From 8e838dda209b1e7abb7e2fa58b1f60fe669b4673 Mon Sep 17 00:00:00 2001 From: Vishal Mangwani Date: Fri, 25 Sep 2026 19:06:43 -0500 Subject: [PATCH 1/2] SYN-648: Bump org.json and okhttp to clear High alerts Bump org.json:json 20220320 -> 20231013 and okhttp-version 4.9.1 -> 4.9.2 (logging-interceptor follows the shared property), clearing the 3 open High Dependabot alerts on pom.xml. No source changes needed. Co-Authored-By: Claude Opus 5.5 --- pom.xml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pom.xml b/pom.xml index 05839b41..8f519c72 100755 --- a/pom.xml +++ b/pom.xml @@ -451,7 +451,7 @@ org.json json - 20220320 + 20231013 @@ -473,7 +473,7 @@ ${java.version} 1.8.5 1.6.2 - 4.9.1 + 4.9.2 2.9.0 3.11 0.2.1 From 818692cc835a7d3deb75147c8de0fe25aee5e326 Mon Sep 17 00:00:00 2001 From: Vishal Mangwani Date: Fri, 25 Sep 2026 19:21:22 -0500 Subject: [PATCH 2/2] SYN-648: Bump actions/cache to v4 so CI runs GitHub auto-fails jobs that use the deprecated actions/cache@v2, so run_tests never started on this branch (or on main's Dependabot PRs). Co-Authored-By: Claude Opus 5.5 --- .github/workflows/run_tests.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/run_tests.yml b/.github/workflows/run_tests.yml index 382e4867..cfaf5c18 100755 --- a/.github/workflows/run_tests.yml +++ b/.github/workflows/run_tests.yml @@ -24,7 +24,7 @@ jobs: with: java-version: 14 - name: Cache Maven packages - uses: actions/cache@v2 + uses: actions/cache@v4 with: path: ~/.m2 key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}