honeymoose
/
hapi-fhir
mirror of https://github.com/hapifhir/hapi-fhir.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Bump thymeleaf version

This commit is contained in:
jamesagnew 2021-11-30 11:05:49 -05:00
parent 76685ad691
commit 0099749a27
2 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
hapi-fhir-docs/src/main/resources/ca/uhn/hapi/fhir/changelog/5_7_0/changes.yaml Normal file
View File

@ -0,0 +1,10 @@
---
- item:
type: "add"
title: "The version of a few dependencies have been bumped to the latest versions
(dependent HAPI modules listed in brackets):
<ul>
<li>Thymeleaf (Testpage Overlay): 3.0.12.RELEASE -> 3.0.13.RELEASE (Addresses CVE-2021-43466)</li>
</ul>
"

2
pom.xml
View File

@ -841,7 +841,7 @@
<stax2_api_version>3.1.4</stax2_api_version>
<testcontainers_version>1.16.0</testcontainers_version>
<thymeleaf-version>3.0.12.RELEASE</thymeleaf-version>
<thymeleaf-version>3.0.13.RELEASE</thymeleaf-version>
<woodstox_core_asl_version>4.4.1</woodstox_core_asl_version>
<!-- We are aiming to still work on a very old version of SLF4j even though we depend on the newest, just to be nice to users of the API. This version is tested in the hapi-fhir-cobertura. -->