Merge branch 'master' of https://gitbox.apache.org/repos/asf/commons-…

…parent
apache · Jun 23, 2023 · a871605 · a871605
2 parents 0936883 + 1257bab
commit a871605
Show file tree

Hide file tree

Showing 4 changed files with 13 additions and 8 deletions.
diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
@@ -34,7 +34,7 @@ jobs:
 #            experimental: true        
 
     steps:
-    - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+    - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
       with:
         persist-credentials: false
     - uses: actions/cache@v3.3.1

diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml
@@ -40,7 +40,7 @@ jobs:
     steps:
 
       - name: "Checkout code"
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab   # 3.5.2
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9   # 3.5.3
         with:
           persist-credentials: false
 
@@ -64,6 +64,6 @@ jobs:
           retention-days: 5
 
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@29b1f65c5e92e24fe6b6647da1eaabe529cec70f    # 2.3.3
+        uses: github/codeql-action/upload-sarif@f6e388ebf0efc915c6c5b165b019ee61a6746a38    # 2.20.1
         with:
           sarif_file: results.sarif
diff --git a/pom.xml b/pom.xml
@@ -94,7 +94,7 @@
     <commons.rc.version>RC1</commons.rc.version>
     <commons.jira.id>COMMONSSITE</commons.jira.id>
     <!-- Commons Release Plugin -->
-    <commons.bc.version>57</commons.bc.version>
+    <commons.bc.version>58</commons.bc.version>
     <commons.release.isDistModule>true</commons.release.isDistModule>
     <commons.releaseManagerName>Gary Gregory</commons.releaseManagerName>    
     <commons.releaseManagerKey>86fdc7e2a11262cb</commons.releaseManagerKey>
@@ -152,8 +152,8 @@
     <commons.release-plugin.version>1.8.0</commons.release-plugin.version>
     <commons.scm-publish.version>1.1</commons.scm-publish.version>
     <commons.enforcer-plugin.version>3.3.0</commons.enforcer-plugin.version>
-    <commons.buildnumber-plugin.version>3.1.0</commons.buildnumber-plugin.version>
-    <commons.biz.aQute.bndlib.version>6.4.0</commons.biz.aQute.bndlib.version>
+    <commons.buildnumber-plugin.version>3.2.0</commons.buildnumber-plugin.version>
+    <commons.biz.aQute.bndlib.version>6.4.1</commons.biz.aQute.bndlib.version>
     <commons.junit.version>5.9.3</commons.junit.version>
 
     <!--
@@ -195,7 +195,7 @@
     -->
     <commons.site-plugin.version>3.12.1</commons.site-plugin.version>
     <commons.source-plugin.version>3.2.1</commons.source-plugin.version>
-    <commons.spotbugs.plugin.version>4.7.3.4</commons.spotbugs.plugin.version>
+    <commons.spotbugs.plugin.version>4.7.3.5</commons.spotbugs.plugin.version>
     <commons.spotbugs.impl.version>4.7.3</commons.spotbugs.impl.version>
     <commons.surefire-report.version>3.0.0</commons.surefire-report.version>
     <commons.surefire.version>3.0.0</commons.surefire.version>
@@ -682,7 +682,7 @@
           <groupId>org.codehaus.mojo</groupId>
           <artifactId>versions-maven-plugin</artifactId>
           <!-- Version 2.2 causes an NPE with Maven 3.3.9 -->
-          <version>2.15.0</version>
+          <version>2.16.0</version>
         </plugin>
         <plugin>
           <groupId>org.jacoco</groupId>

diff --git a/src/changes/changes.xml b/src/changes/changes.xml
@@ -64,6 +64,11 @@ The <action> type attribute can be add,update,fix,remove.
            <!-- ADD -->
            <!-- FIX -->           
            <!-- UPDATE -->
+           <action type="update" dev="ggregory" due-to="Dependabot">Bump various GitHub actions is /.github.</action>
+           <action type="update" dev="ggregory" due-to="Dependabot">Bump versions-maven-plugin from 2.15.0 to 2.16.0 #276.</action>
+           <action type="update" dev="ggregory" due-to="Dependabot">Bump buildnumber-maven-plugin from 3.1.0 to 3.2.0 #277.</action>
+           <action type="update" dev="ggregory" due-to="Dependabot">Bump biz.aQute.bndlib from 6.4.0 to 6.4.1 #279.</action>
+           <action type="update" dev="ggregory" due-to="Dependabot">Bump spotbugs-maven-plugin from 4.7.3.4 to 4.7.3.5 #284.</action>
         </release>
         <release version="58" date="2023-05-20" description="Version 58: Maintenance and update dependencies">
            <!-- ADD -->