Releasing version 5.10.8

Author: LaunchDarklyReleaseBot

CHANGELOG.md

@@ -2,6 +2,10 @@
 
 All notable changes to the LaunchDarkly Java SDK will be documented in this file. This project adheres to [Semantic Versioning](http://semver.org).
 
+## [5.10.8] - 2023-03-21
+### Fixed:
+- Updated snakeyaml to v2.0.0 to address CVE-2022-1471. This vulnerability would only have affected applications that used the FileData feature with a YAML file, assuming an attacker had write access to the filesystem.
+
 ## [5.10.7] - 2023-01-09
 ### Fixed:
 - If the stream connection failed when the SDK had only partially received a piece of JSON data from the stream, the SDK was sometimes logging a misleading error message about invalid JSON in addition to the normal error message about the connection failure.

gradle.properties

@@ -1,4 +1,4 @@
-version=5.10.7
+version=5.10.8
 # The following empty ossrh properties are used by LaunchDarkly's internal integration testing framework
 # and should not be needed for typical development purposes (including by third-party developers).
 ossrhUsername=

src/main/java/com/launchdarkly/sdk/server/Version.java

@@ -4,5 +4,5 @@ abstract class Version {
   private Version() {}
 
   // This constant is updated automatically by our Gradle script during a release, if the project version has changed
-  static final String SDK_VERSION = "5.10.7";
+  static final String SDK_VERSION = "5.10.8";
 }