Bump dependency-check-maven from 7.0.4 to 7.4.0

[dependabot[bot]]

Bumps dependency-check-maven from 7.0.4 to 7.4.0.

Release notes

Sourced from dependency-check-maven's releases.

Version 7.4.0

Added

• Add support for npm package lock v2 and v3 (#5078)
• Added experimental support for Python Poetry (#5025)
• Added a vanilla HTML report for use in Jenkins (#5053)

Changed

• Renamed RELEASE_NOTES.md to CHANGELOG.md to be more conventional
• Optimized checksum calculation to improve performance (#5112)
• Added support for scanning .NET assemblies when only the dotnet runtime is installed (#5087)
• Bumped several dependencies

Fixed

• Fixed bug when setting the proxy port (#5076)
• Resolved several FP and FN

See the full listing of changes.

Version 7.3.2

Changes

• Automated release of 7.3.1 failed and only published to Central; 7.3.2 is a re-release of 7.3.1.
• Resolved several false positives and false negatives.
• Use Jackson Afterburner if still on Java 8 (#4966).
• Exclude node_modules from the Maven plugin's scan path (#4974).
• See the full listing of changes.

Version 7.3.0

Changes

• Fixed issue with the Maven plugin that caused concurrent modification exceptions (#4935).
• Migrated from Jackson Afterburner to Blackbird (#4905).
• Added an experimental Dart analyzer (#4869).
• See the full listing of changes.

Version 7.2.1

Changes

• Fixed logging issue (#4846).
• See the full listing of changes.

Version 7.2.0

Changes

• Add support for Bazel's pinned maven_install.json (#4772).
• Fixed bug preventing the use of custom report templates (#4800).
• Updated several dependencies including upgrades for dependencies with CVEs.
• Several bug fixes made and suppression rules were added.
• See the full listing of changes.

Version 7.1.2

... (truncated)

Changelog

Sourced from dependency-check-maven's changelog.

Version 7.4.0 (2022-12-04)

Added

• Add support for npm package lock v2 and v3 (#5078)
• Added experimental support for Python Poetry (#5025)
• Added a vanilla HTML report for use in Jenkins (#5053)

Changed

• Renamed RELEASE_NOTES.md to CHANGELOG.md to be more conventional
• Optimized checksum calculation to improve performance (#5112)
• Added support for scanning .NET assemblies when only the dotnet runtime is installed (#5087)
• Bumped several dependencies

Fixed

• Fixed bug when setting the proxy port (#5076)
• Resolved several FP and FN

See the full listing of changes.

Version 7.3.2 (2022-11-18)

Changed

• Automated release of 7.3.1 failed and only published to Central; 7.3.2 is a re-release of 7.3.1.
• Resolved several false positives and false negatives.
• Use Jackson Afterburner if still on Java 8 (#4966).
• Exclude node_modules from the Maven plugin's scan path (#4974).

See the full listing of changes.

Version 7.3.1 (2022-11-16)

Changed

• Resolved several false positives and false negatives.
• Use Jackson Afterburner if still on Java 8 (#4966).
• Exclude node_modules from the Maven plugin's scan path (#4974).

See the full listing of changes.

Version 7.3.0 (2022-10-19)

Added

• Added an experimental Dart analyzer (#4869).

Changed

... (truncated)

Commits

• 49e0afc build:prepare release v7.4.0
• a4ce937 build: bump patch version
• b9d1862 fix(doc): update release notes
• afb09b3 fix: Optimize file checksums calculation (#5112)
• 823f739 Merge pull request #5113 from jeremylong/badge
• a43572c fix: update build badge
• bad66cd build(deps): bump maven-dependency-plugin from 3.3.0 to 3.4.0 (#5110)
• 45887cd fix(FP): Suppress improper CPE assignment for liferay subcomponents that are ...
• 2b96890 build(deps): bump postgresql from 42.5.0 to 42.5.1 (#5088)
• bb8dae6 fix: Change dotnet invocation for 'detection on system path' to --info to sup...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot[bot]]

Superseded by #440.