chore : update dependency-check to use latest

vaadin / platform

Vaadin platform 10+ is a Java web development platform based on Vaadin web components. If you don't know to which repository your bug report should be filed, use this and we'll move it to the right one.

https://vaadin.com

515 stars 76 forks source link

chore : update dependency-check to use latest #4731

Closed ZheSun88 closed 5 months ago

ZheSun88 commented 6 months ago

testing PR.. as this issue has been discussed here https://github.com/jeremylong/DependencyCheck/issues/6107 according to upgrade notice,

previous versions of dependency-check utilize the NVD data feeds which will be deprecated on Dec 15th, 2023. Versions earlier then 9.0.0 are no longer supported and could fail to work after Dec 15th, 2023.

ZheSun88 commented 6 months ago

now with 9.0.1 it failed on https://github.com/jeremylong/DependencyCheck/issues/6144

github-actions[bot] commented 6 months ago

Dependencies Report

🟠 Known Vulnerabilities:
- Vulnerabilities in: pkg:maven/com.vaadin.flow.ai/form-filler-addon@1.0.1 [CVE-2019-25027, CVE-2021-31412, CVE-2018-25007, CVE-2021-31404] (owasp)
📔 No License Issues
🟠 Changes in 24.3-SNAPSHOT since V24.3.0.rc1
- 907 packages same (712 external, 195 vaadin)

[Click for more Details]

vaadin-bot commented 5 months ago

Hi @ZheSun88 , this commit cannot be picked to 23.4 by this bot, can you take a look and pick it manually?

vaadin-bot commented 5 months ago

Hi @ZheSun88 , this commit cannot be picked to 23.4 by this bot, can you take a look and pick it manually?

vaadin-bot commented 5 months ago

Hi @ZheSun88 , this commit cannot be picked to 23.3 by this bot, can you take a look and pick it manually?

vaadin-bot commented 5 months ago

Hi @ZheSun88 , this commit cannot be picked to 23.3 by this bot, can you take a look and pick it manually?