chore(deps): Update dependencies#135
Conversation
|
Thank you very much for you contribution. At first glance the code looks very good, but I need to look at it in more detail. I will do it as soon as I can. Probably within the next week. |
|
Great job there on the POM. Thanks for your work @reneleonhardt. Looking forward to using this. |
|
Yeah, it wasn't easy to build on Apple Silicon, never had to use this profile trick before 😅 |
|
@reneleonhardt Do you plan to incorporate the suggested changes? If you don't mind, I could do that and finish the pull request. |
It's your project, you can do what you want, I'm glad that you at least plan to merge my work 😅 👍 |
|
I updated some more dependencies (my last updates were a month ago, so of course there already were a dozen more updates 😅). Isn't it possible to update embedded-postgres-binaries to 16, it has to stay on 14? |
Great, I like it.
It should run automatically, but not when there are changes in GitHub workflows.
This is also a potentially backwards incompatible change. So I would rather change it in the next major version. |
|
Isn't it possible to update Flyway 7 to 9? 2 years newer and fewer security vulnerabilities... |
Ok, great idea, let's do it. We could also update liquibase-core. Both libraries are optional dependencies, so updating them should be safe. I would propose the following versions:
After this change, I'm going to merge the pull request. |
|
I've just noticed that you've already updated liquibase-core. The major version is still the same, so let's keep the latest version there. |
|
Oh, I didn't know that you didn't want to squash, that's not a meaningful commit history... 😢 |
|
Don't worry, this project isn't so big yet that a few commits would cause any problems 🙂 Thank you very much for all your effort. I really appreciate it. It's great to see others contributing to the project. |
|
You're welcome, feels good to be appreciated, most projects don't allow any updates or security fixes. |
|
@tomix26 I'm trying to update zonkyio/embedded-database-spring-test#279 too which isn't easier when tests are not running locally... can you tag 2.1.0? |
|
If you mean releasing a new version, I'll try to do that during this week. |
Updates
Fixes
LC_ALLfor Unix (otherwise initidb fails), my Mac has nothing set 😅Improvements
maven-enforcer-plugindependencyConvergence (fixes Version 2.0.7 includes conflicting dependency versions #133)Recommendations
maven-gpg-pluginand check release