763 Commits

Author SHA1 Message Date
Andreas Dangel
65437fc3b7 Merge branch 'master' into pmd/7.0.x 2022-06-24 16:00:03 +02:00
Andreas Dangel
25eb9d885b Merge pull request #4005 from adangel:sonatype-lift-issues
[core] Fix current sonatype lift issues #4005
2022-06-24 15:36:36 +02:00
Andreas Dangel
87bef022a6 Merge branch 'master' into pmd/7.0.x 2022-06-13 19:06:49 +02:00
Andreas Dangel
de01d20458 Merge pull request #4007 from adangel:pmd7-new-m-pmd-p
Use maven-pmd-plugin 3.18.0-pmd7-SNAPSHOT for pmd7 #4007
2022-06-13 18:48:34 +02:00
Andreas Dangel
02a7d4e0dd Use maven-pmd-plugin 3.18.0-pmd7-SNAPSHOT for pmd7 2022-06-13 18:18:43 +02:00
Maikel Steneker
f2d1c95102 Bump dokka maven plugin from 1.4.32 to 1.6.21 2022-06-13 11:44:32 +02:00
Maikel Steneker
179578dffb Bump kotlin from 1.4.32 to 1.7.0 2022-06-13 11:43:04 +02:00
Andreas Dangel
9537629e58 Upgrade com.google.protobuf:protobuf-java from 3.7.1 to 3.16.1
Fixes CVE-2021-22569 A potential Denial of Service issue in protobuf-java
https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-wrvw-hg22-4m67
2022-06-09 16:22:29 +02:00
Andreas Dangel
a8a61f2c44 Upgrade io.github.classgraph:classgraph from 4.8.102 to 4.8.112
Fixes [sonatype-2021-1074] CWE-611: Improper Restriction of XML External Entity Reference ('XXE')
2022-06-09 16:19:28 +02:00
Andreas Dangel
4b2c3fa1a4 Exclude commons-io (CVE-2021-29425)
Refactor last test usages to use PMD's IOUtil instead.
2022-06-09 16:15:19 +02:00
Andreas Dangel
9681ea800b Merge branch 'master' into pmd/7.0.x 2022-06-09 15:08:04 +02:00
Andreas Dangel
6ecaa64beb Bump maven-pmd-plugin from 3.16.0 to 3.17.0 2022-06-07 19:41:37 +02:00
Andreas Dangel
2bdc8a8263 Merge branch 'master' into pmd/7.0.x 2022-06-04 15:59:22 +02:00
Andreas Dangel
021c5a25e8 chore: Check for SNAPSHOT build tools and other SNAPSHOTs 2022-06-04 15:49:01 +02:00
Andreas Dangel
73e5a68978 Merge branch 'master' into pmd/7.0.x 2022-05-28 12:09:48 +02:00
Andreas Dangel
459c23a8b6 Bump build-tools from 17-SNAPSHOT to 18 2022-05-28 11:56:10 +02:00
Andreas Dangel
44e7aec80f Bump pmd from 6.45.0 to 6.46.0 2022-05-28 11:42:52 +02:00
Andreas Dangel
04c1271d88 [maven-release-plugin] prepare for next development iteration 2022-05-28 11:04:32 +02:00
Andreas Dangel
a75acdeff8 [maven-release-plugin] prepare release pmd_releases/6.46.0 2022-05-28 11:04:27 +02:00
Andreas Dangel
2085e795ad Merge branch 'master' into pmd/7.0.x 2022-05-26 15:52:20 +02:00
Andreas Dangel
67629e13d0 Merge pull request #3968 from adangel:replace-commons-io
[core] Replace commons-io #3968
2022-05-26 15:26:22 +02:00
Andreas Dangel
309d1dea28 Merge branch 'replace-commons-io' into pmd7-replace-commons-io 2022-05-13 16:00:19 +02:00
Andreas Dangel
abfc463ef9 Update build-tools to 18-SNAPSHOT 2022-05-13 12:03:15 +02:00
Andreas Dangel
753cb49e40 [all] Remove dependency to commons-io 2022-05-13 12:03:14 +02:00
Andreas Dangel
a28c239921 Bump kotest from 4.3.1 to 4.4.3 2022-05-12 18:08:36 +02:00
Andreas Dangel
03a51a73a5 Bump kotlin from 1.4.10 to 1.4.32
Fixes https://nvd.nist.gov/vuln/detail/CVE-2020-29582
2022-05-12 17:48:04 +02:00
Andreas Dangel
1deb4b7c7f Merge branch 'master' into pmd/7.0.x 2022-04-30 10:37:52 +02:00
Andreas Dangel
86891b0c6d Bump pmd from 6.44.0 to 6.45.0 2022-04-30 10:27:59 +02:00
Andreas Dangel
ec64315ad7 [maven-release-plugin] prepare for next development iteration 2022-04-30 09:38:24 +02:00
Andreas Dangel
1d2b40b3c0 [maven-release-plugin] prepare release pmd_releases/6.45.0 2022-04-30 09:38:19 +02:00
Andreas Dangel
184d83b501 Merge remote-tracking branch 'adangel/html-jsoup' into pmd7-html-jsoup 2022-04-22 14:37:25 +02:00
Andreas Dangel
62bedd301a Merge branch 'master' into html-jsoup 2022-04-22 08:55:55 +02:00
Andreas Dangel
24f4b2ecb6 [ci] Fix maven-pmd-plugin configuration 2022-04-22 08:20:46 +02:00
Andreas Dangel
e0c0e96d07 Merge branch 'master' into pmd/7.0.x 2022-04-12 20:15:44 +02:00
Andreas Dangel
b413d86d08 [html] Add support for HTML using jsoup parser 2022-03-31 17:08:45 +02:00
Andreas Dangel
4a12aebbf9 Bump pmd from 6.43.0 to 6.44.0 2022-03-27 17:48:08 +02:00
Andreas Dangel
2980897529 Merge branch 'master' into pmd/7.0.x 2022-03-27 17:15:12 +02:00
Andreas Dangel
be3e941a08 [maven-release-plugin] prepare for next development iteration 2022-03-27 17:01:59 +02:00
Andreas Dangel
6859f8db36 [maven-release-plugin] prepare release pmd_releases/6.44.0 2022-03-27 17:01:54 +02:00
Clément Fournier
9dae9d70db Update saxon to 10.7 2022-03-09 19:01:35 +01:00
Andreas Dangel
2091c78ead Merge branch 'pmd/7.0.x' into pmd7-896-slf4j 2022-02-26 11:29:11 +01:00
Andreas Dangel
524fcd8e38 Merge branch 'master' into pmd/7.0.x 2022-02-26 10:45:47 +01:00
Andreas Dangel
202339290d Bump pmd from 6.42.0 to 6.43.0 2022-02-26 10:36:16 +01:00
Andreas Dangel
69fb502883 [maven-release-plugin] prepare for next development iteration 2022-02-26 10:01:08 +01:00
Andreas Dangel
dd0ee6190b [maven-release-plugin] prepare release pmd_releases/6.43.0 2022-02-26 10:01:03 +01:00
Andreas Dangel
7b702bd6eb [core] Add jul-to-slf4j bridge
This is at least needed for apex jorje, but might be handy
for any other library that logs through jul.
2022-02-18 16:44:31 +01:00
Andreas Dangel
f6378d17ea Merge branch 'pmd/7.0.x' into pmd7-896-slf4j 2022-02-18 14:22:10 +01:00
Andreas Dangel
116cb766aa Merge branch 'master' into pmd/7.0.x 2022-02-18 12:45:04 +01:00
Andreas Dangel
64a8b37972 Use new dogfood rule "DoNotUseJavaUtilLogging" 2022-02-17 18:54:38 +01:00
Andreas Dangel
e1d66e2f42 [core] Use slf4j-api and slf4j-simple
Support "--debug" flag for slf4j-simple
2022-02-17 18:54:36 +01:00