CBSNexora/cbsnexora-backend
4
0
Fork 0
Code Issues Pull Requests Actions 37 Packages Projects Releases Wiki Activity
7,752 Commits 19 Branches 0 Tags
1f3bb34e13668b7214d40d55e7f5f1e2dfd85678
Commit Graph
26 Commits
Author SHA1 Message Date
Arnold GalovicsandArnold Gálovics eb6c5f90a3 Downgrade a few swagger deps and guava 2023-07-05 15:54:41 +02:00
Arnold GalovicsandArnold Gálovics 971179ce6d FINERACT-1724: Ignore fineract-client dependencies for renovate upgrades since they are on specific versions for a reason 2023-06-09 10:08:22 +02:00
Arnold GalovicsandArnold Gálovics ebd1ea2696 FINERACT-1724: EclipseLink 4.0.0 renovate restriction due to a bug 2023-06-06 16:28:02 +02:00
Arnold GalovicsandAdam Saghy e4754b299b FINERACT-1724: Removed restrictions from renovate.json and upgraded spotless plugin 2023-06-06 14:10:21 +02:00
Adam Saghy 0e3ad8f73b FINERACT-1724: Upgrade liquibase and set proper liquibase logging 2023-04-19 23:15:57 +02:00
Adam Saghy e4c26e7e5c FINERACT-1724: Downgrade liquibase due to invalid behaviour 2023-04-18 23:36:36 +02:00
Arnold GalovicsandArnold Gálovics f985e0101b Dependency fixes 2023-04-15 21:40:49 +02:00
Arnold GalovicsandArnold Gálovics 71c11aba3c Fixing down the openapi generator version to 6.2.1 2023-02-27 13:19:01 +01:00
Arnold GalovicsandArnold Gálovics d7acfc1e5d Renovate adjustments 2023-02-03 12:38:20 +01:00
Arnold GalovicsandArnold Gálovics fb1dbb078f Downgraded Tomcat to 9.0.69 2022-12-28 16:13:55 +01:00
Arnold GalovicsandArnold Gálovics 62cefcdc8b Disabling automatic Spring 6 upgrade for renovate 2022-12-21 19:46:45 +01:00
Arnold GalovicsandArnold Gálovics 77ee567c76 Explicit version numbers for slf4j packages in renovate.json to ensure no automatic upgrades. Note: SLF4J and Logback cannot be upgraded until Spring 6 is integrated 2022-12-21 19:46:45 +01:00
Adam SaghyandArnold Gálovics 70f2783508 FINERACT-1724: Fix NPE issues + Incorrect arguments to mysqld_stmt_bulk_execute 2022-12-16 14:20:52 +01:00
Arnold GalovicsandArnold Gálovics fcfa8ada5f Force Gradle version to be equal or under 7.5.1 for renovate 2022-12-14 14:11:45 +01:00
Arnold GalovicsandArnold Gálovics 714a881be2 Keeping Logback on version 1.2.11 intentionally since it's not 
compatible with Spring Boot 2.x but only 3.x in the future.

More details here:
- http://mailman.qos.ch/pipermail/logback-user/2022-September/005235.html
- https://github.com/spring-projects/spring-boot/issues/12649
 2022-09-14 14:08:12 +02:00
Arnold GalovicsandAleksandar Vidakovic 51782cb642 Dependency fixes for compatibility 2022-08-17 10:53:45 +02:00
Arnold GalovicsandArnold Gálovics 0bbcc72513 Renovate fixes for upcoming dep upgrade 2022-07-01 10:30:02 +02:00
Arnold GalovicsandArnold Gálovics 79375a8b91 Renovate adjustments 2022-06-14 09:15:29 +02:00
NaveenandAleksandar Vidakovic 69a900492c chore: renovate bot setting to pin actions to a full length commit SHA 
- https://docs.renovatebot.com/modules/manager/github-actions/#additional-information

- Pinned actions by SHA https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies

>Pin actions to a full length commit SHA

>Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release.
> Pinning to a particular SHA helps mitigate the risk of a bad actor adding a backdoor to the action's repository,
> as they would need to generate a SHA-1 collision for a valid Git object payload.

- https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions
- https://github.com/renovatebot/.github/blob/b0c3aa85ef2bb242580f20b02b380ca532b4ce17/default.json#L13
 2022-05-20 19:31:21 +02:00
taskain7andArnold Gálovics eb11c32ee3 FINERACT-1483: fix Sonar Security Hotspots 2022-04-11 17:44:05 +02:00
Aleksandar VidakovicandAleksandar Vidakovic cb87c9f550 Use 'renovate' for aggregated dependency upgrades (update) 2022-04-05 17:11:39 +02:00
Aleksandar VidakovicandAleksandar Vidakovic 35c835f4b5 Use 'renovate' for aggregated dependency upgrades 2022-04-05 15:52:44 +02:00
Sergio ZharinovandPetri Tuomola e985597492 Make Renovate Bot propose bumps to update spring-framework-bom (FINERACT-1192) 
All credit for this magic ;) goes https://github.com/zharinov.

See https://github.com/apache/fineract/pull/1372.
 2020-10-10 18:56:16 +03:00
Rhys ArkinsandMichael Vorburger ⛑️ 526a964418 Reduce AWS SDK Dependency Updating to monthly 
This Renovate Bot configuration change will mean that PRs for `com.amazonaws:aws-java-sdk-s3` will be created only on the first day of each month. Existing (open) PRs will continue to get rebased (if conflicted) or updated (if a newer version gets released), but once the PR is merged or closed then another one won't be created again until the next month.

Discussion: https://github.com/apache/fineract/pull/1071#issuecomment-644957795
 2020-06-17 22:10:28 +02:00
Michael Vorburger ⛑️ 734cbb1d1f Renovate ignore docs/ and add label [FINERACT-962] 2020-06-02 19:57:42 +02:00
Renovate BotandMichael Vorburger ⛑️ 9558f53765 Add renovate.json 2020-06-02 19:57:42 +02:00