pallas
pallas copied to clipboard
vipshop
Curator is to Zookeeper what Pallas is to Elasticsearch
Bumps [spring-boot-starter-web](https://github.com/spring-projects/spring-boot) from 2.0.1.RELEASE to 2.5.12. Release notes Sourced from spring-boot-starter-web's releases. v2.5.12 :lady_beetle: Bug Fixes MustacheAutoConfiguration in a Servlet web application fails with a ClassNotFoundException when Spring MVC is...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.6.0 to 1.14.8. Commits 3d81dc3 Release version 1.14.8 of the npm package. 62e546a Drop confidential headers across schemes. 2ede36d Release version 1.14.7 of the npm package. 8b347cb...
Bumps [h2](https://github.com/h2database/h2database) from 1.4.197 to 2.1.210. Release notes Sourced from h2's releases. Version 2.1.210 Two security vulnerabilities in H2 Console (CVE-2022-23221 and possible DNS rebinding attack) are fixed. Persistent databases...
Bumps [protobuf-java](https://github.com/protocolbuffers/protobuf) from 3.1.0 to 3.16.1. Release notes Sourced from protobuf-java's releases. Protocol Buffers v3.16.1 Java Improve performance characteristics of UnknownFieldSet parsing (#9371) Protocol Buffers v3.16.0 C++ Fix compiler warnings...
1.pallas-search没有使用log4j的包，去掉依赖 2.plugin因为ES原生使用了log4j，所以升级log4j的版本到官方提供的2.17.0
Bumps log4j-core from 2.6.2 to 2.16.0. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...
Bumps log4j-core from 2.7 to 2.16.0. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...
Bumps log4j-core from 2.6.2 to 2.16.0. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...
Bumps log4j-api from 2.6.2 to 2.16.0. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...
Bumps log4j-api from 2.6.2 to 2.16.0. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...