Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Github reports security vulnerabilities #933

Closed
iluwatar opened this issue Sep 30, 2019 · 8 comments
Closed

Github reports security vulnerabilities #933

iluwatar opened this issue Sep 30, 2019 · 8 comments
Assignees
@gaurav9822
Labels
epic: build issue info: good first issue type: bug
Milestone
1.22.0

Comments

@iluwatar
Copy link
Owner

image

image
@hbothra15
Copy link
Contributor

HI @iluwatar
I would like to take this up

@iluwatar
Copy link
Owner Author

iluwatar commented Oct 1, 2019

Ok @hbothra15

@haridevelops
Copy link

is this still work in progress or shall i pick up ? @hbothra15 @iluwatar

@iluwatar
Copy link
Owner Author

iluwatar commented Oct 5, 2019

Ping @hbothra15

@gaurav9822
Copy link
Contributor

@iluwatar Want to take this issue. Is there anything else we need to do apart from upgrading the concerned dependencies?

@iluwatar
Copy link
Owner Author

iluwatar commented Oct 6, 2019

@gaurav9822 update the dependencies and after that verify that build and tests still work

@gaurav9822
Copy link
Contributor

@iluwatar I have raised a ticket on Spring JIRA.
URL - https://jira.spring.io/projects/DATAJPA/issues/DATAJPA-1610?filter=allopenissues

Also, after discussing with Spring developers, they have told to upgrade spring-boot as well in order to support spring-data 1.11.

@iluwatar
Copy link
Owner Author

iluwatar commented Oct 6, 2019

Makes sense, those artifacts are probably dependent of each other. It's worth trying at least.

iluwatar pushed a commit that referenced this issue Oct 8, 2019
@gaurav9822 @iluwatar
Fix: Github reports security vulnerabilities #933 (#960)
84c4b03 
* Fix: Github reports security vulnerabilities  #933

Upgrade camel and spring-data

* -Fix github security vulnerabilities in spring-data and camel

* -Code changes for review comments
@iluwatar iluwatar added this to the 1.22.0 milestone Oct 8, 2019
@iluwatar iluwatar closed this as completed Oct 8, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@gaurav9822 gaurav9822

Labels
epic: build issue info: good first issue type: bug
Projects
None yet
Milestone
1.22.0
Development

No branches or pull requests
4 participants
@iluwatar @gaurav9822 @hbothra15 @haridevelops