Bump dependency-check-maven from 8.0.1 to 8.0.2
Bumps dependency-check-maven from 8.0.1 to 8.0.2.
Release notes
Sourced from dependency-check-maven's releases.
Version 8.0.2
Fixed
- Resolved bug causing an issue with some Maven Extensions (#5366).
- ArchiveAnalyzer will now correctly throw an exception if it cannot open an Archive (#5371).
- Updated CSV report so that it no longer has a duplicate
description
column (#5364).- Moved several logging statements to trace which should drastically reduce the log size (#5350).
- Fixed bug with RetireJS'
--retirejsFilterNonVulnerable
and--retirejsFilter
when used with the CLI (#5351).- Fixed the
sarif
report format and added validation (#5345 and (#5363)- Fixed
MalformedPackageException
in the gradle plugin ([dependency-check-gradle/#320](dependency-check/dependency-check-gradle#320)).- Fixed
MissingMethodException
in the gradle plugin ([dependency-check-gradle/#316](dependency-check/dependency-check-gradle#316)).See the full listing of changes.
Changelog
Sourced from dependency-check-maven's changelog.
Commits
-
6b238bc
build:prepare release v8.0.2 -
b006972
docs: prepare release -
6d2aa31
build(deps): bump actions/github-script from 6.3.3 to 6.4.0 (#5391) -
11d6edb
fix: npe (#5390) -
bef8403
build(deps): bump actions/github-script from 6.3.3 to 6.4.0 -
4acc6ae
feat: upgrading to a newer alpine version (#5376) -
ef93655
fix: Support maven extensions like Tycho adding system-scoped dependencies wi... -
219c4f3
fix: npe -
a68e613
feat: upgrading to a newer alpine version -
496ffc6
fix: ArchiveAnalyzer should throw AnalysisException (#5371) - Additional commits viewable in compare view
Dependabot commands
You can trigger Dependabot actions by commenting on this MR
-
$dependabot rebase
will rebase this MR -
$dependabot recreate
will recreate this MR rewriting all the manual changes and resolving conflicts