Skip to content
This repository has been archived by the owner on May 30, 2024. It is now read-only.

prepare 5.10.8 release #302

Merged
merged 1,140 commits into from
Mar 21, 2023
Merged

prepare 5.10.8 release #302

merged 1,140 commits into from
Mar 21, 2023

Conversation

LaunchDarklyReleaseBot
Copy link
Contributor

[5.10.8] - 2023-03-21

Fixed:

  • Updated snakeyaml to v2.0.0 to address CVE-2022-1471. This vulnerability would only have affected applications that used the FileData feature with a YAML file, assuming an attacker had write access to the filesystem.

eli-darkly and others added 30 commits September 1, 2020 12:20
@eli-darkly
update okhttp to 4.8.1 (fixes incompatibility with OpenJDK 8.0.252)
f3f01ec
@eli-darkly
Merge pull request #261 from launchdarkly/eb/ch88298/okhttp-update-5.x
7025ae7 
update okhttp to 4.8.1 (fixes incompatibility with OpenJDK 8.0.252)
@LaunchDarklyCI
merge from public after release
d1e311e
@eli-darkly
gitignore
f5a8555
@gwhelanLD
Merge branch 'master' of github.com:launchdarkly/java-server-sdk
52c36be
@LaunchDarklyCI
merge from public after release
9fe8f5b
@ssrm @eli-darkly
Bump SnakeYAML from 1.19 to 1.26 to address CVE-2017-18640
ac9bdb1
@eli-darkly
Merge pull request #262 from launchdarkly/eb/ch88108/snakeyaml-update
d1e0637 
Bump SnakeYAML from 1.19 to 1.26 to address CVE-2017-18640
@LaunchDarklyCI
prepare 4.14.3 release (#209)
4f8f980
@LaunchDarklyCI
Releasing version 4.14.3
a6777a8
@LaunchDarklyCI
merge from public after release
89954b5
@eli-darkly
Merge branch '4.x'
a83942e 
# Conflicts:
#	CHANGELOG.md
#	gradle.properties
@eli-darkly
Merge branch 'master' into eb/ch78216/test-data
326e8e1
@eli-darkly
comments
b800f23
@eli-darkly
Merge pull request #251 from launchdarkly/eb/ch78216/test-data
7cb20cd 
ch78326 - implement new test data source
@eli-darkly
only log initialization message once in polling mode
06fdd3e
@eli-darkly
Merge pull request #263 from launchdarkly/eb/ch88859/polling-logging
03e2ad8 
only log initialization message once in polling mode
@LaunchDarklyCI
merge from public after release
a448abc
@gwhelanLD
[ch89935] Correct some logging call format strings (#264)
078fe16 
Also adds debug logs for full exception information in a couple locations.
@gwhelanLD
[ch90109] Remove outdated trackMetric comment from before service sup…
136eb1b 
…port. (#265)
@gwhelanLD
Fix compatibility with Java 7.
889a1c6
@gwhelanLD
Remove import that is no longer used.
67dea95
@eli-darkly
Merge pull request #266 from launchdarkly/gw/ch90182/fix-java-7-compat
402b8fe 
Fix compatibility with Java 7.
@eli-darkly
add Java 7 build (#267)
ee5e212
@LaunchDarklyCI
prepare 4.14.4 release (#214)
cd60e6d
@LaunchDarklyCI
Releasing version 4.14.4
424c7d5
@LaunchDarklyCI
merge from public after release
72ac981
@hroederld
add and use getSocketFactory
0113451
@hroederld
alignment
346f655
@hroederld
add socketFactory to builder
305f555
eli-darkly and others added 26 commits September 12, 2022 14:45
@eli-darkly
bump snakeyaml version for CVE-2022-38752
decdb31
@eli-darkly
Merge pull request #374 from launchdarkly/eb/sc-168802/snakeyaml-patch
a612d96 
bump snakeyaml version for CVE-2022-38752
merge from public after release
d937330
@eli-darkly
disable Windows Java 11 build
cd4a9bd
@eli-darkly
Merge pull request #375 from launchdarkly/eb/sc-171428/no-windows-jav…
6eac0c0 
…a-11

disable Windows Java 11 build
@eli-darkly
fix packaging of com.launchdarkly.logging classes
85b9720
@eli-darkly
rm debugging
52ba6b3
@eli-darkly
reconsidered - let's include the logging classes in the jars
f4cc631
@eli-darkly
fix packaging test logic
78d1540
@eli-darkly
correct documentation
b787f60
@eli-darkly
Merge pull request #377 from launchdarkly/eb/sc-173058/packaging
8eaf967 
fix packaging of com.launchdarkly.logging classes
merge from public after release
d5ffd47
@eli-darkly
Merge branch 'main' of github.com:launchdarkly/java-server-sdk
75887a7
@eli-darkly
use synchronous EventSource (5.x backport)
acf7e58
@eli-darkly
Merge pull request #386 from launchdarkly/eb/sc-180984/sync-eventsour…
4640f10 
…ce-5.x

use synchronous EventSource (5.x backport)
merge from public after release
5769012
@eli-darkly
backport YAML CVE fix from 6.x
288159d
@eli-darkly
Merge pull request #389 from launchdarkly/eb/sc-182242/yaml-cve-5.x
8e124ed 
backport YAML CVE fix from 6.x
merge from public after release
734ba2e
@eli-darkly
don't allow uncaught RuntimeException on stream thread and don't repo…
ca7fc44 
…rt errors on shutdown
@eli-darkly
Merge pull request #390 from launchdarkly/eb/sc-182728/no-error-on-st…
6f77b97 
…ream-close

don't allow uncaught RuntimeException on stream thread and don't report errors on shutdown
merge from public after release
d2c8e7b
@eli-darkly
don't log a JSON error if the stream closes while we're parsing an ev…
fc3f660 
…ent (#391)
merge from public after release
70d0a01
@louis-launchdarkly
chore: bump snakeyaml
2093a0e
@louis-launchdarkly
Merge pull request #396 from launchdarkly/lc/fix-snakeyaml-5.x
f347c98 
chore: bump snakeyaml
@LaunchDarklyReleaseBot LaunchDarklyReleaseBot deleted the release-5.10.8 branch March 21, 2023 20:37
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Reviewers

@tanderson-ld tanderson-ld tanderson-ld approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.