This is an automated email from the ASF dual-hosted git repository. slachiewicz pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/maven-build-cache-extension.git
commit af0be3ccba82981c7a8a1386f8ce3ee9ba646872 Author: Sylwester Lachiewicz <[email protected]> AuthorDate: Fri Oct 30 16:39:47 2026 +0000 Keep handlebars at the version wiremock supports --- pom.xml | 17 ++++------------- 1 file changed, 4 insertions(+), 13 deletions(-) diff --git a/pom.xml b/pom.xml index d6326f47..066efeee 100644 --- a/pom.xml +++ b/pom.xml @@ -94,9 +94,10 @@ under the License. <type>pom</type> <scope>import</scope> </dependency> - <!-- wiremock 3.13.2 brings in jackson 2.20.1, handlebars 4.3.1 and httpcore5 5.3.6, which have known - vulnerabilities. Force newer versions for the test classpath. Testcontainers 2.x also needs - jackson-annotations >= 2.15 (JsonFormat.Feature.READ_UNKNOWN_ENUM_VALUES_USING_DEFAULT_VALUE). --> + <!-- wiremock 3.13.2 brings in jackson 2.20.1 and httpcore5 5.3.6, which have known vulnerabilities. + Force newer versions for the test classpath. Testcontainers 2.x also needs + jackson-annotations >= 2.15 (JsonFormat.Feature.READ_UNKNOWN_ENUM_VALUES_USING_DEFAULT_VALUE). + handlebars stays at wiremock's 4.3.1: the fixed 4.5.x no longer has the NumberHelper wiremock uses. --> <dependency> <groupId>com.fasterxml.jackson</groupId> <artifactId>jackson-bom</artifactId> @@ -104,16 +105,6 @@ under the License. <type>pom</type> <scope>import</scope> </dependency> - <dependency> - <groupId>com.github.jknack</groupId> - <artifactId>handlebars</artifactId> - <version>4.5.8</version> - </dependency> - <dependency> - <groupId>com.github.jknack</groupId> - <artifactId>handlebars-helpers</artifactId> - <version>4.5.8</version> - </dependency> <dependency> <groupId>org.apache.httpcomponents.core5</groupId> <artifactId>httpcore5</artifactId>
