New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

Try to upgrade to latest dependencies #50

Open

rvesse wants to merge 3 commits into main from dependabot/maven/patches-d8f80f7f53

Collaborator

rvesse commented Oct 4, 2024

Still needs work to address Trivy scan failures

dependabot bot and others added 3 commits

September 9, 2024 10:36


          Bump the patches group across 1 directory with 14 updates

77ee48c

Bumps the patches group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.6` | `1.5.7` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.17.0` | `2.17.2` |
| [com.fasterxml.jackson.dataformat:jackson-dataformat-yaml](https://github.com/FasterXML/jackson-dataformats-text) | `2.17.0` | `2.17.2` |
| [org.projectlombok:lombok](https://github.com/projectlombok/lombok) | `1.18.32` | `1.18.34` |
| [org.kohsuke:github-api](https://github.com/hub4j/github-api) | `1.321` | `1.324` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.1.0-jre` | `33.3.0-jre` |
| [com.atlassian.adf:adf-builder-java](https://bitbucket.org/atlassian/adf-builder-java) | `0.38.0` | `0.48.2` |
| com.atlassian.adf:adf-builder-java-jackson2 | `0.38.0` | `0.48.2` |
| com.atlassian.adf:adf-builder-java-markdown | `0.38.0` | `0.48.2` |
| [org.testng:testng](https://github.com/testng-team/testng) | `7.10.1` | `7.10.2` |
| [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.11.0` | `5.13.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.2.5` | `3.5.0` |
| [org.apache.maven.plugins:maven-shade-plugin](https://github.com/apache/maven-shade-plugin) | `3.5.3` | `3.6.0` |
| [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) | `3.6.3` | `3.10.0` |



Updates `ch.qos.logback:logback-classic` from 1.5.6 to 1.5.7
- [Commits](qos-ch/logback@v_1.5.6...v_1.5.7)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.17.0 to 2.17.2
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-yaml` from 2.17.0 to 2.17.2
- [Commits](FasterXML/jackson-dataformats-text@jackson-dataformats-text-2.17.0...jackson-dataformats-text-2.17.2)

Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-yaml` from 2.17.0 to 2.17.2
- [Commits](FasterXML/jackson-dataformats-text@jackson-dataformats-text-2.17.0...jackson-dataformats-text-2.17.2)

Updates `org.projectlombok:lombok` from 1.18.32 to 1.18.34
- [Changelog](https://github.com/projectlombok/lombok/blob/master/doc/changelog.markdown)
- [Commits](projectlombok/lombok@v1.18.32...v1.18.34)

Updates `org.kohsuke:github-api` from 1.321 to 1.324
- [Release notes](https://github.com/hub4j/github-api/releases)
- [Changelog](https://github.com/hub4j/github-api/blob/main/CHANGELOG.md)
- [Commits](hub4j/github-api@github-api-1.321...github-api-1.324)

Updates `com.google.guava:guava` from 33.1.0-jre to 33.3.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.atlassian.adf:adf-builder-java` from 0.38.0 to 0.48.2
- [Commits](https://bitbucket.org/atlassian/adf-builder-java/commits)

Updates `com.atlassian.adf:adf-builder-java-jackson2` from 0.38.0 to 0.48.2

Updates `com.atlassian.adf:adf-builder-java-markdown` from 0.38.0 to 0.48.2

Updates `com.atlassian.adf:adf-builder-java-jackson2` from 0.38.0 to 0.48.2

Updates `com.atlassian.adf:adf-builder-java-markdown` from 0.38.0 to 0.48.2

Updates `org.testng:testng` from 7.10.1 to 7.10.2
- [Release notes](https://github.com/testng-team/testng/releases)
- [Changelog](https://github.com/testng-team/testng/blob/master/CHANGES.txt)
- [Commits](testng-team/testng@7.10.1...7.10.2)

Updates `org.mockito:mockito-core` from 5.11.0 to 5.13.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.11.0...v5.13.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.2.5 to 3.5.0
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.2.5...surefire-3.5.0)

Updates `org.apache.maven.plugins:maven-shade-plugin` from 3.5.3 to 3.6.0
- [Release notes](https://github.com/apache/maven-shade-plugin/releases)
- [Commits](apache/maven-shade-plugin@maven-shade-plugin-3.5.3...maven-shade-plugin-3.6.0)

Updates `org.apache.maven.plugins:maven-javadoc-plugin` from 3.6.3 to 3.10.0
- [Release notes](https://github.com/apache/maven-javadoc-plugin/releases)
- [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.6.3...maven-javadoc-plugin-3.10.0)

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-yaml
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-yaml
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: org.projectlombok:lombok
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: org.kohsuke:github-api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: com.google.guava:guava
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: com.atlassian.adf:adf-builder-java
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: com.atlassian.adf:adf-builder-java-jackson2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: com.atlassian.adf:adf-builder-java-markdown
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: com.atlassian.adf:adf-builder-java-jackson2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: com.atlassian.adf:adf-builder-java-markdown
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: org.testng:testng
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: org.mockito:mockito-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: org.apache.maven.plugins:maven-shade-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: org.apache.maven.plugins:maven-javadoc-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
...

Signed-off-by: dependabot[bot] <support@github.com>


          Fix up dependency vulnerabilities

1a3109c

Add relevant exclusions and explicit dependencies on fixed versions


          Upgrade to newer dependencies

612ea36

rvesse mentioned this pull request

Bump the patches group across 1 directory with 15 updates #49

Closed

# for free to join this conversation on GitHub. Already have an account? # to comment

Labels

None yet