Update dependency org.owasp:dependency-check-maven to v6.5.3
This MR contains the following updates:
Package | Update | Type | Change | References |
---|---|---|---|---|
org.owasp:dependency-check-maven (source) | patch | build |
6.5.0 -> 6.5.3
|
homepage, source |
Release Notes
dependency-check/DependencyCheck (org.owasp:dependency-check-maven)
v6.5.3
Changed
- Performance improvements for some Maven projects (see #3923 and #3931).
- Fixed bug in npm version handling introduced in 6.5.2 (see #3956).
- Improved the node package analyzer to correctly report the origin of a dependency (see #3970).
- General code maintenance and false positive reductions.
See the full listing of changes.
v6.5.2
Changed
- Fixed false positives around log4j-api and Log4j-web (#3910 & #3937).
- Bug fix when processing NPM lock files (#3893).
- Added missing
pnpm
argmument to the CLI (#3916). - General code maintenance and false positive reductions.
See the full listing of changes.
v6.5.1
Changed
- Updated the dependency-check-maven plugin to correctly support SNAPSHOT version when a classifier is specified (#3787).
- Improved the analysis of Swift package manager (package.resolved - see #3813).
- General code maintenance and false positive reductions.
See the full listing of changes.
Configuration
-
If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot.
Edited by Renovatebot Axual