This is an automated email from the ASF dual-hosted git repository.
ggregory pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-io.git
The following commit(s) were added to refs/heads/master by this push:
new 2fc580ca Bump commons.bytebuddy.version from 1.14.9 to 1.14.10 #516
2fc580ca is described below
commit 2fc580ca108c2ab721ea6e5e65534abee03b1539
Author: Gary Gregory <garydgreg...@users.noreply.github.com>
AuthorDate: Fri Nov 24 07:52:04 2023 -0500
Bump commons.bytebuddy.version from 1.14.9 to 1.14.10 #516
---
src/changes/changes.xml | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index e3f41b24..8e78bda6 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -72,7 +72,8 @@ The <action> type attribute can be add,update,fix,remove.
<action dev="ggregory" type="fix" due-to="Gary Gregory">Fix SpotBugs
error: Exception thrown in class
org.apache.commons.io.input.UnsynchronizedByteArrayInputStream at new
org.apache.commons.io.input.UnsynchronizedByteArrayInputStream(byte[], int,
int) will leave the constructor. The object under construction remains
partially initialized and may be vulnerable to Finalizer attacks.
[org.apache.commons.io.input.UnsynchronizedByteArrayInputStream,
org.apache.commons.io.input.Unsynchr [...]
<!-- UPDATE -->
<action dev="ggregory" type="update" due-to="Gary Gregory">Bump
org.codehaus.mojo:exec-maven-plugin from 3.1.0 to 3.1.1 #512.</action>
- <action dev="ggregory" type="update" due-to="Gary Gregory">Bump
commons-lang3 from 3.13.0 to 3.14.0.</action>
+ <action dev="ggregory" type="update" due-to="Gary Gregory">Bump
commons-lang3 from 3.13.0 to 3.14.0.</action>
+ <action dev="ggregory" type="update" due-to="Dependabot">Bump
commons.bytebuddy.version from 1.14.9 to 1.14.10 #516.</action>
</release>
<release version="2.15.0" date="2023-10-21" description="Java 8 is
required.">
<!-- FIX -->
