Skip to content

2.8.8 CVE fixes in transitive dependencies on top of 2.8.7

Choose a tag to compare

View all tags
@github-actions github-actions released this 05 Jun 09:40
· 10 commits to main since this release
2.8.8
97d7f06
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Fixed two CVEs in transitive dependencies: CVE-2025-48734 and CVE-2025-47436.

Features

Dependency Updates

Cloud Storage Extension

Compile Dependency Updates

  • Added commons-beanutils:commons-beanutils:1.11.0
  • Updated org.apache.orc:orc-core:1.9.5 to 1.9.6

Plugin Dependency Updates

  • Updated com.exasol:project-keeper-maven-plugin:5.0.0 to 5.1.0
  • Added io.github.git-commit-id:git-commit-id-maven-plugin:9.0.1
  • Removed io.github.zlika:reproducible-build-maven-plugin:0.17
  • Added org.apache.maven.plugins:maven-artifact-plugin:3.6.0
  • Updated org.apache.maven.plugins:maven-failsafe-plugin:3.5.2 to 3.5.3
  • Updated org.apache.maven.plugins:maven-surefire-plugin:3.5.2 to 3.5.3
  • Updated org.jacoco:jacoco-maven-plugin:0.8.12 to 0.8.13
  • Updated org.sonarsource.scanner.maven:sonar-maven-plugin:5.0.0.4389 to 5.1.0.4751
Assets 8
Loading