From 6b39e5bb728452ab3cbc6908da9351514b13aef1 Mon Sep 17 00:00:00 2001 From: Les Hazlewood <121180+lhazlewood@users.noreply.github.com> Date: Thu, 11 Jul 2019 19:57:19 -0400 Subject: [PATCH] Issue 450: prepping docs for the 0.10.7 release. Fixes #450. --- CHANGELOG.md | 11 ++++++++--- README.md | 22 +++++++++++----------- 2 files changed, 19 insertions(+), 14 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 31c9331d..2b6574df 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,14 +2,19 @@ ### 0.10.7 -This patch release fixes a [memory leak](https://github.com/jwtk/jjwt/issues/392) found in the DEFLATE compression +This patch release: + +* Adds a new [Community section](https://github.com/jwtk/jjwt#community) in the documentation discussing asking + questions, using Slack and Gittr, and opening new issues and pull requests. +* Fixes a [memory leak](https://github.com/jwtk/jjwt/issues/392) found in the DEFLATE compression codec implementation. - -It also updates the Jackson dependency version to [2.9.9.1](https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9#patches) +* Updates the Jackson dependency version to [2.9.9.1](https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9#patches) to address three security vulnerabilities in Jackson: [CVE-2019-12086](https://nvd.nist.gov/vuln/detail/CVE-2019-12086), [CVE-2019-12384](https://nvd.nist.gov/vuln/detail/CVE-2019-12384), and [CVE-2019-12814](https://nvd.nist.gov/vuln/detail/CVE-2019-12814). +* Fixes a [bug](https://github.com/jwtk/jjwt/issues/397) when Jackson is in the classpath but the `jjwt-jackson` .jar is not. +* Fixes various documentation and typo fixes. ### 0.10.6 diff --git a/README.md b/README.md index d5ba91bd..779c2508 100644 --- a/README.md +++ b/README.md @@ -260,18 +260,18 @@ If you're building a (non-Android) JDK project, you will want to define the foll io.jsonwebtoken jjwt-api - 0.10.5 + 0.10.7 io.jsonwebtoken jjwt-impl - 0.10.5 + 0.10.7 runtime io.jsonwebtoken jjwt-jackson - 0.10.5 + 0.10.7 runtime ``` @@ -1282,7 +1282,7 @@ scope which is the typical JJWT default). That is: ```groovy dependencies { - compile 'io.jsonwebtoken:jjwt-jackson:0.10.5' + compile 'io.jsonwebtoken:jjwt-jackson:0.10.7' } ```