Re: [PR] build(deps): bump org.owasp:dependency-check-maven from 8.4.2 to 8.4.3 [myfaces-tobago]

2023-11-16 Thread via GitHub


henningn merged PR #4508:
URL: https://github.com/apache/myfaces-tobago/pull/4508


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] build(deps): bump org.owasp:dependency-check-maven from 8.4.2 to 8.4.3 [myfaces-tobago]

2023-11-16 Thread via GitHub


henningn merged PR #4511:
URL: https://github.com/apache/myfaces-tobago/pull/4511


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] build(deps): bump org.owasp:dependency-check-maven from 8.4.2 to 8.4.3 [myfaces-tobago]

2023-11-16 Thread via GitHub


henningn merged PR #4510:
URL: https://github.com/apache/myfaces-tobago/pull/4510


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] build(deps): bump org.owasp:dependency-check-maven from 8.4.2 to 8.4.3 [myfaces-tobago]

2023-11-16 Thread via GitHub


henningn merged PR #4513:
URL: https://github.com/apache/myfaces-tobago/pull/4513


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] build(deps): bump org.owasp:dependency-check-maven from 8.4.2 to 8.4.3 [myfaces-tobago]

2023-11-15 Thread via GitHub


dependabot[bot] opened a new pull request, #4513:
URL: https://github.com/apache/myfaces-tobago/pull/4513

   Bumps 
[org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck)
 from 8.4.2 to 8.4.3.
   
   Release notes
   Sourced from https://github.com/jeremylong/DependencyCheck/releases;>org.owasp:dependency-check-maven's
 releases.
   
   Version 8.4.3
   
   fix: bump jcs3 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6047;>#6047)
   docs: Corrected docs on hostedSuppressions (https://redirect.github.com/jeremylong/DependencyCheck/issues/6035;>#6035)
   
   See the full listing of https://github.com/jeremylong/DependencyCheck/milestone/70?closed=1;>changes.
   
   
   
   Changelog
   Sourced from https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md;>org.owasp:dependency-check-maven's
 changelog.
   
   https://github.com/jeremylong/DependencyCheck/releases/tag/v8.4.3;>Version
 8.4.3 (2023-11-15)
   
   fix: bump jcs3 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6047;>#6047)
   docs: Corrected docs on hostedSuppressions (https://redirect.github.com/jeremylong/DependencyCheck/issues/6035;>#6035)
   
   See the full listing of https://github.com/jeremylong/DependencyCheck/milestone/70?closed=1;>changes.
   
   
   
   Commits
   
   https://github.com/jeremylong/DependencyCheck/commit/3406274c14c13d5d8eb05f5976d52d4dca2794eb;>3406274
 build: prepare release v8.4.3
   https://github.com/jeremylong/DependencyCheck/commit/7b19383d12e9ae42865aeed1c2e0f15d54814eb2;>7b19383
 docs: prepare 8.4.3
   https://github.com/jeremylong/DependencyCheck/commit/45dc137eaa6a9f51dce1114f87c444a59e9567a5;>45dc137
 build(deps): bump org.apache.maven.plugins:maven-surefire-report-plugin from 
...
   https://github.com/jeremylong/DependencyCheck/commit/3877317c752fc351b0aa47baab4580ddba4ef6a6;>3877317
 build(deps): bump amannn/action-semantic-pull-request from 5.3.0 to 5.4.0 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6;>#6...
   https://github.com/jeremylong/DependencyCheck/commit/7a45227ea38b9703d999cef042fa01bea5060eb8;>7a45227
 build: remove failing action (https://redirect.github.com/jeremylong/DependencyCheck/issues/6049;>#6049)
   https://github.com/jeremylong/DependencyCheck/commit/1ff8a54175bfb86d03a67841b0d47568dfd735e2;>1ff8a54
 fix: bump jcs3 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6047;>#6047)
   https://github.com/jeremylong/DependencyCheck/commit/6165b433ecb071e743f4e5a557cadca933499923;>6165b43
 build(deps): bump org.apache.maven.plugins:maven-surefire-plugin from 3.1.2 
t...
   https://github.com/jeremylong/DependencyCheck/commit/7d987bf088c5840a2f87891627e6e1f8ea7cc4c9;>7d987bf
 build(deps): bump org.apache.commons:commons-text from 1.10.0 to 1.11.0 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6024;>#6024)
   https://github.com/jeremylong/DependencyCheck/commit/da4796f820528ecc3e6bd74bdf5d49cf1f3537aa;>da4796f
 docs: Corrected docs on hostedSuppressions (https://redirect.github.com/jeremylong/DependencyCheck/issues/6035;>#6035)
   https://github.com/jeremylong/DependencyCheck/commit/ab31be9e7dfd79a3efb13af803a61ad47c8ff1c5;>ab31be9
 build(deps): bump org.apache.commons:commons-dbcp2 from 2.10.0 to 2.11.0 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6022;>#6022)
   Additional commits viewable in https://github.com/jeremylong/DependencyCheck/compare/v8.4.2...v8.4.3;>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.owasp:dependency-check-maven=maven=8.4.2=8.4.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot 

[PR] build(deps): bump org.owasp:dependency-check-maven from 8.4.2 to 8.4.3 [myfaces-tobago]

2023-11-15 Thread via GitHub


dependabot[bot] opened a new pull request, #4511:
URL: https://github.com/apache/myfaces-tobago/pull/4511

   Bumps 
[org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck)
 from 8.4.2 to 8.4.3.
   
   Release notes
   Sourced from https://github.com/jeremylong/DependencyCheck/releases;>org.owasp:dependency-check-maven's
 releases.
   
   Version 8.4.3
   
   fix: bump jcs3 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6047;>#6047)
   docs: Corrected docs on hostedSuppressions (https://redirect.github.com/jeremylong/DependencyCheck/issues/6035;>#6035)
   
   See the full listing of https://github.com/jeremylong/DependencyCheck/milestone/70?closed=1;>changes.
   
   
   
   Changelog
   Sourced from https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md;>org.owasp:dependency-check-maven's
 changelog.
   
   https://github.com/jeremylong/DependencyCheck/releases/tag/v8.4.3;>Version
 8.4.3 (2023-11-15)
   
   fix: bump jcs3 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6047;>#6047)
   docs: Corrected docs on hostedSuppressions (https://redirect.github.com/jeremylong/DependencyCheck/issues/6035;>#6035)
   
   See the full listing of https://github.com/jeremylong/DependencyCheck/milestone/70?closed=1;>changes.
   
   
   
   Commits
   
   https://github.com/jeremylong/DependencyCheck/commit/3406274c14c13d5d8eb05f5976d52d4dca2794eb;>3406274
 build: prepare release v8.4.3
   https://github.com/jeremylong/DependencyCheck/commit/7b19383d12e9ae42865aeed1c2e0f15d54814eb2;>7b19383
 docs: prepare 8.4.3
   https://github.com/jeremylong/DependencyCheck/commit/45dc137eaa6a9f51dce1114f87c444a59e9567a5;>45dc137
 build(deps): bump org.apache.maven.plugins:maven-surefire-report-plugin from 
...
   https://github.com/jeremylong/DependencyCheck/commit/3877317c752fc351b0aa47baab4580ddba4ef6a6;>3877317
 build(deps): bump amannn/action-semantic-pull-request from 5.3.0 to 5.4.0 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6;>#6...
   https://github.com/jeremylong/DependencyCheck/commit/7a45227ea38b9703d999cef042fa01bea5060eb8;>7a45227
 build: remove failing action (https://redirect.github.com/jeremylong/DependencyCheck/issues/6049;>#6049)
   https://github.com/jeremylong/DependencyCheck/commit/1ff8a54175bfb86d03a67841b0d47568dfd735e2;>1ff8a54
 fix: bump jcs3 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6047;>#6047)
   https://github.com/jeremylong/DependencyCheck/commit/6165b433ecb071e743f4e5a557cadca933499923;>6165b43
 build(deps): bump org.apache.maven.plugins:maven-surefire-plugin from 3.1.2 
t...
   https://github.com/jeremylong/DependencyCheck/commit/7d987bf088c5840a2f87891627e6e1f8ea7cc4c9;>7d987bf
 build(deps): bump org.apache.commons:commons-text from 1.10.0 to 1.11.0 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6024;>#6024)
   https://github.com/jeremylong/DependencyCheck/commit/da4796f820528ecc3e6bd74bdf5d49cf1f3537aa;>da4796f
 docs: Corrected docs on hostedSuppressions (https://redirect.github.com/jeremylong/DependencyCheck/issues/6035;>#6035)
   https://github.com/jeremylong/DependencyCheck/commit/ab31be9e7dfd79a3efb13af803a61ad47c8ff1c5;>ab31be9
 build(deps): bump org.apache.commons:commons-dbcp2 from 2.10.0 to 2.11.0 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6022;>#6022)
   Additional commits viewable in https://github.com/jeremylong/DependencyCheck/compare/v8.4.2...v8.4.3;>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.owasp:dependency-check-maven=maven=8.4.2=8.4.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot 

[PR] build(deps): bump org.owasp:dependency-check-maven from 8.4.2 to 8.4.3 [myfaces-tobago]

2023-11-15 Thread via GitHub


dependabot[bot] opened a new pull request, #4510:
URL: https://github.com/apache/myfaces-tobago/pull/4510

   Bumps 
[org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck)
 from 8.4.2 to 8.4.3.
   
   Release notes
   Sourced from https://github.com/jeremylong/DependencyCheck/releases;>org.owasp:dependency-check-maven's
 releases.
   
   Version 8.4.3
   
   fix: bump jcs3 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6047;>#6047)
   docs: Corrected docs on hostedSuppressions (https://redirect.github.com/jeremylong/DependencyCheck/issues/6035;>#6035)
   
   See the full listing of https://github.com/jeremylong/DependencyCheck/milestone/70?closed=1;>changes.
   
   
   
   Changelog
   Sourced from https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md;>org.owasp:dependency-check-maven's
 changelog.
   
   https://github.com/jeremylong/DependencyCheck/releases/tag/v8.4.3;>Version
 8.4.3 (2023-11-15)
   
   fix: bump jcs3 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6047;>#6047)
   docs: Corrected docs on hostedSuppressions (https://redirect.github.com/jeremylong/DependencyCheck/issues/6035;>#6035)
   
   See the full listing of https://github.com/jeremylong/DependencyCheck/milestone/70?closed=1;>changes.
   
   
   
   Commits
   
   https://github.com/jeremylong/DependencyCheck/commit/3406274c14c13d5d8eb05f5976d52d4dca2794eb;>3406274
 build: prepare release v8.4.3
   https://github.com/jeremylong/DependencyCheck/commit/7b19383d12e9ae42865aeed1c2e0f15d54814eb2;>7b19383
 docs: prepare 8.4.3
   https://github.com/jeremylong/DependencyCheck/commit/45dc137eaa6a9f51dce1114f87c444a59e9567a5;>45dc137
 build(deps): bump org.apache.maven.plugins:maven-surefire-report-plugin from 
...
   https://github.com/jeremylong/DependencyCheck/commit/3877317c752fc351b0aa47baab4580ddba4ef6a6;>3877317
 build(deps): bump amannn/action-semantic-pull-request from 5.3.0 to 5.4.0 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6;>#6...
   https://github.com/jeremylong/DependencyCheck/commit/7a45227ea38b9703d999cef042fa01bea5060eb8;>7a45227
 build: remove failing action (https://redirect.github.com/jeremylong/DependencyCheck/issues/6049;>#6049)
   https://github.com/jeremylong/DependencyCheck/commit/1ff8a54175bfb86d03a67841b0d47568dfd735e2;>1ff8a54
 fix: bump jcs3 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6047;>#6047)
   https://github.com/jeremylong/DependencyCheck/commit/6165b433ecb071e743f4e5a557cadca933499923;>6165b43
 build(deps): bump org.apache.maven.plugins:maven-surefire-plugin from 3.1.2 
t...
   https://github.com/jeremylong/DependencyCheck/commit/7d987bf088c5840a2f87891627e6e1f8ea7cc4c9;>7d987bf
 build(deps): bump org.apache.commons:commons-text from 1.10.0 to 1.11.0 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6024;>#6024)
   https://github.com/jeremylong/DependencyCheck/commit/da4796f820528ecc3e6bd74bdf5d49cf1f3537aa;>da4796f
 docs: Corrected docs on hostedSuppressions (https://redirect.github.com/jeremylong/DependencyCheck/issues/6035;>#6035)
   https://github.com/jeremylong/DependencyCheck/commit/ab31be9e7dfd79a3efb13af803a61ad47c8ff1c5;>ab31be9
 build(deps): bump org.apache.commons:commons-dbcp2 from 2.10.0 to 2.11.0 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6022;>#6022)
   Additional commits viewable in https://github.com/jeremylong/DependencyCheck/compare/v8.4.2...v8.4.3;>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.owasp:dependency-check-maven=maven=8.4.2=8.4.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot 

[PR] build(deps): bump org.owasp:dependency-check-maven from 8.4.2 to 8.4.3 [myfaces-tobago]

2023-11-15 Thread via GitHub


dependabot[bot] opened a new pull request, #4508:
URL: https://github.com/apache/myfaces-tobago/pull/4508

   Bumps 
[org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck)
 from 8.4.2 to 8.4.3.
   
   Release notes
   Sourced from https://github.com/jeremylong/DependencyCheck/releases;>org.owasp:dependency-check-maven's
 releases.
   
   Version 8.4.3
   
   fix: bump jcs3 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6047;>#6047)
   docs: Corrected docs on hostedSuppressions (https://redirect.github.com/jeremylong/DependencyCheck/issues/6035;>#6035)
   
   See the full listing of https://github.com/jeremylong/DependencyCheck/milestone/70?closed=1;>changes.
   
   
   
   Changelog
   Sourced from https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md;>org.owasp:dependency-check-maven's
 changelog.
   
   https://github.com/jeremylong/DependencyCheck/releases/tag/v8.4.3;>Version
 8.4.3 (2023-11-15)
   
   fix: bump jcs3 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6047;>#6047)
   docs: Corrected docs on hostedSuppressions (https://redirect.github.com/jeremylong/DependencyCheck/issues/6035;>#6035)
   
   See the full listing of https://github.com/jeremylong/DependencyCheck/milestone/70?closed=1;>changes.
   
   
   
   Commits
   
   https://github.com/jeremylong/DependencyCheck/commit/3406274c14c13d5d8eb05f5976d52d4dca2794eb;>3406274
 build: prepare release v8.4.3
   https://github.com/jeremylong/DependencyCheck/commit/7b19383d12e9ae42865aeed1c2e0f15d54814eb2;>7b19383
 docs: prepare 8.4.3
   https://github.com/jeremylong/DependencyCheck/commit/45dc137eaa6a9f51dce1114f87c444a59e9567a5;>45dc137
 build(deps): bump org.apache.maven.plugins:maven-surefire-report-plugin from 
...
   https://github.com/jeremylong/DependencyCheck/commit/3877317c752fc351b0aa47baab4580ddba4ef6a6;>3877317
 build(deps): bump amannn/action-semantic-pull-request from 5.3.0 to 5.4.0 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6;>#6...
   https://github.com/jeremylong/DependencyCheck/commit/7a45227ea38b9703d999cef042fa01bea5060eb8;>7a45227
 build: remove failing action (https://redirect.github.com/jeremylong/DependencyCheck/issues/6049;>#6049)
   https://github.com/jeremylong/DependencyCheck/commit/1ff8a54175bfb86d03a67841b0d47568dfd735e2;>1ff8a54
 fix: bump jcs3 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6047;>#6047)
   https://github.com/jeremylong/DependencyCheck/commit/6165b433ecb071e743f4e5a557cadca933499923;>6165b43
 build(deps): bump org.apache.maven.plugins:maven-surefire-plugin from 3.1.2 
t...
   https://github.com/jeremylong/DependencyCheck/commit/7d987bf088c5840a2f87891627e6e1f8ea7cc4c9;>7d987bf
 build(deps): bump org.apache.commons:commons-text from 1.10.0 to 1.11.0 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6024;>#6024)
   https://github.com/jeremylong/DependencyCheck/commit/da4796f820528ecc3e6bd74bdf5d49cf1f3537aa;>da4796f
 docs: Corrected docs on hostedSuppressions (https://redirect.github.com/jeremylong/DependencyCheck/issues/6035;>#6035)
   https://github.com/jeremylong/DependencyCheck/commit/ab31be9e7dfd79a3efb13af803a61ad47c8ff1c5;>ab31be9
 build(deps): bump org.apache.commons:commons-dbcp2 from 2.10.0 to 2.11.0 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6022;>#6022)
   Additional commits viewable in https://github.com/jeremylong/DependencyCheck/compare/v8.4.2...v8.4.3;>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.owasp:dependency-check-maven=maven=8.4.2=8.4.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot