Update OWASP dependency checker to version 12.1.0

patch by Doug Rohrer; reviewed by Stefan Miklosovic for CASSANDRA-20501
This commit is contained in:
Doug Rohrer 2025-03-31 19:08:53 +02:00 committed by Stefan Miklosovic
parent 73f0e2e401
commit 51cf55747b
No known key found for this signature in database
GPG Key ID: 32F35CB2F546D93E
2 changed files with 3 additions and 2 deletions

View File

@ -19,7 +19,7 @@
<project basedir="." name="apache-cassandra-owasp-tasks"
xmlns:unless="ant:unless"
xmlns:if="ant:if">
<property name="dependency-check.version" value="10.0.4"/>
<property name="dependency-check.version" value="12.1.0"/>
<property name="dependency-check.home" value="${tmp.dir}/dependency-check-ant-${dependency-check.version}"/>
<property name="dependency-check.archive.dir" value="${local.repository}/org/owasp/dependency-check-ant/${dependency-check.version}"/>
<property name="dependency-check.archive.name" value="dependency-check-ant-${dependency-check.version}-release.zip"/>
@ -34,7 +34,7 @@
unless="dependency-check-ant.archive.present">
<mkdir dir="${dependency-check.archive.dir}"/>
<get src="https://github.com/jeremylong/DependencyCheck/releases/download/v${dependency-check.version}/${dependency-check.archive.name}"
<get src="https://github.com/dependency-check/DependencyCheck/releases/download/v${dependency-check.version}/${dependency-check.archive.name}"
dest="${dependency-check.archive.dir}/${dependency-check.archive.name}" retries="3"/>
</target>

View File

@ -1,4 +1,5 @@
4.0.18
* Update OWASP dependency checker to version 12.1.0 (CASSANDRA-20501)
* Suppress CVE-2025-25193 (CASSANDRA-20504)
* Include in source tree and build packages a Snyk policy file that lists known false positives (CASSANDRA-20319)
* Update zstd-jni to 1.5.7-2 (CASSANDRA-20453)