chore(deps): bump net.sourceforge.pmd:pmd-core in /geowebcache by dependabot[bot] · Pull Request #1511 · GeoWebCache/geowebcache

dependabot · 2026-03-30T08:23:41Z

Bumps net.sourceforge.pmd:pmd-core in /geowebcache from 7.14.0 to 7.23.0.

Updates net.sourceforge.pmd:pmd-core from 7.14.0 to 7.23.0

Release notes

Sourced from net.sourceforge.pmd:pmd-core's releases.

PMD 7.23.0 (27-March-2026)

27-March-2026 - 7.23.0

The PMD team is pleased to announce PMD 7.23.0.

This is a minor release.

Table Of Contents

🐛️ Fixed Issues

✨️ Merged pull requests

📦️ Dependency updates

📈️ Stats

🐛️ Fixed Issues

core

#6503: [core] Links in HTML report are broken

java-errorprone

#6502: [java] CloseResource: False positive for allowedResourceMethodPatterns entries when using unqualified method calls

java-security

#6531: [java] InsecureCryptoIv: False negative with fixed IVs from array initializers

✨️ Merged pull requests

#6467: [ci] Use typos gh-action - Andreas Dangel (@adangel)

#6488: [doc] Update security.md for CVE-2026-28338 - Andreas Dangel (@adangel)

#6489: [doc] CPD: document --report-file parameter - Andreas Dangel (@adangel)

#6504: [core] Fix #6503: Don't escape externalInfoUrl in reports - Andreas Dangel (@adangel)

#6505: [java] Fix #6502: CloseResource should consider unqualified method calls - Andreas Dangel (@adangel)

#6545: [java] Fix #6531: False negative in InsecureCryptoIv with array initializers - Zbynek Konecny (@zbynek)

📦️ Dependency updates

#6476: Bump PMD from 7.21.0 to 7.22.0

#6479: chore(deps): bump actions/download-artifact from 7.0.0 to 8.0.0

#6480: chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0

#6481: chore(deps): bump com.puppycrawl.tools:checkstyle from 13.2.0 to 13.3.0

#6482: chore(deps): bump org.mockito:mockito-core from 5.21.0 to 5.22.0

#6483: chore(deps-dev): bump net.bytebuddy:byte-buddy from 1.18.5 to 1.18.7

#6484: chore(deps): bump org.yaml:snakeyaml from 2.5 to 2.6

#6485: chore(deps): bump org.checkerframework:checker-qual from 3.53.1 to 3.54.0

#6486: chore(deps-dev): bump net.bytebuddy:byte-buddy-agent from 1.18.5 to 1.18.7

#6487: chore(deps): bump com.google.protobuf:protobuf-java from 4.33.5 to 4.34.0

#6490: chore: Update gems, remove github-pages

#6498: chore(deps): bump ruby/setup-ruby from 1.288.0 to 1.290.0

#6499: chore(deps-dev): bump commons-logging:commons-logging from 1.3.5 to 1.3.6

#6500: chore(deps-dev): bump org.apache.maven.plugins:maven-shade-plugin from 3.6.1 to 3.6.2

... (truncated)

Commits

8562692 [release] prepare release pmd_releases/7.23.0
8f406ef Prepare pmd release 7.23.0
184b977 Update contributors for 7.23.0
bed0ded chore: do-release.sh - use ruby 4
127df3a [java] Fix #6531: False negative in InsecureCryptoIv with array initializers ...
5dbbe19 [doc] Update release notes (#6531, #6545)
2fce070 chore: use ruby4 (#6551)
4f450c3 chore(deps): bump com.google.protobuf:protobuf-java from 4.34.0 to 4.34.1 (#6...
00426b4 chore(deps): bump actions/cache from 5.0.3 to 5.0.4 (#6548)
287971a [java] Fix false negative in InsecureCryptoIv with array initializers
Additional commits viewable in compare view

Updates net.sourceforge.pmd:pmd-core from 7.14.0 to 7.23.0

Release notes

Sourced from net.sourceforge.pmd:pmd-core's releases.

PMD 7.23.0 (27-March-2026)

27-March-2026 - 7.23.0

The PMD team is pleased to announce PMD 7.23.0.

This is a minor release.

Table Of Contents

🐛️ Fixed Issues

✨️ Merged pull requests

📦️ Dependency updates

📈️ Stats

🐛️ Fixed Issues

core

#6503: [core] Links in HTML report are broken

java-errorprone

#6502: [java] CloseResource: False positive for allowedResourceMethodPatterns entries when using unqualified method calls

java-security

#6531: [java] InsecureCryptoIv: False negative with fixed IVs from array initializers

✨️ Merged pull requests

#6467: [ci] Use typos gh-action - Andreas Dangel (@adangel)

#6488: [doc] Update security.md for CVE-2026-28338 - Andreas Dangel (@adangel)

#6489: [doc] CPD: document --report-file parameter - Andreas Dangel (@adangel)

#6504: [core] Fix #6503: Don't escape externalInfoUrl in reports - Andreas Dangel (@adangel)

#6505: [java] Fix #6502: CloseResource should consider unqualified method calls - Andreas Dangel (@adangel)

#6545: [java] Fix #6531: False negative in InsecureCryptoIv with array initializers - Zbynek Konecny (@zbynek)

📦️ Dependency updates

#6476: Bump PMD from 7.21.0 to 7.22.0

#6479: chore(deps): bump actions/download-artifact from 7.0.0 to 8.0.0

#6480: chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0

#6481: chore(deps): bump com.puppycrawl.tools:checkstyle from 13.2.0 to 13.3.0

#6482: chore(deps): bump org.mockito:mockito-core from 5.21.0 to 5.22.0

#6483: chore(deps-dev): bump net.bytebuddy:byte-buddy from 1.18.5 to 1.18.7

#6484: chore(deps): bump org.yaml:snakeyaml from 2.5 to 2.6

#6485: chore(deps): bump org.checkerframework:checker-qual from 3.53.1 to 3.54.0

#6486: chore(deps-dev): bump net.bytebuddy:byte-buddy-agent from 1.18.5 to 1.18.7

#6487: chore(deps): bump com.google.protobuf:protobuf-java from 4.33.5 to 4.34.0

#6490: chore: Update gems, remove github-pages

#6498: chore(deps): bump ruby/setup-ruby from 1.288.0 to 1.290.0

#6499: chore(deps-dev): bump commons-logging:commons-logging from 1.3.5 to 1.3.6

#6500: chore(deps-dev): bump org.apache.maven.plugins:maven-shade-plugin from 3.6.1 to 3.6.2

... (truncated)

Commits

8562692 [release] prepare release pmd_releases/7.23.0
8f406ef Prepare pmd release 7.23.0
184b977 Update contributors for 7.23.0
bed0ded chore: do-release.sh - use ruby 4
127df3a [java] Fix #6531: False negative in InsecureCryptoIv with array initializers ...
5dbbe19 [doc] Update release notes (#6531, #6545)
2fce070 chore: use ruby4 (#6551)
4f450c3 chore(deps): bump com.google.protobuf:protobuf-java from 4.34.0 to 4.34.1 (#6...
00426b4 chore(deps): bump actions/cache from 5.0.3 to 5.0.4 (#6548)
287971a [java] Fix false negative in InsecureCryptoIv with array initializers
Additional commits viewable in compare view

Updates net.sourceforge.pmd:pmd-core from 7.14.0 to 7.23.0

Release notes

Sourced from net.sourceforge.pmd:pmd-core's releases.

PMD 7.23.0 (27-March-2026)

27-March-2026 - 7.23.0

The PMD team is pleased to announce PMD 7.23.0.

This is a minor release.

Table Of Contents

🐛️ Fixed Issues

✨️ Merged pull requests

📦️ Dependency updates

📈️ Stats

🐛️ Fixed Issues

core

#6503: [core] Links in HTML report are broken

java-errorprone

#6502: [java] CloseResource: False positive for allowedResourceMethodPatterns entries when using unqualified method calls

java-security

#6531: [java] InsecureCryptoIv: False negative with fixed IVs from array initializers

✨️ Merged pull requests

#6467: [ci] Use typos gh-action - Andreas Dangel (@adangel)

#6488: [doc] Update security.md for CVE-2026-28338 - Andreas Dangel (@adangel)

#6489: [doc] CPD: document --report-file parameter - Andreas Dangel (@adangel)

#6504: [core] Fix #6503: Don't escape externalInfoUrl in reports - Andreas Dangel (@adangel)

#6505: [java] Fix #6502: CloseResource should consider unqualified method calls - Andreas Dangel (@adangel)

#6545: [java] Fix #6531: False negative in InsecureCryptoIv with array initializers - Zbynek Konecny (@zbynek)

📦️ Dependency updates

#6476: Bump PMD from 7.21.0 to 7.22.0

#6479: chore(deps): bump actions/download-artifact from 7.0.0 to 8.0.0

#6480: chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0

#6481: chore(deps): bump com.puppycrawl.tools:checkstyle from 13.2.0 to 13.3.0

#6482: chore(deps): bump org.mockito:mockito-core from 5.21.0 to 5.22.0

#6483: chore(deps-dev): bump net.bytebuddy:byte-buddy from 1.18.5 to 1.18.7

#6484: chore(deps): bump org.yaml:snakeyaml from 2.5 to 2.6

#6485: chore(deps): bump org.checkerframework:checker-qual from 3.53.1 to 3.54.0

#6486: chore(deps-dev): bump net.bytebuddy:byte-buddy-agent from 1.18.5 to 1.18.7

#6487: chore(deps): bump com.google.protobuf:protobuf-java from 4.33.5 to 4.34.0

#6490: chore: Update gems, remove github-pages

#6498: chore(deps): bump ruby/setup-ruby from 1.288.0 to 1.290.0

#6499: chore(deps-dev): bump commons-logging:commons-logging from 1.3.5 to 1.3.6

#6500: chore(deps-dev): bump org.apache.maven.plugins:maven-shade-plugin from 3.6.1 to 3.6.2

... (truncated)

Commits

8562692 [release] prepare release pmd_releases/7.23.0
8f406ef Prepare pmd release 7.23.0
184b977 Update contributors for 7.23.0
bed0ded chore: do-release.sh - use ruby 4
127df3a [java] Fix #6531: False negative in InsecureCryptoIv with array initializers ...
5dbbe19 [doc] Update release notes (#6531, #6545)
2fce070 chore: use ruby4 (#6551)
4f450c3 chore(deps): bump com.google.protobuf:protobuf-java from 4.34.0 to 4.34.1 (#6...
00426b4 chore(deps): bump actions/cache from 5.0.3 to 5.0.4 (#6548)
287971a [java] Fix false negative in InsecureCryptoIv with array initializers
Additional commits viewable in compare view

Updates net.sourceforge.pmd:pmd-core from 7.14.0 to 7.23.0

Release notes

Sourced from net.sourceforge.pmd:pmd-core's releases.

PMD 7.23.0 (27-March-2026)

27-March-2026 - 7.23.0

The PMD team is pleased to announce PMD 7.23.0.

This is a minor release.

Table Of Contents

🐛️ Fixed Issues

✨️ Merged pull requests

📦️ Dependency updates

📈️ Stats

🐛️ Fixed Issues

core

#6503: [core] Links in HTML report are broken

java-errorprone

#6502: [java] CloseResource: False positive for allowedResourceMethodPatterns entries when using unqualified method calls

java-security

#6531: [java] InsecureCryptoIv: False negative with fixed IVs from array initializers

✨️ Merged pull requests

#6467: [ci] Use typos gh-action - Andreas Dangel (@adangel)

#6488: [doc] Update security.md for CVE-2026-28338 - Andreas Dangel (@adangel)

#6489: [doc] CPD: document --report-file parameter - Andreas Dangel (@adangel)

#6504: [core] Fix #6503: Don't escape externalInfoUrl in reports - Andreas Dangel (@adangel)

#6505: [java] Fix #6502: CloseResource should consider unqualified method calls - Andreas Dangel (@adangel)

#6545: [java] Fix #6531: False negative in InsecureCryptoIv with array initializers - Zbynek Konecny (@zbynek)

📦️ Dependency updates

#6476: Bump PMD from 7.21.0 to 7.22.0

#6479: chore(deps): bump actions/download-artifact from 7.0.0 to 8.0.0

#6480: chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0

#6481: chore(deps): bump com.puppycrawl.tools:checkstyle from 13.2.0 to 13.3.0

#6482: chore(deps): bump org.mockito:mockito-core from 5.21.0 to 5.22.0

#6483: chore(deps-dev): bump net.bytebuddy:byte-buddy from 1.18.5 to 1.18.7

#6484: chore(deps): bump org.yaml:snakeyaml from 2.5 to 2.6

#6485: chore(deps): bump org.checkerframework:checker-qual from 3.53.1 to 3.54.0

#6486: chore(deps-dev): bump net.bytebuddy:byte-buddy-agent from 1.18.5 to 1.18.7

#6487: chore(deps): bump com.google.protobuf:protobuf-java from 4.33.5 to 4.34.0

#6490: chore: Update gems, remove github-pages

#6498: chore(deps): bump ruby/setup-ruby from 1.288.0 to 1.290.0

#6499: chore(deps-dev): bump commons-logging:commons-logging from 1.3.5 to 1.3.6

#6500: chore(deps-dev): bump org.apache.maven.plugins:maven-shade-plugin from 3.6.1 to 3.6.2

... (truncated)

Commits

8562692 [release] prepare release pmd_releases/7.23.0
8f406ef Prepare pmd release 7.23.0
184b977 Update contributors for 7.23.0
bed0ded chore: do-release.sh - use ruby 4
127df3a [java] Fix #6531: False negative in InsecureCryptoIv with array initializers ...
5dbbe19 [doc] Update release notes (#6531, #6545)
2fce070 chore: use ruby4 (#6551)
4f450c3 chore(deps): bump com.google.protobuf:protobuf-java from 4.34.0 to 4.34.1 (#6...
00426b4 chore(deps): bump actions/cache from 5.0.3 to 5.0.4 (#6548)
287971a [java] Fix false negative in InsecureCryptoIv with array initializers
Additional commits viewable in compare view

Updates net.sourceforge.pmd:pmd-core from 7.14.0 to 7.23.0

Release notes

Sourced from net.sourceforge.pmd:pmd-core's releases.

PMD 7.23.0 (27-March-2026)

27-March-2026 - 7.23.0

The PMD team is pleased to announce PMD 7.23.0.

This is a minor release.

Table Of Contents

🐛️ Fixed Issues

✨️ Merged pull requests

📦️ Dependency updates

📈️ Stats

🐛️ Fixed Issues

core

#6503: [core] Links in HTML report are broken

java-errorprone

#6502: [java] CloseResource: False positive for allowedResourceMethodPatterns entries when using unqualified method calls

java-security

#6531: [java] InsecureCryptoIv: False negative with fixed IVs from array initializers

✨️ Merged pull requests

#6467: [ci] Use typos gh-action - Andreas Dangel (@adangel)

#6488: [doc] Update security.md for CVE-2026-28338 - Andreas Dangel (@adangel)

#6489: [doc] CPD: document --report-file parameter - Andreas Dangel (@adangel)

#6504: [core] Fix #6503: Don't escape externalInfoUrl in reports - Andreas Dangel (@adangel)

#6505: [java] Fix #6502: CloseResource should consider unqualified method calls - Andreas Dangel (@adangel)

#6545: [java] Fix #6531: False negative in InsecureCryptoIv with array initializers - Zbynek Konecny (@zbynek)

📦️ Dependency updates

#6476: Bump PMD from 7.21.0 to 7.22.0

#6479: chore(deps): bump actions/download-artifact from 7.0.0 to 8.0.0

#6480: chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0

#6481: chore(deps): bump com.puppycrawl.tools:checkstyle from 13.2.0 to 13.3.0

#6482: chore(deps): bump org.mockito:mockito-core from 5.21.0 to 5.22.0

#6483: chore(deps-dev): bump net.bytebuddy:byte-buddy from 1.18.5 to 1.18.7

#6484: chore(deps): bump org.yaml:snakeyaml from 2.5 to 2.6

#6485: chore(deps): bump org.checkerframework:checker-qual from 3.53.1 to 3.54.0

#6486: chore(deps-dev): bump net.bytebuddy:byte-buddy-agent from 1.18.5 to 1.18.7

#6487: chore(deps): bump com.google.protobuf:protobuf-java from 4.33.5 to 4.34.0

#6490: chore: Update gems, remove github-pages

#6498: chore(deps): bump ruby/setup-ruby from 1.288.0 to 1.290.0

#6499: chore(deps-dev): bump commons-logging:commons-logging from 1.3.5 to 1.3.6

#6500: chore(deps-dev): bump org.apache.maven.plugins:maven-shade-plugin from 3.6.1 to 3.6.2

... (truncated)

Commits

8562692 [release] prepare release pmd_releases/7.23.0
8f406ef Prepare pmd release 7.23.0
184b977 Update contributors for 7.23.0
bed0ded chore: do-release.sh - use ruby 4
127df3a [java] Fix #6531: False negative in InsecureCryptoIv with array initializers ...
5dbbe19 [doc] Update release notes (#6531, #6545)
2fce070 chore: use ruby4 (#6551)
4f450c3 chore(deps): bump com.google.protobuf:protobuf-java from 4.34.0 to 4.34.1 (#6...
00426b4 chore(deps): bump actions/cache from 5.0.3 to 5.0.4 (#6548)
287971a [java] Fix false negative in InsecureCryptoIv with array initializers
Additional commits viewable in compare view

Updates net.sourceforge.pmd:pmd-core from 7.14.0 to 7.23.0

Release notes

Sourced from net.sourceforge.pmd:pmd-core's releases.

PMD 7.23.0 (27-March-2026)

27-March-2026 - 7.23.0

The PMD team is pleased to announce PMD 7.23.0.

This is a minor release.

Table Of Contents

🐛️ Fixed Issues

✨️ Merged pull requests

📦️ Dependency updates

📈️ Stats

🐛️ Fixed Issues

core

#6503: [core] Links in HTML report are broken

java-errorprone

#6502: [java] CloseResource: False positive for allowedResourceMethodPatterns entries when using unqualified method calls

java-security

#6531: [java] InsecureCryptoIv: False negative with fixed IVs from array initializers

✨️ Merged pull requests

#6467: [ci] Use typos gh-action - Andreas Dangel (@adangel)

#6488: [doc] Update security.md for CVE-2026-28338 - Andreas Dangel (@adangel)

#6489: [doc] CPD: document --report-file parameter - Andreas Dangel (@adangel)

#6504: [core] Fix #6503: Don't escape externalInfoUrl in reports - Andreas Dangel (@adangel)

#6505: [java] Fix #6502: CloseResource should consider unqualified method calls - Andreas Dangel (@adangel)

#6545: [java] Fix #6531: False negative in InsecureCryptoIv with array initializers - Zbynek Konecny (@zbynek)

📦️ Dependency updates

#6476: Bump PMD from 7.21.0 to 7.22.0

#6479: chore(deps): bump actions/download-artifact from 7.0.0 to 8.0.0

#6480: chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0

#6481: chore(deps): bump com.puppycrawl.tools:checkstyle from 13.2.0 to 13.3.0

#6482: chore(deps): bump org.mockito:mockito-core from 5.21.0 to 5.22.0

#6483: chore(deps-dev): bump net.bytebuddy:byte-buddy from 1.18.5 to 1.18.7

#6484: chore(deps): bump org.yaml:snakeyaml from 2.5 to 2.6

#6485: chore(deps): bump org.checkerframework:checker-qual from 3.53.1 to 3.54.0

#6486: chore(deps-dev): bump net.bytebuddy:byte-buddy-agent from 1.18.5 to 1.18.7

#6487: chore(deps): bump com.google.protobuf:protobuf-java from 4.33.5 to 4.34.0

#6490: chore: Update gems, remove github-pages

#6498: chore(deps): bump ruby/setup-ruby from 1.288.0 to 1.290.0

#6499: chore(deps-dev): bump commons-logging:commons-logging from 1.3.5 to 1.3.6

#6500: chore(deps-dev): bump org.apache.maven.plugins:maven-shade-plugin from 3.6.1 to 3.6.2

... (truncated)

Commits

8562692 [release] prepare release pmd_releases/7.23.0
8f406ef Prepare pmd release 7.23.0
184b977 Update contributors for 7.23.0
bed0ded chore: do-release.sh - use ruby 4
127df3a [java] Fix #6531: False negative in InsecureCryptoIv with array initializers ...
5dbbe19 [doc] Update release notes (#6531, #6545)
2fce070 chore: use ruby4 (#6551)
4f450c3 chore(deps): bump com.google.protobuf:protobuf-java from 4.34.0 to 4.34.1 (#6...
00426b4 chore(deps): bump actions/cache from 5.0.3 to 5.0.4 (#6548)
287971a [java] Fix false negative in InsecureCryptoIv with array initializers
Additional commits viewable in compare view

Updates net.sourceforge.pmd:pmd-core from 7.14.0 to 7.23.0

Release notes

Sourced from net.sourceforge.pmd:pmd-core's releases.

PMD 7.23.0 (27-March-2026)

27-March-2026 - 7.23.0

The PMD team is pleased to announce PMD 7.23.0.

This is a minor release.

Table Of Contents

🐛️ Fixed Issues

✨️ Merged pull requests

📦️ Dependency updates

📈️ Stats

🐛️ Fixed Issues

core

#6503: [core] Links in HTML report are broken

java-errorprone

#6502: [java] CloseResource: False positive for allowedResourceMethodPatterns entries when using unqualified method calls

java-security

#6531: [java] InsecureCryptoIv: False negative with fixed IVs from array initializers

✨️ Merged pull requests

#6467: [ci] Use typos gh-action - Andreas Dangel (@adangel)

#6488: [doc] Update security.md for CVE-2026-28338 - Andreas Dangel (@adangel)

#6489: [doc] CPD: document --report-file parameter - Andreas Dangel (@adangel)

#6504: [core] Fix #6503: Don't escape externalInfoUrl in reports - Andreas Dangel (@adangel)

#6505: [java] Fix #6502: CloseResource should consider unqualified method calls - Andreas Dangel (@adangel)

#6545: [java] Fix #6531: False negative in InsecureCryptoIv with array initializers - Zbynek Konecny (@zbynek)

📦️ Dependency updates

#6476: Bump PMD from 7.21.0 to 7.22.0

#6479: chore(deps): bump actions/download-artifact from 7.0.0 to 8.0.0

#6480: chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0

#6481: chore(deps): bump com.puppycrawl.tools:checkstyle from 13.2.0 to 13.3.0

#6482: chore(deps): bump org.mockito:mockito-core from 5.21.0 to 5.22.0

#6483: chore(deps-dev): bump net.bytebuddy:byte-buddy from 1.18.5 to 1.18.7

#6484: chore(deps): bump org.yaml:snakeyaml from 2.5 to 2.6

#6485: chore(deps): bump org.checkerframework:checker-qual from 3.53.1 to 3.54.0

#6486: chore(deps-dev): bump net.bytebuddy:byte-buddy-agent from 1.18.5 to 1.18.7

#6487: chore(deps): bump com.google.protobuf:protobuf-java from 4.33.5 to 4.34.0

#6490: chore: Update gems, remove github-pages

#6498: chore(deps): bump ruby/setup-ruby from 1.288.0 to 1.290.0

#6499: chore(deps-dev): bump commons-logging:commons-logging from 1.3.5 to 1.3.6

#6500: chore(deps-dev): bump org.apache.maven.plugins:maven-shade-plugin from 3.6.1 to 3.6.2

... (truncated)

Commits

8562692 [release] prepare release pmd_releases/7.23.0
8f406ef Prepare pmd release 7.23.0
184b977 Update contributors for 7.23.0
bed0ded chore: do-release.sh - use ruby 4
127df3a [java] Fix #6531: False negative in InsecureCryptoIv with array initializers ...
5dbbe19 [doc] Update release notes (#6531, #6545)
2fce070 chore: use ruby4 (#6551)
4f450c3 chore(deps): bump com.google.protobuf:protobuf-java from 4.34.0 to 4.34.1 (#6...
00426b4 chore(deps): bump actions/cache from 5.0.3 to 5.0.4 (#6548)
287971a [java] Fix false negative in InsecureCryptoIv with array initializers
Additional commits viewable in compare view

Updates net.sourceforge.pmd:pmd-core from 7.14.0 to 7.23.0

Release notes

Sourced from net.sourceforge.pmd:pmd-core's releases.

PMD 7.23.0 (27-March-2026)

27-March-2026 - 7.23.0

The PMD team is pleased to announce PMD 7.23.0.

This is a minor release.

Table Of Contents

🐛️ Fixed Issues

✨️ Merged pull requests

📦️ Dependency updates

📈️ Stats

🐛️ Fixed Issues

core

#6503: [core] Links in HTML report are broken

java-errorprone

#6502: [java] CloseResource: False positive for allowedResourceMethodPatterns entries when using unqualified method calls

java-security

#6531: [java] InsecureCryptoIv: False negative with fixed IVs from array initializers

✨️ Merged pull requests

#6467: [ci] Use typos gh-action - Andreas Dangel (@adangel)

#6488: [doc] Update security.md for CVE-2026-28338 - Andreas Dangel (@adangel)

#6489: [doc] CPD: document --report-file parameter - Andreas Dangel (@adangel)

#6504: [core] Fix #6503: Don't escape externalInfoUrl in reports - Andreas Dangel (@adangel)

#6505: [java] Fix #6502: CloseResource should consider unqualified method calls - Andreas Dangel (@adangel)

#6545: [java] Fix #6531: False negative in InsecureCryptoIv with array initializers - Zbynek Konecny (@zbynek)

📦️ Dependency updates

#6476: Bump PMD from 7.21.0 to 7.22.0

#6479: chore(deps): bump actions/download-artifact from 7.0.0 to 8.0.0

#6480: chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0

#6481: chore(deps): bump com.puppycrawl.tools:checkstyle from 13.2.0 to 13.3.0

#6482: chore(deps): bump org.mockito:mockito-core from 5.21.0 to 5.22.0

#6483: chore(deps-dev): bump net.bytebuddy:byte-buddy from 1.18.5 to 1.18.7

#6484: chore(deps): bump org.yaml:snakeyaml from 2.5 to 2.6

#6485: chore(deps): bump org.checkerframework:checker-qual from 3.53.1 to 3.54.0

#6486: chore(deps-dev): bump net.bytebuddy:byte-buddy-agent from 1.18.5 to 1.18.7

#6487: chore(deps): bump com.google.protobuf:protobuf-java from 4.33.5 to 4.34.0

#6490: chore: Update gems, remove github-pages

#6498: chore(deps): bump ruby/setup-ruby from 1.288.0 to 1.290.0

#6499: chore(deps-dev): bump commons-logging:commons-logging from 1.3.5 to 1.3.6

#6500: chore(deps-dev): bump org.apache.maven.plugins:maven-shade-plugin from 3.6.1 to 3.6.2

... (truncated)

Commits

8562692 [release] prepare release pmd_releases/7.23.0
8f406ef Prepare pmd release 7.23.0
184b977 Update contributors for 7.23.0
bed0ded chore: do-release.sh - use ruby 4
127df3a [java] Fix #6531: False negative in InsecureCryptoIv with array initializers ...
5dbbe19 [doc] Update release notes (#6531, #6545)
2fce070 chore: use ruby4 (#6551)
4f450c3 chore(deps): bump com.google.protobuf:protobuf-java from 4.34.0 to 4.34.1 (#6...
00426b4 chore(deps): bump actions/cache from 5.0.3 to 5.0.4 (#6548)
287971a [java] Fix false negative in InsecureCryptoIv with array initializers
Additional commits viewable in compare view

Updates net.sourceforge.pmd:pmd-core from 7.14.0 to 7.23.0

Release notes

Sourced from net.sourceforge.pmd:pmd-core's releases.

PMD 7.23.0 (27-March-2026)

27-March-2026 - 7.23.0

The PMD team is pleased to announce PMD 7.23.0.

This is a minor release.

Table Of Contents

🐛️ Fixed Issues

✨️ Merged pull requests

📦️ Dependency updates

📈️ Stats

🐛️ Fixed Issues

core

#6503: [core] Links in HTML report are broken

java-errorprone

#6502: [java] CloseResource: False positive for allowedResourceMethodPatterns entries when using unqualified method calls

java-security

#6531: [java] InsecureCryptoIv: False negative with fixed IVs from array initializers

✨️ Merged pull requests

#6467: [ci] Use typos gh-action - Andreas Dangel (@adangel)

#6488: [doc] Update security.md for CVE-2026-28338 - Andreas Dangel (@adangel)

#6489: [doc] CPD: document --report-file parameter - Andreas Dangel (@adangel)

#6504: [core] Fix #6503: Don't escape externalInfoUrl in reports - Andreas Dangel (@adangel)

#6505: [java] Fix #6502: CloseResource should consider unqualified method calls - Andreas Dangel (@adangel)

#6545: [java] Fix #6531: False negative in InsecureCryptoIv with array initializers - Zbynek Konecny (@zbynek)

📦️ Dependency updates

#6476: Bump PMD from 7.21.0 to 7.22.0

#6479: chore(deps): bump actions/download-artifact from 7.0.0 to 8.0.0

#6480: chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0

#6481: chore(deps): bump com.puppycrawl.tools:checkstyle from 13.2.0 to 13.3.0

#6482: chore(deps): bump org.mockito:mockito-core from 5.21.0 to 5.22.0

#6483: chore(deps-dev): bump net.bytebuddy:byte-buddy from 1.18.5 to 1.18.7

#6484: chore(deps): bump org.yaml:snakeyaml from 2.5 to 2.6

#6485: chore(deps): bump org.checkerframework:checker-qual from 3.53.1 to 3.54.0

#6486: chore(deps-dev): bump net.bytebuddy:byte-buddy-agent from 1.18.5 to 1.18.7

#6487: chore(deps): bump com.google.protobuf:protobuf-java from 4.33.5 to 4.34.0

#6490: chore: Update gems, remove github-pages

#6498: chore(deps): bump ruby/setup-ruby from 1.288.0 to 1.290.0

#6499: chore(deps-dev): bump commons-logging:...
Description has been truncated

Bumps [net.sourceforge.pmd:pmd-core](https://github.com/pmd/pmd) in `/geowebcache` from 7.14.0 to 7.23.0. Updates `net.sourceforge.pmd:pmd-core` from 7.14.0 to 7.23.0 - [Release notes](https://github.com/pmd/pmd/releases) - [Commits](pmd/pmd@pmd_releases/7.14.0...pmd_releases/7.23.0) Updates `net.sourceforge.pmd:pmd-core` from 7.14.0 to 7.23.0 - [Release notes](https://github.com/pmd/pmd/releases) - [Commits](pmd/pmd@pmd_releases/7.14.0...pmd_releases/7.23.0) Updates `net.sourceforge.pmd:pmd-core` from 7.14.0 to 7.23.0 - [Release notes](https://github.com/pmd/pmd/releases) - [Commits](pmd/pmd@pmd_releases/7.14.0...pmd_releases/7.23.0) Updates `net.sourceforge.pmd:pmd-core` from 7.14.0 to 7.23.0 - [Release notes](https://github.com/pmd/pmd/releases) - [Commits](pmd/pmd@pmd_releases/7.14.0...pmd_releases/7.23.0) Updates `net.sourceforge.pmd:pmd-core` from 7.14.0 to 7.23.0 - [Release notes](https://github.com/pmd/pmd/releases) - [Commits](pmd/pmd@pmd_releases/7.14.0...pmd_releases/7.23.0) Updates `net.sourceforge.pmd:pmd-core` from 7.14.0 to 7.23.0 - [Release notes](https://github.com/pmd/pmd/releases) - [Commits](pmd/pmd@pmd_releases/7.14.0...pmd_releases/7.23.0) Updates `net.sourceforge.pmd:pmd-core` from 7.14.0 to 7.23.0 - [Release notes](https://github.com/pmd/pmd/releases) - [Commits](pmd/pmd@pmd_releases/7.14.0...pmd_releases/7.23.0) Updates `net.sourceforge.pmd:pmd-core` from 7.14.0 to 7.23.0 - [Release notes](https://github.com/pmd/pmd/releases) - [Commits](pmd/pmd@pmd_releases/7.14.0...pmd_releases/7.23.0) Updates `net.sourceforge.pmd:pmd-core` from 7.14.0 to 7.23.0 - [Release notes](https://github.com/pmd/pmd/releases) - [Commits](pmd/pmd@pmd_releases/7.14.0...pmd_releases/7.23.0) Updates `net.sourceforge.pmd:pmd-core` from 7.14.0 to 7.23.0 - [Release notes](https://github.com/pmd/pmd/releases) - [Commits](pmd/pmd@pmd_releases/7.14.0...pmd_releases/7.23.0) Updates `net.sourceforge.pmd:pmd-core` from 7.14.0 to 7.23.0 - [Release notes](https://github.com/pmd/pmd/releases) - [Commits](pmd/pmd@pmd_releases/7.14.0...pmd_releases/7.23.0) Updates `net.sourceforge.pmd:pmd-core` from 7.14.0 to 7.23.0 - [Release notes](https://github.com/pmd/pmd/releases) - [Commits](pmd/pmd@pmd_releases/7.14.0...pmd_releases/7.23.0) Updates `net.sourceforge.pmd:pmd-core` from 7.14.0 to 7.23.0 - [Release notes](https://github.com/pmd/pmd/releases) - [Commits](pmd/pmd@pmd_releases/7.14.0...pmd_releases/7.23.0) Updates `net.sourceforge.pmd:pmd-core` from 7.14.0 to 7.23.0 - [Release notes](https://github.com/pmd/pmd/releases) - [Commits](pmd/pmd@pmd_releases/7.14.0...pmd_releases/7.23.0) Updates `net.sourceforge.pmd:pmd-core` from 7.14.0 to 7.23.0 - [Release notes](https://github.com/pmd/pmd/releases) - [Commits](pmd/pmd@pmd_releases/7.14.0...pmd_releases/7.23.0) Updates `net.sourceforge.pmd:pmd-core` from 7.14.0 to 7.23.0 - [Release notes](https://github.com/pmd/pmd/releases) - [Commits](pmd/pmd@pmd_releases/7.14.0...pmd_releases/7.23.0) Updates `net.sourceforge.pmd:pmd-core` from 7.14.0 to 7.23.0 - [Release notes](https://github.com/pmd/pmd/releases) - [Commits](pmd/pmd@pmd_releases/7.14.0...pmd_releases/7.23.0) Updates `net.sourceforge.pmd:pmd-core` from 7.14.0 to 7.23.0 - [Release notes](https://github.com/pmd/pmd/releases) - [Commits](pmd/pmd@pmd_releases/7.14.0...pmd_releases/7.23.0) Updates `net.sourceforge.pmd:pmd-core` from 7.14.0 to 7.23.0 - [Release notes](https://github.com/pmd/pmd/releases) - [Commits](pmd/pmd@pmd_releases/7.14.0...pmd_releases/7.23.0) --- updated-dependencies: - dependency-name: net.sourceforge.pmd:pmd-core dependency-version: 7.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven - dependency-name: net.sourceforge.pmd:pmd-core dependency-version: 7.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven - dependency-name: net.sourceforge.pmd:pmd-core dependency-version: 7.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven - dependency-name: net.sourceforge.pmd:pmd-core dependency-version: 7.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven - dependency-name: net.sourceforge.pmd:pmd-core dependency-version: 7.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven - dependency-name: net.sourceforge.pmd:pmd-core dependency-version: 7.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven - dependency-name: net.sourceforge.pmd:pmd-core dependency-version: 7.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven - dependency-name: net.sourceforge.pmd:pmd-core dependency-version: 7.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven - dependency-name: net.sourceforge.pmd:pmd-core dependency-version: 7.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven - dependency-name: net.sourceforge.pmd:pmd-core dependency-version: 7.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven - dependency-name: net.sourceforge.pmd:pmd-core dependency-version: 7.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven - dependency-name: net.sourceforge.pmd:pmd-core dependency-version: 7.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven - dependency-name: net.sourceforge.pmd:pmd-core dependency-version: 7.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven - dependency-name: net.sourceforge.pmd:pmd-core dependency-version: 7.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven - dependency-name: net.sourceforge.pmd:pmd-core dependency-version: 7.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven - dependency-name: net.sourceforge.pmd:pmd-core dependency-version: 7.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven - dependency-name: net.sourceforge.pmd:pmd-core dependency-version: 7.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven - dependency-name: net.sourceforge.pmd:pmd-core dependency-version: 7.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven - dependency-name: net.sourceforge.pmd:pmd-core dependency-version: 7.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the dependencies Pull requests that update a dependency file label Mar 30, 2026

dependabot bot mentioned this pull request Mar 30, 2026

chore(deps): bump net.sourceforge.pmd:pmd-core in /geowebcache #1507

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump net.sourceforge.pmd:pmd-core in /geowebcache#1511

chore(deps): bump net.sourceforge.pmd:pmd-core in /geowebcache#1511
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot-maven-geowebcache-main-maven-c604836902

dependabot bot commented on behalf of github Mar 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Mar 30, 2026

PMD 7.23.0 (27-March-2026)

27-March-2026 - 7.23.0

Table Of Contents

🐛️ Fixed Issues

✨️ Merged pull requests

📦️ Dependency updates

PMD 7.23.0 (27-March-2026)

27-March-2026 - 7.23.0

Table Of Contents

🐛️ Fixed Issues

✨️ Merged pull requests

📦️ Dependency updates

PMD 7.23.0 (27-March-2026)

27-March-2026 - 7.23.0

Table Of Contents

🐛️ Fixed Issues

✨️ Merged pull requests

📦️ Dependency updates

PMD 7.23.0 (27-March-2026)

27-March-2026 - 7.23.0

Table Of Contents

🐛️ Fixed Issues

✨️ Merged pull requests

📦️ Dependency updates

PMD 7.23.0 (27-March-2026)

27-March-2026 - 7.23.0

Table Of Contents

🐛️ Fixed Issues

✨️ Merged pull requests

📦️ Dependency updates

PMD 7.23.0 (27-March-2026)

27-March-2026 - 7.23.0

Table Of Contents

🐛️ Fixed Issues

✨️ Merged pull requests

📦️ Dependency updates

PMD 7.23.0 (27-March-2026)

27-March-2026 - 7.23.0

Table Of Contents

🐛️ Fixed Issues

✨️ Merged pull requests

📦️ Dependency updates

PMD 7.23.0 (27-March-2026)

27-March-2026 - 7.23.0

Table Of Contents

🐛️ Fixed Issues

✨️ Merged pull requests

📦️ Dependency updates

PMD 7.23.0 (27-March-2026)

27-March-2026 - 7.23.0

Table Of Contents

🐛️ Fixed Issues

✨️ Merged pull requests

📦️ Dependency updates

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants