Bump the maven group across 3 directories with 5 updates by dependabot[bot] · Pull Request #2 · H1d3r/JavaThings · GitHub

Bumps the maven group with 3 updates in the /general directory: org.apache.commons:commons-collections4, commons-beanutils:commons-beanutils and commons-io:commons-io.
Bumps the maven group with 1 update in the /shiroattack directory: org.apache.shiro:shiro-core.
Bumps the maven group with 2 updates in the /shirodemo directory: org.apache.shiro:shiro-core and org.apache.shiro:shiro-web.

Updates org.apache.commons:commons-collections4 from 4.0 to 4.1

Updates commons-beanutils:commons-beanutils from 1.9.4 to 1.11.0

Updates commons-io:commons-io from 2.10.0 to 2.14.0

Updates org.apache.shiro:shiro-core from 1.2.4 to 1.13.0

Release notes

Sourced from org.apache.shiro:shiro-core's releases.

Apache Shiro 1.13.0

What's Changed

build(deps): bump spring.version from 5.3.28 to 5.3.29 by @dependabot in apache/shiro#1008

build(deps): bump spring-boot.version from 2.7.13 to 2.7.14 by @dependabot in apache/shiro#1017

build(deps): bump com.google.guava:guava from 32.1.1-jre to 32.1.2-jre by @dependabot in apache/shiro#1024

build(deps): bump org.owasp:dependency-check-maven from 8.3.1 to 8.4.0 by @dependabot in apache/shiro#1038

build(deps-dev): bump org.mockito:mockito-core from 5.4.0 to 5.5.0 by @dependabot in apache/shiro#1041

build(deps-dev): bump org.codehaus.groovy:groovy from 2.5.22 to 2.5.23 by @dependabot in apache/shiro#1040

build(deps): bump spring-boot.version from 2.7.14 to 2.7.15 by @dependabot in apache/shiro#1047

build(deps): bump actions/checkout from 3.5.3 to 3.6.0 by @dependabot in apache/shiro#1045

build(deps): bump jetty.version from 9.4.51.v20230217 to 9.4.52.v20230823 by @dependabot in apache/shiro#1051

build(deps-dev): bump org.easymock:easymock from 5.1.0 to 5.2.0 by @dependabot in apache/shiro#1055

build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.17.2 to 0.17.3 by @dependabot in apache/shiro#1063

build(deps): bump actions/checkout from 3.6.0 to 4.0.0 by @dependabot in apache/shiro#1064

build(deps): bump spring.version from 5.3.29 to 5.3.30 by @dependabot in apache/shiro#1072

build(deps): bump org.codehaus.mojo:versions-maven-plugin from 2.16.0 to 2.16.1 by @dependabot in apache/shiro#1075

build(deps): bump spring-boot.version from 2.7.15 to 2.7.16 by @dependabot in apache/shiro#1080

build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.17.3 to 0.18.0 by @dependabot in apache/shiro#1084

build(deps): bump actions/checkout from 4.0.0 to 4.1.0 by @dependabot in apache/shiro#1087

build(deps): bump com.mycila:license-maven-plugin from 4.2 to 4.3 by @dependabot in apache/shiro#1090

build(deps): bump org.codehaus.gmavenplus:gmavenplus-plugin from 3.0.0 to 3.0.2 by @dependabot in apache/shiro#1093

build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.18.0 to 0.18.1 by @dependabot in apache/shiro#1094

build(deps-dev): bump org.mockito:mockito-core from 5.5.0 to 5.6.0 by @dependabot in apache/shiro#1106

build(deps): bump jetty.version from 9.4.52.v20230823 to 9.4.53.v20231009 by @dependabot in apache/shiro#1110

build(deps): bump com.google.guava:guava from 32.1.2-jre to 32.1.3-jre by @dependabot in apache/shiro#1112

build(deps): bump org.jacoco:jacoco-maven-plugin from 0.8.10 to 0.8.11 by @dependabot in apache/shiro#1113

build(deps): bump actions/checkout from 4.1.0 to 4.1.1 by @dependabot in apache/shiro#1116

build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.18.1 to 0.18.2 by @dependabot in apache/shiro#1119

Disable dependency convergence report by @bdemers in apache/shiro#933

build(deps): bump spring-boot.version from 2.7.16 to 2.7.17 by @dependabot in apache/shiro#1122

build(deps): bump jersey.version from 2.40 to 2.41 by @dependabot in apache/shiro#1130

Fix naming of WebContainer Tests/IT by @bdemers in apache/shiro#1123

Remove dashboard-maven-plugin from build by @bdemers in apache/shiro#1124

build(deps): bump org.owasp:dependency-check-maven from 8.4.0 to 8.4.2 by @dependabot in apache/shiro#1134

#1138 Upgrade to Common-cli 1.6.0 by @fpapon in apache/shiro#1139

Skipping tests while running release by @bdemers in apache/shiro#1137

#1140 Upgrade to Common-codec 1.16.0 by @fpapon in apache/shiro#1141

#1143 Upgrade to ASF pom parent 30 by @fpapon in apache/shiro#1144

build(deps): bump com.ibm.icu:icu4j from 73.2 to 74.1 by @dependabot in apache/shiro#1148

Full Changelog: apache/shiro@shiro-root-1.12.0...shiro-root-1.13.0

shiro-root-1.12.0

What's Changed

Bump mockito-core from 4.9.0 to 5.0.0 by @dependabot in apache/shiro#645

Bump dependency-check-maven from 7.4.1 to 8.0.0 by @dependabot in apache/shiro#646

Bump htmlunit from 2.66.0 to 2.69.0 by @dependabot in apache/shiro#636

Bump actions/checkout from 3.2.0 to 3.3.0 by @dependabot in apache/shiro#631

Bump easymock from 5.0.1 to 5.1.0 by @dependabot in apache/shiro#628

... (truncated)

Changelog

Sourced from org.apache.shiro:shiro-core's changelog.

Licensed to the Apache Software Foundation (ASF) under one

or more contributor license agreements. See the NOTICE file

distributed with this work for additional information

regarding copyright ownership. The ASF licenses this file

to you under the Apache License, Version 2.0 (the

"License"); you may not use this file except in compliance

with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing,

software distributed under the License is distributed on an

"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY

KIND, either express or implied. See the License for the

specific language governing permissions and limitations

under the License.

This is not an official release notes document. It exists for Shiro developers to jot down their notes while working in the source code. These notes will be combined with Jira’s auto-generated release notes during a release for the total set.

###########################################################

2.0.0

###########################################################

Improvement
[SHIRO-290] Implement bcrypt and argon2 KDF algorithms
Backwards Incompatible Changes

Changed default DefaultPasswordService.java algorithm to "Argon2id".

PasswordService.encryptPassword(Object plaintext) will now throw a NullPointerException on null parameter. It was never specified how this method would behave.

Made salt non-nullable.

Removed methods in PasswordMatcher.

###########################################################

1.7.1

###########################################################

Bug
[SHIRO-797] - Shiro 1.7.0 is lower than using springboot version 2.0.7 dependency error
###########################################################

... (truncated)

Commits

8681958 [maven-release-plugin] prepare release shiro-root-1.13.0
f4daf3a Merge pull request #1148 from apache/dependabot/maven/1.13.x/com.ibm.icu-icu4...
02e1f66 build(deps): bump com.ibm.icu:icu4j from 73.2 to 74.1
d62387d Add tests for SavedRequest redirects
3b80f5c The InvalidRequestFilter is more flexible
443135b Revert "[maven-release-plugin] prepare release shiro-root-1.13.0"
208e0b8 Revert "[maven-release-plugin] prepare for next development iteration"
e4c217c [maven-release-plugin] prepare for next development iteration
fb46976 [maven-release-plugin] prepare release shiro-root-1.13.0
4e71c79 Merge pull request #1144 from fpapon/SHIRO-1143
Additional commits viewable in compare view

Updates org.apache.shiro:shiro-core from 1.2.4 to 1.13.0

Release notes

Sourced from org.apache.shiro:shiro-core's releases.

Apache Shiro 1.13.0

What's Changed

build(deps): bump spring.version from 5.3.28 to 5.3.29 by @dependabot in apache/shiro#1008

build(deps): bump spring-boot.version from 2.7.13 to 2.7.14 by @dependabot in apache/shiro#1017

build(deps): bump com.google.guava:guava from 32.1.1-jre to 32.1.2-jre by @dependabot in apache/shiro#1024

build(deps): bump org.owasp:dependency-check-maven from 8.3.1 to 8.4.0 by @dependabot in apache/shiro#1038

build(deps-dev): bump org.mockito:mockito-core from 5.4.0 to 5.5.0 by @dependabot in apache/shiro#1041

build(deps-dev): bump org.codehaus.groovy:groovy from 2.5.22 to 2.5.23 by @dependabot in apache/shiro#1040

build(deps): bump spring-boot.version from 2.7.14 to 2.7.15 by @dependabot in apache/shiro#1047

build(deps): bump actions/checkout from 3.5.3 to 3.6.0 by @dependabot in apache/shiro#1045

build(deps): bump jetty.version from 9.4.51.v20230217 to 9.4.52.v20230823 by @dependabot in apache/shiro#1051

build(deps-dev): bump org.easymock:easymock from 5.1.0 to 5.2.0 by @dependabot in apache/shiro#1055

build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.17.2 to 0.17.3 by @dependabot in apache/shiro#1063

build(deps): bump actions/checkout from 3.6.0 to 4.0.0 by @dependabot in apache/shiro#1064

build(deps): bump spring.version from 5.3.29 to 5.3.30 by @dependabot in apache/shiro#1072

build(deps): bump org.codehaus.mojo:versions-maven-plugin from 2.16.0 to 2.16.1 by @dependabot in apache/shiro#1075

build(deps): bump spring-boot.version from 2.7.15 to 2.7.16 by @dependabot in apache/shiro#1080

build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.17.3 to 0.18.0 by @dependabot in apache/shiro#1084

build(deps): bump actions/checkout from 4.0.0 to 4.1.0 by @dependabot in apache/shiro#1087

build(deps): bump com.mycila:license-maven-plugin from 4.2 to 4.3 by @dependabot in apache/shiro#1090

build(deps): bump org.codehaus.gmavenplus:gmavenplus-plugin from 3.0.0 to 3.0.2 by @dependabot in apache/shiro#1093

build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.18.0 to 0.18.1 by @dependabot in apache/shiro#1094

build(deps-dev): bump org.mockito:mockito-core from 5.5.0 to 5.6.0 by @dependabot in apache/shiro#1106

build(deps): bump jetty.version from 9.4.52.v20230823 to 9.4.53.v20231009 by @dependabot in apache/shiro#1110

build(deps): bump com.google.guava:guava from 32.1.2-jre to 32.1.3-jre by @dependabot in apache/shiro#1112

build(deps): bump org.jacoco:jacoco-maven-plugin from 0.8.10 to 0.8.11 by @dependabot in apache/shiro#1113

build(deps): bump actions/checkout from 4.1.0 to 4.1.1 by @dependabot in apache/shiro#1116

build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.18.1 to 0.18.2 by @dependabot in apache/shiro#1119

Disable dependency convergence report by @bdemers in apache/shiro#933

build(deps): bump spring-boot.version from 2.7.16 to 2.7.17 by @dependabot in apache/shiro#1122

build(deps): bump jersey.version from 2.40 to 2.41 by @dependabot in apache/shiro#1130

Fix naming of WebContainer Tests/IT by @bdemers in apache/shiro#1123

Remove dashboard-maven-plugin from build by @bdemers in apache/shiro#1124

build(deps): bump org.owasp:dependency-check-maven from 8.4.0 to 8.4.2 by @dependabot in apache/shiro#1134

#1138 Upgrade to Common-cli 1.6.0 by @fpapon in apache/shiro#1139

Skipping tests while running release by @bdemers in apache/shiro#1137

#1140 Upgrade to Common-codec 1.16.0 by @fpapon in apache/shiro#1141

#1143 Upgrade to ASF pom parent 30 by @fpapon in apache/shiro#1144

build(deps): bump com.ibm.icu:icu4j from 73.2 to 74.1 by @dependabot in apache/shiro#1148

Full Changelog: apache/shiro@shiro-root-1.12.0...shiro-root-1.13.0

shiro-root-1.12.0

What's Changed

Bump mockito-core from 4.9.0 to 5.0.0 by @dependabot in apache/shiro#645

Bump dependency-check-maven from 7.4.1 to 8.0.0 by @dependabot in apache/shiro#646

Bump htmlunit from 2.66.0 to 2.69.0 by @dependabot in apache/shiro#636

Bump actions/checkout from 3.2.0 to 3.3.0 by @dependabot in apache/shiro#631

Bump easymock from 5.0.1 to 5.1.0 by @dependabot in apache/shiro#628

... (truncated)

Changelog

Sourced from org.apache.shiro:shiro-core's changelog.

Licensed to the Apache Software Foundation (ASF) under one

or more contributor license agreements. See the NOTICE file

distributed with this work for additional information

regarding copyright ownership. The ASF licenses this file

to you under the Apache License, Version 2.0 (the

"License"); you may not use this file except in compliance

with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing,

software distributed under the License is distributed on an

"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY

KIND, either express or implied. See the License for the

specific language governing permissions and limitations

under the License.

This is not an official release notes document. It exists for Shiro developers to jot down their notes while working in the source code. These notes will be combined with Jira’s auto-generated release notes during a release for the total set.

###########################################################

2.0.0

###########################################################

Improvement
[SHIRO-290] Implement bcrypt and argon2 KDF algorithms
Backwards Incompatible Changes

Changed default DefaultPasswordService.java algorithm to "Argon2id".

PasswordService.encryptPassword(Object plaintext) will now throw a NullPointerException on null parameter. It was never specified how this method would behave.

Made salt non-nullable.

Removed methods in PasswordMatcher.

###########################################################

1.7.1

###########################################################

Bug
[SHIRO-797] - Shiro 1.7.0 is lower than using springboot version 2.0.7 dependency error
###########################################################

... (truncated)

Commits

8681958 [maven-release-plugin] prepare release shiro-root-1.13.0
f4daf3a Merge pull request #1148 from apache/dependabot/maven/1.13.x/com.ibm.icu-icu4...
02e1f66 build(deps): bump com.ibm.icu:icu4j from 73.2 to 74.1
d62387d Add tests for SavedRequest redirects
3b80f5c The InvalidRequestFilter is more flexible
443135b Revert "[maven-release-plugin] prepare release shiro-root-1.13.0"
208e0b8 Revert "[maven-release-plugin] prepare for next development iteration"
e4c217c [maven-release-plugin] prepare for next development iteration
fb46976 [maven-release-plugin] prepare release shiro-root-1.13.0
4e71c79 Merge pull request #1144 from fpapon/SHIRO-1143
Additional commits viewable in compare view

Updates org.apache.shiro:shiro-web from 1.2.4 to 1.13.0

Release notes

Sourced from org.apache.shiro:shiro-web's releases.

Apache Shiro 1.13.0

What's Changed

build(deps): bump spring.version from 5.3.28 to 5.3.29 by @dependabot in apache/shiro#1008

build(deps): bump spring-boot.version from 2.7.13 to 2.7.14 by @dependabot in apache/shiro#1017

build(deps): bump com.google.guava:guava from 32.1.1-jre to 32.1.2-jre by @dependabot in apache/shiro#1024

build(deps): bump org.owasp:dependency-check-maven from 8.3.1 to 8.4.0 by @dependabot in apache/shiro#1038

build(deps-dev): bump org.mockito:mockito-core from 5.4.0 to 5.5.0 by @dependabot in apache/shiro#1041

build(deps-dev): bump org.codehaus.groovy:groovy from 2.5.22 to 2.5.23 by @dependabot in apache/shiro#1040

build(deps): bump spring-boot.version from 2.7.14 to 2.7.15 by @dependabot in apache/shiro#1047

build(deps): bump actions/checkout from 3.5.3 to 3.6.0 by @dependabot in apache/shiro#1045

build(deps): bump jetty.version from 9.4.51.v20230217 to 9.4.52.v20230823 by @dependabot in apache/shiro#1051

build(deps-dev): bump org.easymock:easymock from 5.1.0 to 5.2.0 by @dependabot in apache/shiro#1055

build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.17.2 to 0.17.3 by @dependabot in apache/shiro#1063

build(deps): bump actions/checkout from 3.6.0 to 4.0.0 by @dependabot in apache/shiro#1064

build(deps): bump spring.version from 5.3.29 to 5.3.30 by @dependabot in apache/shiro#1072

build(deps): bump org.codehaus.mojo:versions-maven-plugin from 2.16.0 to 2.16.1 by @dependabot in apache/shiro#1075

build(deps): bump spring-boot.version from 2.7.15 to 2.7.16 by @dependabot in apache/shiro#1080

build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.17.3 to 0.18.0 by @dependabot in apache/shiro#1084

build(deps): bump actions/checkout from 4.0.0 to 4.1.0 by @dependabot in apache/shiro#1087

build(deps): bump com.mycila:license-maven-plugin from 4.2 to 4.3 by @dependabot in apache/shiro#1090

build(deps): bump org.codehaus.gmavenplus:gmavenplus-plugin from 3.0.0 to 3.0.2 by @dependabot in apache/shiro#1093

build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.18.0 to 0.18.1 by @dependabot in apache/shiro#1094

build(deps-dev): bump org.mockito:mockito-core from 5.5.0 to 5.6.0 by @dependabot in apache/shiro#1106

build(deps): bump jetty.version from 9.4.52.v20230823 to 9.4.53.v20231009 by @dependabot in apache/shiro#1110

build(deps): bump com.google.guava:guava from 32.1.2-jre to 32.1.3-jre by @dependabot in apache/shiro#1112

build(deps): bump org.jacoco:jacoco-maven-plugin from 0.8.10 to 0.8.11 by @dependabot in apache/shiro#1113

build(deps): bump actions/checkout from 4.1.0 to 4.1.1 by @dependabot in apache/shiro#1116

build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.18.1 to 0.18.2 by @dependabot in apache/shiro#1119

Disable dependency convergence report by @bdemers in apache/shiro#933

build(deps): bump spring-boot.version from 2.7.16 to 2.7.17 by @dependabot in apache/shiro#1122

build(deps): bump jersey.version from 2.40 to 2.41 by @dependabot in apache/shiro#1130

Fix naming of WebContainer Tests/IT by @bdemers in apache/shiro#1123

Remove dashboard-maven-plugin from build by @bdemers in apache/shiro#1124

build(deps): bump org.owasp:dependency-check-maven from 8.4.0 to 8.4.2 by @dependabot in apache/shiro#1134

#1138 Upgrade to Common-cli 1.6.0 by @fpapon in apache/shiro#1139

Skipping tests while running release by @bdemers in apache/shiro#1137

#1140 Upgrade to Common-codec 1.16.0 by @fpapon in apache/shiro#1141

#1143 Upgrade to ASF pom parent 30 by @fpapon in apache/shiro#1144

build(deps): bump com.ibm.icu:icu4j from 73.2 to 74.1 by @dependabot in apache/shiro#1148

Full Changelog: apache/shiro@shiro-root-1.12.0...shiro-root-1.13.0

shiro-root-1.12.0

What's Changed

Bump mockito-core from 4.9.0 to 5.0.0 by @dependabot in apache/shiro#645

Bump dependency-check-maven from 7.4.1 to 8.0.0 by @dependabot in apache/shiro#646

Bump htmlunit from 2.66.0 to 2.69.0 by @dependabot in apache/shiro#636

Bump actions/checkout from 3.2.0 to 3.3.0 by @dependabot in apache/shiro#631

Bump easymock from 5.0.1 to 5.1.0 by @dependabot in apache/shiro#628

... (truncated)

Changelog

Sourced from org.apache.shiro:shiro-web's changelog.

Licensed to the Apache Software Foundation (ASF) under one

or more contributor license agreements. See the NOTICE file

distributed with this work for additional information

regarding copyright ownership. The ASF licenses this file

to you under the Apache License, Version 2.0 (the

"License"); you may not use this file except in compliance

with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing,

software distributed under the License is distributed on an

"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY

KIND, either express or implied. See the License for the

specific language governing permissions and limitations

under the License.

This is not an official release notes document. It exists for Shiro developers to jot down their notes while working in the source code. These notes will be combined with Jira’s auto-generated release notes during a release for the total set.

###########################################################

2.0.0

###########################################################

Improvement
[SHIRO-290] Implement bcrypt and argon2 KDF algorithms
Backwards Incompatible Changes

Changed default DefaultPasswordService.java algorithm to "Argon2id".

PasswordService.encryptPassword(Object plaintext) will now throw a NullPointerException on null parameter. It was never specified how this method would behave.

Made salt non-nullable.

Removed methods in PasswordMatcher.

###########################################################

1.7.1

###########################################################

Bug
[SHIRO-797] - Shiro 1.7.0 is lower than using springboot version 2.0.7 dependency error
###########################################################

... (truncated)

Commits

8681958 [maven-release-plugin] prepare release shiro-root-1.13.0
f4daf3a Merge pull request #1148 from apache/dependabot/maven/1.13.x/com.ibm.icu-icu4...
02e1f66 build(deps): bump com.ibm.icu:icu4j from 73.2 to 74.1
d62387d Add tests for SavedRequest redirects
3b80f5c The InvalidRequestFilter is more flexible
443135b Revert "[maven-release-plugin] prepare release shiro-root-1.13.0"
208e0b8 Revert "[maven-release-plugin] prepare for next development iteration"
e4c217c [maven-release-plugin] prepare for next development iteration
fb46976 [maven-release-plugin] prepare release shiro-root-1.13.0
4e71c79 Merge pull request #1144 from fpapon/SHIRO-1143
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps the maven group with 3 updates in the /general directory: org.apache.commons:commons-collections4, commons-beanutils:commons-beanutils and commons-io:commons-io. Bumps the maven group with 1 update in the /shiroattack directory: [org.apache.shiro:shiro-core](https://github.com/apache/shiro). Bumps the maven group with 2 updates in the /shirodemo directory: [org.apache.shiro:shiro-core](https://github.com/apache/shiro) and [org.apache.shiro:shiro-web](https://github.com/apache/shiro). Updates `org.apache.commons:commons-collections4` from 4.0 to 4.1 Updates `commons-beanutils:commons-beanutils` from 1.9.4 to 1.11.0 Updates `commons-io:commons-io` from 2.10.0 to 2.14.0 Updates `org.apache.shiro:shiro-core` from 1.2.4 to 1.13.0 - [Release notes](https://github.com/apache/shiro/releases) - [Changelog](https://github.com/apache/shiro/blob/main/RELEASE-NOTES) - [Commits](apache/shiro@shiro-root-1.2.4...shiro-root-1.13.0) Updates `org.apache.shiro:shiro-core` from 1.2.4 to 1.13.0 - [Release notes](https://github.com/apache/shiro/releases) - [Changelog](https://github.com/apache/shiro/blob/main/RELEASE-NOTES) - [Commits](apache/shiro@shiro-root-1.2.4...shiro-root-1.13.0) Updates `org.apache.shiro:shiro-web` from 1.2.4 to 1.13.0 - [Release notes](https://github.com/apache/shiro/releases) - [Changelog](https://github.com/apache/shiro/blob/main/RELEASE-NOTES) - [Commits](apache/shiro@shiro-root-1.2.4...shiro-root-1.13.0) --- updated-dependencies: - dependency-name: org.apache.commons:commons-collections4 dependency-version: '4.1' dependency-type: direct:production dependency-group: maven - dependency-name: commons-beanutils:commons-beanutils dependency-version: 1.11.0 dependency-type: direct:production dependency-group: maven - dependency-name: commons-io:commons-io dependency-version: 2.14.0 dependency-type: direct:production dependency-group: maven - dependency-name: org.apache.shiro:shiro-core dependency-version: 1.13.0 dependency-type: direct:production dependency-group: maven - dependency-name: org.apache.shiro:shiro-core dependency-version: 1.13.0 dependency-type: direct:production dependency-group: maven - dependency-name: org.apache.shiro:shiro-web dependency-version: 1.13.0 dependency-type: direct:production dependency-group: maven ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels May 28, 2025

Bump the maven group across 3 directories with 5 updates by dependabot[bot] · Pull Request #2 · H1d3r/JavaThings · GitHub

Repository navigation

Bump the maven group across 3 directories with 5 updates - #2

Bump the maven group across 3 directories with 5 updates#2
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/general/maven-f08b6ca523

dependabot Bot commented on behalf of github May 28, 2025 •
edited
Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Bump the maven group across 3 directories with 5 updates by dependabot[bot] · Pull Request #2 · H1d3r/JavaThings · GitHub

Repository navigation

Bump the maven group across 3 directories with 5 updates - #2

Bump the maven group across 3 directories with 5 updates#2dependabot[bot] wants to merge 1 commit intomasterH1d3r/JavaThings:masterfrom dependabot/maven/general/maven-f08b6ca523H1d3r/JavaThings:dependabot/maven/general/maven-f08b6ca523Copy head branch name to clipboard

Conversation

dependabot Bot commented on behalf of github May 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Apache Shiro 1.13.0

What's Changed

shiro-root-1.12.0

What's Changed

Licensed to the Apache Software Foundation (ASF) under one

or more contributor license agreements. See the NOTICE file

distributed with this work for additional information

regarding copyright ownership. The ASF licenses this file

to you under the Apache License, Version 2.0 (the

"License"); you may not use this file except in compliance

with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing,

software distributed under the License is distributed on an

"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY

KIND, either express or implied. See the License for the

specific language governing permissions and limitations

under the License.

2.0.0

Backwards Incompatible Changes

1.7.1

Apache Shiro 1.13.0

What's Changed

shiro-root-1.12.0

What's Changed

Licensed to the Apache Software Foundation (ASF) under one

or more contributor license agreements. See the NOTICE file

distributed with this work for additional information

regarding copyright ownership. The ASF licenses this file

to you under the Apache License, Version 2.0 (the

"License"); you may not use this file except in compliance

with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing,

software distributed under the License is distributed on an

"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY

KIND, either express or implied. See the License for the

specific language governing permissions and limitations

under the License.

2.0.0

Backwards Incompatible Changes

1.7.1

Apache Shiro 1.13.0

What's Changed

shiro-root-1.12.0

What's Changed

Licensed to the Apache Software Foundation (ASF) under one

or more contributor license agreements. See the NOTICE file

distributed with this work for additional information

regarding copyright ownership. The ASF licenses this file

to you under the Apache License, Version 2.0 (the

"License"); you may not use this file except in compliance

with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing,

software distributed under the License is distributed on an

"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY

KIND, either express or implied. See the License for the

specific language governing permissions and limitations

under the License.

2.0.0

Backwards Incompatible Changes

1.7.1

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Bump the maven group across 3 directories with 5 updates#2
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/general/maven-f08b6ca523

dependabot Bot commented on behalf of github May 28, 2025 •
edited
Loading