search

opensearch-project / sql-jdbc

This is the driver for JDBC connectivity to a cluster running with OpenSearch SQL support.
Apache License 2.0
14 stars 25 forks source link

Update dependency net.minidev:json-smart to v2.4.9 #70

Closed mend-for-github-com[bot] closed 1 year ago

mend-for-github-com[bot] commented 1 year ago

This PR contains the following updates:

Package Type Update Change
net.minidev:json-smart (source) dependencies patch 2.4.8 -> 2.4.9

By merging this PR, the issue #69 will be automatically resolved and closed:

Severity CVSS Score CVE
High High 7.5 CVE-2023-1370

Release Notes

netplex/json-smart-v2 ### [`v2.4.9`](https://togithub.com/netplex/json-smart-v2/releases/tag/2.4.9): V 2.4.9 [Compare Source](https://togithub.com/netplex/json-smart-v2/compare/2.4.8...2.4.9) ##### *V 2.4.9* (2023-03-07) - Add depth limit of 400 when parsing JSON. #### What's Changed - allow config init size of jsonarray and jsonobject by [@​Shoothzj](https://togithub.com/Shoothzj) in [https://github.com/netplex/json-smart-v2/pull/81](https://togithub.com/netplex/json-smart-v2/pull/81) - update asm junit5 version by [@​Shoothzj](https://togithub.com/Shoothzj) in [https://github.com/netplex/json-smart-v2/pull/82](https://togithub.com/netplex/json-smart-v2/pull/82) - enable github workflow by [@​Shoothzj](https://togithub.com/Shoothzj) in [https://github.com/netplex/json-smart-v2/pull/83](https://togithub.com/netplex/json-smart-v2/pull/83) - Bump maven-compiler-plugin from 3.8.1 to 3.10.1 in /json-smart-action by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/90](https://togithub.com/netplex/json-smart-v2/pull/90) - Bump maven-javadoc-plugin from 3.2.0 to 3.4.0 in /json-smart by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/85](https://togithub.com/netplex/json-smart-v2/pull/85) - Bump maven-javadoc-plugin from 3.2.0 to 3.4.0 in /json-smart-action by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/86](https://togithub.com/netplex/json-smart-v2/pull/86) - Bump maven-jar-plugin from 3.2.0 to 3.2.2 in /json-smart by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/89](https://togithub.com/netplex/json-smart-v2/pull/89) - Bump maven-jar-plugin from 3.2.0 to 3.2.2 in /json-smart-action by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/88](https://togithub.com/netplex/json-smart-v2/pull/88) - Bump maven-release-plugin from 3.0.0-M1 to 3.0.0-M5 in /json-smart-action by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/91](https://togithub.com/netplex/json-smart-v2/pull/91) - Bump maven-release-plugin from 3.0.0-M1 to 3.0.0-M5 in /json-smart by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/93](https://togithub.com/netplex/json-smart-v2/pull/93) - Bump json-smart from 2.4.6 to 2.4.8 in /json-smart-action by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/96](https://togithub.com/netplex/json-smart-v2/pull/96) - Bump maven-compiler-plugin from 3.8.1 to 3.10.1 in /json-smart by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/94](https://togithub.com/netplex/json-smart-v2/pull/94) - Bump maven-bundle-plugin from 5.1.2 to 5.1.6 in /json-smart by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/97](https://togithub.com/netplex/json-smart-v2/pull/97) - Bump maven-bundle-plugin from 5.1.2 to 5.1.6 in /json-smart-action by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/98](https://togithub.com/netplex/json-smart-v2/pull/98) - Bump maven-release-plugin from 3.0.0-M5 to 3.0.0-M6 in /json-smart by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/99](https://togithub.com/netplex/json-smart-v2/pull/99) - Bump maven-release-plugin from 3.0.0-M5 to 3.0.0-M6 in /json-smart-action by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/100](https://togithub.com/netplex/json-smart-v2/pull/100) - Bump maven-bundle-plugin from 5.1.6 to 5.1.7 in /json-smart-action by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/103](https://togithub.com/netplex/json-smart-v2/pull/103) - Bump maven-bundle-plugin from 5.1.6 to 5.1.7 in /json-smart by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/102](https://togithub.com/netplex/json-smart-v2/pull/102) - Bump maven-resources-plugin from 3.2.0 to 3.3.0 in /json-smart-action by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/104](https://togithub.com/netplex/json-smart-v2/pull/104) - Bump maven-resources-plugin from 3.2.0 to 3.3.0 in /json-smart by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/105](https://togithub.com/netplex/json-smart-v2/pull/105) - Bump maven-bundle-plugin from 5.1.7 to 5.1.8 in /json-smart-action by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/110](https://togithub.com/netplex/json-smart-v2/pull/110) - Bump maven-bundle-plugin from 5.1.7 to 5.1.8 in /json-smart by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/111](https://togithub.com/netplex/json-smart-v2/pull/111) - Bump maven-jar-plugin from 3.2.2 to 3.3.0 in /json-smart by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/119](https://togithub.com/netplex/json-smart-v2/pull/119) - Bump maven-jar-plugin from 3.2.2 to 3.3.0 in /json-smart-action by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/118](https://togithub.com/netplex/json-smart-v2/pull/118) - Bump maven-javadoc-plugin from 3.4.0 to 3.4.1 in /json-smart by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/117](https://togithub.com/netplex/json-smart-v2/pull/117) - Bump maven-javadoc-plugin from 3.4.0 to 3.4.1 in /json-smart-action by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/116](https://togithub.com/netplex/json-smart-v2/pull/116) - Bump junit-jupiter-api from 5.8.2 to 5.9.1 in /json-smart-action by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/114](https://togithub.com/netplex/json-smart-v2/pull/114) - Bump junit-jupiter-api from 5.8.2 to 5.9.1 in /json-smart by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/113](https://togithub.com/netplex/json-smart-v2/pull/113) - Bump junit version from 5.8.2 to 5.9.1 by [@​Shoothzj](https://togithub.com/Shoothzj) in [https://github.com/netplex/json-smart-v2/pull/120](https://togithub.com/netplex/json-smart-v2/pull/120) - configure Reproducible Builds by [@​hboutemy](https://togithub.com/hboutemy) in [https://github.com/netplex/json-smart-v2/pull/101](https://togithub.com/netplex/json-smart-v2/pull/101) - Bump maven-release-plugin from 3.0.0-M6 to 3.0.0-M7 in /json-smart-action by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/122](https://togithub.com/netplex/json-smart-v2/pull/122) - add copyright to pom.xml by [@​tobi5775](https://togithub.com/tobi5775) in [https://github.com/netplex/json-smart-v2/pull/125](https://togithub.com/netplex/json-smart-v2/pull/125) - Bump maven-javadoc-plugin from 3.4.1 to 3.5.0 in /json-smart by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/126](https://togithub.com/netplex/json-smart-v2/pull/126) - Bump maven-javadoc-plugin from 3.4.1 to 3.5.0 in /json-smart-action by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/127](https://togithub.com/netplex/json-smart-v2/pull/127) - Bump maven-compiler-plugin from 3.10.1 to 3.11.0 in /json-smart by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/129](https://togithub.com/netplex/json-smart-v2/pull/129) - Bump maven-compiler-plugin from 3.10.1 to 3.11.0 in /json-smart-action by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/128](https://togithub.com/netplex/json-smart-v2/pull/128) - Bump maven-release-plugin from 3.0.0-M6 to 3.0.0-M7 in /json-smart by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/121](https://togithub.com/netplex/json-smart-v2/pull/121) - Bump junit.version from 5.9.1 to 5.9.2 in /json-smart-action by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/123](https://togithub.com/netplex/json-smart-v2/pull/123) - Bump junit.version from 5.9.1 to 5.9.2 in /json-smart by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/124](https://togithub.com/netplex/json-smart-v2/pull/124) - Bump maven-gpg-plugin from 1.6 to 3.0.1 in /json-smart by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/87](https://togithub.com/netplex/json-smart-v2/pull/87) - Bump maven-gpg-plugin from 1.6 to 3.0.1 in /json-smart-action by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/netplex/json-smart-v2/pull/84](https://togithub.com/netplex/json-smart-v2/pull/84) #### New Contributors - [@​hboutemy](https://togithub.com/hboutemy) made their first contribution in [https://github.com/netplex/json-smart-v2/pull/101](https://togithub.com/netplex/json-smart-v2/pull/101) - [@​tobi5775](https://togithub.com/tobi5775) made their first contribution in [https://github.com/netplex/json-smart-v2/pull/125](https://togithub.com/netplex/json-smart-v2/pull/125) **Full Changelog**: https://github.com/netplex/json-smart-v2/compare/2.4.8...2.4.9
opensearch-trigger-bot[bot] commented 1 year ago

The backport to 2.x failed:

The process '/usr/bin/git' failed with exit code 1

To backport manually, run these commands in your terminal:

# Fetch latest updates from GitHub
git fetch
# Create a new working tree
git worktree add .worktrees/backport-2.x 2.x
# Navigate to the new working tree
cd .worktrees/backport-2.x
# Create a new branch
git switch --create backport/backport-70-to-2.x
# Cherry-pick the merged commit of this pull request and resolve the conflicts
git cherry-pick -x --mainline 1 18019787187b4a48898c9a2ebd09b17cd5c2784d
# Push it to GitHub
git push --set-upstream origin backport/backport-70-to-2.x
# Go back to the original working tree
cd ../..
# Delete the working tree
git worktree remove .worktrees/backport-2.x

Then, create a pull request where the base branch is 2.x and the compare/head branch is backport/backport-70-to-2.x.