From c1a92cdb26f156ee04b30c5200208fe8c744edbc Mon Sep 17 00:00:00 2001 From: Tom Longridge Date: Mon, 20 Sep 2021 16:11:18 +0100 Subject: [PATCH 1/2] fix: bump jackson dep from 2.9.1 to latest stable --- CHANGELOG.md | 5 +++++ bugsnag/build.gradle | 2 +- 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index d7b253df..b5642bec 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,10 @@ # Changelog +## TBD + +* Bump Jackson from 2.9.1 for critical vulnerability fixes + [#170](https://github.com/bugsnag/bugsnag-java/pull/170) + ## 3.6.2 (2020-11-10) * Fix JVM hang when System.exit or bugsnag.close is not called diff --git a/bugsnag/build.gradle b/bugsnag/build.gradle index 215afc8e..0f07e1ee 100644 --- a/bugsnag/build.gradle +++ b/bugsnag/build.gradle @@ -10,7 +10,7 @@ repositories { } dependencies { - compile "com.fasterxml.jackson.core:jackson-databind:2.9.1" + compile "com.fasterxml.jackson.core:jackson-databind:2.12.5" compile "org.slf4j:slf4j-api:1.7.25" compileOnly "javax.servlet:javax.servlet-api:${servletApiVersion}" compileOnly("ch.qos.logback:logback-classic:${logbackVersion}") { From 2c0248699e595f4c0d33e8d61cbe09a7621ecef1 Mon Sep 17 00:00:00 2001 From: Tom Longridge Date: Mon, 11 Oct 2021 17:04:56 +0100 Subject: [PATCH 2/2] Bump version for release v3.6.3 --- CHANGELOG.md | 2 +- bugsnag/src/main/java/com/bugsnag/Notifier.java | 2 +- gradle.properties | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index b5642bec..fb58c553 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,6 @@ # Changelog -## TBD +## 3.6.3 (2021-10-12) * Bump Jackson from 2.9.1 for critical vulnerability fixes [#170](https://github.com/bugsnag/bugsnag-java/pull/170) diff --git a/bugsnag/src/main/java/com/bugsnag/Notifier.java b/bugsnag/src/main/java/com/bugsnag/Notifier.java index ac8f6d6c..8f838e34 100644 --- a/bugsnag/src/main/java/com/bugsnag/Notifier.java +++ b/bugsnag/src/main/java/com/bugsnag/Notifier.java @@ -5,7 +5,7 @@ class Notifier { private static final String NOTIFIER_NAME = "Bugsnag Java"; - private static final String NOTIFIER_VERSION = "3.6.2"; + private static final String NOTIFIER_VERSION = "3.6.3"; private static final String NOTIFIER_URL = "https://github.com/bugsnag/bugsnag-java"; private String notifierName = NOTIFIER_NAME; diff --git a/gradle.properties b/gradle.properties index 9b0305eb..56ad87b6 100644 --- a/gradle.properties +++ b/gradle.properties @@ -1,4 +1,4 @@ -version=3.6.2 +version=3.6.3 group=com.bugsnag # Default properties