Skip to content

Bump dependency-check-maven from 9.0.4 to 9.0.5

Dependabot requested to merge dependabot-maven-org.owasp-dependency-check-maven-9.0.5 into master

Bumps dependency-check-maven from 9.0.4 to 9.0.5.

Release notes

Sourced from dependency-check-maven's releases.

Version 9.0.5

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Changelog

Sourced from dependency-check-maven's changelog.

Version 9.0.5 (2023-12-13)

  • fix: make NVD API endpoint configurable (#6287)
  • fix: synch last modified timestamp for NVD API (#6281)
  • fix: read NVD cache meta files if cache.properties does not exist (#6282)
  • fix: correct property for nonProxyHosts (#6285)
  • fix: reduce apache http logging (#6280)
  • fix: store last modified timestamp for RetireJS and the Hosted Suppression File in db (#6271)
  • build: bump golang in the docker image (#6274)
  • fix: use temporary files to reduce memory usage during the NVD Update (#6270)
  • fix: use BIT for Oracle DB instead of Boolean when calling prepared statements (#6264)
  • fix: showing all reference tags in reports (#6259)

See the full listing of changes.

Commits

Dependabot commands
You can trigger Dependabot actions by commenting on this MR
  • $dependabot rebase will rebase this MR
  • $dependabot recreate will recreate this MR rewriting all the manual changes and resolving conflicts

Merge request reports