From 3ee99909b85a9ab31abc735191c843c17024b3ee Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 22 Apr 2021 16:43:53 +0000
Subject: [PATCH 1/2] Bump mybatis from 3.2.7 to 3.5.6

Bumps [mybatis](https://github.com/mybatis/mybatis-3) from 3.2.7 to 3.5.6.
- [Release notes](https://github.com/mybatis/mybatis-3/releases)
- [Commits](https://github.com/mybatis/mybatis-3/compare/mybatis-3.2.7...mybatis-3.5.6)

Signed-off-by: dependabot[bot] <support@github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 172ba18..cd79b83 100644
--- a/pom.xml
+++ b/pom.xml
@@ -18,7 +18,7 @@
 
         <spring.version>5.2.6.RELEASE</spring.version>
         <servlet.version>2.5</servlet.version>
-        <mybatis.version>3.2.7</mybatis.version>
+        <mybatis.version>3.5.6</mybatis.version>
         <mybatis.spring.version>1.1.1</mybatis.spring.version>
         <mybatis.generator.core.version>1.4.0</mybatis.generator.core.version>
         <file_encoding>utf-8</file_encoding>

From 367798c0dc56f36ba9616d538e551169a3a9e02b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E1=B8=95=E2=84=8F=E1=BB=88=E1=BA=8D=C8=93?=
 <ehlxr.me@gmail.com>
Date: Fri, 23 Apr 2021 09:26:59 +0800
Subject: [PATCH 2/2] Create SECURITY.md

---
 SECURITY.md | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 SECURITY.md

diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..034e848
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,21 @@
+# Security Policy
+
+## Supported Versions
+
+Use this section to tell people about which versions of your project are
+currently being supported with security updates.
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 5.1.x   | :white_check_mark: |
+| 5.0.x   | :x:                |
+| 4.0.x   | :white_check_mark: |
+| < 4.0   | :x:                |
+
+## Reporting a Vulnerability
+
+Use this section to tell people how to report a vulnerability.
+
+Tell them where to go, how often they can expect to get an update on a
+reported vulnerability, what to expect if the vulnerability is accepted or
+declined, etc.