Updating dependencies due to security vulnerabilities

[janvonde]

Hi,

we are using jgravatar and there is a critical CVE (CVE-2018-10237) for the included guava. Can you update the dependencies and release an updated version to maven central, please? That would be awesome!

Thank you for your help and best wishes from Germany,

Jan :-)

@Grundlefleck helped when I asked about a similar thing in #3 two years ago

[Grundlefleck]

Hi @janvonde. I'm no longer a member of the tim-group org, and wouldn't be able to publish a new version. Since I'm no longer an active user of jgravatar, I don't intend to keep it up to date.

Good luck!

[janvonde]

Thanks for your quick reply @Grundlefleck 😄

[janvonde]

Anybody else from tim-group out there that could help us with this?

@araqnid @adamgibbins @waseemtaj @alexconlin @jheister @davidmarkellis @arkangelofkaos