Dependency Review · Workflow runs · DependencyTrack/dependency-track · GitHub

Actions

All workflows
Workflows
- Release CI Release CI
- .github/workflows/_meta-build.yaml .github/workflows/_meta-build.yaml
- Build CI Build CI
- Copilot code review Copilot code review
- Dependabot Updates Dependabot Updates
- Dependency Review Dependency Review
- Lock Threads Lock Threads
- pages-build-deployment pages-build-deployment
- Publish CI Publish CI
- Report PR Test Coverage Report PR Test Coverage
Management
- Caches
- Deployments

Dependency Review

Actions

Loading...
Loading

dependency-review.yaml

1,215 workflow runs

1,215 workflow runs

build(deps): bump org.metaeffekt.core:ae-security from 0.151.0 to 0.152.0 Dependency Review #4152: Pull request #5733 opened by dependabot bot

13s dependabot/maven/org.metaeffekt.core-ae-security-0.152.0

dependabot/maven/org.metaeffekt.core-ae-security-0.152.0

13s

build(deps): bump org.cyclonedx:cyclonedx-core-java from 12.0.0 to 12.0.1 Dependency Review #4151: Pull request #5732 opened by dependabot bot

12s dependabot/maven/org.cyclonedx-cyclonedx-core-java-12.0.1

dependabot/maven/org.cyclonedx-cyclonedx-core-java-12.0.1

12s

build(deps): bump us.springett:alpine-parent from 3.4.0 to 3.6.0 Dependency Review #4149: Pull request #5726 opened by dependabot bot

9s dependabot/maven/4.13.x/us.springett-alpine-parent-3.6.0

dependabot/maven/4.13.x/us.springett-alpine-parent-3.6.0

9s

build(deps): bump lib.alpine.version from 3.4.0 to 3.6.0 Dependency Review #4148: Pull request #5725 opened by dependabot bot

11s dependabot/maven/4.13.x/lib.alpine.version-3.6.0

dependabot/maven/4.13.x/lib.alpine.version-3.6.0

11s

Fix OSV version matching for npm vulnerabilities with 'introduced: 0' Dependency Review #4147: Pull request #5718 synchronize by aharonh

16s aharonh:fix/osv-npm-version-zero-matching

aharonh:fix/osv-npm-version-zero-matching

16s

Bump Alpine to 3.6.0 Dependency Review #4146: Pull request #5722 opened by nscuro

14s nscuro:bump-alpine-3.6.0

nscuro:bump-alpine-3.6.0

14s

Bump cyclonedx-core-java to 12.0.0 Dependency Review #4145: Pull request #5721 opened by nscuro

12s nscuro-patch-1

nscuro-patch-1

12s

Bump versatile to 0.16.1 Dependency Review #4144: Pull request #5719 opened by nscuro

11s nscuro:versatile-0.16.1

nscuro:versatile-0.16.1

11s

build(deps): bump com.google.cloud.sql:mysql-socket-factory-connector-j-8 from 1.27.1 to 1.28.0 Dependency Review #4143: Pull request #5685 synchronize by dependabot bot

13s dependabot/maven/com.google.cloud.sql-mysql-socket-factory-connector-j-8-1.28.0

dependabot/maven/com.google.cloud.sql-mysql-socket-factory-connector-j-8-1.28.0

13s

Fix OSV version matching for npm vulnerabilities with 'introduced: 0' Dependency Review #4142: Pull request #5718 synchronize by aharonh

18s aharonh:fix/osv-npm-version-zero-matching

aharonh:fix/osv-npm-version-zero-matching

18s

build(deps): bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.27.1 to 1.28.0 Dependency Review #4139: Pull request #5715 opened by dependabot bot

14s dependabot/maven/com.google.cloud.sql-cloud-sql-connector-jdbc-sqlserver-1.28.0

dependabot/maven/com.google.cloud.sql-cloud-sql-connector-jdbc-sqlserver-1.28.0

14s

fix: performance issue with PURL lookups #5710 Dependency Review #4138: Pull request #5711 synchronize by WoozyMasta

12s WoozyMasta:fix/5710-purl-index

WoozyMasta:fix/5710-purl-index

12s

Fall back to generic versioning scheme if no PURL is available Dependency Review #4137: Pull request #5714 synchronize by nscuro

13s nscuro:issue-5712

nscuro:issue-5712

13s

Fall back to generic versioning scheme if no PURL is available Dependency Review #4136: Pull request #5714 opened by nscuro

12s nscuro:issue-5712

nscuro:issue-5712

12s

fix: performance issue with PURL lookups #5710 Dependency Review #4135: Pull request #5711 synchronize by WoozyMasta

11s WoozyMasta:fix/5710-purl-index

WoozyMasta:fix/5710-purl-index

11s

Aliases for internal vulnerabilites #5699:Fix suggestion Dependency Review #4133: Pull request #5709 opened by anton-jj

12s anton-jj:master

anton-jj:master

12s

build(deps): bump org.postgresql:postgresql from 42.7.8 to 42.7.9 Dependency Review #4132: Pull request #5708 opened by dependabot bot

13s dependabot/maven/4.13.x/org.postgresql-postgresql-42.7.9

dependabot/maven/4.13.x/org.postgresql-postgresql-42.7.9

13s

build(deps): bump github/codeql-action from 4.31.9 to 4.31.10 Dependency Review #4131: Pull request #5707 opened by dependabot bot

11s dependabot/github_actions/github/codeql-action-4.31.10

dependabot/github_actions/github/codeql-action-4.31.10

11s

build(deps): bump org.metaeffekt.core:ae-security from 0.150.2 to 0.151.0 Dependency Review #4130: Pull request #5706 opened by dependabot bot

14s dependabot/maven/org.metaeffekt.core-ae-security-0.151.0

dependabot/maven/org.metaeffekt.core-ae-security-0.151.0

14s

build(deps): bump com.google.cloud.sql:mysql-socket-factory-connector-j-8 from 1.27.1 to 1.28.0 Dependency Review #4129: Pull request #5695 synchronize by dependabot bot

12s dependabot/maven/4.13.x/com.google.cloud.sql-mysql-socket-factory-connector-j-8-1.28.0

dependabot/maven/4.13.x/com.google.cloud.sql-mysql-socket-factory-connector-j-8-1.28.0

12s

build(deps): bump com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver from 1.27.1 to 1.28.0 Dependency Review #4128: Pull request #5703 opened by dependabot bot

9s dependabot/maven/4.13.x/com.google.cloud.sql-cloud-sql-connector-jdbc-sqlserver-1.28.0

dependabot/maven/4.13.x/com.google.cloud.sql-cloud-sql-connector-jdbc-sqlserver-1.28.0

9s

build(deps): bump eclipse-temurin from 2843f15 to cc11c03 in /src/main/docker Dependency Review #4127: Pull request #5702 opened by dependabot bot

13s dependabot/docker/src/main/docker/4.13.x/eclipse-temurin-cc11c03

dependabot/docker/src/main/docker/4.13.x/eclipse-temurin-cc11c03

13s

build(deps): bump eclipse-temurin from 1f12ca3 to 1cccec6 in /src/main/docker Dependency Review #4126: Pull request #5701 opened by dependabot bot

13s dependabot/docker/src/main/docker/eclipse-temurin-1cccec6

dependabot/docker/src/main/docker/eclipse-temurin-1cccec6

13s

build(deps): bump org.postgresql:postgresql from 42.7.8 to 42.7.9 Dependency Review #4125: Pull request #5700 opened by dependabot bot

12s dependabot/maven/org.postgresql-postgresql-42.7.9

dependabot/maven/org.postgresql-postgresql-42.7.9

12s

feat: add batch processing for Trivy vulnerabilities and new vulnerab… Dependency Review #4124: Pull request #5498 synchronize by arjavdongaonkar

9s arjavdongaonkar:optimize-trivy-analyzer

arjavdongaonkar:optimize-trivy-analyzer

9s