Gary Gregory
|
32ffe9ac96
|
Bump commons-parent from 54 to 55 #122
|
2022-12-16 10:51:44 -05:00 |
|
dependabot[bot]
|
0420183849
|
Bump commons-parent from 54 to 55 (#122)
Bumps [commons-parent](https://github.com/apache/commons-parent) from 54 to 55.
- [Release notes](https://github.com/apache/commons-parent/releases)
- [Changelog](https://github.com/apache/commons-parent/blob/master/RELEASE-NOTES.txt)
- [Commits](https://github.com/apache/commons-parent/commits)
---
updated-dependencies:
- dependency-name: org.apache.commons:commons-parent
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2022-12-16 10:49:41 -05:00 |
|
dependabot[bot]
|
80a833afaf
|
Bump ossf/scorecard-action from 2.0.6 to 2.1.0 (#119)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.0.6 to 2.1.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](99c53751e0...937ffa90d7)
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2022-12-16 10:49:26 -05:00 |
|
Bruno P. Kinoshita
|
d415bf3569
|
Merge pull request #121 from apache/dependabot/github_actions/actions/checkout-3.2.0
Bump actions/checkout from 3.1.0 to 3.2.0
|
2022-12-16 14:36:35 +01:00 |
|
Bruno P. Kinoshita
|
96275c5ac8
|
Merge pull request #120 from apache/dependabot/github_actions/actions/setup-java-3.9.0
Bump actions/setup-java from 3.8.0 to 3.9.0
|
2022-12-16 14:27:36 +01:00 |
|
dependabot[bot]
|
048d261e7d
|
Bump actions/checkout from 3.1.0 to 3.2.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](93ea575cb5...755da8c3cf)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2022-12-16 10:00:24 +00:00 |
|
dependabot[bot]
|
6a7731d50a
|
Bump actions/setup-java from 3.8.0 to 3.9.0
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3.8.0 to 3.9.0.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v3.8.0...v3.9.0)
---
updated-dependencies:
- dependency-name: actions/setup-java
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2022-12-16 10:00:21 +00:00 |
|
Bruno P. Kinoshita
|
32e1d75112
|
Merge pull request #118 from apache/dependabot/github_actions/actions/setup-java-3.8.0
Bump actions/setup-java from 3.6.0 to 3.8.0
|
2022-12-09 11:21:41 +01:00 |
|
dependabot[bot]
|
553a76cdc7
|
Bump actions/setup-java from 3.6.0 to 3.8.0
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3.6.0 to 3.8.0.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v3.6.0...v3.8.0)
---
updated-dependencies:
- dependency-name: actions/setup-java
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2022-12-09 10:00:19 +00:00 |
|
Gary Gregory
|
c1b4efabc6
|
Undo Bump actions/setup-java from 3.6.0 to 3.7.0
|
2022-12-06 06:52:52 -05:00 |
|
Gary Gregory
|
bdc04a6264
|
Bump maven-dependency-plugin from 3.3.0 to 3.4.0 #117
|
2022-12-02 07:14:15 -05:00 |
|
dependabot[bot]
|
431a58f8a8
|
Bump maven-dependency-plugin from 3.3.0 to 3.4.0 (#117)
Bumps [maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) from 3.3.0 to 3.4.0.
- [Release notes](https://github.com/apache/maven-dependency-plugin/releases)
- [Commits](https://github.com/apache/maven-dependency-plugin/compare/maven-dependency-plugin-3.3.0...maven-dependency-plugin-3.4.0)
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-dependency-plugin
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2022-12-02 07:13:36 -05:00 |
|
Gary Gregory
|
416f6ba7e2
|
Bump actions/setup-java from 3.6.0 to 3.7.0 #126
|
2022-12-01 22:04:22 -05:00 |
|
Gary Gregory
|
213f656beb
|
Add GHitHub robots file
|
2022-11-19 18:00:27 -05:00 |
|
dependabot[bot]
|
c4e481e6d1
|
Bump actions/upload-artifact from 3.1.0 to 3.1.1 (#116)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](3cea537223...83fd05a356)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2022-11-01 12:05:00 -04:00 |
|
Gary Gregory
|
da2caee5d7
|
Match PMD target JDK configuration to actual configuration
|
2022-10-25 07:31:41 -04:00 |
|
Gary Gregory
|
434abf7006
|
Pick up SpotBugs from parent POM
|
2022-10-25 07:29:36 -04:00 |
|
Gary Gregory
|
6e80d7e108
|
Replace Clirr with JApiCmp in default build
|
2022-10-25 07:19:06 -04:00 |
|
Gary Gregory
|
e4728b91b0
|
Drop unsupported Ant build
|
2022-10-25 07:09:25 -04:00 |
|
Gary Gregory
|
a04f2dd8b4
|
Bump Scorecards from 1 to 2
|
2022-10-23 15:41:42 -04:00 |
|
Gary Gregory
|
10377b63fa
|
Fix spelling
|
2022-10-22 16:32:28 -04:00 |
|
Gary Gregory
|
b83b31411a
|
Spelling
|
2022-10-22 16:31:05 -04:00 |
|
Bruno P. Kinoshita
|
5783d0eb17
|
Merge pull request #112 from apache/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.7.2.1
Bump spotbugs-maven-plugin from 4.7.2.0 to 4.7.2.1
|
2022-10-22 00:35:21 +13:00 |
|
dependabot[bot]
|
b136ad3c5d
|
Bump spotbugs-maven-plugin from 4.7.2.0 to 4.7.2.1
Bumps [spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) from 4.7.2.0 to 4.7.2.1.
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-4.7.2.0...spotbugs-maven-plugin-4.7.2.1)
---
updated-dependencies:
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2022-10-22 00:35:08 +13:00 |
|
Bruno P. Kinoshita
|
5872998cbb
|
Merge pull request #115 from apache/dependabot/maven/com.github.spotbugs-spotbugs-4.7.3
Bump spotbugs from 4.7.2 to 4.7.3
|
2022-10-21 23:58:53 +13:00 |
|
dependabot[bot]
|
62606f2797
|
Bump spotbugs from 4.7.2 to 4.7.3
Bumps [spotbugs](https://github.com/spotbugs/spotbugs) from 4.7.2 to 4.7.3.
- [Release notes](https://github.com/spotbugs/spotbugs/releases)
- [Changelog](https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/spotbugs/spotbugs/compare/4.7.2...4.7.3)
---
updated-dependencies:
- dependency-name: com.github.spotbugs:spotbugs
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2022-10-21 23:58:35 +13:00 |
|
Bruno P. Kinoshita
|
ffb3fd082e
|
Merge pull request #114 from apache/dependabot/github_actions/actions/setup-java-3.6.0
Bump actions/setup-java from 3.5.1 to 3.6.0
|
2022-10-21 23:56:51 +13:00 |
|
dependabot[bot]
|
b26b13ac13
|
Bump actions/setup-java from 3.5.1 to 3.6.0
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3.5.1 to 3.6.0.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v3.5.1...v3.6.0)
---
updated-dependencies:
- dependency-name: actions/setup-java
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2022-10-21 10:05:25 +00:00 |
|
Bruno P. Kinoshita
|
8651bf3dc9
|
Merge pull request #111 from apache/dependabot/github_actions/actions/cache-3.0.11
Bump actions/cache from 3.0.10 to 3.0.11
|
2022-10-15 01:29:12 +13:00 |
|
dependabot[bot]
|
7235113dab
|
Bump actions/cache from 3.0.10 to 3.0.11
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.10 to 3.0.11.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.10...v3.0.11)
---
updated-dependencies:
- dependency-name: actions/cache
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2022-10-14 10:01:11 +00:00 |
|
Sebb
|
6742ad1da0
|
Don't persist credentials unnecessarily
|
2022-10-08 15:23:52 +01:00 |
|
Gary Gregory
|
5fd52fcb1d
|
Set to level permissions to 'read'
|
2022-10-07 20:09:48 -04:00 |
|
Bruno P. Kinoshita
|
c133666ad8
|
Merge pull request #109 from apache/dependabot/github_actions/actions/checkout-3.1.0
Bump actions/checkout from 3.0.2 to 3.1.0
|
2022-10-08 00:30:06 +13:00 |
|
dependabot[bot]
|
63307bd69e
|
Bump actions/checkout from 3.0.2 to 3.1.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.0.2 to 3.1.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.0.2...93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2022-10-08 00:27:33 +13:00 |
|
Bruno P. Kinoshita
|
56a53deae4
|
Merge pull request #110 from apache/dependabot/github_actions/actions/cache-3.0.10
Bump actions/cache from 3.0.9 to 3.0.10
|
2022-10-08 00:09:29 +13:00 |
|
dependabot[bot]
|
697035023a
|
Bump actions/cache from 3.0.9 to 3.0.10
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.9 to 3.0.10.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.9...v3.0.10)
---
updated-dependencies:
- dependency-name: actions/cache
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2022-10-08 00:09:14 +13:00 |
|
Gary Gregory
|
68b171ce83
|
GitHub Actions build: no top level permission defined
|
2022-10-06 18:39:58 -04:00 |
|
Gary Gregory
|
32891becf5
|
Use String.isEmpty()
|
2022-10-02 13:39:32 -04:00 |
|
Gary Gregory
|
12e1186094
|
Bump actions/setup-java from 3 to 3.5.1
|
2022-10-01 14:53:17 -04:00 |
|
Bruno P. Kinoshita
|
d935fb8973
|
Merge pull request #107 from apache/dependabot/github_actions/actions/cache-3.0.9
Bump actions/cache from 3.0.8 to 3.0.9
|
2022-09-30 23:17:31 +13:00 |
|
dependabot[bot]
|
8287647eb7
|
Bump actions/cache from 3.0.8 to 3.0.9
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.8 to 3.0.9.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.8...v3.0.9)
---
updated-dependencies:
- dependency-name: actions/cache
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2022-09-30 23:17:19 +13:00 |
|
Gary Gregory
|
e4a84380f8
|
Bump junit from 4.13.2 to 5.9.1 Vintage
|
2022-09-25 11:21:15 -04:00 |
|
Gary Gregory
|
bceb053531
|
Replace Travis badge with GitHub Actions
|
2022-09-23 08:31:50 -07:00 |
|
Bruno P. Kinoshita
|
b32a916997
|
Merge pull request #106 from apache/dependabot/maven/org.apache.commons-commons-parent-54
Bump commons-parent from 53 to 54
|
2022-09-24 00:31:46 +12:00 |
|
dependabot[bot]
|
f9bd5b50d1
|
Bump commons-parent from 53 to 54
Bumps [commons-parent](https://github.com/apache/commons-parent) from 53 to 54.
- [Release notes](https://github.com/apache/commons-parent/releases)
- [Changelog](https://github.com/apache/commons-parent/blob/master/RELEASE-NOTES.txt)
- [Commits](https://github.com/apache/commons-parent/commits)
---
updated-dependencies:
- dependency-name: org.apache.commons:commons-parent
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2022-09-24 00:31:09 +12:00 |
|
Gary Gregory
|
5bc4db8c02
|
Use GitHub cache for CodeQL
|
2022-09-22 08:51:21 -04:00 |
|
Gary Gregory
|
f0007edb14
|
Add same scorecards-analysis.yml as Apache Log4j (except for branches)
|
2022-09-12 09:56:57 -07:00 |
|
Bruno P. Kinoshita
|
ec7a37d0b4
|
Merge pull request #104 from apache/dependabot/maven/com.github.spotbugs-spotbugs-4.7.2
Bump spotbugs from 4.7.1 to 4.7.2
|
2022-09-09 23:05:07 +12:00 |
|
dependabot[bot]
|
9245479e54
|
Bump spotbugs from 4.7.1 to 4.7.2
Bumps [spotbugs](https://github.com/spotbugs/spotbugs) from 4.7.1 to 4.7.2.
- [Release notes](https://github.com/spotbugs/spotbugs/releases)
- [Changelog](https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/spotbugs/spotbugs/compare/4.7.1...4.7.2)
---
updated-dependencies:
- dependency-name: com.github.spotbugs:spotbugs
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2022-09-09 23:04:12 +12:00 |
|
Bruno P. Kinoshita
|
c6a31ee14f
|
Merge pull request #103 from apache/dependabot/maven/org.apache.maven.plugins-maven-pmd-plugin-3.19.0
Bump maven-pmd-plugin from 3.18.0 to 3.19.0
|
2022-09-09 23:01:42 +12:00 |
|