Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

security: upgrade Spring related dependencies #6362

Merged
merged 2 commits into from
Feb 20, 2024

Conversation

slievrly
Copy link
Member

  • I have registered the PR changes.

Ⅰ. Describe what this PR did

upgrade Spring related dependencies

org.springframework.boot:spring-boot-autoconfigure
MPS-2022-62855

org.springframework:spring-webmvc
MPS-2022-62832

org.springframework:spring-expression
MPS-2022-62833
MPS-2022-62835

org.springframework.security:spring-security-crypto
MPS-2022-1106

org.springframework.security:spring-security-web
MPS-2022-1108

Ⅱ. Does this pull request fix one issue?

Ⅲ. Why don't you add test cases (unit test/integration test)?

Ⅳ. Describe how to verify it

Ⅴ. Special notes for reviews

@codecov-commenter
Copy link

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (b852a6c) 52.35% compared to head (2ae2d9e) 52.35%.
Report is 1 commits behind head on 2.x.

Additional details and impacted files

Impacted file tree graph

@@            Coverage Diff            @@
##                2.x    #6362   +/-   ##
=========================================
  Coverage     52.35%   52.35%           
- Complexity     5215     5218    +3     
=========================================
  Files           920      920           
  Lines         31942    31942           
  Branches       3815     3815           
=========================================
  Hits          16724    16724           
  Misses        13570    13570           
  Partials       1648     1648           

see 3 files with indirect coverage changes

@slievrly slievrly added this to the 2.1.0 milestone Feb 20, 2024
Copy link
Member

@xingfudeshi xingfudeshi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@xingfudeshi xingfudeshi merged commit c08345e into apache:2.x Feb 20, 2024
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

3 participants