javaapache/dubbo #9801Not a task: already works

upgrade spring due to security concern

envgap__apache__dubbo-9801

Original GitHub issue ↗Dated source checkout ↗Opened 2022-03-17

01 / FAILURE SIGNATURE

As reported upstream

No identifying execution failure has been captured.

Not a benchmark task.

The project already builds and runs before the fix, so there is nothing to repair.

02 / ENVIRONMENT RECIPE

Base commit: 7e09abd31340bfd5bcbf64d0979f929f71bb67ad
Manifest: dubbo-dependencies-bom/pom.xml
Reproduce: Awaiting issue-specific recipe
Run under trace: Awaiting a meaningful runtime command

03 / ORIGINAL ISSUE TEXT

apache/dubbo #9801 · read the original issue

<!-- If you need to report a security issue please visit https://github.com/apache/dubbo/security/policy -->



- [X] I have searched the [issues](https://github.com/apache/dubbo/issues) of this repository and believe that this is not a duplicate.



* https://github.com/advisories/GHSA-rv39-3qh7-9v7w (spring)

* https://github.com/advisories/GHSA-xxgp-pcfc-3vgc (hibernate)

* https://github.com/advisories/GHSA-gwrp-pvrq-jmwv (commons-io)



### Environment



* Dubbo version: xxx

* Operating System version: xxx

* Java version: xxx



### Steps to reproduce this issue



1. xxx

2. xxx

3. xxx



Pls. provide [GitHub address] to reproduce this issue.



### Expected Behavior



<!-- What do you expect from the above steps？-->



### Actual Behavior



<!-- What actually happens? -->



If there is an exception, please attach the exception trace:



```

Just put your stack trace here!

```

Continue on GitHub ↗

04 / LABELS

Labels from the report text only; not yet run

No supported category has been assigned.

Label rules and the text that matched

[]