search

thrau / jarchivelib

A simple archiving and compression library for Java
https://github.com/thrau/jarchivelib
Apache License 2.0
198 stars 36 forks source link

Bumps commons.compress.version to 1.19 #79

Closed edumco closed 3 years ago

edumco commented 4 years ago

This pull request updates Apache commons.compress to fix a vunerability found by Snyk

BorisOsipov commented 3 years ago

Hi @thrau

Any news about this PR? We kindly ask to merge the PR and release a new version to avoid failing security quality gates.

Thanks in advance!

thrau commented 3 years ago

Sorry I've been slow to respond. Will take a look at it tomorrow!

BorisOsipov commented 3 years ago

Thank you!

thrau commented 3 years ago

thanks for the PR, i'm closing it as all relevant changes have been made through other commits that are now in the main branch. the changes to the readme file seemed unnecessary to me.

you can use 1.1.0-SNAPSHOT if you use the snapshot repository. i'll look at some of the other issues in the milestone before releasing.

thrau commented 3 years ago

FYI: i've released version 1.1.0 with commons-compress 1.20. should be in maven central in a couple of hours.