Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update dependencies #1461

Merged
merged 4 commits into from
Oct 31, 2023
Merged

Update dependencies #1461

merged 4 commits into from
Oct 31, 2023

Commits on Oct 31, 2023

  1. dep: Update mina-core, commons-compress and guava 

    Update dependencies: Mina Core, Guava and commons-compress.
These don't need any other adjustments.
    @flaix
    flaix committed Oct 31, 2023
    Configuration menu
    Copy the full SHA
    c706290 View commit details
    Browse the repository at this point in the history

  2. dep: Update JSoup to 1.16.2 

    Update JSoup to version 1.16.2.
This requires renaming `Whitelist` to `Safelist`,
because the class name was changed in version 1.15.1
in a breaking change.
    @flaix
    flaix committed Oct 31, 2023
    Configuration menu
    Copy the full SHA
    f124dfc View commit details
    Browse the repository at this point in the history

  3. dep: Update slf4j to 1.7.36 and switch from log4j1 to reload4j 

    Replace log4j 1.2.17 with reload4j 1.2.25.

log4j 1.x was caught in the fire of the Log4Shell vulnerability, even
though the 1.x line was not affected by the vulnerability. Still, this
looks bad when it shows up in security scanners even though it doesn't
mean it has the Log4Shell vulnerability.
Switch to reload4j instead. This is a drop-in replacement of log4j.
Actually, it is log4j rebooted by the same author. The reload4j 1.x
line fixes security issues that have since surfaced.

At the same time we update to the latest slf4j version, which also
switched to reload4j for the log4j12 line.
    @flaix
    flaix committed Oct 31, 2023
    Configuration menu
    Copy the full SHA
    d2a3322 View commit details
    Browse the repository at this point in the history

  4. dep: Update Apache Tika to 1.28.5

    @flaix
    flaix committed Oct 31, 2023
    Configuration menu
    Copy the full SHA
    b1f7c7c View commit details
    Browse the repository at this point in the history