New Release Request

[greggalbreath]

Can a new release be published using the latest commit? It would be nice if the latest release included all the updated dependencies, specifically removing the log4j vulnerability.

[hylkevds]

Moquette is using an old version of Log4J that is not vulnerable.
But if you want to try a version with updated patches, you can try the one we distribute: https://repo1.maven.org/maven2/de/fraunhofer/iosb/io/moquette/moquette-broker/0.15.1/

        <dependency>
            <groupId>de.fraunhofer.iosb.io.moquette</groupId>
            <artifactId>moquette-broker</artifactId>
            <version>0.15.1</version>
            </exclusions>
        </dependency>

The main addition to this branch is the work from #608.

[wborn]

Upgrading the transitive Jackson 2.8.8 dependency (#698) may also help with preventing more vulnerabilities.