Repository navigation
chore(deps): bump the maven-security-updates group across 1 directory with 2 updates - #138
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
… with 2 updates Bumps the maven-security-updates group with 2 updates in the / directory: [org.apache.httpcomponents.client5:httpclient5](https://github.com/apache/httpcomponents-client) and [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson-databind). Updates `org.apache.httpcomponents.client5:httpclient5` from 5.5 to 5.6.3 - [Changelog](https://github.com/apache/httpcomponents-client/blob/rel/v5.6.3/RELEASE_NOTES.txt) - [Commits](apache/httpcomponents-client@rel/v5.5...rel/v5.6.3) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.22.0 to 2.22.2 - [Commits](FasterXML/jackson-databind@jackson-databind-2.22.0...jackson-databind-2.22.2) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.22.0 to 2.22.2 - [Commits](FasterXML/jackson-databind@jackson-databind-2.22.0...jackson-databind-2.22.2) --- updated-dependencies: - dependency-name: org.apache.httpcomponents.client5:httpclient5 dependency-version: 5.6.3 dependency-type: direct:production dependency-group: maven-security-updates - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.22.2 dependency-type: direct:production dependency-group: maven-security-updates - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.22.2 dependency-type: direct:production dependency-group: maven-security-updates ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Contributor
Author
|
Superseded by #139. |
dependabot
Bot
deleted the
dependabot/maven/maven-security-updates-8a0636fd3c
branch
September 10, 2026 23:57
Contributor
Qodana for JVM57 new problems were found
@@ Code coverage @@
+ 59% total lines covered
787 lines analyzed, 466 lines covered
# Calculated according to the filters of your coverage tool💡 Qodana analysis was run in the pull request mode: only the changed files were checked Contact Qodana teamContact us at qodana-support@jetbrains.com
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the maven-security-updates group with 2 updates in the / directory: org.apache.httpcomponents.client5:httpclient5 and com.fasterxml.jackson.core:jackson-databind.
Updates
org.apache.httpcomponents.client5:httpclient5from 5.5 to 5.6.3Changelog
Sourced from org.apache.httpcomponents.client5:httpclient5's changelog.
... (truncated)
Commits
13408e3HttpClient 5.6.3 release58728b1Updated release notes for HttpClient 5.6.3 release55733f4ContentCompressionExec fails to close the underlying response stream in case ...2485ddfDo not call the backend when an only-if-cached request cannot be served from ...26ece37compare scheme in redirect same-authority check8cdf6faescape quotes and strip line breaks in rfc7578 multipart parametersab20c86HTTPCLIENT-2426: Do not wrap a discarded (null) response body in a content de...f092f56Upgraded HttpClient version to 5.6.3-SNAPSHOTa7405cdUpdated release notes for HttpClient 5.6.2 releasebb51196Upgraded HttpCore to version 5.4.3Updates
com.fasterxml.jackson.core:jackson-databindfrom 2.22.0 to 2.22.2Commits
25b2a22[maven-release-plugin] prepare release jackson-databind-2.22.2bab1c1aPrep for 2.22.2 releasebc03cf8Merge branch '2.21' into 2.2283379fbMerge branch '2.20' into 2.210d400c9Merge branch '2.19' into 2.20ce36a27Merge branch '2.18' into 2.197a209e1Post-release dep version bumpa432707[maven-release-plugin] prepare for next development iteration176df1d[maven-release-plugin] prepare release jackson-databind-2.18.107785f5fPrep for 2.18.10 releaseUpdates
com.fasterxml.jackson.core:jackson-databindfrom 2.22.0 to 2.22.2Commits
25b2a22[maven-release-plugin] prepare release jackson-databind-2.22.2bab1c1aPrep for 2.22.2 releasebc03cf8Merge branch '2.21' into 2.2283379fbMerge branch '2.20' into 2.210d400c9Merge branch '2.19' into 2.20ce36a27Merge branch '2.18' into 2.197a209e1Post-release dep version bumpa432707[maven-release-plugin] prepare for next development iteration176df1d[maven-release-plugin] prepare release jackson-databind-2.18.107785f5fPrep for 2.18.10 releaseDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.