Bumps org.owasp:dependency-check-maven from 9.0.7 to 9.0.8.
Release notesSourced from org.owasp:dependency-check-maven's releases.
ChangelogVersion 9.0.8
Refer to the CHANGELOG.md for information about improvements and upgrade notes.
Sourced from org.owasp:dependency-check-maven's changelog.
CommitsVersion 9.0.8 (2024-01-06)
- fix: favor stability over performance (#6349)
- chore: replace commons-io with core java calls (#6343)
- fix: improve error reporting for invalid H2 database (#6339)
- fix: rework fix for closing input streams on errors correctly (#6338)
- fix: reduce chance NVD API block updates due to rate limit (#6333)
- fix: ensure open handles will not leak on errors (#6326)
- fix: improve error reporting (#6324)
See the full listing of changes.
4a32ff1build: prepare release v9.0.83d648c5docs: release 9.0.8293c98dbuild(deps): bump org.apache.maven.plugins:maven-project-info-reports-plugin ...361e255build(deps): bump org.codehaus.mojo:versions-maven-plugin from 2.16.1 to 2.16...be5c4a4fix: favor stability over performance (#6349)a110bd0chore: replace commons-io with core java calls (#6343)6146364build(deps): bump org.jetbrains:annotations from 24.0.1 to 24.1.0 (#6097)77adb07build(deps): bump actions/setup-node from 4.0.0 to 4.0.1 (#6341)9199230fix: improve error reporting for invalid H2 database (#6339)401d031fix: rework fix for closing input streams on errors correctly (#6338)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)