Dependency Review · Workflow runs · eclipse-sw360/sw360 · GitHub

Actions

All workflows
Workflows
- .github/workflows/thrift_docker.yml .github/workflows/thrift_docker.yml
- CodeQL Advanced CodeQL Advanced
- Coverage (REST resource-server) Coverage (REST resource-server)
- Dependabot Updates Dependabot Updates
- Dependency Review Dependency Review
- Scorecard supply-chain security Scorecard supply-chain security
- SW360 Build and Test SW360 Build and Test
- SW360 Container SW360 Container
- SW360 Thrift Resource Container SW360 Thrift Resource Container
Management
- Caches

Dependency Review

Actions

Loading...
Loading

dependency-review.yml

1,409 workflow runs

1,409 workflow runs

chore(deps): bump maven and tomcat Dependency Review #1371: Pull request #3435 opened by GMishx

21s siemens:deps/docker/maven-tomcat

siemens:deps/docker/maven-tomcat

21s

Naitik Dependency Review #1370: Pull request #3434 synchronize by naitikk31

20s naitikk31:naitik

naitikk31:naitik

20s

Changed Requirements "Java 11" -> "Java 21". Update README.md Dependency Review #1368: Pull request #3433 opened by tanwar-div

21s tanwar-div:patch-1

tanwar-div:patch-1

21s

chore(deps): bump github/codeql-action from 3.30.5 to 3.30.6 Dependency Review #1367: Pull request #3432 opened by dependabot bot

16s dependabot/github_actions/github/codeql-action-3.30.6

dependabot/github_actions/github/codeql-action-3.30.6

16s

chore(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 Dependency Review #1366: Pull request #3431 opened by dependabot bot

15s dependabot/github_actions/ossf/scorecard-action-2.4.3

dependabot/github_actions/ossf/scorecard-action-2.4.3

15s

chore(deps): bump docker/login-action from 3.5.0 to 3.6.0 Dependency Review #1365: Pull request #3430 opened by dependabot bot

18s dependabot/github_actions/docker/login-action-3.6.0

dependabot/github_actions/docker/login-action-3.6.0

18s

chore(deps): bump maven from 486d196 to 069d20b Dependency Review #1364: Pull request #3429 opened by dependabot bot

16s dependabot/docker/maven-069d20bee5d7bf7bb3788e6c223cb78d7e521a4697568afcc49b0d371bec6d71

dependabot/docker/maven-069d20bee5d7bf7bb3788e6c223cb78d7e521a4697568afcc49b0d371bec6d71

16s

chore(deps): bump tomcat from a024567 to 6f3c5f6 Dependency Review #1363: Pull request #3428 opened by dependabot bot

18s dependabot/docker/tomcat-6f3c5f680c9bd4310c76e8105dcf35be8388a99bdaeb5e0cb0861eb6a766a2ec

dependabot/docker/tomcat-6f3c5f680c9bd4310c76e8105dcf35be8388a99bdaeb5e0cb0861eb6a766a2ec

18s

chore(deps): bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0 Dependency Review #1362: Pull request #3427 opened by dependabot bot

18s dependabot/maven/org.apache.commons-commons-lang3-3.19.0

dependabot/maven/org.apache.commons-commons-lang3-3.19.0

18s

chore(deps): bump org.cyclonedx:cyclonedx-core-java from 10.2.1 to 11.0.0 Dependency Review #1361: Pull request #3426 opened by dependabot bot

16s dependabot/maven/org.cyclonedx-cyclonedx-core-java-11.0.0

dependabot/maven/org.cyclonedx-cyclonedx-core-java-11.0.0

16s

chore(deps): bump org.apache.maven.plugins:maven-dependency-plugin from 3.8.1 to 3.9.0 Dependency Review #1360: Pull request #3425 opened by dependabot bot

14s dependabot/maven/org.apache.maven.plugins-maven-dependency-plugin-3.9.0

dependabot/maven/org.apache.maven.plugins-maven-dependency-plugin-3.9.0

14s

chore(deps): bump com.tngtech.jgiven:jgiven-maven-plugin from 2.0.2 to 2.0.3 Dependency Review #1359: Pull request #3424 opened by dependabot bot

16s dependabot/maven/com.tngtech.jgiven-jgiven-maven-plugin-2.0.3

dependabot/maven/com.tngtech.jgiven-jgiven-maven-plugin-2.0.3

16s

fix(project): add validation for empty keys in project fields Dependency Review #1358: Pull request #3423 opened by drockparashar

18s drockparashar:fix/empty-key-value-validation

drockparashar:fix/empty-key-value-validation

18s

fix(docker): use new ubuntu-nobel for thrift Dependency Review #1357: Pull request #3422 opened by GMishx

15s siemens:fix/docker/builds

siemens:fix/docker/builds

15s

fix(docker): fix version to mentioned tags Dependency Review #1356: Pull request #3419 opened by GMishx

22s siemens:fix/docker/java-version

siemens:fix/docker/java-version

22s

chore(deps): bump httpcore5.version from 5.3.5 to 5.3.6 Dependency Review #1355: Pull request #3411 synchronize by dependabot bot

15s dependabot/maven/httpcore5.version-5.3.6

dependabot/maven/httpcore5.version-5.3.6

15s

chore(deps): bump tomcat from 0e81ad1 to 2b3894d Dependency Review #1354: Pull request #3417 opened by dependabot bot

18s dependabot/docker/tomcat-2b3894dce12e0f4b81e972269143f44781c7ed490379fe3f8d38b0b56c8a6792

dependabot/docker/tomcat-2b3894dce12e0f4b81e972269143f44781c7ed490379fe3f8d38b0b56c8a6792

18s

chore(deps): bump actions/dependency-review-action from 4.7.3 to 4.8.0 Dependency Review #1353: Pull request #3416 opened by dependabot bot

19s dependabot/github_actions/actions/dependency-review-action-4.8.0

dependabot/github_actions/actions/dependency-review-action-4.8.0

19s

chore(deps): bump actions/cache from 4.2.4 to 4.3.0 Dependency Review #1352: Pull request #3415 opened by dependabot bot

15s dependabot/github_actions/actions/cache-4.3.0

dependabot/github_actions/actions/cache-4.3.0

15s

chore(deps): bump github/codeql-action from 3.30.3 to 3.30.5 Dependency Review #1351: Pull request #3414 opened by dependabot bot

15s dependabot/github_actions/github/codeql-action-3.30.5

dependabot/github_actions/github/codeql-action-3.30.5

15s

chore(deps): bump maven from 674ec81 to 42f00a9 Dependency Review #1350: Pull request #3413 opened by dependabot bot

15s dependabot/docker/maven-42f00a9b0a9e04389ba857b2a69ba47fe11d1d47f7565edd65c45bbbd6b1e639

dependabot/docker/maven-42f00a9b0a9e04389ba857b2a69ba47fe11d1d47f7565edd65c45bbbd6b1e639

15s

chore(deps): bump org.codehaus.mojo:versions-maven-plugin from 2.18.0 to 2.19.1 Dependency Review #1349: Pull request #3412 opened by dependabot bot

16s dependabot/maven/org.codehaus.mojo-versions-maven-plugin-2.19.1

dependabot/maven/org.codehaus.mojo-versions-maven-plugin-2.19.1

16s

chore(deps): bump httpcore5.version from 5.3.5 to 5.3.6 Dependency Review #1348: Pull request #3411 opened by dependabot bot

17s dependabot/maven/httpcore5.version-5.3.6

dependabot/maven/httpcore5.version-5.3.6

17s

chore(deps): bump jakarta.xml.bind:jakarta.xml.bind-api from 4.0.2 to 4.0.4 Dependency Review #1347: Pull request #3410 opened by dependabot bot

16s dependabot/maven/jakarta.xml.bind-jakarta.xml.bind-api-4.0.4

dependabot/maven/jakarta.xml.bind-jakarta.xml.bind-api-4.0.4

16s

chore(deps): bump com.google.code.gson:gson from 2.13.1 to 2.13.2 Dependency Review #1346: Pull request #3409 opened by dependabot bot

16s dependabot/maven/com.google.code.gson-gson-2.13.2

dependabot/maven/com.google.code.gson-gson-2.13.2

16s