Repository navigation
chore(deps): update gradle high security fixes minor-patch - #1409
dd-octo-sts[bot] wants to merge 2 commits into
Conversation
❌ ErrorsYour PR has failed checks. Please review the issues below and take necessary action before merging. 🚦 2 Pipeline jobs failed
Useful? React with 👍 / 👎 This comment will be updated automatically if new data arrives.🔗 Commit SHA: 109ed82 | Docs | View more details | Give us feedback! |
…e-high-security-fixes-minor-patch
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
There was a problem hiding this comment.
🟢 Approval recommended
No active review issues remain for the Gradle and AWS Lambda dependency updates.
No open issues 🎉
What changed in this PR
Updates Gradle and AWS Lambda Java dependencies used by the extension’s local Java test project as part of a non-major security dependency refresh.
Changes:
- Bumps the Gradle wrapper from 6.1.1 to 6.9.4.
- Updates AWS Lambda Java core, Log4j2, and events libraries to 1.4.0, 1.6.5, and 3.16.1, respectively.
| File | Description |
|---|---|
local_tests/java/gradle/wrapper/gradle-wrapper.properties |
Updates the Gradle wrapper distribution to 6.9.4. |
local_tests/java/build.gradle |
Updates three AWS Lambda Java dependencies. |
Review effort: Balanced
This PR contains the following updates:
6.1.1→6.9.43.7.0→3.16.11.3.0→1.6.51.2.1→1.4.0🚨 Gradle Security Update (Non-Major) - CRITICAL
This PR addresses critical severity security vulnerabilities in Gradle dependencies.
Version Upgrader Overview
Questions or feedback? Ask in #dep-health-support
🤖 Generated by ADMS (Automated Dependency Management System)
🚨 Gradle Security Update (Non-Major) - HIGH
This PR addresses high severity security vulnerabilities in Gradle dependencies.