Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump the minor-and-patch-version-updates group with 10 updates #322

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 1, 2024

Bumps the minor-and-patch-version-updates group with 10 updates:

Package From To
org.apache.logging.log4j:log4j-api 2.23.0 2.23.1
org.apache.logging.log4j:log4j-to-slf4j 2.23.0 2.23.1
args4j:args4j 2.33 2.37
org.apache.logging.log4j:log4j-to-slf4j 2.23.0 2.23.1
ch.qos.logback:logback-classic 1.5.1 1.5.3
jakarta.xml.bind:jakarta.xml.bind-api 4.0.1 4.0.2
org.mnode.ical4j:ical4j 3.2.16 3.2.17
org.mockito:mockito-core 5.10.0 5.11.0
org.owasp:dependency-check-maven 9.0.9 9.1.0
org.apache.maven.plugins:maven-compiler-plugin 3.12.1 3.13.0
org.apache.maven.plugins:maven-assembly-plugin 3.6.0 3.7.1

Updates org.apache.logging.log4j:log4j-api from 2.23.0 to 2.23.1

Updates org.apache.logging.log4j:log4j-to-slf4j from 2.23.0 to 2.23.1

Updates args4j:args4j from 2.33 to 2.37

Commits
  • 6bfd023 [maven-release-plugin] prepare release args4j-site-2.37
  • cb80b81 Replaced with maven assembly plugin
  • f948894 Giving up on shade generation
  • 3596be5 [maven-release-plugin] prepare for next development iteration
  • 03c5e05 [maven-release-plugin] prepare release args4j-site-2.36
  • 81a8344 Working around javadoc problem
  • 2a1a5b0 Run into a weird runtime error in maven-plugin-plugin
  • ac6f2f7 Fix up to use Java11
  • aedd32b Bumping up to require Java 11
  • ea9c8a1 Don't let javadoc warnings kill the build
  • Additional commits viewable in compare view

Updates org.apache.logging.log4j:log4j-to-slf4j from 2.23.0 to 2.23.1

Updates ch.qos.logback:logback-classic from 1.5.1 to 1.5.3

Commits

Updates jakarta.xml.bind:jakarta.xml.bind-api from 4.0.1 to 4.0.2

Release notes

Sourced from jakarta.xml.bind:jakarta.xml.bind-api's releases.

Jakarta XML Binding API 4.0.2

The 4.0.2 release is a bug fix release of 4.0.0.

Following changes are included:

  • #229 - Documented exception thrown is incorrect for javax.xml.bind.DatatypeConverter#print(Object) methods
  • #231 - Incorrect exception thrown by javax.xml.bind.DatatypeConverter
  • #236 - Fix the link to WS-I BP 1.0 in the spec
  • #284 - Re-use SAXParserFactory in AbstractUnmarshallerImpl for better performance
  • Javadoc improvements - formatting, typos, grammar, sample code
  • uses Jakarta Activation APIs 2.1.3

New Contributors

Full Changelog: jakartaee/jaxb-api@4.0.1...4.0.2

Commits

Updates org.mnode.ical4j:ical4j from 3.2.16 to 3.2.17

Commits

Updates org.mockito:mockito-core from 5.10.0 to 5.11.0

Release notes

Sourced from org.mockito:mockito-core's releases.

v5.11.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.11.0

Commits
  • ea6ff8c Add native method to MissingMethodInvocationException (#3283)
  • 8431ae2 Bump com.google.googlejavaformat:google-java-format (#3277)
  • a10d43c Bump versions.bytebuddy from 1.14.11 to 1.14.12 (#3272)
  • 699799d Bump gradle/wrapper-validation-action from 2.1.0 to 2.1.1 (#3268)
  • 861ca99 Bump org.shipkit:shipkit-auto-version from 2.0.3 to 2.0.4 (#3267)
  • 043c0f0 Bump gradle/wrapper-validation-action from 2.0.1 to 2.1.0 (#3266)
  • fa31e11 Bump gradle/wrapper-validation-action from 2.0.0 to 2.0.1 (#3264)
  • efa8d2a Bump org.junit.platform:junit-platform-launcher from 1.10.1 to 1.10.2 (#3265)
  • 66d18cc Bump org.assertj:assertj-core from 3.25.2 to 3.25.3 (#3261)
  • e76f14a Bump versions.junitJupiter from 5.10.1 to 5.10.2 (#3260)
  • Additional commits viewable in compare view

Updates org.owasp:dependency-check-maven from 9.0.9 to 9.1.0

Release notes

Sourced from org.owasp:dependency-check-maven's releases.

Version 9.1.0

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Version 9.0.10

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Changelog

Sourced from org.owasp:dependency-check-maven's changelog.

Version 9.1.0 (2024-03-31)

  • feat: Add v2 support for maven_install.json (#6528)
  • build(deps): bump open-vulnerability-client (#6554)
    • resolves update issues due to CVSS Metrics 4.0
  • build(deps): bump jackson.version from 2.16.0 to 2.16.1 (#6353)
  • build(deps): bump org.jsoup:jsoup from 1.16.2 to 1.17.2 (#6362)
  • build(deps): bump golang from 1.21.5-alpine to 1.22.1-alpine (#6506)

See the full listing of changes.

Version 9.0.10 (2024-03-15)

  • fix: #4321 Suppress redis server CVEs for client libraries (#4321) (#6489)
  • fix: bump commons-compress from 1.25.0 to 1.26.0 to fix CVE-2024-25710 and CVE-2024-26308 (#6492)
  • feat: Allow to pass NVD API key via environment variable (#6454)
  • fix: issue 5452 - ConcurrentModificationException in NodePackageAnalyzer.processDependencies - adding synchronized block (#6501)
  • docs: document the default data directory (#6484)
  • fix: prevent NPE in bundler audit (#6462)
  • fix: #6441 Improve suppression rule to not restrict to a single version (#6442)

See the full listing of changes.

Commits
  • e0b9397 build: prepare release v9.1.0
  • 3f1b558 docs: prepare release 9.1.0
  • c364269 build(deps): bump jackson.version from 2.16.0 to 2.16.1 (#6353)
  • d2c04b5 build(deps): bump org.jsoup:jsoup from 1.16.2 to 1.17.2 (#6362)
  • e8c4ca3 build(deps): bump open-vulnerability-client (#6554)
  • 2e6a231 build(deps): bump golang from 1.21.5-alpine to 1.22.1-alpine (#6506)
  • 0e183da build(deps): bump actions/setup-java from 3 to 4 (#6172)
  • 42adde4 fix: typo (#6526)
  • f60c867 feat: Add v2 support for maven_install.json (#6528)
  • a6a8f21 Merge pull request #1 from nutshelllabs/ef/add-maven-install-v2-support
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.12.1 to 3.13.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.13.0

🚀 New features and improvements

📦 Dependency updates

📝 Documentation updates

👻 Maintenance

Commits
  • a1415aa [maven-release-plugin] prepare release maven-compiler-plugin-3.13.0
  • b2b9196 [MCOMPILER-574] Propagate cause of exception in AbstractCompilerMojo
  • 6d2ce5a [MCOMPILER-584] Refresh page - Using Non-Javac Compilers
  • eebad60 [MCOMPILER-585] Refresh plugins versions in ITs
  • ceacf68 [MCOMPILER-582] Automatic detection of release option for JDK < 9
  • 110293f [MCOMPILER-583] Require Maven 3.6.3
  • 90131df [MCOMPILER-575] Bump plexusCompilerVersion from 2.14.2 to 2.15.0 (#227)
  • 74cfc72 [MCOMPILER-548] JDK 21 throws annotations processing warning that can not be ...
  • f85aa27 Bump apache/maven-gh-actions-shared from 3 to 4
  • d59ef49 extract Maven 3.3.1 specific method call
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-assembly-plugin from 3.6.0 to 3.7.1

Release notes

Sourced from org.apache.maven.plugins:maven-assembly-plugin's releases.

3.7.1

Release Notes - Maven Assembly Plugin - Version 3.7.1

What's Changed

Full Changelog: apache/maven-assembly-plugin@maven-assembly-plugin-3.7.0...maven-assembly-plugin-3.7.1

3.7.0

Release Notes - Maven Assembly Plugin - Version 3.7.0

... (truncated)

Commits
  • 0afbb3e [maven-release-plugin] prepare release maven-assembly-plugin-3.7.1
  • 74e858a [MASSEMBLY-1022] Unresolved artifacts should be not processed
  • cb56382 [MASSEMBLY-1025] Bump org.codehaus.plexus:plexus-archiver from 4.9.1 to 4.9.2...
  • 86bbed0 [MASSEMBLY-1024] Bump org.apache.commons:commons-compress from 1.25.0 to 1.26...
  • bdcc4d0 [MASSEMBLY-1023] Bump org.apache.maven.shared:maven-filtering from 3.3.1 to 3...
  • 74fe92e [maven-release-plugin] prepare for next development iteration
  • 9be6e87 [maven-release-plugin] prepare release maven-assembly-plugin-3.7.0
  • e8630dc Bump apache/maven-gh-actions-shared from 3 to 4
  • 98f97a5 Bump org.postgresql:postgresql in /src/it/projects/bugs/massembly-730
  • c84e110 [MASSEMBLY-1019] Maven 3.6.3 as minimum requirements
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…pdates

Bumps the minor-and-patch-version-updates group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| org.apache.logging.log4j:log4j-api | `2.23.0` | `2.23.1` |
| org.apache.logging.log4j:log4j-to-slf4j | `2.23.0` | `2.23.1` |
| [args4j:args4j](https://github.com/kohsuke/args4j) | `2.33` | `2.37` |
| org.apache.logging.log4j:log4j-to-slf4j | `2.23.0` | `2.23.1` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.1` | `1.5.3` |
| [jakarta.xml.bind:jakarta.xml.bind-api](https://github.com/jakartaee/jaxb-api) | `4.0.1` | `4.0.2` |
| [org.mnode.ical4j:ical4j](https://github.com/ical4j/ical4j) | `3.2.16` | `3.2.17` |
| [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.10.0` | `5.11.0` |
| [org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck) | `9.0.9` | `9.1.0` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.12.1` | `3.13.0` |
| [org.apache.maven.plugins:maven-assembly-plugin](https://github.com/apache/maven-assembly-plugin) | `3.6.0` | `3.7.1` |


Updates `org.apache.logging.log4j:log4j-api` from 2.23.0 to 2.23.1

Updates `org.apache.logging.log4j:log4j-to-slf4j` from 2.23.0 to 2.23.1

Updates `args4j:args4j` from 2.33 to 2.37
- [Changelog](https://github.com/kohsuke/args4j/blob/master/xdocs/changes.xml)
- [Commits](kohsuke/args4j@args4j-site-2.33...args4j-site-2.37)

Updates `org.apache.logging.log4j:log4j-to-slf4j` from 2.23.0 to 2.23.1

Updates `ch.qos.logback:logback-classic` from 1.5.1 to 1.5.3
- [Commits](qos-ch/logback@v_1.5.1...v_1.5.3)

Updates `jakarta.xml.bind:jakarta.xml.bind-api` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/jakartaee/jaxb-api/releases)
- [Commits](jakartaee/jaxb-api@4.0.1...4.0.2)

Updates `org.mnode.ical4j:ical4j` from 3.2.16 to 3.2.17
- [Changelog](https://github.com/ical4j/ical4j/blob/develop/CHANGELOG.md)
- [Commits](ical4j/ical4j@ical4j-3.2.16...ical4j-3.2.17)

Updates `org.mockito:mockito-core` from 5.10.0 to 5.11.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.10.0...v5.11.0)

Updates `org.owasp:dependency-check-maven` from 9.0.9 to 9.1.0
- [Release notes](https://github.com/jeremylong/DependencyCheck/releases)
- [Changelog](https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md)
- [Commits](jeremylong/DependencyCheck@v9.0.9...v9.1.0)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.12.1 to 3.13.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.12.1...maven-compiler-plugin-3.13.0)

Updates `org.apache.maven.plugins:maven-assembly-plugin` from 3.6.0 to 3.7.1
- [Release notes](https://github.com/apache/maven-assembly-plugin/releases)
- [Commits](apache/maven-assembly-plugin@maven-assembly-plugin-3.6.0...maven-assembly-plugin-3.7.1)

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-api
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch-version-updates
- dependency-name: org.apache.logging.log4j:log4j-to-slf4j
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch-version-updates
- dependency-name: args4j:args4j
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-version-updates
- dependency-name: org.apache.logging.log4j:log4j-to-slf4j
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch-version-updates
- dependency-name: ch.qos.logback:logback-classic
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch-version-updates
- dependency-name: jakarta.xml.bind:jakarta.xml.bind-api
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch-version-updates
- dependency-name: org.mnode.ical4j:ical4j
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch-version-updates
- dependency-name: org.mockito:mockito-core
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-version-updates
- dependency-name: org.owasp:dependency-check-maven
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-version-updates
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-version-updates
- dependency-name: org.apache.maven.plugins:maven-assembly-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-version-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 1, 2024
@mathisdt mathisdt merged commit b9d632b into master Apr 1, 2024
1 check passed
@mathisdt mathisdt deleted the dependabot/maven/minor-and-patch-version-updates-749320524f branch April 1, 2024 19:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant