diff --git a/.3rd-party/DEPENDENCIES b/.3rd-party/DEPENDENCIES index 57a731a4f..ff918e435 100644 --- a/.3rd-party/DEPENDENCIES +++ b/.3rd-party/DEPENDENCIES @@ -1,32 +1,36 @@ -maven/mavencentral/ch.qos.logback/logback-classic/1.5.16, EPL-1.0 AND LGPL-2.1-only, approved, #18704 -maven/mavencentral/ch.qos.logback/logback-core/1.5.16, EPL-1.0 AND LGPL-2.1-only, approved, #15210 +maven/mavencentral/ch.qos.logback/logback-classic/1.5.18, EPL-1.0 AND LGPL-2.1-only, approved, #18704 +maven/mavencentral/ch.qos.logback/logback-core/1.5.18, EPL-1.0 AND LGPL-2.1-only, approved, #15210 maven/mavencentral/com.cronutils/cron-utils/9.2.1, Apache-2.0, approved, clearlydefined -maven/mavencentral/com.fasterxml.jackson.core/jackson-annotations/2.18.2, Apache-2.0, approved, #16364 -maven/mavencentral/com.fasterxml.jackson.core/jackson-core/2.18.2, Apache-2.0 AND MIT, approved, #16371 -maven/mavencentral/com.fasterxml.jackson.core/jackson-databind/2.18.2, Apache-2.0, approved, #16372 -maven/mavencentral/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor/2.18.2, Apache-2.0, approved, #18213 -maven/mavencentral/com.fasterxml.jackson.dataformat/jackson-dataformat-toml/2.18.2, Apache-2.0, approved, #16800 -maven/mavencentral/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml/2.18.2, Apache-2.0, approved, #16370 -maven/mavencentral/com.fasterxml.jackson.datatype/jackson-datatype-jdk8/2.18.2, Apache-2.0, approved, #17264 -maven/mavencentral/com.fasterxml.jackson.datatype/jackson-datatype-jsr310/2.18.2, Apache-2.0, approved, #16625 -maven/mavencentral/com.fasterxml.jackson.module/jackson-module-parameter-names/2.18.2, Apache-2.0, approved, #17542 +maven/mavencentral/com.fasterxml.jackson.core/jackson-annotations/2.19.0, Apache-2.0, approved, #21911 +maven/mavencentral/com.fasterxml.jackson.core/jackson-core/2.19.0, MIT AND Apache-2.0 AND (Apache-2.0 AND LicenseRef-scancode-free-unknown AND MIT), restricted, #21917 +maven/mavencentral/com.fasterxml.jackson.core/jackson-databind/2.19.0, Apache-2.0, approved, #21909 +maven/mavencentral/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor/2.19.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/com.fasterxml.jackson.dataformat/jackson-dataformat-toml/2.19.0, Apache-2.0, approved, #20928 +maven/mavencentral/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml/2.19.0, Apache-2.0, approved, #21912 +maven/mavencentral/com.fasterxml.jackson.datatype/jackson-datatype-jdk8/2.19.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/com.fasterxml.jackson.datatype/jackson-datatype-joda/2.19.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/com.fasterxml.jackson.datatype/jackson-datatype-jsr310/2.19.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/com.fasterxml.jackson.module/jackson-module-parameter-names/2.19.0, Apache-2.0, approved, clearlydefined maven/mavencentral/com.fasterxml/classmate/1.7.0, Apache-2.0, approved, clearlydefined -maven/mavencentral/com.github.ben-manes.caffeine/caffeine/3.1.8, Apache-2.0 AND (Apache-2.0 AND CC0-1.0), approved, #19704 -maven/mavencentral/com.github.javaparser/javaparser-core/3.26.2, (Apache-2.0 AND LGPL-2.0-or-later AND LGPL-3.0 AND LGPL-3.0-only) OR (Apache-2.0 AND LGPL-2.0-or-later AND LGPL-3.0-only), approved, clearlydefined -maven/mavencentral/com.github.javaparser/javaparser-symbol-solver-core/3.26.2, (Apache-2.0 AND LGPL-2.0-or-later AND LGPL-3.0 AND LGPL-3.0-only) OR (Apache-2.0 AND LGPL-2.0-or-later AND LGPL-3.0-only), approved, clearlydefined -maven/mavencentral/com.github.waffle/waffle-jna/3.3.0, MIT, approved, clearlydefined +maven/mavencentral/com.github.ben-manes.caffeine/caffeine/3.2.0, Apache-2.0 AND (Apache-2.0 AND CC0-1.0), approved, #18889 +maven/mavencentral/com.github.javaparser/javaparser-core/3.26.4, (Apache-2.0 AND LGPL-2.1-or-later AND LGPL-3.0 AND LGPL-3.0-only) OR (Apache-2.0 AND LGPL-2.1-or-later AND LGPL-3.0-only), approved, clearlydefined +maven/mavencentral/com.github.javaparser/javaparser-symbol-solver-core/3.26.4, Apache-2.0 OR (Apache-2.0 AND LGPL-3.0) OR (Apache-2.0 AND LGPL-3.0-only) OR (LGPL-3.0 AND LGPL-3.0-only), approved, clearlydefined +maven/mavencentral/com.github.stephenc.jcip/jcip-annotations/1.0-1, Apache-2.0, approved, CQ21949 maven/mavencentral/com.google.code.findbugs/jsr305/3.0.2, Apache-2.0 and CC-BY-2.5, approved, #15220 -maven/mavencentral/com.google.errorprone/error_prone_annotations/2.21.1, Apache-2.0, approved, #9834 +maven/mavencentral/com.google.errorprone/error_prone_annotations/2.36.0, Apache-2.0, approved, #18702 maven/mavencentral/com.google.guava/failureaccess/1.0.2, Apache-2.0, approved, CQ22654 -maven/mavencentral/com.google.guava/guava/33.3.0-jre, Apache-2.0 AND CC0-1.0 AND (Apache-2.0 AND CC-PDDC) AND (Apache-2.0 AND CC0-1.0), approved, #15952 +maven/mavencentral/com.google.guava/guava/33.4.0-jre, Apache-2.0 AND CC0-1.0 AND CC-PDDC, approved, #17939 maven/mavencentral/com.google.guava/listenablefuture/9999.0-empty-to-avoid-conflict-with-guava, Apache-2.0, approved, CQ22657 maven/mavencentral/com.google.j2objc/j2objc-annotations/3.0.0, Apache-2.0, approved, #13676 maven/mavencentral/com.h2database/h2/2.3.232, (MPL-2.0 AND EPL-1.0) AND (MPL-2.0 AND EPL-1.0 AND LGPL-3.0-or-later) AND BSD-3-Clause, approved, #15708 -maven/mavencentral/com.helger.commons/ph-commons/11.1.8, Apache-2.0, approved, #12127 -maven/mavencentral/com.helger/ph-css/7.0.3, Apache-2.0, approved, #12134 +maven/mavencentral/com.helger.commons/ph-commons/11.2.0, Apache-2.0 AND (Apache-2.0 AND BSD-3-Clause) AND (AGPL-3.0-only AND AGPL-3.0-or-later AND Apache-1.0 AND Apache-2.0 AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND CC-BY-1.0 AND CC-BY-2.0 AND CC-BY-2.5 AND CC-BY-3.0 AND CC-BY-4.0 AND EPL-1.0 AND EPL-2.0 AND EUPL-1.2 AND GFDL-1.1-or-later AND GPL-1.0-only AND (GPL-2.0-only WITH Classpath-exception-2.0) AND GPL-3.0-only AND LGPL-2.0-only AND LGPL-2.1-only AND LGPL-3.0-only AND MIT AND MPL-1.0 AND MPL-2.0), restricted, #21949 +maven/mavencentral/com.helger/ph-css/7.0.4, Apache-2.0, approved, #12134 maven/mavencentral/com.jayway.jsonpath/json-path/2.9.0, Apache-2.0, approved, #20009 -maven/mavencentral/com.microsoft.sqlserver/mssql-jdbc/12.8.1.jre11, MIT, approved, clearlydefined -maven/mavencentral/com.rabbitmq/amqp-client/5.22.0, Apache-2.0 OR GPL-2.0-or-later OR MPL-2.0, approved, #18235 +maven/mavencentral/com.nimbusds/content-type/2.2, Apache-2.0, approved, clearlydefined +maven/mavencentral/com.nimbusds/lang-tag/1.7, Apache-2.0, approved, clearlydefined +maven/mavencentral/com.nimbusds/nimbus-jose-jwt/9.37.3, Apache-2.0, approved, #11701 +maven/mavencentral/com.nimbusds/oauth2-oidc-sdk/9.43.6, Apache-2.0, approved, clearlydefined +maven/mavencentral/com.rabbitmq/amqp-client/5.25.0, (Apache-2.0 OR GPL-2.0-only OR MPL-2.0) AND (Apache-2.0 OR GPL-2.0-only OR MPL-1.1), approved, #19537 maven/mavencentral/com.sun.istack/istack-commons-runtime/4.1.2, BSD-3-Clause, approved, #15290 maven/mavencentral/com.vaadin.external.atmosphere/atmosphere-runtime/3.0.5.slf4jvaadin1, Apache-2.0, approved, #12113 maven/mavencentral/com.vaadin.external.google/android-json/0.0.20131108.vaadin1, Apache-2.0, approved, CQ21310 @@ -34,115 +38,115 @@ maven/mavencentral/com.vaadin.external.gwt/gwt-elemental/2.8.2.vaadin2, Apache-2 maven/mavencentral/com.vaadin.external/gentyref/1.2.0.vaadin1, Apache-2.0, approved, CQ20645 maven/mavencentral/com.vaadin.servletdetector/throw-if-servlet3/1.0.2, Apache-2.0, approved, #12159 maven/mavencentral/com.vaadin/collaboration-engine/6.4.0, Apache-2.0, approved, clearlydefined -maven/mavencentral/com.vaadin/flow-client/24.6.6, Apache-2.0, approved, #19781 -maven/mavencentral/com.vaadin/flow-data/24.6.6, Apache-2.0, approved, #19796 -maven/mavencentral/com.vaadin/flow-dnd/24.6.6, Apache-2.0, approved, #19790 -maven/mavencentral/com.vaadin/flow-html-components/24.6.6, Apache-2.0, approved, #19817 -maven/mavencentral/com.vaadin/flow-lit-template/24.6.6, Apache-2.0, approved, #19761 -maven/mavencentral/com.vaadin/flow-push/24.6.6, Apache-2.0, approved, #19785 -maven/mavencentral/com.vaadin/flow-react/24.6.6, Apache-2.0, approved, #19794 -maven/mavencentral/com.vaadin/flow-server/24.6.6, Apache-2.0 AND MIT, approved, #20048 -maven/mavencentral/com.vaadin/hilla-endpoint/24.6.6, Apache-2.0, approved, #19791 -maven/mavencentral/com.vaadin/hilla-engine-core/24.6.6, Apache-2.0, approved, #19787 -maven/mavencentral/com.vaadin/hilla-engine-runtime/24.6.6, Apache-2.0, approved, #19767 -maven/mavencentral/com.vaadin/hilla-parser-jvm-core/24.6.6, Apache-2.0, approved, #19765 -maven/mavencentral/com.vaadin/hilla-parser-jvm-plugin-backbone/24.6.6, Apache-2.0, approved, #19782 -maven/mavencentral/com.vaadin/hilla-parser-jvm-plugin-model/24.6.6, Apache-2.0, approved, #19793 -maven/mavencentral/com.vaadin/hilla-parser-jvm-plugin-nonnull/24.6.6, Apache-2.0, approved, #19795 -maven/mavencentral/com.vaadin/hilla-parser-jvm-plugin-subtypes/24.6.6, Apache-2.0, approved, #19775 -maven/mavencentral/com.vaadin/hilla-parser-jvm-plugin-transfertypes/24.6.6, Apache-2.0, approved, #19789 -maven/mavencentral/com.vaadin/hilla-parser-jvm-utils/24.6.6, Apache-2.0, approved, #19771 -maven/mavencentral/com.vaadin/hilla-runtime-plugin-transfertypes/24.6.6, Apache-2.0, approved, #19764 -maven/mavencentral/com.vaadin/hilla/24.6.6, Apache-2.0, approved, #19770 -maven/mavencentral/com.vaadin/vaadin-accordion-flow/24.6.6, Apache-2.0, approved, #19780 -maven/mavencentral/com.vaadin/vaadin-app-layout-flow/24.6.6, Apache-2.0, approved, #19807 -maven/mavencentral/com.vaadin/vaadin-avatar-flow/24.6.6, Apache-2.0, approved, #19813 -maven/mavencentral/com.vaadin/vaadin-button-flow/24.6.6, Apache-2.0, approved, #19788 -maven/mavencentral/com.vaadin/vaadin-checkbox-flow/24.6.6, Apache-2.0, approved, #19778 -maven/mavencentral/com.vaadin/vaadin-combo-box-flow/24.6.6, Apache-2.0, approved, #19773 -maven/mavencentral/com.vaadin/vaadin-confirm-dialog-flow/24.6.6, Apache-2.0, approved, #19758 -maven/mavencentral/com.vaadin/vaadin-context-menu-flow/24.6.6, Apache-2.0, approved, #19803 -maven/mavencentral/com.vaadin/vaadin-core-components/24.6.6, Apache-2.0, approved, #19800 -maven/mavencentral/com.vaadin/vaadin-core-internal/24.6.6, Apache-2.0, approved, #19768 -maven/mavencentral/com.vaadin/vaadin-core/24.6.6, Apache-2.0, approved, #19814 -maven/mavencentral/com.vaadin/vaadin-custom-field-flow/24.6.6, Apache-2.0, approved, #19783 -maven/mavencentral/com.vaadin/vaadin-date-picker-flow/24.6.6, Apache-2.0, approved, #19762 -maven/mavencentral/com.vaadin/vaadin-date-time-picker-flow/24.6.6, Apache-2.0, approved, #19822 -maven/mavencentral/com.vaadin/vaadin-details-flow/24.6.6, Apache-2.0, approved, #19777 -maven/mavencentral/com.vaadin/vaadin-dialog-flow/24.6.6, Apache-2.0, approved, #19798 -maven/mavencentral/com.vaadin/vaadin-field-highlighter-flow/24.6.6, Apache-2.0, approved, #19801 -maven/mavencentral/com.vaadin/vaadin-flow-components-base/24.6.6, Apache-2.0, approved, #19821 -maven/mavencentral/com.vaadin/vaadin-form-layout-flow/24.6.6, Apache-2.0, approved, #19804 -maven/mavencentral/com.vaadin/vaadin-grid-flow/24.6.6, Apache-2.0, approved, #19784 -maven/mavencentral/com.vaadin/vaadin-icons-flow/24.6.6, Apache-2.0, approved, #19766 -maven/mavencentral/com.vaadin/vaadin-list-box-flow/24.6.6, Apache-2.0, approved, #19760 -maven/mavencentral/com.vaadin/vaadin-login-flow/24.6.6, Apache-2.0, approved, #19763 -maven/mavencentral/com.vaadin/vaadin-lumo-theme/24.6.6, Apache-2.0, approved, #19816 -maven/mavencentral/com.vaadin/vaadin-material-theme/24.6.6, Apache-2.0, approved, #19792 -maven/mavencentral/com.vaadin/vaadin-menu-bar-flow/24.6.6, Apache-2.0, approved, #19779 -maven/mavencentral/com.vaadin/vaadin-messages-flow/24.6.6, Apache-2.0, approved, #19799 -maven/mavencentral/com.vaadin/vaadin-notification-flow/24.6.6, Apache-2.0, approved, #19769 -maven/mavencentral/com.vaadin/vaadin-ordered-layout-flow/24.6.6, Apache-2.0, approved, #19810 -maven/mavencentral/com.vaadin/vaadin-popover-flow/24.6.6, Apache-2.0, approved, #19818 -maven/mavencentral/com.vaadin/vaadin-progress-bar-flow/24.6.6, Apache-2.0, approved, #19797 -maven/mavencentral/com.vaadin/vaadin-radio-button-flow/24.6.6, Apache-2.0, approved, #19786 -maven/mavencentral/com.vaadin/vaadin-renderer-flow/24.6.6, Apache-2.0, approved, #19815 -maven/mavencentral/com.vaadin/vaadin-select-flow/24.6.6, Apache-2.0, approved, #19812 -maven/mavencentral/com.vaadin/vaadin-side-nav-flow/24.6.6, Apache-2.0, approved, #19759 -maven/mavencentral/com.vaadin/vaadin-split-layout-flow/24.6.6, Apache-2.0, approved, #19820 -maven/mavencentral/com.vaadin/vaadin-spring-boot-starter/24.6.6, Apache-2.0, approved, #20047 -maven/mavencentral/com.vaadin/vaadin-spring/24.6.6, Apache-2.0, approved, #19823 -maven/mavencentral/com.vaadin/vaadin-tabs-flow/24.6.6, Apache-2.0, approved, #19776 -maven/mavencentral/com.vaadin/vaadin-text-field-flow/24.6.6, Apache-2.0, approved, #19819 -maven/mavencentral/com.vaadin/vaadin-time-picker-flow/24.6.6, Apache-2.0, approved, #19806 -maven/mavencentral/com.vaadin/vaadin-upload-flow/24.6.6, Apache-2.0, approved, #19809 -maven/mavencentral/com.vaadin/vaadin-virtual-list-flow/24.6.6, Apache-2.0, approved, #19802 -maven/mavencentral/com.zaxxer/HikariCP/5.1.0, Apache-2.0, approved, clearlydefined -maven/mavencentral/commons-codec/commons-codec/1.17.2, Apache-2.0 AND (Apache-2.0 AND BSD-3-Clause), approved, #14583 +maven/mavencentral/com.vaadin/flow-client/24.7.6, Apache-2.0, approved, #21993 +maven/mavencentral/com.vaadin/flow-data/24.7.6, Apache-2.0, approved, #21977 +maven/mavencentral/com.vaadin/flow-dnd/24.7.6, Apache-2.0, approved, #21974 +maven/mavencentral/com.vaadin/flow-html-components/24.7.6, Apache-2.0, approved, #21982 +maven/mavencentral/com.vaadin/flow-lit-template/24.7.6, , restricted, clearlydefined +maven/mavencentral/com.vaadin/flow-push/24.7.6, Apache-2.0, approved, #21948 +maven/mavencentral/com.vaadin/flow-react/24.7.6, Apache-2.0, approved, #21995 +maven/mavencentral/com.vaadin/flow-server/24.7.6, Apache-2.0 AND (Apache-2.0 AND LicenseRef-scancode-proprietary-license) AND MIT, restricted, #21969 +maven/mavencentral/com.vaadin/hilla-endpoint/24.7.5, Apache-2.0, approved, #21994 +maven/mavencentral/com.vaadin/hilla-engine-core/24.7.5, Apache-2.0, approved, #21991 +maven/mavencentral/com.vaadin/hilla-engine-runtime/24.7.5, Apache-2.0, approved, #21961 +maven/mavencentral/com.vaadin/hilla-parser-jvm-core/24.7.5, , restricted, clearlydefined +maven/mavencentral/com.vaadin/hilla-parser-jvm-plugin-backbone/24.7.5, Apache-2.0, approved, clearlydefined +maven/mavencentral/com.vaadin/hilla-parser-jvm-plugin-model/24.7.5, Apache-2.0, approved, clearlydefined +maven/mavencentral/com.vaadin/hilla-parser-jvm-plugin-nonnull/24.7.5, Apache-2.0, approved, #21996 +maven/mavencentral/com.vaadin/hilla-parser-jvm-plugin-subtypes/24.7.5, Apache-2.0, approved, #21973 +maven/mavencentral/com.vaadin/hilla-parser-jvm-plugin-transfertypes/24.7.5, , restricted, clearlydefined +maven/mavencentral/com.vaadin/hilla-parser-jvm-utils/24.7.5, Apache-2.0, approved, clearlydefined +maven/mavencentral/com.vaadin/hilla-runtime-plugin-transfertypes/24.7.5, Apache-2.0, approved, #21975 +maven/mavencentral/com.vaadin/hilla/24.7.5, Apache-2.0, approved, #21947 +maven/mavencentral/com.vaadin/vaadin-accordion-flow/24.7.6, Apache-2.0, approved, #21955 +maven/mavencentral/com.vaadin/vaadin-app-layout-flow/24.7.6, Apache-2.0, approved, #22004 +maven/mavencentral/com.vaadin/vaadin-avatar-flow/24.7.6, Apache-2.0, approved, #21957 +maven/mavencentral/com.vaadin/vaadin-button-flow/24.7.6, Apache-2.0, approved, clearlydefined +maven/mavencentral/com.vaadin/vaadin-card-flow/24.7.6, Apache-2.0, approved, #21970 +maven/mavencentral/com.vaadin/vaadin-checkbox-flow/24.7.6, Apache-2.0, approved, clearlydefined +maven/mavencentral/com.vaadin/vaadin-combo-box-flow/24.7.6, Apache-2.0, approved, #21950 +maven/mavencentral/com.vaadin/vaadin-confirm-dialog-flow/24.7.6, Apache-2.0, approved, #21972 +maven/mavencentral/com.vaadin/vaadin-context-menu-flow/24.7.6, Apache-2.0, approved, #21990 +maven/mavencentral/com.vaadin/vaadin-core-components/24.7.6, Apache-2.0, approved, #21981 +maven/mavencentral/com.vaadin/vaadin-core-internal/24.7.6, Apache-2.0, approved, #21962 +maven/mavencentral/com.vaadin/vaadin-core/24.7.6, Apache-2.0, approved, #21959 +maven/mavencentral/com.vaadin/vaadin-custom-field-flow/24.7.6, Apache-2.0, approved, #21976 +maven/mavencentral/com.vaadin/vaadin-date-picker-flow/24.7.6, Apache-2.0, approved, clearlydefined +maven/mavencentral/com.vaadin/vaadin-date-time-picker-flow/24.7.6, Apache-2.0, approved, #21989 +maven/mavencentral/com.vaadin/vaadin-details-flow/24.7.6, Apache-2.0, approved, #21952 +maven/mavencentral/com.vaadin/vaadin-dialog-flow/24.7.6, Apache-2.0, approved, #21997 +maven/mavencentral/com.vaadin/vaadin-field-highlighter-flow/24.7.6, Apache-2.0, approved, #21985 +maven/mavencentral/com.vaadin/vaadin-flow-components-base/24.7.6, Apache-2.0, approved, #22003 +maven/mavencentral/com.vaadin/vaadin-form-layout-flow/24.7.6, Apache-2.0, approved, #21968 +maven/mavencentral/com.vaadin/vaadin-grid-flow/24.7.6, Apache-2.0, approved, #21966 +maven/mavencentral/com.vaadin/vaadin-icons-flow/24.7.6, Apache-2.0, approved, #21963 +maven/mavencentral/com.vaadin/vaadin-list-box-flow/24.7.6, Apache-2.0, approved, #21954 +maven/mavencentral/com.vaadin/vaadin-login-flow/24.7.6, Apache-2.0, approved, clearlydefined +maven/mavencentral/com.vaadin/vaadin-lumo-theme/24.7.6, Apache-2.0, approved, #22001 +maven/mavencentral/com.vaadin/vaadin-material-theme/24.7.6, Apache-2.0, approved, clearlydefined +maven/mavencentral/com.vaadin/vaadin-menu-bar-flow/24.7.6, Apache-2.0, approved, clearlydefined +maven/mavencentral/com.vaadin/vaadin-messages-flow/24.7.6, Apache-2.0, approved, #21999 +maven/mavencentral/com.vaadin/vaadin-notification-flow/24.7.6, Apache-2.0, approved, #21965 +maven/mavencentral/com.vaadin/vaadin-ordered-layout-flow/24.7.6, Apache-2.0, approved, #22006 +maven/mavencentral/com.vaadin/vaadin-popover-flow/24.7.6, , restricted, clearlydefined +maven/mavencentral/com.vaadin/vaadin-progress-bar-flow/24.7.6, Apache-2.0, approved, #21978 +maven/mavencentral/com.vaadin/vaadin-radio-button-flow/24.7.6, Apache-2.0, approved, #21967 +maven/mavencentral/com.vaadin/vaadin-renderer-flow/24.7.6, , restricted, clearlydefined +maven/mavencentral/com.vaadin/vaadin-select-flow/24.7.6, Apache-2.0, approved, #21956 +maven/mavencentral/com.vaadin/vaadin-side-nav-flow/24.7.6, Apache-2.0, approved, #21960 +maven/mavencentral/com.vaadin/vaadin-split-layout-flow/24.7.6, Apache-2.0, approved, #22000 +maven/mavencentral/com.vaadin/vaadin-spring-boot-starter/24.7.6, Apache-2.0, approved, clearlydefined +maven/mavencentral/com.vaadin/vaadin-spring/24.7.6, Apache-2.0, approved, #22005 +maven/mavencentral/com.vaadin/vaadin-tabs-flow/24.7.6, Apache-2.0, approved, #21958 +maven/mavencentral/com.vaadin/vaadin-text-field-flow/24.7.6, Apache-2.0, approved, #21986 +maven/mavencentral/com.vaadin/vaadin-time-picker-flow/24.7.6, Apache-2.0, approved, clearlydefined +maven/mavencentral/com.vaadin/vaadin-upload-flow/24.7.6, , restricted, clearlydefined +maven/mavencentral/com.vaadin/vaadin-virtual-list-flow/24.7.6, Apache-2.0, approved, #21984 +maven/mavencentral/com.zaxxer/HikariCP/6.3.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/commons-codec/commons-codec/1.18.0, Apache-2.0 AND (Apache-2.0 AND BSD-3-Clause), approved, #19214 maven/mavencentral/commons-fileupload/commons-fileupload/1.5, Apache-2.0, approved, #7109 -maven/mavencentral/commons-io/commons-io/2.18.0, Apache-2.0, approved, #17366 +maven/mavencentral/commons-io/commons-io/2.19.0, Apache-2.0, approved, #20657 maven/mavencentral/commons-logging/commons-logging/1.2, Apache-2.0, approved, CQ10162 maven/mavencentral/cz.jirutka.rsql/rsql-parser/2.1.0, MIT, approved, CQ12964 -maven/mavencentral/io.github.openfeign/feign-core/13.5, Apache-2.0, approved, clearlydefined -maven/mavencentral/io.github.openfeign/feign-form-spring/13.5, Apache-2.0, approved, #18219 -maven/mavencentral/io.github.openfeign/feign-form/13.5, Apache-2.0, approved, #18218 -maven/mavencentral/io.github.openfeign/feign-hc5/13.5, Apache-2.0, approved, clearlydefined -maven/mavencentral/io.github.openfeign/feign-slf4j/13.5, Apache-2.0, approved, clearlydefined -maven/mavencentral/io.micrometer/micrometer-commons/1.14.4, Apache-2.0 AND (Apache-2.0 AND MIT), approved, #17272 -maven/mavencentral/io.micrometer/micrometer-core/1.14.4, Apache-2.0 AND (Apache-2.0 AND MIT), approved, #17271 -maven/mavencentral/io.micrometer/micrometer-observation/1.14.4, Apache-2.0, approved, #17270 -maven/mavencentral/io.netty/netty-buffer/4.1.118.Final, Apache-2.0, approved, CQ21842 -maven/mavencentral/io.netty/netty-codec-dns/4.1.118.Final, Apache-2.0 AND BSD-3-Clause AND MIT, approved, CQ20926 -maven/mavencentral/io.netty/netty-codec-http/4.1.118.Final, Apache-2.0 AND BSD-3-Clause AND MIT, approved, CQ20926 -maven/mavencentral/io.netty/netty-codec-http2/4.1.118.Final, Apache-2.0 AND BSD-3-Clause AND MIT, approved, CQ20926 -maven/mavencentral/io.netty/netty-codec-socks/4.1.118.Final, Apache-2.0 AND BSD-3-Clause AND MIT, approved, CQ20926 -maven/mavencentral/io.netty/netty-codec/4.1.118.Final, Apache-2.0 AND BSD-3-Clause AND MIT, approved, CQ20926 -maven/mavencentral/io.netty/netty-common/4.1.118.Final, Apache-2.0 AND MIT AND CC0-1.0, approved, CQ21843 -maven/mavencentral/io.netty/netty-handler-proxy/4.1.118.Final, Apache-2.0 AND BSD-3-Clause AND MIT, approved, CQ20926 -maven/mavencentral/io.netty/netty-handler/4.1.118.Final, Apache-2.0 AND BSD-3-Clause AND MIT, approved, CQ20926 -maven/mavencentral/io.netty/netty-resolver-dns-classes-macos/4.1.118.Final, Apache-2.0, approved, #6367 -maven/mavencentral/io.netty/netty-resolver-dns-native-macos/4.1.118.Final, Apache-2.0, approved, #7004 -maven/mavencentral/io.netty/netty-resolver-dns/4.1.118.Final, Apache-2.0 AND BSD-3-Clause AND MIT, approved, CQ20926 -maven/mavencentral/io.netty/netty-resolver/4.1.118.Final, Apache-2.0 AND BSD-3-Clause AND MIT, approved, CQ20926 -maven/mavencentral/io.netty/netty-transport-classes-epoll/4.1.118.Final, Apache-2.0, approved, #6366 -maven/mavencentral/io.netty/netty-transport-native-epoll/4.1.118.Final, Apache-2.0 AND BSD-3-Clause AND MIT, approved, CQ20926 -maven/mavencentral/io.netty/netty-transport-native-unix-common/4.1.118.Final, Apache-2.0 AND BSD-3-Clause AND MIT, approved, CQ20926 -maven/mavencentral/io.netty/netty-transport/4.1.118.Final, Apache-2.0 AND BSD-3-Clause AND MIT, approved, CQ20926 -maven/mavencentral/io.projectreactor.netty/reactor-netty-core/1.2.3, Apache-2.0, approved, clearlydefined -maven/mavencentral/io.projectreactor.netty/reactor-netty-http/1.2.3, Apache-2.0, approved, clearlydefined -maven/mavencentral/io.projectreactor.netty/reactor-netty/1.2.3, Apache-2.0, approved, clearlydefined -maven/mavencentral/io.projectreactor/reactor-core/3.7.3, Apache-2.0, approved, #17529 +maven/mavencentral/io.github.openfeign/feign-core/13.6, Apache-2.0, approved, clearlydefined +maven/mavencentral/io.github.openfeign/feign-form-spring/13.6, Apache-2.0, approved, clearlydefined +maven/mavencentral/io.github.openfeign/feign-form/13.6, Apache-2.0, approved, clearlydefined +maven/mavencentral/io.github.openfeign/feign-hc5/13.6, Apache-2.0, approved, #21983 +maven/mavencentral/io.github.openfeign/feign-slf4j/13.6, Apache-2.0, approved, clearlydefined +maven/mavencentral/io.micrometer/micrometer-commons/1.15.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/io.micrometer/micrometer-core/1.15.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/io.micrometer/micrometer-observation/1.15.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/io.netty/netty-buffer/4.1.121.Final, Apache-2.0, approved, CQ21842 +maven/mavencentral/io.netty/netty-codec-dns/4.1.121.Final, Apache-2.0 AND BSD-3-Clause AND MIT, approved, CQ20926 +maven/mavencentral/io.netty/netty-codec-http/4.1.121.Final, Apache-2.0 AND BSD-3-Clause AND MIT, approved, CQ20926 +maven/mavencentral/io.netty/netty-codec-http2/4.1.121.Final, Apache-2.0 AND BSD-3-Clause AND MIT, approved, CQ20926 +maven/mavencentral/io.netty/netty-codec-socks/4.1.121.Final, Apache-2.0 AND BSD-3-Clause AND MIT, approved, CQ20926 +maven/mavencentral/io.netty/netty-codec/4.1.121.Final, Apache-2.0 AND BSD-3-Clause AND MIT, approved, CQ20926 +maven/mavencentral/io.netty/netty-common/4.1.121.Final, Apache-2.0 AND MIT AND CC0-1.0, approved, CQ21843 +maven/mavencentral/io.netty/netty-handler-proxy/4.1.121.Final, Apache-2.0 AND BSD-3-Clause AND MIT, approved, CQ20926 +maven/mavencentral/io.netty/netty-handler/4.1.121.Final, Apache-2.0 AND BSD-3-Clause AND MIT, approved, CQ20926 +maven/mavencentral/io.netty/netty-resolver-dns-classes-macos/4.1.121.Final, Apache-2.0, approved, #6367 +maven/mavencentral/io.netty/netty-resolver-dns-native-macos/4.1.121.Final, Apache-2.0, approved, #7004 +maven/mavencentral/io.netty/netty-resolver-dns/4.1.121.Final, Apache-2.0 AND BSD-3-Clause AND MIT, approved, CQ20926 +maven/mavencentral/io.netty/netty-resolver/4.1.121.Final, Apache-2.0 AND BSD-3-Clause AND MIT, approved, CQ20926 +maven/mavencentral/io.netty/netty-transport-classes-epoll/4.1.121.Final, Apache-2.0, approved, #6366 +maven/mavencentral/io.netty/netty-transport-native-epoll/4.1.121.Final, Apache-2.0 AND BSD-3-Clause AND MIT, approved, CQ20926 +maven/mavencentral/io.netty/netty-transport-native-unix-common/4.1.121.Final, Apache-2.0 AND BSD-3-Clause AND MIT, approved, CQ20926 +maven/mavencentral/io.netty/netty-transport/4.1.121.Final, Apache-2.0 AND BSD-3-Clause AND MIT, approved, CQ20926 +maven/mavencentral/io.projectreactor.netty/reactor-netty-core/1.2.6, Apache-2.0, approved, clearlydefined +maven/mavencentral/io.projectreactor.netty/reactor-netty-http/1.2.6, Apache-2.0, approved, clearlydefined +maven/mavencentral/io.projectreactor/reactor-core/3.7.6, Apache-2.0, approved, #17529 maven/mavencentral/io.protostuff/protostuff-api/1.8.0, Apache-2.0, approved, clearlydefined maven/mavencentral/io.protostuff/protostuff-collectionschema/1.8.0, Apache-2.0, approved, clearlydefined maven/mavencentral/io.protostuff/protostuff-core/1.8.0, Apache-2.0, approved, clearlydefined maven/mavencentral/io.protostuff/protostuff-runtime/1.8.0, Apache-2.0, approved, clearlydefined maven/mavencentral/io.smallrye/jandex/3.2.0, Apache-2.0, approved, clearlydefined -maven/mavencentral/io.swagger.core.v3/swagger-annotations-jakarta/2.2.28, Apache-2.0, approved, #5947 -maven/mavencentral/io.swagger.core.v3/swagger-annotations/2.2.26, Apache-2.0, approved, #11362 -maven/mavencentral/io.swagger.core.v3/swagger-core-jakarta/2.2.28, Apache-2.0, approved, #5929 -maven/mavencentral/io.swagger.core.v3/swagger-core/2.2.26, Apache-2.0, approved, #9265 -maven/mavencentral/io.swagger.core.v3/swagger-models-jakarta/2.2.28, Apache-2.0, approved, #5919 -maven/mavencentral/io.swagger.core.v3/swagger-models/2.2.26, Apache-2.0, approved, #10353 +maven/mavencentral/io.swagger.core.v3/swagger-annotations-jakarta/2.2.30, Apache-2.0, approved, #5947 +maven/mavencentral/io.swagger.core.v3/swagger-annotations/2.2.28, Apache-2.0, approved, #11362 +maven/mavencentral/io.swagger.core.v3/swagger-core-jakarta/2.2.30, Apache-2.0, approved, #5929 +maven/mavencentral/io.swagger.core.v3/swagger-core/2.2.28, Apache-2.0, approved, #9265 +maven/mavencentral/io.swagger.core.v3/swagger-models-jakarta/2.2.30, Apache-2.0, approved, #5919 +maven/mavencentral/io.swagger.core.v3/swagger-models/2.2.28, Apache-2.0, approved, #10353 maven/mavencentral/jakarta.activation/jakarta.activation-api/2.1.3, EPL-2.0 OR BSD-3-Clause OR GPL-2.0-only with Classpath-exception-2.0, approved, ee4j.jaf maven/mavencentral/jakarta.annotation/jakarta.annotation-api/2.1.1, EPL-2.0 OR GPL-2.0-only with Classpath-exception-2.0, approved, ee4j.ca maven/mavencentral/jakarta.persistence/jakarta.persistence-api/3.1.0, EPL-2.0 OR BSD-3-Clause, approved, ee4j.jpa @@ -150,46 +154,47 @@ maven/mavencentral/jakarta.servlet/jakarta.servlet-api/6.0.0, EPL-2.0 OR GPL-2.0 maven/mavencentral/jakarta.transaction/jakarta.transaction-api/2.0.1, EPL-2.0 OR GPL-2.0-only with Classpath-exception-2.0, approved, ee4j.jta maven/mavencentral/jakarta.validation/jakarta.validation-api/3.0.2, Apache-2.0, approved, ee4j.validation maven/mavencentral/jakarta.xml.bind/jakarta.xml.bind-api/4.0.2, BSD-3-Clause, approved, ee4j.jaxb -maven/mavencentral/net.bytebuddy/byte-buddy/1.15.11, Apache-2.0 AND BSD-3-Clause, approved, #16008 -maven/mavencentral/net.java.dev.jna/jna-platform/5.13.0, Apache-2.0 OR LGPL-2.1-or-later, approved, #6707 -maven/mavencentral/net.java.dev.jna/jna/5.13.0, Apache-2.0 AND LGPL-2.1-or-later, approved, #15196 +maven/mavencentral/joda-time/joda-time/2.12.7, Apache-2.0, approved, #12739 +maven/mavencentral/net.bytebuddy/byte-buddy/1.17.5, Apache-2.0 AND BSD-3-Clause, approved, #19239 +maven/mavencentral/net.minidev/accessors-smart/2.5.2, Apache-2.0, approved, #19432 +maven/mavencentral/net.minidev/json-smart/2.5.2, Apache-2.0, approved, #19431 maven/mavencentral/org.antlr/ST4/4.3.4, BSD-3-Clause, approved, #1495 maven/mavencentral/org.antlr/antlr-runtime/3.5.3, BSD-3-Clause, approved, #8916 maven/mavencentral/org.antlr/antlr4-runtime/4.13.0, BSD-3-Clause, approved, #10767 -maven/mavencentral/org.apache.commons/commons-collections4/4.4, Apache-2.0, approved, #17660 +maven/mavencentral/org.apache.commons/commons-collections4/4.5.0, Apache-2.0 AND LicenseRef-Public-Domain, approved, #20791 maven/mavencentral/org.apache.commons/commons-compress/1.27.1, Apache-2.0 AND (Apache-2.0 AND BSD-3-Clause), approved, #17651 maven/mavencentral/org.apache.commons/commons-fileupload2-core/2.0.0-M1, Apache-2.0, approved, #15738 maven/mavencentral/org.apache.commons/commons-fileupload2-jakarta/2.0.0-M1, Apache-2.0, approved, clearlydefined maven/mavencentral/org.apache.commons/commons-lang3/3.17.0, Apache-2.0, approved, #16044 -maven/mavencentral/org.apache.commons/commons-text/1.13.0, Apache-2.0, approved, #17931 -maven/mavencentral/org.apache.httpcomponents.client5/httpclient5/5.4.2, Apache-2.0 AND MPL-2.0, approved, #16947 -maven/mavencentral/org.apache.httpcomponents.core5/httpcore5-h2/5.3.3, Apache-2.0, approved, #16867 -maven/mavencentral/org.apache.httpcomponents.core5/httpcore5/5.3.3, Apache-2.0, approved, #16866 +maven/mavencentral/org.apache.commons/commons-text/1.13.1, Apache-2.0, approved, #17931 +maven/mavencentral/org.apache.httpcomponents.client5/httpclient5/5.4.4, Apache-2.0 AND MPL-2.0, approved, #16947 +maven/mavencentral/org.apache.httpcomponents.core5/httpcore5-h2/5.3.4, Apache-2.0, approved, #16867 +maven/mavencentral/org.apache.httpcomponents.core5/httpcore5/5.3.4, Apache-2.0, approved, #16866 maven/mavencentral/org.apache.httpcomponents/httpclient/4.5.14, Apache-2.0, approved, #15248 maven/mavencentral/org.apache.httpcomponents/httpcore/4.4.16, Apache-2.0, approved, CQ23528 -maven/mavencentral/org.apache.logging.log4j/log4j-api/2.24.3, Apache-2.0, approved, #16095 -maven/mavencentral/org.apache.logging.log4j/log4j-to-slf4j/2.24.3, Apache-2.0, approved, #16094 -maven/mavencentral/org.apache.tomcat.embed/tomcat-embed-core/10.1.36, Apache-2.0 AND (EPL-2.0 OR (GPL-2.0 WITH Classpath-exception-2.0)) AND CDDL-1.0 AND (CDDL-1.1 OR (GPL-2.0-only WITH Classpath-exception-2.0)) AND EPL-2.0, approved, #15195 -maven/mavencentral/org.apache.tomcat.embed/tomcat-embed-el/10.1.36, Apache-2.0, approved, #6997 -maven/mavencentral/org.apache.tomcat.embed/tomcat-embed-websocket/10.1.36, Apache-2.0, approved, #7920 -maven/mavencentral/org.aspectj/aspectjrt/1.9.22.1, EPL-1.0, approved, tools.aspectj -maven/mavencentral/org.aspectj/aspectjweaver/1.9.22.1, EPL-1.0, approved, tools.aspectj -maven/mavencentral/org.bouncycastle/bcpkix-jdk18on/1.80, MIT, approved, #18697 -maven/mavencentral/org.bouncycastle/bcprov-jdk18on/1.78.1, MIT AND CC0-1.0, approved, #14433 +maven/mavencentral/org.apache.tomcat.embed/tomcat-embed-core/10.1.41, Apache-2.0 AND (EPL-2.0 OR (GPL-2.0-only WITH Classpath-exception-2.0)) AND CDDL-1.0 AND (CDDL-1.1 OR (GPL-2.0-only WITH Classpath-exception-2.0)) AND EPL-2.0, approved, #15195 +maven/mavencentral/org.apache.tomcat.embed/tomcat-embed-el/10.1.41, Apache-2.0, approved, #6997 +maven/mavencentral/org.apache.tomcat.embed/tomcat-embed-websocket/10.1.41, Apache-2.0, approved, #7920 +maven/mavencentral/org.aspectj/aspectjrt/1.9.24, EPL-1.0, approved, tools.aspectj +maven/mavencentral/org.aspectj/aspectjweaver/1.9.24, EPL-1.0, approved, tools.aspectj +maven/mavencentral/org.bouncycastle/bcpkix-jdk18on/1.81, MIT, approved, #21822 maven/mavencentral/org.bouncycastle/bcprov-jdk18on/1.80, MIT AND CC0-1.0, approved, #18694 -maven/mavencentral/org.bouncycastle/bcutil-jdk18on/1.80, MIT, approved, #18695 -maven/mavencentral/org.checkerframework/checker-qual/3.37.0, MIT, approved, clearlydefined -maven/mavencentral/org.checkerframework/checker-qual/3.48.3, MIT, approved, #17162 -maven/mavencentral/org.flywaydb/flyway-core/10.20.1, Apache-2.0, approved, clearlydefined -maven/mavencentral/org.flywaydb/flyway-database-postgresql/10.20.1, Apache-2.0, approved, #17545 -maven/mavencentral/org.flywaydb/flyway-mysql/10.20.1, Apache-2.0, approved, #18228 -maven/mavencentral/org.flywaydb/flyway-sqlserver/10.20.1, Apache-2.0, approved, #18226 +maven/mavencentral/org.bouncycastle/bcprov-jdk18on/1.81, MIT AND CC0-1.0, approved, #21819 +maven/mavencentral/org.bouncycastle/bcutil-jdk18on/1.81, MIT, approved, #21820 +maven/mavencentral/org.checkerframework/checker-qual/3.43.0, MIT, approved, clearlydefined +maven/mavencentral/org.eclipse.persistence/org.eclipse.persistence.asm/9.8.0, EPL-2.0 OR BSD-3-Clause, approved, ee4j.eclipselink +maven/mavencentral/org.eclipse.persistence/org.eclipse.persistence.core/4.0.6, EPL-2.0 OR BSD-3-Clause, approved, ee4j.eclipselink +maven/mavencentral/org.eclipse.persistence/org.eclipse.persistence.jpa.jpql/4.0.6, EPL-2.0 OR BSD-3-Clause, approved, ee4j.eclipselink +maven/mavencentral/org.eclipse.persistence/org.eclipse.persistence.jpa/4.0.6, EPL-2.0 OR BSD-3-Clause, approved, ee4j.eclipselink +maven/mavencentral/org.flywaydb/flyway-core/11.7.2, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.flywaydb/flyway-database-postgresql/11.7.2, Apache-2.0, approved, #21919 +maven/mavencentral/org.flywaydb/flyway-mysql/11.7.2, Apache-2.0, approved, #21980 maven/mavencentral/org.glassfish.jaxb/jaxb-core/4.0.5, BSD-3-Clause, approved, ee4j.jaxb-impl maven/mavencentral/org.glassfish.jaxb/jaxb-runtime/4.0.5, BSD-3-Clause, approved, ee4j.jaxb-impl maven/mavencentral/org.glassfish.jaxb/txw2/4.0.5, BSD-3-Clause, approved, ee4j.jaxb-impl maven/mavencentral/org.hibernate.common/hibernate-commons-annotations/7.0.3.Final, Apache-2.0, approved, clearlydefined -maven/mavencentral/org.hibernate.orm/hibernate-core/6.6.8.Final, (EPL-2.0 OR BSD-3-Clause) AND LGPL-2.1-or-later AND MIT, approved, #17553 -maven/mavencentral/org.hibernate.orm/hibernate-jpamodelgen/6.6.8.Final, EPL-2.0 OR BSD-3-Clause AND LGPL-2.1-only AND MIT, approved, #18221 +maven/mavencentral/org.hibernate.orm/hibernate-core/6.6.15.Final, (EPL-2.0 OR BSD-3-Clause) AND LGPL-2.1-or-later AND MIT, approved, #17553 +maven/mavencentral/org.hibernate.orm/hibernate-jpamodelgen/6.6.15.Final, EPL-2.0 OR BSD-3-Clause AND LGPL-2.1-only AND MIT, approved, #18221 maven/mavencentral/org.hibernate.validator/hibernate-validator/8.0.2.Final, Apache-2.0 AND CC-PDDC, approved, #18198 maven/mavencentral/org.javassist/javassist/3.30.2-GA, Apache-2.0 AND LGPL-2.1-or-later AND MPL-1.1, approved, #12108 maven/mavencentral/org.jboss.logging/jboss-logging/3.6.1.Final, Apache-2.0, approved, clearlydefined @@ -199,84 +204,90 @@ maven/mavencentral/org.jline/jline-native/3.26.3, BSD-3-Clause AND Apache-2.0, a maven/mavencentral/org.jline/jline-reader/3.26.3, BSD-3-Clause, approved, clearlydefined maven/mavencentral/org.jline/jline-style/3.26.3, BSD-3-Clause, approved, clearlydefined maven/mavencentral/org.jline/jline-terminal/3.26.3, BSD-3-Clause AND Apache-2.0, approved, #19811 -maven/mavencentral/org.jsoup/jsoup/1.19.1, MIT AND Apache-2.0, approved, #19857 -maven/mavencentral/org.jspecify/jspecify/1.0.0, Apache-2.0, approved, clearlydefined -maven/mavencentral/org.mariadb.jdbc/mariadb-java-client/3.4.1, LGPL-2.1-only AND LGPL-2.1-or-later AND CC0-1.0, approved, #18232 +maven/mavencentral/org.jsoup/jsoup/1.20.1, MIT AND Apache-2.0, approved, #20896 +maven/mavencentral/org.jspecify/jspecify/1.0.0, Apache-2.0, approved, #21897 +maven/mavencentral/org.mariadb.jdbc/mariadb-java-client/3.5.3, LGPL-2.1-only AND LGPL-2.1-or-later, approved, clearlydefined maven/mavencentral/org.ow2.asm/asm/9.7.1, BSD-3-Clause, approved, #16464 maven/mavencentral/org.postgresql/postgresql/42.7.5, BSD-2-Clause AND Apache-2.0, approved, #11681 -maven/mavencentral/org.projectlombok/lombok/1.18.36, MIT, approved, #15192 +maven/mavencentral/org.projectlombok/lombok/1.18.38, MIT, approved, #15192 maven/mavencentral/org.reactivestreams/reactive-streams/1.0.4, CC0-1.0, approved, CQ16332 maven/mavencentral/org.reflections/reflections/0.10.2, Apache-2.0 AND WTFPL, approved, clearlydefined -maven/mavencentral/org.slf4j/jcl-over-slf4j/2.0.16, MIT AND Apache-2.0, approved, #11889 -maven/mavencentral/org.slf4j/jul-to-slf4j/2.0.16, MIT, approved, #7698 -maven/mavencentral/org.slf4j/slf4j-api/2.0.16, MIT, approved, #5915 -maven/mavencentral/org.springdoc/springdoc-openapi-starter-common/2.8.5, Apache-2.0, approved, #18209 -maven/mavencentral/org.springdoc/springdoc-openapi-starter-webmvc-api/2.8.5, Apache-2.0, approved, #18210 -maven/mavencentral/org.springdoc/springdoc-openapi-starter-webmvc-ui/2.8.5, Apache-2.0, approved, #18211 -maven/mavencentral/org.springframework.amqp/spring-amqp/3.2.3, Apache-2.0, approved, #18234 -maven/mavencentral/org.springframework.amqp/spring-rabbit/3.2.3, Apache-2.0, approved, #18214 -maven/mavencentral/org.springframework.boot/spring-boot-autoconfigure/3.4.3, Apache-2.0, approved, #17570 -maven/mavencentral/org.springframework.boot/spring-boot-starter-amqp/3.4.3, Apache-2.0, approved, #19774 -maven/mavencentral/org.springframework.boot/spring-boot-starter-data-jpa/3.4.3, Apache-2.0, approved, #17552 -maven/mavencentral/org.springframework.boot/spring-boot-starter-hateoas/3.4.3, Apache-2.0, approved, #19808 -maven/mavencentral/org.springframework.boot/spring-boot-starter-jdbc/3.4.3, Apache-2.0, approved, #17564 -maven/mavencentral/org.springframework.boot/spring-boot-starter-json/3.4.3, Apache-2.0, approved, #17549 -maven/mavencentral/org.springframework.boot/spring-boot-starter-logging/3.4.3, Apache-2.0, approved, #17573 -maven/mavencentral/org.springframework.boot/spring-boot-starter-reactor-netty/3.4.3, Apache-2.0, approved, #17527 -maven/mavencentral/org.springframework.boot/spring-boot-starter-security/3.4.3, Apache-2.0, approved, #17561 -maven/mavencentral/org.springframework.boot/spring-boot-starter-tomcat/3.4.3, Apache-2.0, approved, #17526 -maven/mavencentral/org.springframework.boot/spring-boot-starter-validation/3.4.3, Apache-2.0, approved, #17562 -maven/mavencentral/org.springframework.boot/spring-boot-starter-web/3.4.3, Apache-2.0, approved, #17569 -maven/mavencentral/org.springframework.boot/spring-boot-starter-webflux/3.4.3, Apache-2.0, approved, #17525 -maven/mavencentral/org.springframework.boot/spring-boot-starter/3.4.3, Apache-2.0, approved, #17538 -maven/mavencentral/org.springframework.boot/spring-boot/3.4.3, Apache-2.0, approved, #17534 -maven/mavencentral/org.springframework.cloud/spring-cloud-bus/4.2.0, Apache-2.0, approved, #18231 -maven/mavencentral/org.springframework.cloud/spring-cloud-commons/4.2.0, Apache-2.0, approved, clearlydefined -maven/mavencentral/org.springframework.cloud/spring-cloud-context/4.2.0, Apache-2.0, approved, clearlydefined -maven/mavencentral/org.springframework.cloud/spring-cloud-function-context/4.2.0, Apache-2.0, approved, #18227 -maven/mavencentral/org.springframework.cloud/spring-cloud-function-core/4.2.0, Apache-2.0, approved, #18216 -maven/mavencentral/org.springframework.cloud/spring-cloud-openfeign-core/4.2.0, Apache-2.0, approved, clearlydefined -maven/mavencentral/org.springframework.cloud/spring-cloud-starter-openfeign/4.2.0, Apache-2.0, approved, clearlydefined -maven/mavencentral/org.springframework.cloud/spring-cloud-starter/4.2.0, Apache-2.0, approved, clearlydefined -maven/mavencentral/org.springframework.cloud/spring-cloud-stream-binder-rabbit-core/4.2.0, Apache-2.0, approved, #18224 -maven/mavencentral/org.springframework.cloud/spring-cloud-stream-binder-rabbit/4.2.0, Apache-2.0, approved, #18222 -maven/mavencentral/org.springframework.cloud/spring-cloud-stream/4.2.0, Apache-2.0, approved, #18215 -maven/mavencentral/org.springframework.data/spring-data-commons/3.4.3, Apache-2.0, approved, #17546 -maven/mavencentral/org.springframework.data/spring-data-jpa/3.4.3, Apache-2.0, approved, #17568 -maven/mavencentral/org.springframework.hateoas/spring-hateoas/2.4.1, Apache-2.0, approved, #18230 -maven/mavencentral/org.springframework.integration/spring-integration-amqp/6.4.2, Apache-2.0, approved, #18212 -maven/mavencentral/org.springframework.integration/spring-integration-core/6.4.2, Apache-2.0, approved, #18217 -maven/mavencentral/org.springframework.integration/spring-integration-jmx/6.4.2, Apache-2.0, approved, #18229 +maven/mavencentral/org.slf4j/jul-to-slf4j/2.0.17, MIT, approved, #7698 +maven/mavencentral/org.slf4j/slf4j-api/2.0.17, MIT, approved, #5915 +maven/mavencentral/org.springdoc/springdoc-openapi-starter-common/2.8.9, Apache-2.0, approved, #18209 +maven/mavencentral/org.springdoc/springdoc-openapi-starter-webmvc-api/2.8.9, Apache-2.0, approved, #18210 +maven/mavencentral/org.springdoc/springdoc-openapi-starter-webmvc-ui/2.8.9, Apache-2.0, approved, #18211 +maven/mavencentral/org.springframework.amqp/spring-amqp/3.2.5, Apache-2.0, approved, #18234 +maven/mavencentral/org.springframework.amqp/spring-rabbit/3.2.5, Apache-2.0, approved, #18214 +maven/mavencentral/org.springframework.boot/spring-boot-actuator-autoconfigure/3.5.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.boot/spring-boot-actuator/3.5.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.boot/spring-boot-autoconfigure/3.5.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.boot/spring-boot-starter-amqp/3.5.0, Apache-2.0, approved, #21951 +maven/mavencentral/org.springframework.boot/spring-boot-starter-data-jpa/3.5.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.boot/spring-boot-starter-hateoas/3.5.0, Apache-2.0, approved, #21971 +maven/mavencentral/org.springframework.boot/spring-boot-starter-jdbc/3.5.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.boot/spring-boot-starter-json/3.5.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.boot/spring-boot-starter-logging/3.5.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.boot/spring-boot-starter-oauth2-client/3.5.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.boot/spring-boot-starter-reactor-netty/3.5.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.boot/spring-boot-starter-security/3.5.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.boot/spring-boot-starter-tomcat/3.5.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.boot/spring-boot-starter-validation/3.5.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.boot/spring-boot-starter-web/3.5.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.boot/spring-boot-starter-webflux/3.5.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.boot/spring-boot-starter/3.5.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.boot/spring-boot/3.5.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.cloud/spring-cloud-bus/4.3.0, Apache-2.0, approved, #21998 +maven/mavencentral/org.springframework.cloud/spring-cloud-commons/4.3.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.cloud/spring-cloud-context/4.3.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.cloud/spring-cloud-function-context/4.3.0, Apache-2.0, approved, #21964 +maven/mavencentral/org.springframework.cloud/spring-cloud-function-core/4.3.0, Apache-2.0, approved, #22002 +maven/mavencentral/org.springframework.cloud/spring-cloud-openfeign-core/4.3.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.cloud/spring-cloud-starter-openfeign/4.3.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.cloud/spring-cloud-starter/4.3.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.cloud/spring-cloud-stream-binder-rabbit-core/4.3.0, Apache-2.0, approved, #21992 +maven/mavencentral/org.springframework.cloud/spring-cloud-stream-binder-rabbit/4.3.0, Apache-2.0, approved, #21988 +maven/mavencentral/org.springframework.cloud/spring-cloud-stream/4.3.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.data/spring-data-commons/3.5.0, Apache-2.0, approved, #21920 +maven/mavencentral/org.springframework.data/spring-data-jpa/3.5.0, Apache-2.0, approved, #21922 +maven/mavencentral/org.springframework.hateoas/spring-hateoas/2.5.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.integration/spring-integration-amqp/6.5.0, Apache-2.0, approved, #21953 +maven/mavencentral/org.springframework.integration/spring-integration-core/6.5.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.integration/spring-integration-jdbc/6.5.0, Apache-2.0, approved, #21987 +maven/mavencentral/org.springframework.integration/spring-integration-jmx/6.5.0, Apache-2.0, approved, clearlydefined maven/mavencentral/org.springframework.plugin/spring-plugin-core/3.0.0, Apache-2.0, approved, #7104 -maven/mavencentral/org.springframework.retry/spring-retry/2.0.11, Apache-2.0, approved, #16889 -maven/mavencentral/org.springframework.security/spring-security-aspects/6.4.3, Apache-2.0, approved, #18220 -maven/mavencentral/org.springframework.security/spring-security-config/6.4.3, Apache-2.0, approved, #17578 -maven/mavencentral/org.springframework.security/spring-security-core/6.4.3, Apache-2.0, approved, #17557 -maven/mavencentral/org.springframework.security/spring-security-crypto/6.4.3, Apache-2.0 AND ISC, approved, #17533 -maven/mavencentral/org.springframework.security/spring-security-oauth2-core/6.4.3, Apache-2.0, approved, #17551 -maven/mavencentral/org.springframework.security/spring-security-web/6.4.3, Apache-2.0, approved, #17560 +maven/mavencentral/org.springframework.retry/spring-retry/2.0.12, Apache-2.0, approved, #16889 +maven/mavencentral/org.springframework.security/spring-security-aspects/6.5.0, Apache-2.0, approved, #21979 +maven/mavencentral/org.springframework.security/spring-security-config/6.5.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.security/spring-security-core/6.5.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.security/spring-security-crypto/6.5.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.security/spring-security-oauth2-client/6.5.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.security/spring-security-oauth2-core/6.5.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.security/spring-security-oauth2-jose/6.5.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.security/spring-security-oauth2-resource-server/6.5.0, Apache-2.0, approved, clearlydefined +maven/mavencentral/org.springframework.security/spring-security-web/6.5.0, Apache-2.0, approved, clearlydefined maven/mavencentral/org.springframework.shell/spring-shell-autoconfigure/3.4.0, Apache-2.0, approved, clearlydefined maven/mavencentral/org.springframework.shell/spring-shell-core/3.4.0, Apache-2.0, approved, clearlydefined maven/mavencentral/org.springframework.shell/spring-shell-standard-commands/3.4.0, Apache-2.0, approved, clearlydefined maven/mavencentral/org.springframework.shell/spring-shell-standard/3.4.0, Apache-2.0, approved, clearlydefined maven/mavencentral/org.springframework.shell/spring-shell-starter/3.4.0, Apache-2.0, approved, clearlydefined maven/mavencentral/org.springframework.shell/spring-shell-table/3.4.0, Apache-2.0, approved, clearlydefined -maven/mavencentral/org.springframework/spring-aop/6.2.3, Apache-2.0, approved, #17530 -maven/mavencentral/org.springframework/spring-aspects/6.2.3, Apache-2.0, approved, #17550 -maven/mavencentral/org.springframework/spring-beans/6.2.3, Apache-2.0, approved, #17528 -maven/mavencentral/org.springframework/spring-context-support/6.2.3, Apache-2.0, approved, #18233 -maven/mavencentral/org.springframework/spring-context/6.2.3, Apache-2.0, approved, #17554 -maven/mavencentral/org.springframework/spring-core/6.2.3, Apache-2.0 AND BSD-3-Clause, approved, #17535 -maven/mavencentral/org.springframework/spring-expression/6.2.3, Apache-2.0, approved, #17544 -maven/mavencentral/org.springframework/spring-jcl/6.2.3, Apache-2.0, approved, #17571 -maven/mavencentral/org.springframework/spring-jdbc/6.2.3, Apache-2.0, approved, #17543 -maven/mavencentral/org.springframework/spring-messaging/6.2.3, Apache-2.0, approved, #18225 -maven/mavencentral/org.springframework/spring-orm/6.2.3, Apache-2.0, approved, #17572 -maven/mavencentral/org.springframework/spring-tx/6.2.3, Apache-2.0, approved, #17547 -maven/mavencentral/org.springframework/spring-web/6.2.3, Apache-2.0, approved, #17558 -maven/mavencentral/org.springframework/spring-webflux/6.2.3, Apache-2.0, approved, #17567 -maven/mavencentral/org.springframework/spring-webmvc/6.2.3, Apache-2.0, approved, #17532 -maven/mavencentral/org.springframework/spring-websocket/6.2.3, Apache-2.0, approved, #18223 -maven/mavencentral/org.webjars/swagger-ui/5.18.3, Apache-2.0, approved, #17636 -maven/mavencentral/org.webjars/webjars-locator-lite/1.0.1, MIT, approved, clearlydefined -maven/mavencentral/org.yaml/snakeyaml/2.3, Apache-2.0 AND (Apache-2.0 OR BSD-3-Clause OR EPL-1.0 OR GPL-2.0-or-later OR LGPL-2.1-or-later), approved, #16046 +maven/mavencentral/org.springframework/spring-aop/6.2.7, Apache-2.0, approved, #17530 +maven/mavencentral/org.springframework/spring-aspects/6.2.7, Apache-2.0, approved, #17550 +maven/mavencentral/org.springframework/spring-beans/6.2.7, Apache-2.0, approved, #17528 +maven/mavencentral/org.springframework/spring-context-support/6.2.7, Apache-2.0, approved, #18233 +maven/mavencentral/org.springframework/spring-context/6.2.7, Apache-2.0, approved, #17554 +maven/mavencentral/org.springframework/spring-core/6.2.7, Apache-2.0 AND BSD-3-Clause, approved, #17535 +maven/mavencentral/org.springframework/spring-expression/6.2.7, Apache-2.0, approved, #17544 +maven/mavencentral/org.springframework/spring-jcl/6.2.7, Apache-2.0, approved, #17571 +maven/mavencentral/org.springframework/spring-jdbc/6.2.7, Apache-2.0, approved, #17543 +maven/mavencentral/org.springframework/spring-messaging/6.2.7, Apache-2.0, approved, #18225 +maven/mavencentral/org.springframework/spring-orm/6.2.7, Apache-2.0, approved, #17572 +maven/mavencentral/org.springframework/spring-tx/6.2.7, Apache-2.0, approved, #17547 +maven/mavencentral/org.springframework/spring-web/6.2.7, Apache-2.0, approved, #17558 +maven/mavencentral/org.springframework/spring-webflux/6.2.7, Apache-2.0, approved, #17567 +maven/mavencentral/org.springframework/spring-webmvc/6.2.7, Apache-2.0, approved, #17532 +maven/mavencentral/org.springframework/spring-websocket/6.2.7, Apache-2.0, approved, #18223 +maven/mavencentral/org.webjars/swagger-ui/5.21.0, Apache-2.0 AND MIT, approved, #21547 +maven/mavencentral/org.webjars/webjars-locator-lite/1.1.0, MIT, approved, clearlydefined +maven/mavencentral/org.yaml/snakeyaml/2.4, Apache-2.0, approved, #19469 diff --git a/.3rd-party/README.md b/.3rd-party/README.md index 35c2be1eb..6c327c084 100644 --- a/.3rd-party/README.md +++ b/.3rd-party/README.md @@ -3,7 +3,8 @@ This folder provides listings of all 3rd-party dependencies incl. their licenses. There is a dedicated subfolder for each release (and milestone) holding the release-specific information. -The files are generated using -the [check-dependencies.sh](https://github.com/eclipse-hawkbit/hawkbit/tree/master/check-dependencies.sh) script. The -script makes use of the [Eclipse Dash License Tool](https://github.com/eclipse/dash-licenses) which identifies and vets -the licenses of the project content. +The DEPENDENCIES file could be generated manually using [Eclipse Dash License Tool](https://github.com/eclipse/dash-licenses) maven plugin by running in root folder: +```shell +mvn clean install -DskipTests -Ddash.skip=false \ + --projects '!org.eclipse.hawkbit:hawkbit-repository-test,!org.eclipse.hawkbit:hawkbit-dmf-rabbitmq-test' +``` diff --git a/.github/workflows/license-scan.yml b/.github/workflows/license-scan.yml index 81d78de2e..263b9048c 100644 --- a/.github/workflows/license-scan.yml +++ b/.github/workflows/license-scan.yml @@ -3,11 +3,17 @@ name: License Scan on: # enable running the workflow manually workflow_dispatch: + schedule: + # run every night at 2:00 AM (UTC) + - cron: '0 2 * * *' jobs: license-scan: runs-on: ubuntu-latest + permissions: + contents: write + steps: - uses: actions/checkout@v4 @@ -31,6 +37,28 @@ jobs: - name: Check dependency licenses with dash tool run: | mvn clean install -DskipTests -DskipJavadoc --batch-mode - mvn license-tool:license-check -DexcludeGroupIds=org.eclipse.hawkbit -Plicense -Ddash.iplab.token=${GITLAB_API_TOKEN} --projects '!org.eclipse.hawkbit:hawkbit-repository-test,!org.eclipse.hawkbit:hawkbit-dmf-rabbitmq-test' + mvn license-tool:license-check -DexcludeGroupIds=org.eclipse.hawkbit -Ddash.fail=false -Plicense -Ddash.iplab.token=${GITLAB_API_TOKEN} --projects '!org.eclipse.hawkbit:hawkbit-repository-test,!org.eclipse.hawkbit:hawkbit-dmf-rabbitmq-test' + CHANGED_FILES_COUNT=$(git status --short | wc -l) + CHANGED_FILES_COUNT=${CHANGED_FILES_COUNT//[[:space:]]/} + echo "Number of changed files: ${CHANGED_FILES_COUNT}" + if [ "$CHANGED_FILES_COUNT" -eq 1 ]; then + DEPENDENCY_FILE=".3rd-party/DEPENDENCIES" + DEPENDENCIES_MODIFIED=$(git status --short | grep ".3rd-party/DEPENDENCIES") + # Check if the file is modified + if [[ -n "$DEPENDENCIES_MODIFIED" ]]; then + echo "${DEPENDENCY_FILE} changed - commit it" + git config --local user.name "github-actions[bot]" + git config --local user.email "github-actions[bot]@users.noreply.github.com" + git add ${DEPENDENCY_FILE} && git commit -m "[Release] Automated commit of ${DEPENDENCY_FILE} changes" && git push + else + echo "Unexpected changes:" + git status --short + exit 1 + fi + else + echo "More than one file has changed:" + git status --short + exit 1 + fi env: GITLAB_API_TOKEN: ${{ secrets.GITLAB_API_TOKEN }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index e88edaa00..8012c8f81 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -60,6 +60,28 @@ jobs: fi mvn install -DskipTests -DskipJavadoc --batch-mode mvn license-tool:license-check -Plicense -Ddash.fail=${DASH_FAIL} -Ddash.iplab.token=${GITLAB_API_TOKEN} --projects '!org.eclipse.hawkbit:hawkbit-repository-test,!org.eclipse.hawkbit:hawkbit-dmf-rabbitmq-test' --batch-mode + CHANGED_FILES_COUNT=$(git status --short | wc -l) + CHANGED_FILES_COUNT=${CHANGED_FILES_COUNT//[[:space:]]/} + echo "Number of changed files: ${CHANGED_FILES_COUNT}" + if [ "$CHANGED_FILES_COUNT" -eq 1 ]; then + DEPENDENCY_FILE=".3rd-party/DEPENDENCIES" + DEPENDENCIES_MODIFIED=$(git status --short | grep ".3rd-party/DEPENDENCIES") + # Check if the file is modified + if [[ -n "$DEPENDENCIES_MODIFIED" ]]; then + echo "${DEPENDENCY_FILE} changed - commit it" + git config --local user.name "github-actions[bot]" + git config --local user.email "github-actions[bot]@users.noreply.github.com" + git add ${DEPENDENCY_FILE} && git commit -m "[Release] Automated commit of ${DEPENDENCY_FILE} changes" && git push + else + echo "Unexpected changes:" + git status --short + exit 1 + fi + else + echo "More than one file has changed:" + git status --short + exit 1 + fi env: REVISION: ${{ github.event.inputs.revision }} GITLAB_API_TOKEN: ${{ secrets.GITLAB_API_TOKEN }} @@ -79,10 +101,10 @@ jobs: - name: Tag release run: | if [ "${REVISION}" != "0-SNAPSHOT" ]; then - git config --global user.email "release_manager@hawkbit.eclipse.org" - git config --global user.name "Eclipse Hawkbit (Release Manager)" - git tag -a ${REVISION} -m "Release version ${REVISION}" - git push origin ${REVISION} + git config --local user.name "github-actions[bot]" + git config --local user.email "github-actions[bot]@users.noreply.github.com" + git tag -a ${REVISION} -m "Release version ${REVISION}" + git push origin ${REVISION} fi env: REVISION: ${{ github.event.inputs.revision }} diff --git a/pom.xml b/pom.xml index b51756d59..f159c1da9 100644 --- a/pom.xml +++ b/pom.xml @@ -119,7 +119,7 @@ false true iot.hawkbit - ${project.build.directory}/.3rd-party/DEPENDENCIES + .3rd-party/DEPENDENCIES ${project.build.directory}/.3rd-party/DEPENDENCIES_REVIEW org.eclipse,org.junit