Skip to content

fix(security): raise jsoup security floor to 1.23.2 (#2302) - #2303

Merged
OnlyReadOneBook merged 1 commit into
developfrom
fix/2302-jsoup-security-floor
Oct 14, 2026
Merged

OnlyReadOneBook merged 1 commit into
developfrom
fix/2302-jsoup-security-floor

Conversation

@OnlyReadOneBook

@OnlyReadOneBook OnlyReadOneBook commented Oct 14, 2026 •

Copy link
Copy Markdown
Collaborator

Issues

Work Description

  • org.jsoup:jsoup 보안 하한을 취약점 GHSA-65r4-943x-97jj의 패치 버전인 1.23.2로 올립니다.
  • 보안 하한 설명에 새 권고와 이슈를 추가합니다.

CI Test Plan

{
  "androidTest": {
    "mode": "full",
    "reason": "루트 build.gradle.kts의 공통 보안 하한을 변경하므로 저장소 정책에 따라 API 30 전체 계측 회귀와 API 34 접근성 smoke를 실행합니다.",
    "tests": []
  }
}

Screenshots

변경 없음

Reviewers

  • org.jsoup:jsoup이 1.23.2 이상으로 선택되는지 확인했습니다.
  • GitHub Dependency Review 및 필수 CI 결과를 확인합니다.

Verification

  • git diff --check 통과
  • ./gradlew :app:dependencyInsight --configuration debugAndroidTestRuntimeClasspath --dependency org.jsoup:jsoup --console=plain에서 1.23.2 선택 확인

@github-actions github-actions Bot added the android-test PR head에서 Android Managed Device 계측 테스트 실행 label Oct 14, 2026
@OnlyReadOneBook
OnlyReadOneBook added this pull request to the merge queue Oct 14, 2026
Merged via the queue into develop with commit 5acd58b Oct 14, 2026
36 of 52 checks passed
@OnlyReadOneBook
OnlyReadOneBook deleted the fix/2302-jsoup-security-floor branch October 14, 2026 07:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

android-test PR head에서 Android Managed Device 계측 테스트 실행

Projects

None yet

Development

Successfully merging this pull request may close these issues.

security(platform): jsoup 보안 하한을 패치 버전으로 올린다

1 participant