Merge branch 'main' into client-provider-mappings

beeme1mr · web-flow · commit c08b8951f38a · 2023-05-18T14:07:12.000-04:00
diff --git a/.github/workflows/lint-pr.yml b/.github/workflows/lint-pr.yml
@@ -18,6 +18,6 @@ jobs:
     name: Validate PR title
     runs-on: ubuntu-latest
     steps:
-      - uses: amannn/action-semantic-pull-request@ff373f4e8056b732dfd0eadd42ae54c004e5523b
+      - uses: amannn/action-semantic-pull-request@3bb5af3c0c8f5e85d328728c1ab68dd6cefd03af
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/merge.yml b/.github/workflows/merge.yml
@@ -49,7 +49,7 @@ jobs:
       run: mvn --batch-mode --update-snapshots verify
 
     - name: Upload coverage to Codecov
-      uses: codecov/codecov-action@b4dfea724ff5d8e51bb4dffdc668c0d964df6103
+      uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d
       with:
         flags: unittests # optional
         name: coverage # optional
diff --git a/.github/workflows/pullrequest.yml b/.github/workflows/pullrequest.yml
@@ -26,7 +26,7 @@ jobs:
           cache: maven
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@deb312c60b474a4b2a0f60399ae8fad9fa46e2bc
+        uses: github/codeql-action/init@6cfb483131f3f74950a251876da81c79a6fcbdec
         with:
           languages: java
 
@@ -42,7 +42,7 @@ jobs:
         run: mvn --batch-mode --update-snapshots verify -P e2e-test
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@b4dfea724ff5d8e51bb4dffdc668c0d964df6103
+        uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d
         with:
           token: ${{ secrets.CODECOV_TOKEN }} # not required for public repos
           flags: unittests # optional
@@ -51,4 +51,4 @@ jobs:
           verbose: true # optional (default = false)
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@deb312c60b474a4b2a0f60399ae8fad9fa46e2bc
+        uses: github/codeql-action/analyze@6cfb483131f3f74950a251876da81c79a6fcbdec
diff --git a/.github/workflows/static-code-scanning.yaml b/.github/workflows/static-code-scanning.yaml
@@ -33,12 +33,12 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@deb312c60b474a4b2a0f60399ae8fad9fa46e2bc
+        uses: github/codeql-action/init@6cfb483131f3f74950a251876da81c79a6fcbdec
         with:
           languages: java
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@deb312c60b474a4b2a0f60399ae8fad9fa46e2bc
+        uses: github/codeql-action/autobuild@6cfb483131f3f74950a251876da81c79a6fcbdec
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@deb312c60b474a4b2a0f60399ae8fad9fa46e2bc
+        uses: github/codeql-action/analyze@6cfb483131f3f74950a251876da81c79a6fcbdec
diff --git a/pom.xml b/pom.xml
@@ -175,7 +175,7 @@
       <plugin>
         <groupId>org.codehaus.mojo</groupId>
         <artifactId>build-helper-maven-plugin</artifactId>
-        <version>3.3.0</version>
+        <version>3.4.0</version>
         <executions>
           <execution>
             <phase>validate</phase>
@@ -190,7 +190,7 @@
       <plugin>
         <groupId>org.cyclonedx</groupId>
         <artifactId>cyclonedx-maven-plugin</artifactId>
-        <version>2.7.8</version>
+        <version>2.7.9</version>
         <configuration>
           <projectType>library</projectType>
           <schemaVersion>1.3</schemaVersion>
@@ -250,7 +250,7 @@
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-surefire-plugin</artifactId>
-        <version>3.0.0</version>
+        <version>3.1.0</version>
         <configuration>
           <argLine>
             ${surefireArgLine}
@@ -268,7 +268,7 @@
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-failsafe-plugin</artifactId>
-        <version>3.0.0</version>
+        <version>3.1.0</version>
         <configuration>
           <argLine>
             ${surefireArgLine}
@@ -416,7 +416,7 @@
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-pmd-plugin</artifactId>
-        <version>3.20.0</version>
+        <version>3.21.0</version>
         <executions>
           <execution>
             <id>run-pmd</id>
