Re: [PR] Bump ossf/scorecard-action from 2.3.0 to 2.3.1 [santuario-xml-security-java]

2023-10-29 Thread via GitHub
github-actions[bot] commented on PR #239: URL: https://github.com/apache/santuario-xml-security-java/pull/239#issuecomment-1784373172 Dependency Review ✅ No vulnerabilities or license issues found.Scanned Manifest Files .github/workflows/scorecards.ymlossf/scorecard-action@0864cf19026

[PR] Bump ossf/scorecard-action from 2.3.0 to 2.3.1 [santuario-xml-security-java]

2023-10-29 Thread via GitHub
dependabot[bot] opened a new pull request, #239: URL: https://github.com/apache/santuario-xml-security-java/pull/239 Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.3.0 to 2.3.1. Release notes Sourced from https://github.com/ossf/scorecard-action/rele

Re: [PR] Bump org.cyclonedx:cyclonedx-maven-plugin from 2.7.9 to 2.7.10 [santuario-xml-security-java]

2023-10-29 Thread via GitHub
github-actions[bot] commented on PR #238: URL: https://github.com/apache/santuario-xml-security-java/pull/238#issuecomment-1784368607 Dependency Review ✅ No vulnerabilities or license issues found.Scanned Manifest Files pom.xmlorg.cyclonedx:cyclonedx-maven-plugin@2.7.10org.cyclonedx:c

[PR] Bump org.cyclonedx:cyclonedx-maven-plugin from 2.7.9 to 2.7.10 [santuario-xml-security-java]

2023-10-29 Thread via GitHub
dependabot[bot] opened a new pull request, #238: URL: https://github.com/apache/santuario-xml-security-java/pull/238 Bumps [org.cyclonedx:cyclonedx-maven-plugin](https://github.com/CycloneDX/cyclonedx-maven-plugin) from 2.7.9 to 2.7.10. Release notes Sourced from https://github.co