Commit Graph

17 Commits

Author SHA1 Message Date
Stefan Miklosovic 56c3d72fe8
Merge branch 'cassandra-5.0' into trunk 2026-02-17 11:46:44 +11:00
Stefan Miklosovic 60c7f05138
Cleanup of dependency-check-suppressions.xml, suppressing CVE-2025-67735
patch by Stefan Miklosovic; reviewed by Michael Semb Wever for CASSANDRA-21159
2026-02-17 11:40:01 +11:00
Stefan Miklosovic f96353cfd1
Merge branch 'cassandra-5.0' into trunk 2025-09-26 16:15:08 +02:00
Stefan Miklosovic ed04f46b27
Merge branch 'cassandra-4.1' into cassandra-5.0 2025-09-26 16:08:54 +02:00
Raymond Huffman a52d2ce783
Update jackson-dataformat-yaml to 2.19.2 and snakeyaml to 2.1
This is backport of CASSANDRA-18875 to 5.0 where we upgrade 2.1 of snakeyaml and bump jackson-dataformat-yaml to 2.19.2.

The change in trunk (5.1) is about excluding Jackson dependencies from wiremock so 2.19.2 of Jackson is used everywhere in test as well,
otherwise there would be Jackson annotations of 2.13.4 used.

patch by Raymond Huffman; reviewed by Mick Semb Wever and Stefan Miklosovic for CASSANDRA-18875

Co-authored-by: Griffin Davis <gcd@ibm.com>
2025-09-19 13:29:05 +02:00
Stefan Miklosovic 9598a96512
Merge branch 'cassandra-5.0' into trunk 2025-08-25 17:44:58 +02:00
Stefan Miklosovic af0197e195
Merge branch 'cassandra-4.1' into cassandra-5.0 2025-08-25 17:41:43 +02:00
Stefan Miklosovic 9d6c3c43b8
Merge branch 'cassandra-5.0' into trunk 2025-04-02 12:11:24 +02:00
Stefan Miklosovic 7076623ac7
Merge branch 'cassandra-4.1' into cassandra-5.0 2025-04-02 12:07:43 +02:00
Brandon Williams e640fbf384 Merge branch 'cassandra-5.0' into trunk 2025-03-11 15:12:37 -05:00
Brandon Williams d509d2fcbe Suppress CVE-2024-12801
Patch by brandonwilliams; reviewed by smiklosovic for CASSANDRA-20412
2025-03-11 15:12:11 -05:00
Brandon Williams f414a3ef3e Merge branch 'cassandra-5.0' into trunk 2025-03-11 15:09:00 -05:00
Brandon Williams 0e0ff79dd6 Suppress CVE-2024-12798
Patch by brandonwilliams; reviewed by smiklosovic for CASSANDRA-20408
2025-03-11 15:08:25 -05:00
mck 916486b34e
Merge branch 'cassandra-5.0' into trunk
* cassandra-5.0:
  Suppress CVE-2024-45772 lucene-core-9.7.0.jar
2024-10-29 12:44:35 +01:00
mck 3550b88307
Suppress CVE-2024-45772 lucene-core-9.7.0.jar
CVE in Lucene Replicator which the project doesn't use.

 patch by Mick Semb Wever; reviewed by Brandon Williams, Caleb Rackliffe for CASSANDRA-20024
2024-10-29 12:40:55 +01:00
Jacek Lewandowski 6fb2de3c95 Merge branch 'cassandra-5.0' into trunk
* cassandra-5.0:
  Updated the OWASP plugin to 9.0.5 and refactored dependency checks
2023-12-20 12:59:57 +01:00
Jacek Lewandowski 790798dea0 Merge branch 'cassandra-4.1' into cassandra-5.0
* cassandra-4.1:
  Updated the OWASP plugin to 9.0.5 and refactored dependency checks
2023-12-20 12:59:55 +01:00