Repository navigation
Update Maven dependencies - #320
Conversation
This comment has been minimized.
This comment has been minimized.
![gitar-bot[bot]](https://avatars.githubusercontent.com/in/827041?s=60&v=4){kind=small}
d024f77 to
1fdd9fb
Compare
sonar-scanner-engine is not published at the same version as other SonarQube artifacts (26.10.0.133078 is not available), so pin it to the latest release, 26.4.0.121862, via its own property.
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
Code Review ✅ Approved 1 closed / 1 findings🟡 Medium risk · Updating runtime BouncyCastle and Ayza dependencies and separating the scanner engine version could alter keystore or TLS behavior or cause version mismatches. Dependency bump across Maven artifacts, including BouncyCastle to 1.86, with a dedicated ✅ 1 closed✅ Bug: bcprov 1.86 adds a new BC property that the shade excludes don't cover
Verification Rules 2/2 met Repos 3 inspected · PRs 1 inspectedFunctional validation No results Rules 2 passed 1 not applicable
Broader impact Repos 3 inspected PRs 1 inspectedCross-repo 3 repositories inspected 0 open impacts
Cross-PR 1 PR inspected 0 open impacts
Auto-approval Not enabledFor more verification details, comment OptionsAuto-apply is off → Gitar will not commit updates to this branch. Comment with these commands to change the behavior for this request:
Was this helpful? React with 👍 / 👎 | Gitar |
|
This PR contains the following updates:
3.5.2→3.6.01.21.0→1.23.06.0.3→6.1.33.10.0→3.13.29.10.1→9.112.13.2→2.14.02.21.0→2.22.03.20.0→3.21.01.85.2→1.8610.0.3→10.1.05.22.0→5.24.05.22.0→5.24.06.4.3.4676→6.4.4.47972.0.13→2.0.201.5.34→1.6.51.5.34→1.6.526.4.0.121862→26.10.0.133078Release Notes
apache/commons-codec (commons-codec:commons-codec)
v1.23.0The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.23.0.
The Apache Commons Codec component contains encoders and decoders for
formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
widely used encoders and decoders, the codec package also maintains a
collection of phonetic encoding utilities.
This is a feature and maintenance release. Java 8 or later is required.
v1.22.1The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.22.1.
The Apache Commons Codec component contains encoders and decoders for
formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
widely used encoders and decoders, the codec package also maintains a
collection of phonetic encoding utilities.
This is a feature and maintenance release. Java 8 or later is required.
wiremock/wiremock (org.wiremock:wiremock-standalone)
v3.13.2Compare Source
What's Changed
Full Changelog: wiremock/wiremock@3.13.1...3.13.2
v3.13.1Compare Source
📦 Dependency updates
✍ Other changes
v3.13.0Compare Source
🚀 New Features
🐞 Bug fixes
DocumentBuilderFactory,TransformerFactoryandXPathFactory(#2975) @vkuzel✍ Other changes
📦 Dependency updates
16 changes
v3.12.1Compare Source
🐞 Bug fixes
📖 OpenAPI updates
👻 Maintenance
actions/cache@v1to usev4(#2979) @leeturner📦 Dependency updates
✍ Other changes
v3.12.0Compare Source
🚀 New Features
📦 Dependency updates
✍ Other changes
v3.11.0Compare Source
🚀 New Features
🐞 Bug fixes
TransformerFactoryinFormatXmlHelper(#2918) @ianprime0509📦 Dependency updates
12.0.16(#2947) @leeturner✍ Other changes
Hakky54/ayza (io.github.hakky54:ayza)
v10.1.0Compare Source
v10.0.7Compare Source
v10.0.6Compare Source
v10.0.5Compare Source
v10.0.4Compare Source
mockito/mockito (org.mockito:mockito-junit-jupiter)
v5.24.0Changelog generated by Shipkit Changelog Gradle Plugin
5.24.0
toString()is not implemented (#3844)@Spyannotation (#3835)@Spy(#2740)v5.23.0NOTE: Breaking change for Android
The
mockito-androidartifact has a breaking change: tests now require a device or emulator based on API 28+ (Android P). This is to enable new support for mocking Kotlin classes. See #3788 for more details.Changelog generated by Shipkit Changelog Gradle Plugin
5.23.0
Mockito.when@Nullable(#3503)SonarSource/orchestrator (org.sonarsource.orchestrator:sonar-orchestrator-junit4)
v6.4.4.4797Compare Source
What's Changed
New Contributors
Full Changelog: SonarSource/orchestrator@6.4.3.4676...6.4.4.4797
SonarSource/sonarqube (org.sonarsource.sonarqube:sonar-testing-harness)
v26.10.0.133078Compare Source
See details in the community announcement, and more in the release notes.
v26.10.0.132816Compare Source
v26.9.0.129388Compare Source
See details in the community announcement, and more in the release notes.
v26.8.0.126808Compare Source
See details in the community announcement, and more in the release notes.
v26.7.0.124771Compare Source
See details in the community announcement, and more in the release notes.
v26.6.0.123539See details in the community announcement, and more in the release notes.
Configuration
📅 Schedule: (in timezone CET)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.
Summary by Gitar
sonarScannerEngineVersionproperty inbatch/pom.xml, decoupled fromsonarQubeVersionlib-shaded/pom.xml, includingstore_it_countandCRLDP_protocolsMETA-INF/versions/N/prefix inBouncyCastleRelocationITso multi-release entries match base-tree namesThis will update automatically on new commits.