Skip to content

Bump org.owasp:dependency-check-maven from 12.1.1 to 12.1.3#594

Merged
prachi-okta merged 1 commit intomasterfrom
dependabot/maven/org.owasp-dependency-check-maven-12.1.3
Jul 2, 2025
Merged

Bump org.owasp:dependency-check-maven from 12.1.1 to 12.1.3#594
prachi-okta merged 1 commit intomasterfrom
dependabot/maven/org.owasp-dependency-check-maven-12.1.3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Jun 10, 2025

Bumps org.owasp:dependency-check-maven from 12.1.1 to 12.1.3.

Release notes

Sourced from org.owasp:dependency-check-maven's releases.

Version 12.1.3

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Version 12.1.2

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Changelog

Sourced from org.owasp:dependency-check-maven's changelog.

Version 12.1.3 (2025-06-10)

  • fix: correct regex matches introduced in 12.1.2 (#7726)
  • build(deps): bump org.semver4j:semver4j from 5.7.0 to 5.7.1 (#7718)
  • build(deps): bump junit.version from 5.13.0 to 5.13.1 (#7719)

See the full listing of changes

Version 12.1.2 (2025-06-07)

  • fix: Allow configuring OSS Index user/pw directly (#7640)
  • fix: remove vulnerable transitive dependency - beanutils (#7705)
  • fix: Simplify PHP framework suppression for Composer (#7693)
  • fix: update CPE pattern to remove FP (#7684)
  • fix(cli): Patch generated Windows shell script for JAVACMD installs with spaces (#7653)
  • fix: Resolve various WCAG accessibility / css issues in the HTML report (#7629)
  • fix: #7510 Display a dedicated message when receiving an HTTP 403 (#7575)
  • docs: Make Vulnerability Sources in Related Work clearer (#7691)
  • docs: #7610 add a reference to NVD mirroring in getting started documentation (#7611)

See the full listing of changes

Commits
  • dfd437e build: prepare release v12.1.3
  • 84d3436 docs: release 12.1.3
  • f9e6b79 fix: correct regex matches introduced in 12.1.2 (#7726)
  • 2b548f8 build(deps): bump org.semver4j:semver4j from 5.7.0 to 5.7.1 (#7718)
  • a58584f build(deps): bump junit.version from 5.13.0 to 5.13.1 (#7719)
  • 7fdad34 build(deps): bump org.semver4j:semver4j from 5.7.0 to 5.7.1
  • cc18626 build: Release 12.1.2 (#7714)
  • 7f9b258 build: prepare for next development iteration
  • 4744206 build: prepare release v12.1.2
  • 624c3ca docs: release 12.1.2
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jun 10, 2025
@dependabot dependabot bot requested a review from prachi-okta as a code owner June 10, 2025 21:12
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jun 10, 2025
@prachi-okta prachi-okta merged commit 108b84b into master Jul 2, 2025
4 checks passed
@dependabot dependabot bot deleted the dependabot/maven/org.owasp-dependency-check-maven-12.1.3 branch July 2, 2025 17:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant