Skip to content

Commit

Permalink
Bump org.owasp:dependency-check-maven from 11.1.0 to 11.1.1 (#2329)
Browse files Browse the repository at this point in the history
Bumps
[org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck)
from 11.1.0 to 11.1.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/jeremylong/DependencyCheck/releases">org.owasp:dependency-check-maven's
releases</a>.</em></p>
<blockquote>
<h2>Version 11.1.1</h2>
<p>Refer to the <a
href="https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md#change-log">CHANGELOG.md</a>
for information about improvements and upgrade notes.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md">org.owasp:dependency-check-maven's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/jeremylong/DependencyCheck/releases/tag/v11.1.1">Version
11.1.1</a> (2024-12-04)</h2>
<ul>
<li>fix: re-enable issue locking (<a
href="https://github.com/jeremylong/DependencyCheck/issues/7220">#7220</a>)</li>
<li>fix: add username/password properties to be able to authenticate for
central.content.url and analyzer.central.url again (<a
href="https://github.com/jeremylong/DependencyCheck/issues/7169">#7169</a>)</li>
<li>fix: rework replaceOrAddVulnerability (<a
href="https://github.com/jeremylong/DependencyCheck/issues/7177">#7177</a>)</li>
<li>fix: do not log loading of JDBC driver (<a
href="https://github.com/jeremylong/DependencyCheck/issues/7155">#7155</a>)</li>
<li>fix: expose flag to disable version check (<a
href="https://github.com/jeremylong/DependencyCheck/issues/7147">#7147</a>)</li>
<li>fix: Gracefully handle CVEs with bad configuration nodes missing CPE
match expressions (<a
href="https://github.com/jeremylong/DependencyCheck/issues/7125">#7125</a>)</li>
<li>chore: cleanup base suppression (<a
href="https://github.com/jeremylong/DependencyCheck/issues/7138">#7138</a>)</li>
<li>docs: update gradle configuration documentation (<a
href="https://github.com/jeremylong/DependencyCheck/issues/7176">#7176</a>)</li>
<li>docs: update documentation for Gradle plugin (<a
href="https://github.com/jeremylong/DependencyCheck/issues/7143">#7143</a>)</li>
<li>docs: improve false positive issue templat (<a
href="https://github.com/jeremylong/DependencyCheck/issues/7130">#7130</a>)</li>
</ul>
<p>See the full listing of <a
href="https://github.com/jeremylong/DependencyCheck/milestone/90?closed=1">changes</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/jeremylong/DependencyCheck/commit/30acb30398910a585145a000e34a83a72ca3aaf2"><code>30acb30</code></a>
build: prepare release v11.1.1</li>
<li><a
href="https://github.com/jeremylong/DependencyCheck/commit/0a4f570109695cc1f813750afb637f4133bf1ebe"><code>0a4f570</code></a>
docs: update changelog for release 11.1.1</li>
<li><a
href="https://github.com/jeremylong/DependencyCheck/commit/cf08e94292a601bf66bd3df5a0ee3ed12e2eaebf"><code>cf08e94</code></a>
fix: re-enable issue locking (<a
href="https://github.com/jeremylong/DependencyCheck/issues/7220">#7220</a>)</li>
<li><a
href="https://github.com/jeremylong/DependencyCheck/commit/09f3fb96006b27c7fa6889583d5695fc8c6ca298"><code>09f3fb9</code></a>
build(deps): bump JamesIves/github-pages-deploy-action from 4.7.1 to
4.7.2 (#...</li>
<li><a
href="https://github.com/jeremylong/DependencyCheck/commit/a65720f2e23b7bcf2bf382a40956521591cde8f0"><code>a65720f</code></a>
fix: reenable issue locking (<a
href="https://github.com/jeremylong/DependencyCheck/issues/7208">#7208</a>)</li>
<li><a
href="https://github.com/jeremylong/DependencyCheck/commit/20e344c91791c869d4638defeb5135d777749e9c"><code>20e344c</code></a>
fix: 7093 add username/password properties to be able to authenticate
for cen...</li>
<li><a
href="https://github.com/jeremylong/DependencyCheck/commit/6a13d58e031144a4ce887356369dbf31b651a059"><code>6a13d58</code></a>
build(deps): bump org.jsoup:jsoup from 1.18.2 to 1.18.3 (<a
href="https://github.com/jeremylong/DependencyCheck/issues/7205">#7205</a>)</li>
<li><a
href="https://github.com/jeremylong/DependencyCheck/commit/4655cc72bcc29dc3755dafbfe5223a051448ece7"><code>4655cc7</code></a>
build(deps): bump commons-io:commons-io from 2.17.0 to 2.18.0 (<a
href="https://github.com/jeremylong/DependencyCheck/issues/7170">#7170</a>)</li>
<li><a
href="https://github.com/jeremylong/DependencyCheck/commit/f85b726e55adce0971060ec65c4c7c9b8916af4e"><code>f85b726</code></a>
build(deps): bump jackson.version from 2.18.1 to 2.18.2 (<a
href="https://github.com/jeremylong/DependencyCheck/issues/7200">#7200</a>)</li>
<li><a
href="https://github.com/jeremylong/DependencyCheck/commit/a3cfa4f6e9155b9136c29fa1e4415bbcb41bddfb"><code>a3cfa4f</code></a>
build(deps): bump org.jsoup:jsoup from 1.18.1 to 1.18.2 (<a
href="https://github.com/jeremylong/DependencyCheck/issues/7194">#7194</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/jeremylong/DependencyCheck/compare/v11.1.0...v11.1.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.owasp:dependency-check-maven&package-manager=maven&previous-version=11.1.0&new-version=11.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  • Loading branch information
dependabot[bot] authored Dec 5, 2024
1 parent 7aa1d1a commit 04026c6
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -1076,7 +1076,7 @@
<plugin>
<groupId>org.owasp</groupId>
<artifactId>dependency-check-maven</artifactId>
<version>11.1.0</version>
<version>11.1.1</version>
<configuration>
<enableExperimental>true</enableExperimental>
<retirejs>
Expand Down

0 comments on commit 04026c6

Please sign in to comment.