Bumps org.owasp:dependency-check-maven from 9.0.4 to 9.0.5.

Release notes

Sourced from org.owasp:dependency-check-maven's releases.

Version 9.0.5

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Changelog

Sourced from org.owasp:dependency-check-maven's changelog.

Version 9.0.5 (2023-12-13)

fix: make NVD API endpoint configurable (#6287)

fix: synch last modified timestamp for NVD API (#6281)

fix: read NVD cache meta files if cache.properties does not exist (#6282)

fix: correct property for nonProxyHosts (#6285)

fix: reduce apache http logging (#6280)

fix: store last modified timestamp for RetireJS and the Hosted Suppression File in db (#6271)

build: bump golang in the docker image (#6274)

fix: use temporary files to reduce memory usage during the NVD Update (#6270)

fix: use BIT for Oracle DB instead of Boolean when calling prepared statements (#6264)

fix: showing all reference tags in reports (#6259)

See the full listing of changes.

Commits

5a5b010 build: prepare release v9.0.5
0472803 docs: release notes
58d8c2a fix(fp): fixes FP #6016 (#6290)
0b56fb3 fix: make nvd api endpoint configurable (#6287)
f14e0f9 fix: synch last modified timestamp for NVD API (#6281)
6769966 fix: read meta files if cache.properties does not exist (#6282)
4b3287b fix: set correct property for nonProxyHosts (#6285)
17186db fix: reduce apache http logging (#6280)
2a388f1 fix: store last modified timestamp in db (#6271)
41fc5a2 build: bump golang (#6274)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)