teetime-framework / TeeTime

The Java reference implementation of the Pipe-and-Filter framework TeeTime
http://teetime-framework.github.io
Apache License 2.0
20 stars 5 forks source link

Add dependabot and update to guava 31.1.3-jre to fix security vulnerability #33

Closed DaGeRe closed 9 months ago

DaGeRe commented 9 months ago

TeaTime is currently shipped with Guava 31.0.1, which has one high and one low security vulnerability: https://ossindex.sonatype.org/component/pkg:maven/com.google.guava/guava@31.0.1-jre?utm_source=ossindex-client&utm_medium=integration&utm_content=1.7.0 this should be fixed directly.

To avoid such problems in the future, TeaTime should use dependabot.