diff --git a/.github/workflows/broken_links_checker.yml b/.github/workflows/broken_links_checker.yml index d7a38b4..39612b7 100644 --- a/.github/workflows/broken_links_checker.yml +++ b/.github/workflows/broken_links_checker.yml @@ -13,6 +13,8 @@ on: jobs: linkChecker: runs-on: ubuntu-latest + permissions: + contents: read defaults: run: shell: "bash" diff --git a/.github/workflows/ci-build.yml b/.github/workflows/ci-build.yml index 0a29c8a..5bc0064 100644 --- a/.github/workflows/ci-build.yml +++ b/.github/workflows/ci-build.yml @@ -15,8 +15,7 @@ jobs: shell: bash } permissions: { - contents: read, - checks: write + contents: read } concurrency: { group: '${{ github.workflow }}-${{ github.ref }}-${{ matrix.exasol_db_version }}', diff --git a/.github/workflows/dependencies_update.yml b/.github/workflows/dependencies_update.yml index 9f536ee..1bf502f 100644 --- a/.github/workflows/dependencies_update.yml +++ b/.github/workflows/dependencies_update.yml @@ -61,14 +61,6 @@ jobs: env: { CREATED_ISSUES: '${{ inputs.vulnerability_issues }}' } - - name: Project Keeper Fix - id: project-keeper-fix - run: | - mvn --batch-mode com.exasol:project-keeper-maven-plugin:fix --projects . - - name: Project Keeper Fix for updated Project Keeper version - id: project-keeper-fix-2 - run: | - mvn --batch-mode com.exasol:project-keeper-maven-plugin:fix --projects . - name: Generate Pull Request comment id: pr-comment run: | @@ -81,7 +73,11 @@ jobs: echo 'It updates dependencies.' >> "$GITHUB_OUTPUT" fi echo >> "$GITHUB_OUTPUT" - echo '# ⚠️ This PR does not trigger CI workflows by default ⚠️' >> "$GITHUB_OUTPUT" + echo '# ⚠️ Notes ⚠️' >> "$GITHUB_OUTPUT" + echo '## Run PK fix manually' >> "$GITHUB_OUTPUT" + echo 'Due to restrictions workflow `dependencies_update.yml` can't update other workflows, see https://github.com/exasol/project-keeper/issues/578 for details.' >> "$GITHUB_OUTPUT" + echo 'Please checkout this PR locally and run `mvn com.exasol:project-keeper-maven-plugin:fix --projects .`' >> "$GITHUB_OUTPUT" + echo '## This PR does not trigger CI workflows' >> "$GITHUB_OUTPUT" echo 'Please click the **Close pull request** button and then **Reopen pull request** to trigger running checks.' >> "$GITHUB_OUTPUT" echo 'See https://github.com/exasol/project-keeper/issues/534 for details.' >> "$GITHUB_OUTPUT" echo 'EOF' >> "$GITHUB_OUTPUT" diff --git a/dependencies.md b/dependencies.md index 5d926b2..aca51eb 100644 --- a/dependencies.md +++ b/dependencies.md @@ -12,61 +12,65 @@ | [snappy-java][6] | [Apache-2.0][7] | | Apache Hadoop Client Aggregator | [Apache-2.0][3] | | [Apache Commons Configuration][8] | [Apache-2.0][3] | +| [aircompressor][9] | [Apache License 2.0][7] | +| [Nimbus JOSE+JWT][10] | [The Apache Software License, Version 2.0][3] | +| [janino][11] | [BSD-3-Clause][12] | +| [commons-compiler][13] | [BSD-3-Clause][12] | | Apache Hadoop Amazon Web Services support | [Apache-2.0][3] | -| [ParaNamer Core][9] | [BSD][10] | -| [Guava: Google Core Libraries for Java][11] | [Apache License, Version 2.0][12] | -| [jackson-databind][13] | [The Apache Software License, Version 2.0][3] | -| [AWS Java SDK :: Services :: Amazon S3][14] | [Apache License, Version 2.0][15] | -| [Exasol JDBC Driver][16] | [EXAClient License][17] | -| [Exasol SQL Statement Builder][18] | [MIT License][19] | -| [spark-connector-common-java][20] | [MIT License][21] | -| [error-reporting-java8][22] | [MIT License][23] | +| [ParaNamer Core][14] | [BSD][15] | +| [Guava: Google Core Libraries for Java][16] | [Apache License, Version 2.0][17] | +| [jackson-databind][18] | [The Apache Software License, Version 2.0][3] | +| [AWS Java SDK :: Services :: Amazon S3][19] | [Apache License, Version 2.0][20] | +| [Exasol JDBC Driver][21] | [EXAClient License][22] | +| [Exasol SQL Statement Builder][23] | [MIT License][24] | +| [spark-connector-common-java][25] | [MIT License][26] | +| [error-reporting-java8][27] | [MIT License][28] | ## Test Dependencies | Dependency | License | | ----------------------------------------------- | ------------------------------------ | -| [mockito-core][24] | [MIT][25] | -| [mockito-junit-jupiter][24] | [MIT][25] | -| [JUnit Jupiter (Aggregator)][26] | [Eclipse Public License v2.0][27] | -| [JUnit Jupiter API][26] | [Eclipse Public License v2.0][27] | -| [Hamcrest][28] | [BSD License 3][29] | -| [Testcontainers :: JUnit Jupiter Extension][30] | [MIT][31] | -| [Testcontainers :: Localstack][30] | [MIT][31] | -| [AWS Java SDK for Amazon S3][14] | [Apache License, Version 2.0][15] | -| AWSGlueETL | [Amazon Software License][32] | -| [Ion Java][33] | [The Apache License, Version 2.0][3] | -| [Test containers for Exasol on Docker][34] | [MIT License][35] | -| [Test Database Builder for Java][36] | [MIT License][37] | -| [Test utilities for `java.util.logging`][38] | [MIT][25] | -| [Matcher for SQL Result Sets][39] | [MIT License][40] | -| [EqualsVerifier \| release normal jar][41] | [Apache License, Version 2.0][3] | -| [Apache Log4j API][42] | [Apache-2.0][3] | -| [Apache Log4j Core][43] | [Apache-2.0][3] | +| [mockito-core][29] | [MIT][30] | +| [mockito-junit-jupiter][29] | [MIT][30] | +| [JUnit Jupiter (Aggregator)][31] | [Eclipse Public License v2.0][32] | +| [JUnit Jupiter API][31] | [Eclipse Public License v2.0][32] | +| [Hamcrest][33] | [BSD License 3][34] | +| [Testcontainers :: JUnit Jupiter Extension][35] | [MIT][36] | +| [Testcontainers :: Localstack][35] | [MIT][36] | +| [AWS Java SDK for Amazon S3][19] | [Apache License, Version 2.0][20] | +| AWSGlueETL | [Amazon Software License][37] | +| [Ion Java][38] | [The Apache License, Version 2.0][3] | +| [Test containers for Exasol on Docker][39] | [MIT License][40] | +| [Test Database Builder for Java][41] | [MIT License][42] | +| [Test utilities for `java.util.logging`][43] | [MIT][30] | +| [Matcher for SQL Result Sets][44] | [MIT License][45] | +| [EqualsVerifier \| release normal jar][46] | [Apache License, Version 2.0][3] | +| [Apache Log4j API][47] | [Apache-2.0][3] | +| [Apache Log4j Core][48] | [Apache-2.0][3] | ## Plugin Dependencies | Dependency | License | | ------------------------------------------------------- | ------------------------------------- | -| [SonarQube Scanner for Maven][44] | [GNU LGPL 3][45] | -| [Apache Maven Toolchains Plugin][46] | [Apache License, Version 2.0][3] | -| [Apache Maven Compiler Plugin][47] | [Apache-2.0][3] | -| [Apache Maven Enforcer Plugin][48] | [Apache-2.0][3] | -| [Maven Flatten Plugin][49] | [Apache Software Licenese][3] | -| [Apache Maven Shade Plugin][50] | [Apache-2.0][3] | -| [OpenFastTrace Maven Plugin][51] | [GNU General Public License v3.0][52] | -| [org.sonatype.ossindex.maven:ossindex-maven-plugin][53] | [ASL2][12] | -| [Maven Surefire Plugin][54] | [Apache-2.0][3] | -| [Versions Maven Plugin][55] | [Apache License, Version 2.0][3] | -| [duplicate-finder-maven-plugin Maven Mojo][56] | [Apache License 2.0][1] | -| [Project Keeper Maven plugin][57] | [The MIT License][58] | -| [Apache Maven Assembly Plugin][59] | [Apache-2.0][3] | -| [Apache Maven JAR Plugin][60] | [Apache License, Version 2.0][3] | -| [Artifact reference checker and unifier][61] | [MIT License][62] | -| [Maven Failsafe Plugin][63] | [Apache-2.0][3] | -| [JaCoCo :: Maven Plugin][64] | [EPL-2.0][65] | -| [error-code-crawler-maven-plugin][66] | [MIT License][67] | -| [Reproducible Build Maven Plugin][68] | [Apache 2.0][12] | +| [SonarQube Scanner for Maven][49] | [GNU LGPL 3][50] | +| [Apache Maven Toolchains Plugin][51] | [Apache-2.0][3] | +| [Apache Maven Compiler Plugin][52] | [Apache-2.0][3] | +| [Apache Maven Enforcer Plugin][53] | [Apache-2.0][3] | +| [Maven Flatten Plugin][54] | [Apache Software Licenese][3] | +| [Apache Maven Shade Plugin][55] | [Apache-2.0][3] | +| [OpenFastTrace Maven Plugin][56] | [GNU General Public License v3.0][57] | +| [org.sonatype.ossindex.maven:ossindex-maven-plugin][58] | [ASL2][17] | +| [Maven Surefire Plugin][59] | [Apache-2.0][3] | +| [Versions Maven Plugin][60] | [Apache License, Version 2.0][3] | +| [duplicate-finder-maven-plugin Maven Mojo][61] | [Apache License 2.0][1] | +| [Project Keeper Maven plugin][62] | [The MIT License][63] | +| [Apache Maven Assembly Plugin][64] | [Apache-2.0][3] | +| [Apache Maven JAR Plugin][65] | [Apache-2.0][3] | +| [Artifact reference checker and unifier][66] | [MIT License][67] | +| [Maven Failsafe Plugin][68] | [Apache-2.0][3] | +| [JaCoCo :: Maven Plugin][69] | [EPL-2.0][70] | +| [error-code-crawler-maven-plugin][71] | [MIT License][72] | +| [Reproducible Build Maven Plugin][73] | [Apache 2.0][17] | [0]: https://spark.apache.org/ [1]: http://www.apache.org/licenses/LICENSE-2.0.html @@ -77,63 +81,68 @@ [6]: https://github.com/xerial/snappy-java [7]: https://www.apache.org/licenses/LICENSE-2.0.html [8]: https://commons.apache.org/proper/commons-configuration/ -[9]: https://github.com/paul-hammant/paranamer/paranamer -[10]: LICENSE.txt -[11]: https://github.com/google/guava -[12]: http://www.apache.org/licenses/LICENSE-2.0.txt -[13]: https://github.com/FasterXML/jackson -[14]: https://aws.amazon.com/sdkforjava -[15]: https://aws.amazon.com/apache2.0 -[16]: http://www.exasol.com/ -[17]: https://repo1.maven.org/maven2/com/exasol/exasol-jdbc/24.1.0/exasol-jdbc-24.1.0-license.txt -[18]: https://github.com/exasol/sql-statement-builder/ -[19]: https://github.com/exasol/sql-statement-builder/blob/main/LICENSE -[20]: https://github.com/exasol/spark-connector-common-java/ -[21]: https://github.com/exasol/spark-connector-common-java/blob/main/LICENSE -[22]: https://github.com/exasol/error-reporting-java/ -[23]: https://github.com/exasol/error-reporting-java/blob/main/LICENSE -[24]: https://github.com/mockito/mockito -[25]: https://opensource.org/licenses/MIT -[26]: https://junit.org/junit5/ -[27]: https://www.eclipse.org/legal/epl-v20.html -[28]: http://hamcrest.org/JavaHamcrest/ -[29]: http://opensource.org/licenses/BSD-3-Clause -[30]: https://java.testcontainers.org -[31]: http://opensource.org/licenses/MIT -[32]: http://aws.amazon.com/asl/ -[33]: https://github.com/amazon-ion/ion-java/ -[34]: https://github.com/exasol/exasol-testcontainers/ -[35]: https://github.com/exasol/exasol-testcontainers/blob/main/LICENSE -[36]: https://github.com/exasol/test-db-builder-java/ -[37]: https://github.com/exasol/test-db-builder-java/blob/main/LICENSE -[38]: https://github.com/exasol/java-util-logging-testing/ -[39]: https://github.com/exasol/hamcrest-resultset-matcher/ -[40]: https://github.com/exasol/hamcrest-resultset-matcher/blob/main/LICENSE -[41]: https://www.jqno.nl/equalsverifier -[42]: https://logging.apache.org/log4j/2.x/log4j/log4j-api/ -[43]: https://logging.apache.org/log4j/2.x/log4j/log4j-core/ -[44]: http://sonarsource.github.io/sonar-scanner-maven/ -[45]: http://www.gnu.org/licenses/lgpl.txt -[46]: https://maven.apache.org/plugins/maven-toolchains-plugin/ -[47]: https://maven.apache.org/plugins/maven-compiler-plugin/ -[48]: https://maven.apache.org/enforcer/maven-enforcer-plugin/ -[49]: https://www.mojohaus.org/flatten-maven-plugin/ -[50]: https://maven.apache.org/plugins/maven-shade-plugin/ -[51]: https://github.com/itsallcode/openfasttrace-maven-plugin -[52]: https://www.gnu.org/licenses/gpl-3.0.html -[53]: https://sonatype.github.io/ossindex-maven/maven-plugin/ -[54]: https://maven.apache.org/surefire/maven-surefire-plugin/ -[55]: https://www.mojohaus.org/versions/versions-maven-plugin/ -[56]: https://basepom.github.io/duplicate-finder-maven-plugin -[57]: https://github.com/exasol/project-keeper/ -[58]: https://github.com/exasol/project-keeper/blob/main/LICENSE -[59]: https://maven.apache.org/plugins/maven-assembly-plugin/ -[60]: https://maven.apache.org/plugins/maven-jar-plugin/ -[61]: https://github.com/exasol/artifact-reference-checker-maven-plugin/ -[62]: https://github.com/exasol/artifact-reference-checker-maven-plugin/blob/main/LICENSE -[63]: https://maven.apache.org/surefire/maven-failsafe-plugin/ -[64]: https://www.jacoco.org/jacoco/trunk/doc/maven.html -[65]: https://www.eclipse.org/legal/epl-2.0/ -[66]: https://github.com/exasol/error-code-crawler-maven-plugin/ -[67]: https://github.com/exasol/error-code-crawler-maven-plugin/blob/main/LICENSE -[68]: http://zlika.github.io/reproducible-build-maven-plugin +[9]: https://github.com/airlift/aircompressor +[10]: https://bitbucket.org/connect2id/nimbus-jose-jwt +[11]: http://janino-compiler.github.io/janino/ +[12]: https://spdx.org/licenses/BSD-3-Clause.html +[13]: http://janino-compiler.github.io/commons-compiler/ +[14]: https://github.com/paul-hammant/paranamer/paranamer +[15]: LICENSE.txt +[16]: https://github.com/google/guava +[17]: http://www.apache.org/licenses/LICENSE-2.0.txt +[18]: https://github.com/FasterXML/jackson +[19]: https://aws.amazon.com/sdkforjava +[20]: https://aws.amazon.com/apache2.0 +[21]: http://www.exasol.com/ +[22]: https://repo1.maven.org/maven2/com/exasol/exasol-jdbc/24.1.0/exasol-jdbc-24.1.0-license.txt +[23]: https://github.com/exasol/sql-statement-builder/ +[24]: https://github.com/exasol/sql-statement-builder/blob/main/LICENSE +[25]: https://github.com/exasol/spark-connector-common-java/ +[26]: https://github.com/exasol/spark-connector-common-java/blob/main/LICENSE +[27]: https://github.com/exasol/error-reporting-java/ +[28]: https://github.com/exasol/error-reporting-java/blob/main/LICENSE +[29]: https://github.com/mockito/mockito +[30]: https://opensource.org/licenses/MIT +[31]: https://junit.org/junit5/ +[32]: https://www.eclipse.org/legal/epl-v20.html +[33]: http://hamcrest.org/JavaHamcrest/ +[34]: http://opensource.org/licenses/BSD-3-Clause +[35]: https://java.testcontainers.org +[36]: http://opensource.org/licenses/MIT +[37]: http://aws.amazon.com/asl/ +[38]: https://github.com/amazon-ion/ion-java/ +[39]: https://github.com/exasol/exasol-testcontainers/ +[40]: https://github.com/exasol/exasol-testcontainers/blob/main/LICENSE +[41]: https://github.com/exasol/test-db-builder-java/ +[42]: https://github.com/exasol/test-db-builder-java/blob/main/LICENSE +[43]: https://github.com/exasol/java-util-logging-testing/ +[44]: https://github.com/exasol/hamcrest-resultset-matcher/ +[45]: https://github.com/exasol/hamcrest-resultset-matcher/blob/main/LICENSE +[46]: https://www.jqno.nl/equalsverifier +[47]: https://logging.apache.org/log4j/2.x/log4j/log4j-api/ +[48]: https://logging.apache.org/log4j/2.x/log4j/log4j-core/ +[49]: http://sonarsource.github.io/sonar-scanner-maven/ +[50]: http://www.gnu.org/licenses/lgpl.txt +[51]: https://maven.apache.org/plugins/maven-toolchains-plugin/ +[52]: https://maven.apache.org/plugins/maven-compiler-plugin/ +[53]: https://maven.apache.org/enforcer/maven-enforcer-plugin/ +[54]: https://www.mojohaus.org/flatten-maven-plugin/ +[55]: https://maven.apache.org/plugins/maven-shade-plugin/ +[56]: https://github.com/itsallcode/openfasttrace-maven-plugin +[57]: https://www.gnu.org/licenses/gpl-3.0.html +[58]: https://sonatype.github.io/ossindex-maven/maven-plugin/ +[59]: https://maven.apache.org/surefire/maven-surefire-plugin/ +[60]: https://www.mojohaus.org/versions/versions-maven-plugin/ +[61]: https://basepom.github.io/duplicate-finder-maven-plugin +[62]: https://github.com/exasol/project-keeper/ +[63]: https://github.com/exasol/project-keeper/blob/main/LICENSE +[64]: https://maven.apache.org/plugins/maven-assembly-plugin/ +[65]: https://maven.apache.org/plugins/maven-jar-plugin/ +[66]: https://github.com/exasol/artifact-reference-checker-maven-plugin/ +[67]: https://github.com/exasol/artifact-reference-checker-maven-plugin/blob/main/LICENSE +[68]: https://maven.apache.org/surefire/maven-failsafe-plugin/ +[69]: https://www.jacoco.org/jacoco/trunk/doc/maven.html +[70]: https://www.eclipse.org/legal/epl-2.0/ +[71]: https://github.com/exasol/error-code-crawler-maven-plugin/ +[72]: https://github.com/exasol/error-code-crawler-maven-plugin/blob/main/LICENSE +[73]: http://zlika.github.io/reproducible-build-maven-plugin diff --git a/doc/changes/changelog.md b/doc/changes/changelog.md index 6a4cb81..74db648 100644 --- a/doc/changes/changelog.md +++ b/doc/changes/changelog.md @@ -1,5 +1,6 @@ # Changes +* [2.1.6](changes_2.1.6.md) * [2.1.5](changes_2.1.5.md) * [2.1.4](changes_2.1.4.md) * [2.1.3](changes_2.1.3.md) diff --git a/doc/changes/changes_2.1.6.md b/doc/changes/changes_2.1.6.md new file mode 100644 index 0000000..871ce79 --- /dev/null +++ b/doc/changes/changes_2.1.6.md @@ -0,0 +1,29 @@ +# Exasol AWS Glue Connector 2.1.6, released 2024-06-03 + +Code name: CVEs fixes + +## Summary +Fixed CVE-2024-36114 in io.airlift:aircompressor (dependency of spark-sql). +Fixed CVE-2023-33546 in org.codehaus.janino:janino:jar:3.1.9 (previously excluded). +Fixed CVE-2023-52428 in com.nimbusds:nimbus-jose-jwt:jar:9.8.1 (previously excluded). +Bunch of CVEs in org.bouncycastle:bcprov-jdk15on were excluded. + +## Features + +* #106: CVE-2024-36114: io.airlift:aircompressor:jar:0.25:provided +* #100: CVE-2023-33201: org.bouncycastle:bcprov-jdk15on:jar:1.70:provided +* #101: CVE-2023-33202: org.bouncycastle:bcprov-jdk15on:jar:1.70:provided +* #102: CVE-2024-29857: org.bouncycastle:bcprov-jdk15on:jar:1.70:provided +* #103: CVE-2024-30171: org.bouncycastle:bcprov-jdk15on:jar:1.70:provided +* #104: CVE-2024-34447: org.bouncycastle:bcprov-jdk15on:jar:1.70:provided + +## Dependency Updates + +### Plugin Dependency Updates + +* Updated `com.exasol:error-code-crawler-maven-plugin:2.0.2` to `2.0.3` +* Updated `com.exasol:project-keeper-maven-plugin:4.3.0` to `4.3.2` +* Updated `org.apache.maven.plugins:maven-enforcer-plugin:3.4.1` to `3.5.0` +* Updated `org.apache.maven.plugins:maven-jar-plugin:3.3.0` to `3.4.1` +* Updated `org.apache.maven.plugins:maven-toolchains-plugin:3.1.0` to `3.2.0` +* Updated `org.sonarsource.scanner.maven:sonar-maven-plugin:3.11.0.3922` to `4.0.0.4121` diff --git a/doc/developers_guide/developers_guide.md b/doc/developers_guide/developers_guide.md index 3264493..802fd0c 100644 --- a/doc/developers_guide/developers_guide.md +++ b/doc/developers_guide/developers_guide.md @@ -40,11 +40,11 @@ To test connector by creating a custom connector, please follow these steps. ### Creating an Assembly Jar -By running `mvn verify` or `mvn package` create a connector artifact. For example, `target/exasol-glue-connector-2.1.5-assembly.jar`. +By running `mvn verify` or `mvn package` create a connector artifact. For example, `target/exasol-glue-connector-2.1.6-assembly.jar`. ### Uploading the Artifact to S3 Bucket -Upload the JAR artifact from previous step into an S3 bucket. For instance, `s3://exasol-artifacts/glue-connector/exasol-glue-connector-2.1.5-assembly.jar`. +Upload the JAR artifact from previous step into an S3 bucket. For instance, `s3://exasol-artifacts/glue-connector/exasol-glue-connector-2.1.6-assembly.jar`. ### Creating a Glue Studio Custom Connector diff --git a/pk_generated_parent.pom b/pk_generated_parent.pom index 935668b..0da0804 100644 --- a/pk_generated_parent.pom +++ b/pk_generated_parent.pom @@ -3,7 +3,7 @@ 4.0.0 com.exasol glue-connector-generated-parent - 2.1.5 + 2.1.6 pom UTF-8 @@ -39,12 +39,12 @@ org.sonarsource.scanner.maven sonar-maven-plugin - 3.11.0.3922 + 4.0.0.4121 org.apache.maven.plugins maven-toolchains-plugin - 3.1.0 + 3.2.0 @@ -77,7 +77,7 @@ org.apache.maven.plugins maven-enforcer-plugin - 3.4.1 + 3.5.0 enforce-maven @@ -230,7 +230,7 @@ org.apache.maven.plugins maven-jar-plugin - 3.3.0 + 3.4.1 default-jar @@ -315,7 +315,7 @@ com.exasol error-code-crawler-maven-plugin - 2.0.2 + 2.0.3 verify diff --git a/pom.xml b/pom.xml index 223a821..c57770c 100644 --- a/pom.xml +++ b/pom.xml @@ -3,14 +3,14 @@ 4.0.0 com.exasol glue-connector - 2.1.5 + 2.1.6 Exasol AWS Glue Connector An AWS Glue connector for accessing Exasol database https://github.com/exasol/glue-connector/ glue-connector-generated-parent com.exasol - 2.1.5 + 2.1.6 pk_generated_parent.pom @@ -103,6 +103,10 @@ org.slf4j jcl-over-slf4j + + io.airlift + aircompressor + + io.airlift + aircompressor + 0.27 + provided + + + + com.nimbusds + nimbus-jose-jwt + 9.39.3 + provided + + + org.codehaus.janino + janino + 3.1.12 + provided + + + org.codehaus.janino + commons-compiler + 3.1.12 + provided + org.apache.hadoop hadoop-aws @@ -374,10 +416,6 @@ org.bouncycastle bcprov-ext-jdk15on - - org.bouncycastle - bcprov-jdk15on - org.codehaus.jackson * @@ -498,7 +536,7 @@ com.exasol project-keeper-maven-plugin - 4.3.0 + 4.3.2 @@ -639,22 +677,6 @@ ${ossindex.skip} - - CVE-2023-33546 - - CVE-2023-52428 - CVE-2023-33201 @@ -662,6 +684,11 @@ CVE-2024-29857 CVE-2024-30171 CVE-2024-30172 + CVE-2023-33201 + CVE-2023-33202 + CVE-2024-29857 + CVE-2024-30171 + CVE-2024-34447 diff --git a/release_config.yml b/release_config.yml deleted file mode 100644 index 45f75e8..0000000 --- a/release_config.yml +++ /dev/null @@ -1,3 +0,0 @@ -release-platforms: - - GitHub -language: Java