Adam Saghy and GitHub
270901b9a2
FINERACT-2326: Downgrade liquibase due to licensing concerns ( #5190 )
2025-12-02 13:34:48 -06:00
Adam Saghy
7f07c0afce
FINERACT-2326: Upgrade asciidoc dependencies
2025-09-18 20:55:01 +02:00
CsengeSóti and Arnold Gálovics
fa9c7b9364
FINERACT-1984: OAuth2.1
2025-09-12 14:58:37 +02:00
Adam Saghy and Arnold Gálovics
83039b498a
FINERACT-2181: Downgrade postgres driver - performance issue with v42.7.5
2025-03-26 13:24:51 +01:00
Arnold Galovics and Arnold Gálovics
b6ccb06159
Dep updates
2024-10-14 16:22:47 +02:00
Arnold Galovics and Arnold Gálovics
e2b86788d2
Rolled back openAPI generator version
2024-10-08 20:59:53 +02:00
Kristof Jozsa and Adam Saghy
d7c5947760
FINERACT-2081: downgrade Develocity for ge.apache.org compatibility
2024-09-26 10:32:09 +02:00
Marta Jankovics and Adam Saghy
1ba689dba3
FINERACT-2081: org.eclipse.persistence version 4.0.2
2024-09-05 09:27:51 +01:00
Arnold Galovics and Arnold Gálovics
eb6c5f90a3
Downgrade a few swagger deps and guava
2023-07-05 15:54:41 +02:00
Arnold Galovics and Arnold Gálovics
971179ce6d
FINERACT-1724: Ignore fineract-client dependencies for renovate upgrades since they are on specific versions for a reason
2023-06-09 10:08:22 +02:00
Arnold Galovics and Arnold Gálovics
ebd1ea2696
FINERACT-1724: EclipseLink 4.0.0 renovate restriction due to a bug
2023-06-06 16:28:02 +02:00
Arnold Galovics and Adam Saghy
e4754b299b
FINERACT-1724: Removed restrictions from renovate.json and upgraded spotless plugin
2023-06-06 14:10:21 +02:00
Adam Saghy
0e3ad8f73b
FINERACT-1724: Upgrade liquibase and set proper liquibase logging
2023-04-19 23:15:57 +02:00
Adam Saghy
e4c26e7e5c
FINERACT-1724: Downgrade liquibase due to invalid behaviour
2023-04-18 23:36:36 +02:00
Arnold Galovics and Arnold Gálovics
f985e0101b
Dependency fixes
2023-04-15 21:40:49 +02:00
Arnold Galovics and Arnold Gálovics
71c11aba3c
Fixing down the openapi generator version to 6.2.1
2023-02-27 13:19:01 +01:00
Arnold Galovics and Arnold Gálovics
d7acfc1e5d
Renovate adjustments
2023-02-03 12:38:20 +01:00
Arnold Galovics and Arnold Gálovics
fb1dbb078f
Downgraded Tomcat to 9.0.69
2022-12-28 16:13:55 +01:00
Arnold Galovics and Arnold Gálovics
62cefcdc8b
Disabling automatic Spring 6 upgrade for renovate
2022-12-21 19:46:45 +01:00
Arnold Galovics and Arnold Gálovics
77ee567c76
Explicit version numbers for slf4j packages in renovate.json to ensure no automatic upgrades. Note: SLF4J and Logback cannot be upgraded until Spring 6 is integrated
2022-12-21 19:46:45 +01:00
Adam Saghy and Arnold Gálovics
70f2783508
FINERACT-1724: Fix NPE issues + Incorrect arguments to mysqld_stmt_bulk_execute
2022-12-16 14:20:52 +01:00
Arnold Galovics and Arnold Gálovics
fcfa8ada5f
Force Gradle version to be equal or under 7.5.1 for renovate
2022-12-14 14:11:45 +01:00
Arnold Galovics and Arnold Gálovics
714a881be2
Keeping Logback on version 1.2.11 intentionally since it's not
...
compatible with Spring Boot 2.x but only 3.x in the future.
More details here:
- http://mailman.qos.ch/pipermail/logback-user/2022-September/005235.html
- https://github.com/spring-projects/spring-boot/issues/12649
2022-09-14 14:08:12 +02:00
Arnold Galovics and Aleksandar Vidakovic
51782cb642
Dependency fixes for compatibility
2022-08-17 10:53:45 +02:00
Arnold Galovics and Arnold Gálovics
0bbcc72513
Renovate fixes for upcoming dep upgrade
2022-07-01 10:30:02 +02:00
Arnold Galovics and Arnold Gálovics
79375a8b91
Renovate adjustments
2022-06-14 09:15:29 +02:00
Naveen and Aleksandar Vidakovic
69a900492c
chore: renovate bot setting to pin actions to a full length commit SHA
...
- https://docs.renovatebot.com/modules/manager/github-actions/#additional-information
- Pinned actions by SHA https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies
>Pin actions to a full length commit SHA
>Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release.
> Pinning to a particular SHA helps mitigate the risk of a bad actor adding a backdoor to the action's repository,
> as they would need to generate a SHA-1 collision for a valid Git object payload.
- https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions
- https://github.com/renovatebot/.github/blob/b0c3aa85ef2bb242580f20b02b380ca532b4ce17/default.json#L13
2022-05-20 19:31:21 +02:00
taskain7 and Arnold Gálovics
eb11c32ee3
FINERACT-1483: fix Sonar Security Hotspots
2022-04-11 17:44:05 +02:00
Aleksandar Vidakovic and Aleksandar Vidakovic
cb87c9f550
Use 'renovate' for aggregated dependency upgrades (update)
2022-04-05 17:11:39 +02:00
Aleksandar Vidakovic and Aleksandar Vidakovic
35c835f4b5
Use 'renovate' for aggregated dependency upgrades
2022-04-05 15:52:44 +02:00
Sergio Zharinov and Petri Tuomola
e985597492
Make Renovate Bot propose bumps to update spring-framework-bom (FINERACT-1192)
...
All credit for this magic ;) goes https://github.com/zharinov .
See https://github.com/apache/fineract/pull/1372 .
2020-10-10 18:56:16 +03:00
Rhys Arkins and Michael Vorburger ⛑️
526a964418
Reduce AWS SDK Dependency Updating to monthly
...
This Renovate Bot configuration change will mean that PRs for `com.amazonaws:aws-java-sdk-s3` will be created only on the first day of each month. Existing (open) PRs will continue to get rebased (if conflicted) or updated (if a newer version gets released), but once the PR is merged or closed then another one won't be created again until the next month.
Discussion: https://github.com/apache/fineract/pull/1071#issuecomment-644957795
2020-06-17 22:10:28 +02:00
Michael Vorburger ⛑️
734cbb1d1f
Renovate ignore docs/ and add label [FINERACT-962]
2020-06-02 19:57:42 +02:00
Renovate Bot and Michael Vorburger ⛑️
9558f53765
Add renovate.json
2020-06-02 19:57:42 +02:00