7411024c99
build(ci): report the required check when only .claude/ changed ( #1849 )
...
#1846 gated the maven.yml build job with a job-level `if:` on the
`changes` output, on the reasoning that a job skipped that way still
reports its check as "skipped", which required status checks accept.
That holds for a plain job, but not for a matrix one. A matrix job whose
condition is false is skipped before the matrix expands, so it emits a
single check run named after the raw name template rather than one per
matrix entry. On #1848 the reported name was literally
Build and Test (JDK ${{ matrix.java }})${{ ... }}
while .asf.yaml requires the context "Build and Test (JDK 17)". That
context never appeared, so it stayed Pending and the pull request could
not be merged - exactly the failure mode #1846 set out to avoid.
Drop the job-level condition and gate the four steps instead. The matrix
expands, all five checks report success under their expanded names, and
no Maven build runs: a .claude-only pull request costs five idle runners
for a few seconds instead of five full builds.
Jenkins is unaffected - stage-level `when` has no matrix to expand.
Co-authored-by: Claude Opus 5 <noreply@anthropic.com >
2026-08-14 18:55:29 +02:00
0ef20170ce
build(ci): stop .claude-only changes from triggering full builds ( #1846 )
...
Editing an agent skill rebuilt the whole project on GitHub Actions and
Jenkins. No code changes, so every one of those runs was wasted.
GitHub Actions, non-required workflows (codeql, owasp, sonar): plain
paths-ignore on both push and pull_request. Nothing they report is
required in .asf.yaml, so a run that never happens blocks nothing.
GitHub Actions, maven.yml: paths-ignore on push only. It is deliberately
NOT applied to pull_request, because "Build and Test (JDK 17)" is a
required check and GitHub documents that a workflow skipped by path
filtering never reports - the check stays Pending and the pull request
can never be merged. Instead a small `changes` job inspects the PR's
file list and the build job is skipped by condition. A job skipped that
way does report, as "skipped", and required checks accept "successful,
skipped, or neutral".
Jenkins polls SCM, so the trigger cannot be filtered; the two JDK stages
are guarded instead. Detection fails open - no previous successful
commit, an unreachable commit, or any git error reports true and the
build runs exactly as before.
The filter tests for a non-empty list of files outside .claude/ rather
than using `grep -qv`: the local ugrep 7.5.0 returns 1 from `-qv` on
input where `-cv` counts 1 and `-v` prints the line, which silently
inverts the decision. Testing emptiness behaves the same everywhere.
Exercised against six inputs, including the mixed .claude/ + code case
that must still build, and .claudefoo/ which must not be treated as
.claude/.
Only the 7.x line is changed here; support/struts-6-x-x needs the same
edit on its own branch.
Co-authored-by: Claude Opus 5 <noreply@anthropic.com >
2026-08-14 12:48:33 +02:00
5dfff82fd5
build(deps): bump github/codeql-action from 4.37.3 to 4.37.6 ( #1839 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.37.3 to 4.37.6.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v4.37.3...v4.37.6 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.37.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-14 12:42:50 +02:00
26141511f8
build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 ( #1818 )
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.4.3 to 2.4.4.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](https://github.com/ossf/scorecard-action/compare/4eaacf0543bb3f2c246792bd56e8cdeffafb205a...2d1146689b8cda280b9bc96326124645441f03bc )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-version: 2.4.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-29 07:57:45 +02:00
d52ffed7ff
build(deps): bump github/codeql-action from 4.37.2 to 4.37.3 ( #1817 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.37.2 to 4.37.3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v4.37.2...v4.37.3 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.37.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-29 07:57:35 +02:00
ef8361caa7
build(deps): bump github/codeql-action from 4.37.0 to 4.37.2 ( #1800 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.37.0 to 4.37.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v4.37.0...v4.37.2 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.37.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-22 18:55:44 +02:00
b154b7ca43
ci(owasp): cap job timeout and disable NVD auto-update in check step ( #1807 )
...
* ci(owasp): cap job timeout and disable NVD auto-update in check step
The OWASP job intermittently failed with no reason other than timeouts.
Root cause is the unreliable NIST NVD feed (see dependency-check#8633):
keyless NVD downloads are heavily rate-limited and stall.
Two fixes:
- Add timeout-minutes: 30 so a hung NVD download fails fast instead of
dragging to the 6h GitHub Actions default.
- Add -DautoUpdate=false to the check step so it reads only the cache
populated by the preceding update-only step. Previously the check step
carried neither the mirror datafeed URL nor the API key, so on any cache
staleness/miss it synced directly against NIST - the unreliable path.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
* ci(owasp): fall back to NVD mirror when the API update fails
The NIST NVD API is unreliable even with an API key (retries exhausted,
see dependency-check#8633). Previously the mirror datafeed was used only
when no API key was present, so apache/struts always took the flaky API
path and never the mirror.
Make the API update step continue-on-error and run the mirror update as a
fallback when the API step fails (or when no API key is configured).
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
---------
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-22 18:52:56 +02:00
9f030f62be
Library updates for cve's, suppression cleanup and not fail github action job SonarCloud if SONARCLOUD_TOKEN not found (summary report instead). ( #1667 )
...
* OWASP + Github workflow updates
* Library updates
* Dependancy suppression cleanup
* #1667 PR Review updates, use NIST_NVD_API_KEY when available else use mirror for forks not configured, remove workflow_call for now since we don't on call
2026-07-22 07:46:14 +00:00
31036a8a49
build(deps): bump github/codeql-action from 4.36.3 to 4.37.0 ( #1786 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.36.3 to 4.37.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v4.36.3...v4.37.0 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.37.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-17 20:24:32 +02:00
30cbd1c3c4
build(deps): bump github/codeql-action/upload-sarif ( #1768 )
...
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) from 628fc3f124e68b0151f0d2a5d81e864ee1e42335 to f58f0d11ebf5dedd870fab2f999275f7602cfa46.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/628fc3f124e68b0151f0d2a5d81e864ee1e42335...f58f0d11ebf5dedd870fab2f999275f7602cfa46 )
---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
dependency-version: f58f0d11ebf5dedd870fab2f999275f7602cfa46
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-09 09:25:31 +02:00
16aa43137d
build(deps): bump github/codeql-action from 4.36.2 to 4.36.3 ( #1769 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.36.2 to 4.36.3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v4.36.2...v4.36.3 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.36.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-09 09:25:18 +02:00
a09f2a93af
build(deps): bump github/codeql-action/upload-sarif ( #1758 )
...
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) from eda5730a8bfb740e03a28087a958444c646e5842 to 628fc3f124e68b0151f0d2a5d81e864ee1e42335.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/eda5730a8bfb740e03a28087a958444c646e5842...628fc3f124e68b0151f0d2a5d81e864ee1e42335 )
---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 628fc3f124e68b0151f0d2a5d81e864ee1e42335
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-01 12:57:29 +02:00
07afccbb2f
build(deps): bump actions/checkout from 6 to 7 ( #1755 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-26 07:18:09 +02:00
5e725a72cd
build(deps): bump github/codeql-action from 4.36.0 to 4.36.2 ( #1734 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.36.0 to 4.36.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.36.0...v4.36.2 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.36.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-10 13:23:21 +02:00
c7b1ca3f0a
build(deps): bump github/codeql-action from 4.35.5 to 4.36.0 ( #1710 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.35.5 to 4.36.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.35.5...v4.36.0 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.36.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-28 07:16:52 +02:00
f26325ff90
ci(dependabot): fix cooldown property name ( #1702 )
...
The `cooldown` block expects `default-days`, not `default`. Using the
wrong key fails schema validation, causing Dependabot to silently fall
back to the previously valid config — which still targets
`release/struts-6-8-x` instead of `support/struts-6-x-x`.
Also adds a 3-day cooldown to the `main` maven entry for consistency.
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com >
2026-05-20 07:07:05 +00:00
16618e0236
build(deps): bump github/codeql-action from 4.35.4 to 4.35.5 ( #1694 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.35.4 to 4.35.5.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.35.4...v4.35.5 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.35.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-20 08:58:58 +02:00
9c8d3de0e4
build(deps): bump github/codeql-action from 4.35.3 to 4.35.4 ( #1682 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.35.3 to 4.35.4.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.35.3...v4.35.4 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.35.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-14 14:57:50 +02:00
c9cfa36cb2
build(deps): bump github/codeql-action from 4.35.2 to 4.35.3 ( #1675 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.35.2 to 4.35.3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.35.2...v4.35.3 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.35.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-09 13:48:28 +02:00
664540cc84
build(deps): bump github/codeql-action from 4.35.1 to 4.35.2 ( #1668 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.35.1 to 4.35.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.35.1...v4.35.2 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.35.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-02 15:56:03 +02:00
862019e8f6
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 ( #1663 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-16 11:06:00 +02:00
5f7a9129fc
ci(struts6): adjusts workflows to use the new branch ( #1659 )
2026-04-10 07:16:13 +02:00
89ed075b30
ci(dependabot): add cooldown ( #1656 )
2026-04-08 15:47:58 +00:00
c9918bf8bb
build(deps): bump github/codeql-action from 4.34.1 to 4.35.1 ( #1645 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.34.1 to 4.35.1.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.34.1...v4.35.1 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.35.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-02 16:22:42 +02:00
f132a2e43b
deps(rat): excludes updatding the RAT plugin as it requires Java 17 ( #1641 )
2026-03-27 10:40:00 +00:00
556dece531
build(deps): bump github/codeql-action from 4.33.0 to 4.34.1 ( #1633 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.33.0 to 4.34.1.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.33.0...v4.34.1 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.34.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-27 11:32:18 +01:00
afa33e1b09
build(deps): bump github/codeql-action from 4.32.6 to 4.33.0 ( #1627 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.32.6 to 4.33.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.32.6...v4.33.0 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.33.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-18 07:27:16 +01:00
b5d93f6860
build(deps): bump github/codeql-action from 4.32.5 to 4.32.6 ( #1619 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.32.5 to 4.32.6.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.32.5...v4.32.6 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.32.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-11 13:29:29 +01:00
246a2507bb
build(deps): bump github/codeql-action from 4.32.4 to 4.32.5 ( #1611 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.32.4 to 4.32.5.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.32.4...v4.32.5 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.32.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-04 06:48:20 +01:00
4af368720e
build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 ( #1612 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/b7c566a772e6b6bfb58ed0dc250532a479d7789f...bbbca2ddaa5d8feaa63e36b76fdaad77386f024f )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-04 06:48:11 +01:00
a21c763d8a
build(deps): bump github/codeql-action from 4.32.3 to 4.32.4 ( #1589 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.32.3 to 4.32.4.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.32.3...v4.32.4 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.32.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-21 10:06:19 +01:00
1eae40b817
ci: use wildcard to exclude all Spring dependencies from 6.x updates
...
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2026-02-21 09:48:48 +01:00
71f25438e5
build(deps): bump github/codeql-action from 4.32.2 to 4.32.3 ( #1580 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.32.2 to 4.32.3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.32.2...v4.32.3 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.32.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-18 08:41:39 +01:00
ea906a22e4
build(deps): bump github/codeql-action from 4.32.1 to 4.32.2 ( #1574 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.32.1 to 4.32.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.32.1...v4.32.2 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.32.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-12 18:52:21 +02:00
2bff83282d
build(deps): bump github/codeql-action from 4.32.0 to 4.32.1 ( #1566 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.32.0 to 4.32.1.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.32.0...v4.32.1 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.32.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-08 19:16:54 +02:00
9395eb9600
build(deps): excludes upgrading Tomcat 11 libraries ( #1559 )
2026-01-28 06:15:15 +00:00
5f8e4c0813
build(deps): bump github/codeql-action from 4.31.11 to 4.32.0 ( #1556 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.31.11 to 4.32.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.31.11...v4.32.0 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.32.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-28 07:08:49 +01:00
70fc40f777
build(deps): bump github/codeql-action from 4.31.10 to 4.31.11 ( #1551 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.31.10 to 4.31.11.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.31.10...v4.31.11 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.31.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-26 16:23:34 +01:00
f49349d7d0
chore(deps): excludes org.apache.tomcat:tomcat-api for Struts 6.x ( #1548 )
...
* chore(deps): excludes org.apache.tomcat:tomcat-api for Struts 6.x
* chore(conf): Enables auto-merge of PRs
2026-01-26 11:32:21 +01:00
3679361bf3
Excludes some dependencies from upgrade in 6.x ( #1541 )
2026-01-20 13:36:16 +01:00
fb5ac9eedf
Ignores some dependencies for update in 6.x ( #1533 )
2026-01-20 11:05:11 +01:00
10e4fa4d9f
Ignores incompatible dependencies with Struts 6.x ( #1526 )
2026-01-14 19:55:25 +01:00
d59aea5f5d
build(deps): bump github/codeql-action from 4.31.9 to 4.31.10 ( #1521 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.31.9 to 4.31.10.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.31.9...v4.31.10 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.31.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-12 19:26:33 +01:00
7d53859ae0
chore(deps): excludes org.mortbay.jetty:jsp-2.1
2026-01-12 18:43:14 +01:00
b8b8fef2b5
chore(deps): excludes javax.servlet.jsp:jsp-api
2026-01-12 18:42:11 +01:00
8dc3033dcc
chore(deps): excludes javax.servlet:javax.servlet-api
2026-01-12 18:40:40 +01:00
860008ea44
chore(deps): excludes javax.portlet:portlet-api
2026-01-12 18:39:34 +01:00
c0a3a18b67
chore(deps): ignore incompatible updates for release/struts-6-8-x ( #1497 )
...
* chore(deps): ignore jetty-maven-plugin updates for release/struts-6-8-x
The jetty-maven-plugin 11.x is not compatible with Struts 6.8.x branch
which requires Java EE (not Jakarta EE). This prevents Dependabot from
creating incompatible update PRs like #1493 .
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
* chore(deps): also ignore caffeine updates for release/struts-6-8-x
Caffeine 3.x requires Java 11+ and uses jakarta.inject which is
incompatible with Struts 6.8.x. This prevents PRs like #1496 .
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
* chore(deps): also ignore jaxb-impl updates for release/struts-6-8-x
JAXB 4.x is the Jakarta EE version which is incompatible with
Struts 6.8.x (Java EE based). This prevents PRs like #1492 .
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
---------
Co-authored-by: Claude <noreply@anthropic.com >
2025-12-29 12:08:55 +01:00
26f5bb3965
build(deps): bump github/codeql-action from 4.31.8 to 4.31.9 ( #1481 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.31.8 to 4.31.9.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.31.8...v4.31.9 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.31.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-23 09:34:24 +01:00
a1bdcb6c6c
build(deps): bump github/codeql-action from 4.31.7 to 4.31.8 ( #1471 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.31.7 to 4.31.8.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.31.7...v4.31.8 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.31.8
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-15 07:40:37 +01:00
Lukasz Lenart