Bump org.owasp:dependency-check-maven from 8.4.3 to 9.0.0

[dependabot[bot]]

Bumps org.owasp:dependency-check-maven from 8.4.3 to 9.0.0.

Release notes

Sourced from org.owasp:dependency-check-maven's releases.

Version 9.0.0

breaking changes: See the upgrade notice

• feat: Utilize NVD API (#5978)
• feat: gitlab dependency scanner report format #5919 (#5920)
• fix: Use ASCII apostrophe for console message (#6076)

See the full listing of changes.

Changelog

Sourced from org.owasp:dependency-check-maven's changelog.

Version 9.0.0 (2023-11-22)

breaking changes: See the upgrade notice

• feat: Utilize NVD API (#5978)
• feat: gitlab dependency scanner report format #5919 (#5920)
• fix: Use ASCII apostrophe for console message (#6076)

See the full listing of changes.

Commits

• c12375b build: prepare release v9.0.0
• ae97569 docs: release 9.0.0
• e52f8ad fix: use fake NVD datafeed for testing (#6093)
• f658d5f fix: remove leading slash from data feed prefix (#6096)
• fb88573 fix: correct import (#6094)
• 25f60ec build(deps): bump jackson.version from 2.15.3 to 2.16.0 (#6080)
• b30c68a feat: Utilize NVD API (#5978)
• d3a6797 feat: gitlab dependency scanner report format #5919 (#5920)
• 42ca1e7 build(deps): bump com.h2database:h2 from 2.1.214 to 2.2.224 (#5940)
• d80c3c3 fix: dependabot configuration (#6089)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[sonarcloud[bot]]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication

The version of Java (11.0.21) you have used to run this analysis is deprecated and we will stop accepting it soon. Please update to at least Java 17. Read more here

[dependabot[bot]]

Superseded by #121.