From 44cff65f36946efe987ec7d9e525093521a5a075 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 26 May 2023 08:19:45 -0400 Subject: [PATCH 01/15] Bump github/codeql-action from 2.3.3 to 2.3.5 (#273) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.3.3 to 2.3.5. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/29b1f65c5e92e24fe6b6647da1eaabe529cec70f...0225834cc549ee0ca93cb085b92954821a145866) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/scorecards-analysis.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml index 4a17fa5ef..434d37e42 100644 --- a/.github/workflows/scorecards-analysis.yml +++ b/.github/workflows/scorecards-analysis.yml @@ -64,6 +64,6 @@ jobs: retention-days: 5 - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@29b1f65c5e92e24fe6b6647da1eaabe529cec70f # 2.3.3 + uses: github/codeql-action/upload-sarif@0225834cc549ee0ca93cb085b92954821a145866 # 2.3.5 with: sarif_file: results.sarif From c394215dcb0d300fe512f6a49b23882ad03df493 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 2 Jun 2023 09:00:05 -0400 Subject: [PATCH 02/15] Bump github/codeql-action from 2.3.5 to 2.3.6 (#274) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.3.5 to 2.3.6. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/0225834cc549ee0ca93cb085b92954821a145866...83f0fe6c4988d98a455712a27f0255212bba9bd4) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/scorecards-analysis.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml index 434d37e42..1372eb01b 100644 --- a/.github/workflows/scorecards-analysis.yml +++ b/.github/workflows/scorecards-analysis.yml @@ -64,6 +64,6 @@ jobs: retention-days: 5 - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@0225834cc549ee0ca93cb085b92954821a145866 # 2.3.5 + uses: github/codeql-action/upload-sarif@83f0fe6c4988d98a455712a27f0255212bba9bd4 # 2.3.6 with: sarif_file: results.sarif From db5e612877e57d08e6cbabfed123bc06b81a8f7f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 6 Jun 2023 21:50:30 -0400 Subject: [PATCH 03/15] Bump versions-maven-plugin from 2.15.0 to 2.16.0 (#276) Bumps [versions-maven-plugin](https://github.com/mojohaus/versions) from 2.15.0 to 2.16.0. - [Release notes](https://github.com/mojohaus/versions/releases) - [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md) - [Commits](https://github.com/mojohaus/versions/compare/2.15.0...2.16.0) --- updated-dependencies: - dependency-name: org.codehaus.mojo:versions-maven-plugin dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 01990c47f..fddc5eae4 100644 --- a/pom.xml +++ b/pom.xml @@ -682,7 +682,7 @@ org.codehaus.mojo versions-maven-plugin - 2.15.0 + 2.16.0 org.jacoco From d179f992a34e98531cb28b3efa5a0676a2685974 Mon Sep 17 00:00:00 2001 From: Gary Gregory Date: Tue, 6 Jun 2023 21:52:15 -0400 Subject: [PATCH 04/15] Bump versions-maven-plugin from 2.15.0 to 2.16.0 #276 --- src/changes/changes.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/src/changes/changes.xml b/src/changes/changes.xml index c668e2815..f518e9913 100644 --- a/src/changes/changes.xml +++ b/src/changes/changes.xml @@ -64,6 +64,7 @@ The type attribute can be add,update,fix,remove. + Bump versions-maven-plugin from 2.15.0 to 2.16.0 #276. From 91731d99cb55d4ab0895ccf23fbf41e665f5a52f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 6 Jun 2023 21:53:06 -0400 Subject: [PATCH 05/15] Bump buildnumber-maven-plugin from 3.1.0 to 3.2.0 (#277) Bumps [buildnumber-maven-plugin](https://github.com/mojohaus/buildnumber-maven-plugin) from 3.1.0 to 3.2.0. - [Release notes](https://github.com/mojohaus/buildnumber-maven-plugin/releases) - [Commits](https://github.com/mojohaus/buildnumber-maven-plugin/compare/3.1.0...3.2.0) --- updated-dependencies: - dependency-name: org.codehaus.mojo:buildnumber-maven-plugin dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index fddc5eae4..b65a1073d 100644 --- a/pom.xml +++ b/pom.xml @@ -152,7 +152,7 @@ 1.8.0 1.1 3.3.0 - 3.1.0 + 3.2.0 6.4.0 5.9.3 From 698a7b7fe60a94df1d608c0eb40cef6347b2708e Mon Sep 17 00:00:00 2001 From: Gary Gregory Date: Tue, 6 Jun 2023 21:54:08 -0400 Subject: [PATCH 06/15] Bump buildnumber-maven-plugin from 3.1.0 to 3.2.0 #277 --- src/changes/changes.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/src/changes/changes.xml b/src/changes/changes.xml index f518e9913..78e940c97 100644 --- a/src/changes/changes.xml +++ b/src/changes/changes.xml @@ -65,6 +65,7 @@ The type attribute can be add,update,fix,remove. Bump versions-maven-plugin from 2.15.0 to 2.16.0 #276. + Bump buildnumber-maven-plugin from 3.1.0 to 3.2.0 #277. From 7da54f3f2f577f06b8ed946d6bda85289aa7ca3b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 9 Jun 2023 08:05:13 -0400 Subject: [PATCH 07/15] Bump biz.aQute.bndlib from 6.4.0 to 6.4.1 (#279) Bumps [biz.aQute.bndlib](https://github.com/bndtools/bnd) from 6.4.0 to 6.4.1. - [Release notes](https://github.com/bndtools/bnd/releases) - [Changelog](https://github.com/bndtools/bnd/blob/master/docs/ADDING_RELEASE_DOCS.md) - [Commits](https://github.com/bndtools/bnd/commits) --- updated-dependencies: - dependency-name: biz.aQute.bnd:biz.aQute.bndlib dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index b65a1073d..59bb3104e 100644 --- a/pom.xml +++ b/pom.xml @@ -153,7 +153,7 @@ 1.1 3.3.0 3.2.0 - 6.4.0 + 6.4.1 5.9.3 Bump versions-maven-plugin from 2.15.0 to 2.16.0 #276. Bump buildnumber-maven-plugin from 3.1.0 to 3.2.0 #277. + Bump biz.aQute.bndlib from 6.4.0 to 6.4.1 #279. From 605a48dd9a2c4825e97ca20b538f217344a85e51 Mon Sep 17 00:00:00 2001 From: Gary Gregory Date: Wed, 14 Jun 2023 09:16:29 -0400 Subject: [PATCH 09/15] Update commons.bc.version --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 59bb3104e..7d4836093 100644 --- a/pom.xml +++ b/pom.xml @@ -94,7 +94,7 @@ RC1 COMMONSSITE - 57 + 58 true Gary Gregory 86fdc7e2a11262cb From 52b27337813cdbc5b5cdc7a25b5e417bc9356a4e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 16 Jun 2023 08:30:27 -0400 Subject: [PATCH 10/15] Bump github/codeql-action from 2.3.6 to 2.20.0 (#281) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.3.6 to 2.20.0. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/83f0fe6c4988d98a455712a27f0255212bba9bd4...6c089f53dd51dc3fc7e599c3cb5356453a52ca9e) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/scorecards-analysis.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml index 1372eb01b..80f0d59f2 100644 --- a/.github/workflows/scorecards-analysis.yml +++ b/.github/workflows/scorecards-analysis.yml @@ -64,6 +64,6 @@ jobs: retention-days: 5 - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@83f0fe6c4988d98a455712a27f0255212bba9bd4 # 2.3.6 + uses: github/codeql-action/upload-sarif@6c089f53dd51dc3fc7e599c3cb5356453a52ca9e # 2.20.0 with: sarif_file: results.sarif From 1381e94946f7bad926c0bd557ddc99bb0be50bfd Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 16 Jun 2023 08:30:45 -0400 Subject: [PATCH 11/15] Bump actions/checkout from 3.5.2 to 3.5.3 (#282) Bumps [actions/checkout](https://github.com/actions/checkout) from 3.5.2 to 3.5.3. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/8e5e7e5ab8b370d6c329ec480221332ada57f0ab...c85c95e3d7251135ab7dc9ce3241c5835cc595a9) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/maven.yml | 2 +- .github/workflows/scorecards-analysis.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml index 459c08583..23137d824 100644 --- a/.github/workflows/maven.yml +++ b/.github/workflows/maven.yml @@ -34,7 +34,7 @@ jobs: # experimental: true steps: - - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab + - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 with: persist-credentials: false - uses: actions/cache@v3.3.1 diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml index 80f0d59f2..15b91b8cf 100644 --- a/.github/workflows/scorecards-analysis.yml +++ b/.github/workflows/scorecards-analysis.yml @@ -40,7 +40,7 @@ jobs: steps: - name: "Checkout code" - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # 3.5.2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # 3.5.3 with: persist-credentials: false From 1cf152aaa108c78628637c2cede0d5108c4c590f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 23 Jun 2023 08:33:23 -0400 Subject: [PATCH 12/15] Bump github/codeql-action from 2.20.0 to 2.20.1 (#283) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.20.0 to 2.20.1. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/6c089f53dd51dc3fc7e599c3cb5356453a52ca9e...f6e388ebf0efc915c6c5b165b019ee61a6746a38) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/scorecards-analysis.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml index 15b91b8cf..fb3cc592f 100644 --- a/.github/workflows/scorecards-analysis.yml +++ b/.github/workflows/scorecards-analysis.yml @@ -64,6 +64,6 @@ jobs: retention-days: 5 - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@6c089f53dd51dc3fc7e599c3cb5356453a52ca9e # 2.20.0 + uses: github/codeql-action/upload-sarif@f6e388ebf0efc915c6c5b165b019ee61a6746a38 # 2.20.1 with: sarif_file: results.sarif From 1dbd6254d336cbca1f389fc3a50d6302181bb720 Mon Sep 17 00:00:00 2001 From: Gary Gregory Date: Fri, 23 Jun 2023 08:39:43 -0400 Subject: [PATCH 13/15] Bump various GitHub actions is /.github --- src/changes/changes.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/src/changes/changes.xml b/src/changes/changes.xml index 00e0dbb10..0b0ebe7e7 100644 --- a/src/changes/changes.xml +++ b/src/changes/changes.xml @@ -64,6 +64,7 @@ The type attribute can be add,update,fix,remove. + Bump various GitHub actions is /.github. Bump versions-maven-plugin from 2.15.0 to 2.16.0 #276. Bump buildnumber-maven-plugin from 3.1.0 to 3.2.0 #277. Bump biz.aQute.bndlib from 6.4.0 to 6.4.1 #279. From 7caabd285cad9e869c295398f13b05c6d4b9de7c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 23 Jun 2023 08:39:54 -0400 Subject: [PATCH 14/15] Bump spotbugs-maven-plugin from 4.7.3.4 to 4.7.3.5 (#284) Bumps [spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) from 4.7.3.4 to 4.7.3.5. - [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases) - [Commits](https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-4.7.3.4...spotbugs-maven-plugin-4.7.3.5) --- updated-dependencies: - dependency-name: com.github.spotbugs:spotbugs-maven-plugin dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 7d4836093..70593e636 100644 --- a/pom.xml +++ b/pom.xml @@ -195,7 +195,7 @@ --> 3.12.1 3.2.1 - 4.7.3.4 + 4.7.3.5 4.7.3 3.0.0 3.0.0 From 1257bab9ee0cce5a539c86badbe3f9375f6404e3 Mon Sep 17 00:00:00 2001 From: Gary Gregory Date: Fri, 23 Jun 2023 08:40:31 -0400 Subject: [PATCH 15/15] Bump spotbugs-maven-plugin from 4.7.3.4 to 4.7.3.5 #284 --- src/changes/changes.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/src/changes/changes.xml b/src/changes/changes.xml index 0b0ebe7e7..736dc50d4 100644 --- a/src/changes/changes.xml +++ b/src/changes/changes.xml @@ -68,6 +68,7 @@ The type attribute can be add,update,fix,remove. Bump versions-maven-plugin from 2.15.0 to 2.16.0 #276. Bump buildnumber-maven-plugin from 3.1.0 to 3.2.0 #277. Bump biz.aQute.bndlib from 6.4.0 to 6.4.1 #279. + Bump spotbugs-maven-plugin from 4.7.3.4 to 4.7.3.5 #284.