diff --git a/.config/pmd/java/ruleset.xml b/.config/pmd/java/ruleset.xml index 4d095db..d8daabf 100644 --- a/.config/pmd/java/ruleset.xml +++ b/.config/pmd/java/ruleset.xml @@ -196,9 +196,9 @@ + language="java" + message="Setters of java.lang.System should not be called unless really needed" + class="net.sourceforge.pmd.lang.rule.xpath.XPathRule"> Calling setters of java.lang.System usually indicates bad design and likely causes unexpected behavior. For example, it may break when multiple Threads are setting the value. @@ -219,9 +219,9 @@ + language="java" + message="Using Java Object (De-)Serialization is unsafe and has led to too many security vulnerabilities" + class="net.sourceforge.pmd.lang.rule.xpath.XPathRule"> Nearly every known usage of (Java) Object Deserialization has resulted in [a security vulnerability](https://cloud.google.com/blog/topics/threat-intelligence/hunting-deserialization-exploits?hl=en). Vulnerabilities are so common that there are [dedicated projects for exploit payload generation](https://github.com/frohoff/ysoserial). diff --git a/.github/workflows/broken-links.yml b/.github/workflows/broken-links.yml index a37abe7..7d8ae66 100644 --- a/.github/workflows/broken-links.yml +++ b/.github/workflows/broken-links.yml @@ -19,7 +19,7 @@ jobs: - name: Link Checker id: lychee - uses: lycheeverse/lychee-action@5c4ee84814c983aa7164eaee476f014e53ff3963 # v2 + uses: lycheeverse/lychee-action@885c65f3dc543b57c898c8099f4e08c8afd178a2 # v2 with: fail: false # Don't fail on broken links, create an issue instead diff --git a/.github/workflows/check-build.yml b/.github/workflows/check-build.yml index 2043e62..31c53ca 100644 --- a/.github/workflows/check-build.yml +++ b/.github/workflows/check-build.yml @@ -36,7 +36,7 @@ jobs: - uses: actions/checkout@v5 - name: Set up JDK - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: ${{ matrix.distribution }} java-version: ${{ matrix.java }} @@ -93,7 +93,7 @@ jobs: - uses: actions/checkout@v5 - name: Set up JDK - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: ${{ matrix.distribution }} java-version: ${{ matrix.java }} @@ -116,7 +116,7 @@ jobs: - uses: actions/checkout@v5 - name: Set up JDK - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: ${{ matrix.distribution }} java-version: ${{ matrix.java }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 781bc08..65fd862 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -19,7 +19,7 @@ jobs: - uses: actions/checkout@v5 - name: Set up JDK - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: java-version: '17' distribution: 'temurin' @@ -117,7 +117,7 @@ jobs: git pull - name: Set up JDK - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: # running setup-java overwrites the settings.xml distribution: 'temurin' java-version: '17' @@ -134,7 +134,7 @@ jobs: MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_GPG_PASSPHRASE }} - name: Set up JDK - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: # running setup-java again overwrites the settings.xml distribution: 'temurin' java-version: '17' @@ -165,7 +165,7 @@ jobs: git pull - name: Setup - Java - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: java-version: '17' distribution: 'temurin' diff --git a/.github/workflows/test-deploy.yml b/.github/workflows/test-deploy.yml index 795bd6e..cfd79b4 100644 --- a/.github/workflows/test-deploy.yml +++ b/.github/workflows/test-deploy.yml @@ -14,7 +14,7 @@ jobs: - uses: actions/checkout@v5 - name: Set up JDK - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: # running setup-java overwrites the settings.xml distribution: 'temurin' java-version: '17' @@ -31,7 +31,7 @@ jobs: MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_GPG_PASSPHRASE }} - name: Set up JDK - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: # running setup-java again overwrites the settings.xml distribution: 'temurin' java-version: '17' diff --git a/.idea/checkstyle-idea.xml b/.idea/checkstyle-idea.xml index d43641c..ec555b5 100644 --- a/.idea/checkstyle-idea.xml +++ b/.idea/checkstyle-idea.xml @@ -1,7 +1,7 @@ - 10.26.1 + 11.0.0 JavaOnlyWithTests true true diff --git a/vaadin-simple-grid-filter-demo/pom.xml b/vaadin-simple-grid-filter-demo/pom.xml index 3d7d81f..3f20ccb 100644 --- a/vaadin-simple-grid-filter-demo/pom.xml +++ b/vaadin-simple-grid-filter-demo/pom.xml @@ -29,9 +29,9 @@ software.xdev.vaadin.Application - 24.8.6 + 24.8.7 - 3.5.4 + 3.5.5 diff --git a/vaadin-simple-grid-filter/pom.xml b/vaadin-simple-grid-filter/pom.xml index d72743e..59863b2 100644 --- a/vaadin-simple-grid-filter/pom.xml +++ b/vaadin-simple-grid-filter/pom.xml @@ -49,7 +49,7 @@ UTF-8 - 24.8.6 + 24.8.7 @@ -135,7 +135,7 @@ org.apache.maven.plugins maven-javadoc-plugin - 3.11.2 + 3.11.3 attach-javadocs