Bump the dependencies group across 1 directory with 30 updates #1931

dependabot · 2024-05-20T06:58:23Z

Bumps the dependencies group with 30 updates in the / directory:

Package	From	To
org.owasp:dependency-check-maven	`9.0.9`	`9.2.0`
org.jacoco:jacoco-maven-plugin	`0.8.11`	`0.8.12`
org.apache.maven.plugins:maven-source-plugin	`3.3.0`	`3.3.1`
org.apache.maven.plugins:maven-gpg-plugin	`3.1.0`	`3.2.4`
org.apache.maven.plugins:maven-assembly-plugin	`3.6.0`	`3.7.1`
org.apache.maven.plugins:maven-compiler-plugin	`3.12.1`	`3.13.0`
ch.qos.logback:logback-classic	`1.5.0`	`1.5.6`
org.slf4j:jul-to-slf4j	`2.0.12`	`2.0.13`
org.slf4j:slf4j-api	`2.0.12`	`2.0.13`
org.postgresql:postgresql	`42.7.2`	`42.7.3`
com.fasterxml.jackson.core:jackson-annotations	`2.16.1`	`2.17.1`
com.fasterxml.jackson.core:jackson-core	`2.16.1`	`2.17.1`
com.fasterxml.jackson.core:jackson-databind	`2.16.1`	`2.17.1`
org.apache.commons:commons-text	`1.11.0`	`1.12.0`
de.fraunhofer.iosb.ilt:Configurable	`0.34`	`0.35`
org.codehaus.mojo:javacc-maven-plugin	`3.0.1`	`3.1.0`
io.github.git-commit-id:git-commit-id-maven-plugin	`7.0.0`	`8.0.2`
org.apache.commons:commons-dbcp2	`2.11.0`	`2.12.0`
org.jooq:jooq	`3.16.23`	`3.19.8`
org.jooq:jooq-meta	`3.16.23`	`3.19.8`
org.jooq:jooq-codegen	`3.16.23`	`3.19.8`
org.keycloak:keycloak-servlet-filter-adapter	`23.0.6`	`24.0.4`
commons-io:commons-io	`2.15.1`	`2.16.1`
org.apache.commons:commons-csv	`1.10.0`	`1.11.0`
org.apache.maven.plugins:maven-shade-plugin	`3.5.1`	`3.5.3`
org.testcontainers:junit-jupiter	`1.19.5`	`1.19.8`
com.google.guava:guava	`33.0.0-jre`	`33.2.0-jre`
org.eclipse.jetty:jetty-servlet	`10.0.20`	`10.0.21`
org.json:json	`20240205`	`20240303`
org.apache.maven.plugins:maven-jar-plugin	`3.3.0`	`3.4.1`

Updates org.owasp:dependency-check-maven from 9.0.9 to 9.2.0

Release notes

Sourced from org.owasp:dependency-check-maven's releases.

Version 9.2.0

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Version 9.1.0

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Version 9.0.10

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Changelog

Sourced from org.owasp:dependency-check-maven's changelog.

Version 9.2.0 (2024-05-15)

docs: update logo per intellj (#6660)

feat: Carthage analyzer (#6614)

fix: Ensure valid JSON output for gitlab report (#6630)

feat: Support Package.swift version 3 Specification (#6578)

chore: Update the packaged suppressions to include new hosted suppressions (#6567)

See the full listing of changes.

Version 9.1.0 (2024-03-31)

feat: Add v2 support for maven_install.json (#6528)

build(deps): bump open-vulnerability-client (#6554)

resolves update issues due to CVSS Metrics 4.0

build(deps): bump jackson.version from 2.16.0 to 2.16.1 (#6353)

build(deps): bump org.jsoup:jsoup from 1.16.2 to 1.17.2 (#6362)

build(deps): bump golang from 1.21.5-alpine to 1.22.1-alpine (#6506)

See the full listing of changes.

Version 9.0.10 (2024-03-15)

fix: #4321 Suppress redis server CVEs for client libraries (#4321) (#6489)

fix: bump commons-compress from 1.25.0 to 1.26.0 to fix CVE-2024-25710 and CVE-2024-26308 (#6492)

feat: Allow to pass NVD API key via environment variable (#6454)

fix: issue 5452 - ConcurrentModificationException in NodePackageAnalyzer.processDependencies - adding synchronized block (#6501)

docs: document the default data directory (#6484)

fix: prevent NPE in bundler audit (#6462)

fix: #6441 Improve suppression rule to not restrict to a single version (#6442)

See the full listing of changes.

Commits

192b4cd build: prepare release v9.2.0
e50e20d docs: update changelog
5ce66cf build(deps): bump org.apache.maven.plugin-tools:maven-plugin-annotations from...
61edfd1 docs: update logo per intellj (#6660)
8b1746e build(deps): bump com.github.spotbugs:spotbugs-annotations from 4.8.4 to 4.8....
754dec1 build(deps): bump maven-plugin-plugin (#6646)
969bc27 build(deps): bump org.apache.maven.plugins:maven-surefire-report-plugin from ...
57b916a build(deps): bump com.github.spotbugs:spotbugs-maven-plugin from 4.8.4.0 to 4...
9c9c466 build(deps): bump commons-codec:commons-codec from 1.16.1 to 1.17.0 (#6633)
e26096d build(deps): bump commons-cli:commons-cli from 1.6.0 to 1.7.0 (#6629)
Additional commits viewable in compare view

Updates org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.12

Release notes

Sourced from org.jacoco:jacoco-maven-plugin's releases.

0.8.12

New Features

JaCoCo now officially supports Java 22 (GitHub #1596).

Experimental support for Java 23 class files (GitHub #1553).

Fixed bugs

Branches added by the Kotlin compiler for functions with default arguments and having more than 32 parameters are filtered out during generation of report (GitHub #1556).

Branch added by the Kotlin compiler version 1.5.0 and above for reading from lateinit property is filtered out during generation of report (GitHub #1568).

Non-functional Changes

JaCoCo now depends on ASM 9.7 (GitHub #1600).

Commits

dbfb6f2 Prepare release 0.8.12
a50585b Upgrade maven-plugin-plugin to 3.6.4 (#1604)
fd63cc5 Configure labels that Dependabot assigns to PRs (#1603)
03a5333 Add configuration for Dependabot to simplify updates of ASM (#1601)
40ff9fb Upgrade ASM to 9.7 (#1600)
9077178 Happy birthday Java 22! (#1596)
7edd1b5 Bump actions/setup-java from 4.1.0 to 4.2.1 (#1594)
e50b547 Upgrade ECJ to 3.37.0 (#1590)
a1144d0 Upgrade maven-site-plugin to 3.12.1 (#1586)
04b0141 Bump actions/setup-java from 4.0.0 to 4.1.0 (#1587)
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-source-plugin from 3.3.0 to 3.3.1

Commits

f80596e [maven-release-plugin] prepare release maven-source-plugin-3.3.1
7626998 Bump apache/maven-gh-actions-shared from 3 to 4
83c963c Bump org.apache.maven.plugins:maven-plugins from 39 to 41 (#18)
40ae495 Bump org.codehaus.plexus:plexus-archiver from 4.8.0 to 4.9.1 (#20)
073462b Bump org.apache.maven:maven-archiver from 3.6.0 to 3.6.1 (#21)
0b1c823 Fix typos in AbstractSourceJarMojo exception
099c65a [MSOURCES-142] Bump org.codehaus.plexus:plexus-archiver from 4.7.1 to 4.8.0 (...
1edeea4 [MSOURCES-139] Fix typo in AbstractSourceJarMojo exception
436966e [maven-release-plugin] prepare for next development iteration
See full diff in compare view

Updates org.apache.maven.plugins:maven-gpg-plugin from 3.1.0 to 3.2.4

Release notes

Sourced from org.apache.maven.plugins:maven-gpg-plugin's releases.

3.2.4

Release Notes - Maven GPG Plugin - Version 3.2.4

[MGPG-125] - Fix "bestPractices" (#95) @cstamas

📦 Dependency updates

Bump commons-io:commons-io from 2.16.0 to 2.16.1 (#94) @dependabot

3.2.3

Release Notes - Maven GPG Plugin - Version 3.2.3

... (truncated)

Commits

789149e [maven-release-plugin] prepare release maven-gpg-plugin-3.2.4
893aedc [MGPG-125] Fix "bestPractices" (#95)
b6f0324 [MGPG-126] Bump commons-io:commons-io from 2.16.0 to 2.16.1 (#94)
3c5878b [maven-release-plugin] prepare for next development iteration
89b91a4 [maven-release-plugin] prepare release maven-gpg-plugin-3.2.3
fc2efa3 [MGPG-123][MGPG-124] Dependency upgrades (#93)
50222d3 [MGPG-120] New mojo sign-deployed (#88)
a6c3a09 [MGPG-122] Bump org.apache.maven.plugins:maven-invoker-plugin from 3.6.0 to 3...
78f5e37 [MGPG-121] Return the workaround for pseudo security (#90)
582df74 [MGPG-117] Improve passphrase handling (#86)
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-assembly-plugin from 3.6.0 to 3.7.1

Release notes

Sourced from org.apache.maven.plugins:maven-assembly-plugin's releases.

3.7.1

Release Notes - Maven Assembly Plugin - Version 3.7.1

What's Changed

[MASSEMBLY-1023] Bump org.apache.maven.shared:maven-filtering from 3.3.1 to 3.3.2 by @dependabot in apache/maven-assembly-plugin#192

[MASSEMBLY-1024] Bump org.apache.commons:commons-compress from 1.25.0 to 1.26.1 by @dependabot in apache/maven-assembly-plugin#191

[MASSEMBLY-1025] Bump org.codehaus.plexus:plexus-archiver from 4.9.1 to 4.9.2 by @dependabot in apache/maven-assembly-plugin#195

[MASSEMBLY-1022] Unresolved artifacts should be not processed by @slawekjaranowski in apache/maven-assembly-plugin#194

Full Changelog: apache/maven-assembly-plugin@maven-assembly-plugin-3.7.0...maven-assembly-plugin-3.7.1

3.7.0

Release Notes - Maven Assembly Plugin - Version 3.7.0

... (truncated)

Commits

0afbb3e [maven-release-plugin] prepare release maven-assembly-plugin-3.7.1
74e858a [MASSEMBLY-1022] Unresolved artifacts should be not processed
cb56382 [MASSEMBLY-1025] Bump org.codehaus.plexus:plexus-archiver from 4.9.1 to 4.9.2...
86bbed0 [MASSEMBLY-1024] Bump org.apache.commons:commons-compress from 1.25.0 to 1.26...
bdcc4d0 [MASSEMBLY-1023] Bump org.apache.maven.shared:maven-filtering from 3.3.1 to 3...
74fe92e [maven-release-plugin] prepare for next development iteration
9be6e87 [maven-release-plugin] prepare release maven-assembly-plugin-3.7.0
e8630dc Bump apache/maven-gh-actions-shared from 3 to 4
98f97a5 Bump org.postgresql:postgresql in /src/it/projects/bugs/massembly-730
c84e110 [MASSEMBLY-1019] Maven 3.6.3 as minimum requirements
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.12.1 to 3.13.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.13.0

🚀 New features and improvements

[MCOMPILER-574] - Propagate cause of exception in AbstractCompilerMojo (#232) @slawekjaranowski

[MCOMPILER-582] - Automatic detection of release option for JDK < 9 (#228) @slawekjaranowski

[MCOMPILER-583] - Require Maven 3.6.3 (#229) @slawekjaranowski

[MCOMPILER-577] - Rename parameter "forceJavacCompilerUse" (#225) @kwin

[MCOMPILER-570] - Add links to javac documentation of JDK17 (#224) @kwin

[MCOMPILER-576] - Deprecate parameter "compilerVersion" (#223) @kwin

📦 Dependency updates

[MCOMPILER-575] - Bump plexusCompilerVersion from 2.14.2 to 2.15.0 (#227) @dependabot

Bump apache/maven-gh-actions-shared from 3 to 4 (#226) @dependabot

📝 Documentation updates

[MCOMPILER-548] - JDK 21 throws annotations processing warning that can not be turned off (#200) @hgschmie

👻 Maintenance

[MCOMPILER-584] - Refresh page - Using Non-Javac Compilers (#231) @slawekjaranowski

[MCOMPILER-585] - Refresh plugins versions in ITs (#230) @slawekjaranowski

subject verb agreement (#221) @elharo

Commits

a1415aa [maven-release-plugin] prepare release maven-compiler-plugin-3.13.0
b2b9196 [MCOMPILER-574] Propagate cause of exception in AbstractCompilerMojo
6d2ce5a [MCOMPILER-584] Refresh page - Using Non-Javac Compilers
eebad60 [MCOMPILER-585] Refresh plugins versions in ITs
ceacf68 [MCOMPILER-582] Automatic detection of release option for JDK < 9
110293f [MCOMPILER-583] Require Maven 3.6.3
90131df [MCOMPILER-575] Bump plexusCompilerVersion from 2.14.2 to 2.15.0 (#227)
74cfc72 [MCOMPILER-548] JDK 21 throws annotations processing warning that can not be ...
f85aa27 Bump apache/maven-gh-actions-shared from 3 to 4
d59ef49 extract Maven 3.3.1 specific method call
Additional commits viewable in compare view

Updates ch.qos.logback:logback-classic from 1.5.0 to 1.5.6

Commits

7812a55 prepare release 1.5.6
759fc25 fix issues/805 i.e. LOGBACK-1768, included file with inner conditional
3d55638 start work on 1.5.6-SNAPSHOT
a91d2b6 notes about javadocs
c7c5e89 prepare release 1.5.5
7db8797 upgrade build to slf4j 2.0.13
f9c04d2 test inclusion with conditionals
f32ed30 remove support for metaannotations for NoAutoStart annotation
4476edd Search for @NoAutoStart annotations in ancestor hierarchy, implemented interf...
a649c60 rename IncludeActionTest as IncludeModelHandlerTest
Additional commits viewable in compare view

Updates org.slf4j:jul-to-slf4j from 2.0.12 to 2.0.13

Updates org.slf4j:slf4j-api from 2.0.12 to 2.0.13

Updates org.postgresql:postgresql from 42.7.2 to 42.7.3

Release notes

Sourced from org.postgresql:postgresql's releases.

v42.7.3

Changes

bump version to 42.7.4 @davecramer (#3164)

fix Issue boolean types not handled in SimpleQuery mode @davecramer (#3146)

The Gradle config enforces 17+ @OrangeDog (#3147)

Fix 2 changelog entry titles @crunchyjohn (#3142)

chore: ensure CI jobs include tests for all the values of preferQueryMode, ssl, xa, gss @vlsi (#3137)

update jdbc website security page with latest security advisory @davecramer (#3135)

Changelog

Sourced from org.postgresql:postgresql's changelog.

[42.7.3] (2024-04-14 14:51:00 -0400)

Changed

chore: gradle config enforces 17+ [PR #3147](pgjdbc/pgjdbc#3147)

Fixed

fix: boolean types not handled in SimpleQuery mode [PR #3146](pgjdbc/pgjdbc#3146)

make sure we handle boolean types in simple query mode

support uuid as well

handle all well known types in text mode and change else if to switch

fix: released new versions of 42.2.29, 42.3.10, 42.4.5, 42.5.6, 42.6.2 to deal with NoSuchMethodError on ByteBuffer#position when running on Java 8

Commits

818953a fix Issue # 3145 boolean types not handled in SimpleQuery mode (#3146)
0e8ab63 The Gradle config enforces 17+ (#3147)
b591b9f Fix 2 changelog entry titles (#3142)
81844e6 chore: ensure CI jobs include tests for all the values of preferQueryMode
2fada9e update security page (#3135)
388f027 fix: typo password_encrypton -> password_encryption in the error message
9cde4f5 Update site for release of 42.7.2 (#3133)
df14e53 update version and last year modified
See full diff in compare view

Updates org.slf4j:slf4j-api from 2.0.12 to 2.0.13

Updates com.fasterxml.jackson.core:jackson-annotations from 2.16.1 to 2.17.1

Commits

See full diff in compare view

Updates com.fasterxml.jackson.core:jackson-core from 2.16.1 to 2.17.1

Commits

cba40f1 [maven-release-plugin] prepare release jackson-core-2.17.1
d33c4b5 Prepare for 2.17.1 release
2a4a6dc Fix #1256: revert #1117, default recycler pool again threadLocalPool() (for...
7e57e5b Update branch designation for CI
4b8d399 Part of #1260: write a manually run concurrency test to tease out problem wit...
33c4260 Fixes #1262: Add diagnostic method pooledCount() in RecyclerPool (#1263)
c73bde2 Fix NumberInput.looksLikeValidNumber() implementation (#1241)
1c656ae ...
11e3bd7 update(tests): migrate remaining JUnit 4 code in core to JUnit 5 (#1248)
fff79ea update(tests): migrate JUnit 4 code to JUnit 5 in core.base64 to core.sym (#1...
Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.16.1 to 2.17.1

Commits

See full diff in compare view

Updates com.fasterxml.jackson.core:jackson-core from 2.16.1 to 2.17.1

Commits

cba40f1 [maven-release-plugin] prepare release jackson-core-2.17.1
d33c4b5 Prepare for 2.17.1 release
2a4a6dc Fix #1256: revert #1117, default recycler pool again threadLocalPool() (for...
7e57e5b Update branch designation for CI
4b8d399 Part of #1260: write a manually run concurrency test to tease out problem wit...
33c4260 Fixes #1262: Add diagnostic method pooledCount() in RecyclerPool (#1263)
c73bde2 Fix NumberInput.looksLikeValidNumber() implementation (#1241)
1c656ae ...
11e3bd7 update(tests): migrate remaining JUnit 4 code in core to JUnit 5 (#1248)
fff79ea update(tests): migrate JUnit 4 code to JUnit 5 in core.base64 to core.sym (#1...
Additional commits viewable in compare view

Updates org.apache.commons:commons-text from 1.11.0 to 1.12.0

Updates de.fraunhofer.iosb.ilt:Configurable from 0.34 to 0.35

Changelog

Sourced from de.fraunhofer.iosb.ilt:Configurable's changelog.

Release Version 0.35

Updates

Updated the minimum Java version to 17, since new JavaFX versions have this requirement.

Updated dependencies.

Commits

a6af1f4 Release v0.35
b768aa5 Bump the dependencies group with 5 updates (#141)
003570f Bump actions/cache from 3 to 4 (#138)
847eee7 Bump actions/setup-java from 3 to 4 (#133)
adac0b7 Bump the dependencies group with 4 updates (#134)
26849f0 [CI] Group github-actions updates
1710e41 Bump the dependencies group with 8 updates (#116)
7bc5658 Bump actions/checkout from 3 to 4 (#115)
bec76b0 Updated minimum Java version to 17
db5564e [CI] Grouped dependency updates
Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.16.1 to 2.17.1

Commits

See full diff in compare view

Updates org.codehaus.mojo:javacc-maven-plugin from 3.0.1 to 3.1.0

Release notes

Sourced from org.codehaus.mojo:javacc-maven-plugin's releases.

3.1.0

🚀 New features and improvements

Require Maven 3.6.3+ (#67) @slachiewicz

Enable spotless for code formatting (#58) @slawekjaranowski

📦 Dependency updates

Bump net.java.dev.javacc:javacc from 7.0.12 to 7.0.13 (#63) @dependabot

Bump org.apache.maven.plugin-tools:maven-plugin-annotations from 3.10.1 to 3.10.2 (#62) @dependabot

Bump org.apache.maven.plugin-tools:maven-plugin-annotations from 3.9.0 to 3.10.1 (#60) @dependabot

Bump parent from 70 to 76 (#56) @slawekjaranowski

Bump maven-invoker-plugin from 3.5.1 to 3.6.0 (#53) @dependabot

Bump maven-plugin-annotations from 3.8.2 to 3.9.0 (#50) @dependabot

Bump maven-plugin-annotations from 3.8.1 to 3.8.2 (#47) @dependabot

Bump doxia-sink-api from 1.0-alpha-9 to 1.12.0 (#45) @dependabot

Bump maven-plugin-annotations from 3.7.1 to 3.8.1 (#43) @dependabot

Bump plexus-utils from 3.5.0 to 3.5.1 (#44) @dependabot

Bump maven-plugin-annotations from 3.6.4 to 3.7.1 (#39) @dependabot

Bump plexus-utils from 3.4.2 to 3.5.0 (#35) @dependabot

🔧 Build

Require Maven 3.2.5+ (#48) @slachiewicz

Use Maven 3.9.4 on GitHub actions (#57) @slawekjaranowski

Code cleanup and simplification (#51) @slachiewicz

Bump org.codehaus.mojo:mojo-parent from 78 to 80 (#70) @dependabot

Bump org.codehaus.mojo:mojo-parent from 76 to 78 (#64) @dependabot

Commits

6b0fff8 [maven-release-plugin] prepare for next development iteration
5a3fbb2 [maven-release-plugin] prepare release v3.1.0
1ac99a6 Bump org.codehaus.mojo:mojo-parent from 78 to 80
1fb5acb Bump to 3.1.0-SNAPSHOT
ec624e0 Require Maven 3.6.3+
88ac6f5 Use default gha setup
efdd6a9 Bump org.codehaus.mojo:mojo-parent from 76 to 78
9e6ade0 Bump release-drafter/release-drafter from 5 to 6
8b48f63 Bump net.java.dev.javacc:javacc from 7.0.12 to 7.0.13
f1c6cd8 Bump org.apache.maven.plugin-tools:maven-plugin-annotations
Additional commits viewable in compare view

Updates io.github.git-commit-id:git-commit-id-maven-plugin from 7.0.0 to 8.0.2

Release notes

Sourced from io.github.git-commit-id:git-commit-id-maven-plugin's releases.

Version 8.0.2 is finally there and includes various bug-fixes and improvements :-)

New Features / Bug-Fixes:

The main key-aspects that have been improved or being worked on are the following:

bump jakarta.xml.bind:jakarta.xml.bind-api from 4.0.1 to 4.0.2

bump org.mockito:mockito-core from 5.10.0 to 5.11.0

#718/#721: replace junit:junit:4.13.2:test with org.junit.jupiter:junit-jupiter-*:5.10.2:test

#717/#720: update org.sonatype.plexus:plexus-build-api:0.0.7 to org.codehaus.plexus:plexus-build-api:1.2.0

bump org.apache.maven.plugins:maven-gpg-plugin from 3.1.0 to 3.2.0

bump org.apache.maven.plugins:maven-assembly-plugin from 3.6.0 to 3.7.0

#717: Update maven-plugin-api.version from 3.9.2 to 3.9.6

Getting the latest release

The plugin is available from Maven Central (see here), so you don't have to configure any additional repositories to use this plugin. All you need to do is to configure it inside your project as dependency:
<dependency>
    <groupId>io.github.git-commit-id</groupId>
    <artifactId>git-commit-id-maven-plugin</artifactId>
    <version>8.0.2</version>
</dependency>
Getting the latest snapshot (build automatically)

If you can't wait for the next release, you can also get the latest snapshot version from sonatype, that is being deployed automatically by github actions:
<pluginRepositories>
    <pluginRepository>
        <id>sonatype-snapshots</id>
        <name>Sonatype Snapshots</name>
         <url>https://s01.oss.sonatype.org/content/repositories/snapshots/</url>
    </pluginRepository>
</pluginRepositories>
Even though the github actions will only deploy a new snapshot once all tests have finished, it is recommended to rely on the released and more stable version.

Known Issues / Limitations:

This plugin is unfortunately not working with Heroku which is due to the fact how Heroku works. In summary Heroku does not copy over the .git-repository but in order to determine the git properties this plugin relies on the fact that it has access to the git-repository. A somewhat workaround to get some information is outlined in ktoso/maven-git-commit-id-plugin#279

Using maven's plugin prefix resolution (e.g. mvn com.test.plugins:myPlugin:myMojo) might result in unresolved properties even with <injectAllReactorProjects>true</injectAllReactorProjects>. Please refer to git-commit-id/maven-git-commit-id-plugin#287 or git-commit-id/maven-git-commit-id-plugin#413 for details and potential workarounds

Reporting Problems

If you find any problem with this plugin, feel free to report it here

Version 8.0.1 is finally there and includes various bug-fixes and improvements :-)

New Features / Bug-Fixes:

The main key-aspects that have been improved or being worked on are the following:

make use of git-commit-id-plugin-core:6.0.0-rc.8

... (truncated)

Commits

a653500 [maven-release-plugin] prepare release v8.0.2
a47df92 Merge pull request #721 from git-commit-id/718
2abe48d Merge remote-tracking branch 'origin/master' into 718
95deae6 git-commit-id/git-commit-id-maven-plugin#718: repla...
2b06e3f Merge pull request #706 from git-commit-id/dependabot/maven/org.mockito-mocki...
d7524f5 Bump org.mockito:mockito-core from 5.10.0 to 5.11.0
f7048fc git-commit-id/git-commit-id-maven-plugin#717: updat...
f257625 tell the versions-update-plugin to ignore alpha and M versions
78e192a add groupId to be more explicit and hopefully dependabot can update the depen...
02fac6f git-commit-id/git-commit-id-maven-plugin#717: Updat...
Additional commits viewable in compare view

Updates org.apache.commons:commons-dbcp2 from 2.11.0 to 2.12.0

Updates org.jooq:jooq from 3.16.23 to 3.19.8

Updates org.jooq:jooq-meta from 3.16.23 to 3.19.8

Updates org.jooq:jooq-codegen from 3.16.23 to 3.19.8

Updates org.keycloak:keycloak-servlet-filter-adapter from 23.0.6 to 24.0.4

Updates commons-io:commons-io from 2.15.1 to 2.16.1

Updates org.apache.commons:commons-csv from 1.10.0 to 1.11.0

Changelog

Sourced from org.apache.commons:commons-csv's changelog.

Apache Commons CSV Version 1.11.0 Release Notes

This document contains the release notes for the 1.11.0 version of Apache Commons CSV. Commons CSV reads and writes files in variations of the Comma Separated Value (CSV) format.

Commons CSV requires at least Java 8.

The Apache Commons CSV library provides a simple interface for reading and writing CSV files of various types.

Feature and bug fix release (Java 8 or above)

Changes in this version include:

New Features
CSV-308: [Javadoc] Add example to CSVFormat#setHeaderComments() #344. Thanks to Buddhi De Silva, Gary Gregory.
      Add and use CSVFormat#setTrailingData(boolean) in CSVFormat.EXCEL for Excel compatibility [#303](https://github.com/apache/commons-csv/issues/303). Thanks to DamjanJovanovic, Gary Gregory.
      Add and use CSVFormat#setLenientEof(boolean) in CSVFormat.EXCEL for Excel compatibility [#303](https://github.com/apache/commons-csv/issues/303). Thanks to DamjanJovanovic, Gary Gregory.
Fixed Bugs
CSV-306: Replace deprecated method in user guide, update external link #324, #325. Thanks to Sam Ng, Bruno P. Kinoshita.
      Document duplicate header behavior [#309](https://github.com/apache/commons-csv/issues/309). Thanks to Seth Falco, Bruno P. Kinoshita.
      Add missing docs [#328](https://github.com/apache/commons-csv/issues/328). Thanks to jkbkupczyk.
      [StepSecurity] CI: Harden GitHub Actions [#329](https://github.com/apache/commons-csv/issues/329), [#330](https://github.com/apache/commons-csv/issues/330). Thanks to step-security-bot.
CSV-147: Better error message during faulty CSV record read #347. Thanks to Steven Peterson, Benedikt Ritter, Gary Gregory, Joerg Schaible, Buddhi De Silva, Elliotte Rusty Harold.

CSV-310: Misleading error message when QuoteMode set to None #352. Thanks to Buddhi De Silva.

CSV-311: OutOfMemory for very long rows despite using column value of type Reader. Thanks to Christian Feuersaenger, Gary Gregory.
      Use try-with-resources to manage JDBC Clob in CSVPrinter.printRecords(ResultSet). Thanks to Gary Gregory.
      JDBC Blob columns are now output as Base64 instead of Object#toString(), which usually is InputStream#toString(). Thanks to Gary Gregory.
      Support unusual Excel use cases: Add support for trailing data after the closing quote, and EOF without...
Description has been truncated

Bumps the dependencies group with 30 updates in the / directory: | Package | From | To | | --- | --- | --- | | [org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck) | `9.0.9` | `9.2.0` | | [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.11` | `0.8.12` | | [org.apache.maven.plugins:maven-source-plugin](https://github.com/apache/maven-source-plugin) | `3.3.0` | `3.3.1` | | [org.apache.maven.plugins:maven-gpg-plugin](https://github.com/apache/maven-gpg-plugin) | `3.1.0` | `3.2.4` | | [org.apache.maven.plugins:maven-assembly-plugin](https://github.com/apache/maven-assembly-plugin) | `3.6.0` | `3.7.1` | | [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.12.1` | `3.13.0` | | [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.0` | `1.5.6` | | org.slf4j:jul-to-slf4j | `2.0.12` | `2.0.13` | | org.slf4j:slf4j-api | `2.0.12` | `2.0.13` | | [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) | `42.7.2` | `42.7.3` | | [com.fasterxml.jackson.core:jackson-annotations](https://github.com/FasterXML/jackson) | `2.16.1` | `2.17.1` | | [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.16.1` | `2.17.1` | | [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.16.1` | `2.17.1` | | org.apache.commons:commons-text | `1.11.0` | `1.12.0` | | [de.fraunhofer.iosb.ilt:Configurable](https://github.com/FraunhoferIOSB/Configurable) | `0.34` | `0.35` | | [org.codehaus.mojo:javacc-maven-plugin](https://github.com/mojohaus/javacc-maven-plugin) | `3.0.1` | `3.1.0` | | [io.github.git-commit-id:git-commit-id-maven-plugin](https://github.com/git-commit-id/git-commit-id-maven-plugin) | `7.0.0` | `8.0.2` | | org.apache.commons:commons-dbcp2 | `2.11.0` | `2.12.0` | | org.jooq:jooq | `3.16.23` | `3.19.8` | | org.jooq:jooq-meta | `3.16.23` | `3.19.8` | | org.jooq:jooq-codegen | `3.16.23` | `3.19.8` | | org.keycloak:keycloak-servlet-filter-adapter | `23.0.6` | `24.0.4` | | commons-io:commons-io | `2.15.1` | `2.16.1` | | [org.apache.commons:commons-csv](https://github.com/apache/commons-csv) | `1.10.0` | `1.11.0` | | [org.apache.maven.plugins:maven-shade-plugin](https://github.com/apache/maven-shade-plugin) | `3.5.1` | `3.5.3` | | [org.testcontainers:junit-jupiter](https://github.com/testcontainers/testcontainers-java) | `1.19.5` | `1.19.8` | | [com.google.guava:guava](https://github.com/google/guava) | `33.0.0-jre` | `33.2.0-jre` | | org.eclipse.jetty:jetty-servlet | `10.0.20` | `10.0.21` | | [org.json:json](https://github.com/douglascrockford/JSON-java) | `20240205` | `20240303` | | [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) | `3.3.0` | `3.4.1` | Updates `org.owasp:dependency-check-maven` from 9.0.9 to 9.2.0 - [Release notes](https://github.com/jeremylong/DependencyCheck/releases) - [Changelog](https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md) - [Commits](jeremylong/DependencyCheck@v9.0.9...v9.2.0) Updates `org.jacoco:jacoco-maven-plugin` from 0.8.11 to 0.8.12 - [Release notes](https://github.com/jacoco/jacoco/releases) - [Commits](jacoco/jacoco@v0.8.11...v0.8.12) Updates `org.apache.maven.plugins:maven-source-plugin` from 3.3.0 to 3.3.1 - [Commits](apache/maven-source-plugin@maven-source-plugin-3.3.0...maven-source-plugin-3.3.1) Updates `org.apache.maven.plugins:maven-gpg-plugin` from 3.1.0 to 3.2.4 - [Release notes](https://github.com/apache/maven-gpg-plugin/releases) - [Commits](apache/maven-gpg-plugin@maven-gpg-plugin-3.1.0...maven-gpg-plugin-3.2.4) Updates `org.apache.maven.plugins:maven-assembly-plugin` from 3.6.0 to 3.7.1 - [Release notes](https://github.com/apache/maven-assembly-plugin/releases) - [Commits](apache/maven-assembly-plugin@maven-assembly-plugin-3.6.0...maven-assembly-plugin-3.7.1) Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.12.1 to 3.13.0 - [Release notes](https://github.com/apache/maven-compiler-plugin/releases) - [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.12.1...maven-compiler-plugin-3.13.0) Updates `ch.qos.logback:logback-classic` from 1.5.0 to 1.5.6 - [Commits](qos-ch/logback@v_1.5.0...v_1.5.6) Updates `org.slf4j:jul-to-slf4j` from 2.0.12 to 2.0.13 Updates `org.slf4j:slf4j-api` from 2.0.12 to 2.0.13 Updates `org.postgresql:postgresql` from 42.7.2 to 42.7.3 - [Release notes](https://github.com/pgjdbc/pgjdbc/releases) - [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md) - [Commits](pgjdbc/pgjdbc@REL42.7.2...REL42.7.3) Updates `org.slf4j:slf4j-api` from 2.0.12 to 2.0.13 Updates `com.fasterxml.jackson.core:jackson-annotations` from 2.16.1 to 2.17.1 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.core:jackson-core` from 2.16.1 to 2.17.1 - [Commits](FasterXML/jackson-core@jackson-core-2.16.1...jackson-core-2.17.1) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.16.1 to 2.17.1 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.core:jackson-core` from 2.16.1 to 2.17.1 - [Commits](FasterXML/jackson-core@jackson-core-2.16.1...jackson-core-2.17.1) Updates `org.apache.commons:commons-text` from 1.11.0 to 1.12.0 Updates `de.fraunhofer.iosb.ilt:Configurable` from 0.34 to 0.35 - [Changelog](https://github.com/FraunhoferIOSB/Configurable/blob/master/CHANGELOG.md) - [Commits](FraunhoferIOSB/Configurable@v0.34...v0.35) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.16.1 to 2.17.1 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `org.codehaus.mojo:javacc-maven-plugin` from 3.0.1 to 3.1.0 - [Release notes](https://github.com/mojohaus/javacc-maven-plugin/releases) - [Commits](mojohaus/javacc-maven-plugin@javacc-maven-plugin-3.0.1...3.1.0) Updates `io.github.git-commit-id:git-commit-id-maven-plugin` from 7.0.0 to 8.0.2 - [Release notes](https://github.com/git-commit-id/git-commit-id-maven-plugin/releases) - [Commits](git-commit-id/git-commit-id-maven-plugin@v7.0.0...v8.0.2) Updates `org.apache.commons:commons-dbcp2` from 2.11.0 to 2.12.0 Updates `org.jooq:jooq` from 3.16.23 to 3.19.8 Updates `org.jooq:jooq-meta` from 3.16.23 to 3.19.8 Updates `org.jooq:jooq-codegen` from 3.16.23 to 3.19.8 Updates `org.jooq:jooq-codegen` from 3.16.23 to 3.19.8 Updates `org.keycloak:keycloak-servlet-filter-adapter` from 23.0.6 to 24.0.4 Updates `commons-io:commons-io` from 2.15.1 to 2.16.1 Updates `org.apache.commons:commons-csv` from 1.10.0 to 1.11.0 - [Changelog](https://github.com/apache/commons-csv/blob/master/RELEASE-NOTES.txt) - [Commits](apache/commons-csv@rel/commons-csv-1.10.0...rel/commons-csv-1.11.0) Updates `org.apache.maven.plugins:maven-shade-plugin` from 3.5.1 to 3.5.3 - [Release notes](https://github.com/apache/maven-shade-plugin/releases) - [Commits](apache/maven-shade-plugin@maven-shade-plugin-3.5.1...maven-shade-plugin-3.5.3) Updates `org.testcontainers:junit-jupiter` from 1.19.5 to 1.19.8 - [Release notes](https://github.com/testcontainers/testcontainers-java/releases) - [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md) - [Commits](testcontainers/testcontainers-java@1.19.5...1.19.8) Updates `com.google.guava:guava` from 33.0.0-jre to 33.2.0-jre - [Release notes](https://github.com/google/guava/releases) - [Commits](https://github.com/google/guava/commits) Updates `org.eclipse.jetty:jetty-servlet` from 10.0.20 to 10.0.21 Updates `org.json:json` from 20240205 to 20240303 - [Release notes](https://github.com/douglascrockford/JSON-java/releases) - [Changelog](https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md) - [Commits](https://github.com/douglascrockford/JSON-java/commits) Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.3.0 to 3.4.1 - [Release notes](https://github.com/apache/maven-jar-plugin/releases) - [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.3.0...maven-jar-plugin-3.4.1) --- updated-dependencies: - dependency-name: org.owasp:dependency-check-maven dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.jacoco:jacoco-maven-plugin dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.apache.maven.plugins:maven-source-plugin dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.apache.maven.plugins:maven-gpg-plugin dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.maven.plugins:maven-assembly-plugin dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.maven.plugins:maven-compiler-plugin dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: ch.qos.logback:logback-classic dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.slf4j:jul-to-slf4j dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.slf4j:slf4j-api dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.postgresql:postgresql dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.slf4j:slf4j-api dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: com.fasterxml.jackson.core:jackson-annotations dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: com.fasterxml.jackson.core:jackson-core dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: com.fasterxml.jackson.core:jackson-core dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.commons:commons-text dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: de.fraunhofer.iosb.ilt:Configurable dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.codehaus.mojo:javacc-maven-plugin dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: io.github.git-commit-id:git-commit-id-maven-plugin dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: org.apache.commons:commons-dbcp2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.jooq:jooq dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.jooq:jooq-meta dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.jooq:jooq-codegen dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.jooq:jooq-codegen dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.keycloak:keycloak-servlet-filter-adapter dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: commons-io:commons-io dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.commons:commons-csv dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.maven.plugins:maven-shade-plugin dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.testcontainers:junit-jupiter dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: com.google.guava:guava dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.eclipse.jetty:jetty-servlet dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.json:json dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies - dependency-name: org.apache.maven.plugins:maven-jar-plugin dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2024-06-03T06:58:21Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels May 20, 2024

dependabot bot closed this Jun 3, 2024

dependabot bot deleted the dependabot/maven/v2.0.x/dependencies-86a52cc07e branch June 3, 2024 06:58

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the dependencies group across 1 directory with 30 updates #1931

Bump the dependencies group across 1 directory with 30 updates #1931

dependabot bot commented on behalf of github May 20, 2024 •

edited

Loading

dependabot bot commented on behalf of github Jun 3, 2024

Bump the dependencies group across 1 directory with 30 updates #1931

Bump the dependencies group across 1 directory with 30 updates #1931

Conversation

dependabot bot commented on behalf of github May 20, 2024 • edited Loading

Version 9.2.0

Version 9.1.0

Version 9.0.10

Version 9.2.0 (2024-05-15)

Version 9.1.0 (2024-03-31)

Version 9.0.10 (2024-03-15)

0.8.12

New Features

Fixed bugs

Non-functional Changes

3.2.4

📦 Dependency updates

3.2.3

3.7.1

Release Notes - Maven Assembly Plugin - Version 3.7.1

What's Changed

3.7.0

Release Notes - Maven Assembly Plugin - Version 3.7.0

3.13.0

🚀 New features and improvements

📦 Dependency updates

📝 Documentation updates

👻 Maintenance

v42.7.3

Changes

[42.7.3] (2024-04-14 14:51:00 -0400)

Changed

Fixed

Release Version 0.35

3.1.0

🚀 New features and improvements

📦 Dependency updates

🔧 Build

New Features / Bug-Fixes:

Getting the latest release

Getting the latest snapshot (build automatically)

Known Issues / Limitations:

Reporting Problems

New Features / Bug-Fixes:

New Features

Fixed Bugs

dependabot bot commented on behalf of github Jun 3, 2024

dependabot bot commented on behalf of github May 20, 2024 •

edited

Loading