Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update protobuf-java to 3.25.5 if otherwise present in the project dependencies #91

Merged
merged 1 commit into from
Sep 26, 2024

Conversation

bpholt
Copy link
Member

@bpholt bpholt commented Sep 25, 2024

This mitigates a security advisory introduced in #67. It's not a major concern because the dependency is only present in the Scalafix subproject, which is only used as part of this project's build and is not otherwise published, but it's good to clean it up anyway.

@bpholt bpholt self-assigned this Sep 25, 2024
@bpholt bpholt requested a review from a team as a code owner September 25, 2024 19:32
@bpholt bpholt merged commit 6be954f into main Sep 26, 2024
15 checks passed
@bpholt bpholt deleted the CVE-2024-7254 branch September 26, 2024 15:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants