test/resources directory: [debug](https://github.com/debug-js/debug) and [socket.io](https://github.com/socketio/socket.io).


Updates `debug` from 3.1.0 to 4.3.6
- [Release notes](https://github.com/debug-js/debug/releases)
- [Commits](debug-js/debug@3.1.0...4.3.6)

Updates `socket.io` from 2.5.0 to 4.7.5
- [Release notes](https://github.com/socketio/socket.io/releases)
- [Changelog](https://github.com/socketio/socket.io/blob/4.7.5/CHANGELOG.md)
- [Commits](socketio/socket.io@2.5.0...4.7.5)

---
updated-dependencies:
- dependency-name: debug
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: socket.io
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
…ources/npm_and_yarn-c96339eec4

Bump the npm_and_yarn group across 1 directory with 2 updates
@expxx
Copy link
Author

expxx commented Sep 2, 2024

there's a lot here, so if not accept that's fine

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant