diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..4f72716 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,40 @@ +# SPDX-FileCopyrightText: 2021 Alliander N.V. +# +# SPDX-License-Identifier: Apache-2.0 + +version: 2 + +registries: + maven-github: + type: maven-repository + url: https://maven.pkg.github.com/com-pas/* + username: OWNER + password: ${{ secrets.DB_GITHUB_PACKAGES }} + +updates: + # Maintain dependencies for GitHub Actions + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "daily" + open-pull-requests-limit: 5 + + # Maintain dependencies for Maven + - package-ecosystem: "maven" + directory: "/" + registries: + - maven-github + schedule: + interval: "daily" + open-pull-requests-limit: 5 + ignore: + # Next two dependencies shouldn't be upgrade, because Quarkus isn't using newer version of EL. + - dependency-name: org.hibernate.validator:hibernate-validator + versions: [ "[7.0,)" ] + - dependency-name: org.glassfish:jakarta.el + versions: [ "[4.0,)" ] + # Next two dependencies shouldn't be upgrade, because RestEasy isn't using newer version. (2.3.X) + - dependency-name: jakarta.xml.bind:jakarta.xml.bind-api + versions: [ "[3.0,)" ] + - dependency-name: com.sun.xml.bind:jaxb-impl + versions: [ "[3.0,)" ] diff --git a/.github/workflows/build-project.yml b/.github/workflows/build-project.yml index d108fe8..34b8858 100644 --- a/.github/workflows/build-project.yml +++ b/.github/workflows/build-project.yml @@ -15,9 +15,10 @@ jobs: steps: - uses: actions/checkout@v2 - name: Set up JDK 1.11 - uses: actions/setup-java@v1 + uses: actions/setup-java@v2.3.0 with: - java-version: 1.11 + distribution: 'zulu' + java-version: '11' - name: Create custom Maven Settings.xml uses: whelk-io/maven-settings-xml-action@v18 with: diff --git a/.github/workflows/release-project.yml b/.github/workflows/release-project.yml index a4b4727..bac04a9 100644 --- a/.github/workflows/release-project.yml +++ b/.github/workflows/release-project.yml @@ -21,10 +21,11 @@ jobs: shell: bash # Extra the tagname form the git reference, value of GITHUB_REF will be something like refs/tags/. run: echo "##[set-output name=tagname;]$(echo ${GITHUB_REF##*/})" - - uses: actions/setup-java@v2 + - name: Set up JDK 1.11 + uses: actions/setup-java@v2.3.0 with: + distribution: 'zulu' java-version: '11' - distribution: 'adopt' - name: Create custom Maven Settings.xml uses: whelk-io/maven-settings-xml-action@v18 with: diff --git a/.github/workflows/sonarcloud-analysis.yml b/.github/workflows/sonarcloud-analysis.yml index 48f7c5f..3e8cb31 100644 --- a/.github/workflows/sonarcloud-analysis.yml +++ b/.github/workflows/sonarcloud-analysis.yml @@ -14,18 +14,19 @@ jobs: - uses: actions/checkout@v2 with: fetch-depth: 0 - - name: Set up JDK 11 - uses: actions/setup-java@v1 + - name: Set up JDK 1.11 + uses: actions/setup-java@v2.3.0 with: - java-version: 11 + distribution: 'zulu' + java-version: '11' - name: Cache SonarCloud packages - uses: actions/cache@v1 + uses: actions/cache@v2.1.6 with: path: ~/.sonar/cache key: ${{ runner.os }}-sonar restore-keys: ${{ runner.os }}-sonar - name: Cache Maven packages - uses: actions/cache@v1 + uses: actions/cache@v2.1.6 with: path: ~/.m2 key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }} diff --git a/pom.xml b/pom.xml index 331ccf6..1500d09 100644 --- a/pom.xml +++ b/pom.xml @@ -19,12 +19,12 @@ SPDX-License-Identifier: Apache-2.0 11 UTF-8 - 0.0.1 - 1.7.31 - 2.12.4 + 0.0.2 + 1.7.32 + 2.12.5 2.3.3 5.7.2 - 3.11.2 + 3.12.4 0.9.1 @@ -96,7 +96,7 @@ SPDX-License-Identifier: Apache-2.0 org.glassfish jakarta.el - 3.0.3 + 3.0.4 test @@ -114,7 +114,7 @@ SPDX-License-Identifier: Apache-2.0 javax.ws.rs javax.ws.rs-api - 2.1 + 2.1.1 org.jboss.resteasy @@ -218,7 +218,7 @@ SPDX-License-Identifier: Apache-2.0 org.jboss.jandex jandex-maven-plugin - 1.1.0 + 1.2.0 make-index @@ -240,7 +240,7 @@ SPDX-License-Identifier: Apache-2.0 java - 0.8.6 + 0.8.7 jacoco @@ -288,7 +288,7 @@ SPDX-License-Identifier: Apache-2.0 org.apache.maven.plugins maven-source-plugin - 3.2.0 + 3.2.1 attach-sources