Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency io.dropwizard:dropwizard-testing to v1 - autoclosed #559

Conversation

mend-for-jackfan.us.kg[bot]
Copy link

This PR contains the following updates:

Package Update Change
io.dropwizard:dropwizard-testing major 0.8.0 -> 1.1.0-rc1

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 9.8 CVE-2016-4800 #279
High 9.8 CVE-2016-4800 #279
High 9.8 CVE-2017-7657 #372
High 9.8 CVE-2017-7657 #372
High 9.8 CVE-2017-7658 #370
High 9.8 CVE-2017-7658 #370
High 7.5 CVE-2017-7656 #374
High 7.5 CVE-2017-7656 #374
High 7.5 CVE-2017-9735 #403
High 7.5 CVE-2021-28165 #165
High 7.0 CVE-2020-27216 #379
Medium 6.1 CVE-2019-10241 #282
Medium 6.1 CVE-2019-10241 #282
Medium 6.1 CVE-2019-10241 #282
Medium 5.3 CVE-2019-10247 #288
Medium 5.3 CVE-2020-10693 #192
Medium 5.3 CVE-2021-28169 #166
Medium 5.3 CVE-2021-28169 #166
Low 3.5 CVE-2021-34428 #29

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 9.8 CVE-2019-14540 #297
High 9.8 CVE-2019-16942 #331
High 9.8 CVE-2019-16943 #333
High 9.8 CVE-2019-17531 #4
High 9.8 CVE-2019-20330 #219
High 9.8 CVE-2020-8840 #53
High 9.8 CVE-2020-9546 #345
High 9.8 CVE-2020-9547 #346
High 9.8 CVE-2020-9548 #347
High 8.8 CVE-2020-10672 #175
High 8.8 CVE-2020-10673 #176
High 8.8 CVE-2020-10968 #96
High 8.8 CVE-2020-10969 #98
High 8.8 CVE-2020-11111 #248
High 8.8 CVE-2020-11112 #250
High 8.8 CVE-2020-11113 #249
High 8.1 CVE-2020-11619 #144
High 8.1 CVE-2020-11620 #156
High 8.1 CVE-2020-14060 #56
High 8.1 CVE-2020-14061 #57
High 8.1 CVE-2020-14062 #58
High 8.1 CVE-2020-14195 #73
High 8.1 CVE-2020-24616 #209
High 8.1 CVE-2020-24750 #213
High 8.1 CVE-2020-35490 #326
High 8.1 CVE-2020-35491 #329
High 8.1 CVE-2020-35728 #188
High 8.1 CVE-2020-36179 #389
High 8.1 CVE-2020-36180 #41
High 8.1 CVE-2020-36181 #40
High 8.1 CVE-2020-36182 #43
High 8.1 CVE-2020-36183 #42
High 8.1 CVE-2020-36184 #47
High 8.1 CVE-2020-36185 #45
High 8.1 CVE-2020-36186 #49
High 8.1 CVE-2020-36187 #48
High 8.1 CVE-2020-36188 #37
High 8.1 CVE-2020-36189 #36
High 8.1 CVE-2021-20190 #163
High 7.5 CVE-2020-25649 #268
High 7.5 CVE-2020-36518 #500
Medium 5.3 CVE-2021-28169 #166

Release Notes

dropwizard/dropwizard

v1.1.0-rc1

http://www.dropwizard.io/1.1.0-rc1/docs

v1.0.9

v1.0.8

v1.0.7

v1.0.6

  • Switch cert and peer validation to false by default #​1855
  • Add a JUnit rule for testing database interactions #​1905

v1.0.5

  • Fix request logs with request parameter in layout pattern #​1828

v1.0.4

  • Upgraded to Jersey 2.23.2 #​1808
  • Brought back support for request logging with logback-classic #​1813

v1.0.3

  • Fix support maxFileSize and archivedFileCount #​1660
  • Upgraded to Jackson 2.7.8 #​1755
  • Upgraded to Mustache 0.9.4 #​1766
  • Prefer use of assertj’s java8 exception assertions #​1753

v1.0.2

  • Fix absence of request logs in Dropwizard 1.0.1 #​1737

v1.0.1

  • Allow use of custom HostnameVerifier on clients #​1664
  • Allow to configure failing on unknown properties in the Dropwizard configuration #​1677
  • Fix request attribute-related race condition in Logback request logging #​1678
  • Log Jetty initialized SSLContext not the Default #​1698
  • Fix NPE of non-resource sub-resource methods #​1718

v1.0.0

Release notes

v0.9.3

v0.9.2

http://www.dropwizard.io/0.9.2/docs/about/release-notes.html

v0.9.1

http://www.dropwizard.io/0.9.1/docs/about/release-notes.html#v0-9-1

v0.9.0

See http://www.dropwizard.io/0.9.0/docs/about/release-notes.html#v0-9-0-oct-28-2015

Upgrading from 0.8.x to 0.9.0 - https://github.com/dropwizard/dropwizard/wiki/Upgrade-guide-0.8.x-to-0.9.x

v0.8.5

http://www.dropwizard.io/0.8.5/docs/about/release-notes.html#v0-8-5-nov-3-2015

v0.8.4

  • apache httpclient 4.5
  • jersey 2.21
  • fix issues with user agent

v0.8.3

  • Fixed an issue with closing the HTTP client connection pool after a full GC #​1160

v0.8.2

  • Support for request-scoped configuration for Jersey client #​1137
  • Upgraded to Jersey 2.19 #​1143

v0.8.1

  • Fixed transcation commiting lifecycle for @​UnitOfWork (#​850, #​915)
  • Fixed noisy Logback messages on startup (#​902)
  • Ability to use providers in TestRule, allows testing of auth & views (#​513, #​922)
  • Custom ExceptionMapper not invoked when Hibernate rollback (#​949)
  • Support for setting a time bound on DBI and Hibernate health checks
  • Default configuration for views
  • Ensure that JerseyRequest scoped ClientConfig gets propagated to HttpUriRequest
  • More example tests
  • Fixed security issue where info is leaked during validation of unauthenticated resources(#​768)

  • If you want to rebase/retry this PR, click this checkbox.

@mend-for-jackfan.us.kg mend-for-jackfan.us.kg bot added the security fix Security fix generated by WhiteSource label Apr 18, 2022
@mend-for-jackfan.us.kg mend-for-jackfan.us.kg bot changed the title Update dependency io.dropwizard:dropwizard-testing to v1 Update dependency io.dropwizard:dropwizard-testing to v1 - autoclosed Apr 25, 2022
@mend-for-jackfan.us.kg mend-for-jackfan.us.kg bot deleted the whitesource-remediate/io.dropwizard-dropwizard-testing-1.x branch April 25, 2022 03:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants