PassJava-Platform

PassJava-Platform copied to clipboard

Bumps [fastjson](https://github.com/alibaba/fastjson) from 1.2.60 to 1.2.83. Release notes Sourced from fastjson's releases. FASTJSON 1.2.83版本发布（安全修复） 这是一个安全修复版本，修复最近收到在特定场景下可以绕过autoType关闭限制的漏洞，建议fastjson用户尽快采取安全措施保障系统安全。 安全修复方案 ：https://github.com/alibaba/fastjson/wiki/security_update_20220523 Issues 安全加固 修复JDK17下setAccessible报错的问题 #4077 下载 https://repo1.maven.org/maven2/com/alibaba/fastjson/1.2.83/ 文档 https://github.com/alibaba/fastjson/wiki/%E5%B8%B8%E8%A7%81%E9%97%AE%E9%A2%98 源码 https://github.com/alibaba/fastjson/tree/1.2.83 fastjson 1.2.79版本发布，BUG修复 这又是一个bug...

dependabot[bot]

Bumps [fastjson](https://github.com/alibaba/fastjson) from 1.2.45 to 1.2.83. Release notes Sourced from fastjson's releases. FASTJSON 1.2.83版本发布（安全修复） 这是一个安全修复版本，修复最近收到在特定场景下可以绕过autoType关闭限制的漏洞，建议fastjson用户尽快采取安全措施保障系统安全。 安全修复方案 ：https://github.com/alibaba/fastjson/wiki/security_update_20220523 Issues 安全加固 修复JDK17下setAccessible报错的问题 #4077 下载 https://repo1.maven.org/maven2/com/alibaba/fastjson/1.2.83/ 文档 https://github.com/alibaba/fastjson/wiki/%E5%B8%B8%E8%A7%81%E9%97%AE%E9%A2%98 源码 https://github.com/alibaba/fastjson/tree/1.2.83 fastjson 1.2.79版本发布，BUG修复 这又是一个bug...

dependabot[bot]

Bumps [gson](https://github.com/google/gson) from 2.8.5 to 2.8.9. Release notes Sourced from gson's releases. Gson 2.8.9 Make OSGi bundle's dependency on sun.misc optional (#1993). Deprecate Gson.excluder() exposing internal Excluder class (#1986). Prevent...

dependabot[bot]

Bumps shiro-spring from 1.4.0 to 1.7.1. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependabot[bot]

配置好oss后启动出现java.lang.IllegalArgumentException: Oss endpoint can't be empty. 看了下配置没问题啊，网上解决方案都是引入spring-cloud-alibaba-dependencies，但是我看common包里面已经有了啊 

loveTtt

使用npm run dev启动后台的时候提示找不到某个模块

4

 如上图框出来的代码。在没有注释之前，终端运行`npm run dev`，会报错，提示这个component路径不对，找不到。但是我在作者的源码文件夹中，component文件夹下没有找到对应的。所以想问一下，是不是作者漏了一个文件呢？  本人初学者，提的问题不知道是否准确，感谢作者～

cdxawesome

nacos版本和alibaba版本是否有强依赖关系啊？

1

大佬，我看官网推荐nacos用1.1.4版本而你用的是1.4.0，按照你写的方法，整合配置中心那里没法动态获取配置内容，是否跟版本有关？

zou-Jack

Bumps commons-io from 2.5 to 2.7. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependabot[bot]

Bumps commons-io from 2.5 to 2.7. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependabot[bot]

Bumps `shiro.version` from 1.4.0 to 1.7.1. Updates `shiro-core` from 1.4.0 to 1.7.1 Changelog Sourced from shiro-core's changelog. 1.7.1 ########################################################### Bug [SHIRO-797] - Shiro 1.7.0 is lower than using springboot version...

dependabot[bot]