Releases: sbabcoc/Settings
Upgrade to Commons Configuration 2.12.0
In this release, I upgraded to Commons Configuration 2.12.0, which resolves an issue with loading stored configurations from the HOME folder.
Revert Commons Configuration to previous release
In this release, I fixed a fundamental flaw in the implementation on RetryManager that caused infinite recursion.
In addition to this bug fix, I reverted Commons Configuration to version 2.10.1 due to a bug in version 2.11.0. To avoid being caught unaware if this issue crops up again, I added a unit test that verifies the proper functioning of the affected scenario.
Upgrade To the latest version of Java-Utils
settings-3.0.7 [maven-release-plugin] copy for tag settings-3.0.7
Update dependencies to the latest versions
In this release, I updated all dependencies to the latest available versions that were compatible with Java 8.
Add commons-beanutils as a runtime dependency
In this release, I switched commons-beanutils from a test dependency to a runtime dependency. It appears that this dependency should be brought in transitively by commons-configuration2, but this isn't happening.
Add commons-text as direct dependency to propagate downstream
In this release, I added commons-text as a direct dependency so that the managed version propagates to projects that use this library. Now that commons-text is a direct dependency, I no longer need to manage the version of commons-lang3.
Manage commons-text to 1.10.0; remove SnakeYAML mgmt
In this release, I added dependency management for commons-text to resolve a vulnerability in this transitive dependency. I also removed the dependency management for SnakeYAML, which is no longer in scope.
Upgrade Java-Utils to version 3.1.1
This release just contains a dependency bump, upgrading Java-Utils to the latest release (3.1.1)
Bump commons-configuration2 from 2.7 to 2.8.0
This upgrade resolves an arbitrary code execution vulnerability: https://nvd.nist.gov/vuln/detail/CVE-2022-33980
Build for Java 8; upgrade dependencies and plugins
In this release, I finally dropped support for Java 7. By building this library for Java 8, I'm able to upgrade dependencies to newer versions that resolve identified vulnerabilities.