chore(deps): update dependency org.owasp.dependencycheck to v7.4.4

rundeck · Oct 18, 2023 · f8ec1ba · f8ec1ba
1 parent f3e2a1b
commit f8ec1ba
Show file tree

Hide file tree

Showing 2 changed files with 39 additions and 1 deletion.
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
@@ -13,7 +13,7 @@ shadow = "7.1.2"
 ospackage = "9.1.1"
 buildInfo = "0.9"
 buildConfig = "3.1.0"
-owasp = "7.1.0.1"
+owasp = "7.4.4"
 jacksonDatabind = "2.15.3"
 picocli = "4.6.3"
 snakeYaml = "2.0"

diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
@@ -9,6 +9,8 @@
       </trusted-artifacts>
       <ignored-keys>
          <ignored-key id="d5f4c07a434ab3da" reason="Key couldn't be downloaded from any key server"/>
+         <ignored-key id="b0f3710fa64900e7" reason="Key couldn't be downloaded from any key server"/>
+         <ignored-key id="9eb80e92eb2135b1" reason="Key couldn't be downloaded from any key server"/>
       </ignored-keys>
       <trusted-keys>
          <trusted-key id="015479e1055341431b4545ab72475fd306b9cab7">
@@ -28,6 +30,7 @@
          <trusted-key id="0cfa413799e2464c7d7e26220a4b343f2a55fdae">
             <trusting group="com.h2database" name="h2" version="1.4.199"/>
             <trusting group="com.h2database" name="h2" version="2.1.210"/>
+            <trusting group="com.h2database" name="h2" version="2.1.214"/>
          </trusted-key>
          <trusted-key id="0dcf749d41a80e58041aae1728f57f70167c0b3a" group="^org[.]sonatype($|([.].*))" regex="true"/>
          <trusted-key id="120d6f34e627ed3a772ebbfe55c7e5e701832382">
@@ -70,6 +73,7 @@
          <trusted-key id="37c5181bf2066135e771e6dcb263d126c8a7e813" group="com.vdurmont" name="semver4j" version="3.1.0"/>
          <trusted-key id="3909c28792327fad38100eaf04633a577c200941" group="org.vafer"/>
          <trusted-key id="43c79b4bbd131821e17d2ca77b2f0491728b8e02" group="net.i2p.crypto" name="eddsa" version="0.3.0"/>
+         <trusted-key id="45b1912987cb9dfa6a0d9693067091f1549b293f" group="org.semver4j" name="semver4j" version="4.1.1"/>
          <trusted-key id="475f3b8e59e6e63aa78067482c7b12f2a511e325" group="org.slf4j"/>
          <trusted-key id="485e371cb07eabe6d5778d4b0c27e8fac93b3b19" group="com.sun.mail"/>
          <trusted-key id="4a720fe790b07a68744e371675bf031b7c94e183" group="net.java.dev.jna"/>
@@ -116,6 +120,7 @@
          <trusted-key id="7cd52b5a8295137c88fb5748dddafa7674e54418" group="org.testng" name="testng" version="7.5"/>
          <trusted-key id="81d3eb0408b4e1eb10af443ba4f4c886b29bc2f4" group="org.apache.lucene"/>
          <trusted-key id="839b8c32286c100bdb08f5522eb9468288817402" group="org.apache.commons"/>
+         <trusted-key id="86edb9c33b8517228e88a8f93e48c0c6ef362b9e" group="org.apache.lucene"/>
          <trusted-key id="8756c4f765c9ac3cb6b85d62379ce192d401ab61">
             <trusting group="info.picocli"/>
             <trusting group="org.rnorth.duct-tape"/>
@@ -154,6 +159,7 @@
          <trusted-key id="c42f8893b74021d66d44b10b848c5ec3bc9d709c" group="com.bmuschko" name="gradle-docker-plugin" version="3.2.1"/>
          <trusted-key id="c59362a11366d431e292aa32075def3ef14f0793" group="com.moandjiezana.toml" name="toml4j" version="0.7.2"/>
          <trusted-key id="c70b844f002f21f6d2b9c87522e44ac0622b91c3" group="com.beust" name="jcommander" version="1.78"/>
+         <trusted-key id="ca62ed130e4053944406df640181b45ea58677bc" group="org.apache.commons" name="commons-compress" version="1.22"/>
          <trusted-key id="cc57399d74cd7e4768ed6fa4ca62973fbf0451c0" group="com.vaadin.external.google" name="android-json" version="0.0.20131108.vaadin1"/>
          <trusted-key id="cd5464315f0b98c77e6e8ecd9daadc1c9fcc82d0">
             <trusting group="commons-cli"/>
@@ -195,6 +201,7 @@
          <trusted-key id="f3184bcd55f4d016e30d4c9bf42e87f9665015c9">
             <trusting group="org.jsoup" name="jsoup" version="1.13.1"/>
             <trusting group="org.jsoup" name="jsoup" version="1.14.3"/>
+            <trusting group="org.jsoup" name="jsoup" version="1.15.3"/>
          </trusted-key>
          <trusted-key id="f9514e84ae3708288374bbbe097586cfea37f9a6" group="org.owasp"/>
          <trusted-key id="fa1703b1d287caea3a60f931e0130a3ed5a2079e" group="org.webjars" name="jquery" version="3.5.1"/>
@@ -788,6 +795,14 @@
             <sha256 value="2174415a647332d30fda04bd1cfc708a3ecc84eaf7517f596188d8244e103911" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="com.google.code.gson" name="gson" version="2.9.0">
+         <artifact name="gson-2.9.0.jar">
+            <sha256 value="c96d60551331a196dac54b745aa642cd078ef89b6f267146b705f2c2cbef052d" origin="Generated by Gradle because a key couldn't be downloaded"/>
+         </artifact>
+         <artifact name="gson-2.9.0.pom">
+            <sha256 value="7190d0b07f278e9f4c603f44e543940f81cf1a2559f851c6f298c9bb2be2978c" origin="Generated by Gradle because a key couldn't be downloaded"/>
+         </artifact>
+      </component>
       <component group="com.google.code.gson" name="gson-parent" version="2.8.5">
          <artifact name="gson-parent-2.8.5.pom">
             <sha256 value="8f1fec72b91a71ea39ec39f5f778c4d1124b6b097c6d55b3a50b554a52237b27" origin="Generated by Gradle"/>
@@ -798,6 +813,11 @@
             <sha256 value="3736463859ec19267295e894940ae82a8f684413031122fe35ce7cff7e30a774" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="com.google.code.gson" name="gson-parent" version="2.9.0">
+         <artifact name="gson-parent-2.9.0.pom">
+            <sha256 value="af781c9a5766ffea311a0df0536576a64decc661aa110c4de5c73ac8bf434424" origin="Generated by Gradle because a key couldn't be downloaded"/>
+         </artifact>
+      </component>
       <component group="com.google.errorprone" name="error_prone_annotations" version="2.11.0">
          <artifact name="error_prone_annotations-2.11.0.jar">
             <sha256 value="721cb91842b46fa056847d104d5225c8b8e1e8b62263b993051e1e5a0137b7ec" origin="Generated by Gradle"/>
@@ -1812,6 +1832,11 @@
             <sha256 value="bc10624e0623f36577fac5639ca2936d3240ed152fb6d8d533ab4d270543491c" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.apache" name="apache" version="27">
+         <artifact name="apache-27.pom">
+            <sha256 value="b2b0fc69e22a650c3892f1c366d77076f29575c6738df4c7a70a44844484cdf9" origin="Generated by Gradle because a key couldn't be downloaded"/>
+         </artifact>
+      </component>
       <component group="org.apache" name="apache" version="4">
          <artifact name="apache-4.pom">
             <pgp value="6e13156c0ee653f0b984663ab95bbd3fa43c4492"/>
@@ -4251,6 +4276,14 @@
             <sha256 value="dafc8818e71280704e715a003d0e6401d4bc92845308ce9554e11fe6d0826769" origin="Generated by Gradle because PGP signature verification failed!"/>
          </artifact>
       </component>
+      <component group="org.owasp" name="dependency-check-gradle" version="7.4.4">
+         <artifact name="dependency-check-gradle-7.4.4.pom">
+            <ignored-keys>
+               <ignored-key id="259a55407dd6c00299e6607effde55be73a2d1ed" reason="PGP verification failed"/>
+            </ignored-keys>
+            <sha256 value="6a9f0ca7dd61c0576beee5f664a7e27d4381efabe05159b5a9f0d860e7005471" origin="Generated by Gradle because PGP signature verification failed!"/>
+         </artifact>
+      </component>
       <component group="org.owasp" name="dependency-check-parent" version="5.3.2">
          <artifact name="dependency-check-parent-5.3.2.pom">
             <sha256 value="1662ae61ede584a831ce29a9fcfdccdd68af393e1e12eab3b60c38c68c25800f" origin="Generated by Gradle"/>
@@ -4297,6 +4330,11 @@
             <sha256 value="0ba541b38cfb777c86938ad94aeb616566480582baa9f75dcc6d296c7a44632d" origin="Generated by Gradle because artifact wasn't signed"/>
          </artifact>
       </component>
+      <component group="org.owasp.dependencycheck" name="org.owasp.dependencycheck.gradle.plugin" version="7.4.4">
+         <artifact name="org.owasp.dependencycheck.gradle.plugin-7.4.4.pom">
+            <sha256 value="8a3ff2ae199cfdf839a7d625a156b1ea9111c779edbc6b9176634b78f34c1c2c" origin="Generated by Gradle because artifact wasn't signed"/>
+         </artifact>
+      </component>
       <component group="org.projectlombok" name="lombok" version="1.18.24">
          <artifact name="lombok-1.18.24.jar">
             <sha256 value="d3584bc2db03f059f984fb0a9c119aac1fa0da578a448e69fc3f68b36584c749" origin="Generated by Gradle"/>