Skip to content

Bump the spdx-dependencies group across 1 directory with 3 updates - #171

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/spdx-dependencies-5639cd3ba6
Closed

Bump the spdx-dependencies group across 1 directory with 3 updates#171
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/spdx-dependencies-5639cd3ba6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 6, 2026

Copy link
Copy Markdown
Contributor

Bumps the spdx-dependencies group with 3 updates in the / directory: org.spdx:java-spdx-library, org.spdx:spdx-jackson-store and org.spdx:tools-java.

Updates org.spdx:java-spdx-library from 1.1.12 to 2.0.4

Release notes

Sourced from org.spdx:java-spdx-library's releases.

Release 2.0.4 of the SPDX Java Library

What's Changed

Full Changelog: spdx/Spdx-Java-Library@v2.0.3...v2.0.4

Patch release 2.0.3 of the SPDX Java Library

What's Changed

New Contributors

Full Changelog: spdx/Spdx-Java-Library@v2.0.2...v2.0.3

Release 2.0.2 of the SPDX Java Library

What's Changed

... (truncated)

Commits
  • e4d352f [maven-release-plugin] prepare release v2.0.4
  • 6a0f7b8 Sort TOC
  • 03655f6 Sort crossRef by order and url
  • 1f80a5c Update license list to version 3.28
  • d6490dc Merge pull request #428 from spdx/updatelib
  • bd11d49 Update SPDX library versions
  • 67ddb86 Merge pull request #427 from spdx/expcompat
  • 27f378f Fix compatibility in parse license message signature
  • bf5a1bc Update src/test/java/org/spdx/utility/license/LicenseExpressionParserTestV2.java
  • c8637cb Add unit test for invalid lic expression
  • Additional commits viewable in compare view

Updates org.spdx:spdx-jackson-store from 1.1.9.1 to 2.0.6

Release notes

Sourced from org.spdx:spdx-jackson-store's releases.

Version 2.0.6 of the SPDX Java Jackson Store

What's Changed

New Contributors

Full Changelog: spdx/spdx-java-jackson-store@v2.0.5...v2.0.6

Patch release 2.0.5 of the SPDX Java Jackson Store

What's Changed

Full Changelog: spdx/spdx-java-jackson-store@v2.0.4...v2.0.5

... (truncated)

Commits
  • 7838f43 [maven-release-plugin] prepare release v2.0.6
  • 623268f Update SPDX Java Library version
  • 6eaf9b6 Bump org.sonatype.central:central-publishing-maven-plugin
  • 92ca6ab Bump com.fasterxml.jackson.dataformat:jackson-dataformat-yaml
  • f615f8a Bump com.fasterxml.jackson.core:jackson-core from 2.21.3 to 2.22.0
  • 24cceef Bump com.fasterxml.jackson.dataformat:jackson-dataformat-xml
  • 87d249d Bump com.fasterxml.jackson.core:jackson-databind from 2.21.3 to 2.22.0
  • a4ee645 Bump org.sonarsource.scanner.maven:sonar-maven-plugin
  • b2b665d Bump org.json:json from 20251224 to 20260522
  • ab0b878 Bump org.owasp:dependency-check-maven from 12.2.1 to 12.2.2
  • Additional commits viewable in compare view

Updates org.spdx:tools-java from 1.1.8 to 2.0.7

Release notes

Sourced from org.spdx:tools-java's releases.

Version 2.0.7 of the SPDX Java Tools

What's Changed

Full Changelog: spdx/tools-java@v2.0.6...v2.0.7

Patch release 2.0.6

What's Changed

Full Changelog: spdx/tools-java@v2.0.5...v2.0.6

Patch release 2.0.5 of the SPDX Java Tools

What's Changed

Full Changelog: spdx/tools-java@v2.0.4...v2.0.5

Release 2.0.4 of the SPDX Java Tools

Fixes a critical performance issue when verifying SPDX 3 documents

What's Changed

Full Changelog: spdx/tools-java@v2.0.3...v2.0.4

... (truncated)

Commits
  • 5273da2 [maven-release-plugin] prepare release v2.0.7
  • 6c79e2d Merge pull request #294 from spdx/updatespdxlib
  • 87c5611 Update maven plugin version
  • 67445e7 Update SPDX library versions
  • 1313bdb Bump org.sonatype.central:central-publishing-maven-plugin
  • 3a42176 Bump org.sonarsource.scanner.maven:sonar-maven-plugin
  • 876146a Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3
  • b9d8773 Bump org.slf4j:slf4j-simple from 2.0.17 to 2.0.18
  • 4e06c89 Bump org.owasp:dependency-check-maven from 12.2.1 to 12.2.2
  • a6fa13d Merge pull request #285 from spdx/goneall-patch-2
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 6, 2026
@dependabot dependabot Bot changed the title Bump the spdx-dependencies group with 3 updates Bump the spdx-dependencies group across 1 directory with 3 updates Apr 24, 2026
@dependabot
dependabot Bot force-pushed the dependabot/gradle/spdx-dependencies-5639cd3ba6 branch from 8a717bc to c69ce18 Compare April 24, 2026 02:04
@dependabot
dependabot Bot force-pushed the dependabot/gradle/spdx-dependencies-5639cd3ba6 branch from c69ce18 to 3a2bc17 Compare May 1, 2026 02:12
Bumps the spdx-dependencies group with 3 updates in the / directory: [org.spdx:java-spdx-library](https://github.com/spdx/Spdx-Java-Library), [org.spdx:spdx-jackson-store](https://github.com/spdx/spdx-java-jackson-store) and [org.spdx:tools-java](https://github.com/spdx/tools-java).


Updates `org.spdx:java-spdx-library` from 1.1.12 to 2.0.4
- [Release notes](https://github.com/spdx/Spdx-Java-Library/releases)
- [Changelog](https://github.com/spdx/Spdx-Java-Library/blob/master/RELEASE-CHECKLIST.md)
- [Commits](spdx/Spdx-Java-Library@v1.1.12...v2.0.4)

Updates `org.spdx:spdx-jackson-store` from 1.1.9.1 to 2.0.6
- [Release notes](https://github.com/spdx/spdx-java-jackson-store/releases)
- [Changelog](https://github.com/spdx/spdx-java-jackson-store/blob/master/RELEASE-CHECKLIST.md)
- [Commits](spdx/spdx-java-jackson-store@v1.1.9.1...v2.0.6)

Updates `org.spdx:tools-java` from 1.1.8 to 2.0.7
- [Release notes](https://github.com/spdx/tools-java/releases)
- [Changelog](https://github.com/spdx/tools-java/blob/master/RELEASE-CHECKLIST.md)
- [Commits](spdx/tools-java@v1.1.8...v2.0.7)

---
updated-dependencies:
- dependency-name: org.spdx:java-spdx-library
  dependency-version: 2.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: spdx-dependencies
- dependency-name: org.spdx:spdx-jackson-store
  dependency-version: 2.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: spdx-dependencies
- dependency-name: org.spdx:tools-java
  dependency-version: 2.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: spdx-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/gradle/spdx-dependencies-5639cd3ba6 branch from 3a2bc17 to ed2f6fa Compare July 10, 2026 02:03
@dependabot @github

dependabot Bot commented on behalf of github Jul 17, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 17, 2026
@dependabot
dependabot Bot deleted the dependabot/gradle/spdx-dependencies-5639cd3ba6 branch July 17, 2026 02:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants