diff --git a/.devcontainer/Dockerfile b/.devcontainer/Dockerfile index 78111a8b..57490398 100644 --- a/.devcontainer/Dockerfile +++ b/.devcontainer/Dockerfile @@ -1,5 +1,5 @@ # syntax=docker/dockerfile:1 -FROM debian:bookworm-slim@sha256:7b140f374b289a7c2befc338f42ebe6441b7ea838a042bbd5acbfca6ec875818 +FROM debian:bookworm-slim@sha256:abd67ffcfa541b485a3dff59865ab629aa048a6c613e639d36e7456b0b229241 RUN apt-get update && apt-get install -y --no-install-recommends \ libxkbcommon0 \ diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 203b31eb..9b40991d 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -2,6 +2,10 @@ version: 2 updates: - package-ecosystem: github-actions directory: / + groups: + codeql: + patterns: + - "github/codeql-action/*" schedule: interval: weekly cooldown: diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 0f3cb4be..9c4c6aed 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -40,7 +40,7 @@ jobs: java-version: "26" - name: Set up Gradle - uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0 + uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 with: cache-cleanup: always @@ -97,7 +97,7 @@ jobs: java-version: "26" - name: Set up Gradle - uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0 + uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 with: cache-cleanup: always @@ -130,7 +130,7 @@ jobs: java-version: "26" - name: Set up Gradle - uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0 + uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 with: cache-cleanup: always @@ -154,7 +154,7 @@ jobs: java-version: "26" - name: Set up Gradle - uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0 + uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 with: cache-cleanup: always @@ -187,7 +187,7 @@ jobs: java-version: "26" - name: Set up Gradle - uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0 + uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 with: cache-cleanup: always @@ -218,7 +218,7 @@ jobs: java-version: "26" - name: Set up Gradle - uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0 + uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 with: cache-cleanup: always diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 2888ea51..c46a25de 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -36,12 +36,12 @@ jobs: java-version: "26" - name: Set up Gradle - uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0 + uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 with: cache-cleanup: always - name: Initialize CodeQL - uses: github/codeql-action/init@e0647621c2984b5ed2f768cb892365bf2a616ad1 # v4.37.2 + uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 with: languages: java-kotlin build-mode: manual @@ -51,4 +51,4 @@ jobs: run: ./gradlew clean classes --no-daemon --no-build-cache - name: Analyze - uses: github/codeql-action/analyze@e0647621c2984b5ed2f768cb892365bf2a616ad1 # v4.37.2 + uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 diff --git a/.github/workflows/publish-sonatype.yml b/.github/workflows/publish-sonatype.yml index ef27c585..bc2d211c 100644 --- a/.github/workflows/publish-sonatype.yml +++ b/.github/workflows/publish-sonatype.yml @@ -43,7 +43,7 @@ jobs: java-version: "26" - name: Set up Gradle without shared caches - uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0 + uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 with: cache-disabled: true diff --git a/.github/workflows/release-doctor.yml b/.github/workflows/release-doctor.yml index 2da06295..877fa0ce 100644 --- a/.github/workflows/release-doctor.yml +++ b/.github/workflows/release-doctor.yml @@ -33,7 +33,7 @@ jobs: java-version: "26" - name: Set up Gradle - uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0 + uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 with: cache-cleanup: always diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 5ab29157..43698e27 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -28,7 +28,7 @@ jobs: persist-credentials: false - name: Run analysis - uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3 + uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4 with: results_file: results.sarif results_format: sarif @@ -42,6 +42,6 @@ jobs: retention-days: 5 - name: Upload to code scanning - uses: github/codeql-action/upload-sarif@e0647621c2984b5ed2f768cb892365bf2a616ad1 # v4.37.2 + uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 with: sarif_file: results.sarif diff --git a/build.gradle.kts b/build.gradle.kts index d3c51339..1cd5510e 100644 --- a/build.gradle.kts +++ b/build.gradle.kts @@ -49,7 +49,7 @@ allprojects { "com.fasterxml.jackson.core:jackson-databind:2.22.1", "com.fasterxml.jackson.dataformat:jackson-dataformat-xml:2.22.1", "com.fasterxml.jackson.module:jackson-module-kotlin:2.22.1", - "com.github.jknack:handlebars:4.5.3", + "com.github.jknack:handlebars:4.5.4", "com.google.guava:guava:33.6.0-jre", "com.jayway.jsonpath:json-path:3.0.0", "commons-fileupload:commons-fileupload:1.6.0", @@ -58,9 +58,9 @@ allprojects { "org.apache.commons:commons-lang3:3.20.0", "org.apache.logging.log4j:log4j-api:2.26.1", "org.apache.logging.log4j:log4j-core:2.26.1", - "org.xmlunit:xmlunit-core:2.12.0", - "org.xmlunit:xmlunit-legacy:2.12.0", - "org.xmlunit:xmlunit-placeholders:2.12.0", + "org.xmlunit:xmlunit-core:2.13.0", + "org.xmlunit:xmlunit-legacy:2.13.0", + "org.xmlunit:xmlunit-placeholders:2.13.0", ) } } diff --git a/buildSrc/build.gradle.kts b/buildSrc/build.gradle.kts index 53464321..2d2710f5 100644 --- a/buildSrc/build.gradle.kts +++ b/buildSrc/build.gradle.kts @@ -35,7 +35,7 @@ configurations.configureEach { "com.fasterxml.jackson.core:jackson-databind:2.22.1", "com.fasterxml.jackson.dataformat:jackson-dataformat-xml:2.22.1", "com.fasterxml.jackson.module:jackson-module-kotlin:2.22.1", - "com.github.jknack:handlebars:4.5.3", + "com.github.jknack:handlebars:4.5.4", "com.google.guava:guava:33.6.0-jre", "com.jayway.jsonpath:json-path:3.0.0", "commons-fileupload:commons-fileupload:1.6.0", @@ -44,9 +44,9 @@ configurations.configureEach { "org.apache.commons:commons-lang3:3.20.0", "org.apache.logging.log4j:log4j-api:2.26.1", "org.apache.logging.log4j:log4j-core:2.26.1", - "org.xmlunit:xmlunit-core:2.12.0", - "org.xmlunit:xmlunit-legacy:2.12.0", - "org.xmlunit:xmlunit-placeholders:2.12.0", + "org.xmlunit:xmlunit-core:2.13.0", + "org.xmlunit:xmlunit-legacy:2.13.0", + "org.xmlunit:xmlunit-placeholders:2.13.0", ) }