Branch: refs/heads/master
  Home:   https://github.com/jenkins-infra/update-center2
  Commit: 45399cde6712071d6c4e72cd876ac74be884785b
      
https://github.com/jenkins-infra/update-center2/commit/45399cde6712071d6c4e72cd876ac74be884785b
  Author: Mark Waite <[email protected]>
  Date:   2022-08-10 (Wed, 10 Aug 2022)

  Changed paths:
    M pom.xml
    M spotbugs-excludes.xml
    M src/main/java/io/jenkins/update_center/ArtifactoryRepositoryImpl.java
    M src/main/java/io/jenkins/update_center/DirectoryTreeBuilder.java

  Log Message:
  -----------
  Simplify symlink creation, update dependencies (#569)

* Use fastjson 1.2.79, not 1.2.73

* Use okhttp-urlconnection 4.9.3, not 4.8.0

* Use commons-io 2.11.0, not 2.7

* Use commons-lang3 3.12.0, not 3.11

* Use commons-codec 1.15, not 1.14

* Use support-log-formatter 1.1, not 1.0

* Use version-number 1.9, not 1.7

* Use ant 1.10.12, not 1.10.11

* Use owasp-java-html-sanitizer 20211018.2, not 20200713.1

* Use spotbugs-annotations 4.5.3, not 4.1.1

* Use jsoup 1.14.3, not 1.14.2

* Use kotlin-stdlib-common 1.6.10, not 1.3.72

* Use mockito-core 4.3.1, not 3.4.6

* Use junit 4.13.2, not 4.13.1

* Use mockwebserver 4.9.3, not 4.8.0

* Use parent pom 1.70, not 1.54

* Use spotbugs 4.5.3.0, not 4.2.0

* Use surefire 3.0.0-M5, not 2.18.1

* Exclude okhttp and annotation-api from fastjson

Prevent upper bounds dependency error messages

* Exclude several spotbugs warnings

* Allow catch of NPE in getMetaData()

* Exclude command injection vulnerability

Creating a symbolic link is low risk

* Replace ProcessBuilder with Java 8 file calls

* Exclude path traversal spotbugs warnings

Path traversal is a key part of this utility

* Update dependencies

Co-authored-by: Daniel Beck <[email protected]>


-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-commits/jenkins-infra/update-center2/push/refs/heads/master/85cf68-45399c%40github.com.

Reply via email to