From 358e95c7f0c9b4e0139da1bfddec81f94c3f839d Mon Sep 17 00:00:00 2001 From: seqradev Date: Fri, 30 Jan 2026 00:03:26 +0300 Subject: [PATCH 01/23] Add Seqra static analyzer Add scripts/runSeqra.sh using Docker-based approach --- scripts/runSeqra.sh | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100755 scripts/runSeqra.sh diff --git a/scripts/runSeqra.sh b/scripts/runSeqra.sh new file mode 100755 index 0000000000..6278c3d771 --- /dev/null +++ b/scripts/runSeqra.sh @@ -0,0 +1,21 @@ +#!/usr/bin/env bash + +# Check for install/updates at https://github.com/seqra/seqra + +source scripts/requireCommand.sh + +requireCommand docker + +docker pull ghcr.io/seqra/seqra + +benchmark_version=$(scripts/getBenchmarkVersion.sh 2>/dev/null | tail -1) +seqra_version=$(docker run --rm ghcr.io/seqra/seqra seqra --version | grep -oE 'v[0-9]+\.[0-9]+\.[0-9]+') +result_file="/project/results/Benchmark_$benchmark_version-Seqra-$seqra_version.sarif" + +docker run --rm -v $(pwd):/project \ + ghcr.io/seqra/seqra:latest \ + seqra scan \ + --severity error \ + --severity warning \ + --severity note \ + --output "$result_file" /project From 09f7701d0da2148ae25824699b5d7baee1ba1b0c Mon Sep 17 00:00:00 2001 From: seqradev Date: Tue, 31 Mar 2026 01:41:32 +0300 Subject: [PATCH 02/23] Rename Seqra to OpenTaint in benchmark run script --- scripts/runOpenTaint.sh | 21 +++++++++++++++++++++ scripts/runSeqra.sh | 21 --------------------- 2 files changed, 21 insertions(+), 21 deletions(-) create mode 100644 scripts/runOpenTaint.sh delete mode 100755 scripts/runSeqra.sh diff --git a/scripts/runOpenTaint.sh b/scripts/runOpenTaint.sh new file mode 100644 index 0000000000..64c61a3135 --- /dev/null +++ b/scripts/runOpenTaint.sh @@ -0,0 +1,21 @@ +#!/usr/bin/env bash + +# Check for install/updates at https://github.com/seqra/opentaint + +source scripts/requireCommand.sh + +requireCommand docker + +docker pull ghcr.io/seqra/opentaint + +benchmark_version=$(scripts/getBenchmarkVersion.sh 2>/dev/null | tail -1) +opentaint_version=$(docker run --rm ghcr.io/seqra/opentaint opentaint --version | grep -oE 'v[0-9]+\.[0-9]+\.[0-9]+' || docker run --rm ghcr.io/seqra/opentaint opentaint --version | awk '{print $NF}') +result_file="/project/results/Benchmark_$benchmark_version-OpenTaint-$opentaint_version.sarif" + +docker run --rm -v $(pwd):/project \ + ghcr.io/seqra/opentaint:latest \ + opentaint scan \ + --severity error \ + --severity warning \ + --severity note \ + --output "$result_file" /project diff --git a/scripts/runSeqra.sh b/scripts/runSeqra.sh deleted file mode 100755 index 6278c3d771..0000000000 --- a/scripts/runSeqra.sh +++ /dev/null @@ -1,21 +0,0 @@ -#!/usr/bin/env bash - -# Check for install/updates at https://github.com/seqra/seqra - -source scripts/requireCommand.sh - -requireCommand docker - -docker pull ghcr.io/seqra/seqra - -benchmark_version=$(scripts/getBenchmarkVersion.sh 2>/dev/null | tail -1) -seqra_version=$(docker run --rm ghcr.io/seqra/seqra seqra --version | grep -oE 'v[0-9]+\.[0-9]+\.[0-9]+') -result_file="/project/results/Benchmark_$benchmark_version-Seqra-$seqra_version.sarif" - -docker run --rm -v $(pwd):/project \ - ghcr.io/seqra/seqra:latest \ - seqra scan \ - --severity error \ - --severity warning \ - --severity note \ - --output "$result_file" /project From 428a0f582269dd5d64bcb56b4b2036755ded20a2 Mon Sep 17 00:00:00 2001 From: Asok Shanmugam Date: Wed, 22 Apr 2026 08:36:23 -0700 Subject: [PATCH 03/23] Add runCognium.sh script for OWASP Benchmark scoring Adds a script to scan BenchmarkJava with Cognium and produce a SARIF result file compatible with the BenchmarkUtils Cognium reader. Install: npm install -g cognium Co-Authored-By: Claude Sonnet 4.6 --- scripts/runCognium.sh | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100755 scripts/runCognium.sh diff --git a/scripts/runCognium.sh b/scripts/runCognium.sh new file mode 100755 index 0000000000..49939b2878 --- /dev/null +++ b/scripts/runCognium.sh @@ -0,0 +1,14 @@ +#!/usr/bin/env bash + +# Install: npm install -g cognium +# Check for install/updates at https://github.com/cogniumhq/cognium + +source scripts/requireCommand.sh + +requireCommand cognium + +benchmark_version=$(scripts/getBenchmarkVersion.sh) +cognium_version=$(cognium --version | grep -oE '[0-9]+\.[0-9]+\.[0-9]+') +result_file="results/Benchmark_$benchmark_version-cognium-v$cognium_version.sarif" + +cognium scan src/main/java --format sarif --category security --output "$result_file" From 48f32a2f0fdb13166249307ddf9151403be25422 Mon Sep 17 00:00:00 2001 From: Asok Shanmugam Date: Sun, 26 Apr 2026 17:29:16 -0700 Subject: [PATCH 04/23] fix(runCognium): strip Maven download noise from benchmark_version MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit getBenchmarkVersion.sh runs mvn and pipes through grep -v '[INFO]', but Maven's transfer progress lines ("Downloading from central: ...", "Downloaded from central: ...") have no [INFO] prefix so they bypass the filter. On a cold Maven cache these lines get captured into benchmark_version, producing an invalid filename like: results/Benchmark_Downloading from central: https://...1.2-cognium-v1.6.9.sarif The fix adds 2>/dev/null to silence stderr and pipes through grep -E '^[0-9]+\.[0-9]' to accept only lines that start with digits — the actual version string (e.g. 1.2). All Maven noise is discarded. The second run worked because the local Maven cache was warm so no download lines were emitted. Co-Authored-By: Claude Sonnet 4.6 --- scripts/runCognium.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/runCognium.sh b/scripts/runCognium.sh index 49939b2878..198fc420af 100755 --- a/scripts/runCognium.sh +++ b/scripts/runCognium.sh @@ -7,7 +7,7 @@ source scripts/requireCommand.sh requireCommand cognium -benchmark_version=$(scripts/getBenchmarkVersion.sh) +benchmark_version=$(scripts/getBenchmarkVersion.sh 2>/dev/null | grep -E '^[0-9]+\.[0-9]') cognium_version=$(cognium --version | grep -oE '[0-9]+\.[0-9]+\.[0-9]+') result_file="results/Benchmark_$benchmark_version-cognium-v$cognium_version.sarif" From 552955ea22eb13f3927658a3d23bceef45effd97 Mon Sep 17 00:00:00 2001 From: seqradev Date: Wed, 6 May 2026 11:09:31 +0300 Subject: [PATCH 05/23] Simplify OpenTaint version extraction with awk --- scripts/runOpenTaint.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/runOpenTaint.sh b/scripts/runOpenTaint.sh index 64c61a3135..c65a1b988e 100644 --- a/scripts/runOpenTaint.sh +++ b/scripts/runOpenTaint.sh @@ -9,7 +9,7 @@ requireCommand docker docker pull ghcr.io/seqra/opentaint benchmark_version=$(scripts/getBenchmarkVersion.sh 2>/dev/null | tail -1) -opentaint_version=$(docker run --rm ghcr.io/seqra/opentaint opentaint --version | grep -oE 'v[0-9]+\.[0-9]+\.[0-9]+' || docker run --rm ghcr.io/seqra/opentaint opentaint --version | awk '{print $NF}') +opentaint_version=$(docker run --rm ghcr.io/seqra/opentaint opentaint --version | awk '{print $NF}') result_file="/project/results/Benchmark_$benchmark_version-OpenTaint-$opentaint_version.sarif" docker run --rm -v $(pwd):/project \ From 52ff778bc271db7ecf4a275fa558c85c10503d00 Mon Sep 17 00:00:00 2001 From: seqradev Date: Wed, 6 May 2026 11:10:49 +0300 Subject: [PATCH 06/23] Mark runOpenTaint.sh executable --- scripts/runOpenTaint.sh | 0 1 file changed, 0 insertions(+), 0 deletions(-) mode change 100644 => 100755 scripts/runOpenTaint.sh diff --git a/scripts/runOpenTaint.sh b/scripts/runOpenTaint.sh old mode 100644 new mode 100755 From 1c3641cc0286eb2bef6551d283ffcf4c3fb5dcfa Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 13 May 2026 11:06:03 +0000 Subject: [PATCH 07/23] Bump org.slf4j:slf4j-reload4j from 2.0.17 to 2.0.18 Bumps org.slf4j:slf4j-reload4j from 2.0.17 to 2.0.18. --- updated-dependencies: - dependency-name: org.slf4j:slf4j-reload4j dependency-version: 2.0.18 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index cfb4385876..01aeacfa8c 100644 --- a/pom.xml +++ b/pom.xml @@ -663,7 +663,7 @@ org.slf4j slf4j-reload4j - 2.0.17 + 2.0.18 From 9c32812fe4654d194d621cbca8c91396ca3948e1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 15 May 2026 11:05:40 +0000 Subject: [PATCH 08/23] Bump com.diffplug.spotless:spotless-maven-plugin from 3.4.0 to 3.5.0 Bumps [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) from 3.4.0 to 3.5.0. - [Release notes](https://github.com/diffplug/spotless/releases) - [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md) - [Commits](https://github.com/diffplug/spotless/compare/maven/3.4.0...maven/3.5.0) --- updated-dependencies: - dependency-name: com.diffplug.spotless:spotless-maven-plugin dependency-version: 3.5.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 01aeacfa8c..59831d2af9 100644 --- a/pom.xml +++ b/pom.xml @@ -1116,7 +1116,7 @@ com.diffplug.spotless spotless-maven-plugin - 3.4.0 + 3.5.0 origin/master From bc27501c0414f873f922aaccf44623be8a322218 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 18 May 2026 20:09:28 +0000 Subject: [PATCH 09/23] Bump com.diffplug.spotless:spotless-maven-plugin from 3.5.0 to 3.5.1 Bumps [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) from 3.5.0 to 3.5.1. - [Release notes](https://github.com/diffplug/spotless/releases) - [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md) - [Commits](https://github.com/diffplug/spotless/compare/maven/3.5.0...maven/3.5.1) --- updated-dependencies: - dependency-name: com.diffplug.spotless:spotless-maven-plugin dependency-version: 3.5.1 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 59831d2af9..9719850da6 100644 --- a/pom.xml +++ b/pom.xml @@ -1116,7 +1116,7 @@ com.diffplug.spotless spotless-maven-plugin - 3.5.0 + 3.5.1 origin/master From f0e12f97b3c982a010cf384d8908a5db66210619 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 18 May 2026 20:09:59 +0000 Subject: [PATCH 10/23] Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 Bumps [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) from 3.6.2 to 3.6.3. - [Release notes](https://github.com/apache/maven-enforcer/releases) - [Commits](https://github.com/apache/maven-enforcer/compare/enforcer-3.6.2...enforcer-3.6.3) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-enforcer-plugin dependency-version: 3.6.3 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 59831d2af9..05d9b2fd89 100644 --- a/pom.xml +++ b/pom.xml @@ -954,7 +954,7 @@ org.apache.maven.plugins maven-enforcer-plugin - 3.6.2 + 3.6.3 org.codehaus.mojo From a25aec9de026560b3acb90364503f5f821207700 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 25 May 2026 16:42:38 +0000 Subject: [PATCH 11/23] Bump org.apache.maven.plugins:maven-site-plugin from 3.21.0 to 3.22.0 Bumps [org.apache.maven.plugins:maven-site-plugin](https://github.com/apache/maven-site-plugin) from 3.21.0 to 3.22.0. - [Release notes](https://github.com/apache/maven-site-plugin/releases) - [Commits](https://github.com/apache/maven-site-plugin/compare/maven-site-plugin-3.21.0...maven-site-plugin-3.22.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-site-plugin dependency-version: 3.22.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index e79d033c9a..12ffa04441 100644 --- a/pom.xml +++ b/pom.xml @@ -1036,7 +1036,7 @@ org.apache.maven.plugins maven-site-plugin - 3.21.0 + 3.22.0 From 17e2df6e3520bff9bbe4434754ff66fbe74710e6 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 28 May 2026 11:52:05 +0000 Subject: [PATCH 12/23] Bump org.apache.maven.plugins:maven-dependency-plugin Bumps [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) from 3.10.0 to 3.11.0. - [Release notes](https://github.com/apache/maven-dependency-plugin/releases) - [Commits](https://github.com/apache/maven-dependency-plugin/compare/maven-dependency-plugin-3.10.0...maven-dependency-plugin-3.11.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-dependency-plugin dependency-version: 3.11.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 12ffa04441..8c717d743c 100644 --- a/pom.xml +++ b/pom.xml @@ -902,7 +902,7 @@ org.apache.maven.plugins maven-dependency-plugin - 3.10.0 + 3.11.0 com.sun.jersey:jersey-servlet From 769f59c40788c03c70a9f2e1df29bd2133b10910 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 28 May 2026 11:52:15 +0000 Subject: [PATCH 13/23] Bump com.diffplug.spotless:spotless-maven-plugin from 3.5.1 to 3.6.0 Bumps [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) from 3.5.1 to 3.6.0. - [Release notes](https://github.com/diffplug/spotless/releases) - [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md) - [Commits](https://github.com/diffplug/spotless/compare/maven/3.5.1...maven/3.6.0) --- updated-dependencies: - dependency-name: com.diffplug.spotless:spotless-maven-plugin dependency-version: 3.6.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 12ffa04441..456ea64a36 100644 --- a/pom.xml +++ b/pom.xml @@ -1116,7 +1116,7 @@ com.diffplug.spotless spotless-maven-plugin - 3.5.1 + 3.6.0 origin/master From 7cb9a00df54d01a54f75156b0c9ce4c9eea6f01a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 28 May 2026 11:52:19 +0000 Subject: [PATCH 14/23] Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6 Bumps [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) from 3.5.5 to 3.5.6. - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.5.5...surefire-3.5.6) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-surefire-plugin dependency-version: 3.5.6 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 12ffa04441..f423282895 100644 --- a/pom.xml +++ b/pom.xml @@ -1050,7 +1050,7 @@ org.apache.maven.plugins maven-surefire-plugin - 3.5.5 + 3.5.6 From d92bb970b55be2305b0ea8e24729c791e3d96430 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 29 May 2026 11:45:35 +0000 Subject: [PATCH 15/23] Bump com.fasterxml.jackson.core:jackson-databind from 2.21.3 to 2.21.4 Bumps [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) from 2.21.3 to 2.21.4. - [Commits](https://github.com/FasterXML/jackson/commits) --- updated-dependencies: - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.21.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index e2e38fdec1..73d967d312 100644 --- a/pom.xml +++ b/pom.xml @@ -866,7 +866,7 @@ com.fasterxml.jackson.core jackson-databind - 2.21.3 + 2.21.4 From ba30aa59f647c3c01ec692e2a577a3499456bf54 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 2 Jun 2026 07:59:08 +0000 Subject: [PATCH 16/23] Bump version.apache.api-ldap from 2.1.7 to 2.1.8 Bumps `version.apache.api-ldap` from 2.1.7 to 2.1.8. Updates `org.apache.directory.api:api-ldap-model` from 2.1.7 to 2.1.8 Updates `org.apache.directory.api:api-ldap-schema-data` from 2.1.7 to 2.1.8 --- updated-dependencies: - dependency-name: org.apache.directory.api:api-ldap-model dependency-version: 2.1.8 dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: org.apache.directory.api:api-ldap-schema-data dependency-version: 2.1.8 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 73d967d312..fd38e2a91e 100644 --- a/pom.xml +++ b/pom.xml @@ -1255,7 +1255,7 @@ ${project.build.directory}/log - 2.1.7 + 2.1.8 2.0.0.AM27 2.1.0 From ccce059b206a9027067f54aa447ec10c7ee806ad Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 2 Jun 2026 07:59:28 +0000 Subject: [PATCH 17/23] Bump com.fasterxml.jackson.core:jackson-databind from 2.21.4 to 2.22.0 Bumps [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) from 2.21.4 to 2.22.0. - [Commits](https://github.com/FasterXML/jackson/commits) --- updated-dependencies: - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.22.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 73d967d312..9398dd36af 100644 --- a/pom.xml +++ b/pom.xml @@ -866,7 +866,7 @@ com.fasterxml.jackson.core jackson-databind - 2.21.4 + 2.22.0 From 278105dcd6cba9f851806d9578984243e1cfd527 Mon Sep 17 00:00:00 2001 From: davewichers Date: Tue, 9 Jun 2026 12:32:43 -0400 Subject: [PATCH 18/23] Address incompatibility when upgrading both versions of the ldap-api libraries. --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 577b2a03c5..94071feb02 100644 --- a/pom.xml +++ b/pom.xml @@ -669,7 +669,7 @@ org.apache.directory.api api-ldap-model - ${version.apache.api-ldap} + 2.1.7 From 690a940a41e402f8d5243b17178a9ae5500ffc3b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 10 Jun 2026 11:03:29 +0000 Subject: [PATCH 19/23] Bump com.github.spotbugs:spotbugs-maven-plugin from 4.9.8.3 to 4.10.2.0 Bumps [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) from 4.9.8.3 to 4.10.2.0. - [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases) - [Commits](https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-4.9.8.3...spotbugs-maven-plugin-4.10.2.0) --- updated-dependencies: - dependency-name: com.github.spotbugs:spotbugs-maven-plugin dependency-version: 4.10.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 94071feb02..8fc1ec6398 100644 --- a/pom.xml +++ b/pom.xml @@ -1260,7 +1260,7 @@ 2.1.0 3.6.10.Final - 4.9.8.3 + 4.10.2.0 4.9.8 5.3.39 From 619657cae1e723215bc4922fbf6020b377fd8c0b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Jun 2026 14:46:21 +0000 Subject: [PATCH 20/23] Bump com.github.spotbugs:spotbugs from 4.9.8 to 4.10.2 Bumps [com.github.spotbugs:spotbugs](https://github.com/spotbugs/spotbugs) from 4.9.8 to 4.10.2. - [Release notes](https://github.com/spotbugs/spotbugs/releases) - [Changelog](https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md) - [Commits](https://github.com/spotbugs/spotbugs/compare/4.9.8...4.10.2) --- updated-dependencies: - dependency-name: com.github.spotbugs:spotbugs dependency-version: 4.10.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 8fc1ec6398..988396fdcb 100644 --- a/pom.xml +++ b/pom.xml @@ -1261,7 +1261,7 @@ 3.6.10.Final 4.10.2.0 - 4.9.8 + 4.10.2 5.3.39 From 2d05f4f49b6f6c9babdfc67c6c623fdd21e56de5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 16 Jun 2026 11:03:30 +0000 Subject: [PATCH 21/23] Bump com.diffplug.spotless:spotless-maven-plugin from 3.6.0 to 3.7.0 Bumps [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) from 3.6.0 to 3.7.0. - [Release notes](https://github.com/diffplug/spotless/releases) - [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md) - [Commits](https://github.com/diffplug/spotless/compare/maven/3.6.0...maven/3.7.0) --- updated-dependencies: - dependency-name: com.diffplug.spotless:spotless-maven-plugin dependency-version: 3.7.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 988396fdcb..be16581f3b 100644 --- a/pom.xml +++ b/pom.xml @@ -1116,7 +1116,7 @@ com.diffplug.spotless spotless-maven-plugin - 3.6.0 + 3.7.0 origin/master From f511fcd1e22e5c3a802e606d44963002b6d1edc9 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 19 Jun 2026 11:04:01 +0000 Subject: [PATCH 22/23] Bump actions/checkout from 6 to 7 Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql-analysis.yml | 2 +- .github/workflows/maven.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index b2611f13cc..6473043139 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -27,7 +27,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 # Get full history for spotless ratchetFrom with: fetch-depth: 0 diff --git a/.github/workflows/maven.yaml b/.github/workflows/maven.yaml index 29e50a43e2..5b79bcade4 100644 --- a/.github/workflows/maven.yaml +++ b/.github/workflows/maven.yaml @@ -8,7 +8,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: fetch-depth: 0 - name: Set up JDK 17 From 4ac08594e9b0cdaee89a0ff2c5f017041127b70f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 25 Jun 2026 11:03:29 +0000 Subject: [PATCH 23/23] Bump org.apache.httpcomponents.core5:httpcore5 from 5.4.2 to 5.4.3 Bumps [org.apache.httpcomponents.core5:httpcore5](https://github.com/apache/httpcomponents-core) from 5.4.2 to 5.4.3. - [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.3/RELEASE_NOTES.txt) - [Commits](https://github.com/apache/httpcomponents-core/compare/rel/v5.4.2...rel/v5.4.3) --- updated-dependencies: - dependency-name: org.apache.httpcomponents.core5:httpcore5 dependency-version: 5.4.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index be16581f3b..97e2f23175 100644 --- a/pom.xml +++ b/pom.xml @@ -783,7 +783,7 @@ org.apache.httpcomponents.core5 httpcore5 - 5.4.2 + 5.4.3