slachiewicz opened a new pull request, #566: URL: https://github.com/apache/maven-build-cache-extension/pull/566
Test classpath only: wiremock 3.13.2, the latest 3.x, brings in jackson 2.20.1, handlebars 4.3.1 (GHSA-r4gv-qr8j-p3pg) and httpcore5 5.3.6, so they are managed to jackson 2.22.4, handlebars 4.5.8 and httpcore5 5.4.4. Nothing reaches the published extension. The jetty 11.0.26 advisories (GHSA-355h-qmc2-wpwf, GHSA-2fvj-hgj9-j2gr) stay: the 11.0.x fixes are not on Maven Central, and the 12.x fixes would need a major jetty migration inside wiremock. Verified: `mvn verify -Dinvoker.skip` → pass (107 tests) Part of apache/maven#13755 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
