chore(deps): update dependency org.owasp:dependency-check-maven from v5.3.2 to v9 #146
+1
−1
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
force-pushed
the
renovate/major-dependency-check-maven.version
branch
2 times, most recently
from
6042f01
to
1d3924b
Compare
renovate
bot
force-pushed
the
renovate/major-dependency-check-maven.version
branch
from
1d3924b
to
50ab5c0
Compare
|
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/major-dependency-check-maven.version
branch
from
50ab5c0
to
4007ad4
Compare
renovate
bot
force-pushed
the
renovate/major-dependency-check-maven.version
branch
from
4007ad4
to
15ad175
Compare
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
5.3.2->9.2.0Release Notes
jeremylong/DependencyCheck (org.owasp:dependency-check-maven)
v9.2.0Compare Source
See the full listing of changes.
v9.1.0Compare Source
See the full listing of changes.
v9.0.10Compare Source
See the full listing of changes.
v9.0.9Compare Source
See the full listing of changes.
v9.0.8Compare Source
See the full listing of changes.
v9.0.7Compare Source
tool.poetry(#6316)See the full listing of changes.
v9.0.6Compare Source
See the full listing of changes.
v9.0.5Compare Source
See the full listing of changes.
v9.0.4Compare Source
See the full listing of changes.
v9.0.3Compare Source
See the full listing of changes.
v9.0.2Compare Source
See the full listing of changes.
v9.0.1Compare Source
See the full listing of changes.
v9.0.0Compare Source
breaking changes: See the upgrade notice
See the full listing of changes.
v8.4.3Compare Source
See the full listing of changes.
v8.4.2Compare Source
See the full listing of changes.
v8.4.1Compare Source
Fixed
See the full listing of changes.
v8.4.0Compare Source
Added
Fixed
See the full listing of changes.
v8.3.1Compare Source
Re-release of 8.3.0 as 8.3.1.
v8.3.0Compare Source
Added
Fixed
See the full listing of changes.
v8.2.1Compare Source
Fixed
https://URLs in report templates (#5582)See the full listing of changes.
v8.2.0Compare Source
Added
Fixed
See the full listing of changes.
v8.1.2Compare Source
Fixed
NullPointerExceptionin the Jar Analyzer introduced in 8.1.1 (#5512)See the full listing of changes.
v8.1.1Compare Source
Fixed
See the full listing of changes.
v8.1.0Compare Source
Added
Pipefile.lockfiles are now supported (#5404).pyproject.tomlbut no lock file or requirements will report an error as ODC is unable to analyze the project (#5409).Fixed
formatconfiguration more flexible in the gradle plugin (dependency-check-gradle/#324).See the full listing of changes.
v8.0.2Compare Source
Fixed
descriptioncolumn (#5364).--retirejsFilterNonVulnerableand--retirejsFilterwhen used with the CLI (#5351).sarifreport format and added validation (#5345 and (#5363)MalformedPackageExceptionin the gradle plugin (dependency-check-gradle/#320).MissingMethodExceptionin the gradle plugin (dependency-check-gradle/#316).See the full listing of changes.
v8.0.1Compare Source
Fixed
See the full listing of changes.
v8.0.0Compare Source
Added
gradleandmavenplugins now have the capability to scan the build plugins (#4035).gradleandmavenplugins, for transitive dependencies, will report the root dependency in the project that included the transitive dependency (#5001).properties.security-severityto SARIF report for better integration with GitHub Security Code scanning (#5277).Changed
Fixed
node_modulesto prevent NPEs (#5266).See the full listing of changes.
v7.4.4Compare Source
Fixed
See the full listing of changes.
v7.4.3Compare Source
Fixed
See the full listing of changes.
v7.4.2Compare Source
Fixed
node_modulepaths in some scans (#5135)See the full listing of changes.
v7.4.1Compare Source
Fixed
node_modulepaths in some scans (#5127)See the full listing of changes.
v7.4.0Compare Source
Added
Changed
RELEASE_NOTES.mdtoCHANGELOG.mdto be more conventionalFixed
See the full listing of changes.
v7.3.2Compare Source
Changed
node_modulesfrom the Maven plugin's scan path (#4974).See the full listing of changes.
v7.3.1Compare Source
Changed
node_modulesfrom the Maven plugin's scan path (#4974).See the full listing of changes.
v7.3.0Compare Source
Added
Changed
Fixed
See the full listing of changes.
v7.2.1Compare Source
Fixed
See the full listing of changes.
v7.2.0Compare Source
Changed
maven_install.json(#4772).See the full listing of changes.
v7.1.2Compare Source
Changed
See the full listing of changes.
v7.1.1Compare Source
Fixed
See the full listing of changes.
v7.1.0Compare Source
Changed
See the full listing of changes.
v7.0.4Compare Source
Changed
jackson-databind(see #4285).See the full listing of changes.
v7.0.3Compare Source
Changed
jackson-databind(see #4285).See the full listing of changes.
v7.0.2Compare Source
Changed
See the full listing of changes.
v7.0.1Compare Source
Changed
See the full listing of changes.
v7.0.0Compare Source
Changed
dataDirectoryoption you will need to run a purge after upgrading.See the full listing of changes.
v6.5.3Compare Source
Changed
See the full listing of changes.
v6.5.2Compare Source
Changed
pnpmargmument to the CLI (#3916).See the full listing of changes.
v6.5.1Compare Source
Changed
See the full listing of changes.
v6.5.0Compare Source
Changed
See the full listing of changes.
v6.4.1Compare Source
Added
CVE metafiles from the NVD to prevent rate limiting issues (see #3725).See the full listing of changes.
v6.4.0Compare Source
Changed
cveStartYearis now configurable and can be set to any year from 2002 to present.cveWaitTimeis a new configuration option to define how many milliseconds to wait between NVD downloads; default is 4000 ms (see #3690).See the full listing of changes.
v6.3.2Compare Source
Changed
See the full listing of changes.
v6.3.1Compare Source
Fixed
See the full listing of changes.
v6.3.0Compare Source
Changed
See the full listing of changes.
v6.2.2Compare Source
Fixed
See the full listing of changes.
v6.2.1Compare Source
Fixed
See the full listing of changes.
v6.2.0Compare Source
Changed
See the full listing of changes.
v6.1.6Compare Source
Fixed
See the full listing of changes.
v6.1.5Compare Source
Fixed
See the full listing of changes.
v6.1.4Compare Source
Changed
See the full listing of changes.
v6.1.3Compare Source
Changed
See the full listing of changes.
v6.1.2Compare Source
Changed
See the full listing of changes.
v6.1.1Compare Source
Changed
See the full listing of changes.
v6.1.0Compare Source
Changed
See the full listing of changes.
v6.0.5Compare Source
Changed
See the full listing of changes.
v6.0.4Compare Source
Changed
See the full listing of changes.
v6.0.3Compare Source
Changed
Added a bash command completion script (see #2916); to add completion to your shell
completion-for-dependency-check.shcan be found in the bin directory of the CLI:$ source completion-for-dependency-check.shAn experimental PIP File Analyzer was added (see #2877).
Analysis of Node JS produced several false positives (see #2796); the analysis has
be
Configuration
📅 Schedule: Branch creation - "before 4am on Monday" in timezone Europe/Oslo, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.