|
3 | 3 | <modelVersion>4.0.0</modelVersion> |
4 | 4 | <groupId>org.owasp.esapi</groupId> |
5 | 5 | <artifactId>esapi</artifactId> |
6 | | - <version>2.7.0.0-SNAPSHOT</version> |
| 6 | + <version>2.6.1.0</version> |
7 | 7 | <packaging>jar</packaging> |
8 | 8 |
|
9 | 9 | <distributionManagement> |
|
132 | 132 | <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding> |
133 | 133 | <version.jmh>1.37</version.jmh> |
134 | 134 | <version.findsecbugs>2.0.0-M3</version.findsecbugs> |
135 | | - <version.fluido>2.0.0-M11</version.fluido> <!-- 2.0.0 fails on 'mvn site', but this works. --> |
| 135 | + <version.fluido>2.0.0-M11</version.fluido> <!-- Version 2.1.0 is available, but fails with this min Maven. --> |
136 | 136 | <version.powermock>2.0.9</version.powermock> |
137 | | - <version.spotbugs>4.8.6</version.spotbugs> |
138 | | - <version.spotbugs.maven>4.8.6.6</version.spotbugs.maven> |
139 | | - <version.surefire>3.5.2</version.surefire> |
| 137 | + <version.spotbugs>4.9.3</version.spotbugs> |
| 138 | + <version.spotbugs.maven>4.9.3.0</version.spotbugs.maven> |
| 139 | + <version.surefire>3.5.3</version.surefire> |
140 | 140 | <project.java.target>1.8</project.java.target> |
141 | 141 | <!-- TODO: Be sure to update. Should be date of previous official release --> |
142 | 142 | <!-- Exact date in the form 'yyyy-dd-yy 00:00:00' should be used. You can find the previous release date --> |
143 | 143 | <!-- in the previous release notes file under the 'documentation/' directory. --> |
144 | | - <date.prev_release>2024-10-08 00:00:00</date.prev_release> |
| 144 | + <date.prev_release>2024-11-25 00:00:00</date.prev_release> |
145 | 145 | </properties> |
146 | 146 |
|
147 | 147 | <dependencies> |
|
408 | 408 | <plugin> |
409 | 409 | <groupId>org.apache.maven.plugins</groupId> |
410 | 410 | <artifactId>maven-dependency-plugin</artifactId> |
411 | | - <version>3.8.0</version> |
| 411 | + <version>3.8.1</version> |
412 | 412 | </plugin> |
413 | 413 | <plugin> |
414 | 414 | <groupId>org.apache.maven.plugins</groupId> |
|
418 | 418 | <plugin> |
419 | 419 | <groupId>org.codehaus.mojo</groupId> |
420 | 420 | <artifactId>versions-maven-plugin</artifactId> |
421 | | - <version>2.17.1</version> |
| 421 | + <version>2.18.0</version> |
422 | 422 | <configuration> |
423 | 423 | <rulesUri>file:${project.basedir}/versionRuleset.xml</rulesUri> |
424 | 424 | </configuration> |
|
431 | 431 | <plugin> |
432 | 432 | <groupId>org.cyclonedx</groupId> |
433 | 433 | <artifactId>cyclonedx-maven-plugin</artifactId> |
434 | | - <version>2.8.2</version> |
| 434 | + <version>2.9.1</version> |
435 | 435 | <executions> |
436 | 436 | <execution> |
437 | 437 | <phase>package</phase> |
|
467 | 467 | <plugin> |
468 | 468 | <groupId>org.apache.maven.plugins</groupId> |
469 | 469 | <artifactId>maven-changelog-plugin</artifactId> |
470 | | - <version>2.3</version> |
| 470 | + <!-- 3.0.0-M1 is a "milestone" release, which is generally |
| 471 | + to an alpha or beta release. Normally we would avoid |
| 472 | + those, but generating a changelog is not an essential |
| 473 | + task, so we're fine with this. |
| 474 | + --> |
| 475 | + <version>3.0.0-M1</version> |
471 | 476 | </plugin> |
472 | 477 |
|
473 | 478 | <plugin> |
474 | 479 | <groupId>org.apache.maven.plugins</groupId> |
475 | 480 | <artifactId>maven-clean-plugin</artifactId> |
476 | | - <version>3.4.0</version> |
| 481 | + <version>3.4.1</version> |
477 | 482 | </plugin> |
478 | 483 |
|
479 | 484 | <plugin> |
480 | 485 | <groupId>org.apache.maven.plugins</groupId> |
481 | 486 | <artifactId>maven-compiler-plugin</artifactId> |
482 | | - <version>3.13.0</version> |
| 487 | + <version>3.14.0</version> |
483 | 488 | <configuration> |
484 | 489 | <source>${project.java.target}</source> |
485 | 490 | <target>${project.java.target}</target> |
|
513 | 518 | <plugin> |
514 | 519 | <groupId>org.apache.maven.plugins</groupId> |
515 | 520 | <artifactId>maven-deploy-plugin</artifactId> |
516 | | - <version>3.1.3</version> |
| 521 | + <version>3.1.4</version> |
517 | 522 | </plugin> |
518 | 523 |
|
519 | 524 | <plugin> |
|
533 | 538 | <dependency> |
534 | 539 | <groupId>org.codehaus.mojo</groupId> |
535 | 540 | <artifactId>extra-enforcer-rules</artifactId> |
536 | | - <version>1.9.0</version> |
| 541 | + <version>1.10.0</version> |
537 | 542 | </dependency> |
538 | 543 | <dependency> |
539 | 544 | <groupId>org.codehaus.mojo</groupId> |
|
615 | 620 | <plugin> |
616 | 621 | <groupId>org.apache.maven.plugins</groupId> |
617 | 622 | <artifactId>maven-install-plugin</artifactId> |
618 | | - <version>3.1.3</version> |
| 623 | + <version>3.1.4</version> |
619 | 624 | </plugin> |
620 | 625 |
|
621 | 626 | <plugin> |
|
635 | 640 | <plugin> |
636 | 641 | <groupId>org.apache.maven.plugins</groupId> |
637 | 642 | <artifactId>maven-javadoc-plugin</artifactId> |
638 | | - <version>3.10.1</version> |
| 643 | + <version>3.11.2</version> |
639 | 644 | <configuration> |
640 | 645 | <source>8</source> |
641 | 646 | <doclint>none</doclint> |
|
653 | 658 | <plugin> |
654 | 659 | <groupId>org.apache.maven.plugins</groupId> |
655 | 660 | <artifactId>maven-jxr-plugin</artifactId> |
656 | | - <version>3.5.0</version> |
| 661 | + <version>3.6.0</version> |
657 | 662 | </plugin> |
658 | 663 |
|
659 | 664 | <plugin> |
660 | 665 | <groupId>org.apache.maven.plugins</groupId> |
661 | 666 | <artifactId>maven-pmd-plugin</artifactId> |
662 | | - <version>3.25.0</version> |
| 667 | + <version>3.26.0</version> |
663 | 668 | </plugin> |
664 | 669 |
|
665 | 670 | <plugin> |
666 | 671 | <groupId>org.apache.maven.plugins</groupId> |
667 | 672 | <artifactId>maven-project-info-reports-plugin</artifactId> |
668 | | - <version>3.7.0</version> |
| 673 | + <version>3.9.0</version> |
669 | 674 | </plugin> |
670 | 675 |
|
671 | 676 | <plugin> |
|
740 | 745 | <plugin> |
741 | 746 | <groupId>org.owasp</groupId> |
742 | 747 | <artifactId>dependency-check-maven</artifactId> |
743 | | - <!-- Version 11.x is the latest, but 10.0.4 is the latest that we can use beccause 11.x has a breaking |
| 748 | + <!-- Version 12.x is the latest, but 10.0.4 is the latest that we can use beccause 11.x has a breaking |
744 | 749 | change that requires Java 11 or later and our mimimal JDK is Java 8. |
745 | 750 | --> |
746 | 751 | <version>10.0.4</version> |
|
776 | 781 | <issueLinkUrl>https://github.com/ESAPI/esapi-java-legacy/issues/%ISSUE%</issueLinkUrl> |
777 | 782 | <type>date</type> |
778 | 783 | <dates> |
779 | | - <!-- TODO: Be sure to update. Should be date of previous official release --> |
| 784 | + <!-- TODO: Be sure to update. Should be date of 10revious official release --> |
780 | 785 | <!-- Exact date should be in previous release notes file under 'documentation/' directory. --> |
781 | 786 | <date>${date.prev_release}</date> |
782 | 787 | </dates> |
|
0 commit comments