java-driver
java-driver copied to clipboard
Bump jnr-posix version to 3.1.8
fix CWE-416 https://security.snyk.io/vuln/SNYK-JAVA-COMGITHUBJNR-1570422
Did you pay attention to the comment above that change?
<!-- Note: When upgrading either jnr-ffi or jnr-posix, ensure that the versions are compatible.
JNR has broken compatibility between minor versions in the past. -->
How come we did not get https://github.com/apache/cassandra-java-driver/commit/55e6e40afcd7df2be931285b323379f9ea8c6c82 from upstream?
Did you pay attention to the comment above that change?
<!-- Note: When upgrading either jnr-ffi or jnr-posix, ensure that the versions are compatible. JNR has broken compatibility between minor versions in the past. -->
Yep, I just need to update the PR description
How come we did not get apache@55e6e40 from upstream?
We use a specific version, i am not sure we will get any other unless we change it
@yaronkaikov - what happened to this one?
@yaronkaikov - what happened to this one?
completely forgot about it, @avelanarius ping
@avelanarius @Bouncheck Can you please review/merge/comment on this?
/cc @roydahan
@yaronkaikov how do i ensure compatibility if I want to upgrade jnr libraries again?
@yaronkaikov how do i ensure compatibility if I want to upgrade jnr libraries again?
I am not sure, do we have some unit-tests for this?