Changeset 18587 in josm for trunk/build.xml

Timestamp:

2022-11-07T23:50:24+01:00 (3 years ago)

Author:

taylor.smock

Message:

Dependency updates

ivy: 2.5.0 -> 2.5.1:

• Fixes CVE-2022-37856 and CVE-2022-37866 which could lead to creation or replacement of arbitrary files
• Full changelog: ​https://ant.apache.org/ivy/history/2.5.1/release-notes.html

ivy.xml:

• Apache commons-compress: 1.21 -> 1.22
  • Fixed various issues found by fuzzing and static analysis in pack200
• svgSalamander: 1.1.3 -> 1.1.4
  • Various text drawing bug fixes leading to a decrease in logging messages
  • Full changelog: ​https://github.com/blackears/svgSalamander/releases/tag/v1.1.4
• wiremock-jre8: 2.34.0 -> 2.35.0
  • Add API method for remove stubs by ID
  • Add ability to restrict addresses WireMock can proxy/record to
  • Full changelog: ​https://github.com/wiremock/wiremock/releases/tag/2.35.0

tools/ivy.xml:

• pmd: 6.50.0 -> 6.51.0
  • Detect more empty test classes, uses regexes looking for Test in class names
  • Full changelog: ​https://pmd.sourceforge.io/pmd-6.51.0/pmd_release_notes.html
• spotbugs: 4.7.2 -> 4.7.3
  • Improved compatibility with Java 13+, supports JDK 20
  • Various false positive fixes
  • Full changelog: ​https://github.com/spotbugs/spotbugs/releases/tag/4.7.3

File:

• trunk/build.xml (modified) (1 diff)

trunk/build.xml

@@ -17 +17 @@
 >
     <target name="init-ivy" description="Initialize dependency management system Apache Ivy">
-        <property name="ivy.version" value="2.5.0"/>
+        <property name="ivy.version" value="2.5.1"/>
         <dirname property="base.dir" file="${ant.file.josm}"/>
         <property name="lib.dir"   location="${base.dir}/lib"/>