dejan2609 opened a new pull request, #22939:
URL: https://github.com/apache/kafka/pull/22939
details:
- bcpkix: 1.84 -->> 1.85
- jgit: 7.6.0 -->> 7.7.1
- junit: 5.14.3 -->> 5.14.4
- junitPlatform: 1.14.3 -->> 1.14.4
- mavenArtifact: 3.9.15 -->> 3.9.16
- swagger: 2.2.48 -->> 2.2.52
- Gradle plugins:
- dependencycheck: 12.2.1 -->> 12.2.2
- spotbugs: 6.5.1 -->> 6.5.9
- scoverage: 8.1 -->> 9.1
- shadow: 9.4.1 -->> 9.6.1
CVEs addressed via bcpkix and jgit version updates:
- bcpkix: several vulnerabilities are addressed:
https://github.com/bcgit/bc-java/blob/r1rv85/docs/releasenotes.html#L330
- JGit: these two vulnerabilities are addressed:
- CVE-2026-44432
- https://www.cve.org/CVERecord?id=CVE-2026-44432
-
https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j
- CVE-2026-56624
- https://www.cve.org/CVERecord?id=CVE-2026-56624
- https://lists.apache.org/thread/o4c2jml522j3z80gbryqzc2f1253ltp6
Some notable release notes links:
- bcpkix:
https://github.com/bcgit/bc-java/blob/r1rv85/docs/releasenotes.html#L22
- JGit:
- https://projects.eclipse.org/projects/technology.jgit/releases/7.7.0
- https://projects.eclipse.org/projects/technology.jgit/releases/7.7.1
- scoverage gradle plugin:
- https://github.com/scoverage/gradle-scoverage/releases/tag/9.0
- https://github.com/scoverage/gradle-scoverage/releases/tag/9.0
- shadow gradle plugin: https://gradleup.com/shadow/changes/#961-2026-07-22
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
