27 Commits

Author SHA1 Message Date
William Dutton 9f030f62be Library updates for cve's, suppression cleanup and not fail github action job SonarCloud if SONARCLOUD_TOKEN not found (summary report instead). (#1667)
* OWASP + Github workflow updates

* Library updates
* Dependancy suppression cleanup

* #1667 PR Review updates, use NIST_NVD_API_KEY when available else use mirror for forks not configured, remove workflow_call for now since we don't on call
2026-07-22 07:46:14 +00:00
dependabot[bot] 07afccbb2f build(deps): bump actions/checkout from 6 to 7 (#1755)
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-26 07:18:09 +02:00
Lukasz Lenart 5f7a9129fc ci(struts6): adjusts workflows to use the new branch (#1659) 2026-04-10 07:16:13 +02:00
dependabot[bot] 3dc2fd5189 Bump actions/checkout from 5 to 6 (#1423)
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-24 07:16:47 +01:00
Lukasz Lenart 3e7710c583 WW-5576 Java 25 build (#1415)
* WW-5576 Upgrades commons-lang to version 3.20.0 which is Java 25 compatible

* WW-5576 Defines a new build on Java 25

* WW-5576 Fixes generating TLD file when building on Java 25

* WW-5576 Moves version property to the root pom.xml
2025-11-17 14:42:14 +01:00
dependabot[bot] cf215315e0 Bump actions/setup-java from 4 to 5
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 4 to 5.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-25 01:55:59 +00:00
dependabot[bot] ffd699682d Bump actions/checkout from 4 to 5
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-18 02:35:23 +00:00
Kusal Kithul-Godage fa951718dc WW-5533 Add compilation support for Jakarta EE 11 2025-02-25 23:34:33 +11:00
Lukasz Lenart 9bd89111f7 WW-5405 Updates to use the main branch instead of master 2024-12-10 17:23:26 +01:00
jdyer1 79138e1853 WW-5335 Prepares for Java 17 & Struts 7.x 2023-12-16 10:57:07 +01:00
jdyer1 b365b58e36 WN-5141
- remove github check for Java 8 and Java 11
2023-12-16 10:55:50 +01:00
dependabot[bot] cf4523fba5 Bump actions/setup-java from 3 to 4 (#804)
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3 to 4.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-04 06:36:59 +01:00
Kusal Kithul-Godage 62db310b09 Add JDK 21 build 2023-10-12 03:11:59 +11:00
Kusal Kithul-Godage 684c615609 Split SonarCloud into separate action 2023-09-18 20:56:26 +10:00
dependabot[bot] 4f5c4ff00a Bump actions/cache from 3.3.1 to 3.3.2
Bumps [actions/cache](https://github.com/actions/cache) from 3.3.1 to 3.3.2.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.3.1...v3.3.2)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-11 05:56:44 +00:00
dependabot[bot] 50b36695e8 Bump actions/checkout from 3 to 4
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-11 01:49:14 +00:00
Lukasz Lenart f58d0f3cc8 Uses verify phase instead of just test to run integration tests 2023-08-17 11:10:23 +02:00
Lukasz Lenart 2db7c0439e Uses Java 17 to perform Code Quality check 2023-08-17 10:56:20 +02:00
dependabot[bot] 279ef0cd0b Bump actions/cache from 3.0.8 to 3.3.1
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.8 to 3.3.1.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.8...v3.3.1)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-17 17:51:39 +00:00
Lukasz Lenart 0b67350084 Applies permission to GH workflows 2022-12-09 10:25:59 +01:00
Lukasz Lenart eb68368280 WW-5232 Avoids building assemblies 2022-09-21 22:29:14 +02:00
Lukasz Lenart 296b3cc89c Uses SONAR_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }} 2022-09-21 17:27:20 +02:00
Lukasz Lenart 9fb86054bb Reverts back to SONAR_TOKEN 2022-09-21 17:17:07 +02:00
Lukasz Lenart 0fc71949ca WW-5232 Uses Apache specific SONARCLOUD_TOKEN secret 2022-09-21 15:44:47 +02:00
Lukasz Lenart dc1a663d69 WW-5232 Uses default SONAR_TOKEN name 2022-09-20 16:22:59 +02:00
Lukasz Lenart 6b2cc20b2d WW-5232 Defines default ENV settings 2022-09-20 16:08:32 +02:00
Lukasz Lenart ab22c7377d WW-5232 Introduces GH Actions build instead of using Travis 2022-09-20 15:48:21 +02:00