Craig Andrews
Craig Andrews
@gruebel can you please take a look at this security update?
@bo156 can you please take a look at this change?
I emailed [email protected] again. I'm incredibly disappointed that checkov, which is itself security software, is completely ignoring this security finding.
This issue has also been reported at https://ideas.sonatype.com/ideas/IDEAS-I-1449
Thank you for your response! I can't ask all projects to stop using the `io.spring.dependency-management` plugin. So what I'm doing instead is using the plugin to override the commons-lang3 version...
This PR improves the error handling. With yarn 1.22.22, the output is: ``` $ yarn install yarn cache v1.22.22 warning package.json: No license field success Cleared cache. Done in 14.21s....
@rpalcolea and others - can you please look at this security issue?
https://github.com/eclipse-jgit/jgit/commit/acde6c8f5b538f900cfede9035584fd2ed654154 changed `ApplyCommand` to require the repository to support the `getObjectDatabase` method which `NotNecessarilyGitRepository` doesn't implement (see https://github.com/eclipse-jgit/jgit/commit/acde6c8f5b538f900cfede9035584fd2ed654154#diff-257677dac52357ed18fecaac57b4a18fbf5f6e4b93f20c42e77e650355af2c5eR114), resulting in test failures.