chore(deps): update dependency org.owasp.dependencycheck to v7.4.4

rundeck · Nov 20, 2024 · 8b4750c · 8b4750c
1 parent 2b4ec65
commit 8b4750c
Show file tree

Hide file tree

Showing 2 changed files with 71 additions and 1 deletion.
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
@@ -13,7 +13,7 @@ shadow = "7.1.2"
 ospackage = "9.1.1"
 buildInfo = "0.9"
 buildConfig = "3.1.0"
-owasp = "7.1.0.1"
+owasp = "7.4.4"
 jacksonDatabind = "2.18.1"
 picocli = "4.6.3"
 snakeYaml = "2.0"

diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
@@ -12,6 +12,7 @@
          <ignored-key id="84e913a8e3a748c0" reason="Key couldn't be downloaded from any key server"/>
          <ignored-key id="b3de72e647d35161" reason="Key couldn't be downloaded from any key server"/>
          <ignored-key id="928fbf39003c0425" reason="Key couldn't be downloaded from any key server"/>
+         <ignored-key id="3e48c0c6ef362b9e" reason="Key couldn't be downloaded from any key server"/>
       </ignored-keys>
       <trusted-keys>
          <trusted-key id="015479e1055341431b4545ab72475fd306b9cab7">
@@ -34,6 +35,7 @@
          <trusted-key id="0cfa413799e2464c7d7e26220a4b343f2a55fdae">
             <trusting group="com.h2database" name="h2" version="1.4.199"/>
             <trusting group="com.h2database" name="h2" version="2.1.210"/>
+            <trusting group="com.h2database" name="h2" version="2.1.214"/>
          </trusted-key>
          <trusted-key id="0dcf749d41a80e58041aae1728f57f70167c0b3a" group="^org[.]sonatype($|([.].*))" regex="true"/>
          <trusted-key id="120d6f34e627ed3a772ebbfe55c7e5e701832382">
@@ -78,6 +80,7 @@
          <trusted-key id="3909c28792327fad38100eaf04633a577c200941" group="org.vafer"/>
          <trusted-key id="43c79b4bbd131821e17d2ca77b2f0491728b8e02" group="net.i2p.crypto" name="eddsa" version="0.3.0"/>
          <trusted-key id="44fbdbbc1a00fe414f1c1873586654072ead6677" group="org.sonatype.oss" name="oss-parent" version="9"/>
+         <trusted-key id="45b1912987cb9dfa6a0d9693067091f1549b293f" group="org.semver4j" name="semver4j" version="4.1.1"/>
          <trusted-key id="475f3b8e59e6e63aa78067482c7b12f2a511e325" group="org.slf4j"/>
          <trusted-key id="485e371cb07eabe6d5778d4b0c27e8fac93b3b19" group="com.sun.mail"/>
          <trusted-key id="48b086a7d843cfa258e83286928fbf39003c0425" group="org.springframework" name="spring-framework-bom" version="5.3.27"/>
@@ -129,6 +132,7 @@
          <trusted-key id="7cd52b5a8295137c88fb5748dddafa7674e54418" group="org.testng" name="testng" version="7.5"/>
          <trusted-key id="81d3eb0408b4e1eb10af443ba4f4c886b29bc2f4" group="org.apache.lucene"/>
          <trusted-key id="839b8c32286c100bdb08f5522eb9468288817402" group="org.apache.commons"/>
+         <trusted-key id="84789d24df77a32433ce1f079eb80e92eb2135b1" group="org.apache" name="apache"/>
          <trusted-key id="8756c4f765c9ac3cb6b85d62379ce192d401ab61">
             <trusting group="info.picocli"/>
             <trusting group="org.rnorth.duct-tape"/>
@@ -168,6 +172,8 @@
          <trusted-key id="c42f8893b74021d66d44b10b848c5ec3bc9d709c" group="com.bmuschko" name="gradle-docker-plugin" version="3.2.1"/>
          <trusted-key id="c59362a11366d431e292aa32075def3ef14f0793" group="com.moandjiezana.toml" name="toml4j" version="0.7.2"/>
          <trusted-key id="c70b844f002f21f6d2b9c87522e44ac0622b91c3" group="com.beust" name="jcommander" version="1.78"/>
+         <trusted-key id="c7be5bcc9fec15518cfda882b0f3710fa64900e7" group="com.google.code.gson"/>
+         <trusted-key id="ca62ed130e4053944406df640181b45ea58677bc" group="org.apache.commons" name="commons-compress" version="1.22"/>
          <trusted-key id="cc57399d74cd7e4768ed6fa4ca62973fbf0451c0" group="com.vaadin.external.google" name="android-json" version="0.0.20131108.vaadin1"/>
          <trusted-key id="cd5464315f0b98c77e6e8ecd9daadc1c9fcc82d0">
             <trusting group="commons-cli"/>
@@ -210,6 +216,7 @@
          <trusted-key id="f3184bcd55f4d016e30d4c9bf42e87f9665015c9">
             <trusting group="org.jsoup" name="jsoup" version="1.13.1"/>
             <trusting group="org.jsoup" name="jsoup" version="1.14.3"/>
+            <trusting group="org.jsoup" name="jsoup" version="1.15.3"/>
          </trusted-key>
          <trusted-key id="f9514e84ae3708288374bbbe097586cfea37f9a6" group="org.owasp"/>
          <trusted-key id="fa1703b1d287caea3a60f931e0130a3ed5a2079e" group="org.webjars" name="jquery" version="3.5.1"/>
@@ -2183,6 +2190,14 @@
             <sha256 value="d0528050807a1a38f5a65f193b27299cd965bf2273574196367356bca3da467f" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.apache.lucene" name="lucene-analyzers-common" version="8.11.2">
+         <artifact name="lucene-analyzers-common-8.11.2.jar">
+            <sha256 value="d3def04f7d0d2c891cf2c7e3dfc14c3b53545bec1cb8732ae033f25164e5c931" origin="Generated by Gradle because a key couldn't be downloaded"/>
+         </artifact>
+         <artifact name="lucene-analyzers-common-8.11.2.pom">
+            <sha256 value="ce8750689d6acb957969a5b76768aa561d87100dc1e84ac36277e1c1eb3003c4" origin="Generated by Gradle because a key couldn't be downloaded"/>
+         </artifact>
+      </component>
       <component group="org.apache.lucene" name="lucene-analyzers-common" version="8.5.0">
          <artifact name="lucene-analyzers-common-8.5.0.jar">
             <sha256 value="26ca7b0eb9cb1035d40fc3225679376255a51196f6318d130c165e8661f16b37" origin="Generated by Gradle"/>
@@ -2199,6 +2214,14 @@
             <sha256 value="d6e1a7565627dfddf9e393dff3270cb5b1c3def3434c9adb44ed986f67c61e6a" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.apache.lucene" name="lucene-core" version="8.11.2">
+         <artifact name="lucene-core-8.11.2.jar">
+            <sha256 value="8970925f43d789a70247e36c1ba5a2607baf4195c35afd0cd878642c95c37409" origin="Generated by Gradle because a key couldn't be downloaded"/>
+         </artifact>
+         <artifact name="lucene-core-8.11.2.pom">
+            <sha256 value="ae2e3e7813be6d3778b933c27c6d1a031c09c64f8951180c004f6f148d271b5d" origin="Generated by Gradle because a key couldn't be downloaded"/>
+         </artifact>
+      </component>
       <component group="org.apache.lucene" name="lucene-core" version="8.5.0">
          <artifact name="lucene-core-8.5.0.jar">
             <sha256 value="1934af4cf63970a54c0ff93cbb05d8303e45dd101723c85409d770b2a17907cd" origin="Generated by Gradle"/>
@@ -2212,6 +2235,11 @@
             <sha256 value="f1beaf1fc1524f0336817100b2af462ea1fb34e1b1fee37d3545136b6e1d455c" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.apache.lucene" name="lucene-parent" version="8.11.2">
+         <artifact name="lucene-parent-8.11.2.pom">
+            <sha256 value="d8a8917222a3b5d0c68e79a7f816fccccefb6c7bdbb907fa170b09e4720952e0" origin="Generated by Gradle because a key couldn't be downloaded"/>
+         </artifact>
+      </component>
       <component group="org.apache.lucene" name="lucene-parent" version="8.5.0">
          <artifact name="lucene-parent-8.5.0.pom">
             <sha256 value="e593b691a13c7d5826c8acb3ce0a25294f7a627787d6bfc8ad184425a2263b65" origin="Generated by Gradle"/>
@@ -2225,6 +2253,14 @@
             <sha256 value="8aa20c46b49050e94afa9fb5e73efd21da09ddf987e3965b2687b2ae92640fd6" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.apache.lucene" name="lucene-queries" version="8.11.2">
+         <artifact name="lucene-queries-8.11.2.jar">
+            <sha256 value="0f93119d7d316cef13fdebaa668e716b197eb86cbe8e7b345c0ead26320e63c8" origin="Generated by Gradle because a key couldn't be downloaded"/>
+         </artifact>
+         <artifact name="lucene-queries-8.11.2.pom">
+            <sha256 value="bab5657f91290bfcd5add0c10ddb68fa9e80311ee8f038a5a1cf388adac4f1d3" origin="Generated by Gradle because a key couldn't be downloaded"/>
+         </artifact>
+      </component>
       <component group="org.apache.lucene" name="lucene-queries" version="8.5.0">
          <artifact name="lucene-queries-8.5.0.jar">
             <sha256 value="e2135f20d5fae1824b51d28b5d39eea48c13703365c8791c681c763f2ba90ee3" origin="Generated by Gradle"/>
@@ -2241,6 +2277,14 @@
             <sha256 value="598584138e46bbbc28c062fe4c609c9c634cb135129ffeb33949bb4f49cef025" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.apache.lucene" name="lucene-queryparser" version="8.11.2">
+         <artifact name="lucene-queryparser-8.11.2.jar">
+            <sha256 value="d2cf511bad3bda7b91587cba4c227f8964a4e8da0433d05a740439ea21bb1ae4" origin="Generated by Gradle because a key couldn't be downloaded"/>
+         </artifact>
+         <artifact name="lucene-queryparser-8.11.2.pom">
+            <sha256 value="e1f8649c06aab6bb5424d767af15a05062d633bcf254907b236ff8006b57cad1" origin="Generated by Gradle because a key couldn't be downloaded"/>
+         </artifact>
+      </component>
       <component group="org.apache.lucene" name="lucene-queryparser" version="8.5.0">
          <artifact name="lucene-queryparser-8.5.0.jar">
             <sha256 value="1ba9e4c5805430bd59774fc66e7e3850cde64161a214913f1303878fe0672412" origin="Generated by Gradle"/>
@@ -2257,6 +2301,14 @@
             <sha256 value="3d80275ae4e94c9ff580472982466f5a304bc60119fe8af9b6d413550e0a4920" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.apache.lucene" name="lucene-sandbox" version="8.11.2">
+         <artifact name="lucene-sandbox-8.11.2.jar">
+            <sha256 value="fea64c3102e21a1c233a95ebed8e7021e65f82e517da8d8b1446776356705bb7" origin="Generated by Gradle because a key couldn't be downloaded"/>
+         </artifact>
+         <artifact name="lucene-sandbox-8.11.2.pom">
+            <sha256 value="33e4ba544bd0bfc537dd61dba1e317bd0ef90f353dcafa7d00278f258940a63b" origin="Generated by Gradle because a key couldn't be downloaded"/>
+         </artifact>
+      </component>
       <component group="org.apache.lucene" name="lucene-sandbox" version="8.5.0">
          <artifact name="lucene-sandbox-8.5.0.jar">
             <sha256 value="5a521d6b545fdab0f57e313baf299335ffbffbd28caabeaceb74063f2390c572" origin="Generated by Gradle"/>
@@ -2270,6 +2322,11 @@
             <sha256 value="87ba6c7b95a1daa4bf47a6e14c2c8b7f4068743533a911d75114a2e36ca0395b" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.apache.lucene" name="lucene-solr-grandparent" version="8.11.2">
+         <artifact name="lucene-solr-grandparent-8.11.2.pom">
+            <sha256 value="d1285b791c81ef7e11a9bedf6edf188760bc43f3093e44f49f2812bc0f100071" origin="Generated by Gradle because a key couldn't be downloaded"/>
+         </artifact>
+      </component>
       <component group="org.apache.lucene" name="lucene-solr-grandparent" version="8.5.0">
          <artifact name="lucene-solr-grandparent-8.5.0.pom">
             <sha256 value="3178dc2b1574824ce1eab9888cf711902d246c5b0195e7825e12a89775edcfd0" origin="Generated by Gradle"/>
@@ -4308,6 +4365,14 @@
             <sha256 value="dafc8818e71280704e715a003d0e6401d4bc92845308ce9554e11fe6d0826769" origin="Generated by Gradle because PGP signature verification failed!"/>
          </artifact>
       </component>
+      <component group="org.owasp" name="dependency-check-gradle" version="7.4.4">
+         <artifact name="dependency-check-gradle-7.4.4.pom">
+            <ignored-keys>
+               <ignored-key id="259a55407dd6c00299e6607effde55be73a2d1ed" reason="PGP verification failed"/>
+            </ignored-keys>
+            <sha256 value="6a9f0ca7dd61c0576beee5f664a7e27d4381efabe05159b5a9f0d860e7005471" origin="Generated by Gradle because PGP signature verification failed!"/>
+         </artifact>
+      </component>
       <component group="org.owasp" name="dependency-check-parent" version="5.3.2">
          <artifact name="dependency-check-parent-5.3.2.pom">
             <sha256 value="1662ae61ede584a831ce29a9fcfdccdd68af393e1e12eab3b60c38c68c25800f" origin="Generated by Gradle"/>
@@ -4354,6 +4419,11 @@
             <sha256 value="0ba541b38cfb777c86938ad94aeb616566480582baa9f75dcc6d296c7a44632d" origin="Generated by Gradle because artifact wasn't signed"/>
          </artifact>
       </component>
+      <component group="org.owasp.dependencycheck" name="org.owasp.dependencycheck.gradle.plugin" version="7.4.4">
+         <artifact name="org.owasp.dependencycheck.gradle.plugin-7.4.4.pom">
+            <sha256 value="8a3ff2ae199cfdf839a7d625a156b1ea9111c779edbc6b9176634b78f34c1c2c" origin="Generated by Gradle because artifact wasn't signed"/>
+         </artifact>
+      </component>
       <component group="org.projectlombok" name="lombok" version="1.18.24">
          <artifact name="lombok-1.18.24.jar">
             <sha256 value="d3584bc2db03f059f984fb0a9c119aac1fa0da578a448e69fc3f68b36584c749" origin="Generated by Gradle"/>