V2.2.3 is fix release for several CVEs related to netty-codec-http. Special thanks to @JanWesterkamp-iJUG for bringing the topic and the support provided.
Is important to note, that netty-codec-http is used ONLY for preview goals auto-refresh and http, and have no impact in normal conversion using process-asciidoc.
This release also includes some fixes ported from main branch listed below.
As always, thanks to all contributors! Specially those taking time providing report issues and feedback 👍
Fixes
- #610 Fixed default value for eruby which caused a failure when using erb templates. Thanks (@mokdeve) for reporting.
Documentation
- #592 Fix absolute path in usage example and AsciiDoc references in docs (@MarkusTiede)
Build / Infrastructure
- #620 Upgrade Asciidoctorj to v2.5.7 and jRuby to v9.3.8.0
- #625 Bump Doxia to v1.12.0 and test with maven-site-plugin v3.12.1
- #620 Bump netty-codec-http to v4.1.90.Final, fixes several CVEs
- #622 Delete unused TravisCI configuration
- #623 Bump Maven build plugins
- #624 Bump GH 'checkout' and 'setup-java' to v3
Release Meta
Released on: 2023-03-18
Released by: @abelsromero
Soundtrack: Dimensions (Devin Townsend)