axion-release-plugin
axion-release-plugin copied to clipboard
Bump org.ajoberstar.grgit:grgit-core from 5.3.0 to 5.3.2
Bumps org.ajoberstar.grgit:grgit-core from 5.3.0 to 5.3.2.
Release notes
Sourced from org.ajoberstar.grgit:grgit-core's releases.
5.3.2
Patch release to fix a vulnerable transitive dependency.
[!NOTE] This release is the same as 5.3.1.
Breaking Changes
None
Enhancements
None
Fixes
- Update dependencies to resolve JGit vulnerability
Deprecations
None
Compatibility
Tested on the following version:
Java Version Gradle Versions 11 7.0.2, 7.6.4, 8.0.2, 8.14.2 17 7.3.3, 7.6.4, 8.0.2, 8.14.2, 9.0.0-milestone-9 21 8.4, 8.14.2, 9.0.0-milestone-9 5.3.1
Patch release to fix a vulnerable transitive dependency.
Breaking Changes
None
Enhancements
None
Fixes
- Update dependencies to resolve JGit vulnerability
Deprecations
None
... (truncated)
Commits
f11f9d1patch: Fix publishingc8f191dpatch: Upgrade Gradle versiond1974cbpatch: Fix vulnerability in JGite7d2cebchore: Drop Java 11 with Gradle 93b584f4chore: Test against Gradle v9c09770cchore: Publish Gradle deps311e7b0chore: Add back signing config0d32176chore: Update plugin versions1b7fdf2chore: Update actions897ef8cchore: Enable dependabot for Action versions- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)