search

SharonKoch / skf-labs

Repo for all the OWASP-SKF Docker lab examples
Apache License 2.0
0 stars 1 forks source link

Update dependency com.graphql-java-kickstart:graphql-spring-boot-starter to v14 - autoclosed #89

Closed mend-for-github-com[bot] closed 7 months ago

mend-for-github-com[bot] commented 11 months ago

This PR contains the following updates:

Package Type Update Change
com.graphql-java-kickstart:graphql-spring-boot-starter compile major 12.0.0 -> 14.1.0

By merging this PR, the issue #49 will be automatically resolved and closed:

Severity CVSS Score CVE
Critical Critical 9.8 CVE-2022-42889
High High 7.1 CVE-2023-2976
Medium Medium 5.9 CVE-2018-10237
Low Low 3.3 CVE-2020-8908

By merging this PR, the issue #49 will be automatically resolved and closed:

Severity CVSS Score CVE
High High 7.5 CVE-2022-37734
High High 7.5 CVE-2023-28867

Release Notes

graphql-java-kickstart/graphql-spring-boot (com.graphql-java-kickstart:graphql-spring-boot-starter) ### [`v14.1.0`](https://togithub.com/graphql-java-kickstart/graphql-spring-boot/releases/tag/v14.1.0): 14.1.0 [Compare Source](https://togithub.com/graphql-java-kickstart/graphql-spring-boot/compare/v14.0.0...v14.1.0) ##### ⭐ New features - Made possible to use newer versions of altair over cdn [#​874](https://togithub.com/graphql-java-kickstart/graphql-spring-boot/issues/874) ##### 📦 Dependencies - update org.sonarqube to v3.5.0.2730 - update graphql-java to v19.2 - update graphql-java-extended-scalars to v19.1 - update spring-boot to v2.7.5 - update graphql-java-tools to v13.0.2 - update commons-text to v1.10.0 - update jsoup to v1.15.3 ### [`v14.0.0`](https://togithub.com/graphql-java-kickstart/graphql-spring-boot/releases/tag/v14.0.0): 14.0.0 [Compare Source](https://togithub.com/graphql-java-kickstart/graphql-spring-boot/compare/v13.0.1...v14.0.0) If you're using Spring Boot to manage versions of dependencies then it could be that it's pulling in version 18.3 of `graphql-java` instead of version 19.1. To override this version you should add the following in your Gradle build file: ext["graphql-java.version"] = 19.1 ### Breaking changes - removed deprecated `asyncModeEnabled` and `asyncTimeout` properties ### 📦 Dependencies - upgrade graphql-java to v19.1 - upgrade graphql-java-servlet to v14.0.0 - upgrade graphql-java-tools to v13.0.0 ### [`v13.0.1`](https://togithub.com/graphql-java-kickstart/graphql-spring-boot/releases/tag/v13.0.1): 13.0.1 [Compare Source](https://togithub.com/graphql-java-kickstart/graphql-spring-boot/compare/v13.0.0...v13.0.1) #### Bugfixes - For non-async servlet wait until GraphQL async operation finished [https://github.com/graphql-java-kickstart/graphql-java-servlet/pull/470](https://togithub.com/graphql-java-kickstart/graphql-java-servlet/pull/470) ### [`v13.0.0`](https://togithub.com/graphql-java-kickstart/graphql-spring-boot/releases/tag/v13.0.0): 13.0.0 [Compare Source](https://togithub.com/graphql-java-kickstart/graphql-spring-boot/compare/v12.0.0...v13.0.0) #### Bug fixes - disable async timeout by default [#​778](https://togithub.com/graphql-java-kickstart/graphql-spring-boot/issues/778) - graphiql config headers do not work in new release 12.0.0 [#​726](https://togithub.com/graphql-java-kickstart/graphql-spring-boot/issues/726) - CorsEnabled=false not working for Spring-Boot-Service-Configs [#​682](https://togithub.com/graphql-java-kickstart/graphql-spring-boot/issues/682) - memory leak due to ReactiveApolloSubscriptionSession not closing [#​740](https://togithub.com/graphql-java-kickstart/graphql-spring-boot/issues/740) - Cannot access AsyncServletProperties.Threads fields because it is a package private class [#​748](https://togithub.com/graphql-java-kickstart/graphql-spring-boot/issues/748) - Graphiql static resource loading fix [#​794](https://togithub.com/graphql-java-kickstart/graphql-spring-boot/issues/794) - quote regex input string [#​824](https://togithub.com/graphql-java-kickstart/graphql-spring-boot/issues/824) #### Features - aliased scalars [#​659](https://togithub.com/graphql-java-kickstart/graphql-spring-boot/issues/659) - Function for GraphQLTestTemplate to upload files using Upload scalar [#​712](https://togithub.com/graphql-java-kickstart/graphql-spring-boot/issues/712) - added ability to use strings for GraphQl queries when using GraphQLTestTemplate [#​807](https://togithub.com/graphql-java-kickstart/graphql-spring-boot/issues/807) #### Dependencies - update dependency com.graphql-java:graphql-java to v18.3 [#​846](https://togithub.com/graphql-java-kickstart/graphql-spring-boot/issues/846) - update lib_graphql_servlet_ver to v13.0.0 [#​848](https://togithub.com/graphql-java-kickstart/graphql-spring-boot/issues/848) - update dependency com.graphql-java-kickstart:graphql-java-tools to v12.1.0 [#​825](https://togithub.com/graphql-java-kickstart/graphql-spring-boot/issues/825) - update spring boot to v2.7.2 [#​845](https://togithub.com/graphql-java-kickstart/graphql-spring-boot/issues/845) - update Reflections to 0.10.2 [#​772](https://togithub.com/graphql-java-kickstart/graphql-spring-boot/issues/772)