From eb72af3ef15b1fc9ec8190316806827ae98bacb7 Mon Sep 17 00:00:00 2001 From: M Date: Mon, 17 Jul 2023 11:56:39 +0200 Subject: [PATCH 1/2] Uplifted sqlite-jdbc dependency Updated sqlite-jdbc dependency to remove transitive dependency vulnerability with score 8.8 (according to Snyk https://security.snyk.io/vuln/SNYK-JAVA-ORGXERIAL-5596891) --- code/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/code/pom.xml b/code/pom.xml index ac4e7200..aed743a5 100644 --- a/code/pom.xml +++ b/code/pom.xml @@ -249,7 +249,7 @@ org.xerial sqlite-jdbc - 3.27.2.1 + 3.42.0.0 com.esotericsoftware From 3281b5c7c60b9d275c10ec5b7735a6b5851ea88f Mon Sep 17 00:00:00 2001 From: M Date: Mon, 17 Jul 2023 11:57:42 +0200 Subject: [PATCH 2/2] Update ReleaseNotes.md --- documentation/ReleaseNotes.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/documentation/ReleaseNotes.md b/documentation/ReleaseNotes.md index c814f50a..bafef3b1 100644 --- a/documentation/ReleaseNotes.md +++ b/documentation/ReleaseNotes.md @@ -1,5 +1,8 @@ # CQEngine Release Notes # +## Version 3.6.1 - 2023-07-17 ### +* Updated sqlite-jdbc dependency to remove transitive dependency vulnerability with score 8.8 (according to Snyk https://security.snyk.io/vuln/SNYK-JAVA-ORGXERIAL-5596891) + ## Version 3.6.0 - 2021-01-15 ### * Performance improvement when ordering results (potentially up to 5-6X), with thanks to @voldyman for the contribution * See pull request https://github.com/npgall/cqengine/pull/273 for performance analysis