34 Commits
Author SHA1 Message Date
Adam SaghyandGitHub 270901b9a2 FINERACT-2326: Downgrade liquibase due to licensing concerns (#5190) 2025-12-02 13:34:48 -06:00
Adam Saghy 7f07c0afce FINERACT-2326: Upgrade asciidoc dependencies 2025-09-18 20:55:01 +02:00
CsengeSótiandArnold Gálovics fa9c7b9364 FINERACT-1984: OAuth2.1 2025-09-12 14:58:37 +02:00
Adam SaghyandArnold Gálovics 83039b498a FINERACT-2181: Downgrade postgres driver - performance issue with v42.7.5 2025-03-26 13:24:51 +01:00
Arnold GalovicsandArnold Gálovics b6ccb06159 Dep updates 2024-10-14 16:22:47 +02:00
Arnold GalovicsandArnold Gálovics e2b86788d2 Rolled back openAPI generator version 2024-10-08 20:59:53 +02:00
Kristof JozsaandAdam Saghy d7c5947760 FINERACT-2081: downgrade Develocity for ge.apache.org compatibility 2024-09-26 10:32:09 +02:00
Marta JankovicsandAdam Saghy 1ba689dba3 FINERACT-2081: org.eclipse.persistence version 4.0.2 2024-09-05 09:27:51 +01:00
Arnold GalovicsandArnold Gálovics eb6c5f90a3 Downgrade a few swagger deps and guava 2023-07-05 15:54:41 +02:00
Arnold GalovicsandArnold Gálovics 971179ce6d FINERACT-1724: Ignore fineract-client dependencies for renovate upgrades since they are on specific versions for a reason 2023-06-09 10:08:22 +02:00
Arnold GalovicsandArnold Gálovics ebd1ea2696 FINERACT-1724: EclipseLink 4.0.0 renovate restriction due to a bug 2023-06-06 16:28:02 +02:00
Arnold GalovicsandAdam Saghy e4754b299b FINERACT-1724: Removed restrictions from renovate.json and upgraded spotless plugin 2023-06-06 14:10:21 +02:00
Adam Saghy 0e3ad8f73b FINERACT-1724: Upgrade liquibase and set proper liquibase logging 2023-04-19 23:15:57 +02:00
Adam Saghy e4c26e7e5c FINERACT-1724: Downgrade liquibase due to invalid behaviour 2023-04-18 23:36:36 +02:00
Arnold GalovicsandArnold Gálovics f985e0101b Dependency fixes 2023-04-15 21:40:49 +02:00
Arnold GalovicsandArnold Gálovics 71c11aba3c Fixing down the openapi generator version to 6.2.1 2023-02-27 13:19:01 +01:00
Arnold GalovicsandArnold Gálovics d7acfc1e5d Renovate adjustments 2023-02-03 12:38:20 +01:00
Arnold GalovicsandArnold Gálovics fb1dbb078f Downgraded Tomcat to 9.0.69 2022-12-28 16:13:55 +01:00
Arnold GalovicsandArnold Gálovics 62cefcdc8b Disabling automatic Spring 6 upgrade for renovate 2022-12-21 19:46:45 +01:00
Arnold GalovicsandArnold Gálovics 77ee567c76 Explicit version numbers for slf4j packages in renovate.json to ensure no automatic upgrades. Note: SLF4J and Logback cannot be upgraded until Spring 6 is integrated 2022-12-21 19:46:45 +01:00
Adam SaghyandArnold Gálovics 70f2783508 FINERACT-1724: Fix NPE issues + Incorrect arguments to mysqld_stmt_bulk_execute 2022-12-16 14:20:52 +01:00
Arnold GalovicsandArnold Gálovics fcfa8ada5f Force Gradle version to be equal or under 7.5.1 for renovate 2022-12-14 14:11:45 +01:00
Arnold GalovicsandArnold Gálovics 714a881be2 Keeping Logback on version 1.2.11 intentionally since it's not
compatible with Spring Boot 2.x but only 3.x in the future.

More details here:
- http://mailman.qos.ch/pipermail/logback-user/2022-September/005235.html
- https://github.com/spring-projects/spring-boot/issues/12649
2022-09-14 14:08:12 +02:00
Arnold GalovicsandAleksandar Vidakovic 51782cb642 Dependency fixes for compatibility 2022-08-17 10:53:45 +02:00
Arnold GalovicsandArnold Gálovics 0bbcc72513 Renovate fixes for upcoming dep upgrade 2022-07-01 10:30:02 +02:00
Arnold GalovicsandArnold Gálovics 79375a8b91 Renovate adjustments 2022-06-14 09:15:29 +02:00
NaveenandAleksandar Vidakovic 69a900492c chore: renovate bot setting to pin actions to a full length commit SHA
- https://docs.renovatebot.com/modules/manager/github-actions/#additional-information

- Pinned actions by SHA https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies

>Pin actions to a full length commit SHA

>Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release.
> Pinning to a particular SHA helps mitigate the risk of a bad actor adding a backdoor to the action's repository,
> as they would need to generate a SHA-1 collision for a valid Git object payload.

- https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions
- https://github.com/renovatebot/.github/blob/b0c3aa85ef2bb242580f20b02b380ca532b4ce17/default.json#L13
2022-05-20 19:31:21 +02:00
taskain7andArnold Gálovics eb11c32ee3 FINERACT-1483: fix Sonar Security Hotspots 2022-04-11 17:44:05 +02:00
Aleksandar VidakovicandAleksandar Vidakovic cb87c9f550 Use 'renovate' for aggregated dependency upgrades (update) 2022-04-05 17:11:39 +02:00
Aleksandar VidakovicandAleksandar Vidakovic 35c835f4b5 Use 'renovate' for aggregated dependency upgrades 2022-04-05 15:52:44 +02:00
Sergio ZharinovandPetri Tuomola e985597492 Make Renovate Bot propose bumps to update spring-framework-bom (FINERACT-1192)
All credit for this magic ;) goes https://github.com/zharinov.

See https://github.com/apache/fineract/pull/1372.
2020-10-10 18:56:16 +03:00
Rhys ArkinsandMichael Vorburger ⛑️ 526a964418 Reduce AWS SDK Dependency Updating to monthly
This Renovate Bot configuration change will mean that PRs for `com.amazonaws:aws-java-sdk-s3` will be created only on the first day of each month. Existing (open) PRs will continue to get rebased (if conflicted) or updated (if a newer version gets released), but once the PR is merged or closed then another one won't be created again until the next month.

Discussion: https://github.com/apache/fineract/pull/1071#issuecomment-644957795
2020-06-17 22:10:28 +02:00
Michael Vorburger ⛑️ 734cbb1d1f Renovate ignore docs/ and add label [FINERACT-962] 2020-06-02 19:57:42 +02:00
Renovate BotandMichael Vorburger ⛑️ 9558f53765 Add renovate.json 2020-06-02 19:57:42 +02:00