Skip to content

Sync fork with latest OWASP Benchmark upstream commits - #22

Merged
fgibelin merged 5 commits into
masterfrom
fgibelin-sync-fork-f5d
Nov 10, 2026
Merged

fgibelin merged 5 commits into
masterfrom
fgibelin-sync-fork-f5d

Conversation

@fgibelin

Copy link
Copy Markdown
Owner

Summary

Merge the latest OWASP-Benchmark/BenchmarkJava:master into the fork, preserving fork-specific commits.

Upstream commits included:

Verification

  • Upstream master is an ancestor of the sync branch.
  • The resulting diff changes only the two dependency versions above.
  • GitHub Actions checks must pass before merge.

dependabot Bot and others added 5 commits November 9, 2026 11:02
Bumps [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) from 2.23.0 to 2.24.0.
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](mojohaus/versions@2.23.0...2.24.0)

---
updated-dependencies:
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-version: 2.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.39.2 to 4.39.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v4.39.2...v4.39.3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.39.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…t/maven/org.codehaus.mojo-versions-maven-plugin-2.24.0

Bump org.codehaus.mojo:versions-maven-plugin from 2.23.0 to 2.24.0
…t/github_actions/github/codeql-action-4.39.3

Bump github/codeql-action from 4.39.2 to 4.39.3
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@fgibelin
fgibelin requested a balanced review from Copilot November 10, 2026 08:17

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Warning

Copilot couldn't run its full agentic review because it didn't start before the timeout. Make sure your repository has a runner available, or add a copilot-code-review.yml file specifying one with the runs-on attribute. See the docs for more details.

Copilot review overview

No open issues 🎉

What changed in this PR

Syncs this fork with the latest upstream OWASP Benchmark master by incorporating upstream dependency/tooling version bumps while preserving fork-specific commits.

Changes:

  • Bump org.codehaus.mojo:versions-maven-plugin from 2.23.0 to 2.24.0 in pom.xml
  • Bump github/codeql-action from v4.39.2 to v4.39.3 in CodeQL workflow
File Description
pom.xml Updates Maven Versions Plugin version to match upstream.
.github/​workflows/​codeql-analysis.yml Updates CodeQL action versions to match upstream workflow.

Review effort: Lite

@fgibelin
fgibelin merged commit 6fec7f9 into master Nov 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants