diff --git a/.github/dependabot.yml b/.github/dependabot.yml index f597c01..87e47f0 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -5,6 +5,9 @@ version: 2 registries: + maven-central: + type: maven-repository + url: https://repo.maven.apache.org/maven2/ maven-snapshots: type: maven-repository url: https://s01.oss.sonatype.org/content/repositories/snapshots/ @@ -22,6 +25,7 @@ updates: - package-ecosystem: gradle directory: / registries: + - maven-central - maven-snapshots - creek-github-packages open-pull-requests-limit: 50 diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 4538394..176521a 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -39,7 +39,7 @@ jobs: java-version: '17' distribution: 'adopt' - name: Setup Gradle - uses: gradle/gradle-build-action@982da8e78c05368c70dac0351bb82647a9e9a5d2 # v2.11.1 + uses: gradle/gradle-build-action@a8f75513eafdebd8141bd1cd4e30fcd194af8dfa # v2.12.0 with: gradle-home-cache-cleanup: true - name: Build diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 3a514a4..f932006 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -28,7 +28,7 @@ jobs: uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Initialize CodeQL - uses: github/codeql-action/init@012739e5082ff0c22ca6d6ab32e07c36df03c4a4 # v3.22.12 + uses: github/codeql-action/init@0b21cf2492b6b02c465a3e5d7c473717ad7721ba # v3.23.1 with: languages: ${{ matrix.language }} @@ -39,7 +39,7 @@ jobs: distribution: 'adopt' - name: Setup Gradle - uses: gradle/gradle-build-action@982da8e78c05368c70dac0351bb82647a9e9a5d2 # v2.11.1 + uses: gradle/gradle-build-action@a8f75513eafdebd8141bd1cd4e30fcd194af8dfa # v2.12.0 with: gradle-home-cache-cleanup: true @@ -47,4 +47,4 @@ jobs: run: ./gradlew test - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@012739e5082ff0c22ca6d6ab32e07c36df03c4a4 # v3.22.12 + uses: github/codeql-action/analyze@0b21cf2492b6b02c465a3e5d7c473717ad7721ba # v3.23.1 diff --git a/.github/workflows/dependencies.yml b/.github/workflows/dependencies.yml index e0fccc7..02cb8ff 100644 --- a/.github/workflows/dependencies.yml +++ b/.github/workflows/dependencies.yml @@ -25,7 +25,7 @@ jobs: java-version: '17' distribution: 'adopt' - name: Setup Gradle - uses: gradle/gradle-build-action@982da8e78c05368c70dac0351bb82647a9e9a5d2 # v2.11.1 + uses: gradle/gradle-build-action@a8f75513eafdebd8141bd1cd4e30fcd194af8dfa # v2.12.0 with: dependency-graph: generate-and-submit gradle-home-cache-cleanup: true diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 95e764e..a7583a8 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -26,7 +26,7 @@ jobs: distribution: 'adopt' - name: Setup Gradle - uses: gradle/gradle-build-action@982da8e78c05368c70dac0351bb82647a9e9a5d2 # v2.11.1 + uses: gradle/gradle-build-action@a8f75513eafdebd8141bd1cd4e30fcd194af8dfa # v2.12.0 with: gradle-home-cache-cleanup: true - name: Ensure build is green diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index 5d29943..2fd46a6 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -59,7 +59,7 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: "Upload artifact" - uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # v4.0.0 + uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 # v4.3.0 with: name: SARIF file path: results.sarif @@ -67,6 +67,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@012739e5082ff0c22ca6d6ab32e07c36df03c4a4 # v3.22.12 + uses: github/codeql-action/upload-sarif@0b21cf2492b6b02c465a3e5d7c473717ad7721ba # v3.23.1 with: sarif_file: results.sarif diff --git a/.github/workflows/version.yml b/.github/workflows/version.yml index 799bf33..8017fbb 100644 --- a/.github/workflows/version.yml +++ b/.github/workflows/version.yml @@ -33,7 +33,7 @@ jobs: distribution: 'adopt' - name: Setup Gradle - uses: gradle/gradle-build-action@982da8e78c05368c70dac0351bb82647a9e9a5d2 # v2.11.1 + uses: gradle/gradle-build-action@a8f75513eafdebd8141bd1cd4e30fcd194af8dfa # v2.12.0 with: gradle-home-cache-cleanup: true - name: Increment version diff --git a/build.gradle.kts b/build.gradle.kts index ce114e0..7cbb6fc 100644 --- a/build.gradle.kts +++ b/build.gradle.kts @@ -59,7 +59,7 @@ subprojects { set("junitVersion", "5.10.1") // https://mvnrepository.com/artifact/org.junit.jupiter/junit-jupiter-api set("junitPioneerVersion", "2.2.0") // https://mvnrepository.com/artifact/org.junit-pioneer/junit-pioneer - set("mockitoVersion", "5.8.0") // https://mvnrepository.com/artifact/org.mockito/mockito-junit-jupiter + set("mockitoVersion", "5.10.0") // https://mvnrepository.com/artifact/org.mockito/mockito-junit-jupiter set("hamcrestVersion", "2.2") // https://mvnrepository.com/artifact/org.hamcrest/hamcrest-core } diff --git a/buildSrc/build.gradle.kts b/buildSrc/build.gradle.kts index e89641a..3a73ec8 100644 --- a/buildSrc/build.gradle.kts +++ b/buildSrc/build.gradle.kts @@ -43,7 +43,7 @@ tasks.withType().configureEach dependencies { implementation("com.github.spotbugs.snom:spotbugs-gradle-plugin:6.0.6") // https://plugins.gradle.org/plugin/com.github.spotbugs - implementation("com.diffplug.spotless:spotless-plugin-gradle:6.23.3") // https://plugins.gradle.org/plugin/com.diffplug.spotless + implementation("com.diffplug.spotless:spotless-plugin-gradle:6.25.0") // https://plugins.gradle.org/plugin/com.diffplug.spotless implementation("gradle.plugin.org.kt3k.gradle.plugin:coveralls-gradle-plugin:2.12.2") // https://plugins.gradle.org/plugin/com.github.kt3k.coveralls implementation("org.javamodularity:moduleplugin:1.8.12") // https://plugins.gradle.org/plugin/org.javamodularity.moduleplugin implementation("io.github.gradle-nexus:publish-plugin:1.3.0") // https://plugins.gradle.org/plugin/io.github.gradle-nexus.publish-plugin diff --git a/buildSrc/settings.gradle.kts b/buildSrc/settings.gradle.kts index 738e8f9..11a8f53 100644 --- a/buildSrc/settings.gradle.kts +++ b/buildSrc/settings.gradle.kts @@ -15,5 +15,5 @@ */ plugins { - id("org.gradle.toolchains.foojay-resolver-convention") version "0.7.0" + id("org.gradle.toolchains.foojay-resolver-convention") version "0.8.0" } \ No newline at end of file diff --git a/buildSrc/src/main/kotlin/creek-common-convention.gradle.kts b/buildSrc/src/main/kotlin/creek-common-convention.gradle.kts index 939e5b1..823f232 100644 --- a/buildSrc/src/main/kotlin/creek-common-convention.gradle.kts +++ b/buildSrc/src/main/kotlin/creek-common-convention.gradle.kts @@ -58,6 +58,7 @@ repositories { dependencies { spotbugsPlugins("com.h3xstream.findsecbugs:findsecbugs-plugin:1.12.0") + checkstyle("com.puppycrawl.tools:checkstyle:10.12.5") } configurations.all {