Skip to content

Fix security issues 2#377

Merged
vbragin merged 9 commits into
masterfrom
fix-sec-2
Jun 18, 2025
Merged

Fix security issues 2#377
vbragin merged 9 commits into
masterfrom
fix-sec-2

Conversation

@vbragin

@vbragin vbragin commented Jun 18, 2025

Copy link
Copy Markdown
Contributor

No description provided.

Vitalii and others added 5 commits June 18, 2025 11:20
Bumps `spring.version` from 6.2.5 to 6.2.8.

Updates `org.springframework:spring-beans` from 6.2.5 to 6.2.8
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.5...v6.2.8)

Updates `org.springframework:spring-context` from 6.2.5 to 6.2.8
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.5...v6.2.8)

---
updated-dependencies:
- dependency-name: org.springframework:spring-beans
  dependency-version: 6.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.springframework:spring-context
  dependency-version: 6.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
#372)

Bumps [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) from 4.7.3.6 to 4.9.3.0.
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.7.3.6...spotbugs-maven-plugin-4.9.3.0)

---
updated-dependencies:
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-version: 4.9.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
#373)

Bumps [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) from 2.44.4 to 2.44.5.
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@maven/2.44.4...maven/2.44.5)

---
updated-dependencies:
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 2.44.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [org.apache.maven.plugins:maven-checkstyle-plugin](https://github.com/apache/maven-checkstyle-plugin) from 3.3.1 to 3.6.0.
- [Release notes](https://github.com/apache/maven-checkstyle-plugin/releases)
- [Commits](apache/maven-checkstyle-plugin@maven-checkstyle-plugin-3.3.1...maven-checkstyle-plugin-3.6.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-checkstyle-plugin
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Comment thread src/main/java/io/qameta/allure/bamboo/AllureReportServlet.java Dismissed
Comment thread src/main/java/io/qameta/allure/bamboo/AllureReportServlet.java Dismissed
Vitalii and others added 4 commits June 18, 2025 11:50
Bumps [com.atlassian.plugins:atlassian-plugins-osgi-javaconfig](https://bitbucket.org/atlassian/atlassian-plugins-osgi-javaconfig) from 0.2.0 to 0.6.0.
- [Commits](https://bitbucket.org/atlassian/atlassian-plugins-osgi-javaconfig/commits)

---
updated-dependencies:
- dependency-name: com.atlassian.plugins:atlassian-plugins-osgi-javaconfig
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Vitalii Bragin <[email protected]>
…n permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
…n permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
@vbragin
vbragin merged commit c57f492 into master Jun 18, 2025
5 checks passed
@baev
baev deleted the fix-sec-2 branch June 18, 2025 09:52
@baev baev added pr:improvement Pull requests that improve existing behavior without adding a new feature. and removed type:improvement labels Jul 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

pr:improvement Pull requests that improve existing behavior without adding a new feature.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants