1
0
Commit Graph

1308 Commits

Author SHA1 Message Date
Bruno P. Kinoshita
d415bf3569 Merge pull request #121 from apache/dependabot/github_actions/actions/checkout-3.2.0
Bump actions/checkout from 3.1.0 to 3.2.0
2022-12-16 14:36:35 +01:00
Bruno P. Kinoshita
96275c5ac8 Merge pull request #120 from apache/dependabot/github_actions/actions/setup-java-3.9.0
Bump actions/setup-java from 3.8.0 to 3.9.0
2022-12-16 14:27:36 +01:00
dependabot[bot]
048d261e7d Bump actions/checkout from 3.1.0 to 3.2.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](93ea575cb5...755da8c3cf)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-12-16 10:00:24 +00:00
dependabot[bot]
6a7731d50a Bump actions/setup-java from 3.8.0 to 3.9.0
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3.8.0 to 3.9.0.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v3.8.0...v3.9.0)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-12-16 10:00:21 +00:00
Bruno P. Kinoshita
32e1d75112 Merge pull request #118 from apache/dependabot/github_actions/actions/setup-java-3.8.0
Bump actions/setup-java from 3.6.0 to 3.8.0
2022-12-09 11:21:41 +01:00
dependabot[bot]
553a76cdc7 Bump actions/setup-java from 3.6.0 to 3.8.0
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3.6.0 to 3.8.0.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v3.6.0...v3.8.0)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-12-09 10:00:19 +00:00
Gary Gregory
c1b4efabc6 Undo Bump actions/setup-java from 3.6.0 to 3.7.0 2022-12-06 06:52:52 -05:00
Gary Gregory
bdc04a6264 Bump maven-dependency-plugin from 3.3.0 to 3.4.0 #117 2022-12-02 07:14:15 -05:00
dependabot[bot]
431a58f8a8 Bump maven-dependency-plugin from 3.3.0 to 3.4.0 (#117)
Bumps [maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) from 3.3.0 to 3.4.0.
- [Release notes](https://github.com/apache/maven-dependency-plugin/releases)
- [Commits](https://github.com/apache/maven-dependency-plugin/compare/maven-dependency-plugin-3.3.0...maven-dependency-plugin-3.4.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-dependency-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-02 07:13:36 -05:00
Gary Gregory
416f6ba7e2 Bump actions/setup-java from 3.6.0 to 3.7.0 #126 2022-12-01 22:04:22 -05:00
Gary Gregory
213f656beb Add GHitHub robots file 2022-11-19 18:00:27 -05:00
dependabot[bot]
c4e481e6d1 Bump actions/upload-artifact from 3.1.0 to 3.1.1 (#116)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](3cea537223...83fd05a356)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-01 12:05:00 -04:00
Gary Gregory
da2caee5d7 Match PMD target JDK configuration to actual configuration 2022-10-25 07:31:41 -04:00
Gary Gregory
434abf7006 Pick up SpotBugs from parent POM 2022-10-25 07:29:36 -04:00
Gary Gregory
6e80d7e108 Replace Clirr with JApiCmp in default build 2022-10-25 07:19:06 -04:00
Gary Gregory
e4728b91b0 Drop unsupported Ant build 2022-10-25 07:09:25 -04:00
Gary Gregory
a04f2dd8b4 Bump Scorecards from 1 to 2 2022-10-23 15:41:42 -04:00
Gary Gregory
10377b63fa Fix spelling 2022-10-22 16:32:28 -04:00
Gary Gregory
b83b31411a Spelling 2022-10-22 16:31:05 -04:00
Bruno P. Kinoshita
5783d0eb17 Merge pull request #112 from apache/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.7.2.1
Bump spotbugs-maven-plugin from 4.7.2.0 to 4.7.2.1
2022-10-22 00:35:21 +13:00
dependabot[bot]
b136ad3c5d Bump spotbugs-maven-plugin from 4.7.2.0 to 4.7.2.1
Bumps [spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) from 4.7.2.0 to 4.7.2.1.
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-4.7.2.0...spotbugs-maven-plugin-4.7.2.1)

---
updated-dependencies:
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-10-22 00:35:08 +13:00
Bruno P. Kinoshita
5872998cbb Merge pull request #115 from apache/dependabot/maven/com.github.spotbugs-spotbugs-4.7.3
Bump spotbugs from 4.7.2 to 4.7.3
2022-10-21 23:58:53 +13:00
dependabot[bot]
62606f2797 Bump spotbugs from 4.7.2 to 4.7.3
Bumps [spotbugs](https://github.com/spotbugs/spotbugs) from 4.7.2 to 4.7.3.
- [Release notes](https://github.com/spotbugs/spotbugs/releases)
- [Changelog](https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/spotbugs/spotbugs/compare/4.7.2...4.7.3)

---
updated-dependencies:
- dependency-name: com.github.spotbugs:spotbugs
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-10-21 23:58:35 +13:00
Bruno P. Kinoshita
ffb3fd082e Merge pull request #114 from apache/dependabot/github_actions/actions/setup-java-3.6.0
Bump actions/setup-java from 3.5.1 to 3.6.0
2022-10-21 23:56:51 +13:00
dependabot[bot]
b26b13ac13 Bump actions/setup-java from 3.5.1 to 3.6.0
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3.5.1 to 3.6.0.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v3.5.1...v3.6.0)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-10-21 10:05:25 +00:00
Bruno P. Kinoshita
8651bf3dc9 Merge pull request #111 from apache/dependabot/github_actions/actions/cache-3.0.11
Bump actions/cache from 3.0.10 to 3.0.11
2022-10-15 01:29:12 +13:00
dependabot[bot]
7235113dab Bump actions/cache from 3.0.10 to 3.0.11
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.10 to 3.0.11.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.10...v3.0.11)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-10-14 10:01:11 +00:00
Sebb
6742ad1da0 Don't persist credentials unnecessarily 2022-10-08 15:23:52 +01:00
Gary Gregory
5fd52fcb1d Set to level permissions to 'read' 2022-10-07 20:09:48 -04:00
Bruno P. Kinoshita
c133666ad8 Merge pull request #109 from apache/dependabot/github_actions/actions/checkout-3.1.0
Bump actions/checkout from 3.0.2 to 3.1.0
2022-10-08 00:30:06 +13:00
dependabot[bot]
63307bd69e Bump actions/checkout from 3.0.2 to 3.1.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.0.2 to 3.1.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.0.2...93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-10-08 00:27:33 +13:00
Bruno P. Kinoshita
56a53deae4 Merge pull request #110 from apache/dependabot/github_actions/actions/cache-3.0.10
Bump actions/cache from 3.0.9 to 3.0.10
2022-10-08 00:09:29 +13:00
dependabot[bot]
697035023a Bump actions/cache from 3.0.9 to 3.0.10
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.9 to 3.0.10.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.9...v3.0.10)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-10-08 00:09:14 +13:00
Gary Gregory
68b171ce83 GitHub Actions build: no top level permission defined 2022-10-06 18:39:58 -04:00
Gary Gregory
32891becf5 Use String.isEmpty() 2022-10-02 13:39:32 -04:00
Gary Gregory
12e1186094 Bump actions/setup-java from 3 to 3.5.1 2022-10-01 14:53:17 -04:00
Bruno P. Kinoshita
d935fb8973 Merge pull request #107 from apache/dependabot/github_actions/actions/cache-3.0.9
Bump actions/cache from 3.0.8 to 3.0.9
2022-09-30 23:17:31 +13:00
dependabot[bot]
8287647eb7 Bump actions/cache from 3.0.8 to 3.0.9
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.8 to 3.0.9.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.8...v3.0.9)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-09-30 23:17:19 +13:00
Gary Gregory
e4a84380f8 Bump junit from 4.13.2 to 5.9.1 Vintage 2022-09-25 11:21:15 -04:00
Gary Gregory
bceb053531 Replace Travis badge with GitHub Actions 2022-09-23 08:31:50 -07:00
Bruno P. Kinoshita
b32a916997 Merge pull request #106 from apache/dependabot/maven/org.apache.commons-commons-parent-54
Bump commons-parent from 53 to 54
2022-09-24 00:31:46 +12:00
dependabot[bot]
f9bd5b50d1 Bump commons-parent from 53 to 54
Bumps [commons-parent](https://github.com/apache/commons-parent) from 53 to 54.
- [Release notes](https://github.com/apache/commons-parent/releases)
- [Changelog](https://github.com/apache/commons-parent/blob/master/RELEASE-NOTES.txt)
- [Commits](https://github.com/apache/commons-parent/commits)

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-parent
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-09-24 00:31:09 +12:00
Gary Gregory
5bc4db8c02 Use GitHub cache for CodeQL 2022-09-22 08:51:21 -04:00
Gary Gregory
f0007edb14 Add same scorecards-analysis.yml as Apache Log4j (except for branches) 2022-09-12 09:56:57 -07:00
Bruno P. Kinoshita
ec7a37d0b4 Merge pull request #104 from apache/dependabot/maven/com.github.spotbugs-spotbugs-4.7.2
Bump spotbugs from 4.7.1 to 4.7.2
2022-09-09 23:05:07 +12:00
dependabot[bot]
9245479e54 Bump spotbugs from 4.7.1 to 4.7.2
Bumps [spotbugs](https://github.com/spotbugs/spotbugs) from 4.7.1 to 4.7.2.
- [Release notes](https://github.com/spotbugs/spotbugs/releases)
- [Changelog](https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/spotbugs/spotbugs/compare/4.7.1...4.7.2)

---
updated-dependencies:
- dependency-name: com.github.spotbugs:spotbugs
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-09-09 23:04:12 +12:00
Bruno P. Kinoshita
c6a31ee14f Merge pull request #103 from apache/dependabot/maven/org.apache.maven.plugins-maven-pmd-plugin-3.19.0
Bump maven-pmd-plugin from 3.18.0 to 3.19.0
2022-09-09 23:01:42 +12:00
dependabot[bot]
8e3e8c502a Bump maven-pmd-plugin from 3.18.0 to 3.19.0
Bumps [maven-pmd-plugin](https://github.com/apache/maven-pmd-plugin) from 3.18.0 to 3.19.0.
- [Release notes](https://github.com/apache/maven-pmd-plugin/releases)
- [Commits](https://github.com/apache/maven-pmd-plugin/compare/maven-pmd-plugin-3.18.0...maven-pmd-plugin-3.19.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-pmd-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-09-09 23:01:00 +12:00
Bruno P. Kinoshita
549f4b80fc Merge pull request #102 from apache/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.7.2.0
Bump spotbugs-maven-plugin from 4.7.1.1 to 4.7.2.0
2022-09-09 23:00:19 +12:00
dependabot[bot]
2649d6597a Bump spotbugs-maven-plugin from 4.7.1.1 to 4.7.2.0
Bumps [spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) from 4.7.1.1 to 4.7.2.0.
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-4.7.1.1...spotbugs-maven-plugin-4.7.2.0)

---
updated-dependencies:
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-09-09 23:00:06 +12:00