This is an automated email from the ASF dual-hosted git repository.
lewismc pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/any23.git
The following commit(s) were added to refs/heads/master by this push:
new 04f37eb0 Bump mockito-core from 4.4.0 to 4.5.0 (#279)
04f37eb0 is described below
commit 04f37eb04af152b97058c0bbf4f8475a1e81638c
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Tue Apr 26 14:34:08 2022 -0700
Bump mockito-core from 4.4.0 to 4.5.0 (#279)
* Bump mockito-core from 4.4.0 to 4.5.0
Bumps [mockito-core](https://github.com/mockito/mockito) from 4.4.0 to
4.5.0.
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](https://github.com/mockito/mockito/compare/v4.4.0...v4.5.0)
---
updated-dependencies:
- dependency-name: org.mockito:mockito-core
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]>
* Bump apache from 25 to 26 (#277)
Bumps [apache](https://github.com/apache/maven-apache-parent) from 25 to 26.
- [Release notes](https://github.com/apache/maven-apache-parent/releases)
- [Commits](https://github.com/apache/maven-apache-parent/commits)
---
updated-dependencies:
- dependency-name: org.apache:apache
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
* Bump forbiddenapis from 3.2 to 3.3 (#278)
Bumps [forbiddenapis](https://github.com/policeman-tools/forbidden-apis)
from 3.2 to 3.3.
- [Release
notes](https://github.com/policeman-tools/forbidden-apis/releases)
-
[Commits](https://github.com/policeman-tools/forbidden-apis/compare/3.2...3.3)
---
updated-dependencies:
- dependency-name: de.thetaphi:forbiddenapis
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
* ANY23-591 Bump mockito-core from 4.4.0 to 4.5.0
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lewis John McGibbney <[email protected]>
---
pom.xml | 7 ++++---
1 file changed, 4 insertions(+), 3 deletions(-)
diff --git a/pom.xml b/pom.xml
index 79a73ca8..22ccefc5 100644
--- a/pom.xml
+++ b/pom.xml
@@ -154,7 +154,6 @@
<email>[email protected]</email>
<roles>
<role>Committer</role>
- <role>PMC Member</role>
</roles>
</developer>
<developer>
@@ -673,7 +672,7 @@
<dependency>
<groupId>org.mockito</groupId>
<artifactId>mockito-core</artifactId>
- <version>4.4.0</version>
+ <version>4.5.0</version>
<scope>test</scope>
</dependency>
<!-- END: Test Dependencies -->
@@ -834,7 +833,9 @@
<configuration>
<fail>true</fail>
<excludeVulnerabilityIds>
- <exclude>a5490160-b0d8-4da1-adf1-23e62165188f</exclude>
+ <!--
https://ossindex.sonatype.org/vulnerability/af5f9c26-c09d-401f-a7fc-0785eeabeab3?component-type=maven&component-name=org.apache.poi.poi
-->
+ <!-- Remove once we upgrade to
org.apache.tika:tika-parsers-standard-package:jar:2.3.0 -->
+ <exclude>af5f9c26-c09d-401f-a7fc-0785eeabeab3</exclude>
</excludeVulnerabilityIds>
</configuration>
<executions>