6 Pull requests merged by 2 people

• build(deps): bump com.github.spotbugs:spotbugs-maven-plugin from 4.9.3.2 to 4.9.4.0

  #7882 merged Aug 24, 2025

• docs: Clarify format of exclude patterns

  #7879 merged Aug 22, 2025

• build(deps): bump actions/setup-java from 4 to 5

  #7883 merged Aug 22, 2025

• build(deps): bump mockito.version from 5.18.0 to 5.19.0

  #7874 merged Aug 19, 2025

• build(deps): bump golang from 1.24.6-alpine to 1.25.0-alpine

  #7865 merged Aug 18, 2025

• build(deps): bump org.apache.maven.plugins:maven-javadoc-plugin from 3.11.2 to 3.11.3

  #7871 merged Aug 18, 2025

1 Pull request opened by 1 person

• build(deps): bump amannn/action-semantic-pull-request from 6.0.1 to 6.1.0

  #7878 opened Aug 20, 2025

3 Issues closed by 1 person

• I checked the issues list for existing open or closed reports of the same problem.

  #7881 closed Aug 22, 2025

• Unable to download NVD cve

  #7880 closed Aug 22, 2025

• java.lang.NullPointerException while processing CVE-2024-32849

  #7840 closed Aug 19, 2025

6 Issues opened by 5 people

• Vulnerability is not reported when package-lock.json is without node_modules

  #7884 opened Aug 22, 2025

• include volta installation in cli image to support different versions of yarn

  #7877 opened Aug 19, 2025

• PE Analyzer throwing errors while scanning .dll files

  #7876 opened Aug 19, 2025

• [FP]: False positive findings in Dependency Checker for spring-binding

  #7875 opened Aug 19, 2025

• [FP]: False positive findings in Dependency Checker for Logback

  #7873 opened Aug 19, 2025

• [FP]: False positive findings in Dependency Checker for Oracle Database server

  #7872 opened Aug 18, 2025

2 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• [RFE]: Possibility to configure URL to "Maven central"

  #7686 commented on Aug 19, 2025 • 0 new comments

• java.lang.NoSuchMethodError: 'java.lang.String org.apache.commons.compress.compressors.gzip.GzipUtils'

  #7843 commented on Aug 21, 2025 • 0 new comments