tomasbjerre / git-changelog-command-line

Command line tool to generate changelog, or releasenotes, from a git repository and a Handlebars template.
Apache License 2.0
46 stars 13 forks source link

Update Jackson Dependencies to Resolve Security Vulnerabilities #19

Closed ksh-t-z closed 6 days ago

ksh-t-z commented 1 week ago

Description: The git-changelog-command-line project is currently using outdated versions of Jackson libraries:

These versions have multiple Critical and High CVEs associated with them, which are flagged during security scans of the Docker image.

Proposed Solution: Update the Jackson dependencies to the latest version 2.17.1:

The latest versions can be found here.

Benefits:

References:

Thank you for considering this update to improve the security of the project.

tomasbjerre commented 6 days ago

Stepping dependencies and releasing now.

ksh-t-z commented 4 days ago

Thanks @tomasbjerre for the quick resolution

Could you please also release the image tag on Docker Hub?

tomasbjerre commented 4 days ago

Image released now.

ksh-t-z commented 4 days ago

Thanks again