⬆️ Upgrade dependency-check-core to v7.0.0 (#242)

Author: albuch

build.sbt

@@ -12,7 +12,7 @@ val sbtDependencyCheck = (project in file("."))
 	.settings(
 		libraryDependencies ++= Seq(
 			"commons-collections" % "commons-collections" % "3.2.2",
-			"org.owasp" % "dependency-check-core" % "6.5.3"
+			"org.owasp" % "dependency-check-core" % "7.0.0"
 		),
 		sbtPlugin := true,
 		dependencyUpdatesFilter -= moduleFilter(organization = "org.scala-lang") | moduleFilter(organization = "org.scala-sbt"),

dependency-check-suppressions.xml

@@ -2,12 +2,9 @@
 <suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
     <suppress>
         <notes><![CDATA[
-   file name: h2-1.4.199.jar
+   FP per issue #4162
    ]]></notes>
-        <packageUrl regex="true">^pkg:maven/com\.h2database/h2@.*$</packageUrl>
-        <cve>CVE-2021-23463</cve>
-        <cve>CVE-2021-42392</cve>
-        <cve>CVE-2022-23221</cve>
-        <vulnerabilityName>CWE-94: Improper Control of Generation of Code ('Code Injection')</vulnerabilityName>
+        <packageUrl regex="true">^pkg:maven/commons-(?:digester|validator)/commons-(?:digester|validator)@.*$</packageUrl>
+        <cpe>cpe:/a:apache:james</cpe>
     </suppress>
 </suppressions>

project/plugins.sbt

@@ -8,6 +8,6 @@ addSbtPlugin("net.virtual-void" % "sbt-dependency-graph" % "0.10.0-RC1")
 Compile / unmanagedSourceDirectories += baseDirectory.value.getParentFile / "src" / "main" / "scala"
 libraryDependencies ++= Seq(
   "commons-collections" % "commons-collections" % "3.2.2",
-  "org.owasp" % "dependency-check-core" % "6.5.3",
+  "org.owasp" % "dependency-check-core" % "7.0.0",
   "org.slf4j" % "slf4j-simple" % "1.7.36"
 )