Updates dependencies - resolves GHSA-pmhh-3w7g-xqp8, a medium-severity security vulnerability in the jsoup Java HTML parser library, tracked as [https://github.com/advisories/GHSA-pmhh-3w7g-xqp8]
What's Changed
- Bump org.sonatype.central:central-publishing-maven-plugin from 0.10.0 to 0.11.0 by @dependabot[bot] in #431
- Bump org.spdx:spdx-maven-plugin from 1.0.3 to 1.0.4 by @dependabot[bot] in #433
- Bump org.apache.logging.log4j:log4j-slf4j2-impl from 2.26.0 to 2.26.1 by @dependabot[bot] in #432
- Make LICENSE_ID_PATTERN_GENERATED final by @bact in #435
- Close leaked Reader in metadata cache read path by @bact in #436
- Handle race condition when insert id to list by @bact in #437
- Add SpotBugs analysis check by @bact in #434
- Bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1 by @dependabot[bot] in #438
- Bump org.jsoup:jsoup from 1.22.2 to 1.23.1 by @dependabot[bot] in #439
- Bump org.owasp:dependency-check-maven from 12.2.2 to 13.0.0 by @dependabot[bot] in #440
- Bump com.github.spotbugs:spotbugs-maven-plugin from 4.10.3.0 to 4.10.4.0 by @dependabot[bot] in #441
- Bump org.jsoup:jsoup from 1.23.1 to 1.23.2 by @dependabot[bot] in #442
- Bump org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0 by @dependabot[bot] in #443
- Add AI usage policy to CONTRIBUTING.md by @goneall in #411
- Bump org.slf4j:slf4j-api from 2.0.18 to 2.0.19 by @dependabot[bot] in #446
- Bump com.github.spotbugs:spotbugs-maven-plugin from 4.10.4.0 to 4.10.4.1 by @dependabot[bot] in #445
- Update SPDX libraries by @goneall in #447
Full Changelog: v2.0.4...v2.0.5
Contributors
bact, goneall, and dependabot