Frachtwerk / essencium-backend

Essencium Backend is a software library built on top of Spring Boot that allows developers to quickly get started on new software projects. Essencium provides, for example, a fully implemented role-rights concept as well as various field-tested solutions for access management and authentication.
GNU Lesser General Public License v3.0
15 stars 3 forks source link

build(deps): bump org.cyclonedx:cyclonedx-maven-plugin from 2.8.2 to 2.9.0 in /essencium-backend #617

Open dependabot[bot] opened 3 days ago

dependabot[bot] commented 3 days ago

Bumps org.cyclonedx:cyclonedx-maven-plugin from 2.8.2 to 2.9.0.

Release notes

Sourced from org.cyclonedx:cyclonedx-maven-plugin's releases.

2.9.0

:tada: Major features and improvements

🔧 Build

Commits
  • 4a217a9 [maven-release-plugin] prepare release cyclonedx-maven-plugin-2.9.0
  • 2ffab8d run mvn verify in CI instead of package
  • 072dcd7 Avoid resources filtering warning
  • be23759 fix site issues created by upgrades #553 and #552
  • 999d5fb Bump org.apache.maven.plugins:maven-site-plugin from 3.12.1 to 3.20.0
  • 69d3cfd Bump actions/checkout from 4.1.7 to 4.2.0
  • 73a108d Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.8.0 to 3.10.1
  • a86023a Merge pull request #556 from thesurlydev/support-1.6-spec
  • 567818d Add support for 1.6 specification
  • dce6ee2 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
sonarcloud[bot] commented 3 days ago

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud