gocd-plugins
gocd-plugins copied to clipboard
Update guava to 30.1
There is a security alert for guava, everything below 24.1.1 contains a vulnerability i.e. https://github.com/advisories/GHSA-mvr2-9pj6-7w5j
I propose to update the version directly to the latest release or at least 24.1.1.
This affects the fortify plugin. Can someone make sure, that this update does not break it?
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.
The dependency version update looks fine by me, but I'm not the right person to approve this merge request because there's no way I can test the fortify plugin. @Dutzu can you reach out to the guys who are still maintaining this ? Also mentioning @markus2810