From 429c96857734af50adb0b749c9751813a132a2d2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 22 Sep 2025 09:13:14 +0000 Subject: [PATCH 1/2] Bump org.owasp.dependencycheck from 12.1.3 to 12.1.5 Bumps org.owasp.dependencycheck from 12.1.3 to 12.1.5. --- updated-dependencies: - dependency-name: org.owasp.dependencycheck dependency-version: 12.1.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- java-client/build.gradle.kts | 2 +- java-codegen/build.gradle.kts | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/java-client/build.gradle.kts b/java-client/build.gradle.kts index eb2f1407c..9c78d6a35 100644 --- a/java-client/build.gradle.kts +++ b/java-client/build.gradle.kts @@ -53,7 +53,7 @@ plugins { `java-library` `maven-publish` id("com.github.jk1.dependency-license-report") version "2.9" - id("org.owasp.dependencycheck") version "12.1.3" + id("org.owasp.dependencycheck") version "12.1.5" id("opensearch-java.spotless-conventions") } diff --git a/java-codegen/build.gradle.kts b/java-codegen/build.gradle.kts index 356ef3417..578c021b9 100644 --- a/java-codegen/build.gradle.kts +++ b/java-codegen/build.gradle.kts @@ -32,7 +32,7 @@ buildscript { plugins { application id("com.github.jk1.dependency-license-report") version "2.9" - id("org.owasp.dependencycheck") version "12.1.3" + id("org.owasp.dependencycheck") version "12.1.5" id("de.undercouch.download") version "5.6.0" id("opensearch-java.spotless-conventions") From 38948e9b00d3b4574c82fa826cf0abbd04404f4a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 22 Sep 2025 09:13:25 +0000 Subject: [PATCH 2/2] Update changelog Signed-off-by: dependabot[bot] Signed-off-by: Andriy Redko --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index b6fa74428..8f8e42154 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -8,6 +8,7 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/) - Bump `org.opensearch.gradle:build-tools` from 3.2.0-SNAPSHOT to 3.3.0-SNAPSHOT ([#1714](https://github.com/opensearch-project/opensearch-java/pull/1714)) - Bump `org.ajoberstar.grgit:grgit-gradle` from 5.3.2 to 5.3.3 ([#1723](https://github.com/opensearch-project/opensearch-java/pull/1723)) - Bump `org.apache.httpcomponents.core5:httpcore5` from 5.3.4 to 5.3.6 ([#1726](https://github.com/opensearch-project/opensearch-java/pull/1726), [#1733](https://github.com/opensearch-project/opensearch-java/pull/1733)) +- Bump `org.owasp.dependencycheck` from 12.1.3 to 12.1.5 ([#1735](https://github.com/opensearch-project/opensearch-java/pull/1735)) ## [Unreleased 3.x] ### Added