From 0405934fbffa990a5281ec62117a2c6d3e02e709 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 7 Aug 2024 06:09:11 +0000 Subject: [PATCH] fix(deps): bump org.xerial.snappy:snappy-java from 1.1.10.5 to 1.1.10.6 Bumps [org.xerial.snappy:snappy-java](https://github.com/xerial/snappy-java) from 1.1.10.5 to 1.1.10.6. - [Release notes](https://github.com/xerial/snappy-java/releases) - [Commits](https://github.com/xerial/snappy-java/compare/v1.1.10.5...v1.1.10.6) --- updated-dependencies: - dependency-name: org.xerial.snappy:snappy-java dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- sda-commons-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sda-commons-dependencies/build.gradle b/sda-commons-dependencies/build.gradle index 7f23ab8a3..3d70d396d 100644 --- a/sda-commons-dependencies/build.gradle +++ b/sda-commons-dependencies/build.gradle @@ -60,7 +60,7 @@ dependencies { api 'io.github.classgraph:classgraph:4.8.174' api 'javax.ws.rs:javax.ws.rs-api:2.1.1' - api 'org.xerial.snappy:snappy-java:1.1.10.5', { + api 'org.xerial.snappy:snappy-java:1.1.10.6', { because 'fix CVE-2023-34455, CVE-2023-43642' }