You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cxf.apache.org by re...@apache.org on 2026/03/09 02:03:35 UTC
(cxf) branch 3.6.x-fixes updated (0d77825dd9 -> f1d69bec49)
This is an automated email from the ASF dual-hosted git repository.
reta pushed a change to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
from 0d77825dd9 Recording .gitmergeinfo Changes
new 40e5631224 Bump net.sourceforge.pmd:pmd-core from 7.21.0 to 7.22.0 in /parent (#2907)
new fe5343b4f6 Bump github/codeql-action from 4.32.0 to 4.32.4 (#2908)
new f07a2fc5da Bump cxf.openfeign.version from 13.8.1 to 13.9 (#2909)
new cac81ac287 Bump org.yaml:snakeyaml from 2.5 to 2.6 (#2917)
new 229cee0840 Bump cxf.openfeign.version from 13.9 to 13.9.1 (#2916)
new 65144e8812 Bump net.sourceforge.pmd:pmd-java from 7.21.0 to 7.22.0 (#2924)
new 4f8a6b09c4 Bump cxf.mockito.version from 5.21.0 to 5.22.0 (#2922)
new 1203e2b314 Bump org.webjars:swagger-ui from 5.31.2 to 5.32.0 (#2921)
new 93928e6b1c Bump cxf.openfeign.version from 13.9.1 to 13.9.2 (#2920)
new f1d69bec49 Update Apache Maven to 3.9.13
The 10 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.github/workflows/codeql-analysis.yml | 4 ++--
distribution/src/main/release/samples/pom.xml | 4 ++--
parent/pom.xml | 12 ++++++------
3 files changed, 10 insertions(+), 10 deletions(-)
(cxf) 05/10: Bump cxf.openfeign.version from 13.9 to 13.9.1 (#2916)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 229cee08403385c58a93c6e862d2bde0c143ecec
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Wed Mar 4 11:29:27 2026 -0500
Bump cxf.openfeign.version from 13.9 to 13.9.1 (#2916)
Bumps `cxf.openfeign.version` from 13.9 to 13.9.1.
Updates `io.github.openfeign:feign-core` from 13.9 to 13.9.1
- [Release notes](https://github.com/openfeign/feign/releases)
- [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md)
- [Commits](https://github.com/openfeign/feign/compare/13.9...13.9.1)
Updates `io.github.openfeign:feign-httpclient` from 13.9 to 13.9.1
- [Release notes](https://github.com/openfeign/feign/releases)
- [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md)
- [Commits](https://github.com/openfeign/feign/compare/13.9...13.9.1)
Updates `io.github.openfeign:feign-micrometer` from 13.9 to 13.9.1
- [Release notes](https://github.com/openfeign/feign/releases)
- [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md)
- [Commits](https://github.com/openfeign/feign/compare/13.9...13.9.1)
---
updated-dependencies:
- dependency-name: io.github.openfeign:feign-core
dependency-version: 13.9.1
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: io.github.openfeign:feign-httpclient
dependency-version: 13.9.1
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: io.github.openfeign:feign-micrometer
dependency-version: 13.9.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit 1ffb117c3cc2d47b2299b7299188254c9439e127)
---
distribution/src/main/release/samples/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/distribution/src/main/release/samples/pom.xml b/distribution/src/main/release/samples/pom.xml
index 52e63b5500..d3b79a7862 100644
--- a/distribution/src/main/release/samples/pom.xml
+++ b/distribution/src/main/release/samples/pom.xml
@@ -43,7 +43,7 @@
<cxf.brave.version>5.17.0</cxf.brave.version>
<cxf.camel.version>3.21.1</cxf.camel.version>
<cxf.olingo.version>4.10.0</cxf.olingo.version>
- <cxf.openfeign.version>13.9</cxf.openfeign.version>
+ <cxf.openfeign.version>13.9.1</cxf.openfeign.version>
</properties>
<dependencies>
<dependency>
(cxf) 09/10: Bump cxf.openfeign.version from 13.9.1 to 13.9.2 (#2920)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 93928e6b1c210f1c75b627a6cbbc854feef5a062
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Thu Mar 5 09:31:06 2026 -0500
Bump cxf.openfeign.version from 13.9.1 to 13.9.2 (#2920)
Bumps `cxf.openfeign.version` from 13.9.1 to 13.9.2.
Updates `io.github.openfeign:feign-core` from 13.9.1 to 13.9.2
- [Release notes](https://github.com/openfeign/feign/releases)
- [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md)
- [Commits](https://github.com/openfeign/feign/compare/13.9.1...13.9.2)
Updates `io.github.openfeign:feign-httpclient` from 13.9.1 to 13.9.2
- [Release notes](https://github.com/openfeign/feign/releases)
- [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md)
- [Commits](https://github.com/openfeign/feign/compare/13.9.1...13.9.2)
Updates `io.github.openfeign:feign-micrometer` from 13.9.1 to 13.9.2
- [Release notes](https://github.com/openfeign/feign/releases)
- [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md)
- [Commits](https://github.com/openfeign/feign/compare/13.9.1...13.9.2)
---
updated-dependencies:
- dependency-name: io.github.openfeign:feign-core
dependency-version: 13.9.2
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: io.github.openfeign:feign-httpclient
dependency-version: 13.9.2
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: io.github.openfeign:feign-micrometer
dependency-version: 13.9.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit b4e79e26827b2fa9312f6fde2d9aa35ed435487e)
---
distribution/src/main/release/samples/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/distribution/src/main/release/samples/pom.xml b/distribution/src/main/release/samples/pom.xml
index 49401be9b1..aa74f59def 100644
--- a/distribution/src/main/release/samples/pom.xml
+++ b/distribution/src/main/release/samples/pom.xml
@@ -43,7 +43,7 @@
<cxf.brave.version>5.17.0</cxf.brave.version>
<cxf.camel.version>3.21.1</cxf.camel.version>
<cxf.olingo.version>4.10.0</cxf.olingo.version>
- <cxf.openfeign.version>13.9.1</cxf.openfeign.version>
+ <cxf.openfeign.version>13.9.2</cxf.openfeign.version>
</properties>
<dependencies>
<dependency>
(cxf) 06/10: Bump net.sourceforge.pmd:pmd-java from 7.21.0 to 7.22.0 (#2924)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 65144e8812f38df9fbc3c17400b6a74a58991526
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Thu Mar 5 09:24:37 2026 -0500
Bump net.sourceforge.pmd:pmd-java from 7.21.0 to 7.22.0 (#2924)
Bumps [net.sourceforge.pmd:pmd-java](https://github.com/pmd/pmd) from 7.21.0 to 7.22.0.
- [Release notes](https://github.com/pmd/pmd/releases)
- [Commits](https://github.com/pmd/pmd/compare/pmd_releases/7.21.0...pmd_releases/7.22.0)
---
updated-dependencies:
- dependency-name: net.sourceforge.pmd:pmd-java
dependency-version: 7.22.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit 1668243c329fe10fbf121f41718df587e48d24bb)
---
parent/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/parent/pom.xml b/parent/pom.xml
index cfc50ca95a..7b71d1cfe0 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -440,7 +440,7 @@
<dependency>
<groupId>net.sourceforge.pmd</groupId>
<artifactId>pmd-java</artifactId>
- <version>7.21.0</version>
+ <version>7.22.0</version>
</dependency>
</dependencies>
<configuration>
(cxf) 10/10: Update Apache Maven to 3.9.13
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit f1d69bec498b27491469558e6a278498b9aa28de
Author: Andriy Redko <dr...@gmail.com>
AuthorDate: Sun Mar 8 11:44:20 2026 -0400
Update Apache Maven to 3.9.13
(cherry picked from commit 95ec57d26044149d93202858dbefb46ece0020c6)
---
parent/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/parent/pom.xml b/parent/pom.xml
index 1089dc189c..11b0e4a645 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -168,7 +168,7 @@
<cxf.littleproxy.version>1.1.2</cxf.littleproxy.version>
<cxf.logback.classic.version>1.2.13</cxf.logback.classic.version>
<cxf.lucene.version>9.12.3</cxf.lucene.version>
- <cxf.maven.core.version>3.9.12</cxf.maven.core.version>
+ <cxf.maven.core.version>3.9.13</cxf.maven.core.version>
<cxf.micrometer.version>1.9.17</cxf.micrometer.version>
<cxf.microprofile.config.version>2.0</cxf.microprofile.config.version>
<cxf.microprofile.rest.client.version>2.0</cxf.microprofile.rest.client.version>
(cxf) 08/10: Bump org.webjars:swagger-ui from 5.31.2 to 5.32.0 (#2921)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 1203e2b314aefd71f9fe166e672177927caeb1f2
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Thu Mar 5 09:30:39 2026 -0500
Bump org.webjars:swagger-ui from 5.31.2 to 5.32.0 (#2921)
Bumps [org.webjars:swagger-ui](https://github.com/swagger-api/swagger-ui) from 5.31.2 to 5.32.0.
- [Release notes](https://github.com/swagger-api/swagger-ui/releases)
- [Commits](https://github.com/swagger-api/swagger-ui/compare/v5.31.2...v5.32.0)
---
updated-dependencies:
- dependency-name: org.webjars:swagger-ui
dependency-version: 5.32.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit 734e3a6e337620769722b989d80a5ae71856ed5b)
---
distribution/src/main/release/samples/pom.xml | 2 +-
parent/pom.xml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/distribution/src/main/release/samples/pom.xml b/distribution/src/main/release/samples/pom.xml
index d3b79a7862..49401be9b1 100644
--- a/distribution/src/main/release/samples/pom.xml
+++ b/distribution/src/main/release/samples/pom.xml
@@ -35,7 +35,7 @@
<cxf.jetty10.version>10.0.26</cxf.jetty10.version>
<cxf.netty.version>4.1.131.Final</cxf.netty.version>
<cxf.httpcomponents.client.version>4.5.14</cxf.httpcomponents.client.version>
- <cxf.swagger.ui.version>5.31.0</cxf.swagger.ui.version>
+ <cxf.swagger.ui.version>5.32.0</cxf.swagger.ui.version>
<cxf.tika.version>2.9.1</cxf.tika.version>
<cxf.tomcat.version>9.0.115</cxf.tomcat.version>
<cxf.lucene.version>9.12.3</cxf.lucene.version>
diff --git a/parent/pom.xml b/parent/pom.xml
index c004e1c4cf..1089dc189c 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -211,7 +211,7 @@
<cxf.spring.security.version>5.8.16</cxf.spring.security.version>
<cxf.spring.version>5.3.39</cxf.spring.version>
<cxf.stax-ex.version>1.8.3</cxf.stax-ex.version>
- <cxf.swagger.ui.version>5.31.0</cxf.swagger.ui.version>
+ <cxf.swagger.ui.version>5.32.0</cxf.swagger.ui.version>
<cxf.swagger.v3.version>2.2.43</cxf.swagger.v3.version>
<cxf.swagger2.version>1.6.15</cxf.swagger2.version>
<cxf.swagger2.guava.version>32.1.3-jre</cxf.swagger2.guava.version>
(cxf) 07/10: Bump cxf.mockito.version from 5.21.0 to 5.22.0 (#2922)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 4f8a6b09c4ce935c259a7fac7455b62ba7d333b9
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Thu Mar 5 09:28:17 2026 -0500
Bump cxf.mockito.version from 5.21.0 to 5.22.0 (#2922)
Bumps `cxf.mockito.version` from 5.21.0 to 5.22.0.
Updates `org.mockito:mockito-subclass` from 5.21.0 to 5.22.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](https://github.com/mockito/mockito/compare/v5.21.0...v5.22.0)
Updates `org.mockito:mockito-core` from 5.21.0 to 5.22.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](https://github.com/mockito/mockito/compare/v5.21.0...v5.22.0)
---
updated-dependencies:
- dependency-name: org.mockito:mockito-subclass
dependency-version: 5.22.0
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: org.mockito:mockito-core
dependency-version: 5.22.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit dbaee7e6942383e0fa12adb878d3142513267175)
---
parent/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/parent/pom.xml b/parent/pom.xml
index 7b71d1cfe0..c004e1c4cf 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -174,7 +174,7 @@
<cxf.microprofile.rest.client.version>2.0</cxf.microprofile.rest.client.version>
<cxf.microprofile.openapi.version>2.0</cxf.microprofile.openapi.version>
<cxf.mina.version>2.1.10</cxf.mina.version>
- <cxf.mockito.version>5.21.0</cxf.mockito.version>
+ <cxf.mockito.version>5.22.0</cxf.mockito.version>
<cxf.msv.version>2022.7</cxf.msv.version>
<cxf.neethi.version>3.2.1</cxf.neethi.version>
<cxf.netty.version.range>[4,5)</cxf.netty.version.range>
(cxf) 03/10: Bump cxf.openfeign.version from 13.8.1 to 13.9 (#2909)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit f07a2fc5da36936c604ca4c69b14523e9355a3c0
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon Mar 2 14:46:16 2026 -0500
Bump cxf.openfeign.version from 13.8.1 to 13.9 (#2909)
Bumps `cxf.openfeign.version` from 13.8.1 to 13.9.
Updates `io.github.openfeign:feign-core` from 13.8.1 to 13.9
- [Release notes](https://github.com/openfeign/feign/releases)
- [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md)
- [Commits](https://github.com/openfeign/feign/compare/13.8.1...13.9)
Updates `io.github.openfeign:feign-httpclient` from 13.8.1 to 13.9
- [Release notes](https://github.com/openfeign/feign/releases)
- [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md)
- [Commits](https://github.com/openfeign/feign/compare/13.8.1...13.9)
Updates `io.github.openfeign:feign-micrometer` from 13.8.1 to 13.9
- [Release notes](https://github.com/openfeign/feign/releases)
- [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md)
- [Commits](https://github.com/openfeign/feign/compare/13.8.1...13.9)
---
updated-dependencies:
- dependency-name: io.github.openfeign:feign-core
dependency-version: '13.9'
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: io.github.openfeign:feign-httpclient
dependency-version: '13.9'
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: io.github.openfeign:feign-micrometer
dependency-version: '13.9'
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit f3a170950dfd4e67c508553f40af0915ddb0c18e)
---
distribution/src/main/release/samples/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/distribution/src/main/release/samples/pom.xml b/distribution/src/main/release/samples/pom.xml
index 7cc58d5a88..52e63b5500 100644
--- a/distribution/src/main/release/samples/pom.xml
+++ b/distribution/src/main/release/samples/pom.xml
@@ -43,7 +43,7 @@
<cxf.brave.version>5.17.0</cxf.brave.version>
<cxf.camel.version>3.21.1</cxf.camel.version>
<cxf.olingo.version>4.10.0</cxf.olingo.version>
- <cxf.openfeign.version>13.8.1</cxf.openfeign.version>
+ <cxf.openfeign.version>13.9</cxf.openfeign.version>
</properties>
<dependencies>
<dependency>
(cxf) 04/10: Bump org.yaml:snakeyaml from 2.5 to 2.6 (#2917)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit cac81ac2877dabfc3d41be95c4408e70c9cfafad
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Wed Mar 4 09:32:08 2026 -0500
Bump org.yaml:snakeyaml from 2.5 to 2.6 (#2917)
Bumps [org.yaml:snakeyaml](https://bitbucket.org/snakeyaml/snakeyaml) from 2.5 to 2.6.
- [Commits](https://bitbucket.org/snakeyaml/snakeyaml/branches/compare/snakeyaml-2.6..snakeyaml-2.5)
---
updated-dependencies:
- dependency-name: org.yaml:snakeyaml
dependency-version: '2.6'
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit 25ae4ee50298f218286cbefb985d6a5b43644bc3)
---
parent/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/parent/pom.xml b/parent/pom.xml
index 9d15e5c9ea..cfc50ca95a 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -202,7 +202,7 @@
<cxf.servlet-api.group>jakarta.servlet</cxf.servlet-api.group>
<cxf.servlet-api.version>4.0.4</cxf.servlet-api.version>
<cxf.slf4j.version>1.7.36</cxf.slf4j.version>
- <cxf.snakeyaml.version>2.5</cxf.snakeyaml.version>
+ <cxf.snakeyaml.version>2.6</cxf.snakeyaml.version>
<cxf.specs.jaxws.api.version>2.3_2</cxf.specs.jaxws.api.version>
<cxf.spring.boot.version>2.7.18</cxf.spring.boot.version>
<cxf.spring.ldap.version>2.4.4</cxf.spring.ldap.version>
(cxf) 02/10: Bump github/codeql-action from 4.32.0 to 4.32.4 (#2908)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit fe5343b4f62962b15c113d7e35dc3e4cb0a99ac5
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon Mar 2 14:45:54 2026 -0500
Bump github/codeql-action from 4.32.0 to 4.32.4 (#2908)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.32.0 to 4.32.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/b20883b0cd1f46c72ae0ba6d1090936928f9fa30...89a39a4e59826350b863aa6b6252a07ad50cf83e)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.32.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit 581db014679136647dbbb6e01bce7f6eed294c7e)
# Conflicts:
# .github/workflows/scorecards.yml
---
.github/workflows/codeql-analysis.yml | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 7a7a38def4..42b482839c 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -61,7 +61,7 @@ jobs:
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
- uses: github/codeql-action/init@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v3.29.5
+ uses: github/codeql-action/init@89a39a4e59826350b863aa6b6252a07ad50cf83e # v3.29.5
with:
languages: ${{ matrix.language }}
#config-file: ./.github/codeql/codeql-cxf-config.yml
@@ -89,4 +89,4 @@ jobs:
# make release
- name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v3.29.5
+ uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e # v3.29.5
(cxf) 01/10: Bump net.sourceforge.pmd:pmd-core from 7.21.0 to 7.22.0 in /parent (#2907)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 40e563122477be34bfce268367cd4d8bc91254af
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Sun Mar 1 12:11:55 2026 -0500
Bump net.sourceforge.pmd:pmd-core from 7.21.0 to 7.22.0 in /parent (#2907)
Bumps [net.sourceforge.pmd:pmd-core](https://github.com/pmd/pmd) from 7.21.0 to 7.22.0.
- [Release notes](https://github.com/pmd/pmd/releases)
- [Commits](https://github.com/pmd/pmd/compare/pmd_releases/7.21.0...pmd_releases/7.22.0)
---
updated-dependencies:
- dependency-name: net.sourceforge.pmd:pmd-core
dependency-version: 7.22.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit 9cca3cbe22a53a53b60e1203656a9c7d173f040f)
---
parent/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/parent/pom.xml b/parent/pom.xml
index 7b67b0e87f..9d15e5c9ea 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -435,7 +435,7 @@
<dependency>
<groupId>net.sourceforge.pmd</groupId>
<artifactId>pmd-core</artifactId>
- <version>7.21.0</version>
+ <version>7.22.0</version>
</dependency>
<dependency>
<groupId>net.sourceforge.pmd</groupId>