Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 20, 2025

Bumps org.owasp:dependency-check-maven from 12.0.0 to 12.0.1.

Release notes

Sourced from org.owasp:dependency-check-maven's releases.

Version 12.0.1

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Changelog

Sourced from org.owasp:dependency-check-maven's changelog.

Version 12.0.1 (2025-01-19)

  • docs: Fix OSS Index Maven config documentation (#7322)
  • Fix OSS Index Maven config documentation
  • chore(docs): Document Gradle plugin support for failBuildOnUnusedSuppressionRule (#7307)
  • chore(docs): Correct analyzers config example to use Gradle dot-syntax (#7305)
  • fix: improve error message on improperly configured serverId credentials in settings.xml (#7313)
  • fix: Lower Basic serverId when Bearer was expected to a warning
  • fix: improve error message on improperly configured serverId credentials
  • fix: Correct nonProxyHosts support when no sys properties set (#7306)
  • core(docs): Group failBuildOnUnusedSuppressionRule flag next to suppression file configuration
  • core(docs): Update Gradle plugin documentation for failBuildOnUnusedSuppressionRule support
  • fix: Correct nonProxyHosts support when no sys properties set
  • chore(docs): Correct analyzers config example to use Gradle dot-syntax

See the full listing of changes.

Commits
  • eee5b46 build: prepare release v12.0.1
  • 8f76b42 docs: prepare release
  • 9424f85 build(deps): bump org.sonatype.goodies:package-url-java from 1.1.1 to 1.2.0 (...
  • c5e6bce build(deps): bump org.apache.maven.plugins:maven-artifact-plugin from 3.5.3 t...
  • 7181e6a build(deps): bump joda-time:joda-time from 2.10.4 to 2.13.0 (#7300)
  • 2c7b19b build(deps-dev): bump io.netty:netty-codec-http from 4.1.115.Final to 4.1.117...
  • 9502f82 build(deps): bump golang from 1.23.4-alpine to 1.23.5-alpine (#7323)
  • eb6be01 docs: Fix OSS Index Maven config documentation (#7322)
  • 7485f9f build(deps): bump golang from 1.23.4-alpine to 1.23.5-alpine
  • d883343 Fix OSS Index Maven config documentation
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck) from 12.0.0 to 12.0.1.
- [Release notes](https://github.com/jeremylong/DependencyCheck/releases)
- [Changelog](https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md)
- [Commits](jeremylong/DependencyCheck@v12.0.0...v12.0.1)

---
updated-dependencies:
- dependency-name: org.owasp:dependency-check-maven
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 20, 2025
@dschadow dschadow merged commit bd2e885 into main Jan 20, 2025
3 checks passed
@dependabot dependabot bot deleted the dependabot/maven/org.owasp-dependency-check-maven-12.0.1 branch January 20, 2025 06:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants