ed04f46b27
Merge branch 'cassandra-4.1' into cassandra-5.0
2025-09-26 16:08:54 +02:00
0026c0dc4c
Update OWASP dependency-check to 12.1.6, suppress unrelevant CVEs
...
patch by Stefan Miklosovic; reviewed by Brandon Williams for CASSANDRA-20924
2025-09-26 16:02:06 +02:00
a52d2ce783
Update jackson-dataformat-yaml to 2.19.2 and snakeyaml to 2.1
...
This is backport of CASSANDRA-18875 to 5.0 where we upgrade 2.1 of snakeyaml and bump jackson-dataformat-yaml to 2.19.2.
The change in trunk (5.1) is about excluding Jackson dependencies from wiremock so 2.19.2 of Jackson is used everywhere in test as well,
otherwise there would be Jackson annotations of 2.13.4 used.
patch by Raymond Huffman; reviewed by Mick Semb Wever and Stefan Miklosovic for CASSANDRA-18875
Co-authored-by: Griffin Davis <gcd@ibm.com>
2025-09-19 13:29:05 +02:00
af0197e195
Merge branch 'cassandra-4.1' into cassandra-5.0
2025-08-25 17:41:43 +02:00
f9dbfd431e
Update Jackson to 2.19.2
...
patch by Stefan Miklosovic; reviewed by Brandon Williams for CASSANDRA-20848
2025-08-25 17:34:38 +02:00
7076623ac7
Merge branch 'cassandra-4.1' into cassandra-5.0
2025-04-02 12:07:43 +02:00
73f0e2e401
Suppress CVE-2025-25193
...
patch by Stefan Miklosovic; reviewed by Michael Semb Wever, Brandon Williams for CASSANDRA-20504
2025-04-02 11:52:11 +02:00
11eb601352
Merge branch 'cassandra-4.1' into cassandra-5.0
...
* cassandra-4.1:
ninja-fix – python2 compat on .build/generate-snyk-file
2025-03-30 14:03:01 +02:00
e2a881959b
ninja-fix – python2 compat on .build/generate-snyk-file
...
debian packaging still uses python2
redhat packaging clobbers the exec bit on git clones
2025-03-30 13:55:41 +02:00
1311766ad1
Merge branch 'cassandra-4.1' into cassandra-5.0
...
* cassandra-4.1:
Autogenerate toplevel .snyk file from owasp suppressions
2025-03-30 09:32:10 +02:00
9abed87ba4
Autogenerate toplevel .snyk file from owasp suppressions
...
patch by Mick Semb Wever; reviewed by Brandon Williams for CASSANDRA-20319
2025-03-30 09:27:39 +02:00
Stefan Miklosovic