Skip to content

fix(deps): update jsoup 1.10.3 → 1.17.2#47

Merged
tolgakaratas merged 1 commit into
mainfrom
fix/jsoup-update
Apr 6, 2026
Merged

fix(deps): update jsoup 1.10.3 → 1.17.2#47
tolgakaratas merged 1 commit into
mainfrom
fix/jsoup-update

Conversation

@tolgakaratas
Copy link
Copy Markdown
Contributor

Summary

  • Update jsoup from 1.10.3 to 1.17.2 to fix security vulnerabilities
  • Update HtmlTools.java NodeTraversor API for jsoup 1.17 compatibility
  • Fix Makefile audit to scan build/ directory only

Vulnerabilities Fixed

Verification

make build && make audit && make check
# → BUILD SUCCESSFUL
# → No vulnerabilities found in build/

- Update jsoup to 1.17.2 to fix multiple security vulnerabilities
- Update HtmlTools.java NodeTraversor API usage for jsoup 1.17 compatibility
- Also fix Makefile audit to scan build/ directory only (was reverted)

Fixes: GHSA-m72m-mhq2-9p6c, GHSA-gp7f-rwcx-9369
@github-actions github-actions Bot added ci CI/CD changes build Build system changes java Java source changes docs Documentation dependencies Dependency updates labels Apr 6, 2026
@tolgakaratas tolgakaratas merged commit e1bfeb1 into main Apr 6, 2026
58 checks passed
@tolgakaratas tolgakaratas deleted the fix/jsoup-update branch April 6, 2026 17:53
tolgakaratas pushed a commit that referenced this pull request Apr 27, 2026
🤖 I have created a release *beep* *boop*
---


##
[1.3.4](v1.3.3...v1.3.4)
(2026-04-06)


### Bug Fixes

* add missing CodeQL permissions to release-please validate job
([#39](#39))
([f6f8bc3](f6f8bc3))
* critical security fixes and agent compliance enforcement
([#38](#38))
([c21b7cc](c21b7cc))
* **deps:** update jsoup 1.10.3 → 1.17.2
([#47](#47))
([e1bfeb1](e1bfeb1))
* release lock on InterruptedException in ServerCommunication
([#43](#43))
([7b332c5](7b332c5))
* resolve CodeQL phase 2 security and quality alerts
([#41](#41))
([056df0f](056df0f))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

build Build system changes ci CI/CD changes dependencies Dependency updates docs Documentation java Java source changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant