You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ws.apache.org by co...@apache.org on 2025/10/23 08:49:14 UTC

(ws-wss4j) branch 3_0_x-fixes updated (78bb40e3d -> a91085e86)

This is an automated email from the ASF dual-hosted git repository.

coheigea pushed a change to branch 3_0_x-fixes
in repository https://gitbox.apache.org/repos/asf/ws-wss4j.git


    from 78bb40e3d Revert "Bump com.puppycrawl.tools:checkstyle from 10.23.1 to 12.1.0 (#523)"
     new 90d55e38b Bump org.owasp:dependency-check-maven from 12.1.1 to 12.1.8 (#529)
     new ea5ec39ea Bump org.apache.rat:apache-rat-plugin from 0.16.1 to 0.17 (#533)
     new 86678a295 Bump org.apache.commons:commons-compress from 1.27.1 to 1.28.0 (#532)
     new 9df07114a Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.5.0 to 3.6.2 (#531)
     new a91085e86 Bump com.google.guava:guava from 33.4.8-jre to 33.5.0-jre (#530)

The 5 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Summary of changes:
 parent/pom.xml             | 2 +-
 pom.xml                    | 6 +++---
 ws-security-common/pom.xml | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)


(ws-wss4j) 01/05: Bump org.owasp:dependency-check-maven from 12.1.1 to 12.1.8 (#529)

Posted by co...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

coheigea pushed a commit to branch 3_0_x-fixes
in repository https://gitbox.apache.org/repos/asf/ws-wss4j.git

commit 90d55e38be89173ae8c088f9f9e19c6546b963f4
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Thu Oct 23 09:24:42 2025 +0100

    Bump org.owasp:dependency-check-maven from 12.1.1 to 12.1.8 (#529)
    
    Bumps [org.owasp:dependency-check-maven](https://github.com/dependency-check/DependencyCheck) from 12.1.1 to 12.1.8.
    - [Release notes](https://github.com/dependency-check/DependencyCheck/releases)
    - [Changelog](https://github.com/dependency-check/DependencyCheck/blob/main/CHANGELOG.md)
    - [Commits](https://github.com/dependency-check/DependencyCheck/compare/v12.1.1...v12.1.8)
    
    ---
    updated-dependencies:
    - dependency-name: org.owasp:dependency-check-maven
      dependency-version: 12.1.8
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <su...@github.com>
    Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 89a7eed4a..4907f487e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -108,7 +108,7 @@
         <targetJdk>11</targetJdk>
         <maven.compiler.target>11</maven.compiler.target>
         <buildtools.dir>${basedir}/build-tools</buildtools.dir>
-        <maven-owasp-plugin-version>12.1.1</maven-owasp-plugin-version>
+        <maven-owasp-plugin-version>12.1.8</maven-owasp-plugin-version>
         <project.build.outputTimestamp>2024-11-08T11:57:19Z</project.build.outputTimestamp>
     </properties>
 


(ws-wss4j) 03/05: Bump org.apache.commons:commons-compress from 1.27.1 to 1.28.0 (#532)

Posted by co...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

coheigea pushed a commit to branch 3_0_x-fixes
in repository https://gitbox.apache.org/repos/asf/ws-wss4j.git

commit 86678a2957fea092cb3c116f3883d72ec99fa3e3
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Thu Oct 23 09:25:02 2025 +0100

    Bump org.apache.commons:commons-compress from 1.27.1 to 1.28.0 (#532)
    
    Bumps [org.apache.commons:commons-compress](https://github.com/apache/commons-compress) from 1.27.1 to 1.28.0.
    - [Changelog](https://github.com/apache/commons-compress/blob/master/RELEASE-NOTES.txt)
    - [Commits](https://github.com/apache/commons-compress/compare/rel/commons-compress-1.27.1...rel/commons-compress-1.28.0)
    
    ---
    updated-dependencies:
    - dependency-name: org.apache.commons:commons-compress
      dependency-version: 1.28.0
      dependency-type: direct:development
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <su...@github.com>
    Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
---
 parent/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/parent/pom.xml b/parent/pom.xml
index dc9128314..9b6715794 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -33,7 +33,7 @@
 
     <properties>
         <bcprov.version>1.82</bcprov.version>
-        <commons.compress.version>1.27.1</commons.compress.version>
+        <commons.compress.version>1.28.0</commons.compress.version>
         <cryptacular.version>1.2.7</cryptacular.version>
         <ehcache.version>3.11.1</ehcache.version>
         <hamcrest.version>3.0</hamcrest.version>


(ws-wss4j) 05/05: Bump com.google.guava:guava from 33.4.8-jre to 33.5.0-jre (#530)

Posted by co...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

coheigea pushed a commit to branch 3_0_x-fixes
in repository https://gitbox.apache.org/repos/asf/ws-wss4j.git

commit a91085e86a2ecd41569b711b8d845b90eacd2244
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Thu Oct 23 09:25:20 2025 +0100

    Bump com.google.guava:guava from 33.4.8-jre to 33.5.0-jre (#530)
    
    Bumps [com.google.guava:guava](https://github.com/google/guava) from 33.4.8-jre to 33.5.0-jre.
    - [Release notes](https://github.com/google/guava/releases)
    - [Commits](https://github.com/google/guava/commits)
    
    ---
    updated-dependencies:
    - dependency-name: com.google.guava:guava
      dependency-version: 33.5.0-jre
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <su...@github.com>
    Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
---
 ws-security-common/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ws-security-common/pom.xml b/ws-security-common/pom.xml
index 0d723b414..bbed14e0d 100644
--- a/ws-security-common/pom.xml
+++ b/ws-security-common/pom.xml
@@ -163,7 +163,7 @@
         <dependency>
             <groupId>com.google.guava</groupId>
             <artifactId>guava</artifactId>
-            <version>33.4.8-jre</version>
+            <version>33.5.0-jre</version>
             <scope>compile</scope>
             <exclusions>
                 <exclusion>


(ws-wss4j) 04/05: Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.5.0 to 3.6.2 (#531)

Posted by co...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

coheigea pushed a commit to branch 3_0_x-fixes
in repository https://gitbox.apache.org/repos/asf/ws-wss4j.git

commit 9df07114a125e95b8b12692db425426abf0fedf7
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Thu Oct 23 09:25:11 2025 +0100

    Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.5.0 to 3.6.2 (#531)
    
    Bumps [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) from 3.5.0 to 3.6.2.
    - [Release notes](https://github.com/apache/maven-enforcer/releases)
    - [Commits](https://github.com/apache/maven-enforcer/compare/enforcer-3.5.0...enforcer-3.6.2)
    
    ---
    updated-dependencies:
    - dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
      dependency-version: 3.6.2
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <su...@github.com>
    Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 6b8da5d1a..e53b0aeda 100644
--- a/pom.xml
+++ b/pom.xml
@@ -316,7 +316,7 @@
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>
                     <artifactId>maven-enforcer-plugin</artifactId>
-                    <version>3.5.0</version>
+                    <version>3.6.2</version>
                     <configuration>
                         <rules>
                             <requireMavenVersion>


(ws-wss4j) 02/05: Bump org.apache.rat:apache-rat-plugin from 0.16.1 to 0.17 (#533)

Posted by co...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

coheigea pushed a commit to branch 3_0_x-fixes
in repository https://gitbox.apache.org/repos/asf/ws-wss4j.git

commit ea5ec39eadd59b9f72181eccdb13c69bbc0067f3
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Thu Oct 23 09:24:52 2025 +0100

    Bump org.apache.rat:apache-rat-plugin from 0.16.1 to 0.17 (#533)
    
    Bumps org.apache.rat:apache-rat-plugin from 0.16.1 to 0.17.
    
    ---
    updated-dependencies:
    - dependency-name: org.apache.rat:apache-rat-plugin
      dependency-version: '0.17'
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <su...@github.com>
    Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 4907f487e..6b8da5d1a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -229,7 +229,7 @@
                 <plugin>
                     <groupId>org.apache.rat</groupId>
                     <artifactId>apache-rat-plugin</artifactId>
-                    <version>0.16.1</version>
+                    <version>0.17</version>
                     <executions>
                         <execution>
                             <phase>verify</phase>