Skip to content

Update dependency land.oras:oras-java-sdk to v0.6.4#115

Merged
jonesbusy merged 1 commit into
mainfrom
renovate/revision
May 27, 2026
Merged

Update dependency land.oras:oras-java-sdk to v0.6.4#115
jonesbusy merged 1 commit into
mainfrom
renovate/revision

Conversation

@renovate

@renovate renovate Bot commented May 27, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
land.oras:oras-java-sdk 0.6.30.6.4 age confidence

Release Notes

oras-project/oras-java (land.oras:oras-java-sdk)

v0.6.4

Compare Source

❗ Security

  • [GHSA-j6hm-v3x2-qv6j] Symlink-based path traversal in ArchiveUtils.untar / unzip allows arbitrary file write outside extraction directory

🚦 Tests

📦 Dependency updates


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from a team as a code owner May 27, 2026 19:07
@renovate renovate Bot added the dependencies Pull requests that update a dependency file label May 27, 2026
@jonesbusy jonesbusy added the developer Changes which impact plugin developers label May 27, 2026
@jonesbusy jonesbusy merged commit ff53ca4 into main May 27, 2026
17 checks passed
@jonesbusy jonesbusy deleted the renovate/revision branch May 27, 2026 19:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file developer Changes which impact plugin developers

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant