From 46ceaa8366127ecfd37de688fe141364cf4c537a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 29 Sep 2025 10:50:13 +0000 Subject: [PATCH 1/2] Bump the gradle-version-updates group across 1 directory with 9 updates Bumps the gradle-version-updates group with 6 updates in the /hooks/persistence-defectdojo/hook directory: | Package | From | To | | --- | --- | --- | | [org.springframework:spring-web](https://github.com/spring-projects/spring-framework) | `6.2.10` | `6.2.11` | | [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.19.2` | `2.20.0` | | com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.19.2` | `2.20.0` | | [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.19.0` | `5.20.0` | | [io.freefair.lombok](https://github.com/freefair/gradle-plugins) | `8.14.2` | `9.0.0` | | com.github.ben-manes.versions | `0.52.0` | `0.53.0` | Updates `org.springframework:spring-web` from 6.2.10 to 6.2.11 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.10...v6.2.11) Updates `com.fasterxml.jackson.core:jackson-core` from 2.19.2 to 2.20.0 - [Commits](https://github.com/FasterXML/jackson-core/compare/jackson-core-2.19.2...jackson-core-2.20.0) Updates `com.fasterxml.jackson.core:jackson-annotations` from 2.19.2 to 2.20.0 Updates `com.fasterxml.jackson.core:jackson-databind` from 2.19.2 to 2.20.0 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.19.2 to 2.20.0 Updates `org.mockito:mockito-core` from 5.19.0 to 5.20.0 - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](https://github.com/mockito/mockito/compare/v5.19.0...v5.20.0) Updates `org.mockito:mockito-junit-jupiter` from 5.19.0 to 5.20.0 - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](https://github.com/mockito/mockito/compare/v5.19.0...v5.20.0) Updates `io.freefair.lombok` from 8.14.2 to 9.0.0 - [Release notes](https://github.com/freefair/gradle-plugins/releases) - [Commits](https://github.com/freefair/gradle-plugins/compare/8.14.2...9.0.0) Updates `com.github.ben-manes.versions` from 0.52.0 to 0.53.0 --- updated-dependencies: - dependency-name: org.springframework:spring-web dependency-version: 6.2.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-version-updates - dependency-name: com.fasterxml.jackson.core:jackson-core dependency-version: 2.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates - dependency-name: com.fasterxml.jackson.core:jackson-annotations dependency-version: 2.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates - dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310 dependency-version: 2.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates - dependency-name: org.mockito:mockito-core dependency-version: 5.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates - dependency-name: org.mockito:mockito-junit-jupiter dependency-version: 5.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates - dependency-name: io.freefair.lombok dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: gradle-version-updates - dependency-name: com.github.ben-manes.versions dependency-version: 0.53.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates ... Signed-off-by: dependabot[bot] --- hooks/persistence-defectdojo/hook/build.gradle | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/hooks/persistence-defectdojo/hook/build.gradle b/hooks/persistence-defectdojo/hook/build.gradle index de30dd3f24..a48d2f92ab 100644 --- a/hooks/persistence-defectdojo/hook/build.gradle +++ b/hooks/persistence-defectdojo/hook/build.gradle @@ -4,10 +4,10 @@ plugins { id "java" - id "io.freefair.lombok" version "8.14.2" + id "io.freefair.lombok" version "9.0.0" // https://github.com/ben-manes/gradle-versions-plugin // Run: ./gradlew dependencyUpdates -Drevision=release - id "com.github.ben-manes.versions" version "0.52.0" + id "com.github.ben-manes.versions" version "0.53.0" id "org.sonarqube" version "6.3.1.5724" } @@ -24,11 +24,11 @@ repositories { dependencies { implementation group: "io.securecodebox", name: "defectdojo-client", version: "2.0.1" implementation group: "io.kubernetes", name: "client-java", version: "20.0.1" - implementation group: "org.springframework", name: "spring-web", version: "6.2.10" - implementation group: "com.fasterxml.jackson.core", name: "jackson-core", version: "2.19.2" - implementation group: "com.fasterxml.jackson.core", name: "jackson-annotations", version: "2.19.2" - implementation group: "com.fasterxml.jackson.core", name: "jackson-databind", version: "2.19.2" - implementation group: "com.fasterxml.jackson.datatype", name: "jackson-datatype-jsr310", version: "2.19.2" + implementation group: "org.springframework", name: "spring-web", version: "6.2.11" + implementation group: "com.fasterxml.jackson.core", name: "jackson-core", version: "2.20.0" + implementation group: "com.fasterxml.jackson.core", name: "jackson-annotations", version: "2.20.0" + implementation group: "com.fasterxml.jackson.core", name: "jackson-databind", version: "2.20.0" + implementation group: "com.fasterxml.jackson.datatype", name: "jackson-datatype-jsr310", version: "2.20.0" implementation group: "org.slf4j", name: "slf4j-api", version: "2.0.17" implementation group: "org.slf4j", name: "slf4j-log4j12", version: "2.0.17" // If I try to notate this like the others (with separate strings) I got errors. No idea why sh... Gradle @@ -36,8 +36,8 @@ dependencies { // https://github.com/junit-team/junit5-samples/blob/r5.10.0/junit5-jupiter-starter-gradle/build.gradle testImplementation(platform("org.junit:junit-bom:5.13.4")) testImplementation("org.junit.jupiter:junit-jupiter") - testImplementation group: "org.mockito", name: "mockito-core", version: "5.19.0" - testImplementation group: "org.mockito", name: "mockito-junit-jupiter", version: "5.19.0" + testImplementation group: "org.mockito", name: "mockito-core", version: "5.20.0" + testImplementation group: "org.mockito", name: "mockito-junit-jupiter", version: "5.20.0" testImplementation group: 'org.hamcrest', name: 'java-hamcrest', version: '2.0.0.0' testImplementation group: 'uk.org.webcompere', name: 'system-stubs-jupiter', version: '2.1.8' testRuntimeOnly("org.junit.jupiter:junit-jupiter-engine") From b90ba2ac1d64ac17884ebaa4b407b64da16c84bb Mon Sep 17 00:00:00 2001 From: Sven Strittmatter Date: Wed, 1 Oct 2025 13:39:22 +0200 Subject: [PATCH 2/2] Update hooks/persistence-defectdojo/hook/build.gradle Signed-off-by: Sven Strittmatter --- hooks/persistence-defectdojo/hook/build.gradle | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/hooks/persistence-defectdojo/hook/build.gradle b/hooks/persistence-defectdojo/hook/build.gradle index a48d2f92ab..3927213cf4 100644 --- a/hooks/persistence-defectdojo/hook/build.gradle +++ b/hooks/persistence-defectdojo/hook/build.gradle @@ -26,7 +26,9 @@ dependencies { implementation group: "io.kubernetes", name: "client-java", version: "20.0.1" implementation group: "org.springframework", name: "spring-web", version: "6.2.11" implementation group: "com.fasterxml.jackson.core", name: "jackson-core", version: "2.20.0" - implementation group: "com.fasterxml.jackson.core", name: "jackson-annotations", version: "2.20.0" + // jackson-annotations has a different version scheme w/o patch digit! + // https://github.com/FasterXML/jackson?tab=readme-ov-file#active-jackson-projects + implementation group: "com.fasterxml.jackson.core", name: "jackson-annotations", version: "2.20" implementation group: "com.fasterxml.jackson.core", name: "jackson-databind", version: "2.20.0" implementation group: "com.fasterxml.jackson.datatype", name: "jackson-datatype-jsr310", version: "2.20.0" implementation group: "org.slf4j", name: "slf4j-api", version: "2.0.17"