Skip to content

Bump dependency-check-maven from 9.0.0 to 9.0.1

Dependabot requested to merge dependabot-maven-org.owasp-dependency-check-maven-9.0.1 into master

Bumps dependency-check-maven from 9.0.0 to 9.0.1.

Release notes

Sourced from dependency-check-maven's releases.

Version 9.0.1

  • fix: check java 8 update version; minimum JRE is 8 update 251 (#6118)
  • fix: add retry for failed NVD API requests (#6136)
  • docs: add default values to documentation for the NVD API Delay (#6135)
  • chore: Revert "build(deps): bump com.h2database:h2 from 2.1.214 to 2.2.224" (#6131)
    • this is a breaking change for anyone that successfully created the H2 database with 9.0.0.
  • fix: mute jcs logging (#6130)
  • docs: update NVD notice (#6110)
  • fix: Use the correct key for NVD API-Key from Maven Settings serverId (#6109)

See the full listing of changes.

Changelog

Sourced from dependency-check-maven's changelog.

Version 9.0.1 (2023-11-26)

breaking changes: See the upgrade notice

  • fix: check java 8 update version; minimum JRE is 8 update 251 (#6118)
  • fix: add retry for failed NVD API requests (#6136)
  • docs: add default values to documentation for the NVD API Delay (#6135)
  • chore: Revert "build(deps): bump com.h2database:h2 from 2.1.214 to 2.2.224" (#6131)
    • this is a breaking change for anyone that successfully created the H2 database with 9.0.0.
  • fix: mute jcs logging (#6130)
  • docs: update NVD notice (#6110)
  • fix: Use the correct key for NVD API-Key from Maven Settings serverId (#6109)

See the full listing of changes.

Commits
  • ff31186 build: prepare release v9.0.1
  • e55fe59 docs: prepare release
  • bf51025 fix: check java 8 update version (#6118)
  • 5601e55 fix: add retry for failed NVD API requests (#6136)
  • daf8c98 docs: add default values to documentation for the NVD API Delay (#6135)
  • d0adc75 build(deps): bump org.apache.commons:commons-compress from 1.24.0 to 1.25.0 (...
  • b89273c chore: Revert "build(deps): bump com.h2database:h2 from 2.1.214 to 2.2.224" (...
  • 5a3cef7 fix: mute jcs logging (#6130)
  • 8706c3e fix: use fake nvd data feed for IT (#6113)
  • 0b86bca fix: Configure nvd.api.delay default (#6112)
  • Additional commits viewable in compare view

Dependabot commands
You can trigger Dependabot actions by commenting on this MR
  • $dependabot rebase will rebase this MR
  • $dependabot recreate will recreate this MR rewriting all the manual changes and resolving conflicts

Merge request reports