Bump the dependencies group with 6 updates #2094

dependabot · 2025-01-13T06:55:22Z

Bumps the dependencies group with 6 updates:

Package	From	To
org.apache.commons:commons-csv	`1.12.0`	`1.13.0`
org.jooq:jooq	`3.19.16`	`3.19.17`
org.jooq:jooq-codegen	`3.19.16`	`3.19.17`
org.jooq:jooq-meta	`3.19.16`	`3.19.17`
com.diffplug.spotless:spotless-maven-plugin	`2.43.0`	`2.44.1`
org.owasp:dependency-check-maven	`11.1.1`	`12.0.0`

Updates org.apache.commons:commons-csv from 1.12.0 to 1.13.0

Changelog

Sourced from org.apache.commons:commons-csv's changelog.

Apache Commons CSV Version 1.13.0 Release Notes

This document contains the release notes for the 1.13.0 version of Apache Commons CSV. Commons CSV reads and writes files in variations of the Comma Separated Value (CSV) format.

Commons CSV requires at least Java 8.

The Apache Commons CSV library provides a simple interface for reading and writing CSV files of various types.

This is a feature and maintenance release. Java 8 or later is required.

Changes in this version include:

New Features
CSV-313: Add CSVPrinter.getRecordCount(). Thanks to Gary Gregory.
      Add and use CSVParser.Builder and builder() and deprecate CSVParser constructors. Thanks to Gary Gregory.
      CSVFormat.Builder implements Supplier<CSVFormat>. Thanks to Gary Gregory.
      Deprecate CSVFormat.Builder.build() for get(). Thanks to Gary Gregory.
CSV-196: Track byte position #502. Thanks to Yuzhan Jiang, Gary Gregory.
Fixed Bugs

CSV-314: Required OSGi Import-Package version numbers in MANIFEST.MF #504. Thanks to Gary Gregory.

CSV-314: CSVParser.nextRecord() should throw CSVException (an IOException subclass) instead of IOException and IllegalStateException, no method signature changes needed. Thanks to Gary Gregory.

Changes
      Bump org.apache.commons:commons-parent from 76 to 78 [#486](https://github.com/apache/commons-csv/issues/486), [#495](https://github.com/apache/commons-csv/issues/495). Thanks to Gary Gregory, Dependabot.
      Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 [#493](https://github.com/apache/commons-csv/issues/493). Thanks to Gary Gregory, Dependabot.
      Bump commons-io:commons-io from 2.17.0 to 2.18.0 [#505](https://github.com/apache/commons-csv/issues/505). Thanks to Gary Gregory, Dependabot.
      Bump commons-codec:commons-codec from 1.17.1 to 1.17.2. Thanks to Gary Gregory.
      Bump org.apache.commons:commons-parent from 78 to 79. Thanks to Gary Gregory.
Historical list of changes: https://commons.apache.org/proper/commons-csv/changes-report.html

For complete information on Apache Commons CSV, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons CSV website:

https://commons.apache.org/proper/commons-csv/

Download page: https://commons.apache.org/proper/commons-csv/download_csv.cgi

Have fun! -Apache Commons CSV team

... (truncated)

Commits

f2f1cff Prepare for the next release candidate
732c2f8 Prepare for the next release candidate
02b398d Add Checstyle UnnecessaryParentheses
947c514 Add Checstyle SuperFinalize
4579bd3 Add Checstyle SuperClone
a0ff618 Add Checstyle StringLiteralEquality
f69526c Add Checstyle SimplifyBooleanReturn
81f9044 Add Checstyle SimplifyBooleanExpression
6afa33c Add Checstyle MultipleVariableDeclarations
114118c Add Checstyle IllegalInstantiation
Additional commits viewable in compare view

Updates org.jooq:jooq from 3.19.16 to 3.19.17

Updates org.jooq:jooq-codegen from 3.19.16 to 3.19.17

Updates org.jooq:jooq-meta from 3.19.16 to 3.19.17

Updates org.jooq:jooq-codegen from 3.19.16 to 3.19.17

Updates org.jooq:jooq-meta from 3.19.16 to 3.19.17

Updates com.diffplug.spotless:spotless-maven-plugin from 2.43.0 to 2.44.1

Release notes

Sourced from com.diffplug.spotless:spotless-maven-plugin's releases.

Maven Plugin v2.44.1

Fixed

Deployment was missing part of the CDT formatter, now fixed. (#2384)

Maven Plugin v2.44.0

Headline changes

The long 2.44.0.BETAX period is finally over (sorry, there was a problem in Gradle land).

Spotless now supports linting in addition to formatting.

help wanted: maven api to suppress lints

Changed

Bump default ktlint version to latest 1.3.0 -> 1.4.0. (#2314)

Bump default jackson version to latest 2.18.0 -> 2.18.1. (#2319)

Bump default ktfmt version to latest 0.52 -> 0.53. (#2320)

Bump default ktlint version to latest 1.4.0 -> 1.5.0. (#2354)

Bump minimum eclipse-cdt version to 11.0 (removed support for 10.7). (#2373)

Bump default eclipse version to latest 4.32 -> 4.34. (#2381)

Fixed

You can now use removeUnusedImports and googleJavaFormat at the same time again. (fixes #2159)

The default list of type annotations used by formatAnnotations now includes Jakarta Validation's Valid and constraints validations (fixes #2334)

Maven Plugin v2.44.0.BETA4

Added

Support for line ending policy PRESERVE which just takes the first line ending of every given file as setting (no matter if \n, \r\n or \r) (#2304)

Fixed

ktlint steps now read from the string instead of the file so they don't clobber earlier steps. (fixes #1599)

Maven Plugin v2.44.0.BETA3

Added

Support for rdf (#2261)

Support for buf (#2291)

Changed

Leverage local repository for Equo P2 cache. (#2238)

Add explicit support for CSS via biome. Formatting CSS via biome was already supported as a general formatting step. Biome supports formatting CSS as of 1.8.0 (experimental, opt-in) and 1.9.0 (stable). (#2259)

Bump default google-java-format version to latest 1.23.0 -> 1.24.0. (#2294)

Bump default jackson version to latest 2.17.2 -> 2.18.0. (#2279)

Bump default cleanthat version to latest 2.21 -> 2.22. (#2296)

Fixed

Java import order, ignore duplicate group entries. (#2293)

Maven Plugin v2.44.0.BETA2

Changed

Support toning down sortPom logging. (#2185)

Bump default ktlint version to latest 1.2.1 -> 1.3.0. (#2165)

Bump default ktfmt version to latest 0.49 -> 0.52. (#2172, #2231)

Rename property ktfmt option removeUnusedImport -> removeUnusedImports to match ktfmt. (#2172)

Bump default eclipse version to latest 4.29 -> 4.32. (#2179)

Bump default greclipse version to latest 4.29 -> 4.32. (#2179, #2190)

Bump default cdt version to latest 11.3 -> 11.6. (#2179)

... (truncated)

Changelog

Sourced from com.diffplug.spotless:spotless-maven-plugin's changelog.

spotless-lib and spotless-lib-extra releases

If you are a Spotless user (as opposed to developer), then you are probably looking for:

https://github.com/diffplug/spotless/blob/main/plugin-gradle/CHANGES.md

https://github.com/diffplug/spotless/blob/main/plugin-maven/CHANGES.md

This document is intended for Spotless developers.

We adhere to the keepachangelog format (starting after version 1.27.0).

[Unreleased]

[3.0.1] - 2025-01-07

Fixed

Deployment was missing part of the CDT formatter, now fixed. (#2384)

[3.0.0] - 2025-01-06

Headline changes

All steps now support roundtrip serialization (end of #987).

Spotless now supports linting in addition to formatting.

Changed

Allow setting Eclipse config from a string, not only from files (#2337)

Bump default ktlint version to latest 1.3.0 -> 1.4.0. (#2314)

Add Sort Members feature based on Eclipse JDT implementation. (#2312)

Bump default jackson version to latest 2.18.0 -> 2.18.1. (#2319)

Bump default ktfmt version to latest 0.52 -> 0.53. (#2320)

Bump default ktlint version to latest 1.4.0 -> 1.5.0. (#2354)

Bump minimum eclipse-cdt version to 11.0 (removed support for 10.7). (#2373)

Bump default eclipse version to latest 4.32 -> 4.34. (#2381)

Fixed

You can now use removeUnusedImports and googleJavaFormat at the same time again. (fixes #2159)

The default list of type annotations used by formatAnnotations now includes Jakarta Validation's Valid and constraints validations (fixes #2334)

[3.0.0.BETA4] - 2024-10-24

Added

APIs to support linting. (implemented in #2148, #2149, #2307)

Spotless is still primarily a formatter, not a linter. But when formatting fails, it's more flexible to model those failures as lints so that the formatting can continue and ideally we can also capture the line numbers causing the failure.

Lint models a single change. A FormatterStep can create a lint by:

throwing an exception during formatting, ideally throw Lint.atLine(127, "code", "Well what happened was...")

or by implementing the List<Lint> lint(String content, File file) method to create multiple of them

Support for line ending policy PRESERVE which just takes the first line ending of every given file as setting (no matter if \n, \r\n or \r) (#2304)

Changed

BREAKING Moved PaddedCell.DirtyState to its own top-level class with new methods. (#2148)

BREAKING Removed isClean, applyTo, and applyToAndReturnResultIfDirty from Formatter because users should instead use DirtyState.

FenceStep now uses ConfigurationCacheHack. (#2378 fixes #2317)

Fixed

ktlint steps now read from the string instead of the file so they don't clobber earlier steps. (fixes #1599)

... (truncated)

Commits

c442e3a Published maven/2.44.1
f0d72c3 Published gradle/7.0.1
3dad81e Published lib/3.0.1
da5549b Run deployment on Java 17 (fixes #2384)
f22eda9 Update plugin com.diffplug.spotless to v7.0.0 (#2383)
6aa512e Update plugin com.diffplug.spotless to v7.0.0
cbbdee5 Versions can float again.
da87a22 Published maven/2.44.0
23d98d2 Published gradle/7.0.0
1c2435b Published lib/3.0.0
Additional commits viewable in compare view

Updates org.owasp:dependency-check-maven from 11.1.1 to 12.0.0

Release notes

Sourced from org.owasp:dependency-check-maven's releases.

Version 12.0.0

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Changelog

Sourced from org.owasp:dependency-check-maven's changelog.

Version 12.0.0 (2025-01-11)

feat: report on CVSS v4 (#7204)

feat: show from which dependency the CVE comes in failure report (#7224)

feat: Use Maven settings decryption API for decrypting secrets from settings.xml (#7284)

feat: Extend authentication to support Bearer token for many resources (#7277)

feat: Add a flag to fail when one or more suppression rules are not used (#7244)

fix: add product evidence as vendor to reduce FN (#7295)

fix: Make the HTTP-Client use pre-emptive authentication (#7255)

fix: Add the missing proxy credentials for suppressionFileUser/Password authentication scenario

fix: increase max retry count (#7252)

fix: Make the HTTP-Client use pre-emptive authentication for configured server credentials and extend HTTPClient usage to Nexus search

fix: Tranform into UTC the last modified date from database (#7222)

See the full listing of changes.

Commits

48d567d build: prepare release v12.0.0
69453c8 chore: prepare release
0fd289a chore: Remove code-paths for Java versions <=8 (#7297)
b51921f fix: add product evidence as vendor to reduce FN (#7295)
ae8c06a chore: fixup JQuery LICENSE.txt file which was a full github html page dump (...
5a47091 build(deps): Sanitize dependencies based on dependency:analyze-report results...
57db1ca build(deps): bump commons-beanutils:commons-beanutils from 1.9.4 to 1.10.0 (#...
361fe48 build(deps): bump commons-beanutils:commons-beanutils
09c4c71 build(deps): bump commons-codec:commons-codec from 1.17.1 to 1.17.2 (#7287)
505ddff feat: Use Maven settings decryption API for decrypting secrets from settings....
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 6 updates: | Package | From | To | | --- | --- | --- | | [org.apache.commons:commons-csv](https://github.com/apache/commons-csv) | `1.12.0` | `1.13.0` | | org.jooq:jooq | `3.19.16` | `3.19.17` | | org.jooq:jooq-codegen | `3.19.16` | `3.19.17` | | org.jooq:jooq-meta | `3.19.16` | `3.19.17` | | [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) | `2.43.0` | `2.44.1` | | [org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck) | `11.1.1` | `12.0.0` | Updates `org.apache.commons:commons-csv` from 1.12.0 to 1.13.0 - [Changelog](https://github.com/apache/commons-csv/blob/master/RELEASE-NOTES.txt) - [Commits](apache/commons-csv@rel/commons-csv-1.12.0...rel/commons-csv-1.13.0) Updates `org.jooq:jooq` from 3.19.16 to 3.19.17 Updates `org.jooq:jooq-codegen` from 3.19.16 to 3.19.17 Updates `org.jooq:jooq-meta` from 3.19.16 to 3.19.17 Updates `org.jooq:jooq-codegen` from 3.19.16 to 3.19.17 Updates `org.jooq:jooq-meta` from 3.19.16 to 3.19.17 Updates `com.diffplug.spotless:spotless-maven-plugin` from 2.43.0 to 2.44.1 - [Release notes](https://github.com/diffplug/spotless/releases) - [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md) - [Commits](diffplug/spotless@lib/2.43.0...maven/2.44.1) Updates `org.owasp:dependency-check-maven` from 11.1.1 to 12.0.0 - [Release notes](https://github.com/jeremylong/DependencyCheck/releases) - [Changelog](https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md) - [Commits](jeremylong/DependencyCheck@v11.1.1...v12.0.0) --- updated-dependencies: - dependency-name: org.apache.commons:commons-csv dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.jooq:jooq dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.jooq:jooq-codegen dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.jooq:jooq-meta dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.jooq:jooq-codegen dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.jooq:jooq-meta dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: com.diffplug.spotless:spotless-maven-plugin dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.owasp:dependency-check-maven dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jan 13, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the dependencies group with 6 updates #2094

Bump the dependencies group with 6 updates #2094

dependabot bot commented on behalf of github Jan 13, 2025

Bump the dependencies group with 6 updates #2094

Are you sure you want to change the base?

Bump the dependencies group with 6 updates #2094

Conversation

dependabot bot commented on behalf of github Jan 13, 2025

New Features

Fixed Bugs

Changes

Maven Plugin v2.44.1

Fixed

Maven Plugin v2.44.0

Headline changes

Changed

Fixed

Maven Plugin v2.44.0.BETA4

Added

Fixed

Maven Plugin v2.44.0.BETA3

Added

Changed

Fixed

Maven Plugin v2.44.0.BETA2

Changed

spotless-lib and spotless-lib-extra releases

[Unreleased]

[3.0.1] - 2025-01-07

Fixed

[3.0.0] - 2025-01-06

Headline changes

Changed

Fixed

[3.0.0.BETA4] - 2024-10-24

Added

Changed

Fixed

Version 12.0.0

Version 12.0.0 (2025-01-11)