From f966652b060bc788dca0cd8a9c798024322a0078 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 27 Dec 2024 11:44:01 -0300 Subject: [PATCH] Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.17.0 (#215) * Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.17.0 Bumps org.apache.commons:commons-lang3 from 3.14.0 to 3.17.0. --- updated-dependencies: - dependency-name: org.apache.commons:commons-lang3 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] * changelog --------- Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: zubri --- CHANGELOG.md | 3 +++ build.gradle | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 5fbca509..f3cbf308 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,8 @@ # Prowide Core - CHANGELOG +#### 9.5.5 - SNAPSHOT + * Update apache-commons-lang3 from 3.14.0 to 3.17.0 fixing derived apache-text dependency vulnerabilities + #### 9.5.4 - November 2024 * Rolling back SHA-256 checksum algorithm to MD5 in the MT message model diff --git a/build.gradle b/build.gradle index d2b1c1af..7b11d975 100644 --- a/build.gradle +++ b/build.gradle @@ -53,7 +53,7 @@ repositories { } dependencies { - implementation 'org.apache.commons:commons-lang3:3.14.0' + implementation 'org.apache.commons:commons-lang3:3.17.0' implementation 'com.google.code.gson:gson:2.11.0' compileOnly 'javax.persistence:javax.persistence-api:2.2'