Closed dependabot[bot] closed 9 months ago
:heavy_check_mark: This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version
or @dependabot ignore this minor version
.
If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
Bumps org.eclipse.jetty:jetty-webapp from 9.4.31.v20200723 to 9.4.33.v20201020.
Release notes
Sourced from org.eclipse.jetty:jetty-webapp's releases.
... (truncated)
Commits
1be6875
Updating to version 9.4.33.v20201020f4c55c6
Merge pull request #5481 from eclipse/jetty-9.4.x-5480-npe-webinfconfigurationfa6c8f7
Issue #5480 - Only delete non-persist temp dir if not-emptyc7ae5b5
Issue #5480 - Safer temp directory management6be6fae
Issue #5480 - NPE Check in WebInfConfiguration.deconfigure()227dd47
Issue #5480 - Fail in jetty-maven-plugin if unable to create temp directory.0e98c37
Issue #5480 - NPE protection on IO.delete(File)4ecaf30
Merge pull request #5479 from eclipse/jetty-9.4.x-5475-ScanForAsmVersion7155066
Issue #5475 - Adding debug log output for asmVersion detecta3e3632
Issue #5475 - Changing ASM API version lookup to use Reflection against ASM O...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show