Bump advanced-security/maven-dependency-submission-action from 4.0.3 to 4.1.1 (#1254)

Bumps
[advanced-security/maven-dependency-submission-action](https://github.com/advanced-security/maven-dependency-submission-action)
from 4.0.3 to 4.1.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/advanced-security/maven-dependency-submission-action/releases">advanced-security/maven-dependency-submission-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.1</h2>
<p>No release notes provided.</p>
<h2>v4.1.0</h2>
<ul>
<li>
<p>Adds the ability to change the detector details for the dependency
snapshots via the optional input parameters:</p>
<ul>
<li><code>detector-name</code></li>
<li><code>detector-url</code></li>
<li><code>detector-version</code></li>
</ul>
<p>If the <code>detector-name</code> is specified, then all three become
mandatory as there are no sensible defaults that can be attributed to
the values.</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4f64ddab9d"><code>4f64dda</code></a>
chore: Updating release files</li>
<li><a
href="dba3dacedd"><code>dba3dac</code></a>
4.1.1</li>
<li><a
href="4883574ccf"><code>4883574</code></a>
Merge pull request <a
href="https://redirect.github.com/advanced-security/maven-dependency-submission-action/issues/89">#89</a>
from david-wiggs/hotfix/fix-test</li>
<li><a
href="33e1d3d801"><code>33e1d3d</code></a>
Remove reference to undefined function</li>
<li><a
href="4b85c77703"><code>4b85c77</code></a>
Merge pull request <a
href="https://redirect.github.com/advanced-security/maven-dependency-submission-action/issues/88">#88</a>
from david-wiggs/unique-job-matrix</li>
<li><a
href="73d9d97f9f"><code>73d9d97</code></a>
Update src/snapshot-generator.test.ts</li>
<li><a
href="967455e178"><code>967455e</code></a>
No need to import getMavenSettingsFile when testing</li>
<li><a
href="7592e88109"><code>7592e88</code></a>
Use supplied correlator without concatenation</li>
<li><a
href="2ba839e04b"><code>2ba839e</code></a>
Add some tests</li>
<li><a
href="5275a08fb4"><code>5275a08</code></a>
Address merge conflicts</li>
<li>Additional commits viewable in <a
href="https://github.com/advanced-security/maven-dependency-submission-action/compare/v4.0.3...v4.1.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=advanced-security/maven-dependency-submission-action&package-manager=github_actions&previous-version=4.0.3&new-version=4.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>
This commit is contained in:
Alex (TuxCoding)
2025-04-23 17:17:02 +02:00
committed by GitHub

View File

@ -64,4 +64,4 @@ jobs:
- name: Submit Dependency Snapshot
if: ${{ github.event_name == 'push' }}
uses: advanced-security/maven-dependency-submission-action@v4.0.3
uses: advanced-security/maven-dependency-submission-action@v4.1.2