Commit 78947c0
authored
Bump org.assertj:assertj-core from 3.27.6 to 3.27.7 (#401)
Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj)
from 3.27.6 to 3.27.7.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/assertj/assertj/releases">org.assertj:assertj-core's
releases</a>.</em></p>
<blockquote>
<h2>v3.27.7</h2>
<h2>:lock: Security</h2>
<h3>Core</h3>
<ul>
<li>Fix XXE vulnerability in <code>isXmlEqualTo</code> assertion
(CVE-2026-24400)
<ul>
<li>See <a
href="https://github.com/assertj/assertj/security/advisories/GHSA-rqfh-9r24-8c9r">GHSA-rqfh-9r24-8c9r</a>
for details; many thanks to <a
href="https://github.com/wxt201"><code>@wxt201</code></a> and <a
href="https://github.com/Song-Li"><code>@Song-Li</code></a> for
responsibly reporting it!</li>
</ul>
</li>
</ul>
<h2>:no_entry_sign: Deprecated</h2>
<h3>Core</h3>
<ul>
<li>Deprecate <code>XmlStringPrettyFormatter</code> with no
replacement</li>
</ul>
<h2>:bug: Bug Fixes</h2>
<h3>Guava</h3>
<ul>
<li>Navigation to <code>assertj-core</code> or <code>guava</code> types
from <code>assertj-guava</code> Javadoc site has unnecessary header <a
href="https://redirect.github.com/assertj/assertj/issues/3478">#3478</a></li>
</ul>
<h2>:hammer: Dependency Upgrades</h2>
<h3>Core</h3>
<ul>
<li>Upgrade to Byte Buddy 1.18.3</li>
<li>Upgrade to JUnit BOM 5.14.1</li>
</ul>
<h3>Guava</h3>
<ul>
<li>Upgrade to Guava 33.5.0-jre</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/assertj/assertj/commit/e84071667f5f8f13084af9dfa54cee5fd9db18db"><code>e840716</code></a>
[maven-release-plugin] prepare release assertj-build-3.27.7</li>
<li><a
href="https://github.com/assertj/assertj/commit/85ca7eb6609bb179c043b85ae7d290523b1ba79a"><code>85ca7eb</code></a>
Deprecate <code>XmlStringPrettyFormatter</code></li>
<li><a
href="https://github.com/assertj/assertj/commit/77081dc5eb107141df80f95bd0149b468e451341"><code>77081dc</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/assertj/assertj/commit/b68fc24a9de28f28a486fc5b887c1b8a003a5823"><code>b68fc24</code></a>
Bump github/codeql-action from 4.31.9 to 4.31.10 in the github-actions
group ...</li>
<li><a
href="https://github.com/assertj/assertj/commit/0cf5bb6c50f6ead3deaa2a2ff50ef1e7d933c8a3"><code>0cf5bb6</code></a>
Bump <code>kotlin.version</code> from 2.1.0 to 2.2.21</li>
<li><a
href="https://github.com/assertj/assertj/commit/d393ef1f5e48c89d47d7cf6d1eae359ceda0a126"><code>d393ef1</code></a>
Abort tests when symbolic links cannot be created (<a
href="https://redirect.github.com/assertj/assertj/issues/3788">#3788</a>)</li>
<li><a
href="https://github.com/assertj/assertj/commit/22124331e9922af5a43ab50f7a9a25b65be53be1"><code>2212433</code></a>
Add IntelliJ custom inspection for test class names</li>
<li><a
href="https://github.com/assertj/assertj/commit/5717d025cfe0f4c66de20f3253c0b0ecba259aa1"><code>5717d02</code></a>
Update JetBrains icon</li>
<li><a
href="https://github.com/assertj/assertj/commit/a8ec20bd42ed01f9cc6f654046c7dd424b0af07c"><code>a8ec20b</code></a>
Add icon for JetBrains products</li>
<li><a
href="https://github.com/assertj/assertj/commit/c05fb3d052b415fb2d6051df939f3b7903a76afe"><code>c05fb3d</code></a>
Bump Maven to 3.9.12 and Wrapper to 3.3.4</li>
<li>Additional commits viewable in <a
href="https://github.com/assertj/assertj/compare/assertj-build-3.27.6...assertj-build-3.27.7">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>1 parent 33ed9a7 commit 78947c0
1 file changed
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | 1 | | |
2 | | - | |
| 2 | + | |
3 | 3 | | |
4 | 4 | | |
5 | 5 | | |
| |||
0 commit comments