From 3f96ea61c59440cf94abb5a09e84f794b64c3377 Mon Sep 17 00:00:00 2001 From: Ralph Plawetzki Date: Wed, 31 Jan 2024 07:42:18 +0100 Subject: [PATCH 1/5] Update kdewallet to 1.5.0 --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index c8d76f6..ae80215 100644 --- a/pom.xml +++ b/pom.xml @@ -42,7 +42,7 @@ 1.3.0 2.0.0-alpha - 1.3.3 + 1.5.0 1.3.6 2.0.11 From d9ed8d23615b0a42ccea0e83787a755a29e2ddb3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 1 Feb 2024 09:10:14 +0000 Subject: [PATCH 2/5] Bump the maven-build-plugins group with 2 updates (#60) --- pom.xml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pom.xml b/pom.xml index c8d76f6..cd75c89 100644 --- a/pom.xml +++ b/pom.xml @@ -50,7 +50,7 @@ 5.10.1 - 9.0.7 + 9.0.9 1.6.8 @@ -105,7 +105,7 @@ org.apache.maven.plugins maven-surefire-plugin - 3.2.3 + 3.2.5 org.apache.maven.plugins From bc833c5e615d5121f3ead146de4cb93ab839b26c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 1 Feb 2024 13:53:00 +0000 Subject: [PATCH 3/5] Bump the github-actions group with 1 update (#62) --- .github/workflows/dependency-check.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/dependency-check.yml b/.github/workflows/dependency-check.yml index 04a9e0a..b0243f6 100644 --- a/.github/workflows/dependency-check.yml +++ b/.github/workflows/dependency-check.yml @@ -23,7 +23,7 @@ jobs: java-version: 21 cache: 'maven' - name: Cache NVD DB - uses: actions/cache@v3 + uses: actions/cache@v4 with: path: ~/.m2/repository/org/owasp/dependency-check-data/ key: dependency-check-${{ github.run_id }} From e5e788d1d220cf4bb85fb466f996b5abaec077a3 Mon Sep 17 00:00:00 2001 From: JaniruTEC <52893617+JaniruTEC@users.noreply.github.com> Date: Thu, 1 Feb 2024 19:18:46 +0100 Subject: [PATCH 4/5] Externalized dependency-check --- .github/workflows/dependency-check.yml | 59 ++++---------------------- 1 file changed, 8 insertions(+), 51 deletions(-) diff --git a/.github/workflows/dependency-check.yml b/.github/workflows/dependency-check.yml index b0243f6..f7872aa 100644 --- a/.github/workflows/dependency-check.yml +++ b/.github/workflows/dependency-check.yml @@ -10,54 +10,11 @@ on: jobs: check-dependencies: - name: Check dependencies - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v4 - with: - show-progress: false - - name: Setup Java - uses: actions/setup-java@v4 - with: - distribution: 'temurin' - java-version: 21 - cache: 'maven' - - name: Cache NVD DB - uses: actions/cache@v4 - with: - path: ~/.m2/repository/org/owasp/dependency-check-data/ - key: dependency-check-${{ github.run_id }} - restore-keys: | - dependency-check - env: - SEGMENT_DOWNLOAD_TIMEOUT_MINS: 5 - - name: Run org.owasp:dependency-check plugin - id: dependency-check - continue-on-error: true - run: mvn -B validate -Pdependency-check - env: - NVD_API_KEY: ${{ secrets.NVD_API_KEY }} - - name: Upload report on failure - if: steps.dependency-check.outcome == 'failure' - uses: actions/upload-artifact@v4 - with: - name: dependency-check-report - path: target/dependency-check-report.html - if-no-files-found: error - - name: Slack Notification on regular check - if: github.event_name == 'schedule' && steps.dependency-check.outcome == 'failure' - uses: rtCamp/action-slack-notify@v2 - env: - SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK_URL }} - SLACK_USERNAME: 'Cryptobot' - SLACK_ICON: false - SLACK_ICON_EMOJI: ':bot:' - SLACK_CHANNEL: 'cryptomator-desktop' - SLACK_TITLE: "Vulnerabilities in ${{ github.event.repository.name }} detected." - SLACK_MESSAGE: "Download the for more details." - SLACK_FOOTER: false - MSG_MINIMAL: true - - name: Failing workflow on release branch - if: github.event_name == 'push' && steps.dependency-check.outcome == 'failure' - shell: bash - run: exit 1 + uses: skymatic/workflows/.github/workflows/run-dependency-check.yml@v1 + with: + runner-os: 'ubuntu-latest' + java-distribution: 'temurin' + java-version: 21 + secrets: + nvd-api-key: ${{ secrets.NVD_API_KEY }} + slack-webhook-url: ${{ secrets.SLACK_WEBHOOK_URL }} From 294e982a79b0e54fbcf84be7d025d7118108ac6a Mon Sep 17 00:00:00 2001 From: Armin Schrenk Date: Mon, 5 Feb 2024 14:09:06 +0100 Subject: [PATCH 5/5] prepare 1.4.2 --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 6d70073..a612ead 100644 --- a/pom.xml +++ b/pom.xml @@ -5,7 +5,7 @@ 4.0.0 org.cryptomator integrations-linux - 1.5.0-SNAPSHOT + 1.4.2 integrations-linux Provides optional Linux services used by Cryptomator