Any interest in a PR that will bump to SpringBoot v2.7.6?

Open jbeemster opened this issue 3 years ago • 3 comments

Internally we have been using this bot for some years successfully but given the number of CVE's present in the current version of springboot we have ended up forking the library and bumping dependencies there.

We have successfully upgraded it to v2.7.6 with Java 11 and would be happy to contribute this back if that is of interest!

Dec 23 '22 03:12 jbeemster

Hi @jbeemster, this will actually be a nice addition to this project. Feel free to raise a PR and I can merge it. Let me know if I can help you with anything else.

Dec 23 '22 13:12 rampatra

Hey @rampatra please see: https://github.com/rampatra/jbot/pull/203

Dec 29 '22 06:12 jbeemster

Thanks a mil, @jbeemster for your time. I have added some minor comments to your PR. Once they are resolved, I can merge the PR.

Dec 29 '22 13:12 rampatra