Commit 6cd2dc1
authored
chore(deps): bump com.github.eirslett:frontend-maven-plugin from 1.15.4 to 2.0.0 [skip ci]
Bumps [com.github.eirslett:frontend-maven-plugin](https://github.com/eirslett/frontend-maven-plugin) from 1.15.4 to 2.0.0.
Changelog
*Sourced from [com.github.eirslett:frontend-maven-plugin's changelog](https://github.com/eirslett/frontend-maven-plugin/blob/master/CHANGELOG.md).*
> ### 2.0.0
>
> This is a major version release, but there are no new features.
> Lots of dependencies and minimum version requirements have been upgraded,
> potentially breaking backwards compatibility.
>
> * Updates `org.apache.commons:commons-compress` to version `1.28.0` because of security issus found in version `1.21` Version `1.21` ([GHSA-4g9r-vxhx-9pgx](GHSA-4g9r-vxhx-9pgx), [GHSA-4265-ccf5-phj5](GHSA-4265-ccf5-phj5)).
Commits
* [`2569405`](eirslett/frontend-maven-plugin@2569405) [maven-release-plugin] prepare release frontend-plugins-2.0.0
* [`72d555a`](eirslett/frontend-maven-plugin@72d555a) Upgrade frontend library versions and node/npm/pnpm versions
* [`b085a45`](eirslett/frontend-maven-plugin@b085a45) Merge branch with dependency updates'
* [`1a7009f`](eirslett/frontend-maven-plugin@1a7009f) Apparently this should fix extraction on Windows with Java 25
* [`1b899e7`](eirslett/frontend-maven-plugin@1b899e7) Update maven-invoker-plugin
* [`a15add3`](eirslett/frontend-maven-plugin@a15add3) Further dependency updates
* [`de0bea4`](eirslett/frontend-maven-plugin@de0bea4) Update java versions in GitHub action
* [`1c72fbd`](eirslett/frontend-maven-plugin@1c72fbd) chore: uses the configuration `release` for the `maven-compiler-plugin`
* [`0ce69c7`](eirslett/frontend-maven-plugin@0ce69c7) chore: switched to Java 17
* [`e962688`](eirslett/frontend-maven-plugin@e962688) chore: updates Maven dependencies
* Additional commits viewable in [compare view](eirslett/frontend-maven-plugin@frontend-plugins-1.15.4...frontend-plugins-2.0.0)
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)1 file changed
+1
-1
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
33 | 33 | | |
34 | 34 | | |
35 | 35 | | |
36 | | - | |
| 36 | + | |
37 | 37 | | |
38 | 38 | | |
39 | 39 | | |
| |||
0 commit comments