You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2024/05/17 12:43:40 UTC
[PR] Bump org.codehaus.plexus:plexus-cipher from 2.0 to 2.1.0 [maven]
dependabot[bot] opened a new pull request, #1517:
URL: https://github.com/apache/maven/pull/1517
Bumps [org.codehaus.plexus:plexus-cipher](https://github.com/codehaus-plexus/plexus-cipher) from 2.0 to 2.1.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/codehaus-plexus/plexus-cipher/releases">org.codehaus.plexus:plexus-cipher's releases</a>.</em></p>
<blockquote>
<h2>2.1.0</h2>
<!-- raw HTML omitted -->
<ul>
<li>Switch to java.util.Base64 (<a href="https://redirect.github.com/codehaus-plexus/plexus-cipher/pull/35">#35</a>) <a href="https://github.com/slachiewicz"><code>@slachiewicz</code></a></li>
<li>Move code to Java 8 (<a href="https://redirect.github.com/codehaus-plexus/plexus-cipher/pull/31">#31</a>) <a href="https://github.com/slachiewicz"><code>@slachiewicz</code></a></li>
<li>Fixed insecure cryptography in PBECipher.java (<a href="https://redirect.github.com/codehaus-plexus/plexus-cipher/pull/23">#23</a>) <a href="https://github.com/gL1nt"><code>@gL1nt</code></a></li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li>Enable missed decryption test and adjust to new algorithm after <a href="https://redirect.github.com/codehaus-plexus/plexus-cipher/issues/23">#23</a> (<a href="https://redirect.github.com/codehaus-plexus/plexus-cipher/pull/34">#34</a>) <a href="https://github.com/slachiewicz"><code>@slachiewicz</code></a></li>
</ul>
<h2>📦 Dependency updates</h2>
<ul>
<li>Bump org.codehaus.plexus:plexus from 15 to 16 (<a href="https://redirect.github.com/codehaus-plexus/plexus-cipher/pull/41">#41</a>) <a href="https://github.com/dependabot"><code>@dependabot</code></a></li>
<li>Move tests to JUnit 5 (<a href="https://redirect.github.com/codehaus-plexus/plexus-cipher/pull/39">#39</a>) <a href="https://github.com/slachiewicz"><code>@slachiewicz</code></a></li>
<li>Bump org.codehaus.plexus:plexus from 14 to 15 (<a href="https://redirect.github.com/codehaus-plexus/plexus-cipher/pull/38">#38</a>) <a href="https://github.com/dependabot"><code>@dependabot</code></a></li>
<li>Bump actions/checkout from 3 to 4 (<a href="https://redirect.github.com/codehaus-plexus/plexus-cipher/pull/37">#37</a>) <a href="https://github.com/dependabot"><code>@dependabot</code></a></li>
<li>Bump org.codehaus.plexus:plexus from 10 to 14 (<a href="https://redirect.github.com/codehaus-plexus/plexus-cipher/pull/32">#32</a>) <a href="https://github.com/dependabot"><code>@dependabot</code></a></li>
<li>Bump maven-surefire-plugin from 3.0.0 to 3.1.2 (<a href="https://redirect.github.com/codehaus-plexus/plexus-cipher/pull/30">#30</a>) <a href="https://github.com/dependabot"><code>@dependabot</code></a></li>
<li>Bump maven-surefire-plugin from 2.22.2 to 3.0.0 (<a href="https://redirect.github.com/codehaus-plexus/plexus-cipher/pull/24">#24</a>) <a href="https://github.com/dependabot"><code>@dependabot</code></a></li>
<li>Bump plexus from 8 to 10 (<a href="https://redirect.github.com/codehaus-plexus/plexus-cipher/pull/22">#22</a>) <a href="https://github.com/dependabot"><code>@dependabot</code></a></li>
<li>Bump actions/checkout from 2 to 3 (<a href="https://redirect.github.com/codehaus-plexus/plexus-cipher/pull/13">#13</a>) <a href="https://github.com/dependabot"><code>@dependabot</code></a></li>
<li>Bump release-drafter/release-drafter from 5.18.0 to 5.19.0 (<a href="https://redirect.github.com/codehaus-plexus/plexus-cipher/pull/14">#14</a>) <a href="https://github.com/dependabot"><code>@dependabot</code></a></li>
<li>Bump actions/cache from 2 to 3.0.1 (<a href="https://redirect.github.com/codehaus-plexus/plexus-cipher/pull/16">#16</a>) <a href="https://github.com/dependabot"><code>@dependabot</code></a></li>
<li>Bump actions/setup-java from 2 to 3 (<a href="https://redirect.github.com/codehaus-plexus/plexus-cipher/pull/17">#17</a>) <a href="https://github.com/dependabot"><code>@dependabot</code></a></li>
<li>Bump github/codeql-action from 1 to 2 (<a href="https://redirect.github.com/codehaus-plexus/plexus-cipher/pull/18">#18</a>) <a href="https://github.com/dependabot"><code>@dependabot</code></a></li>
<li>Bump release-drafter/release-drafter from 5.17.6 to 5.18.0 (<a href="https://redirect.github.com/codehaus-plexus/plexus-cipher/pull/11">#11</a>) <a href="https://github.com/dependabot"><code>@dependabot</code></a></li>
<li>Bump release-drafter/release-drafter from 5.15.0 to 5.17.6 (<a href="https://redirect.github.com/codehaus-plexus/plexus-cipher/pull/10">#10</a>) <a href="https://github.com/dependabot"><code>@dependabot</code></a></li>
<li>Bump sisuVersion from 0.3.4 to 0.3.5 (<a href="https://redirect.github.com/codehaus-plexus/plexus-cipher/pull/7">#7</a>) <a href="https://github.com/dependabot"><code>@dependabot</code></a></li>
</ul>
<h2>👻 Maintenance</h2>
<ul>
<li>Reuse plexus-pom action for CI (<a href="https://redirect.github.com/codehaus-plexus/plexus-cipher/pull/40">#40</a>) <a href="https://github.com/slachiewicz"><code>@slachiewicz</code></a></li>
<li>Move tests to JUnit 5 (<a href="https://redirect.github.com/codehaus-plexus/plexus-cipher/pull/39">#39</a>) <a href="https://github.com/slachiewicz"><code>@slachiewicz</code></a></li>
<li>Quick fix reported issues in code style (<a href="https://redirect.github.com/codehaus-plexus/plexus-cipher/pull/33">#33</a>) <a href="https://github.com/slachiewicz"><code>@slachiewicz</code></a></li>
</ul>
<h2>🔧 Build</h2>
<ul>
<li>use shared actions (<a href="https://redirect.github.com/codehaus-plexus/plexus-cipher/pull/21">#21</a>) <a href="https://github.com/olamy"><code>@olamy</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/codehaus-plexus/plexus-cipher/commit/9c9613bc383f1465c9b2a8ec1c02a5152fb13298"><code>9c9613b</code></a> [maven-release-plugin] prepare release plexus-cipher-2.1.0</li>
<li><a href="https://github.com/codehaus-plexus/plexus-cipher/commit/8017c9e88fd512e0a96c073585887f067e6dd9c0"><code>8017c9e</code></a> Move tests to JUnit 5</li>
<li><a href="https://github.com/codehaus-plexus/plexus-cipher/commit/0e6e693e433de9b1988fad2170f407230b6e6f30"><code>0e6e693</code></a> Cleanup after parent pom update</li>
<li><a href="https://github.com/codehaus-plexus/plexus-cipher/commit/931a35bc74ade42810de0e77120de858f3c64285"><code>931a35b</code></a> Bump org.codehaus.plexus:plexus from 14 to 15</li>
<li><a href="https://github.com/codehaus-plexus/plexus-cipher/commit/b81827ea94180f944a8cdaa57dcf65a8dc422264"><code>b81827e</code></a> Bump actions/checkout from 3 to 4</li>
<li><a href="https://github.com/codehaus-plexus/plexus-cipher/commit/179bc0eab4e5be5aaef12df754154eb8426e3b5c"><code>179bc0e</code></a> Switch to java.util.Base64</li>
<li><a href="https://github.com/codehaus-plexus/plexus-cipher/commit/e9d65058e5c1d394a280b4b9ef046edf2439fa21"><code>e9d6505</code></a> Enable missed decryption test and adjust to new algorithm after <a href="https://redirect.github.com/codehaus-plexus/plexus-cipher/issues/23">#23</a></li>
<li><a href="https://github.com/codehaus-plexus/plexus-cipher/commit/03beb95665213693bcf7bfd4abf8aedccea4f0eb"><code>03beb95</code></a> Quick fix reported issues in code style</li>
<li><a href="https://github.com/codehaus-plexus/plexus-cipher/commit/8806f6f5f72d805b645d3277a6f3876f52398964"><code>8806f6f</code></a> Fix link to Build status</li>
<li><a href="https://github.com/codehaus-plexus/plexus-cipher/commit/0d1272ccd23c983156d946a513d49a8e6b2accd2"><code>0d1272c</code></a> Cleanup after parent pom update. Bump to 2.1.0-SNAPSHOT</li>
<li>Additional commits viewable in <a href="https://github.com/codehaus-plexus/plexus-cipher/compare/plexus-cipher-2.0...plexus-cipher-2.1.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@maven.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump org.codehaus.plexus:plexus-cipher from 2.0 to 2.1.0 [maven]
Posted by "cstamas (via GitHub)" <gi...@apache.org>.
cstamas commented on PR #1517:
URL: https://github.com/apache/maven/pull/1517#issuecomment-2122465723
True, hence I created a wiki page to discuss this, scratch some ideas:
https://cwiki.apache.org/confluence/display/MAVEN/Handling+sensitive+data+in+Maven
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@maven.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump org.codehaus.plexus:plexus-cipher from 2.0 to 2.1.0 [maven]
Posted by "gnodet (via GitHub)" <gi...@apache.org>.
gnodet commented on PR #1517:
URL: https://github.com/apache/maven/pull/1517#issuecomment-2122047955
@dependabot rebase
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@maven.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump org.codehaus.plexus:plexus-cipher from 2.0 to 2.1.0 [maven]
Posted by "cstamas (via GitHub)" <gi...@apache.org>.
cstamas commented on PR #1517:
URL: https://github.com/apache/maven/pull/1517#issuecomment-2122330989
@dependabot close
Maven should not move from 2.0, in fact, we should get rid of this.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@maven.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump org.codehaus.plexus:plexus-cipher from 2.0 to 2.1.0 [maven]
Posted by "gnodet (via GitHub)" <gi...@apache.org>.
gnodet commented on PR #1517:
URL: https://github.com/apache/maven/pull/1517#issuecomment-2122415309
> @dependabot close
>
> Maven should not move from 2.0, in fact, we should get rid of this.
Right, but that's a mid-term goal. We don't have any work around for storing credentials atm, do we ?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@maven.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump org.codehaus.plexus:plexus-cipher from 2.0 to 2.1.0 [maven]
Posted by "dependabot[bot] (via GitHub)" <gi...@apache.org>.
dependabot[bot] closed pull request #1517: Bump org.codehaus.plexus:plexus-cipher from 2.0 to 2.1.0
URL: https://github.com/apache/maven/pull/1517
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@maven.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org