Bump quarkus.version from 3.34.1 to 3.34.2 (#2570)

* Bump quarkus.version from 3.34.1 to 3.34.2

Bumps `quarkus.version` from 3.34.1 to 3.34.2.

Updates `io.quarkus.platform:quarkus-bom` from 3.34.1 to 3.34.2
- [Commits](quarkusio/quarkus-platform@3.34.1...3.34.2)

Updates `io.quarkus.platform:quarkus-maven-plugin` from 3.34.1 to 3.34.2
- [Commits](quarkusio/quarkus-platform@3.34.1...3.34.2)

---
updated-dependencies:
- dependency-name: io.quarkus.platform:quarkus-bom
  dependency-version: 3.34.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: io.quarkus.platform:quarkus-maven-plugin
  dependency-version: 3.34.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Remove owasp checking

* Remove owasp reference

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Aaron Coburn <aaronc@inrupt.com>

Author: dependabot[bot]

.github/workflows/ci-config.yml

@@ -97,37 +97,6 @@ jobs:
       - name: Build the code with Maven
         run: mvn -B -ntp verify -Pwebsite javadoc:javadoc
 
-  dependencies:
-    name: Dependency Check
-    runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        java: [ 17 ]
-
-    steps:
-      - uses: actions/checkout@v6
-
-      - name: Set up JDK ${{ matrix.java }}
-        uses: actions/setup-java@v5
-        with:
-          distribution: 'temurin'
-          java-version: ${{ matrix.java }}
-          cache: 'maven'
-
-      - name: Generate Cache Name
-        shell: bash
-        run: echo "CACHE_NAME=$(date '+%y.%j')" >> $GITHUB_ENV
-
-      - name: Restore NVD data cache
-        uses: actions/cache@v5
-        with:
-          key: nvd-data-${{ env.CACHE_NAME }}
-          restore-keys: nvd-data-
-          path: ./data/cache
-
-      - name: Verify dependencies
-        run: mvn -B -ntp verify -Pdependencies -Dnvd.api.datafeed="file:${GITHUB_WORKSPACE}/data/cache/nvdcve-{0}.json.gz"
-
   sonar:
     name: Sonar Scan
     runs-on: ubuntu-latest

.github/workflows/nvd-cache.yml

@@ -17,16 +17,4 @@
   <modules>
     <module>java</module>
   </modules>
-
-  <build>
-    <plugins>
-      <plugin>
-        <groupId>org.owasp</groupId>
-        <artifactId>dependency-check-maven</artifactId>
-        <configuration>
-          <skip>true</skip>
-        </configuration>
-      </plugin>
-    </plugins>
-  </build>
 </project>

archetypes/pom.xml

@@ -16,7 +16,7 @@
   </description>
 
   <properties>
-    <quarkus.version>3.34.1</quarkus.version>
+    <quarkus.version>3.34.2</quarkus.version>
   </properties>
 
   <dependencyManagement>

build-tools/owasp/suppressions.xml

@@ -23,14 +23,6 @@
 
   <build>
     <plugins>
-      <plugin>
-        <groupId>org.owasp</groupId>
-        <artifactId>dependency-check-maven</artifactId>
-        <version>${owasp.plugin.version}</version>
-        <configuration>
-          <skip>true</skip>
-        </configuration>
-      </plugin>
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-deploy-plugin</artifactId>

examples/cli/pom.xml

@@ -16,7 +16,7 @@
   </description>
 
   <properties>
-    <quarkus.version>3.34.1</quarkus.version>
+    <quarkus.version>3.34.2</quarkus.version>
   </properties>
 
   <dependencyManagement>

examples/pom.xml

@@ -32,7 +32,7 @@
     <jose4j.version>0.9.6</jose4j.version>
     <json.bind.version>3.0.1</json.bind.version>
     <okhttp.version>5.3.2</okhttp.version>
-    <quarkus.version>3.34.1</quarkus.version>
+    <quarkus.version>3.34.2</quarkus.version>
     <rdf4j.version>5.2.2</rdf4j.version>
     <slf4j.version>2.0.17</slf4j.version>
     <spring.security.version>7.0.4</spring.security.version>
@@ -56,7 +56,6 @@
     <jar.plugin.version>3.5.0</jar.plugin.version>
     <javadoc.plugin.version>3.12.0</javadoc.plugin.version>
     <license.plugin.version>5.0.0</license.plugin.version>
-    <owasp.plugin.version>12.2.0</owasp.plugin.version>
     <projectinfo.plugin.version>3.9.0</projectinfo.plugin.version>
     <pmd.plugin.version>3.28.0</pmd.plugin.version>
     <site.plugin.version>3.21.0</site.plugin.version>
@@ -82,10 +81,7 @@
     <hamcrest.version>3.0</hamcrest.version>
 
     <!-- disable by default (enabled by profile in CI) -->
-    <dependency-check.skip>true</dependency-check.skip>
     <archetype.test.skip>true</archetype.test.skip>
-    <nvd.api.key />
-    <nvd.api.datafeed />
 
     <!-- sonar -->
     <sonar.coverage.jacoco.xmlReportPaths>${maven.multiModuleProjectDirectory}/reports/target/site/jacoco-merged/jacoco.xml</sonar.coverage.jacoco.xmlReportPaths>
@@ -494,11 +490,6 @@
             </execution>
           </executions>
         </plugin>
-        <plugin>
-          <groupId>org.owasp</groupId>
-          <artifactId>dependency-check-maven</artifactId>
-          <version>${owasp.plugin.version}</version>
-        </plugin>
       </plugins>
     </pluginManagement>
 
@@ -599,31 +590,6 @@
           </execution>
         </executions>
       </plugin>
-      <plugin>
-        <groupId>org.owasp</groupId>
-        <artifactId>dependency-check-maven</artifactId>
-        <executions>
-          <execution>
-            <goals>
-              <goal>check</goal>
-            </goals>
-          </execution>
-        </executions>
-        <configuration>
-          <failBuildOnCVSS>7</failBuildOnCVSS>
-          <ossindexAnalyzerEnabled>false</ossindexAnalyzerEnabled>
-          <formats>
-            <format>HTML</format>
-            <format>JSON</format>
-            <format>CSV</format>
-          </formats>
-          <suppressionFile>
-              ./build-tools/owasp/suppressions.xml
-          </suppressionFile>
-          <nvdApiKey>${nvd.api.key}</nvdApiKey>
-          <nvdDatafeedUrl>${nvd.api.datafeed}</nvdDatafeedUrl>
-        </configuration>
-      </plugin>
       <plugin>
         <groupId>org.sonatype.central</groupId>
         <artifactId>central-publishing-maven-plugin</artifactId>
@@ -747,23 +713,6 @@
           </reportSet>
         </reportSets>
       </plugin>
-      <plugin>
-        <groupId>org.owasp</groupId>
-        <artifactId>dependency-check-maven</artifactId>
-        <version>${owasp.plugin.version}</version>
-        <reportSets>
-          <reportSet>
-            <reports>
-              <report>aggregate</report>
-            </reports>
-          </reportSet>
-        </reportSets>
-        <configuration>
-          <suppressionFiles>
-            <suppressionFile>./build-tools/owasp/suppressions.xml</suppressionFile>
-          </suppressionFiles>
-        </configuration>
-      </plugin>
     </plugins>
   </reporting>
 
@@ -827,18 +776,6 @@
         <archetype.test.skip>true</archetype.test.skip>
       </properties>
     </profile>
-    <profile>
-      <id>dependencies</id>
-      <properties>
-        <skipTests>true</skipTests>
-        <pmd.skip>true</pmd.skip>
-        <cpd.skip>true</cpd.skip>
-        <dependency-check.skip>false</dependency-check.skip>
-        <jacoco.skip>true</jacoco.skip>
-        <checkstyle.skip>true</checkstyle.skip>
-        <archetype.test.skip>true</archetype.test.skip>
-      </properties>
-    </profile>
   </profiles>
 
   <developers>