|
177 | 177 | Make PropertyUtilsBean.getReadMethod(Class, PropertyDescriptor) public #232. |
178 | 178 | </action> |
179 | 179 | <!-- UPDATES --> |
| 180 | + <action dev="ggregory" type="update" due-to="Gary Gregory, Dependabot"> |
| 181 | + Bump org.apache.commons:commons-parent from 50 to 85 #229, #245, #254, #264, #274, #279, #291, #295, #299, #306. |
| 182 | + </action> |
180 | 183 | <action dev="ggregory" type="update" due-to="Dependabot, Gary Gregory"> |
181 | 184 | Bump actions/cache from 2 to 3.0.11 #77, #89, #103, #111. #137, #141. |
182 | 185 | </action> |
|
222 | 225 | <action dev="ggregory" type="update" due-to="Gary Gregory"> |
223 | 226 | Bump BC version from 1.9.3 to 1.9.4. |
224 | 227 | </action> |
225 | | - <action dev="ggregory" type="update" due-to="Gary Gregory, Dependabot"> |
226 | | - Bump org.apache.commons:commons-parent from 50 to 74 #229, #245, #254, #264, #274, #279. |
227 | | - </action> |
228 | 228 | <action dev="ggregory" type="update" due-to="Dependabot"> |
229 | 229 | Bump biz.aQute.bndlib from 5.1.0 to 6.4.1 #29, #45, #79, #109, #119, #121, #147, #175. |
230 | 230 | </action> |
|
249 | 249 | <action dev="ggregory" type="update" due-to="Gary Gregory, Dependabot"> |
250 | 250 | Bump commons-logging:commons-logging from 1.2 to 1.3.4 #226, #246, #259, #275. |
251 | 251 | </action> |
252 | | - <action dev="ggregory" type="update" due-to="Gary Gregory, Dependabot"> |
253 | | - Bump org.apache.commons:commons-parent from 74 to 78 #291, #295, #299, #306. |
254 | | - </action> |
255 | 252 | <!-- REMOVE --> |
256 | 253 | <action dev="ggregory" type="remove" due-to="Gary Gregory, Niall Pemberton"> |
257 | 254 | Removed BeanUtilsBean2, use BeanUtilsBean. BeanUtilsBean2 functionality is now in BeanUtilsBean. |
|
265 | 262 | Do not implement Serializable. |
266 | 263 | </action> |
267 | 264 | </release> |
| 265 | + <release version="1.11.1" date="YYYY-MM-DD" description="This is a maintenance release and requires Java 8."> |
| 266 | + <!-- FIX --> |
| 267 | + <!-- ADD --> |
| 268 | + <!-- UPDATE --> |
| 269 | + <action dev="ggregory" type="update" due-to="Gary Gregory">Bump org.apache.commons:commons-parent from 84 to 85.</action> |
| 270 | + </release> |
268 | 271 | <release version="1.11.0" date="2025-05-25" description="This is a maintenance release and requires Java 8."> |
269 | 272 | <!-- FIX --> |
270 | 273 | <action type="fix" dev="ggregory" due-to="Raj, Muthukumar Marikani, Gary Gregory">CVE-2025-48734: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default (https://www.cve.org/CVERecord?id=CVE-2025-48734).</action> |
|
0 commit comments