eagle

eagle copied to clipboard

Bumps [fastjson](https://github.com/alibaba/fastjson) from 1.2.28 to 1.2.83. Release notes Sourced from fastjson's releases. FASTJSON 1.2.83版本发布（安全修复） 这是一个安全修复版本，修复最近收到在特定场景下可以绕过autoType关闭限制的漏洞，建议fastjson用户尽快采取安全措施保障系统安全。 安全修复方案 ：https://github.com/alibaba/fastjson/wiki/security_update_20220523 Issues 安全加固 修复JDK17下setAccessible报错的问题 #4077 下载 https://repo1.maven.org/maven2/com/alibaba/fastjson/1.2.83/ 文档 https://github.com/alibaba/fastjson/wiki/%E5%B8%B8%E8%A7%81%E9%97%AE%E9%A2%98 源码 https://github.com/alibaba/fastjson/tree/1.2.83 fastjson 1.2.79版本发布，BUG修复 这又是一个bug...

dependabot[bot]

Bumps [dubbo](https://github.com/apache/incubator-dubbo) from 2.5.3 to 2.6.12. Release notes Sourced from dubbo's releases. dubbo-2.6.12 What's Changed [2.6] update hessian lite version: 3.2.11 -> 3.2.12 (#9455) dubbo-2.6.11 Change Lists Add serialize id...

dependabot[bot]

Bumps [dubbo](https://github.com/apache/incubator-dubbo) from 2.5.3 to 2.6.12. Release notes Sourced from dubbo's releases. dubbo-2.6.12 What's Changed [2.6] update hessian lite version: 3.2.11 -> 3.2.12 (#9455) dubbo-2.6.11 Change Lists Add serialize id...

dependabot[bot]

Bumps [spring-core](https://github.com/spring-projects/spring-framework) from 4.3.21.RELEASE to 5.2.22.RELEASE. Release notes Sourced from spring-core's releases. v5.2.22.RELEASE :star: New Features Refine CachedIntrospectionResults property introspection #28446 :lady_beetle: Bug Fixes Ignore invalid STOMP frame #28444 v5.2.21.RELEASE...

dependabot[bot]

Bumps [gson](https://github.com/google/gson) from 2.6.1 to 2.8.9. Release notes Sourced from gson's releases. Gson 2.8.9 Make OSGi bundle's dependency on sun.misc optional (#1993). Deprecate Gson.excluder() exposing internal Excluder class (#1986). Prevent...

dependabot[bot]

Bumps [spring-webmvc](https://github.com/spring-projects/spring-framework) from 4.1.1.RELEASE to 5.3.18. Release notes Sourced from spring-webmvc's releases. v5.3.18 :star: New Features Restrict access to property paths on Class references #28261 Introduce cancel(boolean mayInterruptIfRunning) in ScheduledTask...

dependabot[bot]

Bumps [spring-webmvc](https://github.com/spring-projects/spring-framework) from 4.1.1.RELEASE to 5.3.18. Release notes Sourced from spring-webmvc's releases. v5.3.18 :star: New Features Restrict access to property paths on Class references #28261 Introduce cancel(boolean mayInterruptIfRunning) in ScheduledTask...

dependabot[bot]

Bumps [spring-beans](https://github.com/spring-projects/spring-framework) from 4.3.21.RELEASE to 5.3.18. Release notes Sourced from spring-beans's releases. v5.3.18 :star: New Features Restrict access to property paths on Class references #28261 Introduce cancel(boolean mayInterruptIfRunning) in ScheduledTask...

dependabot[bot]

Bumps [protobuf-java](https://github.com/protocolbuffers/protobuf) from 3.3.1 to 3.16.1. Release notes Sourced from protobuf-java's releases. Protocol Buffers v3.16.1 Java Improve performance characteristics of UnknownFieldSet parsing (#9371) Protocol Buffers v3.16.0 C++ Fix compiler warnings...

dependabot[bot]

Bumps log4j-api from 2.17.0 to 2.17.1. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependabot[bot]