spring-batch-rest icon indicating copy to clipboard operation
spring-batch-rest copied to clipboard

Published 20 hours ago • verified publisher icon chrisgleissner

Bump the deps group with 11 updates

Open dependabot[bot] opened this issue 1 year ago • 0 comments

Bumps the deps group with 11 updates:

Package From To
org.springframework.boot:spring-boot-starter-parent 2.2.7.RELEASE 3.3.1
kr.motd.maven:os-maven-plugin 1.5.0.Final 1.7.1
org.jvnet.wagon-svn:wagon-svn 1.9 1.12
javax.xml.bind:jaxb-api 2.2.3 2.3.1
org.jacoco:jacoco-maven-plugin 0.8.10 0.8.12
org.sonatype.plugins:nexus-staging-maven-plugin 1.6.8 1.7.0
org.apache.maven.plugins:maven-gpg-plugin 1.6 3.2.4
com.google.guava:guava 29.0-jre 33.2.1-jre
org.springdoc:springdoc-openapi-ui 1.2.33 1.8.0
org.apache.maven.plugins:maven-enforcer-plugin 3.0.0-M3 3.5.0
com.github.tomakehurst:wiremock 2.26.0 2.27.2

Updates org.springframework.boot:spring-boot-starter-parent from 2.2.7.RELEASE to 3.3.1

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v3.3.1

:lady_beetle: Bug Fixes

  • SQL Server JDBC URL is malformed after adding org.springframework.boot.jdbc.parameters label #41169
  • Git instant properties cannot be coerced following git-commit-id Maven plugin upgrade #41152
  • Excluding status code from DefaultErrorAttributes throws NPE #41141
  • Spring Boot remote restart with devtools causes 'factory already defined' Tomcat error when running with 'java -jar' #41107
  • MongoHealthIndicator not compliant with Mongo stable API with strict setting #41104
  • Service connection for bitnami mongodb fails to connect #41097
  • Image building requires builder to specify a stack #41091
  • DataSourceProperties fail to bind if java.sql module isn't included #41084
  • AOT causes Logback configuration error when using include #41081
  • Image building hangs when builder and buildpack are configured #41049
  • IllegalArgumentException when trying to use Tomcat's HttpNio2Protocol with Spring Boot-configured SSL #41010
  • Uber jar fails to start when it contains a dependency with Multi-Release: true in its manifest and unexpected file entries in META-INF/versions #41006
  • JSP-related resources may not be found in an executable war file when using Jetty #40996
  • The value of the tomcat.threads.config.max metric is always -1, irrespective of the configured maximum number of threads #40957
  • The auto-configured reactiveNeo4jTransactionManager may cause a failure due to multiple TransactionManager beans #40953
  • Application fails to start when server.tomcat.threads.max < 10 #40945
  • SBOM actuator endpoint doesn't work in a native image #40939
  • Starter parent applies its configuration of the CycloneDX Maven plugin too broadly #40927
  • buildInfo does not work with Gradle 8.7 or later when the configuration cache is enabled #40924
  • Prometheus Exemplars are missing from _count #40904
  • Extract fails due to a duplicate entry when BOOT-INF/classes contains a directory that's also present in the root of the jar #40903
  • sbom is not available to the actuator endpoint when using bootRun or bootWar #40890
  • A newline character is missing from the start of the default banner #40889

:notebook_with_decorative_cover: Documentation

  • Fix links to Spring AMQP's javadoc #41144
  • Document more precisely how a Container's Docker image name is used to find the matching service connection #41123
  • Cross-link to the CDS how-to guide #41118
  • Fix typos in javadoc of MockServerRestClientCustomizer and MockServerRestTemplateCustomizer #41065
  • Improve readability when listing three pillars of observability #41064
  • Add CDS training run configuration documentation #41045
  • Document the need to switch to io.micrometer:micrometer-registry-prometheus-simpleclient to use the Prometheus push gateway #40993
  • Improve consistency of documentation guidelines for packaging and running applications #40977
  • Fix typos in method names and javadoc #40976
  • Replace hard-coded links to Micrometer in documentation #40967
  • Add Kotlin example for @Testcontainers #40943
  • Fix various minor inconsistencies of the documentation #40942
  • Warn in the documentation that spring.profiles.group can only be used in non-profile-specific documents #40941
  • Broken Micrometer links in documentation #40916
  • Document Buildpacks CDS and Spring AOT support #40762

:hammer: Dependency Upgrades

  • Upgrade to Byte Buddy 1.14.17 #41066
  • Upgrade to FreeMarker 2.3.33 #41067
  • Upgrade to HSQLDB 2.7.3 #41068

... (truncated)

Commits

Updates kr.motd.maven:os-maven-plugin from 1.5.0.Final to 1.7.1

Release notes

Sourced from kr.motd.maven:os-maven-plugin's releases.

os-maven-plugin-1.7.1

os-maven-plugin-1.7.0

os-maven-plugin-1.6.2

os-maven-plugin-1.6.1

  • Added m2e life cycle mapping metadata so os-maven-plugin works better with Eclipse m2e. #37 (Thanks, @​sergei-ivanov)

os-maven-plugin-1.6.0

  • Added support for MIPS and MIPSEL 32/64-bit architecture
    • mips_32 - if the value is one of: mips, mips32
    • mips_64 - if the value is mips64
    • mipsel_32 - if the value is one of: mipsel, mips32el
    • mipsel_64 - if the value is mips64el
  • Added support for PPCLE 32-bit architecture
    • ppcle_32 - if the value is one of: ppcle, ppc32le
  • Added support for IA64N and IA64W architecture
    • itanium_32 - if the value is ia64n
    • itanium_64 - if the value is one of: ia64, ia64w (new), itanium64
  • Fixed classpath conflicts due to outdated Guava version in transitive dependencies (#29)
  • Fixed incorrect prerequisite (#21)
  • Overall code clean-up and dependency updates
Commits
  • 9913130 [maven-release-plugin] prepare release os-maven-plugin-1.7.1
  • 211db49 Override the default Maven repository when testing against old Maven versions
  • 88bae1e Detect more osx variants (#67)
  • cebc3e8 Add support for LoongArch64 architecture (#63)
  • 4df5494 Add riscv32 and riscv64 support (#62)
  • 6bd9cfa Support for E2K (Elbrus 2000) architecture (#57)
  • 6d81345 Update README.md
  • 52e547c Update the version in README.md
  • ad10438 [maven-release-plugin] prepare for next development iteration
  • 4a74c82 [maven-release-plugin] prepare release os-maven-plugin-1.7.0
  • Additional commits viewable in compare view

Updates org.jvnet.wagon-svn:wagon-svn from 1.9 to 1.12

Updates javax.xml.bind:jaxb-api from 2.2.3 to 2.3.1

Commits

Updates org.jacoco:jacoco-maven-plugin from 0.8.10 to 0.8.12

Release notes

Sourced from org.jacoco:jacoco-maven-plugin's releases.

0.8.12

New Features

  • JaCoCo now officially supports Java 22 (GitHub #1596).
  • Experimental support for Java 23 class files (GitHub #1553).

Fixed bugs

  • Branches added by the Kotlin compiler for functions with default arguments and having more than 32 parameters are filtered out during generation of report (GitHub #1556).
  • Branch added by the Kotlin compiler version 1.5.0 and above for reading from lateinit property is filtered out during generation of report (GitHub #1568).

Non-functional Changes

  • JaCoCo now depends on ASM 9.7 (GitHub #1600).

0.8.11

New Features

  • JaCoCo now officially supports Java 21 (GitHub #1520).
  • Experimental support for Java 22 class files (GitHub #1479).
  • Part of bytecode generated by the Java compilers for exhaustive switch expressions is filtered out during generation of report (GitHub #1472).
  • Part of bytecode generated by the Java compilers for record patterns is filtered out during generation of report (GitHub #1473).

Fixed bugs

  • Instrumentation should not cause VerifyError when the last local variable of method parameters is overridden in the method body to store a value of type long or double (GitHub #893).
  • Restore exec file compatibility with versions from 0.7.5 to 0.8.8 in case of class files with zero line numbers (GitHub #1492).

Non-functional Changes

  • jacoco-maven-plugin now requires at least Java 8 (GitHub #1466, #1468).
  • JaCoCo build now requires at least Maven 3.5.4 (GitHub #1467).
  • Maven 3.9.2 should not produce warnings for jacoco-maven-plugin (GitHub #1468).
  • JaCoCo build now requires JDK 17 (GitHub #1482).
  • JaCoCo now depends on ASM 9.6 (GitHub #1518).
Commits

Updates org.sonatype.plugins:nexus-staging-maven-plugin from 1.6.8 to 1.7.0

Updates org.apache.maven.plugins:maven-gpg-plugin from 1.6 to 3.2.4

Release notes

Sourced from org.apache.maven.plugins:maven-gpg-plugin's releases.

3.2.4

Release Notes - Maven GPG Plugin - Version 3.2.4

📦 Dependency updates

3.2.3

Release Notes - Maven GPG Plugin - Version 3.2.3

... (truncated)

Commits
  • 789149e [maven-release-plugin] prepare release maven-gpg-plugin-3.2.4
  • 893aedc [MGPG-125] Fix "bestPractices" (#95)
  • b6f0324 [MGPG-126] Bump commons-io:commons-io from 2.16.0 to 2.16.1 (#94)
  • 3c5878b [maven-release-plugin] prepare for next development iteration
  • 89b91a4 [maven-release-plugin] prepare release maven-gpg-plugin-3.2.3
  • fc2efa3 [MGPG-123][MGPG-124] Dependency upgrades (#93)
  • 50222d3 [MGPG-120] New mojo sign-deployed (#88)
  • a6c3a09 [MGPG-122] Bump org.apache.maven.plugins:maven-invoker-plugin from 3.6.0 to 3...
  • 78f5e37 [MGPG-121] Return the workaround for pseudo security (#90)
  • 582df74 [MGPG-117] Improve passphrase handling (#86)
  • Additional commits viewable in compare view

Updates com.google.guava:guava from 29.0-jre to 33.2.1-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.2.1

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.2.1-jre</version>
  <!-- or, for Android: -->
  <version>33.2.1-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

  • net: Changed InetAddress-String conversion methods to preserve the IPv6 scope ID if present. The scope ID can be necessary for IPv6-capable devices with multiple network interfaces. However, preserving it can also lead to problems for callers that rely on the returned values not to include the scope ID:
    • Callers might compensate for the old behavior of the methods by appending the scope ID to a returned string themselves. If so, you can update your code to stop doing so at the same time as you upgrade Guava. Of, if your code might run against multiple versions of Guava, you can check whether Guava has included a scope ID before you add one yourself.
    • Callers might pass the returned string to another system that does not understand scope IDs. If so, you can strip the scope ID off, whether by truncating the string form at a % character (leaving behind any trailing ] character in the case of forUriString) or by replacing the returned InetAddress with a new instance constructed by calling InetAddress.getByAddress(addr).
    • java.net.InetAddress validates any provided scope ID against the interfaces available on the machine. As a result, methods in InetAddresses may now fail if the scope ID fails validation.
      • Notable cases in which this may happen include:
        • if the code runs in an Android app without networking permission
        • if code passes InetAddress instances or strings across devices
      • If this is not the behavior that you want, then you can strip off the scope ID from the input string before passing it to Guava, as discussed above. (3f61870ac6)

33.2.0

Android users: Please test recent Guava versions

If you know of Guava Android users who have not yet upgraded to at least release 33.0.0, please encourage them to upgrade, preferably to today's release, 33.2.0. These releases have begun adding Java 8+ APIs to guava-android. While we don't anticipate problems, we do anticipate that any unexpected problems could force a disruptive rollback. To minimize any disruption, we'd like to catch any such problems early.

Please let us know of any problems you encounter.

Maven

... (truncated)

Commits

Updates org.springdoc:springdoc-openapi-ui from 1.2.33 to 1.8.0

Updates org.apache.maven.plugins:maven-enforcer-plugin from 3.0.0-M3 to 3.5.0

Release notes

Sourced from org.apache.maven.plugins:maven-enforcer-plugin's releases.

3.5.0

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

👻 Maintenance

3.4.1

🐛 Bug Fixes

👻 Maintenance

... (truncated)

Commits
  • 21b31b5 [maven-release-plugin] prepare release enforcer-3.5.0
  • e6cd6e9 Remove unused dependency (#316)
  • 29d1c0d [MENFORCER-497] Require Maven 3.6.3+
  • 80e6626 [MENFORCER-503] Pass context to ProfileActivator - fix NPE in Maven 3.9.7
  • 5c7d0bc [MENFORCER-494] Allow banning dynamic versions in whole tree (#294)
  • e687c46 [MENFORCER-501] Bump commons-io:commons-io from 2.16.0 to 2.16.1 (#311)
  • 6665083 [MENFORCER-501] Bump commons-codec:commons-codec from 1.16.1 to 1.17.0 (#312)
  • 3eb6343 Bump project version to 3.5.0-SNAPSHOT
  • 1cf5c5f [MENFORCER-504] Bump org.apache.maven:maven-parent from 41 to 42 (#314)
  • a24b557 Manage ignore artifacts for dependabot in PR
  • Additional commits viewable in compare view

Updates com.github.tomakehurst:wiremock from 2.26.0 to 2.27.2

Commits
  • 56d7a08 Added memoization to match results during request -> stub near miss calculation
  • b9a3865 Bumped patch version
  • 278ab58 Fixed #1375 - removed memoization of string value pattern matches, as this is...
  • 1b48c42 Fixed #1346 - raised default Jetty stop timeout to prevent unbounded thread c...
  • 2b50872 Bumped patch version
  • e2809eb Moved the writable key store source (used when browser proxying HTTPS) to the...
  • d597aaf Upgraded to Jetty 9.4.30 and Conscrypt 2.2.1 (not the most recent, but the ne...
  • 129d00b Fixed #994 - added the ability to set the keystore type and trust store type ...
  • 6ded3d6 Fixed #807 - added a distinction in configuration between keystore password a...
  • 500ebec Added support for saving keystore files and switched the Jetty94 browser prox...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

dependabot[bot] avatar Jul 06 '24 14:07 dependabot[bot]