[ 
https://issues.apache.org/jira/browse/GEODE-8496?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17276572#comment-17276572
 ] 

ASF subversion and git services commented on GEODE-8496:
--------------------------------------------------------

Commit 55a548c82f82c278f830a5a28e15c40ac8db4594 in geode's branch 
refs/heads/develop from Owen Nichols
[ https://gitbox.apache.org/repos/asf?p=geode.git;h=55a548c ]

GEODE-8496: bump deps again (#5983)

* Bump HikariCP from 3.4.5 to 4.0.1
* Bump fastutil from 8.4.4 to 8.5.1
* Bump assertj-core from 3.18.1 to 3.19.0
* Bump cargo from 1.8.4 to 1.9.0
* Bump jetty from 9.4.35.v20201120 to 9.4.36.v20210114
* Bump spring-hateoas from 1.2.2 to 1.2.3
* Bump spring-session-data-redis from 2.4.1 to 2.4.2
* Bump jedis from 3.4.1 to 3.5.1
* Bump sonarqube from 3.1 to 3.1.1
* Bump nebula.facet from 7.0.9 to 8.0.0

> bump dependencies for 1.14
> --------------------------
>
>                 Key: GEODE-8496
>                 URL: https://issues.apache.org/jira/browse/GEODE-8496
>             Project: Geode
>          Issue Type: Improvement
>          Components: build
>            Reporter: Owen Nichols
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 1.14.0
>
>
> now is a good time in the lull between 1.13 and 1.14 to roll 3rd party 
> libraries to latest versions wherever possible.  Doing this proactively helps 
> us stay ahead of CVEs and keep up with bugfixes.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to