From 143ed99672d130ac8370f4b8796208962dd5a8a5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 1 Jun 2024 10:24:08 +0000 Subject: [PATCH] Build(deps): Bump com.google.guava:guava from 33.2.0-jre to 33.2.1-jre Bumps [com.google.guava:guava](https://github.com/google/guava) from 33.2.0-jre to 33.2.1-jre. - [Release notes](https://github.com/google/guava/releases) - [Commits](https://github.com/google/guava/commits) --- updated-dependencies: - dependency-name: com.google.guava:guava dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- jarhc/build.gradle.kts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/jarhc/build.gradle.kts b/jarhc/build.gradle.kts index 612d4773..7f8b92f0 100644 --- a/jarhc/build.gradle.kts +++ b/jarhc/build.gradle.kts @@ -161,7 +161,7 @@ dependencies { // fix vulnerabilities in transitive dependencies // fix CVE-2018-10237 and CVE-2020-8908 - implementation("com.google.guava:guava:33.2.0-jre") + implementation("com.google.guava:guava:33.2.1-jre") // fix CVE-2015-5262 and CVE-2020-13956 implementation("org.apache.httpcomponents:httpclient:4.5.14") // fix https://github.com/codehaus-plexus/plexus-utils/issues/3