search

cryptomator / webdav-nio-adapter

Jackrabbit-based servlets running on embedded Jetty to serve a directory specified by a java.nio.file.Path
GNU Affero General Public License v3.0
12 stars 8 forks source link

Bump the maven-dependencies group with 13 updates #52

Closed dependabot[bot] closed 9 months ago

dependabot[bot] commented 9 months ago

Bumps the maven-dependencies group with 13 updates:

Package From To
org.cryptomator:integrations-api 1.2.0 1.3.0
org.jetbrains:annotations 23.0.0 24.0.1
org.slf4j:slf4j-api 2.0.7 2.0.9
org.slf4j:slf4j-simple 2.0.7 2.0.9
org.junit.jupiter:junit-jupiter 5.9.3 5.10.0
org.apache.maven.plugins:maven-compiler-plugin 3.10.1 3.11.0
org.apache.maven.plugins:maven-surefire-plugin 3.0.0-M7 3.1.2
org.apache.maven.plugins:maven-source-plugin 3.2.1 3.3.0
org.apache.maven.plugins:maven-javadoc-plugin 3.4.1 3.6.0
org.owasp:dependency-check-maven 8.1.2 8.4.0
org.jacoco:jacoco-maven-plugin 0.8.9 0.8.10
org.apache.maven.plugins:maven-gpg-plugin 3.0.1 3.1.0
org.apache.maven.plugins:maven-deploy-plugin 3.1.0 3.1.1

Updates org.cryptomator:integrations-api from 1.2.0 to 1.3.0

Release notes

Sourced from org.cryptomator:integrations-api's releases.

1.3.0

What's Changed

Full Changelog: https://github.com/cryptomator/integrations-api/compare/1.2.0...1.3.0

Release 1.3.0-beta1

What's Changed

  • Adjusted TrayMenuController API to support further tray icon types (#19) in preparation for libappindicator support (#17)
  • Marked Mount API as stable

Full Changelog: https://github.com/cryptomator/integrations-api/compare/1.2.0...1.3.0-beta1

Commits
  • b58ecc6 Merge branch 'release/1.3.0'
  • c463221 Merge branch 'develop' into release/1.3.0
  • adda424 replace deprecated release action
  • dff4e81 prepare 1.3.0
  • 948faea updated .idea config for IDEA 2023.1+
  • 5b43e50 Merge pull request #19 from cryptomator/feature/tray-icon-loader
  • 9daf5f6 mark api as still being subject to change
  • cdf313e polymorphic tray icon loading
  • 90ad49c Merge pull request #17 from purejava/libappindicator
  • 17fbf49 Change API to support svg icons
  • Additional commits viewable in compare view


Updates org.jetbrains:annotations from 23.0.0 to 24.0.1

Release notes

Sourced from org.jetbrains:annotations's releases.

24.0.1

  • Added @Documented annotation where it would be useful.

24.0.0

  • Added new annotation: @CheckReturnValue

23.1.0

  • Added new annotation: @ApiStatus.Obsolete
Changelog

Sourced from org.jetbrains:annotations's changelog.

Version 24.0.1

  • Added @Documented annotation where it would be useful.

Version 24.0.0

  • Added new annotation: @CheckReturnValue.

Version 23.1.0

  • Added new annotation: @ApiStatus.Obsolete.
Commits


Updates org.slf4j:slf4j-api from 2.0.7 to 2.0.9

Updates org.slf4j:slf4j-simple from 2.0.7 to 2.0.9

Updates org.junit.jupiter:junit-jupiter from 5.9.3 to 5.10.0

Release notes

Sourced from org.junit.jupiter:junit-jupiter's releases.

JUnit 5.10.0 = Platform 1.10.0 + Jupiter 5.10.0 + Vintage 5.10.0

See Release Notes.

Full Changelog: https://github.com/junit-team/junit5/compare/r5.10.0-RC2...r5.10.0

JUnit 5.10.0-RC2 = Platform 1.10.0-RC2+ Jupiter 5.10.0-RC2 + Vintage 5.10.0-RC2

See Release Notes.

JUnit 5.10.0-RC1 = Platform 1.10.0-RC1 + Jupiter 5.10.0-RC1 + Vintage 5.10.0-RC1

See Release Notes.

JUnit 5.10.0-M1 = Platform 1.10.0-M1 + Jupiter 5.10.0-M1 + Vintage 5.10.0-M1

See Release Notes.

Commits
  • 7f619ca Release 5.10
  • 9899de4 Update Gradle Enterprise plugin to 3.14
  • 45b970f Replace soon-to-be-deprecated usages of project.buildDir
  • 463ae36 Prune Release Notes for 5.10 GA
  • 893c64b Back to snapshots for further development
  • e6ff0c5 Release 5.10.0-RC2
  • b08a76b Add 5.10.0-RC2 release notes
  • 2c278c7 Revert "Prune Release Notes for 5.10 GA"
  • acb6e65 Provide access to source element annotations for TempDirFactory
  • 73818a1 Bump org.gradle.toolchains:foojay-resolver from 0.5.0 to 0.6.0
  • Additional commits viewable in compare view


Updates org.apache.maven.plugins:maven-compiler-plugin from 3.10.1 to 3.11.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.11.0

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

... (truncated)

Commits
  • eeda628 [maven-release-plugin] prepare release maven-compiler-plugin-3.11.0
  • 82b799f [MCOMPILER-527] Upgrade plexus-java to 1.1.2 (#177)
  • f9c2350 [MCOMPILER-526] Fix IT (#178)
  • 4022bd0 [MCOMPILER-494] - Add a useModulePath switch to the testCompile mojo (#119)
  • f4a8a54 [MCOMPILER-525] Incorrect detection of dependency change (#172)
  • 86b9f59 [MCOMPILER-395] Allow dependency exclusions for 'annotationProcessorPaths' (#...
  • e304ceb [MCOMPILER-526] Ignore reformat commit for git blame
  • f7a4613 [MCOMPILER-526] Reformat
  • cc78aee [MCOMPILER-526] Upgrade to parent 39
  • 3dca82f [MCOMPILER-526] Add packages to please the formatter
  • Additional commits viewable in compare view


Updates org.apache.maven.plugins:maven-surefire-plugin from 3.0.0-M7 to 3.1.2

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.1.2

Release Notes - Maven Surefire - Version 3.1.2

📦 Dependency updates

👻 Maintenance

3.1.0

Release Notes - Maven Surefire - Version 3.1.0 Sub-task

Bug

Improvement

  • [SUREFIRE-2153] - Replace SurefireReportGenerator with a new SurefireReportRenderer
  • [SUREFIRE-2160] - Replace LocalizedProperties with (Custom)I18N approach from MPIR

Task

... (truncated)

Commits
  • 5e097b5 [maven-release-plugin] prepare release surefire-3.1.2
  • 255bb51 Update commons compress to 1.23.0
  • a77dfb2 Drop unused commons-lang 2.6 from management (#661)
  • 95e8e95 [SUREFIRE-2157] Upgrade junit-jupiter to 5.9.3/junit-platform to 1.9.2
  • 9092b5e [SUREFIRE-2157] Upgrade surefire IT to 3.1.0
  • 1af92f5 Remove old junittoolbox dependency no longer used (#658)
  • 8878ed5 update test libraries (#657)
  • a6613a8 Remove redundant space
  • e0e89e4 update commons-io to 2.12.0
  • d8ac134 [MNGSITE-393] remove descriptions of Maven 2.x and very old versions
  • Additional commits viewable in compare view


Updates org.apache.maven.plugins:maven-source-plugin from 3.2.1 to 3.3.0

Commits
  • 02a9847 [maven-release-plugin] prepare release maven-source-plugin-3.3.0
  • f186993 [MSOURCES-135] Cleanup project code
  • 021af55 [MSOURCES-134] Refresh download page
  • b11a457 Use shared GitHub actions v3
  • 7caf2b0 [MSOURCES-133] Upgrade Parent to 39 - ignore git blame
  • dee4c10 [MSOURCES-133] Upgrade Parent to 39
  • 452111f Add dependabot configuration
  • e691ac3 s/MSOURCE/MSOURCES/
  • 1ddffd8 Auto-link MSOURCE Jira
  • 37ffefe Add pull request template
  • Additional commits viewable in compare view


Updates org.apache.maven.plugins:maven-javadoc-plugin from 3.4.1 to 3.6.0

Release notes

Sourced from org.apache.maven.plugins:maven-javadoc-plugin's releases.

3.6.0

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

👻 Maintenance

... (truncated)

Commits
  • 7548066 [maven-release-plugin] prepare release maven-javadoc-plugin-3.6.0
  • 77adc47 [MJAVADOC-642] Make offline mode configurable (#238)
  • 24362d2 [MJAVADOC-742] Fix resolution of docletArtifacts (#186)
  • bee4197 fix jenkins link (#237)
  • 9830bdc Fix build on jenkins
  • 6f30bed [MJAVADOC-642] Make offline mode configurable (#232)
  • e4023d0 [JAVADOC-771] Upgrade Parent to 40 (#234)
  • 7904e45 [MJAVADOC-772] Refresh download page
  • 87c2424 Bump org.apache.maven:maven-core (#226)
  • 83ab01b Use 3.6.0 as release version (#233)
  • Additional commits viewable in compare view


Updates org.owasp:dependency-check-maven from 8.1.2 to 8.4.0

Release notes

Sourced from org.owasp:dependency-check-maven's releases.

Version 8.4.0

Added

  • feat: Add support for Nexus v3 to NexusAnalyzer (#5849)

Fixed

  • fix: Hint Analyzer should run before VersionFilter Analyzer (#5818)
  • chore: switch to sha1-pinning as suggested by Semgrep
  • fix: OSS Index Analyzer SocketTimeoutException exception handling based on warn only parameter (#5845)
  • fix: use curl with -L to follow github redirect (#5808)
  • fix: use curl with -L to follow github redirect
  • fix: #5671 out of memory error (#5789)
  • fix: #5671 Exit method as soon as we detect a loop to prevent an infinite loop leading to an OutOfMemoryError

Version 8.3.1

Re-release of 8.3.0 as 8.3.1.

v8.3.0

Added

  • Add LibmanAnalyzer (#5652)
  • Update HTML report Dependencies header based on display settings (#5619)
  • Add link to suppressed vulnerabilities header in HTML report (#5620)
  • Enable local proxy configuration in maven plugin configuration (#5696)

Fixed

  • Fix npm alias present in requires of dependencies (#5703)
  • Make Central URL configurable via CLI (#5667)
  • Ensure support of CVSSv3.1 (#5602)

See the full listing of changes.

Version 8.2.1

Fixed

  • NullPointerException in MSBuildAnalyzer (#5589)
  • SQL Syntax for Oracle (#5590)
  • Use https:// URLs in report templates (#5582)

See the full listing of changes.

Version 8.2.0

Added

  • Support msbuild Directory.build.props (#5475)
  • better display of NPM audit references
  • Add CVSS V3 results from NPM Audit results

... (truncated)

Changelog

Sourced from org.owasp:dependency-check-maven's changelog.

Version 8.4.0 (2023-08-19)

Added

  • feat: Add support for Nexus v3 to NexusAnalyzer (#5849)

Fixed

  • fix: Hint Analyzer should run before VersionFilter Analyzer (#5818)
  • chore: switch to sha1-pinning as suggested by Semgrep
  • fix: OSS Index Analyzer SocketTimeoutException exception handling based on warn only parameter (#5845)
  • fix: use curl with -L to follow github redirect (#5808)
  • fix: use curl with -L to follow github redirect
  • fix: #5671 out of memory error (#5789)
  • fix: #5671 Exit method as soon as we detect a loop to prevent an infinite loop leading to an OutOfMemoryError

See the full listing of changes.

Version 8.3.1 (2023-06-12)

Re-release of 8.3.0 as 8.3.1.

Version 8.3.0 (2023-06-12)

Added

  • Add LibmanAnalyzer (#5652)
  • Update HTML report Dependencies header based on display settings (#5619)
  • Add link to suppressed vulnerabilities header in HTML report (#5620)
  • Enable local proxy configuration in maven plugin configuration (#5696)

Fixed

  • Fix npm alias present in requires of dependencies (#5703)
  • Make Central URL configurable via CLI (#5667)
  • Ensure support of CVSSv3.1 (#5602)

See the full listing of changes.

Version 8.2.1 (2023-03-23)

Fixed

  • NullPointerException in MSBuildAnalyzer (#5589)
  • SQL Syntax for Oracle (#5590)
  • Use https:// URLs in report templates (#5582)

See the full listing of changes.

Version 8.2.0 (2023-03-22)

... (truncated)

Commits
  • cc2db4c build: prepare release v8.4.0
  • 17c5081 chore: prepare release (#5891)
  • d1e5736 build(deps): bump com.google.guava:guava from 32.0.1-jre to 32.1.2-jre (#5850)
  • e685b80 feat: Add support for Nexus v3 to NexusAnalyzer (#5849)
  • a29afc4 fix: Hint Analyzer should run before VersionFilter Analyzer (#5818)
  • 49c6591 build(deps): bump actions/setup-node from 3.8.0 to 3.8.1 (#5889)
  • 0f4553a build(deps): bump actions/setup-node from 3.8.0 to 3.8.1
  • 8ee8214 build(deps): bump actions/setup-node from 3.7.0 to 3.8.0 (#5877)
  • d71f038 build(deps): bump org.semver4j:semver4j from 5.0.0 to 5.1.0 (#5878)
  • 5a55c81 build(deps): bump org.semver4j:semver4j from 5.0.0 to 5.1.0
  • Additional commits viewable in compare view


Updates org.jacoco:jacoco-maven-plugin from 0.8.9 to 0.8.10

Release notes

Sourced from org.jacoco:jacoco-maven-plugin's releases.

0.8.10

Fixed bugs

  • Agent should not require configuration of permissions for SecurityManager outside of its codeBase (GitHub #1425).
Commits


Updates org.apache.maven.plugins:maven-gpg-plugin from 3.0.1 to 3.1.0

Commits
  • 699e2ad [maven-release-plugin] prepare release maven-gpg-plugin-3.1.0
  • f314f8e [MGPG-97] use gpgverify plugin to check dependencies signatures
  • bad6b57 [MGPG-96] add INFO message
  • 0498a82 [MGPG-95] don't GPG-sign .sigstore signatures
  • 09b5be9 Auto-link MGPG Jira
  • 1e0472f extract FilesCollector
  • af9ccfd [MGPG-94] Ignore reformatting
  • 5e51734 [MGPG-94] Integration tests - convert and reformat bsh to groovy
  • 955ea0e [MGPG-94] Reformat code
  • e160f43 [MGPG-94] Bump maven-plugins from 36 to 39
  • Additional commits viewable in compare view


Updates org.apache.maven.plugins:maven-deploy-plugin from 3.1.0 to 3.1.1

Release notes

Sourced from org.apache.maven.plugins:maven-deploy-plugin's releases.

3.1.1

Commits
  • 43aaa63 [maven-release-plugin] prepare release maven-deploy-plugin-3.1.1
  • 04f5e88 [MDEPLOY-308] Add parameter to lax project validation (#39)
  • 2de56bd [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
overheadhunter commented 9 months ago

@dependabot show org.eclipse.jetty:jetty-server ignore conditions

dependabot[bot] commented 9 months ago
Ignore Conditions
|Dependency| Ignore Condition| |-|-| | org.eclipse.jetty:jetty-server | [] |
overheadhunter commented 9 months ago

@dependabot squash and merge