Merge branch 'main' into copilot/fix-spring-boot-security-issue

catarina-correia · web-flow · commit 3d67a05a1da2 · 2026-05-22T16:57:07.000+02:00
diff --git a/build.gradle b/build.gradle
@@ -31,9 +31,9 @@ subprojects {
                 because('GHSA-2m67-wjpj-xhg9: Jackson Core 3.0.0-3.1.0 maxDocumentLength bypass')
             }
             if (requested.group == 'org.apache.tomcat.embed' && requested.name == 'tomcat-embed-core'
-                    && requested.version != null && requested.version < '11.0.21') {
-                useVersion('11.0.21')
-                because('GHSA-rv64-5gf8-9qq8 / GHSA-x4m4-345f-5h5g / GHSA-24j9-x2wg-9qv6: Apache Tomcat < 11.0.21 vulnerabilities')
+                    && requested.version != null && requested.version < '11.0.22') {
+                useVersion('11.0.22')
+                because('GHSA-rv64-5gf8-9qq8 / GHSA-x4m4-345f-5h5g / GHSA-24j9-x2wg-9qv6 / GHSA-gx5v-xp9w-j4cg: Apache Tomcat < 11.0.22 vulnerabilities')
             }
         }
     }

Original file line number	Diff line number	Diff line change
`@@ -31,9 +31,9 @@ subprojects {`
`31`	`31`	`because('GHSA-2m67-wjpj-xhg9: Jackson Core 3.0.0-3.1.0 maxDocumentLength bypass')`
`32`	`32`	`}`
`33`	`33`	`if (requested.group == 'org.apache.tomcat.embed' && requested.name == 'tomcat-embed-core'`
`34`		`- && requested.version != null && requested.version < '11.0.21') {`
`35`		`- useVersion('11.0.21')`
`36`		`- because('GHSA-rv64-5gf8-9qq8 / GHSA-x4m4-345f-5h5g / GHSA-24j9-x2wg-9qv6: Apache Tomcat < 11.0.21 vulnerabilities')`
	`34`	`+ && requested.version != null && requested.version < '11.0.22') {`
	`35`	`+ useVersion('11.0.22')`
	`36`	`+ because('GHSA-rv64-5gf8-9qq8 / GHSA-x4m4-345f-5h5g / GHSA-24j9-x2wg-9qv6 / GHSA-gx5v-xp9w-j4cg: Apache Tomcat < 11.0.22 vulnerabilities')`
`37`	`37`	`}`
`38`	`38`	`}`
`39`	`39`	`}`