fix(sec): upgrade com.google.guava:guava to 30.0-jre - Githubissues

hekailiang / squirrel

squirrel-foundation is a State Machine library, which provided a lightweight, easy use, type safe and programmable state machine implementation for Java.

http://hekailiang.github.io/squirrel/

Other

2.19k stars 540 forks source link

fix(sec): upgrade com.google.guava:guava to 30.0-jre #139

Open bitmasks opened 2 years ago

bitmasks commented 2 years ago

What happened？

There are 1 security vulnerabilities found in com.google.guava:guava 29.0-jre

CVE-2020-8908

What did I do？

Upgrade com.google.guava:guava from 29.0-jre to 30.0-jre for vulnerability fix

What did you expect to happen？

Ideally, no insecure libs should be used.

How was this patch tested?

Run mvn compile failed locally, couldn't complete the build process. Run mvn clean test failed locally, unit-test couldn't pass.

The specification of the pull request

PR Specification from OSCS