[Security] Bump geode-core from 1.2.0 to 1.6.0

[dependabot-preview]

Bumps geode-core from 1.2.0 to 1.6.0.

Commits

• 5ce726b Revert "GEODE-3926: Lucene Query Exception is thrown if queries are executed ...
• 6cd24a8 GEODE-5056: when found the dropped events at primary sender, send (#1794)
• 8a05aa0 GEODE-5085 authentication failure when auto-reconnecting
• 0282461 GEODE-4716 Document new stats and missing gateway sender/receiver MXBean (#1813)
• e6e820d GEODE-5046: Handle RegionDestroyedException in RemotePutMessage to re… (#1773)
• 7dcc313 GEODE-5068: bump Jackson version. (#1796) (#1801)
• e95a251 GEODE-5039: Change AbstractRegion to correctly construct EvictionAttributesMu...
• 30945b6 GEODE-4384 Add docs for gfsh destroy jndi-binding command (#1780)
• 6beb250 Updated release type in preparation for the release
• bdbc0e3 GEODE-4919: Update the PRConfig (#1666)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Note: This repo was added to Dependabot recently, so you'll receive a maximum of PRs for your first few update runs. Once an update run creates fewer than PRs we'll remove that limit.

You can always request more updates by clicking Bump now in your Dependabot dashboard.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge
• @dependabot reopen will reopen this PR if it is closed
• @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.

[dependabot-preview]

We've just been alerted that this update fixes a security vulnerability:

Sourced from The Sonatype OSS Index.

[CVE-2017-15693] Deserialization of Untrusted Data
In Apache Geode before v1.4.0, the Geode server stores application objects in serialized form. Certain cluster operations and API invocations cause these objects to be deserialized. A user with DATA:WRITE access to the cluster may be able to cause remote code execution if certain classes are present on the classpath.

Affected versions: ["< 1.4.0"]

[dependabot-preview]

We've just been alerted that this update fixes a security vulnerability:

Sourced from The Sonatype OSS Index.

[CVE-2017-9795] When an Apache Geode cluster before v1.3.0 is operating in secure mode, a user w...
When an Apache Geode cluster before v1.3.0 is operating in secure mode, a user with read access to specific regions within a Geode cluster may execute OQL queries that allow read and write access to objects within unauthorized regions. In addition a user could invoke methods that allow remote code execution.

Affected versions: ["< 1.3.0"]

[dependabot-preview]

Superseded by #101.