Skip to content

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Apr 5, 2025

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
org.owasp:dependency-check-maven (source) 12.1.0 -> 12.1.1 age adoption passing confidence

Release Notes

dependency-check/DependencyCheck (org.owasp:dependency-check-maven)

v12.1.1

Compare Source

  • fix: resolve NVD data Parse error com.fasterxml.jackson.core.JsonParseException: Unexpected character (']' (code 93))
    • bump open-vulnerability-client from 7.3.1 to 7.3.2 (#​7577)
  • fix: update links for repository move from jeremylong to the dependency-check organization (#​7373)
  • fix: resolve NPE when processing CVE-2025-2682 (#​7558)
  • fix: prevent rogue base suppression files (#​7544)
  • fix: #​6819 handle invalid toml file (#​7548)
  • fix: Use unscored severity only in absence of any CVSS baseScore (#​7530)
  • fix: protect against exotic version number of yarn (#​7525)
  • fix: Ignore require-bundle MANIFEST.MF entry for evidence (#​7523)
  • fix: avoid error on yarn berry audit when no vulnerability found (#​7501)
  • fix: improve null checks in Downloader (#​7493)
  • fix: improve null checks resolves https://github.com/dependency-check/dependency-check-gradle/issues/441
  • fix: Avoid FPs when Composer product name has php (#​7486)
  • fix: cli not honoring window paths correctly (#​7470)
  • fix: Also apply muteNoisyLoggers to UpdateMojo (#​7469)
  • fix: Make HC5 Downloader honor the connection- and readTimeout settings that the old URLConnectionFactory based downloads observed (#​7437)
  • docs: sync the supported Maven version with the one stated in the system requirement section (#​7570)
  • docs: update proxy config documentation (#​7550)
  • docs: Remove copyright as requested by the Apache foundation
  • docs: drop redundant text in the Internet Access Required section (#​7521)
  • docs: correct gradle documentation (#​7511)

See the full listing of changes


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

…2.1.1

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@hankem hankem merged commit 04a49b2 into master Apr 5, 2025
33 checks passed
@renovate renovate bot deleted the renovate/dependency-check-maven.version branch April 5, 2025 15:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant