Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump org.apache.maven.plugins:maven-clean-plugin from 2.5 to 3.4.0 in /jans-casa #9984

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 30, 2024

Bumps org.apache.maven.plugins:maven-clean-plugin from 2.5 to 3.4.0.

Release notes

Sourced from org.apache.maven.plugins:maven-clean-plugin's releases.

3.4.0

What's Changed

New Contributors

Full Changelog: apache/maven-clean-plugin@maven-clean-plugin-3.3.2...maven-clean-plugin-3.4.0

3.3.2

What's Changed

New Contributors

Full Changelog: apache/maven-clean-plugin@maven-clean-plugin-3.3.1...maven-clean-plugin-3.3.2

3.3.1

What's Changed

New Contributors

Full Changelog: apache/maven-clean-plugin@maven-clean-plugin-3.2.0...maven-clean-plugin-3.3.1

3.2.0

What's Changed

... (truncated)

Commits
  • 5774dbc [maven-release-plugin] prepare release maven-clean-plugin-3.4.0
  • 0da13b2 [MCLEAN-122] Cleanup declared dependencies, simplify unit test
  • 567be96 [MCLEAN-121] Bump com.google.inject:guice from 4.2.0 to 4.2.3 (#41)
  • ae4efa0 [MCLEAN-120] Bump org.codehaus.plexus:plexus-testing from 1.1.0 to 1.3.0 (#40)
  • a09a379 Build with Maven 4
  • f0aedd5 [MCLEAN-119] Bump org.apache.maven.plugins:maven-plugins from 41 to 42 (#44)
  • d3b2800 [MCLEAN-106] Switch to junit 5 (#27)
  • 7c1593f [MCLEAN-118] Require Maven 3.6.3
  • 1e87ea3 Fixed CleanMojoTest.java
  • c21ec13 Loggerinterface Basic
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added java Pull requests that update Java code kind-dependencies Pull requests that update a dependency file labels Oct 30, 2024
Copy link

dryrunsecurity bot commented Oct 30, 2024

DryRun Security Summary

The provided text describes a routine version update of the maven-clean-plugin in the jans-casa project's pom.xml file, which is a minor maintenance change unlikely to affect the project's security or functionality.

Expand for full summary

Summary:

The provided code change is an update to the pom.xml file in the jans-casa project. The specific change is an update to the version of the maven-clean-plugin from 2.5 to 3.4.0. From an application security perspective, this change is not particularly interesting or concerning, as the maven-clean-plugin is a build tool plugin responsible for cleaning up the project's build directory, and its version update is a routine maintenance task.

However, it's worth noting that the pom.xml file is a crucial part of a Maven-based project, as it defines the project's dependencies, build configuration, and other settings. Any changes to this file should be carefully reviewed to ensure that they do not introduce any security vulnerabilities or break the project's build process. In this case, the version update for the maven-clean-plugin is a minor change and is unlikely to have a significant impact on the project's security or functionality. Nevertheless, it's still important to ensure that the new version of the plugin does not introduce any known vulnerabilities or breaking changes.

Files Changed:

  • jans-casa/pom.xml: This file has been updated to change the version of the maven-clean-plugin from 2.5 to 3.4.0. This is a routine maintenance update and is not expected to have any significant impact on the project's security or functionality.

Code Analysis

We ran 9 analyzers against 1 file and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer Findings
Sensitive Files Analyzer 1 finding

View PR in the DryRun Dashboard.

@dependabot dependabot bot force-pushed the dependabot/maven/jans-casa/org.apache.maven.plugins-maven-clean-plugin-3.4.0 branch 3 times, most recently from 2f6d1bc to 2e10356 Compare November 5, 2024 18:45
@moabu
Copy link
Member

moabu commented Nov 7, 2024

@dependabot recreate

@dependabot dependabot bot force-pushed the dependabot/maven/jans-casa/org.apache.maven.plugins-maven-clean-plugin-3.4.0 branch from 2e10356 to 28f000a Compare November 7, 2024 03:33
@dependabot dependabot bot force-pushed the dependabot/maven/jans-casa/org.apache.maven.plugins-maven-clean-plugin-3.4.0 branch 3 times, most recently from 5e1c6ef to 4fff20f Compare November 20, 2024 13:10
…5 to 3.4.0 in /jans-casa

Dependabot couldn't find the original pull request head commit, 2e10356.
@dependabot dependabot bot force-pushed the dependabot/maven/jans-casa/org.apache.maven.plugins-maven-clean-plugin-3.4.0 branch from 4fff20f to 4296b0a Compare November 21, 2024 12:04
@moabu moabu force-pushed the dependabot/maven/jans-casa/org.apache.maven.plugins-maven-clean-plugin-3.4.0 branch from 4296b0a to 6effd1c Compare December 26, 2024 19:25
@moabu moabu force-pushed the main branch 2 times, most recently from 5126af2 to aa1b2ed Compare December 27, 2024 04:55
@moabu moabu force-pushed the dependabot/maven/jans-casa/org.apache.maven.plugins-maven-clean-plugin-3.4.0 branch from 6effd1c to 11d8174 Compare December 27, 2024 04:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
java Pull requests that update Java code kind-dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant