From 5f81f19766f7ae3fa0744958f8576726e0727004 Mon Sep 17 00:00:00 2001 From: Ruh-Al-Tarikh Date: Sun, 19 Oct 2025 00:09:30 +0530 Subject: [PATCH 1/6] Add Maven CI workflow for Java project This workflow builds a Java project using Maven and caches dependencies to enhance execution time. --- .github/workflows/maven.yml | 35 +++++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) create mode 100644 .github/workflows/maven.yml diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml new file mode 100644 index 000000000..06b6aa027 --- /dev/null +++ b/.github/workflows/maven.yml @@ -0,0 +1,35 @@ +# This workflow will build a Java project with Maven, and cache/restore any dependencies to improve the workflow execution time +# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-java-with-maven + +# This workflow uses actions that are not certified by GitHub. +# They are provided by a third-party and are governed by +# separate terms of service, privacy policy, and support +# documentation. + +name: Java CI with Maven + +on: + push: + branches: [ "main" ] + pull_request: + branches: [ "main" ] + +jobs: + build: + + runs-on: ubuntu-latest + + steps: + - uses: actions/checkout@v4 + - name: Set up JDK 17 + uses: actions/setup-java@v4 + with: + java-version: '17' + distribution: 'temurin' + cache: maven + - name: Build with Maven + run: mvn -B package --file pom.xml + + # Optional: Uploads the full dependency graph to GitHub to improve the quality of Dependabot alerts this repository can receive + - name: Update dependency graph + uses: advanced-security/maven-dependency-submission-action@571e99aab1055c2e71a1e2309b9691de18d6b7d6 From 6017fe531a7d83e537a42bc99183d72ac154e6a3 Mon Sep 17 00:00:00 2001 From: Ruh-Al-Tarikh Date: Sun, 19 Oct 2025 00:10:47 +0530 Subject: [PATCH 2/6] Add Dependabot configuration file Configured Dependabot for version updates. --- .github/dependabot.yml | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 000000000..5990d9c64 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,11 @@ +# To get started with Dependabot version updates, you'll need to specify which +# package ecosystems to update and where the package manifests are located. +# Please see the documentation for all configuration options: +# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file + +version: 2 +updates: + - package-ecosystem: "" # See documentation for possible values + directory: "/" # Location of package manifests + schedule: + interval: "weekly" From 09f2fc42d70cf74853462360ba3223a6ea0526a8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 4 Feb 2026 20:54:34 +0000 Subject: [PATCH 3/6] chore(deps): bump org.assertj:assertj-core in /mcp-test Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.27.6 to 3.27.7. - [Release notes](https://github.com/assertj/assertj/releases) - [Commits](https://github.com/assertj/assertj/compare/assertj-build-3.27.6...assertj-build-3.27.7) --- updated-dependencies: - dependency-name: org.assertj:assertj-core dependency-version: 3.27.7 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 3e36b084b..1a5404f61 100644 --- a/pom.xml +++ b/pom.xml @@ -59,7 +59,7 @@ 17 - 3.27.6 + 3.27.7 6.0.2 5.20.0 1.21.4 From 43cec6a808341d9c441b4e1d7efc4aacae005e26 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 7 Feb 2026 06:33:26 +0000 Subject: [PATCH 4/6] chore(deps-dev): bump org.assertj:assertj-core Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.27.6 to 3.27.7. - [Release notes](https://github.com/assertj/assertj/releases) - [Commits](https://github.com/assertj/assertj/compare/assertj-build-3.27.6...assertj-build-3.27.7) --- updated-dependencies: - dependency-name: org.assertj:assertj-core dependency-version: 3.27.7 dependency-type: direct:development ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 3e36b084b..1a5404f61 100644 --- a/pom.xml +++ b/pom.xml @@ -59,7 +59,7 @@ 17 - 3.27.6 + 3.27.7 6.0.2 5.20.0 1.21.4 From 71ebc6a78307ff090a7247bf5417f2e9bca9bebc Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 10 Mar 2026 18:37:16 +0000 Subject: [PATCH 5/6] chore(deps-dev): bump org.apache.tomcat.embed:tomcat-embed-core Bumps org.apache.tomcat.embed:tomcat-embed-core from 11.0.2 to 11.0.15. --- updated-dependencies: - dependency-name: org.apache.tomcat.embed:tomcat-embed-core dependency-version: 11.0.15 dependency-type: direct:development ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 3e36b084b..347ef8bb5 100644 --- a/pom.xml +++ b/pom.xml @@ -92,7 +92,7 @@ 1.0.0-alpha.4 0.0.4 1.6.2 - 11.0.2 + 11.0.15 6.1.0 4.2.0 7.1.0 From 2a7d3b36a39b407202afadc4e3067ccdc0e77689 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 10 Mar 2026 19:02:13 +0000 Subject: [PATCH 6/6] chore(deps-dev): bump org.apache.tomcat.embed:tomcat-embed-core Bumps org.apache.tomcat.embed:tomcat-embed-core from 11.0.2 to 11.0.15. --- updated-dependencies: - dependency-name: org.apache.tomcat.embed:tomcat-embed-core dependency-version: 11.0.15 dependency-type: direct:development ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 3e36b084b..347ef8bb5 100644 --- a/pom.xml +++ b/pom.xml @@ -92,7 +92,7 @@ 1.0.0-alpha.4 0.0.4 1.6.2 - 11.0.2 + 11.0.15 6.1.0 4.2.0 7.1.0