bea/HidekoBot
1
0
Fork 0
Code Issues 8 Pull Requests 8 Packages Projects Releases Wiki Activity

Update dependency org.owasp:dependency-check-maven to v12.2.1 #72

Open
renovate wants to merge 1 commits from renovate/org.owasp-dependency-check-maven-12.x into main
pull from: renovate/org.owasp-dependency-check-maven-12.x
merge into: bea:main
Conversation 0 Commits 1 Files Changed 1 +1 -1
renovate commented 2026-04-11 23:08:02 +02:00
Collaborator
Copy Link

This PR contains the following updates:

Package Type Update Change
org.owasp:dependency-check-maven (source) build patch 12.2.0 → 12.2.1

Release Notes

dependency-check/DependencyCheck (org.owasp:dependency-check-maven)

v12.2.1

Compare Source

  • build: improve GHA workflow experience for forks (#​8285)
  • build: use maven jdk toolchains to build with Java 25; test against Java 11/17/21/25 (#​8292)
  • chore: avoid use of parent pom and maven properties where unnecessary (#​8322)
  • chore: bump java development to 25.0 (#​8365)
  • chore: fix Charset warnings; preferring typed charsets (#​8326)
  • chore: fix Maven scm tags after 12.2.1-SNAPSHOT bump (#​8265)
  • chore: pin GitHub actions to specific SHAs rather than mutable tags (#​8381)
  • chore: remove unused properties and schemas (#​8378)
  • docs: define schema locations in XML examples (#​8254)
  • docs: document external data sources and hostnames (#​8219)
  • docs: ensure OSS Index URL override is consistently documented (#​8338)
  • docs: fix minor typo in README (#​8246)
  • fix(core): correct xml schema validation handling without needing external access (#​8272)
  • fix(deps): upgrade slf4j and logback (#​8306)
  • fix(test): disable pnpm analyzer during test (#​8305)
  • fix: Correct published/hosted suppressions namespace header and indent (#​8258)
  • fix: Suppress noisy WARN logging from Apache Lucene within Maven and Ant plugins (#​8248)
  • fix: #​8140 AssemblyAnalyzer version resolution issue (#​8352)
  • fix: #​8140 fix version resolution
  • fix: #​8140 hint azure_identity_library_for_.net
  • fix: #​8356 narrow down VersionFilterAnalyzer scope to JAR files (#​8358)
  • fix: correct parsing for CVSSv4 strings with Provider Urgency (#​8377)
  • fix: evidence source in Retire JS analyzer (#​8303)
  • fix: exclude deprecations from Yarn Berry audit results (#​8380)
  • fix: improve PEAnalyzer reliability by migrating to maintained PE/COFF 4J library fork (#​8245)
  • fix: improve configuration consistency (casing) (#​8355)
  • fix: improve logging of unexpected Java Errors during processing of NVD (#​8250)
  • fix: raw type warning in ProcessReader (#​8324)
  • fix: suppress false positives for zabbix-utils #​8087 (#​8218)
  • fix: update docs (#​8405)
  • fix: warn if deprecated configs are used (#​8366)
  • test: Make tests locale independent (#​8328)
  • test: #​8140 reproduce current behavior
  • test: avoid polluting test classpaths with sample dependencies to be scanned (#​8267)

See the full listing of changes

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [org.owasp:dependency-check-maven](https://github.com/dependency-check/DependencyCheck.git) ([source](https://github.com/dependency-check/DependencyCheck/tree/HEAD/maven)) | build | patch | `12.2.0` → `12.2.1` | --- ### Release Notes <details> <summary>dependency-check/DependencyCheck (org.owasp:dependency-check-maven)</summary> ### [`v12.2.1`](https://github.com/dependency-check/DependencyCheck/blob/HEAD/CHANGELOG.md#Version-1221-2026-04-11) [Compare Source](https://github.com/dependency-check/DependencyCheck/compare/v12.2.0...v12.2.1) - build: improve GHA workflow experience for forks ([#&#8203;8285](https://github.com/dependency-check/DependencyCheck/pull/8285)) - build: use maven jdk toolchains to build with Java 25; test against Java 11/17/21/25 ([#&#8203;8292](https://github.com/dependency-check/DependencyCheck/pull/8292)) - chore: avoid use of parent pom and maven properties where unnecessary ([#&#8203;8322](https://github.com/dependency-check/DependencyCheck/pull/8322)) - chore: bump java development to 25.0 ([#&#8203;8365](https://github.com/dependency-check/DependencyCheck/pull/8365)) - chore: fix Charset warnings; preferring typed charsets ([#&#8203;8326](https://github.com/dependency-check/DependencyCheck/pull/8326)) - chore: fix Maven scm tags after 12.2.1-SNAPSHOT bump ([#&#8203;8265](https://github.com/dependency-check/DependencyCheck/pull/8265)) - chore: pin GitHub actions to specific SHAs rather than mutable tags ([#&#8203;8381](https://github.com/dependency-check/DependencyCheck/pull/8381)) - chore: remove unused properties and schemas ([#&#8203;8378](https://github.com/dependency-check/DependencyCheck/pull/8378)) - docs: define schema locations in XML examples ([#&#8203;8254](https://github.com/dependency-check/DependencyCheck/pull/8254)) - docs: document external data sources and hostnames ([#&#8203;8219](https://github.com/dependency-check/DependencyCheck/pull/8219)) - docs: ensure OSS Index URL override is consistently documented ([#&#8203;8338](https://github.com/dependency-check/DependencyCheck/pull/8338)) - docs: fix minor typo in README ([#&#8203;8246](https://github.com/dependency-check/DependencyCheck/pull/8246)) - fix(core): correct xml schema validation handling without needing external access ([#&#8203;8272](https://github.com/dependency-check/DependencyCheck/pull/8272)) - fix(deps): upgrade slf4j and logback ([#&#8203;8306](https://github.com/dependency-check/DependencyCheck/pull/8306)) - fix(test): disable pnpm analyzer during test ([#&#8203;8305](https://github.com/dependency-check/DependencyCheck/pull/8305)) - fix: Correct published/hosted suppressions namespace header and indent ([#&#8203;8258](https://github.com/dependency-check/DependencyCheck/pull/8258)) - fix: Suppress noisy WARN logging from Apache Lucene within Maven and Ant plugins ([#&#8203;8248](https://github.com/dependency-check/DependencyCheck/pull/8248)) - fix: [#&#8203;8140](https://github.com/dependency-check/DependencyCheck/pull/8140) AssemblyAnalyzer version resolution issue ([#&#8203;8352](https://github.com/dependency-check/DependencyCheck/pull/8352)) - fix: [#&#8203;8140](https://github.com/dependency-check/DependencyCheck/pull/8140) fix version resolution - fix: [#&#8203;8140](https://github.com/dependency-check/DependencyCheck/pull/8140) hint azure\_identity\_library\_for\_.net - fix: [#&#8203;8356](https://github.com/dependency-check/DependencyCheck/pull/8356) narrow down VersionFilterAnalyzer scope to JAR files ([#&#8203;8358](https://github.com/dependency-check/DependencyCheck/pull/8358)) - fix: correct parsing for CVSSv4 strings with Provider Urgency ([#&#8203;8377](https://github.com/dependency-check/DependencyCheck/pull/8377)) - fix: evidence source in Retire JS analyzer ([#&#8203;8303](https://github.com/dependency-check/DependencyCheck/pull/8303)) - fix: exclude deprecations from Yarn Berry audit results ([#&#8203;8380](https://github.com/dependency-check/DependencyCheck/pull/8380)) - fix: improve PEAnalyzer reliability by migrating to maintained PE/COFF 4J library fork ([#&#8203;8245](https://github.com/dependency-check/DependencyCheck/pull/8245)) - fix: improve configuration consistency (casing) ([#&#8203;8355](https://github.com/dependency-check/DependencyCheck/pull/8355)) - fix: improve logging of unexpected Java Errors during processing of NVD ([#&#8203;8250](https://github.com/dependency-check/DependencyCheck/pull/8250)) - fix: raw type warning in ProcessReader ([#&#8203;8324](https://github.com/dependency-check/DependencyCheck/pull/8324)) - fix: suppress false positives for zabbix-utils [#&#8203;8087](https://github.com/dependency-check/DependencyCheck/pull/8087) ([#&#8203;8218](https://github.com/dependency-check/DependencyCheck/pull/8218)) - fix: update docs ([#&#8203;8405](https://github.com/dependency-check/DependencyCheck/pull/8405)) - fix: warn if deprecated configs are used ([#&#8203;8366](https://github.com/dependency-check/DependencyCheck/pull/8366)) - test: Make tests locale independent ([#&#8203;8328](https://github.com/dependency-check/DependencyCheck/pull/8328)) - test: [#&#8203;8140](https://github.com/dependency-check/DependencyCheck/pull/8140) reproduce current behavior - test: avoid polluting test classpaths with sample dependencies to be scanned ([#&#8203;8267](https://github.com/dependency-check/DependencyCheck/pull/8267)) See the full listing of [changes](https://github.com/dependency-check/DependencyCheck/milestone/104?closed=1) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMTYiLCJ1cGRhdGVkSW5WZXIiOiI0My4xMzkuOCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
renovate added 1 commit 2026-04-11 23:08:02 +02:00
Update dependency org.owasp:dependency-check-maven to v12.2.1
All checks were successful
continuous-integration/drone/pr Build is passing
Details
394c6ed41c
All checks were successful
continuous-integration/drone/pr Build is passing
Details
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/org.owasp-dependency-check-maven-12.x:renovate/org.owasp-dependency-check-maven-12.x
git checkout renovate/org.owasp-dependency-check-maven-12.x
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
bug
Something is not working
 duplicate
This issue or pull request already exists
 enhancement
New feature
 help wanted
Need some help
 invalid
Something is wrong
 question
More information is needed
 wontfix
This won't be fixed
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
judas renovate bea
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: bea/HidekoBot#72
Delete Branch "renovate/org.owasp-dependency-check-maven-12.x"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?