Skip to content

v8.9.0 - Security update

Choose a tag to compare

View all tags
@bbottema bbottema released this 26 Apr 15:47
· 115 commits to master since this release
8.9.0
687ac7f

#507: [security] Update 3rd party dependencies to get rid of all currently known CVE issues

Changes:

Dependencies:

  • Spring 5.3.27 -> 5.3.34
  • Spring Boot 2.5.15 -> 2.7.18
  • commons-io 2.7 -> 2.11.0
  • utils-mail-smime 2.3.1 -> 2.3.3
    • org.bouncycastle:bcjmail-jdk15to18 1.75 -> org.bouncycastle:bcjmail-jdk18on 1.78.1
  • ical4j 2.2.4 -> ical4j-vcard 2.0.0-beta2

Other:

  • Junit 4 -> Junit 5 (including Mockito, AssertJ and got rid of Powermock)
  • maven-surefire-plugin 2.19.1 -> 3.2.5
Assets 2
Loading