awhitford / lombok.maven

Maven Plugin for Project Lombok
http://projectlombok.org/
MIT License
110 stars 36 forks source link

Bump dependency-check-maven from 6.1.6 to 6.2.0 #64

Closed dependabot[bot] closed 3 years ago

dependabot[bot] commented 3 years ago

Bumps dependency-check-maven from 6.1.6 to 6.2.0.

Release notes

Sourced from dependency-check-maven's releases.

Version 6.2.0

Changes in this Release

  • Added an experimental Perl CPAN analyzer #3378
  • Improved database performance #3206
  • The archive analyzer now extracts files from RPM archives #3226
  • Ensure ordered output in reports #3243
  • Several minor bug fixes and updates to reduce false positives
  • See the full listing of changes.
Changelog

Sourced from dependency-check-maven's changelog.

Version 6.2.0 (2021-05-29)

Changes

  • Added an experimental Perl CPAN analyzer #3378
    • Note that the full DSL of the CPAN is not yet supported so any required dependency is analyzed (i.e. there is no way to exclude development requirements)
  • Improved database performance #3206
  • The archive analyzer now extracts files from RPM archives #3226
  • Ensure ordered output in reports #3243
  • Several minor bug fixes and updates to reduce false positives
  • See the full listing of changes.
Commits
  • 7a00b89 [maven-release-plugin] prepare release v6.2.0
  • 69eb40a release 6.2.0
  • 1c21d91 updated timeout to 60 minutes as a few issues have arrisen due to the 60 minu...
  • 664bd9e improve error reporting per #3296
  • f533682 Merge pull request #3403 from jeremylong/dependabot/github_actions/actions/ca...
  • d1932c6 Merge branch 'dependabot/maven/commons-io-commons-io-2.9.0' into main
  • 356b327 fix exception handling
  • 322c783 Bump actions/cache from 2.1.5 to 2.1.6
  • db9a8eb Merge branch 'main' into dependabot/maven/commons-io-commons-io-2.9.0
  • 79f8cc5 Merge pull request #3396 from jeremylong/dependabot/maven/org.jetbrains-annot...
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)