Skip to content

Commit 8f866cf

Browse files
snyk-botyotamloe
andauthored
[Snyk] Fix for 2 vulnerabilities (#42)
* fix: pom.xml to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2314719 - https://snyk.io/vuln/SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2314720 * Update README.md * Update README.md * Add auto test workflow * update workflow Co-authored-by: yotamloe <yotam12341@gmail.com>
1 parent db4ee60 commit 8f866cf

File tree

3 files changed

+26
-3
lines changed

3 files changed

+26
-3
lines changed

.github/workflows/test.yml

+18
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
name: Test with mvn
2+
on:
3+
pull_request:
4+
branches: [ master ]
5+
jobs:
6+
test:
7+
strategy:
8+
matrix:
9+
os: [ubuntu-latest, macos-latest, windows-latest]
10+
java: [ '8', '11', '15' ]
11+
runs-on: ${{ matrix.os }}
12+
steps:
13+
- uses: actions/checkout@v2
14+
- uses: actions/setup-java@v1
15+
with:
16+
java-version: ${{ matrix.java }}
17+
- name: Test with Maven
18+
run: mvn test

README.md

+6-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ This appender uses [LogzioSender](https://github.com/logzio/logzio-java-sender)
1313
<dependency>
1414
<groupId>io.logz.log4j2</groupId>
1515
<artifactId>logzio-log4j2-appender</artifactId>
16-
<version>1.0.12</version>
16+
<version>1.0.13</version>
1717
</dependency>
1818
```
1919

@@ -137,6 +137,11 @@ Will send a log to Logz.io that looks like this:
137137
```
138138

139139
### Release notes
140+
- 1.0.14
141+
- Bump versions of `log4j-api` and `log4j-core`
142+
- 1.0.13
143+
- Fix for issue #38, thanks to @idachev
144+
- Bump versions of `log4j` and `guava`
140145
- 1.0.11
141146
- add in memory queue option
142147
- change bufferDir(deprecated) to queueDir

pom.xml

+2-2
Original file line numberDiff line numberDiff line change
@@ -150,12 +150,12 @@
150150
<dependency>
151151
<groupId>org.apache.logging.log4j</groupId>
152152
<artifactId>log4j-api</artifactId>
153-
<version>2.14.1</version>
153+
<version>2.15.0</version>
154154
</dependency>
155155
<dependency>
156156
<groupId>org.apache.logging.log4j</groupId>
157157
<artifactId>log4j-core</artifactId>
158-
<version>2.14.1</version>
158+
<version>2.15.0</version>
159159
</dependency>
160160
<dependency>
161161
<groupId>io.logz.sender</groupId>

0 commit comments

Comments
 (0)