Le 29/10/2022 à 10:33, Ed Merks a écrit :
FYI, The platform and Orbit have moved to Batik version 1.16.0 to fix
some CVEs so please (Graphiti, GMF, Papyrus, and Sirius) update to
this new version for M3.
I'm working on it for GMF Runtime and Sirius, but noticed that there has
been some recent security-related fixes post-1.16.0 (see
https://github.com/apache/xmlgraphics-batik/commits/trunk). We should
probably expect a Batik 1.17 in the near future.
-------- Forwarded Message --------
Subject: [eclipse-platform/eclipse.platform.releng.aggregator] New
Dependency Chain rcp -> batik -> xmlgraphics -> commons.logging (Issue
#651)
Date: Fri, 28 Oct 2022 23:45:11 -0700
From: Christian Dietrich <notificati...@github.com>
Reply-To: eclipse-platform/eclipse.platform.releng.aggregator
<reply+aabs6tbezpfwmqh47gvkhs6bnh7hpevbnhhfkh3...@reply.github.com>
To: eclipse-platform/eclipse.platform.releng.aggregator
<eclipse.platform.releng.aggrega...@noreply.github.com>
CC: Subscribed <subscri...@noreply.github.com>
hi, is the new dependency chain
Error: Cannot resolve project dependencies:
Error: Software being installed: org.eclipse.rcp.feature.group
4.26.0.v20221020-2202
Error: Missing requirement: org.apache.xmlgraphics
2.7.0.v20221018-0736 requires 'java.package;
org.apache.commons.logging [1.0.4,1.3.0)' but it could not be found
Error: Cannot satisfy dependency: org.apache.batik.css
1.15.0.v20221018-0736 depends on: java.package;
org.apache.xmlgraphics.java2d.color 2.7.0
Error: Cannot satisfy dependency: org.eclipse.e4.rcp.feature.group
4.26.0.v20221020-2202 depends on: org.eclipse.equinox.p2.iu;
org.apache.batik.css [1.15.0.v20221018-0736,1.15.0.v20221018-0736]
Error: Cannot satisfy dependency: org.eclipse.rcp.feature.group
4.26.0.v20221020-2202 depends on: org.eclipse.equinox.p2.iu;
org.eclipse.e4.rcp.feature.group
[4.26.0.v20221020-2202,4.26.0.v20221020-2202]
intentional (aka is the new org.apache.xmlgraphics
2.7.0.v20221018-0736 in orbit as we want it or did unwanted changes
sneak in)
https://github.com/itemis/xtext-reference-projects/pull/300/files
—
Reply to this email directly, view it on GitHub
<https://github.com/eclipse-platform/eclipse.platform.releng.aggregator/issues/651>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AABS6TGARLW7N6PSZRXFIXTWFTBXPANCNFSM6AAAAAARRUYJEY>.
You are receiving this because you are subscribed to this
thread.Message ID:
<eclipse-platform/eclipse.platform.releng.aggregator/issues/6...@github.com>
_______________________________________________
cross-project-issues-dev mailing list
cross-project-issues-dev@eclipse.org
To unsubscribe from this list,
visithttps://www.eclipse.org/mailman/listinfo/cross-project-issues-dev
--
Pierre-Charles David (Obeo)
_______________________________________________
cross-project-issues-dev mailing list
cross-project-issues-dev@eclipse.org
To unsubscribe from this list, visit
https://www.eclipse.org/mailman/listinfo/cross-project-issues-dev
