Bump ognl from 3.3.4 to 3.4.0 in /pgp-keys-map-test1 by dependabot[bot] · Pull Request #1649 · s4u/pgp-keys-map (original) (raw)

Skip to content

Navigation Menu

Sign in

Appearance settings

• • AI CODE CREATION
    * GitHub CopilotWrite better code with AI
    * GitHub Copilot appDirect agents from issue to merge
    * MCP RegistryNewIntegrate external tools
  • DEVELOPER WORKFLOWS
    * ActionsAutomate any workflow
    * CodespacesInstant dev environments
    * IssuesPlan and track work
    * Code ReviewManage code changes
  • APPLICATION SECURITY
    * GitHub Advanced SecurityFind and fix vulnerabilities
    * Code securitySecure your code as you build
    * Secret protectionStop leaks before they start
  • EXPLORE
    * Why GitHub
    * Documentation
    * Blog
    * Changelog
    * Marketplace

View all features

• • BY COMPANY SIZE
    * Enterprises
    * Small and medium teams
    * Startups
    * Nonprofits
  • BY USE CASE
    * App Modernization
    * DevSecOps
    * DevOps
    * CI/CD
    * View all use cases
  • BY INDUSTRY
    * Healthcare
    * Financial services
    * Manufacturing
    * Government
    * View all industries

View all solutions

• • EXPLORE BY TOPIC
    * AI
    * Software Development
    * DevOps
    * Security
    * View all topics
  • EXPLORE BY TYPE
    * Customer stories
    * Events & webinars
    * Ebooks & reports
    * Business insights
    * GitHub Skills
  • SUPPORT & SERVICES
    * Documentation
    * Customer support
    * Community forum
    * Trust center
    * Partners

View all resources

• • COMMUNITY
    * GitHub SponsorsFund open source developers
  • PROGRAMS
    * Security Lab
    * Maintainer Community
    * Accelerator
    * GitHub Stars
    * Archive Program
  • REPOSITORIES
    * Topics
    * Trending
    * Collections
• • ENTERPRISE SOLUTIONS
    * Enterprise platformAI-powered developer platform
  • AVAILABLE ADD-ONS
    * GitHub Advanced SecurityEnterprise-grade security features
    * Copilot for BusinessEnterprise-grade AI features
    * Premium SupportEnterprise-grade 24/7 support
• Pricing

Provide feedback

We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted

Saved searches

Use saved searches to filter your results more quickly

Sign in

Sign up

Appearance settings

s4u / pgp-keys-map Public

• Notifications You must be signed in to change notification settings

• Fork8

• Star 16

• Code

• Issues

• Pull requests 8

• Discussions

• Actions

• Security and quality

• Insights

Additional navigation options

Merged

robot-simplify4u

merged 1 commit into

masterfrom

dependabot/maven/pgp-keys-map-test1/ognl-ognl-3.4.0

Jul 20, 2023

ConversationCommits (1)ChecksFiles changed

Merged

Bump ognl from 3.3.4 to 3.4.0 in /pgp-keys-map-test1#1649

robot-simplify4u

merged 1 commit into

masterfrom

dependabot/maven/pgp-keys-map-test1/ognl-ognl-3.4.0

Conversation

dependabot Bot commented on behalf of github

Jul 20, 2023

Copy link Copy Markdown

Contributor

Bumps ognl from 3.3.4 to 3.4.0.

Release notes

Sourced from ognl's releases.

OGNL 3.4.0

What's Changed

• Merges changes from commons-ognl and cleans up code by @​lukaszlenart in orphan-oss/ognl#155
• Automatically assign reviewers to dependabot PRs by @​lukaszlenart in orphan-oss/ognl#170
• Defines Sonar token in pom.xml and in GH Actions by @​lukaszlenart in orphan-oss/ognl#171
• Uses proper Maven command to run Sonar analytics by @​lukaszlenart in orphan-oss/ognl#172
• Create FUNDING.yml and clarify Apache Commons OGNL status by @​lukaszlenart in orphan-oss/ognl#173
• Cherry picks #174 - Passes instance of MemberAccess to OgnlContext to avoid IllegalArgumentException by @​lukaszlenart in orphan-oss/ognl#175
• Update maven metadata & enable deploy of snapshots by @​lukaszlenart in orphan-oss/ognl#176
• Turns OgnlContext into independent class not inherited from Map by @​lukaszlenart in orphan-oss/ognl#193

Dependencies

• Bump javassist from 3.29.0-GA to 3.29.1-GA by @​dependabot in orphan-oss/ognl#163
• Bump maven-javadoc-plugin from 3.4.0 to 3.4.1 by @​dependabot in orphan-oss/ognl#164
• Bump actions/setup-java from 2 to 3 by @​dependabot in orphan-oss/ognl#165
• Bump actions/cache from 2.1.4 to 3.0.8 by @​dependabot in orphan-oss/ognl#167
• Bump jacoco-maven-plugin from 0.8.7 to 0.8.8 by @​dependabot in orphan-oss/ognl#169
• Bump actions/checkout from 2.3.4 to 3.0.2 by @​dependabot in orphan-oss/ognl#168
• Bump maven-jar-plugin from 3.2.2 to 3.3.0 by @​dependabot in orphan-oss/ognl#178
• Bump javassist from 3.29.1-GA to 3.29.2-GA by @​dependabot in orphan-oss/ognl#177
• Bump actions/cache from 3.0.8 to 3.0.9 by @​dependabot in orphan-oss/ognl#180
• Bump javacc-maven-plugin from 3.0.0 to 3.0.1 by @​dependabot in orphan-oss/ognl#179
• Bump actions/cache from 3.0.9 to 3.0.10 by @​dependabot in orphan-oss/ognl#181
• Bump actions/checkout from 3.0.2 to 3.1.0 by @​dependabot in orphan-oss/ognl#182
• Bump actions/cache from 3.0.10 to 3.0.11 by @​dependabot in orphan-oss/ognl#183
• Bump easymock from 4.3 to 5.0.0 by @​dependabot in orphan-oss/ognl#184
• Bump pascalgn/automerge-action from 0.15.3 to 0.15.5 by @​dependabot in orphan-oss/ognl#185
• Bump easymock from 5.0.0 to 5.0.1 by @​dependabot in orphan-oss/ognl#186
• Bump actions/checkout from 3.1.0 to 3.2.0 by @​dependabot in orphan-oss/ognl#187
• Bump actions/cache from 3.0.11 to 3.2.1 by @​dependabot in orphan-oss/ognl#188
• Bump easymock from 5.0.1 to 5.1.0 by @​dependabot in orphan-oss/ognl#189
• Bump actions/cache from 3.2.1 to 3.2.2 by @​dependabot in orphan-oss/ognl#190
• Bump actions/checkout from 3.2.0 to 3.3.0 by @​dependabot in orphan-oss/ognl#191
• Bump actions/cache from 3.2.2 to 3.2.3 by @​dependabot in orphan-oss/ognl#192
• Bump actions/cache from 3.2.3 to 3.2.4 by @​dependabot in orphan-oss/ognl#194
• Bump actions/cache from 3.2.4 to 3.2.5 by @​dependabot in orphan-oss/ognl#195
• Bump maven-javadoc-plugin from 3.4.1 to 3.5.0 by @​dependabot in orphan-oss/ognl#196
• Bump actions/cache from 3.2.5 to 3.2.6 by @​dependabot in orphan-oss/ognl#197
• Bump maven-compiler-plugin from 3.10.1 to 3.11.0 by @​dependabot in orphan-oss/ognl#198
• Bump actions/cache from 3.2.6 to 3.3.0 by @​dependabot in orphan-oss/ognl#199
• Bump actions/checkout from 3.3.0 to 3.4.0 by @​dependabot in orphan-oss/ognl#201
• Bump maven-surefire-plugin from 2.22.2 to 3.0.0 by @​dependabot in orphan-oss/ognl#202
• Bump actions/cache from 3.3.0 to 3.3.1 by @​dependabot in orphan-oss/ognl#200
• Bump actions/checkout from 3.4.0 to 3.5.0 by @​dependabot in orphan-oss/ognl#203
• Bump actions/checkout from 3.5.0 to 3.5.2 by @​dependabot in orphan-oss/ognl#205
• Bump assertj-core from 3.23.1 to 3.24.2 by @​dependabot in orphan-oss/ognl#206
• Bump maven-surefire-plugin from 3.0.0 to 3.1.0 by @​dependabot in orphan-oss/ognl#207
• Bump maven-source-plugin from 3.2.1 to 3.3.0 by @​dependabot in orphan-oss/ognl#208
• Bump maven-surefire-plugin from 3.1.0 to 3.1.2 by @​dependabot in orphan-oss/ognl#210

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

`[Bump ognl from 3.3.4 to 3.4.0 in /pgp-keys-map-test1](/s4u/pgp-keys-map/pull/1649/commits/9ca466b4425742193615d5871d0fc9f6a86f5037 "Bump ognl from 3.3.4 to 3.4.0 in /pgp-keys-map-test1

Bumps ognl from 3.3.4 to 3.4.0.

• Release notes
• Commits

updated-dependencies:

• dependency-name: ognl:ognl dependency-type: direct:production update-type: version-update:semver-minor ...

Signed-off-by: dependabot[bot] support@github.com") `

[9ca466b](/s4u/pgp-keys-map/pull/1649/commits/9ca466b4425742193615d5871d0fc9f6a86f5037)

Bumps ognl from 3.3.4 to 3.4.0.

• Release notes
• Commits

updated-dependencies:

• dependency-name: ognl:ognl dependency-type: direct:production update-type: version-update:semver-minor ...

Signed-off-by: dependabot[bot] support@github.com

dependabot Bot added the dependencies

Pull requests that update a dependency file

label

Jul 20, 2023

robot-simplify4uenabled auto-merge (rebase)

July 20, 2023 01:11

robot-simplify4u approved these changes Jul 20, 2023

View reviewed changes

sonarqubecloud Bot commented

Jul 20, 2023

Copy link Copy Markdown

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication

robot-simplify4u merged commit 5218740 into master

Jul 20, 2023

robot-simplify4u deleted the dependabot/maven/pgp-keys-map-test1/ognl-ognl-3.4.0 branch

July 20, 2023 01:16

This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.Learn more about bidirectional Unicode characters

[ Show hidden characters]({{ revealButtonHref }})

Sign up for free to join this conversation on GitHub. Already have an account?Sign in to comment

Reviewers

robot-simplify4u robot-simplify4u approved these changes

Assignees

No one assigned

Labels

dependencies

Pull requests that update a dependency file

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant