⬆️ Update dependency-check-core to 8.4.2

[scala-steward]

About this PR

📦 Updates org.owasp:dependency-check-core from 8.1.2 to 8.4.2

Usage

✅ Please merge!

I'll automatically update this PR to resolve conflicts as long as you don't change it yourself.

If you'd like to skip this version, you can just close this PR. If you have any feedback, just mention me in the comments below.

Configure Scala Steward for your repository with a .scala-steward.conf file.

Have a fantastic day writing Scala!

⚙ Adjust future updates

Add this to your .scala-steward.conf file to ignore future updates of this dependency:

updates.ignore = [ { groupId = "org.owasp", artifactId = "dependency-check-core" } ]

Or, add this to slow down future updates of this dependency:

dependencyOverrides = [{
  pullRequests = { frequency = "30 days" },
  dependency = { groupId = "org.owasp", artifactId = "dependency-check-core" }
}]

^{labels: library-update, early-semver-minor, semver-spec-minor, commit-count:1}

[danile42]

Hi @albuch, it would be really great if you could merge this! It solves some incorrect CVE warnings.
I am a happy user of your tool in a large Scala project at work. Keep up the good work :)

[albuch]

@danile42 Unfortunately this is a tricky one, as there are some logging implementation changes in one of the unmerged releases that keep failing several components. Getting Java and Scala logging work seamlessly together is unforntuately a big pain. I'll try my best to find some time to resolve this to get this merged.
In the meantime you can always add your own suppressions for false-positives: http://jeremylong.github.io/DependencyCheck/general/suppression.html

[scala-steward]

Superseded by #312.