Skip to content

Commit

Permalink
Bump all deps to latest (#199).
Browse files Browse the repository at this point in the history
  • Loading branch information
nedtwigg authored Aug 9, 2022
2 parents 4206a91 + e5d331c commit 8e0afa5
Show file tree
Hide file tree
Showing 2 changed files with 8 additions and 7 deletions.
1 change: 1 addition & 0 deletions CHANGES.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,7 @@
## [Unreleased]
### Fixed
- Fixed zip-slip vulnerability in `ZipMisc`. This could have allowed a malicious zip file to extract itself into an arbitrary directory. The only file that Goomph extracts is the p2 bootstrapper and eclipse metadata files hosted at `eclipse.org`, which are not malicious, so the only way this vulnerability could have affected you is if you had set a custom bootstrap zip, and that zip was malicious. Unlikely! Defense in depth is important, so good to have this fixed, and thanks to @JLLeitschuh for reporting, and with a fix no less! ([#198](https://github.com/diffplug/goomph/pull/198))
- Bumped all deps to latest. ([#199](https://github.com/diffplug/goomph/pull/199))

## [3.37.1] - 2022-06-26
### Fixed
Expand Down
14 changes: 7 additions & 7 deletions build.gradle
Original file line number Diff line number Diff line change
Expand Up @@ -24,8 +24,8 @@ spotless {
}

String VER_DURIAN = '1.2.0'
String VER_DURIAN_SWT = '3.5.0'
String VER_BNDLIB = '6.1.0'
String VER_DURIAN_SWT = '3.6.1'
String VER_BNDLIB = '6.3.1'
String OLDEST_SUPPORTED_GRADLE = '5.1'
String VER_P2_BOOTSTRAP = '4.13.0'

Expand All @@ -35,15 +35,15 @@ dependencies {
implementation "com.diffplug.durian:durian-collect:${VER_DURIAN}"
implementation "com.diffplug.durian:durian-io:${VER_DURIAN}"
implementation "com.diffplug.durian:durian-swt.os:${VER_DURIAN_SWT}"
implementation "commons-io:commons-io:2.6"
implementation "com.diffplug.spotless:spotless-lib:2.20.0"
implementation "com.squareup.okhttp3:okhttp:4.3.1"
implementation "com.squareup.okio:okio:2.4.3"
implementation "commons-io:commons-io:2.11.0"
implementation "com.diffplug.spotless:spotless-lib:2.28.0"
implementation "com.squareup.okhttp3:okhttp:4.10.0"
implementation "com.squareup.okio:okio:3.2.0"
// OSGi
implementation "biz.aQute.bnd:biz.aQute.bndlib:${VER_BNDLIB}"
// testing
testImplementation "junit:junit:4.13.2"
testImplementation "org.assertj:assertj-core:3.20.2"
testImplementation "org.assertj:assertj-core:3.23.1"
}

configurations.compileClasspath {
Expand Down

0 comments on commit 8e0afa5

Please # to comment.