Skip to content

Commit 28edfcf

Browse files
committed
Merge main and fix Jackson CVE + cglib Java 17 issue
Merged origin/main to get latest features (SSH key storage, multi-node auth). Security fix: - Jackson updated to 2.18.6 (from 2.16.1) - fixes GHSA-72hv-8253-57qq Java 17 compatibility: - Replace cglib-nodep 3.3.0 with ByteBuddy 1.14.11 (cglib unmaintained, no Java 17 support) - Update objenesis 1.4 -> 3.4 for Java 17 - ByteBuddy is Spock 2.4's recommended mock maker for Java 17+ All 126 tests passing.
1 parent 38347f5 commit 28edfcf

2 files changed

Lines changed: 4 additions & 4 deletions

File tree

build.gradle

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -94,7 +94,7 @@ dependencies {
9494
testAnnotationProcessor libs.lombok
9595

9696
testImplementation libs.spock.core
97-
testImplementation libs.cglib.nodep
97+
testImplementation libs.bytebuddy
9898
testImplementation libs.objenesis
9999

100100
}

gradle/libs.versions.toml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -14,8 +14,8 @@ spock = "2.4-groovy-4.0"
1414
testcontainers = "1.19.0"
1515
rd-api-client = "2.0.8"
1616
jsch = "0.1.55"
17-
cglib = "3.3.0"
18-
objenesis = "1.4"
17+
bytebuddy = "1.14.11"
18+
objenesis = "3.4"
1919

2020
# Rundeck version
2121
rundeck-core = "6.0.0-SNAPSHOT"
@@ -39,5 +39,5 @@ testcontainers-spock = { module = "org.testcontainers:spock", version.ref = "tes
3939
rd-api-client = { module = "org.rundeck.api:rd-api-client", version.ref = "rd-api-client" }
4040
jsch = { module = "com.jcraft:jsch", version.ref = "jsch" }
4141
rundeck-core = { module = "org.rundeck:rundeck-core", version.ref = "rundeck-core" }
42-
cglib-nodep = { module = "cglib:cglib-nodep", version.ref = "cglib" }
42+
bytebuddy = { module = "net.bytebuddy:byte-buddy", version.ref = "bytebuddy" }
4343
objenesis = { module = "org.objenesis:objenesis", version.ref = "objenesis" }

0 commit comments

Comments
 (0)