luhsra / MinimaxSimulator

Platform independent GUI-based Minimax simulator
https://luhsra.github.io/MinimaxSimulator/
MIT License
7 stars 5 forks source link

Bump guava from 26.0-jre to 30.0-jre #61

Closed AiyionPrime closed 2 years ago

AiyionPrime commented 3 years ago

GitHub will have notified you earlier, guava 26 has a security vulnerability.

The dependabot sucks though, and recommends to bump to the still vulnerable version 29.0-jre. Please merge this instead of #60.

patched versions: 30.0-jre

https://github.com/advisories/GHSA-5mg8-w23w-74h3

AiyionPrime commented 3 years ago

@dkiechle: This change does need a new release as soon as possible.

AiyionPrime commented 2 years ago

Not sure who is currently working at the SRA, but I think @opusz might know who moderates this codebase nowadays.