Add dependency check report and upgrade Mockito version

Author: enricovianello

.github/workflows/deps.yaml

@@ -0,0 +1,93 @@
+# SPDX-FileCopyrightText: 2006 Istituto Nazionale di Fisica Nucleare
+#
+# SPDX-License-Identifier: Apache-2.0
+
+name: Dependency Updates
+
+on:
+  push:
+    paths:
+      - "pom.xml"
+  pull_request:
+    paths:
+      - "pom.xml"
+
+jobs:
+  check-dependencies:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@v4
+
+      - name: Set up Java
+        uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: 17
+
+      - name: Check if pom.xml changed
+        id: changes
+        uses: dorny/paths-filter@v3
+        with:
+          filters: |
+            pom:
+              - 'pom.xml'
+
+      - name: Run Maven (minor updates only)
+        if: steps.changes.outputs.pom == 'true'
+        run: |
+          mvn versions:display-dependency-updates \
+            -DallowMajorUpdates=false \
+            -DprocessDependencyManagement=true \
+            | tee minor-updates.txt
+
+      - name: Run Maven (all updates)
+        if: steps.changes.outputs.pom == 'true'
+        run: |
+          mvn versions:display-dependency-updates \
+            -DallowMajorUpdates=true \
+            -DprocessDependencyManagement=true \
+            | tee all-updates.txt
+
+      - name: Parse outputs and generate table
+        if: steps.changes.outputs.pom == 'true' 
+        run: |
+          echo "# Dependency Updates" > report.md
+          echo "" >> report.md
+
+          parse_file () {
+            FILE=$1
+            TITLE=$2
+
+            echo "## $TITLE" >> report.md
+            echo "" >> report.md
+            echo "| GroupId | ArtifactId | Current | Latest |" >> report.md
+            echo "|---------|------------|---------|--------|" >> report.md
+
+            grep " -> " $FILE | while read line; do
+              # Example line format:
+              #   com.foo:bar .................... 1.0 -> 1.2
+              
+              GROUP_ARTIFACT=$(echo $line | awk '{print $1}')
+              CURRENT=$(echo $line | awk '{print $(NF-2)}')
+              LATEST=$(echo $line | awk '{print $NF}')
+
+              GROUP=$(echo $GROUP_ARTIFACT | cut -d: -f1)
+              ARTIFACT=$(echo $GROUP_ARTIFACT | cut -d: -f2)
+
+              echo "| $GROUP | $ARTIFACT | $CURRENT | $LATEST |" >> report.md
+            done
+
+            echo "" >> report.md
+          }
+
+          parse_file minor-updates.txt "Minor / Patch Updates Only"
+          parse_file all-updates.txt "All Updates (Including Major)"
+
+      - name: Upload report
+        if: steps.changes.outputs.pom == 'true'
+        uses: actions/upload-artifact@v4
+        with:
+          name: dependency-update-report
+          path: report.md

pom.xml

@@ -50,7 +50,7 @@ SPDX-License-Identifier: Apache-2.0
     <junit.version>4.13.2</junit.version>
     <hamcrest.version>1.3</hamcrest.version>
     <canl.version>2.8.3</canl.version>
-    <mockito.version>5.16.0</mockito.version>
+    <mockito.version>5.23.0</mockito.version>
     <jcip.version>1.0</jcip.version>
     <bc.version>1.84</bc.version>