From 50a54b7c72ac1785af7e9b861adf2da1256dba60 Mon Sep 17 00:00:00 2001 From: XDEV Renovate Bot Date: Sun, 17 Aug 2025 04:21:06 +0000 Subject: [PATCH 1/8] Update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.11.3 --- template-placeholder/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/template-placeholder/pom.xml b/template-placeholder/pom.xml index cc32fe8..15dacb0 100644 --- a/template-placeholder/pom.xml +++ b/template-placeholder/pom.xml @@ -108,7 +108,7 @@ org.apache.maven.plugins maven-javadoc-plugin - 3.11.2 + 3.11.3 attach-javadocs From 2924da1aeef63b378dc17d58c80e50e146fafbde Mon Sep 17 00:00:00 2001 From: XDEV Renovate Bot Date: Fri, 22 Aug 2025 04:14:57 +0000 Subject: [PATCH 2/8] Update actions/setup-java action to v5 --- .github/workflows/check-build.yml | 6 +++--- .github/workflows/release.yml | 8 ++++---- .github/workflows/test-deploy.yml | 4 ++-- 3 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/check-build.yml b/.github/workflows/check-build.yml index fdeead2..09b3548 100644 --- a/.github/workflows/check-build.yml +++ b/.github/workflows/check-build.yml @@ -36,7 +36,7 @@ jobs: - uses: actions/checkout@v5 - name: Set up JDK - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: ${{ matrix.distribution }} java-version: ${{ matrix.java }} @@ -84,7 +84,7 @@ jobs: - uses: actions/checkout@v5 - name: Set up JDK - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: ${{ matrix.distribution }} java-version: ${{ matrix.java }} @@ -107,7 +107,7 @@ jobs: - uses: actions/checkout@v5 - name: Set up JDK - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: ${{ matrix.distribution }} java-version: ${{ matrix.java }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index e415f67..ea4ad2f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -19,7 +19,7 @@ jobs: - uses: actions/checkout@v5 - name: Set up JDK - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: java-version: '17' distribution: 'temurin' @@ -114,7 +114,7 @@ jobs: git pull - name: Set up JDK - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: # running setup-java overwrites the settings.xml distribution: 'temurin' java-version: '17' @@ -131,7 +131,7 @@ jobs: MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_GPG_PASSPHRASE }} - name: Set up JDK - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: # running setup-java again overwrites the settings.xml distribution: 'temurin' java-version: '17' @@ -162,7 +162,7 @@ jobs: git pull - name: Setup - Java - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: java-version: '17' distribution: 'temurin' diff --git a/.github/workflows/test-deploy.yml b/.github/workflows/test-deploy.yml index 795bd6e..cfd79b4 100644 --- a/.github/workflows/test-deploy.yml +++ b/.github/workflows/test-deploy.yml @@ -14,7 +14,7 @@ jobs: - uses: actions/checkout@v5 - name: Set up JDK - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: # running setup-java overwrites the settings.xml distribution: 'temurin' java-version: '17' @@ -31,7 +31,7 @@ jobs: MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_GPG_PASSPHRASE }} - name: Set up JDK - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: # running setup-java again overwrites the settings.xml distribution: 'temurin' java-version: '17' From 739ed7eeff798dd0e1b5ce83bc299d9f5638e06c Mon Sep 17 00:00:00 2001 From: XDEV Renovate Bot Date: Sat, 23 Aug 2025 04:10:18 +0000 Subject: [PATCH 3/8] Update lycheeverse/lychee-action digest to 01a5c94 --- .github/workflows/broken-links.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/broken-links.yml b/.github/workflows/broken-links.yml index 3acb9c9..fdcf436 100644 --- a/.github/workflows/broken-links.yml +++ b/.github/workflows/broken-links.yml @@ -18,7 +18,7 @@ jobs: - name: Link Checker id: lychee - uses: lycheeverse/lychee-action@5c4ee84814c983aa7164eaee476f014e53ff3963 # v2 + uses: lycheeverse/lychee-action@01a5c94d8e012550040658854b90a7a7301e75ca # v2 with: fail: false # Don't fail on broken links, create an issue instead From ebc61877abfaf00860f4c7cf4c1b5205bf6aaf36 Mon Sep 17 00:00:00 2001 From: XDEV Renovate Bot Date: Tue, 26 Aug 2025 04:11:33 +0000 Subject: [PATCH 4/8] Update lycheeverse/lychee-action digest to 885c65f --- .github/workflows/broken-links.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/broken-links.yml b/.github/workflows/broken-links.yml index fdcf436..4d8ac3c 100644 --- a/.github/workflows/broken-links.yml +++ b/.github/workflows/broken-links.yml @@ -18,7 +18,7 @@ jobs: - name: Link Checker id: lychee - uses: lycheeverse/lychee-action@01a5c94d8e012550040658854b90a7a7301e75ca # v2 + uses: lycheeverse/lychee-action@885c65f3dc543b57c898c8099f4e08c8afd178a2 # v2 with: fail: false # Don't fail on broken links, create an issue instead From 8840dd2473c2d56ce1d37be57be8af18f333b9be Mon Sep 17 00:00:00 2001 From: XDEV Renovate Bot Date: Tue, 26 Aug 2025 06:53:20 +0000 Subject: [PATCH 5/8] Update org.springframework.boot.version to v3.5.5 --- template-placeholder-demo/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/template-placeholder-demo/pom.xml b/template-placeholder-demo/pom.xml index ddf9d80..a4c81fd 100644 --- a/template-placeholder-demo/pom.xml +++ b/template-placeholder-demo/pom.xml @@ -31,7 +31,7 @@ 24.8.6 - 3.5.4 + 3.5.5 From 95832cd02c977058fecded4cf82cbb10fdaeaa31 Mon Sep 17 00:00:00 2001 From: XDEV Renovate Bot Date: Tue, 26 Aug 2025 06:53:21 +0000 Subject: [PATCH 6/8] Update vaadin.version to v24.8.7 --- template-placeholder-demo/pom.xml | 2 +- template-placeholder/pom.xml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/template-placeholder-demo/pom.xml b/template-placeholder-demo/pom.xml index ddf9d80..577cef8 100644 --- a/template-placeholder-demo/pom.xml +++ b/template-placeholder-demo/pom.xml @@ -29,7 +29,7 @@ software.xdev.vaadin.Application - 24.8.6 + 24.8.7 3.5.4 diff --git a/template-placeholder/pom.xml b/template-placeholder/pom.xml index e7507d2..65be120 100644 --- a/template-placeholder/pom.xml +++ b/template-placeholder/pom.xml @@ -49,7 +49,7 @@ UTF-8 - 24.8.6 + 24.8.7 From 8c154ddfdc0430d85fd2135569611946a6deb341 Mon Sep 17 00:00:00 2001 From: AB Date: Tue, 26 Aug 2025 09:20:53 +0200 Subject: [PATCH 7/8] Update to latest checkstyle version --- .idea/checkstyle-idea.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.idea/checkstyle-idea.xml b/.idea/checkstyle-idea.xml index d43641c..ec555b5 100644 --- a/.idea/checkstyle-idea.xml +++ b/.idea/checkstyle-idea.xml @@ -1,7 +1,7 @@ - 10.26.1 + 11.0.0 JavaOnlyWithTests true true From 3c3c27c4fa8a51145fbbff1c33158378e38d5305 Mon Sep 17 00:00:00 2001 From: AB Date: Thu, 28 Aug 2025 10:23:52 +0200 Subject: [PATCH 8/8] Remove whitespaces --- .config/pmd/java/ruleset.xml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/.config/pmd/java/ruleset.xml b/.config/pmd/java/ruleset.xml index 5f5884b..02a037f 100644 --- a/.config/pmd/java/ruleset.xml +++ b/.config/pmd/java/ruleset.xml @@ -196,9 +196,9 @@ + language="java" + message="Setters of java.lang.System should not be called unless really needed" + class="net.sourceforge.pmd.lang.rule.xpath.XPathRule"> Calling setters of java.lang.System usually indicates bad design and likely causes unexpected behavior. For example, it may break when multiple Threads are setting the value. @@ -219,9 +219,9 @@ + language="java" + message="Using Java Object (De-)Serialization is unsafe and has led to too many security vulnerabilities" + class="net.sourceforge.pmd.lang.rule.xpath.XPathRule"> Nearly every known usage of (Java) Object Deserialization has resulted in [a security vulnerability](https://cloud.google.com/blog/topics/threat-intelligence/hunting-deserialization-exploits?hl=en). Vulnerabilities are so common that there are [dedicated projects for exploit payload generation](https://github.com/frohoff/ysoserial).