Jeremy Fehr

Results 5 comments of Jeremy Fehr

chore(deps): update module github.com/cloudevents/sdk-go/v2 to v2.15.2 [security]

hi @jasonneurohr-stake - sorry for the delay - i'd love to push this along but it looks like the new version depends on io.NopCloser, which was added in go 1.16...

functions-framework-api 1.1.1 release not available in Maven Central.

thanks for raising this, there was an issue with our release process because a non-existent plugin slipped in the 1.1.1 tag/release. i cut 1.1.2 with the fix and i'll check...

functions-framework-api 1.1.1 release not available in Maven Central.

1.1.2 had a problem releasing too. looking at this.

functions-framework-api 1.1.1 release not available in Maven Central.

di is looking at this now. it looks like our release job has an incompatible version of maven installed.

CVE-2022-42004: Transitive dependency (jackson) from io.cloudevents:cloudevents-json-jackson vulnerable

https://github.com/GoogleCloudPlatform/functions-framework-java/pull/274 - cloudevents opted to roll this into the 3.0 release, so we have to bump the cloudevents-sdk version we require, too.