|
3 | 3 | <modelVersion>4.0.0</modelVersion>
|
4 | 4 | <groupId>org.owasp.esapi</groupId>
|
5 | 5 | <artifactId>esapi</artifactId>
|
6 |
| - <version>2.7.0.0-SNAPSHOT</version> |
| 6 | + <version>2.6.1.0</version> |
7 | 7 | <packaging>jar</packaging>
|
8 | 8 |
|
9 | 9 | <distributionManagement>
|
|
132 | 132 | <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
|
133 | 133 | <version.jmh>1.37</version.jmh>
|
134 | 134 | <version.findsecbugs>2.0.0-M3</version.findsecbugs>
|
135 |
| - <version.fluido>2.0.0-M11</version.fluido> <!-- 2.0.0 fails on 'mvn site', but this works. --> |
| 135 | + <version.fluido>2.0.0-M11</version.fluido> <!-- Version 2.1.0 is available, but fails with this min Maven. --> |
136 | 136 | <version.powermock>2.0.9</version.powermock>
|
137 |
| - <version.spotbugs>4.8.6</version.spotbugs> |
138 |
| - <version.spotbugs.maven>4.8.6.6</version.spotbugs.maven> |
139 |
| - <version.surefire>3.5.2</version.surefire> |
| 137 | + <version.spotbugs>4.9.3</version.spotbugs> |
| 138 | + <version.spotbugs.maven>4.9.3.0</version.spotbugs.maven> |
| 139 | + <version.surefire>3.5.3</version.surefire> |
140 | 140 | <project.java.target>1.8</project.java.target>
|
141 | 141 | <!-- TODO: Be sure to update. Should be date of previous official release -->
|
142 | 142 | <!-- Exact date in the form 'yyyy-dd-yy 00:00:00' should be used. You can find the previous release date -->
|
143 | 143 | <!-- in the previous release notes file under the 'documentation/' directory. -->
|
144 |
| - <date.prev_release>2024-10-08 00:00:00</date.prev_release> |
| 144 | + <date.prev_release>2024-11-25 00:00:00</date.prev_release> |
145 | 145 | </properties>
|
146 | 146 |
|
147 | 147 | <dependencies>
|
|
408 | 408 | <plugin>
|
409 | 409 | <groupId>org.apache.maven.plugins</groupId>
|
410 | 410 | <artifactId>maven-dependency-plugin</artifactId>
|
411 |
| - <version>3.8.0</version> |
| 411 | + <version>3.8.1</version> |
412 | 412 | </plugin>
|
413 | 413 | <plugin>
|
414 | 414 | <groupId>org.apache.maven.plugins</groupId>
|
|
418 | 418 | <plugin>
|
419 | 419 | <groupId>org.codehaus.mojo</groupId>
|
420 | 420 | <artifactId>versions-maven-plugin</artifactId>
|
421 |
| - <version>2.17.1</version> |
| 421 | + <version>2.18.0</version> |
422 | 422 | <configuration>
|
423 | 423 | <rulesUri>file:${project.basedir}/versionRuleset.xml</rulesUri>
|
424 | 424 | </configuration>
|
|
431 | 431 | <plugin>
|
432 | 432 | <groupId>org.cyclonedx</groupId>
|
433 | 433 | <artifactId>cyclonedx-maven-plugin</artifactId>
|
434 |
| - <version>2.8.2</version> |
| 434 | + <version>2.9.1</version> |
435 | 435 | <executions>
|
436 | 436 | <execution>
|
437 | 437 | <phase>package</phase>
|
|
467 | 467 | <plugin>
|
468 | 468 | <groupId>org.apache.maven.plugins</groupId>
|
469 | 469 | <artifactId>maven-changelog-plugin</artifactId>
|
470 |
| - <version>2.3</version> |
| 470 | + <!-- 3.0.0-M1 is a "milestone" release, which is generally |
| 471 | + to an alpha or beta release. Normally we would avoid |
| 472 | + those, but generating a changelog is not an essential |
| 473 | + task, so we're fine with this. |
| 474 | + --> |
| 475 | + <version>3.0.0-M1</version> |
471 | 476 | </plugin>
|
472 | 477 |
|
473 | 478 | <plugin>
|
474 | 479 | <groupId>org.apache.maven.plugins</groupId>
|
475 | 480 | <artifactId>maven-clean-plugin</artifactId>
|
476 |
| - <version>3.4.0</version> |
| 481 | + <version>3.4.1</version> |
477 | 482 | </plugin>
|
478 | 483 |
|
479 | 484 | <plugin>
|
480 | 485 | <groupId>org.apache.maven.plugins</groupId>
|
481 | 486 | <artifactId>maven-compiler-plugin</artifactId>
|
482 |
| - <version>3.13.0</version> |
| 487 | + <version>3.14.0</version> |
483 | 488 | <configuration>
|
484 | 489 | <source>${project.java.target}</source>
|
485 | 490 | <target>${project.java.target}</target>
|
|
513 | 518 | <plugin>
|
514 | 519 | <groupId>org.apache.maven.plugins</groupId>
|
515 | 520 | <artifactId>maven-deploy-plugin</artifactId>
|
516 |
| - <version>3.1.3</version> |
| 521 | + <version>3.1.4</version> |
517 | 522 | </plugin>
|
518 | 523 |
|
519 | 524 | <plugin>
|
|
533 | 538 | <dependency>
|
534 | 539 | <groupId>org.codehaus.mojo</groupId>
|
535 | 540 | <artifactId>extra-enforcer-rules</artifactId>
|
536 |
| - <version>1.9.0</version> |
| 541 | + <version>1.10.0</version> |
537 | 542 | </dependency>
|
538 | 543 | <dependency>
|
539 | 544 | <groupId>org.codehaus.mojo</groupId>
|
|
615 | 620 | <plugin>
|
616 | 621 | <groupId>org.apache.maven.plugins</groupId>
|
617 | 622 | <artifactId>maven-install-plugin</artifactId>
|
618 |
| - <version>3.1.3</version> |
| 623 | + <version>3.1.4</version> |
619 | 624 | </plugin>
|
620 | 625 |
|
621 | 626 | <plugin>
|
|
635 | 640 | <plugin>
|
636 | 641 | <groupId>org.apache.maven.plugins</groupId>
|
637 | 642 | <artifactId>maven-javadoc-plugin</artifactId>
|
638 |
| - <version>3.10.1</version> |
| 643 | + <version>3.11.2</version> |
639 | 644 | <configuration>
|
640 | 645 | <source>8</source>
|
641 | 646 | <doclint>none</doclint>
|
|
653 | 658 | <plugin>
|
654 | 659 | <groupId>org.apache.maven.plugins</groupId>
|
655 | 660 | <artifactId>maven-jxr-plugin</artifactId>
|
656 |
| - <version>3.5.0</version> |
| 661 | + <version>3.6.0</version> |
657 | 662 | </plugin>
|
658 | 663 |
|
659 | 664 | <plugin>
|
660 | 665 | <groupId>org.apache.maven.plugins</groupId>
|
661 | 666 | <artifactId>maven-pmd-plugin</artifactId>
|
662 |
| - <version>3.25.0</version> |
| 667 | + <version>3.26.0</version> |
663 | 668 | </plugin>
|
664 | 669 |
|
665 | 670 | <plugin>
|
666 | 671 | <groupId>org.apache.maven.plugins</groupId>
|
667 | 672 | <artifactId>maven-project-info-reports-plugin</artifactId>
|
668 |
| - <version>3.7.0</version> |
| 673 | + <version>3.9.0</version> |
669 | 674 | </plugin>
|
670 | 675 |
|
671 | 676 | <plugin>
|
|
740 | 745 | <plugin>
|
741 | 746 | <groupId>org.owasp</groupId>
|
742 | 747 | <artifactId>dependency-check-maven</artifactId>
|
743 |
| - <!-- Version 11.x is the latest, but 10.0.4 is the latest that we can use beccause 11.x has a breaking |
| 748 | + <!-- Version 12.x is the latest, but 10.0.4 is the latest that we can use beccause 11.x has a breaking |
744 | 749 | change that requires Java 11 or later and our mimimal JDK is Java 8.
|
745 | 750 | -->
|
746 | 751 | <version>10.0.4</version>
|
|
776 | 781 | <issueLinkUrl>https://github.com/ESAPI/esapi-java-legacy/issues/%ISSUE%</issueLinkUrl>
|
777 | 782 | <type>date</type>
|
778 | 783 | <dates>
|
779 |
| - <!-- TODO: Be sure to update. Should be date of previous official release --> |
| 784 | + <!-- TODO: Be sure to update. Should be date of 10revious official release --> |
780 | 785 | <!-- Exact date should be in previous release notes file under 'documentation/' directory. -->
|
781 | 786 | <date>${date.prev_release}</date>
|
782 | 787 | </dates>
|
|
0 commit comments