Commit 91af1c4
authored
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4&size=40){kind=avatar}
build(deps): bump org.cyclonedx:cyclonedx-core-java from 12.1.0 to 12.2.0 (guacsec#456)
Bumps
[org.cyclonedx:cyclonedx-core-java](https://github.com/CycloneDX/cyclonedx-core-java)
from 12.1.0 to 12.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/CycloneDX/cyclonedx-core-java/releases">org.cyclonedx:cyclonedx-core-java's
releases</a>.</em></p>
<blockquote>
<h2>cyclonedx-core-java-12.2.0</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>Breaking Changes 🚨</h3>
<ul>
<li>Update usages of com.networknt:json-schema-validator to the new API.
( 1.5.9 -> 2.0.1 ) by <a
href="https://github.com/pedroboado"><code>@pedroboado</code></a> in <a
href="https://redirect.github.com/CycloneDX/cyclonedx-core-java/pull/802">CycloneDX/cyclonedx-core-java#802</a></li>
</ul>
<h3>Dependency Updates 🤖</h3>
<ul>
<li>chore(deps): Bump github/codeql-action from 4.32.1 to 4.35.2 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/CycloneDX/cyclonedx-core-java/pull/818">CycloneDX/cyclonedx-core-java#818</a></li>
<li>chore(deps): Bump actions/upload-artifact from 6.0.0 to 7.0.1 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/CycloneDX/cyclonedx-core-java/pull/817">CycloneDX/cyclonedx-core-java#817</a></li>
<li>chore(deps): Bump actions/download-artifact from 7.0.0 to 8.0.1 by
<a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/CycloneDX/cyclonedx-core-java/pull/807">CycloneDX/cyclonedx-core-java#807</a></li>
<li>chore(deps-dev): Bump net.javacrumbs.json-unit:json-unit-assertj
from 5.1.0 to 5.1.1 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/CycloneDX/cyclonedx-core-java/pull/806">CycloneDX/cyclonedx-core-java#806</a></li>
<li>chore(deps): Bump org.junit:junit-bom from 6.0.2 to 6.0.3 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/CycloneDX/cyclonedx-core-java/pull/790">CycloneDX/cyclonedx-core-java#790</a></li>
<li>chore(deps): Bump com.fasterxml.jackson:jackson-bom from 2.21.0 to
2.21.1 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/CycloneDX/cyclonedx-core-java/pull/796">CycloneDX/cyclonedx-core-java#796</a></li>
<li>chore(deps-dev): Bump org.apache.maven.plugins:maven-surefire-plugin
from 3.5.4 to 3.5.5 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/CycloneDX/cyclonedx-core-java/pull/794">CycloneDX/cyclonedx-core-java#794</a></li>
</ul>
<h3>Other Changes</h3>
<ul>
<li>Address zizmor GitHub Actions findings by <a
href="https://github.com/nscuro"><code>@nscuro</code></a> in <a
href="https://redirect.github.com/CycloneDX/cyclonedx-core-java/pull/810">CycloneDX/cyclonedx-core-java#810</a></li>
<li>Lower Java baseline to 8 again by <a
href="https://github.com/nscuro"><code>@nscuro</code></a> in <a
href="https://redirect.github.com/CycloneDX/cyclonedx-core-java/pull/811">CycloneDX/cyclonedx-core-java#811</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/pedroboado"><code>@pedroboado</code></a> made
their first contribution in <a
href="https://redirect.github.com/CycloneDX/cyclonedx-core-java/pull/802">CycloneDX/cyclonedx-core-java#802</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/CycloneDX/cyclonedx-core-java/compare/cyclonedx-core-java-12.1.0...cyclonedx-core-java-12.2.0">https://github.com/CycloneDX/cyclonedx-core-java/compare/cyclonedx-core-java-12.1.0...cyclonedx-core-java-12.2.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/CycloneDX/cyclonedx-core-java/commit/4d49d0ccee7829711b292a4318bf29cfb0850670"><code>4d49d0c</code></a>
[maven-release-plugin] prepare release cyclonedx-core-java-12.2.0</li>
<li><a
href="https://github.com/CycloneDX/cyclonedx-core-java/commit/9812115c41b7607584ec0753519e97a4fa97a94e"><code>9812115</code></a>
Merge pull request <a
href="https://redirect.github.com/CycloneDX/cyclonedx-core-java/issues/811">#811</a>
from nscuro/java8</li>
<li><a
href="https://github.com/CycloneDX/cyclonedx-core-java/commit/a33f4b19b1a237112f68908895943093c1e528fd"><code>a33f4b1</code></a>
Merge pull request <a
href="https://redirect.github.com/CycloneDX/cyclonedx-core-java/issues/794">#794</a>
from CycloneDX/dependabot/maven/org.apache.maven.plug...</li>
<li><a
href="https://github.com/CycloneDX/cyclonedx-core-java/commit/4ffa7d03d846b4e40ba008b55566149036a0680f"><code>4ffa7d0</code></a>
Merge pull request <a
href="https://redirect.github.com/CycloneDX/cyclonedx-core-java/issues/796">#796</a>
from CycloneDX/dependabot/maven/com.fasterxml.jackson...</li>
<li><a
href="https://github.com/CycloneDX/cyclonedx-core-java/commit/4ae6d2f3089bfc3242bc45f2cd2308bb4d8f33ce"><code>4ae6d2f</code></a>
Merge pull request <a
href="https://redirect.github.com/CycloneDX/cyclonedx-core-java/issues/790">#790</a>
from CycloneDX/dependabot/maven/org.junit-junit-bom-6...</li>
<li><a
href="https://github.com/CycloneDX/cyclonedx-core-java/commit/019723db86ebd9487adac5f5d5e219a7202785bf"><code>019723d</code></a>
Merge pull request <a
href="https://redirect.github.com/CycloneDX/cyclonedx-core-java/issues/806">#806</a>
from CycloneDX/dependabot/maven/net.javacrumbs.json-u...</li>
<li><a
href="https://github.com/CycloneDX/cyclonedx-core-java/commit/56dbd8501922642ce76eb4f86ab0f8b3bac2cb27"><code>56dbd85</code></a>
Merge pull request <a
href="https://redirect.github.com/CycloneDX/cyclonedx-core-java/issues/807">#807</a>
from CycloneDX/dependabot/github_actions/actions/down...</li>
<li><a
href="https://github.com/CycloneDX/cyclonedx-core-java/commit/d8471010ef9481c7b5abd0947c83ffd0d9e1247f"><code>d847101</code></a>
Merge pull request <a
href="https://redirect.github.com/CycloneDX/cyclonedx-core-java/issues/817">#817</a>
from CycloneDX/dependabot/github_actions/actions/uplo...</li>
<li><a
href="https://github.com/CycloneDX/cyclonedx-core-java/commit/1b133e3ed9820ea26aea9878bc5d035ed3a72773"><code>1b133e3</code></a>
Merge pull request <a
href="https://redirect.github.com/CycloneDX/cyclonedx-core-java/issues/818">#818</a>
from CycloneDX/dependabot/github_actions/github/codeq...</li>
<li><a
href="https://github.com/CycloneDX/cyclonedx-core-java/commit/b3a9d535e1b02e1e464e951df52ffa809953c525"><code>b3a9d53</code></a>
chore(deps): Bump github/codeql-action from 4.32.1 to 4.35.2</li>
<li>Additional commits viewable in <a
href="https://github.com/CycloneDX/cyclonedx-core-java/compare/cyclonedx-core-java-12.1.0...cyclonedx-core-java-12.2.0">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>1 parent e84d176 commit 91af1c4
1 file changed
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
23 | 23 | | |
24 | 24 | | |
25 | 25 | | |
26 | | - | |
| 26 | + | |
27 | 27 | | |
28 | 28 | | |
29 | 29 | | |
| |||
0 commit comments