From 9e1331ba2a8183e205241fe6af3f0fb63de5973e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 27 Aug 2024 21:15:45 -0400 Subject: [PATCH 1/6] Bump the maven-plugins group with 4 updates (#15) Bumps the maven-plugins group with 4 updates: [org.apache.maven.plugins:maven-deploy-plugin](https://github.com/apache/maven-deploy-plugin), [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire), [org.apache.maven.plugins:maven-install-plugin](https://github.com/apache/maven-install-plugin) and [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire). Updates `org.apache.maven.plugins:maven-deploy-plugin` from 3.1.2 to 3.1.3 - [Release notes](https://github.com/apache/maven-deploy-plugin/releases) - [Commits](https://github.com/apache/maven-deploy-plugin/compare/maven-deploy-plugin-3.1.2...maven-deploy-plugin-3.1.3) Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.3.1 to 3.5.0 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.3.1...surefire-3.5.0) Updates `org.apache.maven.plugins:maven-install-plugin` from 3.1.2 to 3.1.3 - [Release notes](https://github.com/apache/maven-install-plugin/releases) - [Commits](https://github.com/apache/maven-install-plugin/compare/maven-install-plugin-3.1.2...maven-install-plugin-3.1.3) Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.3.1 to 3.5.0 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.3.1...surefire-3.5.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-deploy-plugin dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-plugins - dependency-name: org.apache.maven.plugins:maven-failsafe-plugin dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-plugins - dependency-name: org.apache.maven.plugins:maven-install-plugin dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-plugins - dependency-name: org.apache.maven.plugins:maven-surefire-plugin dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-plugins ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- pom.xml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/pom.xml b/pom.xml index 501e70c..be1e4fe 100644 --- a/pom.xml +++ b/pom.xml @@ -49,11 +49,11 @@ 3.4.0 - 3.1.2 + 3.1.3 3.5.0 - 3.1.2 - 3.3.1 - 3.3.1 + 3.1.3 + 3.5.0 + 3.5.0 3.3.1 2.17.1 From 0a6c55a70d21abedb98a9f7d4155035104a14da2 Mon Sep 17 00:00:00 2001 From: Phil Calouche Date: Sun, 22 Sep 2024 14:33:59 -0400 Subject: [PATCH 2/6] remove management for commons-codec --- pom.xml | 6 ------ 1 file changed, 6 deletions(-) diff --git a/pom.xml b/pom.xml index be1e4fe..3e0a71b 100644 --- a/pom.xml +++ b/pom.xml @@ -41,7 +41,6 @@ ${spring-forge.version} - 1.17.1 5.3.0 @@ -68,11 +67,6 @@ - - commons-codec - commons-codec - ${commons-codec.version} - dev.pcalouche.springforge.spring33x pcalouche-spring-boot-starter-app From 47b4236e8b8b46555bea9cb082087f10a55f8ff4 Mon Sep 17 00:00:00 2001 From: Phil Calouche Date: Mon, 23 Sep 2024 14:05:02 -0400 Subject: [PATCH 3/6] update dependabot frequency --- .github/dependabot.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 94793e1..b018f58 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -9,7 +9,7 @@ updates: registries: - central schedule: - interval: "monthly" + interval: "daily" target-branch: "dependabot-staging-main" open-pull-requests-limit: 10 groups: @@ -19,14 +19,14 @@ updates: - package-ecosystem: "github-actions" directory: "/" schedule: - interval: "monthly" + interval: "daily" target-branch: "dependabot-staging-main" - package-ecosystem: "maven" directory: "/" registries: - central schedule: - interval: "monthly" + interval: "daily" target-branch: "dependabot-staging-spring33x" open-pull-requests-limit: 10 groups: @@ -36,5 +36,5 @@ updates: - package-ecosystem: "github-actions" directory: "/" schedule: - interval: "monthly" + interval: "daily" target-branch: "dependabot-staging-spring33x" \ No newline at end of file From 667e26fb9cdc62e93c18d6cf4278cb5f9c2f50ec Mon Sep 17 00:00:00 2001 From: Phil Calouche Date: Mon, 23 Sep 2024 14:38:48 -0400 Subject: [PATCH 4/6] update spring version --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 3e0a71b..0388a89 100644 --- a/pom.xml +++ b/pom.xml @@ -6,7 +6,7 @@ org.springframework.boot spring-boot-starter-parent - 3.4.0-M2 + 3.3.3 From 757b43a5c89d07413c75ecc8e248d09b7f060f4f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 23 Sep 2024 18:41:06 +0000 Subject: [PATCH 5/6] Bump org.springframework.boot:spring-boot-starter-parent (#16) Bumps [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) from 3.3.3 to 3.3.4. - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](https://github.com/spring-projects/spring-boot/compare/v3.3.3...v3.3.4) --- updated-dependencies: - dependency-name: org.springframework.boot:spring-boot-starter-parent dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 0388a89..628398a 100644 --- a/pom.xml +++ b/pom.xml @@ -6,7 +6,7 @@ org.springframework.boot spring-boot-starter-parent - 3.3.3 + 3.3.4 From 09b9af2ebc8fc9b0cb7477e78975b0c552ce0ffa Mon Sep 17 00:00:00 2001 From: Phil Calouche Date: Mon, 23 Sep 2024 14:42:24 -0400 Subject: [PATCH 6/6] change frequency to weekly --- .github/dependabot.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index b018f58..f527644 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -9,7 +9,7 @@ updates: registries: - central schedule: - interval: "daily" + interval: "weekly" target-branch: "dependabot-staging-main" open-pull-requests-limit: 10 groups: @@ -19,14 +19,14 @@ updates: - package-ecosystem: "github-actions" directory: "/" schedule: - interval: "daily" + interval: "weekly" target-branch: "dependabot-staging-main" - package-ecosystem: "maven" directory: "/" registries: - central schedule: - interval: "daily" + interval: "weekly" target-branch: "dependabot-staging-spring33x" open-pull-requests-limit: 10 groups: @@ -36,5 +36,5 @@ updates: - package-ecosystem: "github-actions" directory: "/" schedule: - interval: "daily" + interval: "weekly" target-branch: "dependabot-staging-spring33x" \ No newline at end of file