Merge branch 'master' of https://gitbox.apache.org/repos/asf/commons-collections.git

.github/workflows/codeql-analysis.yml

@@ -45,8 +45,8 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3.0.2
-    - uses: actions/cache@v3.0.9
+      uses: actions/checkout@v3.1.0
+    - uses: actions/cache@v3.0.10
       with:
         path: ~/.m2/repository
         key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}

.github/workflows/coverage.yml

@@ -29,8 +29,8 @@ jobs:
         java: [ 8 ]
 
     steps:
-    - uses: actions/checkout@v3.0.2
-    - uses: actions/cache@v3.0.9
+    - uses: actions/checkout@v3.1.0
+    - uses: actions/cache@v3.0.10
       with:
         path: ~/.m2/repository
         key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}

.github/workflows/maven.yml

@@ -34,8 +34,8 @@ jobs:
 #            experimental: true
         
     steps:
-    - uses: actions/checkout@v3.0.2
-    - uses: actions/cache@v3.0.9
+    - uses: actions/checkout@v3.1.0
+    - uses: actions/cache@v3.0.10
       with:
         path: ~/.m2/repository
         key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}

.github/workflows/scorecards-analysis.yml

@@ -38,7 +38,7 @@ jobs:
     steps:
 
       - name: "Checkout code"
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b   # 3.0.2
+        uses: actions/checkout@v3.1.0   # 3.0.2
         with:
           persist-credentials: false
 

pom.xml

@@ -591,7 +591,7 @@
     <checkstyle.version>3.2.0</checkstyle.version>
     <checkstyle.dep.version>9.3</checkstyle.dep.version>
     <commons.pmd.version>3.19.0</commons.pmd.version>
-    <commons.pmd-impl.version>6.49.0</commons.pmd-impl.version>
+    <commons.pmd-impl.version>6.50.0</commons.pmd-impl.version>
 
     <commons.site.path>collections</commons.site.path>
     <commons.scmPubUrl>https://svn.apache.org/repos/infra/websites/production/commons/content/proper/commons-collections</commons.scmPubUrl>

src/changes/changes.xml

@@ -148,13 +148,13 @@
     </action>
     <!-- UPDATE -->
     <action type="update" dev="kinow" due-to="Dependabot, Gary Gregory">
-      Bump actions/cache from 2 to 3.0.9 #214 #225 #239 #266 #294, #342.
+      Bump actions/cache from 2 to 3.0.10 #214 #225 #239 #266 #294, #342, #345.
     </action>
     <action type="update" dev="kinow" due-to="Dependabot, Gary Gregory">
       Bump actions/setup-java from 1.4.0 to 3.5.1 #174 #177 #186 #224 #298.
     </action>
     <action type="update" dev="ggregory" due-to="Dependabot, Gary Gregory">
-      Bump actions/checkout from 1 to 3.0.2 #166 #173 #183 #193 #262 #264 #285.
+      Bump actions/checkout from 1 to 3.1.0 #166, #173, #183, #193, #262, #264, #285, #346.
     </action>
     <action type="update" dev="kinow" due-to="Dependabot">
       Bump codecov/codecov-action from 2 to 3 #297.
@@ -319,7 +319,7 @@
       Bump japicmp from 0.15.4 to 0.16.0.
     </action>
     <action type="update" dev="kinow" due-to="Dependabot">
-      Bump commons.pmd-impl.version from 6.46.0 to 6.49.0 #318, #327, #333.
+      Bump commons.pmd-impl.version from 6.46.0 to 6.50.0 #318, #327, #333, #347.
     </action>
     <action type="update" dev="aherbert" due-to="Partha Protim Paul">
       Correct test of Collection toArray(Object[]) vs toArray() to optionally ignore array order.