Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the dependencies group across 1 directory with 14 updates #286

Closed
wants to merge 1 commit into from
Closed

Bump the dependencies group across 1 directory with 14 updates #286

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github May 15, 2024 •
edited
Loading

Bumps the dependencies group with 14 updates in the / directory:

Package From To
org.mockito:mockito-core 5.8.0 5.12.0
com.fasterxml.jackson.core:jackson-databind 2.16.1 2.17.1
com.fasterxml.jackson.core:jackson-annotations 2.16.1 2.17.1
com.fasterxml.jackson.core:jackson-core 2.16.1 2.17.1
com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.16.1 2.17.1
org.threeten:threeten-extra 1.7.2 1.8.0
io.jsonwebtoken:jjwt 0.12.3 0.12.5
org.slf4j:slf4j-api 2.0.11 2.0.13
ch.qos.logback:logback-classic 1.4.14 1.5.6
org.apache.maven.plugins:maven-compiler-plugin 3.12.1 3.13.0
org.owasp:dependency-check-maven 9.0.8 9.2.0
org.jacoco:jacoco-maven-plugin 0.8.11 0.8.12
org.apache.maven.plugins:maven-source-plugin 3.3.0 3.3.1
org.apache.maven.plugins:maven-gpg-plugin 3.1.0 3.2.4

Updates org.mockito:mockito-core from 5.8.0 to 5.12.0

Release notes

Sourced from org.mockito:mockito-core's releases.

v5.12.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.12.0

v5.11.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.11.0

... (truncated)

Commits
  • 12cef84 AdditionalMatchers.and() and or() swap matcher order (#3335)
  • f3821ff Bump com.gradle.enterprise from 3.17.2 to 3.17.3 (#3341)
  • 25ad018 Bump org.jetbrains.kotlin:kotlin-stdlib from 1.9.23 to 1.9.24 (#3339)
  • de38124 Bump versions.bytebuddy from 1.14.14 to 1.14.15 (#3338)
  • 88e8481 Bump org.jetbrains.kotlin:kotlin-gradle-plugin from 1.9.23 to 1.9.24 (#3336)
  • 8c222c2 Bump org.shipkit:shipkit-auto-version from 2.0.6 to 2.0.7 (#3337)
  • fb9ff6d Bump gradle/wrapper-validation-action from 3.3.1 to 3.3.2 (#3327)
  • af70125 Bump versions.bytebuddy from 1.14.13 to 1.14.14 (#3324)
  • 1eac76b Bump org.shipkit:shipkit-auto-version from 2.0.5 to 2.0.6 (#3322)
  • cd512ab Bump gradle/wrapper-validation-action from 3.3.0 to 3.3.1 (#3320)
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.16.1 to 2.17.1

Commits

Updates com.fasterxml.jackson.core:jackson-annotations from 2.16.1 to 2.17.1

Commits

Updates com.fasterxml.jackson.core:jackson-core from 2.16.1 to 2.17.1

Commits
  • cba40f1 [maven-release-plugin] prepare release jackson-core-2.17.1
  • d33c4b5 Prepare for 2.17.1 release
  • 2a4a6dc Fix #1256: revert #1117, default recycler pool again threadLocalPool() (for...
  • 7e57e5b Update branch designation for CI
  • 4b8d399 Part of #1260: write a manually run concurrency test to tease out problem wit...
  • 33c4260 Fixes #1262: Add diagnostic method pooledCount() in RecyclerPool (#1263)
  • c73bde2 Fix NumberInput.looksLikeValidNumber() implementation (#1241)
  • 1c656ae ...
  • 11e3bd7 update(tests): migrate remaining JUnit 4 code in core to JUnit 5 (#1248)
  • fff79ea update(tests): migrate JUnit 4 code to JUnit 5 in core.base64 to core.sym (#1...
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.16.1 to 2.17.1

Updates com.fasterxml.jackson.core:jackson-core from 2.16.1 to 2.17.1

Commits
  • cba40f1 [maven-release-plugin] prepare release jackson-core-2.17.1
  • d33c4b5 Prepare for 2.17.1 release
  • 2a4a6dc Fix #1256: revert #1117, default recycler pool again threadLocalPool() (for...
  • 7e57e5b Update branch designation for CI
  • 4b8d399 Part of #1260: write a manually run concurrency test to tease out problem wit...
  • 33c4260 Fixes #1262: Add diagnostic method pooledCount() in RecyclerPool (#1263)
  • c73bde2 Fix NumberInput.looksLikeValidNumber() implementation (#1241)
  • 1c656ae ...
  • 11e3bd7 update(tests): migrate remaining JUnit 4 code in core to JUnit 5 (#1248)
  • fff79ea update(tests): migrate JUnit 4 code to JUnit 5 in core.base64 to core.sym (#1...
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.16.1 to 2.17.1

Updates org.threeten:threeten-extra from 1.7.2 to 1.8.0

Release notes

Sourced from org.threeten:threeten-extra's releases.

Release v1.8.0

See the change notes for more information.

Commits

Updates io.jsonwebtoken:jjwt from 0.12.3 to 0.12.5

Release notes

Sourced from io.jsonwebtoken:jjwt's releases.

0.12.5

This release fixes issue #916 and ensures that builders' NestedCollection changes are applied to the collection immediately as mutation methods are called, no longer requiring application developers to call .and() to 'commit' or apply a change. For example, prior to this release, the following code did not apply changes:

JwtBuilder builder = Jwts.builder();
builder.audience().add("an-audience"); // no .and() call
builder.compact(); // would not keep 'an-audience'

Now this code works as expected and all other NestedCollection instances like it apply changes immediately (e.g. when calling .add(value)).

However, standard fluent builder chains are still recommended for readability when feasible, e.g.

Jwts.builder()
    .audience().add("an-audience").and() // allows fluent chaining
    .subject("Joe")
    // etc...
    .compact()

These same notes are repeated in the CHANGELOG, and as always, project documentation is in the README.

Please allow 30 minutes from the time this announcement is published for the release to be available in Maven Central.

0.12.4

This is patch release completes 10 issues, with two especially noteworthy changes, and a number of other smaller bug fixes and enhancements.

  1. The default Jackson deserializer will now reject duplicate JSON members by default in an attempt to be a little more strict at rejecting potentially malicious or malformed JSON. This is a default and can be overridden with a custom ObjectMapper if desired.
  2. Password-based JWE encryption key algorithms (PBES2_HS256_A128KW, PBES2_HS384_A192KW and PBES2_HS512_A256KW) now enforce an upper bound (maximum) number of iterations allowed during decryption to mitigate against potential DoS attacks. Many thanks to Jingcheng Yang and Jianjun Chen from Sichuan University and Zhongguancun Lab for their work on this!

A number of other issues fixed: thread-safe ServiceLoader usage for dynamic JSON processor lookup, Android enhancements for JSON Reader APIs, fixed Elliptic Curve field element padding, and more. Please read the 0.12.4 CHANGELOG for full details of all of these changes, and as always, project documentation is in the 0.12.4 README.

Please allow 30 minutes from the time this announcement is published for the release to be available in Maven Central.

Changelog

Sourced from io.jsonwebtoken:jjwt's changelog.

0.12.5

This patch release:

  • Ensures that builders' NestedCollection changes are applied to the collection immediately as mutation methods are called, no longer requiring application developers to call .and() to 'commit' or apply a change. For example, prior to this release, the following code did not apply changes:

    JwtBuilder builder = Jwts.builder();
builder.audience().add("an-audience"); // no .and() call
builder.compact(); // would not keep 'an-audience'

    Now this code works as expected and all other NestedCollection instances like it apply changes immediately (e.g. when calling .add(value)).

    However, standard fluent builder chains are still recommended for readability when feasible, e.g.

    Jwts.builder()
    .audience().add("an-audience").and() // allows fluent chaining
    .subject("Joe")
    // etc...
    .compact()

    See Issue 916.

0.12.4

This patch release includes various changes listed below.

Jackson Default Parsing Behavior

This release makes two behavioral changes to JJWT's default Jackson ObjectMapper parsing settings:

  1. In the interest of having stronger standards to reject potentially malformed/malicious/accidental JSON that could have undesirable effects on an application, JJWT's default ObjectMapper is now configured to explicitly reject/fail parsing JSON (JWT headers and/or Claims) if/when that JSON contains duplicate JSON member names.

    For example, now the following JSON, if parsed, would fail (be rejected) by default:

    {
  "hello": "world",
  "thisWillFail": 42,
  "thisWillFail": "test"
}

    Technically, the JWT RFCs do allow duplicate named fields as long as the last parsed member is the one used (see JWS RFC 7515, Section 4), so this is allowed. However, because JWTs often reflect security concepts, it's usually better to be defensive and reject these

... (truncated)

Commits
  • 2399e2f [maven-release-plugin] prepare release 0.12.5
  • 8d3de65 Preparing for 0.12.5 release
  • a0a123e PR #917
  • afcd889 0.12.4 staging (#913)
  • dd10b12 Added JWK Set documentation to README.mdJwkset doc (#912)
  • 6335381 PBES2 decryption maximum iterations (#911)
  • 2884eb7 - Updating to GitHub latest actions/checkout and actions/setup-java script ve...
  • 628bd6f Secret JWK k values larger than HMAC-SHA minimums (#909)
  • b12dabf Fix small typos (#908)
  • 26f5dc3 Updating changelog with more information/clarity for the 0.12.4 release (#907)
  • Additional commits viewable in compare view

Updates org.slf4j:slf4j-api from 2.0.11 to 2.0.13

Updates ch.qos.logback:logback-classic from 1.4.14 to 1.5.6

Commits
  • 7812a55 prepare release 1.5.6
  • 759fc25 fix issues/805 i.e. LOGBACK-1768, included file with inner conditional
  • 3d55638 start work on 1.5.6-SNAPSHOT
  • a91d2b6 notes about javadocs
  • c7c5e89 prepare release 1.5.5
  • 7db8797 upgrade build to slf4j 2.0.13
  • f9c04d2 test inclusion with conditionals
  • f32ed30 remove support for metaannotations for NoAutoStart annotation
  • 4476edd Search for @​NoAutoStart annotations in ancestor hierarchy, implemented interf...
  • a649c60 rename IncludeActionTest as IncludeModelHandlerTest
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.12.1 to 3.13.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.13.0

🚀 New features and improvements

📦 Dependency updates

📝 Documentation updates

👻 Maintenance

Commits
  • a1415aa [maven-release-plugin] prepare release maven-compiler-plugin-3.13.0
  • b2b9196 [MCOMPILER-574] Propagate cause of exception in AbstractCompilerMojo
  • 6d2ce5a [MCOMPILER-584] Refresh page - Using Non-Javac Compilers
  • eebad60 [MCOMPILER-585] Refresh plugins versions in ITs
  • ceacf68 [MCOMPILER-582] Automatic detection of release option for JDK < 9
  • 110293f [MCOMPILER-583] Require Maven 3.6.3
  • 90131df [MCOMPILER-575] Bump plexusCompilerVersion from 2.14.2 to 2.15.0 (#227)
  • 74cfc72 [MCOMPILER-548] JDK 21 throws annotations processing warning that can not be ...
  • f85aa27 Bump apache/maven-gh-actions-shared from 3 to 4
  • d59ef49 extract Maven 3.3.1 specific method call
  • Additional commits viewable in compare view

Updates org.owasp:dependency-check-maven from 9.0.8 to 9.2.0

Release notes

Sourced from org.owasp:dependency-check-maven's releases.

Version 9.2.0

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Version 9.1.0

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Version 9.0.10

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Version 9.0.9

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Changelog

Sourced from org.owasp:dependency-check-maven's changelog.

Version 9.2.0 (2024-05-15)

  • docs: update logo per intellj (#6660)
  • feat: Carthage analyzer (#6614)
  • fix: Ensure valid JSON output for gitlab report (#6630)
  • feat: Support Package.swift version 3 Specification (#6578)
  • chore: Update the packaged suppressions to include new hosted suppressions (#6567)

See the full listing of changes.

Version 9.1.0 (2024-03-31)

  • feat: Add v2 support for maven_install.json (#6528)
  • build(deps): bump open-vulnerability-client (#6554)
    • resolves update issues due to CVSS Metrics 4.0
  • build(deps): bump jackson.version from 2.16.0 to 2.16.1 (#6353)
  • build(deps): bump org.jsoup:jsoup from 1.16.2 to 1.17.2 (#6362)
  • build(deps): bump golang from 1.21.5-alpine to 1.22.1-alpine (#6506)

See the full listing of changes.

Version 9.0.10 (2024-03-15)

  • fix: #4321 Suppress redis server CVEs for client libraries (#4321) (#6489)
  • fix: bump commons-compress from 1.25.0 to 1.26.0 to fix CVE-2024-25710 and CVE-2024-26308 (#6492)
  • feat: Allow to pass NVD API key via environment variable (#6454)
  • fix: issue 5452 - ConcurrentModificationException in NodePackageAnalyzer.processDependencies - adding synchronized block (#6501)
  • docs: document the default data directory (#6484)
  • fix: prevent NPE in bundler audit (#6462)
  • fix: #6441 Improve suppression rule to not restrict to a single version (#6442)

See the full listing of changes.

Version 9.0.9 (2024-01-17)

  • fix: for #6374 to delete non-empty directories (#6375)
  • fix: NoSuchMethodError closeQuietly(java.io.Closeable[]) (#6377)
  • chore: close stream to prevent possible resource leak (#6382)
  • docs: Document default for CLI --data (#6359)
  • docs: document gradle build (#6371)

See the full listing of changes.

Commits
  • 192b4cd build: prepare release v9.2.0
  • e50e20d docs: update changelog
  • 5ce66cf build(deps): bump org.apache.maven.plugin-tools:maven-plugin-annotations from...
  • 61edfd1 docs: update logo per intellj (#6660)
  • 8b1746e build(deps): bump com.github.spotbugs:spotbugs-annotations from 4.8.4 to 4.8....
  • 754dec1 build(deps): bump maven-plugin-plugin (#6646)
  • 969bc27 build(deps): bump org.apache.maven.plugins:maven-surefire-report-plugin from ...
  • 57b916a build(deps): bump com.github.spotbugs:spotbugs-maven-plugin from 4.8.4.0 to 4...
  • 9c9c466 build(deps): bump commons-codec:commons-codec from 1.16.1 to 1.17.0 (#6633)
  • e26096d build(deps): bump commons-cli:commons-cli from 1.6.0 to 1.7.0 (#6629)
  • Additional commits viewable in compare view

Updates org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.12

Release notes

Sourced from org.jacoco:jacoco-maven-plugin's releases.

0.8.12

New Features

  • JaCoCo now officially supports Java 22 (GitHub #1596).
  • Experimental support for Java 23 class files (GitHub #1553).

Fixed bugs

  • Branches added by the Kotlin compiler for functions with default arguments and having more than 32 parameters are filtered out during generation of report (GitHub #1556).
  • Branch added by the Kotlin compiler version 1.5.0 and above for reading from lateinit property is filtered out during generation of report (GitHub #1568).

Non-functional Changes

  • JaCoCo now depends on ASM 9.7 (GitHub #1600).
Commits

Updates org.apache.maven.plugins:maven-source-plugin from 3.3.0 to 3.3.1

Commits
  • f80596e [maven-release-plugin] prepare release maven-source-plugin-3.3.1
  • 7626998 Bump apache/maven-gh-actions-shared from 3 to 4
  • 83c963c Bump org.apache.maven.plugins:maven-plugins from 39 to 41 (#18)
  • 40ae495 Bump org.codehaus.plexus:plexus-archiver from 4.8.0 to 4.9.1 (#20)
  • 073462b Bump org.apache.maven:maven-archiver from 3.6.0 to 3.6.1 (#21)
  • 0b1c823 Fix typos in AbstractSourceJarMojo exception
  • 099c65a [MSOURCES-142] Bump org.codehaus.plexus:plexus-archiver from 4.7.1 to 4.8.0 (...
  • 1edeea4 [MSOURCES-139] Fix typo in AbstractSourceJarMojo exception
  • 436966e [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates org.apache.maven.plugins:maven-gpg-plugin from 3.1.0 to 3.2.4

Release notes

Sourced from org.apache.maven.plugins:maven-gpg-plugin's releases.

3.2.4

Release Notes - Maven GPG Plugin - Version 3.2.4

📦 Dependency updates

3.2.3

Release Notes - Maven GPG Plugin - Version 3.2.3

... (truncated)

Commits
  • 789149e [maven-release-plugin] prepare release maven-gpg-plugin-3.2.4
  • 893aedc [MGPG-125] Fix "bestPractices" (#95)
  • b6f0324 [MGPG-126] Bump commons-io:commons-io from 2.16.0 to 2.16.1 (#94)
  • 3c5878b [maven-release-plugin] prepare for next development iteration
  • 89b91a4 [maven-release-plugin] prepare release maven-gpg-plugin-3.2.3
  • fc2efa3 [MGPG-123][MGPG-124] Dependency upgrades (#93)
  • 50222d3 [MGPG-120] New mojo sign-deployed (#88)
  • a6c3a09 [MGPG-122] Bump org.apache.maven.plugins:maven-invoker-plugin from 3.6.0 to 3...
  • 78f5e37 [MGPG-121] Return the workaround for pseudo security (#90)
  • 582df74 [MGPG-117] Improve passphrase handling (#86)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dependencies group across 1 directory with 14 updates
5fe1a10 
Bumps the dependencies group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.8.0` | `5.12.0` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.16.1` | `2.17.1` |
| [com.fasterxml.jackson.core:jackson-annotations](https://github.com/FasterXML/jackson) | `2.16.1` | `2.17.1` |
| [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.16.1` | `2.17.1` |
| com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.16.1` | `2.17.1` |
| [org.threeten:threeten-extra](https://github.com/ThreeTen/threeten-extra) | `1.7.2` | `1.8.0` |
| [io.jsonwebtoken:jjwt](https://github.com/jwtk/jjwt) | `0.12.3` | `0.12.5` |
| org.slf4j:slf4j-api | `2.0.11` | `2.0.13` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.4.14` | `1.5.6` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.12.1` | `3.13.0` |
| [org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck) | `9.0.8` | `9.2.0` |
| [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.11` | `0.8.12` |
| [org.apache.maven.plugins:maven-source-plugin](https://github.com/apache/maven-source-plugin) | `3.3.0` | `3.3.1` |
| [org.apache.maven.plugins:maven-gpg-plugin](https://github.com/apache/maven-gpg-plugin) | `3.1.0` | `3.2.4` |



Updates `org.mockito:mockito-core` from 5.8.0 to 5.12.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.8.0...v5.12.0)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.16.1 to 2.17.1
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.core:jackson-annotations` from 2.16.1 to 2.17.1
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.core:jackson-core` from 2.16.1 to 2.17.1
- [Commits](FasterXML/jackson-core@jackson-core-2.16.1...jackson-core-2.17.1)

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.16.1 to 2.17.1

Updates `com.fasterxml.jackson.core:jackson-core` from 2.16.1 to 2.17.1
- [Commits](FasterXML/jackson-core@jackson-core-2.16.1...jackson-core-2.17.1)

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.16.1 to 2.17.1

Updates `org.threeten:threeten-extra` from 1.7.2 to 1.8.0
- [Release notes](https://github.com/ThreeTen/threeten-extra/releases)
- [Commits](ThreeTen/threeten-extra@v1.7.2...v1.8.0)

Updates `io.jsonwebtoken:jjwt` from 0.12.3 to 0.12.5
- [Release notes](https://github.com/jwtk/jjwt/releases)
- [Changelog](https://github.com/jwtk/jjwt/blob/master/CHANGELOG.md)
- [Commits](jwtk/jjwt@0.12.3...0.12.5)

Updates `org.slf4j:slf4j-api` from 2.0.11 to 2.0.13

Updates `ch.qos.logback:logback-classic` from 1.4.14 to 1.5.6
- [Commits](qos-ch/logback@v_1.4.14...v_1.5.6)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.12.1 to 3.13.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.12.1...maven-compiler-plugin-3.13.0)

Updates `org.owasp:dependency-check-maven` from 9.0.8 to 9.2.0
- [Release notes](https://github.com/jeremylong/DependencyCheck/releases)
- [Changelog](https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md)
- [Commits](jeremylong/DependencyCheck@v9.0.8...v9.2.0)

Updates `org.jacoco:jacoco-maven-plugin` from 0.8.11 to 0.8.12
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.11...v0.8.12)

Updates `org.apache.maven.plugins:maven-source-plugin` from 3.3.0 to 3.3.1
- [Commits](apache/maven-source-plugin@maven-source-plugin-3.3.0...maven-source-plugin-3.3.1)

Updates `org.apache.maven.plugins:maven-gpg-plugin` from 3.1.0 to 3.2.4
- [Release notes](https://github.com/apache/maven-gpg-plugin/releases)
- [Commits](apache/maven-gpg-plugin@maven-gpg-plugin-3.1.0...maven-gpg-plugin-3.2.4)

---
updated-dependencies:
- dependency-name: org.mockito:mockito-core
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.fasterxml.jackson.core:jackson-annotations
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.threeten:threeten-extra
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.jsonwebtoken:jjwt
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.slf4j:slf4j-api
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: ch.qos.logback:logback-classic
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.owasp:dependency-check-maven
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-source-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-gpg-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels May 15, 2024
@dependabot dependabot bot mentioned this pull request May 15, 2024
Closed
@dependabot Dependabot
Copy link
Author

dependabot bot commented on behalf of github May 27, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this May 27, 2024
@dependabot dependabot bot deleted the dependabot/maven/dependencies-31bbbfaf16 branch May 27, 2024 17:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants