Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Liquibase-Maven-Plugin: Upgrade snakeyaml from 1.27 to 1.31 #3263

Merged
merged 1 commit into from
Sep 9, 2022
Merged

Liquibase-Maven-Plugin: Upgrade snakeyaml from 1.27 to 1.31 #3263

merged 1 commit into from
Sep 9, 2022

Conversation

julianladisch
Copy link
Contributor

@julianladisch julianladisch commented Sep 9, 2022 •
edited by nvoxland
Loading

Description

Updates the snakeyaml dependency shipped in the liquibase-maven-plugin pom to address CVE-2022-25857

nvoxland
nvoxland approved these changes Sep 9, 2022
View reviewed changes
Copy link
Contributor

@nvoxland nvoxland left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code review and test results:

Things to be aware of:

  • Updates the maven plugin's declared dependency to match the snakeyaml version used everywhere else

Things to worry about:

  • Nothing

@nvoxland nvoxland changed the title Bump snakeyaml from 1.27 to 1.31 fixing CVE-2022-25857 Upgrade snakeyaml from 1.27 to 1.31 fixing CVE-2022-25857 Sep 9, 2022
XDelphiGrl
XDelphiGrl approved these changes Sep 9, 2022
View reviewed changes
Copy link
Contributor

@XDelphiGrl XDelphiGrl left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

APPROVED

@nvoxland nvoxland merged commit 2dcca45 into liquibase:master Sep 9, 2022
@nvoxland nvoxland changed the title Upgrade snakeyaml from 1.27 to 1.31 fixing CVE-2022-25857 Liquibase-Maven-Plugin: Upgrade snakeyaml from 1.27 to 1.31 Sep 9, 2022
@kataggart kataggart added this to the NEXT milestone Sep 9, 2022
@kataggart kataggart modified the milestones: NEXT, v4.16.0 Sep 12, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@nvoxland nvoxland nvoxland approved these changes

@XDelphiGrl XDelphiGrl XDelphiGrl approved these changes

@suryaaki2 suryaaki2 suryaaki2 approved these changes

Assignees
No one assigned
Labels
None yet
Projects
Liquibase Open Source
Archived in project
Milestone
v4.16.0
Development

Successfully merging this pull request may close these issues.

None yet
6 participants
@julianladisch @nvoxland @XDelphiGrl @suryaaki2 @kevin-atx @kataggart