Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): update all dependencies j:cdx-227 #171

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate-coveo[bot]
Copy link
Contributor

@renovate-coveo renovate-coveo bot commented Nov 25, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
@commitlint/config-conventional (source) 19.5.0 -> 19.8.0 age adoption passing confidence devDependencies minor
@octokit/auth-app 7.1.2 -> 7.1.5 age adoption passing confidence devDependencies patch
actions/setup-java v4.5.0 -> v4.7.0 age adoption passing confidence action minor
actions/setup-node v4.1.0 -> v4.3.0 age adoption passing confidence action minor
actions/upload-artifact v4.4.3 -> v4.6.2 age adoption passing confidence action minor
ossf/scorecard-action v2.4.0 -> v2.4.1 age adoption passing confidence action patch
step-security/harden-runner v2.10.1 -> v2.11.0 age adoption passing confidence action minor
com.diffplug.spotless:spotless-maven-plugin 2.43.0 -> 2.44.3 age adoption passing confidence build minor
commons-codec:commons-codec (source) 1.17.1 -> 1.18.0 age adoption passing confidence compile minor
org.mockito:mockito-core 5.14.2 -> 5.16.1 age adoption passing confidence test minor
joda-time:joda-time (source) 2.13.0 -> 2.14.0 age adoption passing confidence compile minor
io.github.cdimascio:dotenv-java 3.0.2 -> 3.2.0 age adoption passing confidence compile minor
com.google.code.gson:gson 2.11.0 -> 2.12.1 age adoption passing confidence compile minor
org.apache.logging.log4j:log4j-core (source) 2.24.1 -> 2.24.3 age adoption passing confidence compile patch
org.apache.maven.plugins:maven-javadoc-plugin 3.11.1 -> 3.11.2 age adoption passing confidence build patch

[skip release]


Release Notes

conventional-changelog/commitlint (@​commitlint/config-conventional)

v19.8.0

Compare Source

Performance Improvements
  • use node: prefix to bypass require.cache call for builtins (#​4302) (0cd8f41)

19.7.1 (2025-02-02)

Note: Version bump only for package @​commitlint/config-conventional

v19.7.1

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

v19.6.0

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

octokit/auth-app.js (@​octokit/auth-app)

v7.1.5

Compare Source

Bug Fixes
  • deps: update octokit dependencies to mitigate ReDos vulnerability [security] (#​678) (499d1f6)

v7.1.4

Compare Source

Bug Fixes

v7.1.3

Compare Source

Bug Fixes
actions/setup-java (actions/setup-java)

v4.7.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/setup-java@v4...v4.7.0

v4.6.0

Compare Source

What's Changed

Add-ons:

 - name: Checkout
   uses: actions/checkout@v4
 - name: Setup-java
   uses: actions/setup-java@v4
   with:
     distribution: ‘jetbrains’
     java-version: '21'

Bug fixes:

New Contributors

Full Changelog: actions/setup-java@v4...v4.6.0

actions/setup-node (actions/setup-node)

v4.3.0

Compare Source

What's Changed

Dependency updates

New Contributors

Full Changelog: actions/setup-node@v4...v4.3.0

v4.2.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/setup-node@v4...v4.2.0

actions/upload-artifact (actions/upload-artifact)

v4.6.2

Compare Source

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4...v4.6.2

v4.6.1

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.1

v4.6.0

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.0

v4.5.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4.4.3...v4.5.0

ossf/scorecard-action (ossf/scorecard-action)

v2.4.1

Compare Source

What's Changed

Docs

New Contributors

step-security/harden-runner (step-security/harden-runner)

v2.11.0

Compare Source

What's Changed

Release v2.11.0 in #​498
Harden-Runner Enterprise tier now supports the use of eBPF for DNS resolution and network call monitoring

Full Changelog: step-security/harden-runner@v2...v2.11.0

v2.10.4

Compare Source

What's Changed

Fixed a potential Harden-Runner post step failure that could occur when printing agent service logs. The fix gracefully handles failures without failing the post step.

Full Changelog: step-security/harden-runner@v2...v2.10.4

v2.10.3

Compare Source

What's Changed

Fixed an issue where DNS requests using uppercase characters (e.g., EXAMPLE.com) were blocked even when the domain was present in the allowed list. This update standardizes domain names to lowercase for consistent comparison.

Full Changelog: step-security/harden-runner@v2...v2.10.3

v2.10.2

Compare Source

What's Changed
  1. Fixes low-severity command injection weaknesses
    The advisory is here: GHSA-g85v-wf27-67xc

  2. Bug fix to improve detection of whether Harden-Runner is running in a container

Full Changelog: step-security/harden-runner@v2...v2.10.2

diffplug/spotless (com.diffplug.spotless:spotless-maven-plugin)

v2.44.0

Added
  • New static method to DiffMessageFormatter which allows to retrieve diffs with their line numbers (#​1960)
  • Gradle - Support for formatting shell scripts via shfmt. (#​1994)
Fixed
  • Fix empty files with biome >= 1.5.0 when formatting files that are in the ignore list of the biome configuration file. (#​1989 fixes #​1987)
  • Fix a regression in BufStep where the same arguments were being provided to every buf invocation. (#​1976)
Changed
  • Use palantir-java-format 2.39.0 on Java 21. (#​1948)
  • Bump default ktlint version to latest 1.0.1 -> 1.1.1. (#​1973)
  • Bump default googleJavaFormat version to latest 1.18.1 -> 1.19.2. (#​1971)
  • Bump default diktat version to latest 1.2.5 -> 2.0.0. (#​1972)
apache/commons-codec (commons-codec:commons-codec)

v1.18.0

The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.18.0.

The Apache Commons Codec component contains encoders and decoders for
formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
widely used encoders and decoders, the codec package also maintains a
collection of phonetic encoding utilities.

This is a feature and maintenance release. Java 8 or later is required.

v1.17.2

The Apache Commons Codec component contains encoders and decoders for
formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
widely used encoders and decoders, the codec package also maintains a
collection of phonetic encoding utilities.

This is a feature and maintenance release. Java 8 or later is required.

mockito/mockito (org.mockito:mockito-core)

v5.16.1

Compare Source

Changelog generated by Shipkit Changelog Gradle Plugin

5.16.1
  • 2025-03-15 - 3 commit(s) by Adrian Roos, Jérôme Prinet, Rafael Winterhalter
  • Remove Arrays.asList from critical stubbing path in GenericMetadataSu… (#​3610)
  • Rework of injection strategy in the context of modules (#​3608)
  • Adjust inline mocking snippet to allow task relocatability (#​3606)
  • Inline mocking configuration snippet for Gradle should allow task relocatability (#​3605)

v5.16.0

Compare Source

Changelog generated by Shipkit Changelog Gradle Plugin

5.16.0
  • 2025-03-03 - 10 commit(s) by Brice Dutheil, Rafael Winterhalter, TDL, dependabot[bot]
  • Add support for including module-info in Mockito. (#​3597)
  • Bump com.gradle.develocity from 3.19 to 3.19.1 (#​3579)
  • Bump org.assertj:assertj-core from 3.27.2 to 3.27.3 (#​3577)
  • Bump com.diffplug.spotless:spotless-plugin-gradle from 7.0.1 to 7.0.2 (#​3574)
  • Bump com.diffplug.spotless:spotless-plugin-gradle from 6.25.0 to 7.0.1 (#​3571)
  • Bump org.assertj:assertj-core from 3.27.1 to 3.27.2 (#​3569)
  • Tweaks documentation on mockito agent config for maven (#​3568)
  • Adds --info to diagnose closeAndReleaseStagingRepositories issues (#​3567)
  • Refine reflection when calling management factory (#​3566)
  • Avoid warning when dynamic attach is enabled (#​3551)

v5.15.2

Compare Source

Changelog generated by Shipkit Changelog Gradle Plugin

5.15.2
JodaOrg/joda-time (joda-time:joda-time)

v2.14.0

Compare Source

See the change notes for more information.

What's Changed

Full Changelog: JodaOrg/joda-time@v2.13.1...v2.14.0

v2.13.1

Compare Source

See the change notes for more information.

What's Changed

Full Changelog: JodaOrg/joda-time@v2.13.0...v2.13.1

cdimascio/dotenv-java (io.github.cdimascio:dotenv-java)

v3.2.0

(2025-02-22)

(2024-12-15)

(2024-09-01)

(2024-09-01)

(2023-04-30)

2.3.2 (2023-01-16)

2.3.1 (2022-11-23)

2.3.0 (2022-11-23)

2.2.0 (2020-10-15)

2.1.0 (2020-10-02)


Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" in timezone America/Toronto, Automerge - "after 9:00am and before 12:00pm on tuesday, wednesday, thursday" in timezone America/Toronto.

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

Sorry, something went wrong.

@renovate-coveo renovate-coveo bot added the bot label Nov 25, 2024
@renovate-coveo renovate-coveo bot requested a review from a team as a code owner November 25, 2024 05:01
@renovate-coveo renovate-coveo bot requested review from y-lakhdar, louis-bompart and fbeaudoincoveo and removed request for a team November 25, 2024 05:01
@renovate-coveo renovate-coveo bot force-pushed the renovate/all branch 3 times, most recently from 4e40f78 to ada3749 Compare December 16, 2024 00:01
@renovate-coveo renovate-coveo bot changed the title chore(deps): update all dependencies j:cdx-227 fix(deps): update all dependencies j:cdx-227 Dec 16, 2024
@renovate-coveo renovate-coveo bot force-pushed the renovate/all branch 2 times, most recently from 6c7070b to 238d137 Compare December 24, 2024 22:30
@renovate-coveo renovate-coveo bot force-pushed the renovate/all branch 3 times, most recently from 419d9c3 to 68a97ec Compare January 7, 2025 17:01
@renovate-coveo renovate-coveo bot force-pushed the renovate/all branch 5 times, most recently from c1ab79d to 651fb95 Compare January 16, 2025 21:00
@renovate-coveo renovate-coveo bot force-pushed the renovate/all branch 2 times, most recently from 0d8c706 to c6ef112 Compare January 29, 2025 15:30
@renovate-coveo renovate-coveo bot force-pushed the renovate/all branch 4 times, most recently from 414f6af to a62ccca Compare February 4, 2025 16:31
@renovate-coveo renovate-coveo bot force-pushed the renovate/all branch 2 times, most recently from 5e16680 to a10179d Compare February 24, 2025 00:00
@renovate-coveo renovate-coveo bot force-pushed the renovate/all branch 3 times, most recently from 96b3604 to 146ed63 Compare March 3, 2025 10:30
@renovate-coveo renovate-coveo bot force-pushed the renovate/all branch 3 times, most recently from f51205f to e5505e4 Compare March 20, 2025 17:31

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants