Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

Upgrade vulnerable dependencies and fix postal code method typo #73

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Toinetoine1 merged 2 commits into master from security/dependencies-fix
Aug 14, 2025

Conversation

Copy link
Contributor

@Toinetoine1 Toinetoine1 commented Aug 14, 2025

Description:

Updated project dependencies to address security vulnerabilities and improve compatibility. Also fixed a typo in postal code setter methods.

Changes:

  • Updated authlete.java.common from 4.19 to 4.21
  • Updated jersey from 2.30.1 to 2.34
  • Updated bcpkix-jdk18on from 1.78 to 1.78.1
  • Updated oauth2-oidc-sdk from 9.22 (jdk8 classifier) to 9.43.4
  • Updated logback-classic from 1.2.13 to 1.3.15
  • Fixed method name typo: .setPostaCode().setPostalCode() in UserDao and UserEntity

Antoine Resenterra added 2 commits August 12, 2025 15:07
... jersey, bcpkix, and logback
Upgraded multiple dependencies to patched versions to address known CVEs
and keep the stack on maintained releases.
- authlete-java-common: 4.19 → 4.21
- jersey.version: 2.30.1 → 2.34
- com.nimbusds:oauth2-oidc-sdk: 9.22 → 9.43.4 (removed jdk8 classifier)
- org.bouncycastle:bcpkix-jdk18on: 1.78 → 1.78.1
- ch.qos.logback:logback-classic: 1.2.13 → 1.3.15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

1 participant

AltStyle によって変換されたページ (->オリジナル) /