Changeset 18587 in josm for trunk/tools

Timestamp:

2022-11-07T23:50:24+01:00 (2 years ago)

Author:

taylor.smock

Message:

Dependency updates

ivy: 2.5.0 -> 2.5.1:

• Fixes CVE-2022-37856 and CVE-2022-37866 which could lead to creation or replacement of arbitrary files
• Full changelog: ​https://ant.apache.org/ivy/history/2.5.1/release-notes.html

ivy.xml:

• Apache commons-compress: 1.21 -> 1.22
  • Fixed various issues found by fuzzing and static analysis in pack200
• svgSalamander: 1.1.3 -> 1.1.4
  • Various text drawing bug fixes leading to a decrease in logging messages
  • Full changelog: ​https://github.com/blackears/svgSalamander/releases/tag/v1.1.4
• wiremock-jre8: 2.34.0 -> 2.35.0
  • Add API method for remove stubs by ID
  • Add ability to restrict addresses WireMock can proxy/record to
  • Full changelog: ​https://github.com/wiremock/wiremock/releases/tag/2.35.0

tools/ivy.xml:

• pmd: 6.50.0 -> 6.51.0
  • Detect more empty test classes, uses regexes looking for Test in class names
  • Full changelog: ​https://pmd.sourceforge.io/pmd-6.51.0/pmd_release_notes.html
• spotbugs: 4.7.2 -> 4.7.3
  • Improved compatibility with Java 13+, supports JDK 20
  • Various false positive fixes
  • Full changelog: ​https://github.com/spotbugs/spotbugs/releases/tag/4.7.3

File:

• trunk/tools/ivy.xml (modified) (2 diffs)

trunk/tools/ivy.xml

@@ -21 +21 @@
         <dependency org="com.guardsquare" name="proguard-ant" rev="7.2.2" conf="proguard->default"/>
         <!-- pmd->default -->
-        <dependency org="net.sourceforge.pmd" name="pmd-core" rev="6.50.0" conf="pmd->default"/>
-        <dependency org="net.sourceforge.pmd" name="pmd-java" rev="6.50.0" conf="pmd->default"/>
+        <dependency org="net.sourceforge.pmd" name="pmd-core" rev="6.51.0" conf="pmd->default"/>
+        <dependency org="net.sourceforge.pmd" name="pmd-java" rev="6.51.0" conf="pmd->default"/>
         <dependency org="net.sourceforge.saxon" name="saxon" rev="9.1.0.8" conf="pmd->default">
             <artifact name="saxon" type="jar"/>
@@ -28 +28 @@
         </dependency>
         <!-- spotbugs->default -->
-        <dependency org="com.github.spotbugs" name="spotbugs" rev="4.7.2" conf="spotbugs->default"/>
-        <dependency org="com.github.spotbugs" name="spotbugs-ant" rev="4.7.2" conf="spotbugs->default"/>
+        <dependency org="com.github.spotbugs" name="spotbugs" rev="4.7.3" conf="spotbugs->default"/>
+        <dependency org="com.github.spotbugs" name="spotbugs-ant" rev="4.7.3" conf="spotbugs->default"/>
         <!-- errorprone->default -->
         <dependency org="com.google.errorprone" name="error_prone_core" rev="2.10.0" conf="errorprone->default"/>