Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): update dependency org.codehaus.gmavenplus:gmavenplus-plugin to v3.0.2 #946

Merged
merged 1 commit into from
Sep 29, 2023

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Sep 28, 2023

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
org.codehaus.gmavenplus:gmavenplus-plugin (source) 3.0.0 -> 3.0.2 age adoption passing confidence

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.


Release Notes

groovy/GMavenPlus (org.codehaus.gmavenplus:gmavenplus-plugin)

v3.0.2

Compare Source

Bugs

[#​280] The 3.0.1 jar was corrupt (thanks @​eugene-sadovsky for reporting this!).

Enhancements

Potentially breaking changes

None.

Notes

The CVE fixed were related to dependencies of the plugin. While I haven't done an analysis of whether they were exploitable (since this is a Maven plugin and not an application), it seems unlikely.

v3.0.1

Compare Source

Bugs

  • [#​276] Fix that enabling skipBytecodeCheck causes the Groovy version to be reported as not supporting the goal (thanks for reporting this @​jgenoctr!).

Enhancements

Potentially breaking changes

None.

Notes

The CVEs fixed were related to dependencies of the plugin. While I haven't done an analysis of whether they were exploitable (since this is a Maven plugin and not an application), it seems unlikely.


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot changed the title fix(deps): update dependency org.codehaus.gmavenplus:gmavenplus-plugin to v3.0.1 fix(deps): update dependency org.codehaus.gmavenplus:gmavenplus-plugin to v3.0.2 Sep 28, 2023
@renovate renovate bot force-pushed the renovate/parent.gmavenplus.plugin branch from 8dcfcb9 to 434f5c5 Compare September 28, 2023 22:19
@sonarqubecloud
Copy link

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

@sdelamo sdelamo merged commit 5ec2fa3 into 4.2.x Sep 29, 2023
7 checks passed
@sdelamo sdelamo deleted the renovate/parent.gmavenplus.plugin branch September 29, 2023 10:14
sdelamo pushed a commit that referenced this pull request Sep 29, 2023
…n to v3.0.2 (#946)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
sdelamo pushed a commit that referenced this pull request Oct 13, 2023
…n to v3.0.2 (#946)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant