Hi

Thanks for that.

As commented in the PRs, they should not be required as tackled by
dependabot.

Regards
JB

Le ven. 3 juil. 2026 à 13:04, Colm O hEigeartaigh <[email protected]> a
écrit :

> Hi,
>
> I submitted some PRs to fix CVEs if they could be reviewed/applied please:
>
>  - Backport Jackson 2.22.0 from main
> https://github.com/apache/activemq/pull/2183
>  - Backport Shiro 2.2.1 from main
> https://github.com/apache/activemq/pull/2182
>  - Update Spring to 6.2.19 on main
> https://github.com/apache/activemq/pull/2184
>
> Thanks,
>
> Colm.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
> For further information, visit: https://activemq.apache.org/contact
>
>
>

Reply via email to