Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Bump org.owasp:dependency-check-maven from 11.1.0 to 11.1.1 (#2329)
Bumps [org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck) from 11.1.0 to 11.1.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jeremylong/DependencyCheck/releases">org.owasp:dependency-check-maven's releases</a>.</em></p> <blockquote> <h2>Version 11.1.1</h2> <p>Refer to the <a href="https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md#change-log">CHANGELOG.md</a> for information about improvements and upgrade notes.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md">org.owasp:dependency-check-maven's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/jeremylong/DependencyCheck/releases/tag/v11.1.1">Version 11.1.1</a> (2024-12-04)</h2> <ul> <li>fix: re-enable issue locking (<a href="https://github.com/jeremylong/DependencyCheck/issues/7220">#7220</a>)</li> <li>fix: add username/password properties to be able to authenticate for central.content.url and analyzer.central.url again (<a href="https://github.com/jeremylong/DependencyCheck/issues/7169">#7169</a>)</li> <li>fix: rework replaceOrAddVulnerability (<a href="https://github.com/jeremylong/DependencyCheck/issues/7177">#7177</a>)</li> <li>fix: do not log loading of JDBC driver (<a href="https://github.com/jeremylong/DependencyCheck/issues/7155">#7155</a>)</li> <li>fix: expose flag to disable version check (<a href="https://github.com/jeremylong/DependencyCheck/issues/7147">#7147</a>)</li> <li>fix: Gracefully handle CVEs with bad configuration nodes missing CPE match expressions (<a href="https://github.com/jeremylong/DependencyCheck/issues/7125">#7125</a>)</li> <li>chore: cleanup base suppression (<a href="https://github.com/jeremylong/DependencyCheck/issues/7138">#7138</a>)</li> <li>docs: update gradle configuration documentation (<a href="https://github.com/jeremylong/DependencyCheck/issues/7176">#7176</a>)</li> <li>docs: update documentation for Gradle plugin (<a href="https://github.com/jeremylong/DependencyCheck/issues/7143">#7143</a>)</li> <li>docs: improve false positive issue templat (<a href="https://github.com/jeremylong/DependencyCheck/issues/7130">#7130</a>)</li> </ul> <p>See the full listing of <a href="https://github.com/jeremylong/DependencyCheck/milestone/90?closed=1">changes</a>.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jeremylong/DependencyCheck/commit/30acb30398910a585145a000e34a83a72ca3aaf2"><code>30acb30</code></a> build: prepare release v11.1.1</li> <li><a href="https://github.com/jeremylong/DependencyCheck/commit/0a4f570109695cc1f813750afb637f4133bf1ebe"><code>0a4f570</code></a> docs: update changelog for release 11.1.1</li> <li><a href="https://github.com/jeremylong/DependencyCheck/commit/cf08e94292a601bf66bd3df5a0ee3ed12e2eaebf"><code>cf08e94</code></a> fix: re-enable issue locking (<a href="https://github.com/jeremylong/DependencyCheck/issues/7220">#7220</a>)</li> <li><a href="https://github.com/jeremylong/DependencyCheck/commit/09f3fb96006b27c7fa6889583d5695fc8c6ca298"><code>09f3fb9</code></a> build(deps): bump JamesIves/github-pages-deploy-action from 4.7.1 to 4.7.2 (#...</li> <li><a href="https://github.com/jeremylong/DependencyCheck/commit/a65720f2e23b7bcf2bf382a40956521591cde8f0"><code>a65720f</code></a> fix: reenable issue locking (<a href="https://github.com/jeremylong/DependencyCheck/issues/7208">#7208</a>)</li> <li><a href="https://github.com/jeremylong/DependencyCheck/commit/20e344c91791c869d4638defeb5135d777749e9c"><code>20e344c</code></a> fix: 7093 add username/password properties to be able to authenticate for cen...</li> <li><a href="https://github.com/jeremylong/DependencyCheck/commit/6a13d58e031144a4ce887356369dbf31b651a059"><code>6a13d58</code></a> build(deps): bump org.jsoup:jsoup from 1.18.2 to 1.18.3 (<a href="https://github.com/jeremylong/DependencyCheck/issues/7205">#7205</a>)</li> <li><a href="https://github.com/jeremylong/DependencyCheck/commit/4655cc72bcc29dc3755dafbfe5223a051448ece7"><code>4655cc7</code></a> build(deps): bump commons-io:commons-io from 2.17.0 to 2.18.0 (<a href="https://github.com/jeremylong/DependencyCheck/issues/7170">#7170</a>)</li> <li><a href="https://github.com/jeremylong/DependencyCheck/commit/f85b726e55adce0971060ec65c4c7c9b8916af4e"><code>f85b726</code></a> build(deps): bump jackson.version from 2.18.1 to 2.18.2 (<a href="https://github.com/jeremylong/DependencyCheck/issues/7200">#7200</a>)</li> <li><a href="https://github.com/jeremylong/DependencyCheck/commit/a3cfa4f6e9155b9136c29fa1e4415bbcb41bddfb"><code>a3cfa4f</code></a> build(deps): bump org.jsoup:jsoup from 1.18.1 to 1.18.2 (<a href="https://github.com/jeremylong/DependencyCheck/issues/7194">#7194</a>)</li> <li>Additional commits viewable in <a href="https://github.com/jeremylong/DependencyCheck/compare/v11.1.0...v11.1.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.owasp:dependency-check-maven&package-manager=maven&previous-version=11.1.0&new-version=11.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
- Loading branch information