From b1bfcfdecc46889820d154f79e58c71a47bad06a Mon Sep 17 00:00:00 2001 From: Oliver Schmitz-Hennemann Date: Tue, 25 Mar 2025 15:52:43 +0100 Subject: [PATCH 1/2] Update Spring Framework to 5.3.31 to fix security vulnerability --- pom.xml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/pom.xml b/pom.xml index b554e48..d9d61cf 100644 --- a/pom.xml +++ b/pom.xml @@ -5,7 +5,7 @@ base64-url-decoder 1.3-SNAPSHOT jar - Spring Base64 Url Decoder + Spring Base64 Url Decoder org.sonatype.oss @@ -14,13 +14,13 @@ - Immobilien Scout GmbH + Immobilien Scout GmbH http://www.immobilienscout24.de jrummler - Jens Rummler + Jens Rummler https://github.com/jrummler @@ -31,7 +31,7 @@ HEAD - travis + travis https://travis-ci.org/ImmobilienScout24/spring-base64-url-decoder @@ -39,13 +39,13 @@ https://github.com/ImmobilienScout24/spring-base64-url-decoder - MIT License + MIT License http://www.opensource.org/licenses/mit-license.php - 4.0.5.RELEASE + 5.3.31 0.7.2.201409121644 3.0.1 From 1c9d5993501ab44f01e0a9e22108de9d3be43841 Mon Sep 17 00:00:00 2001 From: Oliver Schmitz-Hennemann Date: Tue, 25 Mar 2025 15:52:50 +0100 Subject: [PATCH 2/2] Add Dependabot configuration for automated dependency updates --- .github/dependabot.yml | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..ec4f5c1 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,7 @@ +version: 2 +updates: + - package-ecosystem: "maven" + directory: "/" + schedule: + interval: "weekly" + open-pull-requests-limit: 10