Skip to content

Bump classgraph from 4.8.137 to 4.8.138

bornholdt requested to merge dependabot/maven/io.github.classgraph-classgraph-4.8.138 into master

Bumps classgraph from 4.8.137 to 4.8.138.

Release notes

Sourced from classgraph's releases.

classgraph-4.8.138

  • Added two methods (thanks to @FranGomezVenegas for requesting these, #608):

    • FieldInfoList ClassInfo#getEnumConstants(): returns all the enum constants of an enum class as FieldInfo objects (without loading the enum class).
    • List<Object> ClassInfo#getEnumConstantObjects(): returns all the enum constants of an enum class as objects of the same type as the enum (after loading the enum class and initializing enum constants).

  • Mitigate log4j2 vulnerability CVE-2021-44228: ClassGraph does not use log4j2, but does use the built-in Java logging framework, which may be redirected to the log4j2 framework by the calling environment. To be safe, ClassGraph now builds in a protection against this critical vulnerability.

Commits

Merge request reports