Skip to content

Commit 3c3d989

Browse files
fix(deps): bump spring-boot to 4.0.7 to resolve spring-webmvc/spring-webflux GHSA-mq64-j8f9-9gcj
This resolves Dependabot alerts #117 and #118 for spring-webmvc and spring-webflux respectively. Both vulnerabilities (GHSA-mq64-j8f9-9gcj) are in Spring Framework 7.0.7 and earlier. Spring Boot 4.0.7 is the earliest 4.0.x patch release that manages Spring Framework 7.0.8+. Co-Authored-By: Catarina Correia <catarina.correia@getyourguide.com>
1 parent cbf47d4 commit 3c3d989

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

gradle/libs.versions.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
[versions]
22
java = "21"
3-
spring-boot = "4.0.6"
3+
spring-boot = "4.0.7"
44
spring-dependency-management = "1.1.7"
55
openapi-generator = "7.21.0"
66
openapi-tools = "0.2.9"

0 commit comments

Comments
 (0)