From a769d66a1accb48bce6a6f0566b6b422fdfe551f Mon Sep 17 00:00:00 2001 From: "aikido-autofix[bot]" <119856028+aikido-autofix[bot]@users.noreply.github.com> Date: Sat, 24 Oct 2026 06:10:35 +0000 Subject: [PATCH] fix(security): update dependencies --- agent/build.gradle | 4 ++-- agent/gradle.lockfile | 53 +++++++++++++++++++++++-------------------- 2 files changed, 31 insertions(+), 26 deletions(-) diff --git a/agent/build.gradle b/agent/build.gradle index 0a8ebc42..72f9a0d3 100644 --- a/agent/build.gradle +++ b/agent/build.gradle @@ -9,9 +9,9 @@ dependencies { // Compile only for interface types : compileOnly 'jakarta.servlet:jakarta.servlet-api:6.1.0' // spring 3 -> jakarta compileOnly 'javax.servlet:javax.servlet-api:4.0.1' // spring 2 -> javax - compileOnly 'io.projectreactor.netty:reactor-netty-http:1.2.18' // For Spring Webflux + compileOnly 'io.projectreactor.netty:reactor-netty-http:1.3.8' // For Spring Webflux compileOnly 'io.javalin:javalin:6.4.0' - compileOnly 'org.springframework:spring-web:5.3.20' + compileOnly 'org.springframework:spring-web:5.3.39' testImplementation 'org.junit.jupiter:junit-jupiter:5.9.2' testRuntimeOnly 'org.junit.jupiter:junit-jupiter-engine:5.9.2' diff --git a/agent/gradle.lockfile b/agent/gradle.lockfile index e6ffed84..faf96ca6 100644 --- a/agent/gradle.lockfile +++ b/agent/gradle.lockfile @@ -2,6 +2,7 @@ # Manual edits can break the build and are not advised. # This file is expected to be part of source control. # To regenerate this file, run: ./gradlew :agent:dependencies --write-locks +com.android.tools:r8:9.1.31=shadowR8 com.dylibso.chicory:runtime:1.7.5=runtimeClasspath,testRuntimeClasspath com.dylibso.chicory:wasm:1.7.5=runtimeClasspath,testRuntimeClasspath com.github.seancfoley:ipaddress:5.5.1=runtimeClasspath,testRuntimeClasspath @@ -12,26 +13,29 @@ com.kohlschutter.junixsocket:junixsocket-core:2.10.1=runtimeClasspath,testRuntim com.kohlschutter.junixsocket:junixsocket-native-common:2.10.1=runtimeClasspath,testRuntimeClasspath com.kohlschutter.junixsocket:junixsocket-server:2.10.1=runtimeClasspath,testRuntimeClasspath io.javalin:javalin:6.4.0=compileClasspath -io.netty:netty-buffer:4.1.135.Final=compileClasspath -io.netty:netty-codec-dns:4.1.135.Final=compileClasspath -io.netty:netty-codec-http2:4.1.135.Final=compileClasspath -io.netty:netty-codec-http:4.1.135.Final=compileClasspath -io.netty:netty-codec-socks:4.1.135.Final=compileClasspath -io.netty:netty-codec:4.1.135.Final=compileClasspath -io.netty:netty-common:4.1.135.Final=compileClasspath -io.netty:netty-handler-proxy:4.1.135.Final=compileClasspath -io.netty:netty-handler:4.1.135.Final=compileClasspath -io.netty:netty-resolver-dns-classes-macos:4.1.135.Final=compileClasspath -io.netty:netty-resolver-dns-native-macos:4.1.135.Final=compileClasspath -io.netty:netty-resolver-dns:4.1.135.Final=compileClasspath -io.netty:netty-resolver:4.1.135.Final=compileClasspath -io.netty:netty-transport-classes-epoll:4.1.135.Final=compileClasspath -io.netty:netty-transport-native-epoll:4.1.135.Final=compileClasspath -io.netty:netty-transport-native-unix-common:4.1.135.Final=compileClasspath -io.netty:netty-transport:4.1.135.Final=compileClasspath -io.projectreactor.netty:reactor-netty-core:1.2.18=compileClasspath -io.projectreactor.netty:reactor-netty-http:1.2.18=compileClasspath -io.projectreactor:reactor-core:3.7.19=compileClasspath +io.netty:netty-buffer:4.2.19.Final=compileClasspath +io.netty:netty-codec-base:4.2.19.Final=compileClasspath +io.netty:netty-codec-classes-quic:4.2.19.Final=compileClasspath +io.netty:netty-codec-compression:4.2.19.Final=compileClasspath +io.netty:netty-codec-dns:4.2.19.Final=compileClasspath +io.netty:netty-codec-http2:4.2.19.Final=compileClasspath +io.netty:netty-codec-http3:4.2.19.Final=compileClasspath +io.netty:netty-codec-http:4.2.19.Final=compileClasspath +io.netty:netty-codec-socks:4.2.19.Final=compileClasspath +io.netty:netty-common:4.2.19.Final=compileClasspath +io.netty:netty-handler-proxy:4.2.19.Final=compileClasspath +io.netty:netty-handler:4.2.19.Final=compileClasspath +io.netty:netty-resolver-dns-classes-macos:4.2.19.Final=compileClasspath +io.netty:netty-resolver-dns-native-macos:4.2.19.Final=compileClasspath +io.netty:netty-resolver-dns:4.2.19.Final=compileClasspath +io.netty:netty-resolver:4.2.19.Final=compileClasspath +io.netty:netty-transport-classes-epoll:4.2.19.Final=compileClasspath +io.netty:netty-transport-native-epoll:4.2.19.Final=compileClasspath +io.netty:netty-transport-native-unix-common:4.2.19.Final=compileClasspath +io.netty:netty-transport:4.2.19.Final=compileClasspath +io.projectreactor.netty:reactor-netty-core:1.3.8=compileClasspath +io.projectreactor.netty:reactor-netty-http:1.3.8=compileClasspath +io.projectreactor:reactor-core:3.8.8=compileClasspath jakarta.servlet:jakarta.servlet-api:6.1.0=compileClasspath javax.servlet:javax.servlet-api:4.0.1=compileClasspath net.bytebuddy:byte-buddy:1.18.11=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath @@ -55,6 +59,7 @@ org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.9.25=compileClasspath org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.9.25=compileClasspath org.jetbrains.kotlin:kotlin-stdlib:1.9.25=compileClasspath org.jetbrains:annotations:13.0=compileClasspath +org.jspecify:jspecify:1.0.1=compileClasspath org.junit.jupiter:junit-jupiter-api:5.9.2=testCompileClasspath,testRuntimeClasspath org.junit.jupiter:junit-jupiter-engine:5.9.2=testRuntimeClasspath org.junit.jupiter:junit-jupiter-params:5.9.2=testCompileClasspath,testRuntimeClasspath @@ -66,8 +71,8 @@ org.junit:junit-bom:5.9.2=testCompileClasspath,testRuntimeClasspath org.opentest4j:opentest4j:1.2.0=testCompileClasspath,testRuntimeClasspath org.reactivestreams:reactive-streams:1.0.4=compileClasspath org.slf4j:slf4j-api:2.0.16=compileClasspath -org.springframework:spring-beans:5.3.20=compileClasspath -org.springframework:spring-core:5.3.20=compileClasspath -org.springframework:spring-jcl:5.3.20=compileClasspath -org.springframework:spring-web:5.3.20=compileClasspath +org.springframework:spring-beans:5.3.39=compileClasspath +org.springframework:spring-core:5.3.39=compileClasspath +org.springframework:spring-jcl:5.3.39=compileClasspath +org.springframework:spring-web:5.3.39=compileClasspath empty=annotationProcessor,shadow,testAnnotationProcessor