Bump dependencies to fix vulnerabilities

Walkyst / lavaplayer-fork

Apache License 2.0

173 stars 68 forks source link

Bump dependencies to fix vulnerabilities #128

Closed GiftShower closed 8 months ago

GiftShower commented 8 months ago

Bump dependencies to fix CVEs.

httpclient4 was not upgraded due to httpclient5 not being a drop-in replacement.
groovy was moved to apache.groovy

Build was successful. Maybe I'll try httpclient5 later, but I first changed dependencies without problems when building. Some packages might be old since some packages were updated to minimum version without CVE, in case of incompatibility. If required I'll check them and make commits.

GiftShower commented 8 months ago

Looks like this repository is unmaintained. I'll close it for now, but it can be reopen when needed.