Skip to content

Update dependency org.owasp:dependency-check-maven to v8.4.2

renovate-bot requested to merge renovate/dependency-check-maven.version into v2_16_0

This MR contains the following updates:

Package Type Update Change
org.owasp:dependency-check-maven (source) build minor 8.3.1 -> 8.4.2

Release Notes

jeremylong/DependencyCheck (org.owasp:dependency-check-maven)

v8.4.2

Compare Source

  • fix: correct log configuration in cli (#​6002)

See the full listing of changes.

v8.4.1

Compare Source

Fixed
  • fix: upgrade to JCS3 (#​5114)
  • fix: Support ~= version specifier in requirements.txt and pipfile (#​5902)
  • fix: Version of dependency no longer ignored when CPE product has a 'java' suffix in a product name (#​5901)
  • fix: Do not filter out evidences added by hints (#​5900)
  • fix: fixes FP #​5925 (#​5927)

See the full listing of changes.

v8.4.0

Compare Source

Added
  • feat: Add support for Nexus v3 to NexusAnalyzer (#​5849)
Fixed
  • fix: Hint Analyzer should run before VersionFilter Analyzer (#​5818)
  • chore: switch to sha1-pinning as suggested by Semgrep
  • fix: OSS Index Analyzer SocketTimeoutException exception handling based on warn only parameter (#​5845)
  • fix: use curl with -L to follow github redirect (#​5808)
  • fix: use curl with -L to follow github redirect
  • fix: #​5671 out of memory error (#​5789)
  • fix: #​5671 Exit method as soon as we detect a loop to prevent an infinite loop leading to an OutOfMemoryError

See the full listing of changes.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

  • If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Edited by renovate-bot

Merge request reports