Skip to content

chore: [DevOps] bump the production-minor-patch group across 1 directory with 9 updates #712

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
newtork merged 2 commits into from
Feb 10, 2025
Merged

chore: [DevOps] bump the production-minor-patch group across 1 directory with 9 updates #712

newtork merged 2 commits into from
Feb 10, 2025
+8 −8

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 10, 2025

Bumps the production-minor-patch group with 9 updates in the / directory:

Package From To
org.wiremock:wiremock 3.10.0 3.11.0
commons-codec:commons-codec 1.17.2 1.18.0
com.sap.cloud.security:java-bom 3.5.7 3.5.8
io.vavr:vavr 0.10.5 0.10.6
com.google.code.gson:gson 2.11.0 2.12.1
com.auth0:java-jwt 4.4.0 4.5.0
org.apache.httpcomponents.client5:httpclient5 5.4.1 5.4.2
org.checkerframework:checker-qual 3.48.4 3.49.0
joda-time:joda-time 2.13.0 2.13.1

Updates org.wiremock:wiremock from 3.10.0 to 3.11.0

Release notes

Sourced from org.wiremock:wiremock's releases.

3.11.0

🚀 New Features

🐞 Bug fixes

📦 Dependency updates

✍ Other changes

Commits
  • dd8e739 Fixed test broken by suppression of HTTPS upgrade by the Apache HTTP Client
  • a7d9ac8 Bumped minor version
  • bd17065 Merge pull request #2918 from ianprime0509/xml-default-instance
  • 63a3a12 Update after-pattern.yaml to fix typo (#2949)
  • 437e3ec Disable problematic protocol update for httpclient 5.4 (#2951)
  • c3f3319 Bump jetty 12 version to 12.0.16 (#2947)
  • 9ccb1c8 improve performance of EqualToXmlPattern. (#2944)
  • f913265 Make EqualToXmlPattern namespace aware by default. (#2945)
  • 6217b77 Merge pull request #2943 from Ashish-CodeJourney/master
  • afe7de8 Merge pull request #1 from Ashish-CodeJourney/Ashish-CodeJourney-patch-1
  • Additional commits viewable in compare view

Updates commons-codec:commons-codec from 1.17.2 to 1.18.0

Changelog

Sourced from commons-codec:commons-codec's changelog.

Apache Commons Codec 1.18.0 Release Notes

The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.18.0.

The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.

This is a feature and maintenance release. Java 8 or later is required.

New features

  •         Add Base32.Builder.setHexDecodeTable(boolean). Thanks to Gary Gregory, Julian Reschke.

  •         Add Base32.Builder.setHexEncodeTable(boolean). Thanks to Gary Gregory, Julian Reschke.

Changes

  •         Bump org.apache.commons:commons-parent from 78 to 79. Thanks to Gary Gregory.

For complete information on Apache Commons Codec, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Codec website:

https://commons.apache.org/proper/commons-codec/

Download page: https://commons.apache.org/proper/commons-codec/download_codec.cgi

Commits
  • 5f76abb Update contributing file from user feedback
  • a38de95 Prepare for the next release candidate
  • 0689dc8 Prepare for the next release candidate
  • 4098222 Port from Doxia 1 to 2
  • ebb29e9 Make test fixture package private
  • 110a9f8 Don't need to end a paragraph with an extra line break
  • 6444237 Remove background color from site page
  • 9062af4 Merge branch 'master' of
  • 963ee73 Include more in the source assembly
  • 94b9c51 Add a file extension to TODO file
  • Additional commits viewable in compare view

Updates com.sap.cloud.security:java-bom from 3.5.7 to 3.5.8

Release notes

Sourced from com.sap.cloud.security:java-bom's releases.

3.5.8

  • [spring-security] Fix error handling for reactive token validation

Dependency upgrades

  • Downgrade org.wiremock:wiremock-standalone from 3.10.0 to 3.9.2
  • Bump org.apache.httpcomponents.client5:httpclient5 from 5.4.1 to 5.4.2
  • Bump io.projectreactor:reactor-test from 3.7.1 to 3.7.2
  • Bump org.assertj:assertj-core from 3.27.2 to 3.27.3
  • Bump spring.boot.version from 3.4.1 to 3.4.2
  • Bump spring.core.version from 6.2.1 to 6.2.2
  • Bump io.projectreactor:reactor-core from 3.7.1 to 3.7.2
  • Bump org.mockito:mockito-core from 5.14.2 to 5.15.2
Changelog

Sourced from com.sap.cloud.security:java-bom's changelog.

3.5.8

  • [spring-security] Fix error handling for reactive token validation

Dependency upgrades

  • Downgrade org.wiremock:wiremock-standalone from 3.10.0 to 3.9.2
  • Bump org.apache.httpcomponents.client5:httpclient5 from 5.4.1 to 5.4.2
  • Bump io.projectreactor:reactor-test from 3.7.1 to 3.7.2
  • Bump org.assertj:assertj-core from 3.27.2 to 3.27.3
  • Bump spring.boot.version from 3.4.1 to 3.4.2
  • Bump spring.core.version from 6.2.1 to 6.2.2
  • Bump io.projectreactor:reactor-core from 3.7.1 to 3.7.2
  • Bump org.mockito:mockito-core from 5.14.2 to 5.15.2
Commits
  • 31569aa Set release version to 3.5.8 (#1710)
  • a94f7be Reactor fix and wiremock downgrade (#1709)
  • 2293491 Bump org.apache.httpcomponents.client5:httpclient5 from 5.4.1 to 5.4.2 (#1708)
  • e64878e Bump io.projectreactor:reactor-test from 3.7.1 to 3.7.2 (#1699)
  • 52f6023 Bump org.assertj:assertj-core from 3.27.2 to 3.27.3 (#1703)
  • d7bf44c Bump spring.boot.version from 3.4.1 to 3.4.2 (#1705)
  • e12bcea Bump spring.core.version from 6.2.1 to 6.2.2 (#1701)
  • 93c7214 Bump io.projectreactor:reactor-core from 3.7.1 to 3.7.2 (#1700)
  • a86623d Bump org.mockito:mockito-core from 5.14.2 to 5.15.2 (#1698)
  • See full diff in compare view

Updates io.vavr:vavr from 0.10.5 to 0.10.6

Release notes

Sourced from io.vavr:vavr's releases.

Patch Release 0.10.6

This release brings Virtual-Thread-friendliness and documentation updates.

This is the last planned patch release for the 0.10.x train. 0.11.x incoming!

Changes

Full Changelog: vavr-io/vavr@v0.10.5...v0.10.6

Committers

🎉 MANY THANKS TO ALL COMMITTERS! 🎉

Commits

Updates com.google.code.gson:gson from 2.11.0 to 2.12.1

Release notes

Sourced from com.google.code.gson:gson's releases.

Gson 2.11.1

The only difference between this release and 2.11.0 is that OSGi declarations in the Gson jar now specify that com.google.errorprone.annotations is an optional dependency, not a required one. If you do not use OSGi then there is no effective change.

Gson 2.12.0

What's Changed

The biggest change is that we no longer support Java 7. People who still need to run on Java 7 will need to use an earlier version of Gson.

Other changes:

New Contributors

Full Changelog: google/gson@gson-parent-2.11.0...gson-parent-2.12.0

Commits
  • 29e3d1d [maven-release-plugin] prepare release gson-parent-2.12.1
  • be456cf Make the import of com.google.errorprone optional (#2795)
  • b2e26fa Bump the github-actions group with 3 updates (#2785)
  • 10bdd6d Simplify collection type adapters slightly. (#2791)
  • ab9c54f [maven-release-plugin] prepare for next development iteration
  • aaf7a12 [maven-release-plugin] prepare release gson-parent-2.12.0
  • a2b1c3c Allow registering adapters for JsonElement again (#2789)
  • e5dce84 Bump the maven group with 8 updates (#2784)
  • 84e5f16 Bump the maven group with 7 updates (#2777)
  • 9f3e577 Bump the github-actions group with 2 updates (#2778)
  • Additional commits viewable in compare view

Updates com.auth0:java-jwt from 4.4.0 to 4.5.0

Release notes

Sourced from com.auth0:java-jwt's releases.

4.5.0

Added

Fixed

  • empty expected audience array should throw InvalidClaimException #679 (jimmyjames)
Changelog

Sourced from com.auth0:java-jwt's changelog.

4.5.0 (2025-01-29)

Full Changelog

Added

Fixed

  • empty expected audience array should throw InvalidClaimException #679 (jimmyjames)

4.5.0 (2025-01-28)

Full Changelog

Added

Fixed

  • empty expected audience array should throw InvalidClaimException #679 (jimmyjames)

4.5.0 (2025-01-22)

Full Changelog

Added

Fixed

  • empty expected audience array should throw InvalidClaimException #679 (jimmyjames)
Commits

Updates org.apache.httpcomponents.client5:httpclient5 from 5.4.1 to 5.4.2

Changelog

Sourced from org.apache.httpcomponents.client5:httpclient5's changelog.

Release 5.4.2

This is a maintenance release that upgrades HttpCore to version 5.3.3 and fixes several regressions reported since the last release. One of the regressions could cause connection leaks and eventual connection pool exhaustion in case of proxy authentication failure when establishing a tunnel via the proxy.

Change Log

  • Upgraded HttpCore to version 5.3.3 Contributed by Oleg Kalnichevski

  • Improved internal state representation of the internal async execution runtime in order to prevent potential race conditions. Contributed by Oleg Kalnichevski

  • HTTPCLIENT-2357, regression: Classic HttpClient fails to release connection in case of a proxy authentication failure. Contributed by Oleg Kalnichevski

  • HTTPCLIENT-2355, regression: Reset protocol version in the execution context on a 200 response to CONNECT request. Contributed by Oleg Kalnichevski

  • HTTPCLIENT-2354: ResponseCachingPolicy to allow caching of responses with "must-revalidate" in shared caches with Authorization headers. The change aligns with RFC 9111 Section 5.2.2.2 (#609). Contributed by Arturo Bernal

  • Do not add Upgrade header if Connection header already present (the caller manually manages connection state). Contributed by Oleg Kalnichevski

  • Avoid logging HTTP message version where it can be a hint, not an actual protocol version Contributed by Oleg Kalnichevski

  • IDN encode hostnames with Unicode characters prior to DNS resolution (#608). Contributed by Arturo Bernal

  • HTTPCLIENT-2353: Fixed rejection of certificates with IDN encoded identities. (#607) Contributed by Arturo Bernal

Commits
  • 34f1b02 HttpClient 5.4.2 release
  • 2145d2c Updated release notes for HttpClient 5.4.2 release
  • 7e48abb Upgraded HttpCore to version 5.3.3
  • 1119d49 Disabled a test case that fails intermittently with GitHub Actions, pending r...
  • 9433bca Improved internal state representation of the internal async execution runtim...
  • 7f56b8e HTTPCLIENT-2357, regression: Classic HttpClient fails to release connect in c...
  • 8958b36 HTTPCLIENT-2355, regression: Reset protocol version in the execution context ...
  • f7f8069 Upgraded HttpCore to version 5.3.2
  • d048550 Fix HTTPCLIENT-2354 by updating ResponseCachingPolicy to allow caching of res...
  • 5ab09ea Do not add Upgrade header if Connection header already present (the calle...
  • Additional commits viewable in compare view

Updates org.checkerframework:checker-qual from 3.48.4 to 3.49.0

Release notes

Sourced from org.checkerframework:checker-qual's releases.

Checker Framework 3.49.0

Version 3.49.0 (February 3, 2025)

User-visible changes:

The Optional Checker is more precise for Optional values resulting from operations on container types (e.g., List, Map, Iterable). It supports two new annotations:

  • @NonEmpty
  • @UnknownNonEmpty

The Signature Checker no longer supports @BinaryNameWithoutPackage because it is equivalent to @Identifier; use @Identifier instead.

The JavaStubifier implementation now appears in package org.checkerframework.framework.stubifier.JavaStubifier.

Closed issues:

#6935, #6936, #6939.

Changelog

Sourced from org.checkerframework:checker-qual's changelog.

Version 3.49.0 (February 3, 2025)

User-visible changes:

The Optional Checker is more precise for Optional values resulting from operations on container types (e.g., List, Map, Iterable). It supports two new annotations:

  • @NonEmpty
  • @UnknownNonEmpty

The Signature Checker no longer supports @BinaryNameWithoutPackage because it is equivalent to @Identifier; use @Identifier instead.

The JavaStubifier implementation now appears in package org.checkerframework.framework.stubifier.JavaStubifier.

Closed issues:

#6935, #6936, #6939.

Commits

Updates joda-time:joda-time from 2.13.0 to 2.13.1

Release notes

Sourced from joda-time:joda-time's releases.

Release v2.13.1

See the change notes for more information.

What's Changed

Full Changelog: JodaOrg/joda-time@v2.13.0...v2.13.1

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore: [DevOps] bump the production-minor-patch group across 1 direct…
06cff02 
…ory with 9 updates

Bumps the production-minor-patch group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.wiremock:wiremock](https://github.com/wiremock/wiremock) | `3.10.0` | `3.11.0` |
| [commons-codec:commons-codec](https://github.com/apache/commons-codec) | `1.17.2` | `1.18.0` |
| [com.sap.cloud.security:java-bom](https://github.com/SAP/cloud-security-xsuaa-integration) | `3.5.7` | `3.5.8` |
| [io.vavr:vavr](https://github.com/vavr-io/vavr) | `0.10.5` | `0.10.6` |
| [com.google.code.gson:gson](https://github.com/google/gson) | `2.11.0` | `2.12.1` |
| [com.auth0:java-jwt](https://github.com/auth0/java-jwt) | `4.4.0` | `4.5.0` |
| [org.apache.httpcomponents.client5:httpclient5](https://github.com/apache/httpcomponents-client) | `5.4.1` | `5.4.2` |
| [org.checkerframework:checker-qual](https://github.com/typetools/checker-framework) | `3.48.4` | `3.49.0` |
| [joda-time:joda-time](https://github.com/JodaOrg/joda-time) | `2.13.0` | `2.13.1` |



Updates `org.wiremock:wiremock` from 3.10.0 to 3.11.0
- [Release notes](https://github.com/wiremock/wiremock/releases)
- [Commits](wiremock/wiremock@3.10.0...3.11.0)

Updates `commons-codec:commons-codec` from 1.17.2 to 1.18.0
- [Changelog](https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-codec@rel/commons-codec-1.17.2...rel/commons-codec-1.18.0)

Updates `com.sap.cloud.security:java-bom` from 3.5.7 to 3.5.8
- [Release notes](https://github.com/SAP/cloud-security-xsuaa-integration/releases)
- [Changelog](https://github.com/SAP/cloud-security-services-integration-library/blob/main/CHANGELOG.md)
- [Commits](SAP/cloud-security-services-integration-library@3.5.7...3.5.8)

Updates `io.vavr:vavr` from 0.10.5 to 0.10.6
- [Release notes](https://github.com/vavr-io/vavr/releases)
- [Commits](vavr-io/vavr@v0.10.5...v0.10.6)

Updates `com.google.code.gson:gson` from 2.11.0 to 2.12.1
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-parent-2.11.0...gson-parent-2.12.1)

Updates `com.auth0:java-jwt` from 4.4.0 to 4.5.0
- [Release notes](https://github.com/auth0/java-jwt/releases)
- [Changelog](https://github.com/auth0/java-jwt/blob/master/CHANGELOG.md)
- [Commits](auth0/java-jwt@4.4.0...4.5.0)

Updates `org.apache.httpcomponents.client5:httpclient5` from 5.4.1 to 5.4.2
- [Changelog](https://github.com/apache/httpcomponents-client/blob/rel/v5.4.2/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-client@rel/v5.4.1...rel/v5.4.2)

Updates `org.checkerframework:checker-qual` from 3.48.4 to 3.49.0
- [Release notes](https://github.com/typetools/checker-framework/releases)
- [Changelog](https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md)
- [Commits](typetools/checker-framework@checker-framework-3.48.4...checker-framework-3.49.0)

Updates `joda-time:joda-time` from 2.13.0 to 2.13.1
- [Release notes](https://github.com/JodaOrg/joda-time/releases)
- [Changelog](https://github.com/JodaOrg/joda-time/blob/main/RELEASE-NOTES.txt)
- [Commits](JodaOrg/joda-time@v2.13.0...v2.13.1)

---
updated-dependencies:
- dependency-name: org.wiremock:wiremock
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: commons-codec:commons-codec
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: com.sap.cloud.security:java-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: io.vavr:vavr
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: com.google.code.gson:gson
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: com.auth0:java-jwt
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: org.apache.httpcomponents.client5:httpclient5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: org.checkerframework:checker-qual
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: joda-time:joda-time
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Feb 10, 2025
newtork
newtork reviewed Feb 10, 2025
View reviewed changes
dependency-bundles/bom/pom.xml Outdated
<httpcore.version>4.4.16</httpcore.version>
<httpcore5.version>5.3.3</httpcore5.version>
<httpclient5.version>5.4.1</httpclient5.version>
<httpclient5.version>5.4.2</httpclient5.version>
Copy link
Contributor

@newtork newtork Feb 10, 2025 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Revert until discussed. Dependency update be handled separately.

image

Changelog:
Do not add Upgrade header if Connection header already present (the caller manually manages connection state).

Suggested change
<httpclient5.version>5.4.2</httpclient5.version>
<httpclient5.version>5.4.1</httpclient5.version>

Copy link
Contributor

@CharlesDuboisSAP CharlesDuboisSAP Feb 11, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

apache/httpcomponents-client@5ab09ea

@newtork newtork merged commit 082634e into main Feb 10, 2025
14 checks passed
@newtork newtork deleted the dependabot/maven/main/production-minor-patch-fca3b4c9b4 branch February 10, 2025 10:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@CharlesDuboisSAP CharlesDuboisSAP CharlesDuboisSAP left review comments

@newtork newtork newtork approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@newtork @CharlesDuboisSAP