[GitHub] [directory-server] dependabot[bot] opened a new pull request, #87: Bump github/codeql-action from 2.3.5 to 2.3.6
dependabot[bot] opened a new pull request, #87: URL: https://github.com/apache/directory-server/pull/87 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.3.5 to 2.3.6. Changelog Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md;>github/codeql-action's changelog. CodeQL Action Changelog [UNRELEASED] No user facing changes. 2.3.6 - 01 Jun 2023 Update default CodeQL bundle version to 2.13.3. https://redirect.github.com/github/codeql-action/pull/1698;>#1698 2.3.5 - 25 May 2023 Allow invalid URIs to be used as values to artifactLocation.uri properties. This reverses a change from https://redirect.github.com/github/codeql-action/pull/1668;>#1668 that inadvertently led to stricter validation of some URI values. https://redirect.github.com/github/codeql-action/pull/1705;>#1705 Gracefully handle invalid URIs when fingerprinting. https://redirect.github.com/github/codeql-action/pull/1694;>#1694 2.3.4 - 24 May 2023 Updated the SARIF 2.1.0 JSON schema file to the latest from https://github.com/oasis-tcs/sarif-spec/blob/123e95847b13fbdd4cbe2120fa5e33355d4a042b/Schemata/sarif-schema-2.1.0.json;>oasis-tcs/sarif-spec. https://redirect.github.com/github/codeql-action/pull/1668;>#1668 We are rolling out a feature in May 2023 that will disable Python dependency installation for new users of the CodeQL Action. This improves the speed of analysis while having only a very minor impact on results. https://redirect.github.com/github/codeql-action/pull/1676;>#1676 We are improving the way that https://github.com/github/codeql-action/releases;>CodeQL bundles are tagged to make it possible to easily identify bundles by their CodeQL semantic version. https://redirect.github.com/github/codeql-action/pull/1682;>#1682 As of CodeQL CLI 2.13.4, CodeQL bundles will be tagged using semantic versions, for example codeql-bundle-v2.13.4, instead of timestamps, like codeql-bundle-20230615. This change does not affect the majority of workflows, and we will not be changing tags for existing bundle releases. Some workflows with custom logic that depends on the specific format of the CodeQL bundle tag may need to be updated. For example, if your workflow matches CodeQL bundle tag names against a codeql-bundle-mmdd pattern, you should update it to also recognize codeql-bundle-vx.y.z tags. Remove the requirement for on.push and on.pull_request to trigger on the same branches. https://redirect.github.com/github/codeql-action/pull/1675;>#1675 2.3.3 - 04 May 2023 Update default CodeQL bundle version to 2.13.1. https://redirect.github.com/github/codeql-action/pull/1664;>#1664 You can now configure CodeQL within your code scanning workflow by passing a config input to the init Action. See https://aka.ms/code-scanning-docs/config-file;>Using a custom configuration file for more information about configuring code scanning. https://redirect.github.com/github/codeql-action/pull/1590;>#1590 2.3.2 - 27 Apr 2023 No user facing changes. 2.3.1 - 26 Apr 2023 No user facing changes. 2.3.0 - 21 Apr 2023 Update default CodeQL bundle version to 2.13.0. https://redirect.github.com/github/codeql-action/pull/1649;>#1649 Bump the minimum CodeQL bundle version to 2.8.5. https://redirect.github.com/github/codeql-action/pull/1618;>#1618 2.2.12 - 13 Apr 2023 Include the value of the GITHUB_RUN_ATTEMPT environment variable in the telemetry sent to GitHub. https://redirect.github.com/github/codeql-action/pull/1640;>#1640 Improve the ease of debugging failed runs configured using https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning-for-a-repository#configuring-code-scanning-automatically;>default setup. The CodeQL Action will now upload diagnostic information to Code Scanning from failed runs configured using default setup. You can view this diagnostic information on the https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/about-the-tool-status-page;>tool status page. https://redirect.github.com/github/codeql-action/pull/1619;>#1619 2.2.11 - 06 Apr 2023 ... (truncated) Commits https://github.com/github/codeql-action/commit/83f0fe6c4988d98a455712a27f0255212bba9bd4;>83f0fe6 Merge pull request https://redirect.github.com/github/codeql-action/issues/1713;>#1713 from github/update-v2.3.6-96f284028 https://github.com/github/codeql-action/commit/5c8f4be0e98de2abecc7af538676cf2384a881fc;>5c8f4be Update changelog for v2.3.6 https://github.com/github/codeql-action/commit/96f284028262d223858647b5680642a84608cc87;>96f2840 Merge pull request https://redirect.github.com/github/codeql-action/issues/1711;>#1711 from
[GitHub] [directory-project] bdemers opened a new pull request, #8: Update Maven Plugin and Remote Resource Plugins
bdemers opened a new pull request, #8: URL: https://github.com/apache/directory-project/pull/8 - Update Maven Plugin Plugin 3.9.0 - Update Maven Remote Resources Plugin to 3.1.0 Removes build warnings caused by Removes Resources Plugin -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[GitHub] [directory-scimple] bdemers merged pull request #317: Bump extra-enforcer-rules from 1.6.2 to 1.7.0
bdemers merged PR #317: URL: https://github.com/apache/directory-scimple/pull/317 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[GitHub] [directory-scimple] bdemers merged pull request #318: Bump gradle-enterprise-maven-extension from 1.17.2 to 1.17.3
bdemers merged PR #318: URL: https://github.com/apache/directory-scimple/pull/318 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[GitHub] [directory-scimple] bdemers merged pull request #319: Bump jackson-bom from 2.15.1 to 2.15.2
bdemers merged PR #319: URL: https://github.com/apache/directory-scimple/pull/319 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[GitHub] [directory-scimple] bdemers merged pull request #320: Bump swagger-annotations from 2.2.10 to 2.2.11
bdemers merged PR #320: URL: https://github.com/apache/directory-scimple/pull/320 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[GitHub] [directory-scimple] bdemers merged pull request #321: Bump common-custom-user-data-maven-extension from 1.11.1 to 1.12
bdemers merged PR #321: URL: https://github.com/apache/directory-scimple/pull/321 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[GitHub] [directory-scimple] dependabot[bot] opened a new pull request, #321: Bump common-custom-user-data-maven-extension from 1.11.1 to 1.12
dependabot[bot] opened a new pull request, #321: URL: https://github.com/apache/directory-scimple/pull/321 Bumps [common-custom-user-data-maven-extension](https://github.com/gradle/common-custom-user-data-maven-extension) from 1.11.1 to 1.12. Release notes Sourced from https://github.com/gradle/common-custom-user-data-maven-extension/releases;>common-custom-user-data-maven-extension's releases. 1.12 [NEW] Overrides via system properties are consolidated https://redirect.github.com/gradle/common-custom-user-data-maven-extension/issues/108;>#108 [NEW] Detect BuildKite CI and add respective custom tags, values and links [FIX] Generate correct GitHub Actions Build and GitHub/GitLab Source links to repositories not hosted at github.com or gitlab.com Commits https://github.com/gradle/common-custom-user-data-maven-extension/commit/9452912f4b176691dfdf8444201dccdfd47beadd;>9452912 [maven-release-plugin] prepare release v1.12 https://github.com/gradle/common-custom-user-data-maven-extension/commit/9572c7896e95b393a0ea4838cd6762081a366996;>9572c78 Revert [maven-release-plugin] prepare release v1.12 https://github.com/gradle/common-custom-user-data-maven-extension/commit/2f6b1a869ca668d3cb36b421db295a35a6f334da;>2f6b1a8 [maven-release-plugin] prepare release v1.12 https://github.com/gradle/common-custom-user-data-maven-extension/commit/0b8e26c8c1eafc6ec9e6e6cc5e9799afae1cf599;>0b8e26c [maven-release-plugin] prepare for next development iteration https://github.com/gradle/common-custom-user-data-maven-extension/commit/b1343f392690a5049efbbccf0a9dc01cee31be41;>b1343f3 [maven-release-plugin] prepare release v1.12 https://github.com/gradle/common-custom-user-data-maven-extension/commit/58e5cc8a944ce6ebf0946f2071defce8ae77f78f;>58e5cc8 Updated release/changes.md https://github.com/gradle/common-custom-user-data-maven-extension/commit/3577c56dd6133b224cce51a516d73fc6af5d5b2a;>3577c56 Merge pull request https://redirect.github.com/gradle/common-custom-user-data-maven-extension/issues/130;>#130 from gradle/tylerbertrand/combine-dependabot-prs-sche... https://github.com/gradle/common-custom-user-data-maven-extension/commit/2442f582fec591fba26b938f4e8a87c24a217078;>2442f58 Push back combine-dependabot-prs workflow 1 hour https://github.com/gradle/common-custom-user-data-maven-extension/commit/4519326c13b7f07ea46edcba00a17de2f51c77cb;>4519326 Merge pull request https://redirect.github.com/gradle/common-custom-user-data-maven-extension/issues/126;>#126 from gradle/gk/buildkite https://github.com/gradle/common-custom-user-data-maven-extension/commit/78bdb57af9063c4fe9c17052e215cc6961fdb290;>78bdb57 PR fix: codestyle Additional commits viewable in https://github.com/gradle/common-custom-user-data-maven-extension/compare/v1.11.1...v1.12;>compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For
[GitHub] [directory-scimple] dependabot[bot] opened a new pull request, #320: Bump swagger-annotations from 2.2.10 to 2.2.11
dependabot[bot] opened a new pull request, #320: URL: https://github.com/apache/directory-scimple/pull/320 Bumps swagger-annotations from 2.2.10 to 2.2.11. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[GitHub] [directory-scimple] dependabot[bot] opened a new pull request, #319: Bump jackson-bom from 2.15.1 to 2.15.2
dependabot[bot] opened a new pull request, #319: URL: https://github.com/apache/directory-scimple/pull/319 Bumps [jackson-bom](https://github.com/FasterXML/jackson-bom) from 2.15.1 to 2.15.2. Commits https://github.com/FasterXML/jackson-bom/commit/f6305252472deb035f9e2d6b89a773a2abe340c5;>f630525 [maven-release-plugin] prepare release jackson-bom-2.15.2 https://github.com/FasterXML/jackson-bom/commit/cbb8d3ca00ae164de0dddba3cb6ae742989dea07;>cbb8d3c 2.15.2 release https://github.com/FasterXML/jackson-bom/commit/17e60d37d0e027b7c0c0761e846572cd08e36658;>17e60d3 Back to snapshot dep https://github.com/FasterXML/jackson-bom/commit/2dfb8e3fde7421c942d17a0f15fc8a06856eedc4;>2dfb8e3 [maven-release-plugin] prepare for next development iteration See full diff in https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.15.1...jackson-bom-2.15.2;>compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[GitHub] [directory-scimple] dependabot[bot] opened a new pull request, #318: Bump gradle-enterprise-maven-extension from 1.17.2 to 1.17.3
dependabot[bot] opened a new pull request, #318: URL: https://github.com/apache/directory-scimple/pull/318 Bumps gradle-enterprise-maven-extension from 1.17.2 to 1.17.3. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[GitHub] [directory-scimple] dependabot[bot] opened a new pull request, #317: Bump extra-enforcer-rules from 1.6.2 to 1.7.0
dependabot[bot] opened a new pull request, #317: URL: https://github.com/apache/directory-scimple/pull/317 Bumps [extra-enforcer-rules](https://github.com/mojohaus/extra-enforcer-rules) from 1.6.2 to 1.7.0. Release notes Sourced from https://github.com/mojohaus/extra-enforcer-rules/releases;>extra-enforcer-rules's releases. 1.7.0 :boom: Breaking changes Move to new Enforcer API - require m-enforcer-p 3.2.0 (https://redirect.github.com/mojohaus/extra-enforcer-rules/pull/263;>#263) https://github.com/slawekjaranowski;>@slawekjaranowski New features and improvements Recognize JDK 21 class format (https://redirect.github.com/mojohaus/extra-enforcer-rules/pull/262;>#262) https://github.com/wendigo;>@wendigo Dependency updates Bump enforcer-api from 3.2.1 to 3.3.0 (https://redirect.github.com/mojohaus/extra-enforcer-rules/pull/258;>#258) https://github.com/dependabot;>@dependabot Bump spring-core from 5.3.26 to 5.3.27 in /src/it/banduplicate-classes-wildcard-exclusion (https://redirect.github.com/mojohaus/extra-enforcer-rules/pull/259;>#259) https://github.com/dependabot;>@dependabot Commits https://github.com/mojohaus/extra-enforcer-rules/commit/1eeaa85285c3207e7eb5f6c5a81b0ff310dd9a74;>1eeaa85 [maven-release-plugin] prepare release 1.7.0 https://github.com/mojohaus/extra-enforcer-rules/commit/b23d7dba205c9e5ff87a59be3ae75044085d10b9;>b23d7db Move to new Enforcer API - require m-enforcer-p 3.2.0 https://github.com/mojohaus/extra-enforcer-rules/commit/b7ba48d77830bd62639d3119a94ce878bf691904;>b7ba48d Recognize JDK 21 class format https://github.com/mojohaus/extra-enforcer-rules/commit/1a96c60411a630d8d7f6022b3b396ad0bb1f8416;>1a96c60 Bump enforcer-api from 3.2.1 to 3.3.0 https://github.com/mojohaus/extra-enforcer-rules/commit/9f4b63876237ca9d937112f4363c47541d561e39;>9f4b638 Bump spring-core in /src/it/banduplicate-classes-wildcard-exclusion https://github.com/mojohaus/extra-enforcer-rules/commit/582a916082ca57fcf80791adb7cb08c51119db32;>582a916 [maven-release-plugin] prepare for next development iteration See full diff in https://github.com/mojohaus/extra-enforcer-rules/compare/1.6.2...1.7.0;>compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[GitHub] [directory-kerby] dependabot[bot] opened a new pull request, #217: Bump maven-checkstyle-plugin from 3.2.1 to 3.3.0
dependabot[bot] opened a new pull request, #217: URL: https://github.com/apache/directory-kerby/pull/217 Bumps [maven-checkstyle-plugin](https://github.com/apache/maven-checkstyle-plugin) from 3.2.1 to 3.3.0. Commits https://github.com/apache/maven-checkstyle-plugin/commit/9b34b4415978855f629015f42d09a0bc549811c7;>9b34b44 [maven-release-plugin] prepare release maven-checkstyle-plugin-3.3.0 https://github.com/apache/maven-checkstyle-plugin/commit/fe2379d2b63d47ba1259c43140f97934130a894c;>fe2379d [MCHECKSTYLE-436] Replace CheckstyleReportGenerator with a new CheckstyleRepo... https://github.com/apache/maven-checkstyle-plugin/commit/b08abc20d963f41b1510e12136f0f09853f9e14c;>b08abc2 [MCHECKSTYLE-435] Remove deprecated RSS feature https://github.com/apache/maven-checkstyle-plugin/commit/71bc1ff6201bb437a6440b097a6e30ec5bcc55be;>71bc1ff [MPMD-377] Upgrade plugins and components (in ITs) https://github.com/apache/maven-checkstyle-plugin/commit/d96baba4df00e3e0f254445e21bbaf3560438f55;>d96baba [MCHECKSTYLE-428] Upgrade parent POM to version 39 https://github.com/apache/maven-checkstyle-plugin/commit/e3894a09b3744249e3a2b75332b654af87d3bf2f;>e3894a0 Fix message https://github.com/apache/maven-checkstyle-plugin/commit/b72b1f6afccd548045048af1c8af90df740db4e8;>b72b1f6 Bump build-helper-maven-plugin from 3.3.0 to 3.4.0 (https://redirect.github.com/apache/maven-checkstyle-plugin/issues/115;>#115) https://github.com/apache/maven-checkstyle-plugin/commit/0d90feae462d921f5c3847d7acac40fc6881b876;>0d90fea Auto-link MCHECKSTYLE Jira https://github.com/apache/maven-checkstyle-plugin/commit/9ddd0f89e3c4daf910a874c225fdf9a95d718a10;>9ddd0f8 [maven-release-plugin] prepare for next development iteration https://github.com/apache/maven-checkstyle-plugin/commit/d757053fcaa4a224ac856709e6caaf2aab4bd945;>d757053 [maven-release-plugin] prepare release maven-checkstyle-plugin-3.2.2 Additional commits viewable in https://github.com/apache/maven-checkstyle-plugin/compare/maven-checkstyle-plugin-3.2.1...maven-checkstyle-plugin-3.3.0;>compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[GitHub] [directory-kerby] dependabot[bot] opened a new pull request, #216: Bump commons-io from 2.11.0 to 2.12.0
dependabot[bot] opened a new pull request, #216: URL: https://github.com/apache/directory-kerby/pull/216 Bumps commons-io from 2.11.0 to 2.12.0. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[GitHub] [directory-kerby] dependabot[bot] opened a new pull request, #215: Bump github/codeql-action from 2.3.5 to 2.3.6
dependabot[bot] opened a new pull request, #215: URL: https://github.com/apache/directory-kerby/pull/215 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.3.5 to 2.3.6. Commits https://github.com/github/codeql-action/commit/83f0fe6c4988d98a455712a27f0255212bba9bd4;>83f0fe6 Merge pull request https://redirect.github.com/github/codeql-action/issues/1713;>#1713 from github/update-v2.3.6-96f284028 https://github.com/github/codeql-action/commit/5c8f4be0e98de2abecc7af538676cf2384a881fc;>5c8f4be Update changelog for v2.3.6 https://github.com/github/codeql-action/commit/96f284028262d223858647b5680642a84608cc87;>96f2840 Merge pull request https://redirect.github.com/github/codeql-action/issues/1711;>#1711 from github/henrymercer/improve-supported-versions-u... https://github.com/github/codeql-action/commit/89c4c9e65cd3faf5d84dba8f43bb308fae40336d;>89c4c9e Merge pull request https://redirect.github.com/github/codeql-action/issues/1678;>#1678 from github/henrymercer/default-setup-safeguarding https://github.com/github/codeql-action/commit/26f16a5e63c7bebdcf17b2a6d1c7fc1861a0c611;>26f16a5 Rephrase the still supported calculation to make it clearer https://github.com/github/codeql-action/commit/955f8596aed9d71c454c46b251302b150bc1adcb;>955f859 Fix sign error https://github.com/github/codeql-action/commit/e7cff66ce1871fdb3b9cdf054e5550485c0b8d12;>e7cff66 Fix push https://github.com/github/codeql-action/commit/afdba763260a797d16bcce8e498641fefd604731;>afdba76 Wait a week before dropping support for end of life GHES versions https://github.com/github/codeql-action/commit/07e43a22080d8828875556729afa669d200b9515;>07e43a2 Open PR with gh CLI https://github.com/github/codeql-action/commit/9632771630d75f08faa5a3b6f5afc9d44a6a65b0;>9632771 Address review comments Additional commits viewable in https://github.com/github/codeql-action/compare/0225834cc549ee0ca93cb085b92954821a145866...83f0fe6c4988d98a455712a27f0255212bba9bd4;>compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[jira] [Created] (DIRSERVER-2383) Use Log4j2 in ApacheDS
Oleksandr Andreiev created DIRSERVER-2383: - Summary: Use Log4j2 in ApacheDS Key: DIRSERVER-2383 URL: https://issues.apache.org/jira/browse/DIRSERVER-2383 Project: Directory ApacheDS Issue Type: Wish Components: logs Affects Versions: 2.0.0.AM26 Reporter: Oleksandr Andreiev Hello, Is there a way to force the ApacheDS to use log4j2 if I have only binaries? Regards, Oleksandr -- This message was sent by Atlassian Jira (v8.20.10#820010) - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
