Skip to content

update dependencies #210

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Jun 3, 2017
Merged

update dependencies #210

merged 3 commits into from
Jun 3, 2017

Conversation

agebhar1
Copy link
Contributor

Update dependencies to latest version(s).

* com.google.code.findbugs:jsr305 :: 3.0.0 -> 3.0.1
* com.googlecode.libphonenumber:libphonenumber :: 6.2 -> 8.0.0
* joda-time:joda-time :: 2.3 -> 2.9.7
* net.sf.jopt-simple:jopt-simple :: 4.6 -> 5.0.3
* org.mockito:mockito-core :: 1.9.5 -> 2.4.2
* org.testng:testng :: 6.8.7 -> 6.10
@msymons
Copy link

msymons commented Mar 30, 2017

This PR addresses libphonenumber XSS vulnerability identified in Sonatype Nexus IQ analysis with reference SONATYPE-2015-0090. See Issue #225 .

@huggsboson huggsboson merged commit 0f5660f into java-json-tools:master Jun 3, 2017
@huggsboson
Copy link
Member

Thanks for the PR.

@agebhar1 agebhar1 deleted the feature/update-deps branch June 3, 2017 14:57
@msymons
Copy link

msymons commented Jun 21, 2017

@huggsboson, v2.2.8 was released 10 days ago but does not seem to be showing up in Maven central..

@huggsboson
Copy link
Member

I'll dig in...

@huggsboson
Copy link
Member

so unfortunately I couldn't get access to com.github.fge to publish artifacts to so i had to move to a new repository @ com.github.java-json-tools:
https://search.maven.org/#search%7Cga%7C1%7Cg%3A%22com.github.java-json-tools%22

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants