From 18d294415c9360dcc5e01055940b233bd9e17240 Mon Sep 17 00:00:00 2001 From: Daniel Widdis Date: Thu, 14 Mar 2024 15:35:20 -0700 Subject: [PATCH 1/2] Add skip-changelog label to version bump PRs (#576) Signed-off-by: Daniel Widdis --- .whitesource | 1 + 1 file changed, 1 insertion(+) diff --git a/.whitesource b/.whitesource index 6f5edc0de..177f6ee6b 100644 --- a/.whitesource +++ b/.whitesource @@ -32,6 +32,7 @@ ":gitSignOff", "github>whitesource/merge-confidence:beta" ], + "addLabels": ["skip-changelog"], "workflowRules": { "enabled": true } From 10915aa2524224c3828057670352badb2fd763a3 Mon Sep 17 00:00:00 2001 From: "mend-for-github-com[bot]" <50673670+mend-for-github-com[bot]@users.noreply.github.com> Date: Thu, 14 Mar 2024 15:35:39 -0700 Subject: [PATCH 2/2] Update dependency com.google.guava:guava to v33.1.0-jre (#575) Signed-off-by: mend-for-github-com[bot] Co-authored-by: mend-for-github-com[bot] <50673670+mend-for-github-com[bot]@users.noreply.github.com> --- build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.gradle b/build.gradle index 3a83e7af3..e81d2b5e7 100644 --- a/build.gradle +++ b/build.gradle @@ -184,7 +184,7 @@ dependencies { configurations.all { resolutionStrategy { - force("com.google.guava:guava:33.0.0-jre") // CVE for 31.1, keep to force transitive dependencies + force("com.google.guava:guava:33.1.0-jre") // CVE for 31.1, keep to force transitive dependencies force("org.eclipse.platform:org.eclipse.core.runtime:3.31.0") // CVE for < 3.29.0 force("com.fasterxml.jackson.core:jackson-core:2.17.0") // Dependency Jar Hell }