Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug]: update docker-java transitive deps #9660

Closed
yogurtearl opened this issue Dec 19, 2024 · 1 comment
Closed

[Bug]: update docker-java transitive deps #9660

yogurtearl opened this issue Dec 19, 2024 · 1 comment
Labels

Comments

@yogurtearl
Copy link

Module

Core

Testcontainers version

1.20.4

Using the latest Testcontainers version?

Yes

Host OS

macOS

Host Arch

arm

Docker version

N/A

What happened?

testcontainers shades in docker-java and all its transitive deps.

docker-java uses old versions of deps with vulns:

testcontainers should force upgrade these transitive deps to the latest commons-io, commons-compress, guava and any other shaded dep to pick up vuln fixes.

Relevant log output

Additional Information

No response

@eddumelendez
Copy link
Member

I am closing this due to there are already issues reported for those deps #8338 #9289 #9528. This is broader than just updating deps.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants