Skip to content

Conversation

@lucienlu-aws
Copy link
Contributor

@lucienlu-aws lucienlu-aws commented Apr 24, 2024

Issue #, if available:

Description of changes:

Upgrade ion-java to remove security vulnerability https://github.com/awslabs/amazon-kinesis-client-nodejs/security/dependabot/20

groupId is updated per README instructions https://github.com/amazon-ion/ion-java

Originally ion-java was published using the group id software.amazon.ion. Since 1.4.0 the official groupId was changed to com.amazon.ion to be consistent with other Amazon open source libraries. We still maintain the legacy group id but strongly encourage users to migrate to the official one.`

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

Copy link
Contributor

@brendan-p-lynch brendan-p-lynch left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please update the description with what you are updating to and from for ease of trackability

@lucienlu-aws lucienlu-aws changed the title Upgrade ion java Upgrade ion java from 1.5.1 to 1.11.4 Apr 24, 2024
@lucienlu-aws lucienlu-aws merged commit 71d9ee4 into awslabs:master Apr 24, 2024
@lucienlu-aws lucienlu-aws deleted the upgrade-ion-java branch April 24, 2024 19:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants