From 60b5c4aa9f0a20796f53e07c0cc7a8a44211468b Mon Sep 17 00:00:00 2001 From: petruki <31597636+petruki@users.noreply.github.com> Date: Mon, 17 Apr 2023 21:04:03 -0700 Subject: [PATCH 1/2] Fixed vulnerability introduced by jackson libs --- README.md | 4 ++-- pom.xml | 20 +++++++++++++++++++- 2 files changed, 21 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index beb39ecd..4282d926 100644 --- a/README.md +++ b/README.md @@ -12,7 +12,7 @@ A Java SDK for Switcher API [![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=switcherapi_switcher-client&metric=alert_status)](https://sonarcloud.io/dashboard?id=switcherapi_switcher-client) [![Known Vulnerabilities](https://snyk.io/test/github/switcherapi/switcher-client/badge.svg?targetFile=pom.xml)](https://snyk.io/test/github/switcherapi/switcher-client?targetFile=pom.xml) [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT) -[![Maven Central](https://img.shields.io/maven-central/v/com.github.switcherapi/switcher-client.svg?label=Maven%20Central)](https://central.sonatype.com/artifact/com.github.switcherapi/switcher-client) +[![Maven Central](https://img.shields.io/maven-central/v/com.github.switcherapi/switcher-client.svg?label=Maven%20Central)](https://search.maven.org/search?q=g:%22com.github.switcherapi%22%20AND%20a:%22switcher-client%22) [![Slack: Switcher-HQ](https://img.shields.io/badge/slack-@switcher/hq-blue.svg?logo=slack)](https://switcher-hq.slack.com/) @@ -33,7 +33,7 @@ https://github.com/switcherapi/switcher-api # Usage -## Install +## Install - Using the source code `mvn clean install` - Adding as a dependency - Maven ```xml diff --git a/pom.xml b/pom.xml index a3ed1b13..2be898f3 100644 --- a/pom.xml +++ b/pom.xml @@ -8,7 +8,7 @@ com.github.switcherapi switcher-client jar - 2.0.0 + 2.0.1-SNAPSHOT Switcher Client Switcher Client SDK for working with Switcher API @@ -166,6 +166,24 @@ junit 4.13.1 + + + com.fasterxml.jackson.core + jackson-annotations + 2.14.2 + + + + com.fasterxml.jackson.core + jackson-databind + 2.14.2 + + + + com.fasterxml.jackson.module + jackson-module-jakarta-xmlbind-annotations + 2.14.2 + From ac3a093dbcd3493bc2b2212b0583e64f895fd527 Mon Sep 17 00:00:00 2001 From: petruki <31597636+petruki@users.noreply.github.com> Date: Mon, 17 Apr 2023 21:09:46 -0700 Subject: [PATCH 2/2] Release 2.0.1 sign off --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 2be898f3..76153091 100644 --- a/pom.xml +++ b/pom.xml @@ -8,7 +8,7 @@ com.github.switcherapi switcher-client jar - 2.0.1-SNAPSHOT + 2.0.1 Switcher Client Switcher Client SDK for working with Switcher API