diff --git a/CHANGELOG.md b/CHANGELOG.md index fec0a64..6aadd60 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,7 +7,7 @@ This project uses [**Break Versioning**](https://www.taoensso.com/break-versioni > **Dep**: Nippy is [on Clojars](https://clojars.org/com.taoensso/nippy/versions/3.4.2). > **Versioning**: Nippy uses [Break Versioning](https://www.taoensso.com/break-versioning). -This release includes **important updates to internal dependencies** and is **recommended for all existing users**. +⚠️ This release addresses a [**security vulnerability**](https://github.com/taoensso/nippy/security/advisories/GHSA-vw78-267v-588h) in Nippy's upstream compression library and is **recommended for all existing users**. It should be a **straight-forward and non-breaking update** for almost everyone: diff --git a/README.md b/README.md index fe65f9d..f140104 100644 --- a/README.md +++ b/README.md @@ -13,7 +13,7 @@ It is used at scale by [Carmine](https://www.taoensso.com/carmine), [Faraday](ht ## Latest release/s -- `2024-05-26` `v3.4.2`: [release info](../../releases/tag/v3.4.2) +- `2024-05-26` `v3.4.2`: [release info](../../releases/tag/v3.4.2) (⚠️ contains [**security fix**](https://github.com/taoensso/nippy/security/advisories/GHSA-vw78-267v-588h)) [![Main tests][Main tests SVG]][Main tests URL] [![Graal tests][Graal tests SVG]][Graal tests URL]