8372 Commits

Author SHA1 Message Date
dependabot[bot] d7bdedf580 Bump com.github.ben-manes.caffeine:caffeine from 3.2.2 to 3.2.3 (#1403)
Bumps [com.github.ben-manes.caffeine:caffeine](https://github.com/ben-manes/caffeine) from 3.2.2 to 3.2.3.
- [Release notes](https://github.com/ben-manes/caffeine/releases)
- [Commits](https://github.com/ben-manes/caffeine/compare/v3.2.2...v3.2.3)

---
updated-dependencies:
- dependency-name: com.github.ben-manes.caffeine:caffeine
  dependency-version: 3.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-17 07:53:32 +01:00
dependabot[bot] 0a98e9be3f Bump github/codeql-action from 4.31.0 to 4.31.2 (#1402)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.0 to 4.31.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](https://github.com/github/codeql-action/compare/v4.31.0...v4.31.2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-17 07:53:09 +01:00
dependabot[bot] d48e04756a Bump asm.version from 9.8 to 9.9 (#1381)
Bumps `asm.version` from 9.8 to 9.9.

Updates `org.ow2.asm:asm` from 9.8 to 9.9

Updates `org.ow2.asm:asm-commons` from 9.8 to 9.9

---
updated-dependencies:
- dependency-name: org.ow2.asm:asm
  dependency-version: '9.9'
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.ow2.asm:asm-commons
  dependency-version: '9.9'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-27 06:46:37 +01:00
dependabot[bot] 138739b811 Bump github/codeql-action from 4.30.8 to 4.31.0 (#1401)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.30.8 to 4.31.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](https://github.com/github/codeql-action/compare/v4.30.8...v4.31.0)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-27 06:44:40 +01:00
dependabot[bot] 59fa593b62 Bump actions/upload-artifact from 4.6.2 to 5.0.0 (#1400)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.2 to 5.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/ea165f8d65b6e75b540449e92b4886f43607fa02...330a01c490aca151604b8cf639adc76d48f6c5d4)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-27 06:44:21 +01:00
dependabot[bot] 076ea3f9bb Bump org.owasp:dependency-check-maven from 12.1.3 to 12.1.8 (#1399)
Bumps [org.owasp:dependency-check-maven](https://github.com/dependency-check/DependencyCheck) from 12.1.3 to 12.1.8.
- [Release notes](https://github.com/dependency-check/DependencyCheck/releases)
- [Changelog](https://github.com/dependency-check/DependencyCheck/blob/main/CHANGELOG.md)
- [Commits](https://github.com/dependency-check/DependencyCheck/compare/v12.1.3...v12.1.8)

---
updated-dependencies:
- dependency-name: org.owasp:dependency-check-maven
  dependency-version: 12.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-27 06:44:04 +01:00
dependabot[bot] 69f2392808 Bump org.codehaus.groovy:groovy-jsr223 from 3.0.22 to 3.0.25 (#1398)
Bumps [org.codehaus.groovy:groovy-jsr223](https://github.com/apache/groovy) from 3.0.22 to 3.0.25.
- [Commits](https://github.com/apache/groovy/commits)

---
updated-dependencies:
- dependency-name: org.codehaus.groovy:groovy-jsr223
  dependency-version: 3.0.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-27 06:43:39 +01:00
dependabot[bot] e1dddcbaef Bump org.htmlunit:htmlunit from 4.16.0 to 4.17.0 (#1396)
Bumps [org.htmlunit:htmlunit](https://github.com/HtmlUnit/htmlunit) from 4.16.0 to 4.17.0.
- [Release notes](https://github.com/HtmlUnit/htmlunit/releases)
- [Commits](https://github.com/HtmlUnit/htmlunit/compare/4.16.0...4.17.0)

---
updated-dependencies:
- dependency-name: org.htmlunit:htmlunit
  dependency-version: 4.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-27 06:43:08 +01:00
Martin Ashby dc7cdfdb9b WW-5578 Don't catch and swallow ConfigurationException in InterceptorBuilder. (#1377)
This can mask configuration errors and result in a non-working
application.

Extend FetchMetadataInterceptorTest; in order to correctly load all of
the interceptors from struts-testing.xml, it needs additional configuration
providers.
2025-10-19 19:12:52 +02:00
Lukasz Lenart eba05e53da Reverse merge changes related to releasing Struts 7.1.1 (#1378)
* [maven-release-plugin] prepare release STRUTS_7_1_1

* [maven-release-plugin] rollback the release of STRUTS_7_1_1

* [maven-release-plugin] prepare release STRUTS_7_1_1

* [maven-release-plugin] prepare for next development iteration
2025-10-19 19:12:31 +02:00
Lukasz Lenart fef0539567 WW-5579 Add missing DoubleRangeFieldValidator and ShortRangeFieldValidator to @Validations container (#1390)
This commit addresses a long-standing gap in the Struts validation framework where @DoubleRangeFieldValidator
and @ShortRangeFieldValidator annotations could not be used within the @Validations container annotation,
despite being fully functional as standalone annotations.

Changes made:
- Added doubleRangeFields() and shortRangeFields() methods to @Validations annotation interface
- Updated JavaDoc to document the new fields and corrected the parameters table
- Added processing loops for both validators in AnnotationValidationConfigurationBuilder
- Created comprehensive test coverage in AnnotationValidationConfigurationBuilderTest
- Added AnnotationValidationsContainerAction test class demonstrating proper usage

The implementation follows the exact same pattern used by IntRangeFieldValidator and LongRangeFieldValidator,
ensuring consistency across all range validators in the framework.

All existing tests continue to pass, and new tests verify that multiple validators of each type
can be properly configured within the @Validations container.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude <noreply@anthropic.com>
2025-10-19 19:11:08 +02:00
Lukasz Lenart 57c33654cd Add tests for conversion error repopulation with indexed properties (#1391)
This commit addresses recommendation #4 from the visitor pattern research:
"Test repopulation behavior specifically with indexed properties to confirm it works as expected."

Two new test methods have been added to VisitorFieldValidatorTest:

1. testArrayConversionErrorRepopulation()
   - Tests conversion errors in indexed array properties (testBeanArray[0].count, etc.)
   - Verifies that conversion errors are properly detected with correct indexed notation
   - Confirms repopulateField parameter preserves invalid values

2. testListConversionErrorRepopulation()
   - Tests conversion errors in indexed list properties (testBeanList[1].count, etc.)
   - Verifies proper field error key generation for list elements
   - Validates that elements without conversion errors don't generate false positives

Supporting validation configuration files:
- TestBean-validateArrayWithConversion-validation.xml
- TestBean-validateListWithConversion-validation.xml
- VisitorValidatorTestAction-validateArrayWithConversion-validation.xml
- VisitorValidatorTestAction-validateListWithConversion-validation.xml

These tests verify the VisitorFieldValidator correctly handles:
- Conversion error detection for indexed properties
- Field name construction with proper index notation
- Error message generation for specific indexed elements
- Selective validation (only elements with conversion errors fail)

Research notes documenting the visitor pattern investigation are included
in thoughts/lukaszlenart/notes/2025-10-17-struts2-iterator-validation-visitor-pattern.md

Also updated .claude/settings.json to refine permissions:
- More specific WebFetch domain (struts.apache.org vs apache.org)
- Added git checkout and git log permissions for better workflow

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude <noreply@anthropic.com>
2025-10-18 12:45:18 +02:00
Lukasz Lenart 69f6392fae Merge pull request #1389 from apache/dependabot/github_actions/github/codeql-action-4.30.8
Bump github/codeql-action from 3.30.5 to 4.30.8
2025-10-18 12:19:29 +02:00
Lukasz Lenart b3bee91204 Merge pull request #1384 from apache/dependabot/maven/main/maven-surefire-plugin.version-3.5.4
Bump maven-surefire-plugin.version from 3.5.3 to 3.5.4
2025-10-18 12:18:35 +02:00
Lukasz Lenart 805d86cb1c Merge pull request #1383 from apache/dependabot/maven/main/org.apache.maven.plugins-maven-enforcer-plugin-3.6.2
Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.1 to 3.6.2
2025-10-18 12:18:05 +02:00
Lukasz Lenart 0aae04cfd2 Merge pull request #1382 from apache/dependabot/maven/main/org.apache.maven.plugins-maven-wrapper-plugin-3.3.4
Bump org.apache.maven.plugins:maven-wrapper-plugin from 3.3.2 to 3.3.4
2025-10-18 12:17:40 +02:00
Lukasz Lenart e9239d870e Merge pull request #1379 from apache/dependabot/github_actions/ossf/scorecard-action-2.4.3
Bump ossf/scorecard-action from 2.4.2 to 2.4.3
2025-10-18 12:16:15 +02:00
dependabot[bot] 7212c05959 Bump github/codeql-action from 3.30.5 to 4.30.8
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.30.5 to 4.30.8.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](https://github.com/github/codeql-action/compare/v3.30.5...v4.30.8)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.30.8
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-13 01:04:37 +00:00
Lukasz Lenart 06f9f93033 Merge pull request #1388 from apache/fix/claude-settings
Fix Claude Code settings
2025-10-10 14:27:43 +02:00
Lukasz Lenart 6d8a6c37ed Adds missing braces to avoid Claude Code ignoring the settings.json file 2025-10-10 12:41:40 +02:00
dependabot[bot] 41b4341889 Bump maven-surefire-plugin.version from 3.5.3 to 3.5.4
Bumps `maven-surefire-plugin.version` from 3.5.3 to 3.5.4.

Updates `org.apache.maven.surefire:surefire-junit47` from 3.5.3 to 3.5.4

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.5.3...surefire-3.5.4)

---
updated-dependencies:
- dependency-name: org.apache.maven.surefire:surefire-junit47
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-06 01:41:46 +00:00
dependabot[bot] 5ee330b4c2 Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.1 to 3.6.2
Bumps [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) from 3.6.1 to 3.6.2.
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](https://github.com/apache/maven-enforcer/compare/enforcer-3.6.1...enforcer-3.6.2)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
  dependency-version: 3.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-06 01:41:07 +00:00
dependabot[bot] 43b3205b3f Bump org.apache.maven.plugins:maven-wrapper-plugin from 3.3.2 to 3.3.4
Bumps [org.apache.maven.plugins:maven-wrapper-plugin](https://github.com/apache/maven-wrapper) from 3.3.2 to 3.3.4.
- [Release notes](https://github.com/apache/maven-wrapper/releases)
- [Commits](https://github.com/apache/maven-wrapper/compare/maven-wrapper-3.3.2...maven-wrapper-3.3.4)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-wrapper-plugin
  dependency-version: 3.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-06 01:40:03 +00:00
dependabot[bot] c1c4816bef Bump ossf/scorecard-action from 2.4.2 to 2.4.3
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.2 to 2.4.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](https://github.com/ossf/scorecard-action/compare/05b42c624433fc40578a4040d5cf5e36ddca8cde...4eaacf0543bb3f2c246792bd56e8cdeffafb205a)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-06 01:04:27 +00:00
Lukasz Lenart 32ff5fcc24 Merge pull request #1373 from apache/dependabot/maven/main/org.apache.commons-commons-lang3-3.19.0
WW-5577 Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0
2025-09-29 15:09:05 +02:00
Lukasz Lenart c7424fd2db Merge pull request #1365 from apache/fix/WW-5573-false-positive-warning
WW-5573 Avoids false positive warning if file doesn't exist already
2025-09-29 15:01:49 +02:00
Lukasz Lenart ae77bdf495 Merge pull request #1376 from apache/fix/improves-claude-code-agents
Improve Claude Code agents configuration for Apache Struts
2025-09-29 15:01:30 +02:00
Lukasz Lenart 1518c16669 Simplify CLAUDE.md through specialized agents and commands automation
- Add 5 specialized agents: security-analyzer, test-runner, code-quality-checker, config-validator, jakarta-migration-helper
- Add 4 new commands: security_scan, run_tests, quality_check, config_analyze
- Reduce CLAUDE.md from 271 to ~120 lines (55% reduction) by extracting procedural knowledge into automation
- Maintain all security principles and quality standards while improving developer workflow
- Enable guided, consistent application of Apache Struts best practices through intelligent automation

The new system provides expert-level guidance without requiring developers to memorize complex procedures,
improving both productivity and code quality consistency across the project.
2025-09-29 12:47:24 +02:00
Lukasz Lenart a2902ebd59 Add comprehensive validate_plan command for Apache Struts development
- Create systematic implementation plan validation command at .claude/commands/validate_plan.md
- Based on humanlayer methodology with Struts-specific adaptations
- Leverages all 6 existing agents (codebase-analyzer, codebase-locator, etc.) in parallel
- Includes Apache Struts security focus (OGNL, CVE patterns, interceptor security)
- Supports Maven module structure (/core/, /plugins/, /apps/, /jakarta/)
- Features comprehensive validation report template with testing strategies and performance analysis
- Integrates WW-XXXX ticket patterns and thoughts/ directory workflows
- Enables thorough verification that implementation plans were executed correctly and meet quality standards

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-09-29 12:20:09 +02:00
Lukasz Lenart 904e63970f Defines a commit command to be used with Claude Code 2025-09-29 12:13:25 +02:00
Lukasz Lenart e8243754b1 Allows to use git specific commands by Claude Code 2025-09-29 12:12:40 +02:00
Lukasz Lenart c76e89e85b Add comprehensive create_plan command for Apache Struts development
- Create interactive implementation planning command at .claude/commands/create_plan.md
- Based on humanlayer methodology with Struts-specific adaptations
- Leverages all 6 existing agents (codebase-analyzer, codebase-locator, etc.) in parallel
- Includes Apache Struts security focus (OGNL, CVE patterns, interceptor security)
- Supports Maven module structure (/core/, /plugins/, /apps/, /jakarta/)
- Features comprehensive plan template with testing strategies and performance analysis
- Integrates WW-XXXX ticket patterns and thoughts/ directory workflows
- Enables thorough, actionable implementation plans for any Struts development scenario

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-09-29 12:10:56 +02:00
Lukasz Lenart e1de9362af Improve Claude Code agents configuration for Apache Struts
- Replace hardcoded user paths with dynamic $USER environment variable
- Update ticket patterns from eng_XXXX to Apache Struts WW-XXXX format
- Create thoughts/ directory structure for research documentation
- Add Maven build commands (mvn test -DskipAssembly) to agents
- Enhance security analysis with CVE-specific patterns (CVE-2017-5638, CVE-2018-11776)
- Improve Struts-specific knowledge in codebase analysis agents
- Add Jakarta module support and OGNL security focus
- Enable portable configuration across all developers

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-09-29 11:57:42 +02:00
Lukasz Lenart 310114d93d Merge pull request #1375 from apache/dependabot/maven/main/org.assertj-assertj-core-3.27.6
Bump org.assertj:assertj-core from 3.27.4 to 3.27.6
2025-09-29 08:25:22 +02:00
Lukasz Lenart 13fe711b40 Merge pull request #1374 from apache/dependabot/maven/main/org.apache.logging.log4j-log4j-bom-2.25.2
Bump org.apache.logging.log4j:log4j-bom from 2.25.1 to 2.25.2
2025-09-29 08:25:07 +02:00
Lukasz Lenart 0160e7385e Merge pull request #1372 from apache/dependabot/maven/main/org.jacoco-jacoco-maven-plugin-0.8.13
Bump org.jacoco:jacoco-maven-plugin from 0.8.12 to 0.8.13
2025-09-29 08:24:42 +02:00
Lukasz Lenart 4720c274a2 Merge pull request #1368 from apache/dependabot/github_actions/github/codeql-action-3.30.5
Bump github/codeql-action from 3.30.3 to 3.30.5
2025-09-29 08:23:08 +02:00
Lukasz Lenart 0f8c2e6558 WW-5573 Catches IO exception when a file cannot be deleted and reports it 2025-09-29 08:21:03 +02:00
Lukasz Lenart 3fdc642742 Merge pull request #1366 from apache/deps/WW-5574-commons-logging
WW-5574 Upgrades commons-logging to version 1.3.5
2025-09-29 07:33:40 +02:00
Lukasz Lenart 8f750ead77 Merge pull request #1367 from apache/deps/WW-5575-commons-io
WW-5575 Upgrades commons-io to version 2.20.0
2025-09-29 07:33:32 +02:00
Lukasz Lenart 44598f13e0 Merge pull request #1364 from apache/release/7.1.0
Reverse merge changes from release/7.1.0
2025-09-29 07:33:23 +02:00
dependabot[bot] f70818cf95 Bump org.assertj:assertj-core from 3.27.4 to 3.27.6
Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.27.4 to 3.27.6.
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](https://github.com/assertj/assertj/compare/assertj-build-3.27.4...assertj-build-3.27.6)

---
updated-dependencies:
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-29 01:37:27 +00:00
dependabot[bot] 4be38b83e8 Bump org.apache.logging.log4j:log4j-bom from 2.25.1 to 2.25.2
Bumps [org.apache.logging.log4j:log4j-bom](https://github.com/apache/logging-log4j2) from 2.25.1 to 2.25.2.
- [Release notes](https://github.com/apache/logging-log4j2/releases)
- [Changelog](https://github.com/apache/logging-log4j2/blob/2.x/RELEASE-NOTES.adoc)
- [Commits](https://github.com/apache/logging-log4j2/compare/rel/2.25.1...rel/2.25.2)

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-bom
  dependency-version: 2.25.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-29 01:37:21 +00:00
dependabot[bot] e499b97590 Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0
Bumps org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-29 01:36:43 +00:00
dependabot[bot] f0c93df602 Bump org.jacoco:jacoco-maven-plugin from 0.8.12 to 0.8.13
Bumps [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) from 0.8.12 to 0.8.13.
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](https://github.com/jacoco/jacoco/compare/v0.8.12...v0.8.13)

---
updated-dependencies:
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-29 01:36:38 +00:00
dependabot[bot] 1506fa8018 Bump github/codeql-action from 3.30.3 to 3.30.5
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.30.3 to 3.30.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](https://github.com/github/codeql-action/compare/v3.30.3...v3.30.5)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.30.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-29 01:05:28 +00:00
Lukasz Lenart ed62673e85 WW-5575 Upgrades commons-io to version 2.20.0 2025-09-28 12:14:07 +02:00
Lukasz Lenart 6bf2bbed84 WW-5574 Upgrades commons-logging to version 1.3.5 2025-09-28 12:11:35 +02:00
Lukasz Lenart d83af8c8c7 WW-5573 Avoids false positive warning if file doesn't exist already 2025-09-28 12:07:14 +02:00
Lukasz Lenart c1b682da2a Merge pull request #1362 from apache/dependabot/maven/main/org.mockito-mockito-core-5.20.0
WW-5572 Bump org.mockito:mockito-core from 5.15.2 to 5.20.0
2025-09-28 11:55:41 +02:00