Changeset 18587 in josm for trunk/ivy.xml

Timestamp:

2022-11-07T23:50:24+01:00 (4 years ago)

Author:

taylor.smock

Message:

Dependency updates

ivy: 2.5.0 -> 2.5.1:

• Fixes CVE-2022-37856 and CVE-2022-37866 which could lead to creation or replacement of arbitrary files
• Full changelog: ​https://ant.apache.org/ivy/history/2.5.1/release-notes.html

ivy.xml:

• Apache commons-compress: 1.21 -> 1.22
  • Fixed various issues found by fuzzing and static analysis in pack200
• svgSalamander: 1.1.3 -> 1.1.4
  • Various text drawing bug fixes leading to a decrease in logging messages
  • Full changelog: ​https://github.com/blackears/svgSalamander/releases/tag/v1.1.4
• wiremock-jre8: 2.34.0 -> 2.35.0
  • Add API method for remove stubs by ID
  • Add ability to restrict addresses WireMock can proxy/record to
  • Full changelog: ​https://github.com/wiremock/wiremock/releases/tag/2.35.0

tools/ivy.xml:

• pmd: 6.50.0 -> 6.51.0
  • Detect more empty test classes, uses regexes looking for Test in class names
  • Full changelog: ​https://pmd.sourceforge.io/pmd-6.51.0/pmd_release_notes.html
• spotbugs: 4.7.2 -> 4.7.3
  • Improved compatibility with Java 13+, supports JDK 20
  • Various false positive fixes
  • Full changelog: ​https://github.com/spotbugs/spotbugs/releases/tag/4.7.3

File:

• trunk/ivy.xml (modified) (4 diffs)

trunk/ivy.xml

@@ -25 +25 @@
         <dependency conf="api->default" org="org.glassfish" name="javax.json" rev="1.1.4"/>
         <dependency conf="api->default" org="org.apache.commons" name="commons-jcs3-core" rev="3.1"/>
-        <dependency conf="api->default" org="org.apache.commons" name="commons-compress" rev="1.21"/>
+        <dependency conf="api->default" org="org.apache.commons" name="commons-compress" rev="1.22"/>
         <dependency conf="api->default" org="com.google.code.findbugs" name="jsr305" rev="3.0.2"/>
         <dependency conf="api->default" org="org.tukaani" name="xz" rev="1.9"/>
         <dependency conf="api->default" org="com.adobe.xmp" name="xmpcore" rev="6.1.11"/>
         <dependency conf="api->default" org="com.drewnoakes" name="metadata-extractor" rev="2.18.0" transitive="false"/>
-        <dependency conf="api->default" org="com.formdev" name="svgSalamander" rev="1.1.3"/>
+        <dependency conf="api->default" org="com.formdev" name="svgSalamander" rev="1.1.4"/>
         <dependency conf="api->default" org="ch.poole" name="OpeningHoursParser" rev="0.27.0"/>
         <dependency conf="api->default" org="oauth.signpost" name="signpost-core" rev="2.1.1"/>
@@ -39 +39 @@
         <dependency conf="sources->sources" org="org.glassfish" name="javax.json" rev="1.1.4"/>
         <dependency conf="sources->sources" org="org.apache.commons" name="commons-jcs3-core" rev="3.1"/>
-        <dependency conf="sources->sources" org="org.apache.commons" name="commons-compress" rev="1.21"/>
+        <dependency conf="sources->sources" org="org.apache.commons" name="commons-compress" rev="1.22"/>
         <dependency conf="sources->sources" org="com.google.code.findbugs" name="jsr305" rev="3.0.2"/>
         <dependency conf="sources->sources" org="org.tukaani" name="xz" rev="1.9"/>
         <dependency conf="sources->sources" org="com.adobe.xmp" name="xmpcore" rev="6.1.11"/>
         <dependency conf="sources->sources" org="com.drewnoakes" name="metadata-extractor" rev="2.18.0" transitive="false"/>
-        <dependency conf="sources->sources" org="com.formdev" name="svgSalamander" rev="1.1.3"/>
+        <dependency conf="sources->sources" org="com.formdev" name="svgSalamander" rev="1.1.4"/>
         <dependency conf="sources->sources" org="ch.poole" name="OpeningHoursParser" rev="0.27.0"/>
         <dependency conf="sources->sources" org="oauth.signpost" name="signpost-core" rev="2.1.1"/>
@@ -56 +56 @@
         <dependency conf="jmockit->default" org="org.jmockit" name="jmockit" rev="1.49.a"/>
         <!-- test->default -->
-        <dependency conf="test->default" org="com.github.spotbugs" name="spotbugs-annotations" rev="4.7.2"/>
+        <dependency conf="test->default" org="com.github.spotbugs" name="spotbugs-annotations" rev="4.7.3"/>
         <dependency conf="test->default" org="com.ginsberg" name="junit5-system-exit" rev="1.1.2"/>
-        <dependency conf="test->default" org="com.github.tomakehurst" name="wiremock-jre8" rev="2.34.0"/>
+        <dependency conf="test->default" org="com.github.tomakehurst" name="wiremock-jre8" rev="2.35.0"/>
         <dependency conf="test->default" org="io.github.classgraph" name="classgraph" rev="4.8.149"/>
         <dependency conf="test->default" org="org.junit.platform" name="junit-platform-launcher" rev="1.9.1"/>
@@ -67 +67 @@
         <dependency conf="test->default" org="org.junit.jupiter" name="junit-jupiter-migrationsupport" rev="5.9.1"/>
         <dependency conf="test->default" org="net.trajano.commons" name="commons-testing" rev="2.1.0"/>
-        <dependency conf="test->default" org="nl.jqno.equalsverifier" name="equalsverifier" rev="3.10.1"/>
+        <dependency conf="test->default" org="nl.jqno.equalsverifier" name="equalsverifier" rev="3.11"/>
         <dependency conf="test->default" org="org.apache.commons" name="commons-lang3" rev="3.12.0"/>
         <dependency conf="test->default" org="org.awaitility" name="awaitility" rev="4.2.0"/>