Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump guava from 30.1.1-jre to 32.1.2-jre #149

Merged
merged 1 commit into from
Oct 6, 2023
Merged

Bump guava from 30.1.1-jre to 32.1.2-jre #149

merged 1 commit into from
Oct 6, 2023

Commits on Oct 6, 2023

  1. Bump guava from 30.1.1-jre to 32.1.2-jre 

    This fixes insecure permissions of files created in the temporary
directory: https://nvd.nist.gov/vuln/detail/CVE-2023-2976

Version 32 is binary compatible with version 30 because only the
GWT jar has breaking changes:
google/guava#2575 (comment)

I run CI for these repositories and found no regressions:

* vertx-config: https://github.com/julianladisch/vertx-config/actions/runs/6289869333
* vertx-grpc: https://github.com/julianladisch/vertx-grpc/actions/runs/6289478128
* vertx-zookeeper: https://github.com/julianladisch/vertx-zookeeper/actions/workflows/ci-5.x.yml

The failures in vertx-zookeeper are not regressions because they
exist with 30.1.1-jre.

I found no other Vert.x repository that uses Guava and hasn't
been removed for Vert.x 5.

Obsoletes #118
    @julianladisch @vietj
    julianladisch authored and vietj committed Oct 6, 2023
    Configuration menu
    Copy the full SHA
    7e9c4c6 View commit details
    Browse the repository at this point in the history