9f030f62be
Library updates for cve's, suppression cleanup and not fail github action job SonarCloud if SONARCLOUD_TOKEN not found (summary report instead). ( #1667 )
...
* OWASP + Github workflow updates
* Library updates
* Dependancy suppression cleanup
* #1667 PR Review updates, use NIST_NVD_API_KEY when available else use mirror for forks not configured, remove workflow_call for now since we don't on call
2026-07-22 07:46:14 +00:00
07afccbb2f
build(deps): bump actions/checkout from 6 to 7 ( #1755 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-26 07:18:09 +02:00
3dc2fd5189
Bump actions/checkout from 5 to 6 ( #1423 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-24 07:16:47 +01:00
cf215315e0
Bump actions/setup-java from 4 to 5
...
Bumps [actions/setup-java](https://github.com/actions/setup-java ) from 4 to 5.
- [Release notes](https://github.com/actions/setup-java/releases )
- [Commits](https://github.com/actions/setup-java/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/setup-java
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-25 01:55:59 +00:00
ffd699682d
Bump actions/checkout from 4 to 5
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-18 02:35:23 +00:00
c0a720475b
Removes checking branch ref and removes branch name as not needed
2025-01-03 16:29:55 +01:00
359c409129
WW-5405 Fixes typo in scope name
2024-12-10 18:00:49 +01:00
9bd89111f7
WW-5405 Updates to use the main branch instead of master
2024-12-10 17:23:26 +01:00
61000681b8
Merge remote-tracking branch 'origin/master' into merge/master-to-7xx-2024-11-29
...
# Conflicts:
# apps/pom.xml
# apps/rest-showcase/pom.xml
# apps/showcase/pom.xml
# assembly/pom.xml
# bom/pom.xml
# bundles/demo/pom.xml
# bundles/pom.xml
# core/pom.xml
# jakarta/pom.xml
# jakarta/velocity-tools-view-jakarta/pom.xml
# plugins/async/pom.xml
# plugins/bean-validation/pom.xml
# plugins/cdi/pom.xml
# plugins/config-browser/pom.xml
# plugins/convention/pom.xml
# plugins/dwr/README.md
# plugins/embeddedjsp/pom.xml
# plugins/gxp/pom.xml
# plugins/jasperreports/pom.xml
# plugins/javatemplates/pom.xml
# plugins/jfreechart/pom.xml
# plugins/json/pom.xml
# plugins/junit/pom.xml
# plugins/osgi/pom.xml
# plugins/oval/pom.xml
# plugins/pell-multipart/pom.xml
# plugins/plexus/pom.xml
# plugins/pom.xml
# plugins/portlet-junit/pom.xml
# plugins/portlet-mocks/pom.xml
# plugins/portlet-tiles/pom.xml
# plugins/portlet/pom.xml
# plugins/rest/pom.xml
# plugins/sitemesh/pom.xml
# plugins/spring/pom.xml
# plugins/testng/pom.xml
# plugins/tiles/pom.xml
# plugins/velocity/pom.xml
# plugins/xslt/pom.xml
# pom.xml
2024-11-29 19:57:34 +01:00
6e9fa714cf
Uses AND instead of OR to check Sonar prerequisites
2024-11-18 19:56:26 +01:00
58d4d700ef
Skip Sonar scan on PRs created by Dependabot
2024-11-18 19:28:22 +01:00
c009a4ad1e
Avoids running Sonar scan in forks
2024-11-18 16:06:58 +01:00
b1d7c09d02
Uses Java 21 when running Sonar check
2024-11-18 12:36:28 +01:00
55885bc869
Runs Sonar step in case of running on master or PR
2024-11-18 12:34:53 +01:00
2e431df6b2
Always run Sonar scan against the master branch
2024-11-18 12:20:21 +01:00
11d84a26c3
Merge remote-tracking branch 'origin/master' into merge-master-to-7xx-2024-02-01
...
# Conflicts:
# Jenkinsfile
# core/src/main/java/org/apache/struts2/views/jsp/ComponentTagSupport.java
# core/src/test/java/org/apache/struts2/views/jsp/IteratorTagTest.java
# pom.xml
2024-02-01 10:02:43 +01:00
2513fcb292
Stops running sonar.yml on forks
2024-01-24 17:28:52 +01:00
79138e1853
WW-5335 Prepares for Java 17 & Struts 7.x
2023-12-16 10:57:07 +01:00
cf4523fba5
Bump actions/setup-java from 3 to 4 ( #804 )
...
Bumps [actions/setup-java](https://github.com/actions/setup-java ) from 3 to 4.
- [Release notes](https://github.com/actions/setup-java/releases )
- [Commits](https://github.com/actions/setup-java/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/setup-java
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-04 06:36:59 +01:00
684c615609
Split SonarCloud into separate action
2023-09-18 20:56:26 +10:00
William Dutton