Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump sign-maven-plugin from 0.3.1 to 1.0.0 #77

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 7, 2022

Bumps sign-maven-plugin from 0.3.1 to 1.0.0.

Release notes

Sourced from sign-maven-plugin's releases.

v1.0.0

What's Changed

🔥 New features

  • logging to DEBUG the source of configuration values (whether from POM or sysenv) #88
  • Allow empty value in environment variables #89
  • Support tilde ~ in key file path #91
  • Key configuration in server settings.xml #103
  • Exclude files from signing by wildcards #107

🐞 Bug Fixes

  • Skip primary artifact without file #108

🔨 Maintenance

  • Documentation improvement #68
  • Replace sks by ubuntu keyserver in example #69
  • Add pgpverify-maven-plugin version to pom #72
  • Mockito version in property #90
  • Code cleanup #92
  • Use organization wide release drafter configuration #93
  • Maven core components in provided scope #94
  • IT test for environment variables #95
  • Change deprecated o.s.p:plexus-sec-dispatcher to o.c.p:plexus-sec-dispatcher #96
  • Refactor code for private key configuration #102

🧰 Dependency updates

  • Bump parent from 2.11.0 to 2.11.1 #44
  • Bump mockito-junit-jupiter from 3.8.0 to 3.9.0 #45
  • Bump parent from 2.11.1 to 2.12.0 #48
  • Bump maven-plugin-annotations from 3.6.0 to 3.6.1 #49
  • Bump junit-pioneer from 1.3.8 to 1.4.0 #50
  • Bump junit-pioneer from 1.4.0 to 1.4.1 #51
  • Bump mockito-junit-jupiter from 3.9.0 to 3.10.0 #52
  • Bump parent from 2.12.0 to 2.12.1 #53
  • Bump junit-bom from 5.7.1 to 5.7.2 #54
  • Bump junit-pioneer from 1.4.1 to 1.4.2 #55
  • Bump mockito-junit-jupiter from 3.10.0 to 3.11.0 #56
  • Bump bcpg-jdk15on from 1.68 to 1.69 #57
  • Bump mockito-junit-jupiter from 3.11.0 to 3.11.1 #58
  • Bump assertj-core from 3.19.0 to 3.20.0 #59
  • Bump assertj-core from 3.20.0 to 3.20.1 #60
  • Bump slf4j-api.version from 1.7.30 to 1.7.31 #61
  • Bump mockito-junit-jupiter from 3.11.1 to 3.11.2 #62
  • Bump assertj-core from 3.20.1 to 3.20.2 #63
  • Bump parent from 2.12.1 to 2.13.0 #64
  • Bump vavr from 0.10.3 to 0.10.4 #65

... (truncated)

Commits
  • 123f8aa [maven-release-plugin] prepare release v1.0.0
  • 29fd212 Merge pull request #108 from s4u/fix-105
  • ddfcf97 Bump assertj-core from 3.21.0 to 3.22.0
  • d77467f Skip primary artifact without file
  • 7f57666 Merge pull request #107 from s4u/excludes
  • 1ace5dd Exclude files from signing by wildcards
  • 1b2e252 Bump plexus-component-annotations from 2.1.0 to 2.1.1
  • c0cd5d9 Bump mockito.version from 4.1.0 to 4.2.0
  • f5adc50 File sync from s4u/.github - Fix standard token usage
  • 6fd8f70 Merge pull request #103 from s4u/key-server-settings
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [sign-maven-plugin](https://github.com/s4u/sign-maven-plugin) from 0.3.1 to 1.0.0.
- [Release notes](https://github.com/s4u/sign-maven-plugin/releases)
- [Commits](s4u/sign-maven-plugin@v0.3.1...v1.0.0)

---
updated-dependencies:
- dependency-name: org.simplify4u.plugins:sign-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 7, 2022
@sonarcloud
Copy link

sonarcloud bot commented Jan 7, 2022

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication

@slawekjaranowski slawekjaranowski merged commit 7144fbb into master Jan 10, 2022
@slawekjaranowski slawekjaranowski deleted the dependabot/maven/org.simplify4u.plugins-sign-maven-plugin-1.0.0 branch January 10, 2022 10:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Development

Successfully merging this pull request may close these issues.

2 participants