[
https://issues.apache.org/jira/browse/GEODE-8496?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17253187#comment-17253187
]
ASF subversion and git services commented on GEODE-8496:
--------------------------------------------------------
Commit 5fc2a0c305bde6f0423a54c52314397a75de2eaa in geode's branch
refs/heads/develop from Owen Nichols
[ https://gitbox.apache.org/repos/asf?p=geode.git;h=5fc2a0c ]
GEODE-8496: more dependency bumps (#5869)
* Bump guava from 30.0-jre to 30.1-jre
* Bump micrometer-core from 1.6.1 to 1.6.2
* Bump netty-all from 4.1.54.Final to 4.1.56.Final
* Bump json-path from 2.4.0 to 2.5.0
* Bump pmd from 6.29.0 to 6.30.0
* Bump compiler from 2.4.0 to 2.4.1
* Bump archunit from 0.14.1 to 0.15.0
* Bump tomcat from 8.5.60 to 8.5.61
* Bump tomcat from 9.0.40 to 9.0.41
* Bump cargo from 1.8.2 to 1.8.3
* Bump spring-boot-starter from 2.4.0 to 2.4.1
* Bump spring-hateoas from 1.2.1 to 1.2.2
* Bump jedis from 3.3.0 to 3.4.0
> bump dependencies for 1.14
> --------------------------
>
> Key: GEODE-8496
> URL: https://issues.apache.org/jira/browse/GEODE-8496
> Project: Geode
> Issue Type: Improvement
> Components: build
> Reporter: Owen Nichols
> Priority: Major
> Labels: pull-request-available
> Fix For: 1.14.0
>
>
> now is a good time in the lull between 1.13 and 1.14 to roll 3rd party
> libraries to latest versions wherever possible. Doing this proactively helps
> us stay ahead of CVEs and keep up with bugfixes.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
