Hi, Running owasp dependency-check on dropwizard 2.0.0-rc3 reports this (among some liquibase ones for jquery and bootstrap but that has been around forever so we ignore it):
logback-throttling-appender-1.0.1.jar (pkg:maven/io.dropwizard.logback/logback-throttling-appender@1.0.1, cpe:2.3:a:logback:logback:1.0.1:*:*:*:*:*:*:*) : CVE-2017-5929 Is that something to be worried about? Natan On Sunday, June 16, 2019 at 11:42:45 AM UTC+2, Jochen Schalanda wrote: > > Hi everyone, > > We're now down to only 1 open issue in the 2.0.0 milestone: "Update > conscrypt documentation #2736" > > https://github.com/dropwizard/dropwizard/milestone/18 > > Thanks for the help! > > I would publish Dropwizard 2.0.0-rc3 as the (hopefully) last release > candidate and if there are no regressions, we're ready to go. > > > Do you guys have a means of reaching out to them? > > > Yes, we're already in contact with the responsible people at Rent the > Runway. :-) > > > Cheers, > Jochen > > Am 14.06.2019 um 01:33 schrieb 'Michael Zamani' via dropwizard-dev < > dropwiz...@googlegroups.com <javascript:>>: > > Happy to help usher along > https://github.com/dropwizard/dropwizard/pull/2795 and maybe I can find > some time this weekend to take a crack at > https://github.com/dropwizard/dropwizard/issues/2736 if nobody beats me > to it. > > Regarding the new documentation, we'll need some help from the fine folks >> of Rent the Runway who sponsor the domain dropwizard.io for us and would >> need to change the CNAME RR for that domain. >> > Do you guys have a means of reaching out to them? > > On Tuesday, June 11, 2019 at 10:46:23 AM UTC-7, Jochen Schalanda wrote: >> >> Hi, >> >> I'd love to address the 4 remaining issues/PRs in the 2.0.0 milestone ( >> https://github.com/dropwizard/dropwizard/milestone/18) and change the >> documentation to ReadTheDocs ( >> https://dropwizard.readthedocs.io/en/latest/ >> <https://dropwizard.readthedocs.io/>) before a GA release. >> >> For the issues in the 2.0.0 milestone, every help is appreciated. ;-) >> >> Regarding the new documentation, we'll need some help from the fine folks >> of Rent the Runway who sponsor the domain dropwizard.io for us and would >> need to change the CNAME RR for that domain. >> >> Cheers, >> Jochen >> >> Am 07.06.2019 um 21:50 schrieb Nicholas Babcock <babc...@umich.edu>: >> >> I agree that I'd rather see a 2.0.0 release sooner rather than later. >> Sounds like others have completed migrations to 2.0rc and there have been >> no red flags. >> >> joschen / artem, is there anything else that needs to be done? >> >> On Wednesday, May 22, 2019 at 10:14:45 AM UTC-5, Michael Zamani wrote: >>> >>> I'm curious if you all have a rough idea of how close we are to being >>> comfortable creating a 2.0.0 release, and if there's anything we can do at >>> Apple to help build confidence, if there's a need for that? >>> >>> I'm not sure if there's already discussion around this, or a rough >>> timeline you all already have in mind, but if we can help by upgrading some >>> of our apps and looking for issues (at least in our non-prod environments), >>> I can maybe dedicate some resources to doing that. >>> >> > -- > You received this message because you are subscribed to the Google Groups > "dropwizard-dev" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to dropwiz...@googlegroups.com <javascript:>. > To view this discussion on the web visit > https://groups.google.com/d/msgid/dropwizard-dev/e9ad011f-a9ba-4afb-8fb3-b76d5ffcf57d%40googlegroups.com > > <https://groups.google.com/d/msgid/dropwizard-dev/e9ad011f-a9ba-4afb-8fb3-b76d5ffcf57d%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > > > -- You received this message because you are subscribed to the Google Groups "dropwizard-dev" group. To unsubscribe from this group and stop receiving emails from it, send an email to dropwizard-dev+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/dropwizard-dev/e390f2ac-e35b-498c-8e81-5fd2642d8169%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
