archiva icon indicating copy to clipboard operation
archiva copied to clipboard

Apache Archiva Repository

Results 38 archiva issues
Sort by recently updated
recently updated
newest added

Bumps derby from 10.13.1.1 to 10.14.2.0. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.derby:derby&package-manager=maven&previous-version=10.13.1.1&new-version=10.14.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependencies
java

Bumps [guava](https://github.com/google/guava) from 20.0 to 23.0. Release notes Sourced from guava's releases. 23.0 Final Guava 23.0 release. 23.0-rc1 First Guava 23.0 release candidate. 22.0 Final Guava 22.0 release. 22.0-rc1 First...

dependencies
java

Bumps commons-configuration2 from 2.7 to 2.8.0. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.commons:commons-configuration2&package-manager=maven&previous-version=2.7&new-version=2.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependencies
java

Bumps [terser](https://github.com/terser/terser) from 4.8.0 to 4.8.1. Changelog Sourced from terser's changelog. v4.8.1 (backport) Security fix for RegExps that should not be evaluated (regexp DDOS) Commits 40674a4 update changelog, version d8cc569...

dependencies
javascript

Bumps `maven3x.version` from 3.8.1 to 3.8.5. Updates `maven-model` from 3.8.1 to 3.8.5 Release notes Sourced from maven-model's releases. 3.8.5 What's Changed [3.8.x][MNG-7156][MNG-7285] Add locking in MojoExecutor by @​gnodet in apache/maven#628...

dependencies
java

Bumps [jackson-databind](https://github.com/FasterXML/jackson) from 2.11.0 to 2.12.6.1. Commits See full diff in compare view [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.fasterxml.jackson.core:jackson-databind&package-manager=maven&previous-version=2.11.0&new-version=2.12.6.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependencies
java

Bumps `derbyVersion` from 10.13.1.1 to 10.15.2.0. Updates `derby` from 10.13.1.1 to 10.15.2.0 Updates `derbytools` from 10.13.1.1 to 10.15.2.0 Dependabot will resolve any conflicts with this PR as long as you...

dependencies
java

Bumps [eventsource](https://github.com/EventSource/eventsource) from 1.0.7 to 1.1.1. Changelog Sourced from eventsource's changelog. 1.1.1 Do not include authorization and cookie headers on redirect to different origin (#273 Espen Hovlandsdal) 1.1.0 Improve performance...

dependencies
javascript

Bumps [cglib](https://github.com/cglib/cglib) from 2.2.2 to 3.3.0. Release notes Sourced from cglib's releases. cglib 3.3.0 emits code compatible with java 1.8, so we can call static interface methods. cglib 3.2.9 Update...

dependencies
java

Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...

dependencies
javascript