build(deps): bump subversion from 2.14.3 to 2.17.0
Created by: dependabot[bot]
Bumps subversion from 2.14.3 to 2.17.0.
Release notes
Sourced from subversion's releases.
2.17.0
👻 Maintenance
- Switch from deprecated
useAci
syntax touseContainerAgent
(#275)@NotMyFault
✍ Other changes
- Update SVNKit dependency to 1.10.9 (#276)
@fhickman
- Update plugin parent POM (#274)
@basil
2.16.0
✍ Other changes
- Compatibility with Git plugin (#273)
@basil
- JENKINS-48543 - Remove agent-to-controller calls (#267)
@jglick
2.15.5
✍ Other changes
- Inclusive naming in docs and javadoc (#272)
@MarkEWaite
- Add description for plugin manager (#270)
@zbynek
- Update plugin parent POM and plugin BOM (#271)
@basil
2.15.4
⚡ Security fix
- SECURITY-2617 - Stored XSS vulnerability
- SECURITY-2075 - CSRF vulnerability
2.15.3
No changes. Released due to broken
subversion-2.15.2-tests.jar
and missingsubversion-2.15.2-tests.jar
in the previous release.2.15.2
👻 Maintenance
- Drop dependency on Commons Codec (#266)
@basil
- EOL JSR 305 (#269)
@basil
- chore: Prepare for sunset icon removal from core (#268)
@NotMyFault
2.15.1
⚡ Security fix
- SECURITY-2506 - Path traversal vulnerability in Subversion Plugin allows reading arbitrary files
2.15.0
🚀 New features and improvements
- JENKINS-66777 - Add SubversionSCMSource repository browser support (#263)
@didiez
... (truncated)
Commits
-
88b576a
[maven-release-plugin] prepare release subversion-2.17.0 -
f653dcb
Merge pull request #276 from fhickman/update-svnkit-for-aarch64 -
824bc6e
[JENKINS-65802] Update SVNKit dependency to 1.10.9, which contains fixes for ... -
07224d3
Merge pull request #275 from NotMyFault/update-jenkinsfile -
5548d33
Update Jenkinsfile -
547bd92
Merge pull request #274 from basil/pom -
de0c5e7
Update plugin parent POM -
2586f62
[maven-release-plugin] prepare for next development iteration -
f1a45c5
[maven-release-plugin] prepare release subversion-2.16.0 -
caf58df
Merge pull request #273 from basil/git - Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase
.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebase
will rebase this PR -
@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it -
@dependabot merge
will merge this PR after your CI passes on it -
@dependabot squash and merge
will squash and merge this PR after your CI passes on it -
@dependabot cancel merge
will cancel a previously requested merge and block automerging -
@dependabot reopen
will reopen this PR if it is closed -
@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)