[ 
https://issues.apache.org/jira/browse/RAT-311?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Philipp Ottlinger updated RAT-311:
----------------------------------
    Description: 
h1. Updates via dependabot in RAT 0.16
h2. (/) Update maven-pmd-plugin from 3.18.0 to 3.21.2
 * [https://github.com/apache/creadur-rat/pull/88] 3.19.0
 * [https://github.com/apache/creadur-rat/pull/114] 3.20.0
 * [https://github.com/apache/creadur-rat/pull/171] 3.21.2

h2. (/) Update mockito-core from 4.7.0 to 4.11.0
 * [https://github.com/apache/creadur-rat/pull/89] - 4.8.0
 * [https://github.com/apache/creadur-rat/pull/94] - 4.8.1
 * [https://github.com/apache/creadur-rat/pull/97] - 4.9.0
 * [https://github.com/apache/creadur-rat/pull/102] - 4.10.0
 * [https://github.com/apache/creadur-rat/pull/109] - 4.11.0

Remark: v5.x does not work anymore as relies on more modern (>JDK8) 
dependencies:
[https://github.com/apache/creadur-rat/pull/141]
[https://github.com/apache/creadur-rat/pull/146] - deactivated 5.x updates

h2. (/) Update actions/setup-java from 3.4.1 to 4.0.0
 * [https://github.com/apache/creadur-rat/pull/92] - 3.6.0
 * [https://github.com/apache/creadur-rat/pull/100] - 3.7.0
 * [https://github.com/apache/creadur-rat/pull/104] - 3.9.0
 * [https://github.com/apache/creadur-rat/pull/118] 3.10.0
 * [https://github.com/apache/creadur-rat/pull/133] 3.11.0
 * [https://github.com/apache/creadur-rat/pull/151] 3.12.0
 * [https://github.com/apache/creadur-rat/pull/156] 3.13.0
 * [https://github.com/apache/creadur-rat/pull/169] 4.0.0

h2. (/) Update plexus-utils from 3.4.2 to 3.5.1
 * [https://github.com/apache/creadur-rat/pull/93] - 3.5.0
 * [https://github.com/apache/creadur-rat/pull/121] - 3.5.1
 * Do not merge 4.x as this is for Maven 4.x

h2. (/) Update commons-compress from 1.21 to 1.25
 * [https://github.com/apache/creadur-rat/pull/95] 1.22
 * [https://github.com/apache/creadur-rat/pull/132] 1.23
 * Fix [https://security.snyk.io/vuln/SNYK-JAVA-ORGAPACHECOMMONS-5901530] / 
[https://www.cve.org/CVERecord?id=CVE-2023-42503]
 * [https://github.com/apache/creadur-rat/pull/174] 1.25

h2. (/) Update maven-plugin-version from 3.6.4 to 3.8.2
 * [https://github.com/apache/creadur-rat/pull/96] 3.7.0
 * [https://github.com/apache/creadur-rat/pull/125] 3.8.1
 * [https://github.com/apache/creadur-rat/pull/139] 3.8.2

h2. (/) Update apache root from 27 to 31
 * [https://github.com/apache/creadur-rat/pull/98] - 28
 * [https://github.com/apache/creadur-rat/pull/103] - 29
 * 31

h2. (/) Update maven-dependency-plugin from 3.3.0 to 3.6.1
 * [https://github.com/apache/creadur-rat/pull/99] 3.4.0
 * [https://github.com/apache/creadur-rat/pull/112] 3.5.0
 * [https://github.com/apache/creadur-rat/pull/173] 3.6.1

h2. (/) Update actions/cache from 3.0.11 to 3.3.2
 * [https://github.com/apache/creadur-rat/pull/108] - 3.2.2
 * [https://github.com/apache/creadur-rat/pull/110] - 3.2.3
 *  [https://github.com/apache/creadur-rat/pull/120] 3.2.6
 * [https://github.com/apache/creadur-rat/pull/128] 3.3.1
 * [https://github.com/apache/creadur-rat/pull/155] 3.3.2

h2. (/) Update wagon-ssh from 3.5.2 to 3.5.3
* [https://github.com/apache/creadur-rat/pull/106]

h2. (/) Update Ant from 1.10.12 to 1.10.14
 * [https://github.com/apache/creadur-rat/pull/111] 1.10.13
 * [https://github.com/apache/creadur-rat/pull/153] 1.10.14

h2. (/) Update doxiaVersion from 1.11.1 to 1.12.0

[https://github.com/apache/creadur-rat/pull/115]

h2. (/) Update maven-compiler-plugin from 3.10.1 to 3.12.1
 * [https://github.com/apache/creadur-rat/pull/122] 3.11.0
 *  https://github.com/apache/creadur-rat/pull/182 3.12.1

h2. (/) Update commons-lang3 from 3.5 to 3.14.0
 * [https://github.com/apache/creadur-rat/pull/123] 3.12.0
 * https://github.com/apache/creadur-rat/pull/178 3.14.0

h2. (/) Update maven-javadoc-plugin from 3.4.1 to 3.6.3
 * [https://github.com/apache/creadur-rat/pull/129]

h2. (/) Update maven-release-plugin from 2.5.3 to 3.0.1
 * [https://github.com/apache/creadur-rat/pull/131]

h2. (/) Update maven-enforcer-plugin from 3.1.0 to 3.4.1
 * [https://github.com/apache/creadur-rat/pull/134]

h2. (/) Update extra-enforcer-rules from 1.6.1 to 1.7.0
 * [https://github.com/apache/creadur-rat/pull/140] 1.6.2
 * [https://github.com/apache/creadur-rat/pull/145] 1.7.0

h2. (/) Update animal-sniffer-maven-plugin from 1.22 to 1.23
 * [https://github.com/apache/creadur-rat/pull/138]

h2. (/) Update maven-project-info-reports-plugin from 3.4.1 to 3.5.0
 * [https://github.com/apache/creadur-rat/pull/113] 3.4.2
 * [https://github.com/apache/creadur-rat/pull/137] 3.4.3

h2. (/) Update maven-shared-utils from 3.3.4 to 3.4.2
 * [https://github.com/apache/creadur-rat/pull/143] 3.4.1
 * https://github.com/apache/creadur-rat/pull/180 3.4.2

h2. (/) Update actions/checkout from 3 to 4
 * [https://github.com/apache/creadur-rat/pull/154]

h2. (/) Update org.slf4j:slf4j-simple from 1.7.36 to 2.0.9
 * [https://github.com/apache/creadur-rat/pull/170]

h2. (/) Update commons-io from 2.11.0 to 2.15.1
 * https://github.com/apache/creadur-rat/pull/176

h2. (/) Update commons-cli from 1.5.0 to 1.6.0
* https://github.com/apache/creadur-rat/pull/177

h2. (/) Update maven-surefire-plugin from 3.2.2 to 3.2.3
* https://github.com/apache/creadur-rat/pull/181 3.2.3 

  was:
h1. Updates via dependabot in RAT 0.16
h2. (/) Update maven-pmd-plugin from 3.18.0 to 3.20.0
 * [https://github.com/apache/creadur-rat/pull/88] 3.19.0
 * [https://github.com/apache/creadur-rat/pull/114] 3.20.0
 * [https://github.com/apache/creadur-rat/pull/171] 3.21.2

h2. (/) Update mockito-core from 4.7.0 to 4.11.0
 * [https://github.com/apache/creadur-rat/pull/89] - 4.8.0
 * [https://github.com/apache/creadur-rat/pull/94] - 4.8.1
 * [https://github.com/apache/creadur-rat/pull/97] - 4.9.0
 * [https://github.com/apache/creadur-rat/pull/102] - 4.10.0
 * [https://github.com/apache/creadur-rat/pull/109] - 4.11.0

Remark: v5.x does not work anymore as relies on more modern (>JDK8) 
dependencies:
[https://github.com/apache/creadur-rat/pull/141]
[https://github.com/apache/creadur-rat/pull/146] - deactivated 5.x updates
h2. (/) Update actions/setup-java from 3.4.1 to 4.0.0
 * [https://github.com/apache/creadur-rat/pull/92] - 3.6.0
 * [https://github.com/apache/creadur-rat/pull/100] - 3.7.0
 * [https://github.com/apache/creadur-rat/pull/104] - 3.9.0
 * [https://github.com/apache/creadur-rat/pull/118] 3.10.0
 * [https://github.com/apache/creadur-rat/pull/133] 3.11.0
 * [https://github.com/apache/creadur-rat/pull/151] 3.12.0
 * [https://github.com/apache/creadur-rat/pull/156] 3.13.0
 * [https://github.com/apache/creadur-rat/pull/169] 4.0.0

h2. (/) Update plexus-utils from 3.4.2 to 3.5.1
 * [https://github.com/apache/creadur-rat/pull/93] - 3.5.0
 * [https://github.com/apache/creadur-rat/pull/121] - 3.5.1
 * Do not merge 4.x as this is for Maven 4.x

h2. (/) Update commons-compress from 1.21 to 1.25
 * [https://github.com/apache/creadur-rat/pull/95] 1.22
 * [https://github.com/apache/creadur-rat/pull/132] 1.23
 * Fix [https://security.snyk.io/vuln/SNYK-JAVA-ORGAPACHECOMMONS-5901530] / 
[https://www.cve.org/CVERecord?id=CVE-2023-42503]
 * [https://github.com/apache/creadur-rat/pull/174] 1.25

h2. (/) Update maven-plugin-version from 3.6.4 to 3.8.2
 * [https://github.com/apache/creadur-rat/pull/96] 3.7.0
 * [https://github.com/apache/creadur-rat/pull/125] 3.8.1
 * [https://github.com/apache/creadur-rat/pull/139] 3.8.2

h2. (/) Update apache root from 27 to 31
 * [https://github.com/apache/creadur-rat/pull/98] - 28
 * [https://github.com/apache/creadur-rat/pull/103] - 29
 * 31

h2. (/) Update maven-dependency-plugin from 3.3.0 to 3.6.1
 * [https://github.com/apache/creadur-rat/pull/99] 3.4.0
 * [https://github.com/apache/creadur-rat/pull/112] 3.5.0
 * [https://github.com/apache/creadur-rat/pull/173] 3.6.1

h2. (/) Update actions/cache from 3.0.11 to 3.3.2
 * [https://github.com/apache/creadur-rat/pull/108] - 3.2.2
 * [https://github.com/apache/creadur-rat/pull/110] - 3.2.3
 *  [https://github.com/apache/creadur-rat/pull/120] 3.2.6
 * [https://github.com/apache/creadur-rat/pull/128] 3.3.1
 * [https://github.com/apache/creadur-rat/pull/155] 3.3.2

h2. (/) Update wagon-ssh from 3.5.2 to 3.5.3
* [https://github.com/apache/creadur-rat/pull/106]

h2. (/) Update Ant from 1.10.12 to 1.10.14
 * [https://github.com/apache/creadur-rat/pull/111] 1.10.13
 * [https://github.com/apache/creadur-rat/pull/153] 1.10.14

h2. (/) Update doxiaVersion from 1.11.1 to 1.12.0

[https://github.com/apache/creadur-rat/pull/115]

h2. (/) Update maven-compiler-plugin from 3.10.1 to 3.12.1
 * [https://github.com/apache/creadur-rat/pull/122] 3.11.0
 *  https://github.com/apache/creadur-rat/pull/182 3.12.1

h2. (/) Update commons-lang3 from 3.5 to 3.14.0
 * [https://github.com/apache/creadur-rat/pull/123] 3.12.0
 * https://github.com/apache/creadur-rat/pull/178 3.14.0

h2. (/) Update maven-javadoc-plugin from 3.4.1 to 3.5.0
 * [https://github.com/apache/creadur-rat/pull/129]

h2. (/) Update maven-release-plugin from 2.5.3 to 3.0.0
 * [https://github.com/apache/creadur-rat/pull/131]

h2. (/) Update maven-enforcer-plugin from 3.1.0 to 3.3.0
 * [https://github.com/apache/creadur-rat/pull/134]

h2. (/) Update extra-enforcer-rules from 1.6.1 to 1.7.0
 * [https://github.com/apache/creadur-rat/pull/140] 1.6.2
 * [https://github.com/apache/creadur-rat/pull/145] 1.7.0

h2. (/) Update animal-sniffer-maven-plugin from 1.22 to 1.23
 * [https://github.com/apache/creadur-rat/pull/138]

h2. (/) Update maven-project-info-reports-plugin from 3.4.1 to 3.4.3
 * [https://github.com/apache/creadur-rat/pull/113] 3.4.2
 * [https://github.com/apache/creadur-rat/pull/137] 3.4.3

h2. (/) Update maven-shared-utils from 3.3.4 to 3.4.2
 * [https://github.com/apache/creadur-rat/pull/143] 3.4.1
 * https://github.com/apache/creadur-rat/pull/180 3.4.2

h2. (/) Update actions/checkout from 3 to 4
 * [https://github.com/apache/creadur-rat/pull/154]

h2. (/) Update org.slf4j:slf4j-simple from 1.7.36 to 2.0.9
 * [https://github.com/apache/creadur-rat/pull/170]

h2. (/) Update commons-io from 2.11.0 to 2.15.1
 * https://github.com/apache/creadur-rat/pull/176

h2. (/) Update commons-cli from 1.5.0 to 1.6.0
* https://github.com/apache/creadur-rat/pull/177

h2. (/) Update maven-surefire-plugin from 3.2.2 to 3.2.3
* https://github.com/apache/creadur-rat/pull/181 3.2.3

h2. (/) Update 
h2. (/) Update 
h2. (/) Update 
h2. (/) Update 




----
h1. TODO before release
 * add changelog entries for each above PRs

 


> Dependency updates via dependabot performed for release 0.16
> ------------------------------------------------------------
>
>                 Key: RAT-311
>                 URL: https://issues.apache.org/jira/browse/RAT-311
>             Project: Apache Rat
>          Issue Type: Improvement
>    Affects Versions: 0.15
>            Reporter: Philipp Ottlinger
>            Assignee: Philipp Ottlinger
>            Priority: Major
>             Fix For: 0.16
>
>
> h1. Updates via dependabot in RAT 0.16
> h2. (/) Update maven-pmd-plugin from 3.18.0 to 3.21.2
>  * [https://github.com/apache/creadur-rat/pull/88] 3.19.0
>  * [https://github.com/apache/creadur-rat/pull/114] 3.20.0
>  * [https://github.com/apache/creadur-rat/pull/171] 3.21.2
> h2. (/) Update mockito-core from 4.7.0 to 4.11.0
>  * [https://github.com/apache/creadur-rat/pull/89] - 4.8.0
>  * [https://github.com/apache/creadur-rat/pull/94] - 4.8.1
>  * [https://github.com/apache/creadur-rat/pull/97] - 4.9.0
>  * [https://github.com/apache/creadur-rat/pull/102] - 4.10.0
>  * [https://github.com/apache/creadur-rat/pull/109] - 4.11.0
> Remark: v5.x does not work anymore as relies on more modern (>JDK8) 
> dependencies:
> [https://github.com/apache/creadur-rat/pull/141]
> [https://github.com/apache/creadur-rat/pull/146] - deactivated 5.x updates
> h2. (/) Update actions/setup-java from 3.4.1 to 4.0.0
>  * [https://github.com/apache/creadur-rat/pull/92] - 3.6.0
>  * [https://github.com/apache/creadur-rat/pull/100] - 3.7.0
>  * [https://github.com/apache/creadur-rat/pull/104] - 3.9.0
>  * [https://github.com/apache/creadur-rat/pull/118] 3.10.0
>  * [https://github.com/apache/creadur-rat/pull/133] 3.11.0
>  * [https://github.com/apache/creadur-rat/pull/151] 3.12.0
>  * [https://github.com/apache/creadur-rat/pull/156] 3.13.0
>  * [https://github.com/apache/creadur-rat/pull/169] 4.0.0
> h2. (/) Update plexus-utils from 3.4.2 to 3.5.1
>  * [https://github.com/apache/creadur-rat/pull/93] - 3.5.0
>  * [https://github.com/apache/creadur-rat/pull/121] - 3.5.1
>  * Do not merge 4.x as this is for Maven 4.x
> h2. (/) Update commons-compress from 1.21 to 1.25
>  * [https://github.com/apache/creadur-rat/pull/95] 1.22
>  * [https://github.com/apache/creadur-rat/pull/132] 1.23
>  * Fix [https://security.snyk.io/vuln/SNYK-JAVA-ORGAPACHECOMMONS-5901530] / 
> [https://www.cve.org/CVERecord?id=CVE-2023-42503]
>  * [https://github.com/apache/creadur-rat/pull/174] 1.25
> h2. (/) Update maven-plugin-version from 3.6.4 to 3.8.2
>  * [https://github.com/apache/creadur-rat/pull/96] 3.7.0
>  * [https://github.com/apache/creadur-rat/pull/125] 3.8.1
>  * [https://github.com/apache/creadur-rat/pull/139] 3.8.2
> h2. (/) Update apache root from 27 to 31
>  * [https://github.com/apache/creadur-rat/pull/98] - 28
>  * [https://github.com/apache/creadur-rat/pull/103] - 29
>  * 31
> h2. (/) Update maven-dependency-plugin from 3.3.0 to 3.6.1
>  * [https://github.com/apache/creadur-rat/pull/99] 3.4.0
>  * [https://github.com/apache/creadur-rat/pull/112] 3.5.0
>  * [https://github.com/apache/creadur-rat/pull/173] 3.6.1
> h2. (/) Update actions/cache from 3.0.11 to 3.3.2
>  * [https://github.com/apache/creadur-rat/pull/108] - 3.2.2
>  * [https://github.com/apache/creadur-rat/pull/110] - 3.2.3
>  *  [https://github.com/apache/creadur-rat/pull/120] 3.2.6
>  * [https://github.com/apache/creadur-rat/pull/128] 3.3.1
>  * [https://github.com/apache/creadur-rat/pull/155] 3.3.2
> h2. (/) Update wagon-ssh from 3.5.2 to 3.5.3
> * [https://github.com/apache/creadur-rat/pull/106]
> h2. (/) Update Ant from 1.10.12 to 1.10.14
>  * [https://github.com/apache/creadur-rat/pull/111] 1.10.13
>  * [https://github.com/apache/creadur-rat/pull/153] 1.10.14
> h2. (/) Update doxiaVersion from 1.11.1 to 1.12.0
> [https://github.com/apache/creadur-rat/pull/115]
> h2. (/) Update maven-compiler-plugin from 3.10.1 to 3.12.1
>  * [https://github.com/apache/creadur-rat/pull/122] 3.11.0
>  *  https://github.com/apache/creadur-rat/pull/182 3.12.1
> h2. (/) Update commons-lang3 from 3.5 to 3.14.0
>  * [https://github.com/apache/creadur-rat/pull/123] 3.12.0
>  * https://github.com/apache/creadur-rat/pull/178 3.14.0
> h2. (/) Update maven-javadoc-plugin from 3.4.1 to 3.6.3
>  * [https://github.com/apache/creadur-rat/pull/129]
> h2. (/) Update maven-release-plugin from 2.5.3 to 3.0.1
>  * [https://github.com/apache/creadur-rat/pull/131]
> h2. (/) Update maven-enforcer-plugin from 3.1.0 to 3.4.1
>  * [https://github.com/apache/creadur-rat/pull/134]
> h2. (/) Update extra-enforcer-rules from 1.6.1 to 1.7.0
>  * [https://github.com/apache/creadur-rat/pull/140] 1.6.2
>  * [https://github.com/apache/creadur-rat/pull/145] 1.7.0
> h2. (/) Update animal-sniffer-maven-plugin from 1.22 to 1.23
>  * [https://github.com/apache/creadur-rat/pull/138]
> h2. (/) Update maven-project-info-reports-plugin from 3.4.1 to 3.5.0
>  * [https://github.com/apache/creadur-rat/pull/113] 3.4.2
>  * [https://github.com/apache/creadur-rat/pull/137] 3.4.3
> h2. (/) Update maven-shared-utils from 3.3.4 to 3.4.2
>  * [https://github.com/apache/creadur-rat/pull/143] 3.4.1
>  * https://github.com/apache/creadur-rat/pull/180 3.4.2
> h2. (/) Update actions/checkout from 3 to 4
>  * [https://github.com/apache/creadur-rat/pull/154]
> h2. (/) Update org.slf4j:slf4j-simple from 1.7.36 to 2.0.9
>  * [https://github.com/apache/creadur-rat/pull/170]
> h2. (/) Update commons-io from 2.11.0 to 2.15.1
>  * https://github.com/apache/creadur-rat/pull/176
> h2. (/) Update commons-cli from 1.5.0 to 1.6.0
> * https://github.com/apache/creadur-rat/pull/177
> h2. (/) Update maven-surefire-plugin from 3.2.2 to 3.2.3
> * https://github.com/apache/creadur-rat/pull/181 3.2.3 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to