Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump com.google.guava:guava from 31.1-jre to 32.1.2-jre #183

Merged
merged 1 commit into from
Aug 31, 2023

Conversation

cplohitha
Copy link
Contributor

@cplohitha cplohitha commented Aug 30, 2023

This PR is raised for upgrading com.google.guava:guava from 31.1-jre to 32.1.2-jre. Previously the guava version was picked from com.google.cloud libraries-bom version 26.1.1

<groupId>com.google.cloud</groupId> <artifactId>libraries-bom</artifactId> <version>26.1.1</version>

Now overrode to picking the version from plugin POM as there were other version updates in the latest versions of the google cloud bom.

CVE : https://nvd.nist.gov/vuln/detail/CVE-2020-8908

Testing done
"mvn verify", "mvn test" ran successfully in local.

Testing done

Submitter checklist

Preview Give feedback

@olamy olamy added the dependencies Pull requests that update a dependency file label Aug 31, 2023
@olamy olamy merged commit d415752 into jenkinsci:develop Aug 31, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants