Skip to content

chore(deps): consolidate Maven and CI updates - #52

Merged
prayagv merged 5 commits into
mainfrom
codex/dependabot-consolidation-2026-10-20
Oct 20, 2026
Merged

prayagv merged 5 commits into
mainfrom
codex/dependabot-consolidation-2026-10-20

Conversation

@prayagv

@prayagv prayagv commented Oct 20, 2026

Copy link
Copy Markdown
Member

Summary

Consolidates current-main-safe updates from Dependabot PRs #43, #34, #38, #37, and #35:

  • Refreshes pinned Actions used by the workflows: checkout v7.0.1, setup-node v7.0.0, setup-java v6.0.0, and upload-artifact v7.0.2, with verified SHAs and corrected release comments.
  • Updates axe Selenium to 4.13.0, Maven wrapper to 3.3.4 / Maven 3.10.0, and the existing SpotBugs, Compiler, Surefire, Spotless, and CycloneDX plugins.

The changes are applied to current main and preserve the existing evidence, security, and workflow behavior. The stale Dependabot branches contain older dependency values or unrelated workflow rollbacks, so they are not merged as-is.

Validation

  • git diff --check passed.
  • Local Maven validation could not run because this execution environment has no Java/JAVA_HOME. Hosted required CI must validate the exact PR head before merge.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant