Skip to content

Commit 78947c0

Browse files
Bump org.assertj:assertj-core from 3.27.6 to 3.27.7 (#401)
Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.27.6 to 3.27.7. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/assertj/assertj/releases">org.assertj:assertj-core's releases</a>.</em></p> <blockquote> <h2>v3.27.7</h2> <h2>:lock: Security</h2> <h3>Core</h3> <ul> <li>Fix XXE vulnerability in <code>isXmlEqualTo</code> assertion (CVE-2026-24400) <ul> <li>See <a href="https://github.com/assertj/assertj/security/advisories/GHSA-rqfh-9r24-8c9r">GHSA-rqfh-9r24-8c9r</a> for details; many thanks to <a href="https://github.com/wxt201"><code>@​wxt201</code></a> and <a href="https://github.com/Song-Li"><code>@​Song-Li</code></a> for responsibly reporting it!</li> </ul> </li> </ul> <h2>:no_entry_sign: Deprecated</h2> <h3>Core</h3> <ul> <li>Deprecate <code>XmlStringPrettyFormatter</code> with no replacement</li> </ul> <h2>:bug: Bug Fixes</h2> <h3>Guava</h3> <ul> <li>Navigation to <code>assertj-core</code> or <code>guava</code> types from <code>assertj-guava</code> Javadoc site has unnecessary header <a href="https://redirect.github.com/assertj/assertj/issues/3478">#3478</a></li> </ul> <h2>:hammer: Dependency Upgrades</h2> <h3>Core</h3> <ul> <li>Upgrade to Byte Buddy 1.18.3</li> <li>Upgrade to JUnit BOM 5.14.1</li> </ul> <h3>Guava</h3> <ul> <li>Upgrade to Guava 33.5.0-jre</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/assertj/assertj/commit/e84071667f5f8f13084af9dfa54cee5fd9db18db"><code>e840716</code></a> [maven-release-plugin] prepare release assertj-build-3.27.7</li> <li><a href="https://github.com/assertj/assertj/commit/85ca7eb6609bb179c043b85ae7d290523b1ba79a"><code>85ca7eb</code></a> Deprecate <code>XmlStringPrettyFormatter</code></li> <li><a href="https://github.com/assertj/assertj/commit/77081dc5eb107141df80f95bd0149b468e451341"><code>77081dc</code></a> Merge commit from fork</li> <li><a href="https://github.com/assertj/assertj/commit/b68fc24a9de28f28a486fc5b887c1b8a003a5823"><code>b68fc24</code></a> Bump github/codeql-action from 4.31.9 to 4.31.10 in the github-actions group ...</li> <li><a href="https://github.com/assertj/assertj/commit/0cf5bb6c50f6ead3deaa2a2ff50ef1e7d933c8a3"><code>0cf5bb6</code></a> Bump <code>kotlin.version</code> from 2.1.0 to 2.2.21</li> <li><a href="https://github.com/assertj/assertj/commit/d393ef1f5e48c89d47d7cf6d1eae359ceda0a126"><code>d393ef1</code></a> Abort tests when symbolic links cannot be created (<a href="https://redirect.github.com/assertj/assertj/issues/3788">#3788</a>)</li> <li><a href="https://github.com/assertj/assertj/commit/22124331e9922af5a43ab50f7a9a25b65be53be1"><code>2212433</code></a> Add IntelliJ custom inspection for test class names</li> <li><a href="https://github.com/assertj/assertj/commit/5717d025cfe0f4c66de20f3253c0b0ecba259aa1"><code>5717d02</code></a> Update JetBrains icon</li> <li><a href="https://github.com/assertj/assertj/commit/a8ec20bd42ed01f9cc6f654046c7dd424b0af07c"><code>a8ec20b</code></a> Add icon for JetBrains products</li> <li><a href="https://github.com/assertj/assertj/commit/c05fb3d052b415fb2d6051df939f3b7903a76afe"><code>c05fb3d</code></a> Bump Maven to 3.9.12 and Wrapper to 3.3.4</li> <li>Additional commits viewable in <a href="https://github.com/assertj/assertj/compare/assertj-build-3.27.6...assertj-build-3.27.7">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.assertj:assertj-core&package-manager=gradle&previous-version=3.27.6&new-version=3.27.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 33ed9a7 commit 78947c0

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

gradle/libs.versions.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
[versions]
2-
assertj = "3.27.6"
2+
assertj = "3.27.7"
33
buf = "1.64.0"
44
cel = "0.11.1"
55
error-prone = "2.46.0"

0 commit comments

Comments
 (0)