search

inkytonik / kiama

A Scala library for language processing.
Mozilla Public License 2.0
47 stars 15 forks source link

bump guava version from 30.1.1-jre to 32.1.1-jre #33

Closed datYori closed 1 year ago

datYori commented 1 year ago

Sine guava 30.1.1-jre is problematic CVE-2023-2976 we bump it to 32.1.1-jre

inkytonik commented 1 year ago

Thanks for the bump. All looks good.

datYori commented 1 year ago

Thanks for the quick response though. Can we have a new tag and release to maven central from this commit then ? Like v2.5.1 for example ?

datYori commented 1 year ago

or maybe feel free to merge this first https://github.com/inkytonik/kiama/pull/34 and then bundle both deps update in the same v2.5.1 release

inkytonik commented 1 year ago

Thanks. I've applied #34. I'll get a new release out fairly soon.