Update flexmark-all to latest 0.64.8#809
Conversation
|
Ah I see now that this would mean dropping java 8, as flexmark 0.64.0 made java 11 the minimum required version. Not sure if mdoc is ready to do that yet, but I'll leave this open for now until someone says "no" 🙂 |
|
I think we might start dropping support for Java 8. If anyone needs it to work on Java 8 they can always use an older version of the library. If they care about bugfixes and CVE they should start working on JDK 11. We mdoc in Metals, but I plan to migrate to use Java 17 by default. Could you remove the CI jobs for JDK 8? |
Absolutely, done! |
|
I also updated |
|
@tgodzik it looks like dropping java 8 might also necessitate dropping scala 2.12... What do you think about that? |
Co-authored-by: Tomasz Godzik <[email protected]>
|
CI failure looks like an intermittent HTTP error |
This would eliminate a number of CVEs from the transitive
org.apache.pdfbox:pdfboxdependency. It's currently v2.0.16, but by upgradingflexmark-allit would become v2.0.24, which has patched all of these vulnerabilities