Releases: sbabcoc/Settings
Add commons-beanutils as a runtime dependency
In this release, I switched commons-beanutils
from a test dependency to a runtime dependency. It appears that this dependency should be brought in transitively by commons-configuration2
, but this isn't happening.
Add commons-text as direct dependency to propagate downstream
In this release, I added commons-text
as a direct dependency so that the managed version propagates to projects that use this library. Now that commons-text
is a direct dependency, I no longer need to manage the version of commons-lang3
.
Manage commons-text to 1.10.0; remove SnakeYAML mgmt
In this release, I added dependency management for commons-text
to resolve a vulnerability in this transitive dependency. I also removed the dependency management for SnakeYAML
, which is no longer in scope.
Upgrade Java-Utils to version 3.1.1
This release just contains a dependency bump, upgrading Java-Utils to the latest release (3.1.1)
Bump commons-configuration2 from 2.7 to 2.8.0
This upgrade resolves an arbitrary code execution vulnerability: https://nvd.nist.gov/vuln/detail/CVE-2022-33980
Build for Java 8; upgrade dependencies and plugins
In this release, I finally dropped support for Java 7. By building this library for Java 8, I'm able to upgrade dependencies to newer versions that resolve identified vulnerabilities.
Upgrade logback-core from 1.2.3 to 1.2.9; reduce worry factor of log messages
There was a vulnerability in logback-core
1.2.3 that has been resolved in version 1.2.9. I took the opportunity to resolve a longstanding issue with unnecessarily worrisome warnings, replacing them with more neutral debug messages.
Upgrade Java-Utils to version 2.1.0
In this release, I upgraded Java-Utils to the latest release (version 2.1.0)
Upgrade to the latest release of Java-Utils
In this release, I upgraded to the latest release of Java-Utils (version 2.0.3).
Upgrade dependencies and plugins
This release contains no functional changes but is instead focused on project housekeeping.