Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

realm-annotation-processor-10.12.0 still dependent on kotlin-stdlib-1.5.31.jar #7734

Open
klaasel opened this issue Oct 19, 2022 · 2 comments

Comments

@klaasel
Copy link

klaasel commented Oct 19, 2022

I don't know it this is the correct place to post, but I couldn't find a dedicated realm annotation processor repository.

According to Mend (previously WhiteSource), our native Android app containing Realm still has a dependency on kotlin-stdlib-1.5.31 because of the realm-annotation-processor-10.12.0. This is the latest version according to mvnrepository.com. This poses a medium security vulnerability, and should be updated to 1.6.

@clementetb clementetb transferred this issue from realm/realm-kotlin Oct 19, 2022
@clementetb
Copy link
Collaborator

Thanks for reporting the issue, we will address the issue.

@clementetb
Copy link
Collaborator

clementetb commented Oct 24, 2022

Thanks, we will bump in the next release, meanwhile, you can fix to a specific version on your project using the strict syntax. See

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants