Skip to content

Sync fork with latest OWASP Benchmark upstream commits - #21

Merged
fgibelin merged 5 commits into
masterfrom
fgibelin-sync-fork-5da
Nov 7, 2026
Merged

fgibelin merged 5 commits into
masterfrom
fgibelin-sync-fork-5da

Conversation

@fgibelin

@fgibelin fgibelin commented Nov 7, 2026

Copy link
Copy Markdown
Owner

Summary

Merge upstream OWASP-Benchmark/BenchmarkJava:master through d4f6f3a53 while preserving the fork's existing commits.

  • Update github/codeql-action from 4.39.1 to 4.39.2.
  • Update com.diffplug.spotless:spotless-maven-plugin from 3.10.4 to 3.11.0.
  • Incorporate all four upstream commits not previously present in the fork.

Merge conditions

Merge only after all PR checks pass. Copilot assignment and code review are requested as part of this sync.

dependabot Bot and others added 5 commits November 6, 2026 11:03
Bumps [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) from 3.10.4 to 3.11.0.
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@maven/3.10.4...maven/3.11.0)

---
updated-dependencies:
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.39.1 to 4.39.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v4.39.1...v4.39.2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.39.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…t/maven/com.diffplug.spotless-spotless-maven-plugin-3.11.0

Bump com.diffplug.spotless:spotless-maven-plugin from 3.10.4 to 3.11.0
…t/github_actions/github/codeql-action-4.39.2

Bump github/codeql-action from 4.39.1 to 4.39.2
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The review has no active issues for the Spotless and CodeQL version updates.

No open issues 🎉

What changed in this PR

This PR syncs the fork with upstream OWASP Benchmark changes while preserving fork-specific commits. The reviewed diff updates formatting and security-analysis tooling without changing application code.

Changes:

  • Upgrade Spotless Maven plugin from 3.10.4 to 3.11.0.
  • Upgrade both CodeQL initialization and analysis actions from 4.39.1 to 4.39.2.
File Description
pom.xml Updates the Spotless formatting plugin version.
.github/​workflows/​codeql-analysis.yml Updates both CodeQL actions to the same patch release.

Review effort: Balanced

@fgibelin
fgibelin merged commit 4a08ad8 into master Nov 7, 2026
6 checks passed
@fgibelin
fgibelin deleted the fgibelin-sync-fork-5da branch November 7, 2026 08:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants