build(deps): Bump dependencies and re-enable Spotbugs

jeremylong / Open-Vulnerability-Project

Java libraries for working with available vulnerability data sources (GitHub Security Advisories, NVD, EPSS, CISA Known Exploited Vulnerabilities, etc.)

Apache License 2.0

112 stars 34 forks source link

build(deps): Bump dependencies and re-enable Spotbugs #169

Closed chadlwilson closed 3 months ago

chadlwilson commented 3 months ago

Updates Gradle to 8.8 and fixes warnings
Bumps other dependencies
Avoids spotlessApply during build - this makes the build non-reproducible as mutates code
Corrects conflict that was breaking Spotbugs, re-enables it and fixes SpotBugs warnings
Fixes #120
Enables dependabot, similar to the ODC project
Upgrades GitHub Actions to latest versions

Test will fail until/unless #165 is merged

jeremylong commented 3 months ago

Thanks for your help with this!

chadlwilson commented 3 months ago

No problem!