search

eu-digital-identity-wallet / eudi-lib-jvm-openid4vci-kt

Implementation of OpenID for Verifiable Credential Issuance protocol (wallet's role) in Kotlin
Apache License 2.0
13 stars 5 forks source link

Bump the libs group with 2 updates #264

Open dependabot[bot] opened 1 week ago

dependabot[bot] commented 1 week ago

Bumps the libs group with 2 updates: org.owasp.dependencycheck and com.vanniktech.maven.publish.

Updates org.owasp.dependencycheck from 9.1.0 to 9.2.0

Updates com.vanniktech.maven.publish from 0.28.0 to 0.29.0

Release notes

Sourced from com.vanniktech.maven.publish's releases.

0.29.0

  • Added configureBasedOnAppliedPlugins(sourcesJar: Boolean, javadocJar: Boolean) overload that allows disabling sources and javadoc jars without having to use the more granular Platform APIs.
  • For Java library and Kotlin/JVM projects the Gradle module metadata now properly includes the sources jar.
  • When running on Gradle 8.8 or newer the pom configuration is not applied in afterEvaluate anymore, making manual overrides easier.
  • Fix potential issue with the javadoc jar tasks that can cause Gradle to disable optimizations.
  • When staging profiles can't be loaded the status code of the response is added to the error message.

Minimum supported versions

  • JDK 11
  • Gradle 8.1
  • Android Gradle Plugin 8.0.0
  • Kotlin Gradle Plugin 1.9.20

Compatibility tested up to

  • JDK 21
  • Gradle 8.8
  • Android Gradle Plugin 8.5.0
  • Android Gradle Plugin 8.6.0-alpha06
  • Kotlin Gradle Plugin 2.0.0
  • Kotlin Gradle Plugin 2.0.20-Beta1

Configuration cache status

Configuration cache is generally supported, except for:

  • Publishing releases to Maven Central (snapshots are fine), blocked by [Gradle issue #22779](gradle/gradle#22779).
  • Dokka does not support configuration cache
Changelog

Sourced from com.vanniktech.maven.publish's changelog.

0.29.0 (2024-06-20)

  • Added configureBasedOnAppliedPlugins(sourcesJar: Boolean, javadocJar: Boolean) overload that allows disabling sources and javadoc jars without having to use the more granular Platform APIs.
  • For Java library and Kotlin/JVM projects the Gradle module metadata now properly includes the sources jar.
  • When running on Gradle 8.8 or newer the pom configuration is not applied in afterEvaluate anymore, making manual overrides easier.
  • Fix potential issue with the javadoc jar tasks that can cause Gradle to disable optimizations.
  • When staging profiles can't be loaded the status code of the response is added to the error message.

Minimum supported versions

  • JDK 11
  • Gradle 8.1
  • Android Gradle Plugin 8.0.0
  • Kotlin Gradle Plugin 1.9.20

Compatibility tested up to

  • JDK 21
  • Gradle 8.8
  • Android Gradle Plugin 8.5.0
  • Android Gradle Plugin 8.6.0-alpha06
  • Kotlin Gradle Plugin 2.0.0
  • Kotlin Gradle Plugin 2.0.20-Beta1

Configuration cache status

Configuration cache is generally supported, except for:

  • Publishing releases to Maven Central (snapshots are fine), blocked by [Gradle issue #22779](gradle/gradle#22779).
  • Dokka does not support configuration cache
Commits
  • da59946 Update to 0.29.0-rc1
  • a2c9650 0.29.0
  • 4d2ca70 update changelog of unreleased changes (#796)
  • b9d9a8e update tested versions (#795)
  • d5ef743 fix(deps): update dependency org.apache.maven:maven-model to v3.9.8 (#792)
  • b21ab6e chore(deps): update plugin com.gradle.develocity to v3.17.5 (#791)
  • 95a9994 fix(deps): update dependency com.android.tools.build:gradle to v8.5.0 (#790)
  • c2df28d chore(deps): update dependency gradle to v8.8 (#789)
  • 42d5235 fix issue with javadocJar tasks (#788)
  • d81a4e8 fix(deps): update dependency org.apache.maven:maven-model to v3.9.7 (#787)
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions