search

porscheinformatik / sonarqube-licensecheck

SonarQube Licensecheck Plugin
Apache License 2.0
159 stars 58 forks source link

chore(deps): update maven non-major dependencies #388

Open renovate[bot] opened 1 year ago

renovate[bot] commented 1 year ago

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
com.github.eirslett:frontend-maven-plugin 1.14.0 -> 1.15.1 age adoption passing confidence
org.jacoco:jacoco-maven-plugin (source) 0.8.8 -> 0.8.12 age adoption passing confidence
org.apache.maven.plugins:maven-surefire-plugin 3.1.2 -> 3.5.1 age adoption passing confidence
org.apache.maven.plugins:maven-compiler-plugin 3.10.1 -> 3.13.0 age adoption passing confidence
org.sonarsource.sonar-packaging-maven-plugin:sonar-packaging-maven-plugin (source) 1.21.0.505 -> 1.23.0.740 age adoption passing confidence
org.apache.maven:maven-model 3.8.6 -> 3.9.9 age adoption passing confidence
org.apache.commons:commons-lang3 (source) 3.12.0 -> 3.17.0 age adoption passing confidence
org.sonarsource.api.plugin:sonar-plugin-api (source) 9.5.0.71 -> 9.17.0.587 age adoption passing confidence

Release Notes

eirslett/frontend-maven-plugin (com.github.eirslett:frontend-maven-plugin) ### [`v1.15.1`](https://redirect.github.com/eirslett/frontend-maven-plugin/blob/HEAD/CHANGELOG.md#1151) - Fix [#​1150](https://redirect.github.com/eirslett/frontend-maven-plugin/issues/1150): Update lifecycle-mapping-metadata.xml for npx ### [`v1.15.0`](https://redirect.github.com/eirslett/frontend-maven-plugin/blob/HEAD/CHANGELOG.md#1150) - Bun support - Prevent `Bad zip entry` exceptions when installing Node to a relative directory ([#​1124](https://redirect.github.com/eirslett/frontend-maven-plugin/issues/1124)) ### [`v1.14.2`](https://redirect.github.com/eirslett/frontend-maven-plugin/blob/HEAD/CHANGELOG.md#1142) - Prevent corrupt downloaded files by waiting for the download to complete before writing the file to disk. ### [`v1.14.1`](https://redirect.github.com/eirslett/frontend-maven-plugin/blob/HEAD/CHANGELOG.md#1141) - Expose `pnpm` executable on Windows ([#​1116](https://redirect.github.com/eirslett/frontend-maven-plugin/pull/1116))
jacoco/jacoco (org.jacoco:jacoco-maven-plugin) ### [`v0.8.12`](https://redirect.github.com/jacoco/jacoco/releases/tag/v0.8.12): 0.8.12 [Compare Source](https://redirect.github.com/jacoco/jacoco/compare/v0.8.11...v0.8.12) #### New Features - JaCoCo now officially supports Java 22 (GitHub [#​1596](https://redirect.github.com/jacoco/jacoco/issues/1596)). - Experimental support for Java 23 class files (GitHub [#​1553](https://redirect.github.com/jacoco/jacoco/issues/1553)). #### Fixed bugs - Branches added by the Kotlin compiler for functions with default arguments and having more than 32 parameters are filtered out during generation of report (GitHub [#​1556](https://redirect.github.com/jacoco/jacoco/issues/1556)). - Branch added by the Kotlin compiler version 1.5.0 and above for reading from lateinit property is filtered out during generation of report (GitHub [#​1568](https://redirect.github.com/jacoco/jacoco/issues/1568)). #### Non-functional Changes - JaCoCo now depends on ASM 9.7 (GitHub [#​1600](https://redirect.github.com/jacoco/jacoco/issues/1600)). ### [`v0.8.11`](https://redirect.github.com/jacoco/jacoco/releases/tag/v0.8.11): 0.8.11 [Compare Source](https://redirect.github.com/jacoco/jacoco/compare/v0.8.10...v0.8.11) #### New Features - JaCoCo now officially supports Java 21 (GitHub [#​1520](https://redirect.github.com/jacoco/jacoco/issues/1520)). - Experimental support for Java 22 class files (GitHub [#​1479](https://redirect.github.com/jacoco/jacoco/issues/1479)). - Part of bytecode generated by the Java compilers for exhaustive switch expressions is filtered out during generation of report (GitHub [#​1472](https://redirect.github.com/jacoco/jacoco/issues/1472)). - Part of bytecode generated by the Java compilers for record patterns is filtered out during generation of report (GitHub [#​1473](https://redirect.github.com/jacoco/jacoco/issues/1473)). #### Fixed bugs - Instrumentation should not cause `VerifyError` when the last local variable of method parameters is overridden in the method body to store a value of type long or double (GitHub [#​893](https://redirect.github.com/jacoco/jacoco/issues/893)). - Restore exec file compatibility with versions from 0.7.5 to 0.8.8 in case of class files with zero line numbers (GitHub [#​1492](https://redirect.github.com/jacoco/jacoco/issues/1492)). #### Non-functional Changes - jacoco-maven-plugin now requires at least Java 8 (GitHub [#​1466](https://redirect.github.com/jacoco/jacoco/issues/1466), [#​1468](https://redirect.github.com/jacoco/jacoco/issues/1468)). - JaCoCo build now requires at least Maven 3.5.4 (GitHub [#​1467](https://redirect.github.com/jacoco/jacoco/issues/1467)). - Maven 3.9.2 should not produce warnings for jacoco-maven-plugin (GitHub [#​1468](https://redirect.github.com/jacoco/jacoco/issues/1468)). - JaCoCo build now requires JDK 17 (GitHub [#​1482](https://redirect.github.com/jacoco/jacoco/issues/1482)). - JaCoCo now depends on ASM 9.6 (GitHub [#​1518](https://redirect.github.com/jacoco/jacoco/issues/1518)). ### [`v0.8.10`](https://redirect.github.com/jacoco/jacoco/releases/tag/v0.8.10): 0.8.10 [Compare Source](https://redirect.github.com/jacoco/jacoco/compare/v0.8.9...v0.8.10) #### Fixed bugs - Agent should not require configuration of permissions for `SecurityManager` outside of its `codeBase` (GitHub [#​1425](https://redirect.github.com/jacoco/jacoco/issues/1425)). ### [`v0.8.9`](https://redirect.github.com/jacoco/jacoco/releases/tag/v0.8.9): 0.8.9 [Compare Source](https://redirect.github.com/jacoco/jacoco/compare/v0.8.8...v0.8.9) #### New Features - JaCoCo now officially supports Java 19 and 20 (GitHub [#​1371](https://redirect.github.com/jacoco/jacoco/issues/1371), [#​1386](https://redirect.github.com/jacoco/jacoco/issues/1386)). - Experimental support for Java 21 class files (GitHub [#​1386](https://redirect.github.com/jacoco/jacoco/issues/1386)). - Add parameter to include the current project in the `report-aggregate` Maven goal (GitHub [#​1007](https://redirect.github.com/jacoco/jacoco/issues/1007)). - Component accessors generated by the Java compilers for records are filtered out during generation of report. Contributed by Tesla Zhang (GitHub [#​1393](https://redirect.github.com/jacoco/jacoco/issues/1393)). #### Fixed bugs - Agent should not open `java.lang` package to unnamed module of the application class loader (GitHub [#​1334](https://redirect.github.com/jacoco/jacoco/issues/1334)). #### Non-functional Changes - JaCoCo now depends on ASM 9.5 (GitHub [#​1299](https://redirect.github.com/jacoco/jacoco/issues/1299), [#​1368](https://redirect.github.com/jacoco/jacoco/issues/1368), [#​1416](https://redirect.github.com/jacoco/jacoco/issues/1416)). - JaCoCo build now requires JDK 11 (GitHub [#​1413](https://redirect.github.com/jacoco/jacoco/issues/1413)).
SonarSource/sonar-packaging-maven-plugin (org.sonarsource.sonar-packaging-maven-plugin:sonar-packaging-maven-plugin) ### [`v1.23.0.740`](https://redirect.github.com/SonarSource/sonar-packaging-maven-plugin/releases/tag/1.23.0.740) [Compare Source](https://redirect.github.com/SonarSource/sonar-packaging-maven-plugin/compare/1.21.0.505...1.23.0.740) - Fix datime format for `Plugin-BuildDate` field
SonarSource/sonar-plugin-api (org.sonarsource.api.plugin:sonar-plugin-api) ### [`v9.17.0.587`](https://redirect.github.com/SonarSource/sonar-plugin-api/releases/tag/9.17.0.587) [Compare Source](https://redirect.github.com/SonarSource/sonar-plugin-api/compare/9.16.0.560...9.17.0.587) #### What's Changed - [PLUGINAPI-40](https://sonarsource.atlassian.net/browse/PLUGINAPI-40) LogTester doesn't intercept logged exceptions - [PLUGINAPI-41](https://sonarsource.atlassian.net/browse/PLUGINAPI-41) LogTester can throw 'ConcurrentModificationException' if logs are written and asserted concurrently - [PLUGINAPI-47](https://sonarsource.atlassian.net/browse/PLUGINAPI-47) Add code variants to issues ### [`v9.16.0.560`](https://redirect.github.com/SonarSource/sonar-plugin-api/releases/tag/9.16.0.560) [Compare Source](https://redirect.github.com/SonarSource/sonar-plugin-api/compare/9.15.0.435...9.16.0.560) #### What's Changed - [PLUGINAPI-38](https://sonarsource.atlassian.net/browse/PLUGINAPI-38) Files without suffixes can be declared as belonging to a Language - [PLUGINAPI-42](https://sonarsource.atlassian.net/browse/PLUGINAPI-42) Replace javax.servlet.\* with custom types - [PLUGINAPI-43](https://sonarsource.atlassian.net/browse/PLUGINAPI-43) Introduce rule characteristics ### [`v9.15.0.435`](https://redirect.github.com/SonarSource/sonar-plugin-api/releases/tag/9.15.0.435) [Compare Source](https://redirect.github.com/SonarSource/sonar-plugin-api/compare/9.14.0.375...9.15.0.435) #### What's Changed Added - PLUGINAPI-35 Expose file content hash in plugin API - PLUGINAPI-36 Remove dependency on logback - PLUGINAPI-39 Add woff2 to static resource filter list ### [`v9.14.0.375`](https://redirect.github.com/SonarSource/sonar-plugin-api/releases/tag/9.14.0.375) [Compare Source](https://redirect.github.com/SonarSource/sonar-plugin-api/compare/9.13.0.360...9.14.0.375) #### What's Changed Added - PLUGINAPI-34 Add new aliases for `sonar.test.inclusions` and `sonar.test.exclusions` ### [`v9.13.0.360`](https://redirect.github.com/SonarSource/sonar-plugin-api/releases/tag/9.13.0.360) [Compare Source](https://redirect.github.com/SonarSource/sonar-plugin-api/compare/9.12.0.310...9.13.0.360) #### What's Changed - [PLUGINAPI-8](https://sonarsource.atlassian.net/browse/PLUGINAPI-8) Introduce an API to contribute quick fixes - [PLUGINAPI-31](https://sonarsource.atlassian.net/browse/PLUGINAPI-31) Support code highlighting in the issue messages **Full Changelog**: https://github.com/SonarSource/sonar-plugin-api/compare/9.12.0.310...9.13.0.360\*\* ### [`v9.12.0.310`](https://redirect.github.com/SonarSource/sonar-plugin-api/releases/tag/9.12.0.310) [Compare Source](https://redirect.github.com/SonarSource/sonar-plugin-api/compare/9.11.0.290...9.12.0.310) #### What's Changed - NO-JIRA bumping version by [@​lukasz-jarocki-sonarsource](https://redirect.github.com/lukasz-jarocki-sonarsource) in [https://github.com/SonarSource/sonar-plugin-api/pull/51](https://redirect.github.com/SonarSource/sonar-plugin-api/pull/51) - Add a documentation page for sensor execution ordering by [@​damien-urruty-sonarsource](https://redirect.github.com/damien-urruty-sonarsource) in [https://github.com/SonarSource/sonar-plugin-api/pull/52](https://redirect.github.com/SonarSource/sonar-plugin-api/pull/52) - Update repox-private-reader-sq-ef42e7 apikey by [@​tomverin](https://redirect.github.com/tomverin) in [https://github.com/SonarSource/sonar-plugin-api/pull/54](https://redirect.github.com/SonarSource/sonar-plugin-api/pull/54) - PLUGINAPI-29 New property type "FORMATTED_TEXT" for properties that c… by [@​zipeng-wu-sonarsource](https://redirect.github.com/zipeng-wu-sonarsource) in [https://github.com/SonarSource/sonar-plugin-api/pull/55](https://redirect.github.com/SonarSource/sonar-plugin-api/pull/55) #### New Contributors - [@​tomverin](https://redirect.github.com/tomverin) made their first contribution in [https://github.com/SonarSource/sonar-plugin-api/pull/54](https://redirect.github.com/SonarSource/sonar-plugin-api/pull/54) **Full Changelog**: https://github.com/SonarSource/sonar-plugin-api/compare/9.11.0.290...9.12.0.310 ### [`v9.11.0.290`](https://redirect.github.com/SonarSource/sonar-plugin-api/releases/tag/9.11.0.290) [Compare Source](https://redirect.github.com/SonarSource/sonar-plugin-api/compare/9.10.0.269...9.11.0.290) #### What's Changed - PLUGINAPI-22 Empty content for rule description section should not be allowed - PLUGINAPI-25 Introduce support for data and execution flows **Full Changelog**: https://github.com/SonarSource/sonar-plugin-api/compare/9.10.0.269...9.11.0.290 ### [`v9.10.0.269`](https://redirect.github.com/SonarSource/sonar-plugin-api/releases/tag/9.10.0.269) [Compare Source](https://redirect.github.com/SonarSource/sonar-plugin-api/compare/9.9.0.229...9.10.0.269) #### Changelog ##### Added - Add `ZipUtils.unzip` new overloaded methods to limit unzipped size [PLUGINAPI-23](https://sonarsource.atlassian.net/browse/PLUGINAPI-23) ### [`v9.9.0.229`](https://redirect.github.com/SonarSource/sonar-plugin-api/releases/tag/9.9.0.229) [Compare Source](https://redirect.github.com/SonarSource/sonar-plugin-api/compare/9.8.0.203...9.9.0.229) #### Changelog ##### Added - `SensorContext.markAsUnchanged`: Sensors can flag files that have unchanged data. This allows the platform to perform optimizations in some situations ([PLUGINAPI-20](https://sonarsource.atlassian.net/browse/PLUGINAPI-20)) - `NewRule.addWaspAsvs`: Analyzers can report OWASP Application Security Verification Standard requirements for rules that they declare ([PLUGINAPI-19](https://sonarsource.atlassian.net/browse/PLUGINAPI-19)) ### [`v9.8.0.203`](https://redirect.github.com/SonarSource/sonar-plugin-api/releases/tag/9.8.0.203) [Compare Source](https://redirect.github.com/SonarSource/sonar-plugin-api/compare/9.7.0.160...9.8.0.203) #### Changelog ##### Added - `NewRule.addEducationPrincipleKeys`: Register a list of education principle keys to link to the rule [(PLUGINAPI-15)](https://sonarsource.atlassian.net/browse/PLUGINAPI-15) - `NewIssue.setRuleDescriptionContextKey`: Set the optional rule description section context key [(PLUGINAPI-16)](https://sonarsource.atlassian.net/browse/PLUGINAPI-16) ### [`v9.7.0.160`](https://redirect.github.com/SonarSource/sonar-plugin-api/releases/tag/9.7.0.160) [Compare Source](https://redirect.github.com/SonarSource/sonar-plugin-api/compare/9.6.1.114...9.7.0.160) #### Changelog ##### Added - `RuleDescriptionSectionBuilder.context`: Define a context for rule description sections ([PLUGINAPI-12](https://sonarsource.atlassian.net/browse/PLUGINAPI-12)) ### [`v9.6.1.114`](https://redirect.github.com/SonarSource/sonar-plugin-api/releases/tag/9.6.1.114) [Compare Source](https://redirect.github.com/SonarSource/sonar-plugin-api/compare/9.6.0.104...9.6.1.114) #### Changelog ##### :x: Breaking changes without deprecation - `RuleDescriptionSectionKeys`: Supported rule description section keys defined in v9.6 were changed ### [`v9.6.0.104`](https://redirect.github.com/SonarSource/sonar-plugin-api/releases/tag/9.6.0.104) [Compare Source](https://redirect.github.com/SonarSource/sonar-plugin-api/compare/9.5.0.71...9.6.0.104) #### Changelog ##### Added - `NewRule.addDescriptionSection`: Add multiple description sections to rules. [PLUGINAPI-6](https://sonarsource.atlassian.net/browse/PLUGINAPI-6) ##### :warning: Deprecated - `NewRule.setMarkdownDescription`: Use `NewRule.addDescriptionSection` with HTML instead. [PLUGINAPI-5](https://sonarsource.atlassian.net/browse/PLUGINAPI-5)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

This PR was generated by Mend Renovate. View the repository job log.