[
https://issues.apache.org/jira/browse/GEODE-8496?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17238970#comment-17238970
]
ASF subversion and git services commented on GEODE-8496:
--------------------------------------------------------
Commit 217be41f087072026ea3b411b89107700edfb5f7 in geode's branch
refs/heads/develop from Owen Nichols
[ https://gitbox.apache.org/repos/asf?p=geode.git;h=217be41 ]
GEODE-8496: top up dependency updates (#5772)
* Bump jetty from 9.4.34.v20201102 to 9.4.35.v20201120
* Bump netty-all from 4.1.53.Final to 4.1.54.Final
* Bump lettuce-core from 5.3.4.RELEASE to 5.3.5.RELEASE
* Bump fastutil from 8.4.2 to 8.4.3
* Bump pmd from 6.28.0 to 6.29.0
* Bump tomcat9 from 9.0.39 to 9.0.40
* Bump tomcat8 from 8.5.59 to 8.5.60
* Bump tomcat7 from 7.0.106 to 7.0.107
* Bump bcpkix-jdk15on from 1.66 to 1.67
* Bump spring-boot from 2.3.4.RELEASE to 2.4.0
* Bump spring-hateoas from 1.1.2.RELEASE to 1.2.1
* Bump spring-session-data-redis from 2.3.1.RELEASE to 2.4.1
* Bump spring from 5.2.9.RELEASE to 5.3.1
* Bump junit-quickcheck from 0.9.5 to 1.0
* Bump assertj from 3.17.2 to 3.18.1
* Bump micrometer from 1.5.5 to 1.6.1
* Bump testcontainers from 1.14.3 to 1.15.0
* Bump powermock from 2.0.7 to 2.0.9
* Bump mockito from 3.5.15 to 3.6.28
* Bump log4j from 2.13.3 to 2.14.0
> bump dependencies for 1.14
> --------------------------
>
> Key: GEODE-8496
> URL: https://issues.apache.org/jira/browse/GEODE-8496
> Project: Geode
> Issue Type: Improvement
> Components: build
> Reporter: Owen Nichols
> Priority: Major
> Labels: pull-request-available
> Fix For: 1.14.0
>
>
> now is a good time in the lull between 1.13 and 1.14 to roll 3rd party
> libraries to latest versions wherever possible. Doing this proactively helps
> us stay ahead of CVEs and keep up with bugfixes.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
