commits

SHA	Message	Author	Date
02bb473c	perf(core): avoid rewriting all NULL-ecosystem rows during database maintenan... Co-authored-by: Claude Fable 5 <n**y@a**m>	Dieter Hubau <d**u@km> Committed by: GitHub <ny@g**m>	16 days ago
aa1614bc	fix(maven): report the CVSS score that failed the build (#8727) Co-authored-by: Jeremy Long <j**g@gm> Signed-off-by: Eljees <3l@g**m>	Eljees <5**s@um> Committed by: GitHub <ny@g**m>	16 days ago
ba7aa18a	fix(core): parse single letter version suffixes without a period (#8728) Signed-off-by: Eljees <3**l@g**m>	Eljees <5**s@um> Committed by: GitHub <ny@g**m>	20 days ago
2a7d5442	build(deps): bump org.apache.commons:commons-collections4 from 4.5.0 to 4.6.0... Co-authored-by: dependabot[bot] <4**]@um> Signed-off-by: dependabot[bot] <st@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	21 days ago
c1383ae8	merge build(deps): bump httpcomponents.client.version from 5.6.3 to 5.6.4 (#8730)	Nicolas Humblot <c**t@nr> Committed by: GitHub <ny@g**m>	23 days ago
e7e94115	chore: remove some unnecessary commons.lang3 usage (#8726) Signed-off-by: Chad Wilson <2**n@u**m>	Chad Wilson <2**n@um> Committed by: GitHub <ny@g**m>	24 days ago
4225365a	build(deps): bump httpcomponents.client.version from 5.6.3 to 5.6.4 Signed-off-by: dependabot[bot] <s**t@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	25 days ago
277bf441	merge build(deps): bump joda-time:joda-time from 2.14.2 to 2.14.3 (#8709)	Nicolas Humblot <c**t@nr> Committed by: GitHub <ny@g**m>	29 days ago
4962ac74	merge fix(core): correct use without NVD API key (#8716)	Nicolas Humblot <c**t@nr> Committed by: GitHub <ny@g**m>	29 days ago
8aa08a29	merge build(deps): bump org.json:json from 20260522 to 20260719 (#8710)	Nicolas Humblot <c**t@nr> Committed by: GitHub <ny@g**m>	29 days ago
0bfb0c07	fix(core): correct use without NVD API key Signed-off-by: Chad Wilson <2**n@u**m>	Chad Wilson <2**n@u**m>	29 days ago
3283f887	build(deps): bump org.postgresql:postgresql from 42.7.11 to 42.7.13 (#8706) Co-authored-by: dependabot[bot] <4**]@um> Signed-off-by: dependabot[bot] <st@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	about 1 month ago
ba2190c2	chore: remove the broken/inoperable Yarn v1 Analyzer (#8705) Co-authored-by: Copilot Autofix powered by AI <1**t@um> Signed-off-by: Chad Wilson <2n@u**m>	Chad Wilson <2**n@um> Committed by: GitHub <ny@g**m>	about 1 month ago
ba2c759b	build(deps): bump org.codehaus.gmavenplus:gmavenplus-plugin from 5.0.0 to 5.1... Co-authored-by: dependabot[bot] <4**]@um> Signed-off-by: dependabot[bot] <st@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	about 1 month ago
0cdaf3b6	build(deps): bump commons-validator:commons-validator from 1.10.1 to 1.11.0 (... Co-authored-by: dependabot[bot] <4**]@um> Signed-off-by: dependabot[bot] <st@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	about 1 month ago
572d4111	fix(fp): tweak JDK false positive suppressions for exact product matches to `... Signed-off-by: Chad Wilson <2**n@u**m>	Chad Wilson <2**n@um> Committed by: GitHub <ny@g**m>	about 1 month ago
d70b3aba	build(deps): bump org.json:json from 20260522 to 20260719 Signed-off-by: dependabot[bot] <s**t@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	about 1 month ago
ce4ff756	build(deps): bump joda-time:joda-time from 2.14.2 to 2.14.3 Signed-off-by: dependabot[bot] <s**t@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	about 1 month ago
7341a688	merge build: release 13.0.0 (#8699)	Jeremy Long <j**g@gm> Committed by: GitHub <ny@g**m>	about 1 month ago
87b1d40e	build: prepare for next development iteration	Jeremy Long <j**g@g**m>	about 1 month ago
4aacdb10	build: prepare release v13.0.0	Jeremy Long <j**g@g**m>	about 1 month ago
ea6c70d1	docs: move changelog to github releases	Jeremy Long <j**g@g**m>	about 1 month ago
d10333cc	build(deps): bump logback from 1.5.32 to 1.5.34 (#8698)	Jeremy Long <j**g@gm> Committed by: GitHub <ny@g**m>	about 1 month ago
ef5fba7e	build(deps): bump open-vulnerability-clients from 9.0.5 to 9.0.6 (#8697)	Jeremy Long <j**g@gm> Committed by: GitHub <ny@g**m>	about 1 month ago
1547a6f8	chore!: drop deprecated configuration, integration options & Nexus V2 Search ... Signed-off-by: Chad Wilson <2**n@u**m>	Chad Wilson <2**n@um> Committed by: GitHub <ny@g**m>	about 1 month ago
cddad18d	build(deps): bump org.apache.groovy:groovy-ant from 5.0.6 to 5.0.8 (#8692) Co-authored-by: dependabot[bot] <4**]@um> Signed-off-by: dependabot[bot] <st@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	about 1 month ago
78dfd954	build(deps): bump org.jsoup:jsoup from 1.22.2 to 1.23.1 (#8693) Co-authored-by: dependabot[bot] <4**]@um> Signed-off-by: dependabot[bot] <st@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	about 1 month ago
2d3be64c	build(deps): bump com.fasterxml.jackson:jackson-bom from 2.22.0 to 2.22.1 (#8... Co-authored-by: dependabot[bot] <4**]@um> Signed-off-by: dependabot[bot] <st@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	about 1 month ago
57f61899	build(deps): bump httpcomponents.client.version from 5.6.2 to 5.6.3 (#8695) Co-authored-by: dependabot[bot] <4**]@um> Signed-off-by: dependabot[bot] <st@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	about 1 month ago
30af7611	build(deps): bump commons-codec:commons-codec from 1.22.0 to 1.22.1 (#8696) Co-authored-by: dependabot[bot] <4**]@um> Signed-off-by: dependabot[bot] <st@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	about 1 month ago
d2900db0	docs: Clarify how suppress items are matched against files (#8354) Co-authored-by: Jeremy Long <j**g@gm>, Copilot Autofix powered by AI <1t@u**m>	Konrad Windszus <k**s@nz> Committed by: GitHub <ny@g**m>	about 1 month ago
d5004f1a	build(deps): bump com.mysql:mysql-connector-j from 9.7.0 to 26.7.0 (#8685) Co-authored-by: dependabot[bot] <4**]@um> Signed-off-by: dependabot[bot] <st@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	about 1 month ago
e27cb68f	fix(core): reopen database after update failure (#8679) Co-authored-by: Jeremy Long <j**g@g**m>	Eljees <5**s@um> Committed by: GitHub <ny@g**m>	about 1 month ago
46f6576f	build(deps): bump the actions-deps group with 9 updates (#8690) Co-authored-by: dependabot[bot] <4**]@um> Signed-off-by: dependabot[bot] <st@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	about 1 month ago
c766274a	build(deps): bump org.jspecify:jspecify from 1.0.0 to 1.0.1 (#8683) Co-authored-by: dependabot[bot] <4**]@um>, Jeremy Long <jg@gm> Signed-off-by: dependabot[bot] <st@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	about 1 month ago
d976e688	docs: document NVD 2.0 data feeds (#8680) Co-authored-by: Jeremy Long <j**g@g**m>	Eljees <5**s@um> Committed by: GitHub <ny@g**m>	about 1 month ago
1ea7e863	build(deps): bump com.github.spotbugs:spotbugs-annotations from 4.10.2 to 4.1... Co-authored-by: dependabot[bot] <4**]@um> Signed-off-by: dependabot[bot] <st@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	about 1 month ago
1149f239	build(deps-dev): bump com.github.spotbugs:spotbugs-maven-plugin from 4.10.2.0... Co-authored-by: dependabot[bot] <4**]@um> Signed-off-by: dependabot[bot] <st@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	about 1 month ago
7b7b4ed8	fix(fp): remove duplicate oracle:projects base suppression (#8688) Signed-off-by: Chad Wilson <2**n@u**m>	Chad Wilson <2**n@um> Committed by: GitHub <ny@g**m>	about 1 month ago
49639f85	build(deps): bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5... Co-authored-by: dependabot[bot] <4**]@um> Signed-off-by: dependabot[bot] <st@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	about 1 month ago
5efbcf9d	build(deps): bump org.apache.httpcomponents.core5:httpcore5 from 5.4.2 to 5.4... Co-authored-by: dependabot[bot] <4**]@um>, Jeremy Long <jg@gm> Signed-off-by: dependabot[bot] <st@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	about 1 month ago
12b0f84c	build(deps): bump golang from 1.26.4-alpine to 1.26.5-alpine (#8655) Co-authored-by: dependabot[bot] <4**]@um>, Jeremy Long <jg@gm> Signed-off-by: dependabot[bot] <st@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	about 1 month ago
e182eade	fix(tests): update failing retireJs test (#8682)	Jeremy Long <j**g@gm> Committed by: GitHub <ny@g**m>	about 1 month ago
d16bc847	build(deps)!: bump maven-core from 3.6.3 to 3.8.1 (#7612) Co-authored-by: Nicolas Humblot <c**t@n**r>	Jeremy Long <j**g@gm> Committed by: GitHub <ny@g**m>	about 1 month ago
c34bb2e9	build(deps): bump com.github.spotbugs:spotbugs-annotations from 4.9.8 to 4.10... Co-authored-by: dependabot[bot] <4**]@um> Signed-off-by: dependabot[bot] <st@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	about 1 month ago
cbfa5276	chore(fp): remove Glassfish server suppressions duplicated into generated/hos... Signed-off-by: Chad Wilson <2**n@u**m>	Chad Wilson <2**n@um> Committed by: GitHub <ny@g**m>	about 1 month ago
fb17bc85	docs: fix Maven debug command in `configuration.md` (#8610)	Jack Green <J**n@Gm> Committed by: GitHub <ny@g**m>	about 1 month ago
4271123a	build(deps-dev): bump org.sonatype.central:central-publishing-maven-plugin fr... Co-authored-by: dependabot[bot] <4**]@um> Signed-off-by: dependabot[bot] <st@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	about 1 month ago
cfe34a26	build(deps): bump httpcomponents.client.version from 5.6.1 to 5.6.2 (#8646) Co-authored-by: dependabot[bot] <4**]@um> Signed-off-by: dependabot[bot] <st@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	about 1 month ago
b30e0295	build(deps): bump the actions-deps group with 7 updates (#8647) Co-authored-by: dependabot[bot] <4**]@um> Signed-off-by: dependabot[bot] <st@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	about 1 month ago
a7bcb170	fix(reports): render CVSSv4 baseScore = 0.0 in JSON+XML reports (#8663) Signed-off-by: Chad Wilson <2**n@u**m>	Chad Wilson <2**n@um> Committed by: GitHub <ny@g**m>	about 1 month ago
19710f84	build(deps-dev): bump com.github.spotbugs:spotbugs-maven-plugin from 4.9.8.3 ... Co-authored-by: dependabot[bot] <4**]@um> Signed-off-by: dependabot[bot] <st@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	about 1 month ago
8773a450	docs: document configuration of Gradle connection timeouts (#8490) Signed-off-by: Chad Wilson <2**n@u**m>	Chad Wilson <2**n@um> Committed by: GitHub <ny@g**m>	about 1 month ago
797a0a07	merge fix(windows): use JAVA_HOME when java is not on PATH (#8656)	Nicolas Humblot <c**t@nr> Committed by: GitHub <ny@g**m>	about 1 month ago
7dcfc073	merge fix(fp): extend service project suppression to all Maven artifacts (#8677)	Nicolas Humblot <c**t@nr> Committed by: GitHub <ny@g**m>	about 2 months ago
21700f2a	fix(fp): extend service project suppression to all Maven artifacts	Chad Wilson <2**n@um> Committed by: GitHub <ny@g**m>	about 2 months ago
bf029e32	fix: simplify JAVA_HOME fallback logic for pull request finding Co-authored-by: Copilot Autofix powered by AI <1**t@u**m>	mohan485 <m**1@gm> Committed by: GitHub <ny@g**m>	about 2 months ago
508ca0cf	Fix Windows CLI to use JAVA_HOME when java is not on PATH	Mohanraj Sankar (MS/EOC1-XC) <S**j@i**m>	about 2 months ago
8119dd0f	merge build(deps): bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15 (#8574)	Nicolas Humblot <c**t@nr> Committed by: GitHub <ny@g**m>	3 months ago
dd13e7d9	build(deps): bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15 Signed-off-by: dependabot[bot] <s**t@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	3 months ago
c4d56e28	merge build(deps): bump com.fasterxml.jackson:jackson-bom from 2.21.3 to 2.22.0 (#8...	Nicolas Humblot <c**t@nr> Committed by: GitHub <ny@g**m>	3 months ago
b07a01b0	merge build(deps): bump org.codehaus.gmavenplus:gmavenplus-plugin from 4.3.1 to 5.0...	Nicolas Humblot <c**t@nr> Committed by: GitHub <ny@g**m>	3 months ago
6ab9d080	merge build(deps): bump golang from 1.26.3-alpine to 1.26.4-alpine (#8569)	Nicolas Humblot <c**t@nr> Committed by: GitHub <ny@g**m>	3 months ago
96ed4a73	build(deps): bump golang from 1.26.3-alpine to 1.26.4-alpine Signed-off-by: dependabot[bot] <s**t@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	3 months ago
28b55a91	build(deps): bump org.codehaus.gmavenplus:gmavenplus-plugin Signed-off-by: dependabot[bot] <s**t@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	3 months ago
2eb9cc17	merge fix: improve Java 17+ compatibility by removing jdiagnostics (#8565)	Nicolas Humblot <c**t@nr> Committed by: GitHub <ny@g**m>	3 months ago
d1d8b99c	fix: remove jdiagnostics Signed-off-by: Chad Wilson <2**n@u**m>	Chad Wilson <2**n@u**m>	3 months ago
78c8b102	merge build(deps): bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.5 t...	Nicolas Humblot <c**t@nr> Committed by: GitHub <ny@g**m>	3 months ago
8355a07e	merge build(deps): bump the actions-deps group with 4 updates (#8563)	Nicolas Humblot <c**t@nr> Committed by: GitHub <ny@g**m>	3 months ago
f3949f3f	build(deps): bump the actions-deps group with 4 updates Signed-off-by: dependabot[bot] <s**t@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	3 months ago
acc350eb	build(deps): bump org.apache.maven.plugins:maven-failsafe-plugin Signed-off-by: dependabot[bot] <s**t@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	3 months ago
2faec343	build(deps): bump com.fasterxml.jackson:jackson-bom Signed-off-by: dependabot[bot] <s**t@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	3 months ago
8fb68e25	build(deps): Pin Lock Threads action to v6.0.2 SHA (#8559) Co-authored-by: copilot-swe-agent[bot] <1**t@u**m>	Copilot <1**t@um> Committed by: GitHub <ny@g**m>	3 months ago
c7f95195	build(deps): bump org.json:json from 20251224 to 20260522 (#8546) Co-authored-by: dependabot[bot] <4**]@um> Signed-off-by: dependabot[bot] <st@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	3 months ago
997df798	build(deps): bump org.apache.maven.plugins:maven-site-plugin from 3.21.0 to 3... Co-authored-by: dependabot[bot] <4**]@um> Signed-off-by: dependabot[bot] <st@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	3 months ago
09014930	fix(fp): allow stricter matching of suppression CPE 2.2 URI prefixes to only ... Signed-off-by: Chad Wilson <2**n@u**m>	Chad Wilson <2**n@um> Committed by: GitHub <ny@g**m>	3 months ago
8ed81d0e	fix(core): add missing nvd.api.key entry to dependencycheck.properties (#8549)	Anand Nawale <1**6@um> Committed by: GitHub <ny@g**m>	3 months ago
1d100245	merge build(deps-dev): bump org.eclipse.parsson:jakarta.json from 1.1.7 to 1.1.9 (#...	Nicolas Humblot <c**t@nr> Committed by: GitHub <ny@g**m>	3 months ago
dba0ffef	merge build(deps-dev): bump org.apache.maven.plugins:maven-surefire-report-plugin f...	Nicolas Humblot <c**t@nr> Committed by: GitHub <ny@g**m>	3 months ago
53718958	merge build(deps): bump org.apache.maven.plugins:maven-dependency-plugin from 3.10....	Nicolas Humblot <c**t@nr> Committed by: GitHub <ny@g**m>	3 months ago
b9c20211	build(deps): bump org.apache.maven.plugins:maven-dependency-plugin Signed-off-by: dependabot[bot] <s**t@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	3 months ago
b46fd5b4	merge build(deps): bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 t...	Nicolas Humblot <c**t@nr> Committed by: GitHub <ny@g**m>	3 months ago
0a8f6531	build(deps): bump org.apache.maven.plugins:maven-surefire-plugin Signed-off-by: dependabot[bot] <s**t@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	3 months ago
d52fa399	build(deps-dev): bump org.apache.maven.plugins:maven-surefire-report-plugin Signed-off-by: dependabot[bot] <s**t@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	3 months ago
16e1a231	build(deps-dev): bump org.eclipse.parsson:jakarta.json Signed-off-by: dependabot[bot] <s**t@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	3 months ago
863730fc	build(deps): bump org.junit:junit-bom from 5.14.3 to 5.14.4 (#8547) Co-authored-by: dependabot[bot] <4**]@um> Signed-off-by: dependabot[bot] <st@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	3 months ago
ce269ced	merge docs(cli): fix escaping (#8551)	Nicolas Humblot <c**t@nr> Committed by: GitHub <ny@g**m>	3 months ago
6c30616b	docs(cli): fix escaping	Chad Wilson <2**n@um> Committed by: GitHub <ny@g**m>	3 months ago
c5f5f681	fix(analyzer): detect OpenSSL 3.x in OpenSSLAnalyzer (#8484)	Shawn Huang <s**r@um> Committed by: GitHub <ny@g**m>	3 months ago
783dc83b	ci: automatically publish suppressions after merged PRs (#8527) Co-authored-by: Copilot Autofix powered by AI <1**t@um> Signed-off-by: Chad Wilson <2n@u**m>	Chad Wilson <2**n@um> Committed by: GitHub <ny@g**m>	3 months ago
f2c940f5	ci: fix FP ops workflow to generate CPE regex for optional suffix matches (#8... Signed-off-by: Chad Wilson <2**n@u**m>	Chad Wilson <2**n@um> Committed by: GitHub <ny@g**m>	3 months ago
115aad92	merge build(deps): bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 t...	Nicolas Humblot <c**t@nr> Committed by: GitHub <ny@g**m>	4 months ago
d9da5295	merge docs: clarify Sonatype Guide OSS Index suggestions (#8477)	Nicolas Humblot <c**t@nr> Committed by: GitHub <ny@g**m>	4 months ago
0252f493	merge Merge branch 'main' into oss-index-docs	Chad Wilson <2**n@um> Committed by: GitHub <ny@g**m>	4 months ago
ddd78616	build(deps): bump org.apache.maven.plugins:maven-enforcer-plugin Signed-off-by: dependabot[bot] <s**t@g**m>	dependabot[bot] <4**]@um> Committed by: GitHub <ny@g**m>	4 months ago
f03b7dcf	fix: publish-suppressions action trigger (#8516)	Jeremy Long <j**g@gm> Committed by: GitHub <ny@g**m>	4 months ago
f7404476	chore(fp): use more conservative CPE 22 prefix suppression syntax to avoid fa... Co-authored-by: Jeremy Long <j**g@gm> Signed-off-by: Chad Wilson <2n@u**m>	Chad Wilson <2**n@um> Committed by: GitHub <ny@g**m>	4 months ago
3904c968	chore(fp): remove unnecessary grpc suppressions (#8505) Co-authored-by: Jeremy Long <j**g@gm> Signed-off-by: Chad Wilson <2n@u**m>	Chad Wilson <2**n@um> Committed by: GitHub <ny@g**m>	4 months ago
e070d60f	test: make yarn tests agnostic of corepack defaults (#8413) Signed-off-by: Chad Wilson <2**n@u**m>	Chad Wilson <2**n@um> Committed by: GitHub <ny@g**m>	4 months ago
63a180c0	fix: migrate git-commit-id-plugin to maintained io.github.git-commit-id coord... Co-authored-by: Chad Wilson <2**n@u**m>	Umesh Deshmukh <u**6@gm> Committed by: GitHub <ny@g**m>	4 months ago

← Back to repository

ecosyste.ms

Data

Tools

Indexes

Applications

Experiments

Commits

GitHub / dependency-check/DependencyCheck / commits