Skip to content

build(deps): bump versions-maven-plugin from 2.14.1 to 2.15.0 - #555

Merged
John Byrne (johnbyrnejb) merged 1 commit into
masterfrom
dependabot/maven/org.codehaus.mojo-versions-maven-plugin-2.15.0
Apr 3, 2023
Merged

John Byrne (johnbyrnejb) merged 1 commit into
masterfrom
dependabot/maven/org.codehaus.mojo-versions-maven-plugin-2.15.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Feb 22, 2023 •

Copy link
Copy Markdown
Contributor

Bumps versions-maven-plugin from 2.14.1 to 2.15.0.

Release notes

Sourced from versions-maven-plugin's releases.

2.15.0

Changes

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

👻 Maintenance

2.14.2

Changes

🚀 New features and improvements

🐛 Bug Fixes

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Feb 22, 2023
@dependabot
dependabot Bot force-pushed the dependabot/maven/org.codehaus.mojo-versions-maven-plugin-2.15.0 branch from a8eab40 to f525acb Compare February 22, 2023 14:27
@dependabot
dependabot Bot force-pushed the dependabot/maven/org.codehaus.mojo-versions-maven-plugin-2.15.0 branch from f525acb to e70a817 Compare February 22, 2023 18:31
@dependabot
dependabot Bot force-pushed the dependabot/maven/org.codehaus.mojo-versions-maven-plugin-2.15.0 branch from e70a817 to faa813b Compare April 3, 2023 17:52
@what-the-diff

what-the-diff Bot commented Apr 3, 2023 •

Copy link
Copy Markdown

PR Summary

  • Updated versions-maven-plugin
    The version of the versions-maven-plugin has been updated from 2.14.1 to 2.15.0 for improved performance and stability.

Bumps [versions-maven-plugin](https://github.com/mojohaus/versions) from 2.14.1 to 2.15.0.
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](mojohaus/versions@2.14.1...2.15.0)

---
updated-dependencies:
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/org.codehaus.mojo-versions-maven-plugin-2.15.0 branch from faa813b to 5757f82 Compare April 3, 2023 18:16
@johnbyrnejb
John Byrne (johnbyrnejb) merged commit d88d92b into master Apr 3, 2023
@johnbyrnejb
John Byrne (johnbyrnejb) deleted the dependabot/maven/org.codehaus.mojo-versions-maven-plugin-2.15.0 branch April 3, 2023 19:13
Antony Stubbs (astubbs) added a commit to astubbs/parallel-consumer that referenced this pull request Aug 8, 2026
…tops flagging colours

The gate is purely textual, so #111 and confluentinc#555 in a stylesheet read as unqualified
issue references. Expanding every 3-digit shorthand to its 6-digit form is
visually identical CSS and removes the whole class rather than today's instances.

Same reason the HTML escaper now emits &#x27; instead of the decimal &#39; - the
hex form is what OWASP recommends anyway, so this is a small improvement rather
than only an appeasement.

Not using the issue-refs: N/A escape hatch: it exists for references that
genuinely need no qualifier, and silencing a gate is worse than removing what
trips it when removing it costs nothing.

Refs #215
Antony Stubbs (astubbs) added a commit to astubbs/parallel-consumer that referenced this pull request Aug 10, 2026
…tops flagging colours

The gate is purely textual, so #111 and confluentinc#555 in a stylesheet read as unqualified
issue references. Expanding every 3-digit shorthand to its 6-digit form is
visually identical CSS and removes the whole class rather than today's instances.

Same reason the HTML escaper now emits &#x27; instead of the decimal &#39; - the
hex form is what OWASP recommends anyway, so this is a small improvement rather
than only an appeasement.

Not using the issue-refs: N/A escape hatch: it exists for references that
genuinely need no qualifier, and silencing a gate is worse than removing what
trips it when removing it costs nothing.

Refs #215
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant