From 8b1b1dc5ee8870ba50f5b8ad924249982cc409c1 Mon Sep 17 00:00:00 2001 From: Melvin <130800730+melvin-cci@users.noreply.github.com> Date: Tue, 3 Oct 2023 10:47:20 -0700 Subject: [PATCH] Fix CVE-2023-3635 --- CHANGELOG.md | 6 ++++++ README.md | 2 +- docs/circleci.analytics-clj.core.html | 2 +- docs/index.html | 2 +- project.clj | 5 +++-- src/circleci/analytics_clj/common.clj | 2 +- 6 files changed, 13 insertions(+), 6 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 497046a..1f2b14f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,9 @@ +Version 0.8.2 (October 3, 2023) +================================ + +* [FIXED](https://github.com/circleci/analytics-clj/pull/21): Update com.segment.analytics.java/analytics to version 3.5.0 +* [FIXED](https://github.com/circleci/analytics-clj/pull/21): Force update okio-jvm to version 3.4.0 fix CVE-2023-3635 + Version 0.8.1 (September 1, 2022) ================================ diff --git a/README.md b/README.md index cbc24d9..7fb2d74 100644 --- a/README.md +++ b/README.md @@ -10,7 +10,7 @@ For full documentation on the Segment.io 2.x Java client, see [analytics-java](h ## Installation -`[circleci/analytics-clj "0.8.1"]` +`[circleci/analytics-clj "0.8.2"]` ## Usage diff --git a/docs/circleci.analytics-clj.core.html b/docs/circleci.analytics-clj.core.html index 44e9fda..e11568e 100644 --- a/docs/circleci.analytics-clj.core.html +++ b/docs/circleci.analytics-clj.core.html @@ -17,4 +17,4 @@ extra information about the screen being viewed.

shutdown

added in 0.4.0

(shutdown analytics)
Stops this instance from processing further requests.

track

added in 0.4.0

(track analytics user-id event)(track analytics user-id event properties)(track analytics user-id event properties options)
`track` lets you record the actions your users perform.
 Every action triggers what we call an “event”, which can
-also have associated properties.
\ No newline at end of file +also have associated properties. diff --git a/docs/index.html b/docs/index.html index 254ac53..6375c9c 100644 --- a/docs/index.html +++ b/docs/index.html @@ -1,3 +1,3 @@ -Analytics-clj 0.8.1

Project

Namespaces

Analytics-clj 0.8.1

Released under the Eclipse Public License

Idiomatic Clojure wrapper for the Segment.io 2.x Java client.

Installation

To install, add the following dependency to your project or build file:

[circleci/analytics-clj "0.8.1"]

Namespaces

circleci.analytics-clj.core

Public variables and functions:

\ No newline at end of file
+Analytics-clj 0.8.2
Project
Namespaces
Analytics-clj 0.8.2
Released under the Eclipse Public License
Idiomatic Clojure wrapper for the Segment.io 2.x Java client.
Installation
To install, add the following dependency to your project or build file:
[circleci/analytics-clj "0.8.2"]
Namespaces
circleci.analytics-clj.core
Public variables and functions:

diff --git a/project.clj b/project.clj
index c13bd48..7737ff2 100644
--- a/project.clj
+++ b/project.clj
@@ -1,10 +1,11 @@
-(defproject circleci/analytics-clj "0.8.1"
+(defproject circleci/analytics-clj "0.8.2"
   :description "Idiomatic Clojure wrapper for the Segment.io 2.x Java client"
   :url "https://github.com/circleci/analytics-clj"
   :license {:name "Eclipse Public License"
             :url "http://www.eclipse.org/legal/epl-v10.html"}
   :dependencies [[org.clojure/clojure "1.8.0"]
-                 [com.segment.analytics.java/analytics "3.3.1"]]
+                 [com.squareup.okio/okio-jvm "3.4.0"]
+                 [com.segment.analytics.java/analytics "3.5.0"]]
   :profiles {:dev {:dependencies [[bond "0.2.6"]]}}
   :plugins [[lein-ancient "0.6.15"]
             [lein-codox "0.10.7"]]
diff --git a/src/circleci/analytics_clj/common.clj b/src/circleci/analytics_clj/common.clj
index bf8180b..e4b1604 100644
--- a/src/circleci/analytics_clj/common.clj
+++ b/src/circleci/analytics_clj/common.clj
@@ -3,7 +3,7 @@
             [circleci.analytics-clj.utils :refer [string-keys]]))
 
 (def ^:private ctx {"library" {"name" "analytics-clj"
-                               "version" "0.8.1"}})
+                               "version" "0.8.2"}})
 
 (defn common-fields
   "The `MessageBuilder` interface has a set of fields common to all messages.