bonita-ui-designer icon indicating copy to clipboard operation
bonita-ui-designer copied to clipboard

chore(deps): Bump the production-dependencies group across 1 directory with 15 updates

Open dependabot[bot] opened this issue 1 month ago • 0 comments

Bumps the production-dependencies group with 15 updates in the / directory:

Package From To
org.apache.maven.plugins:maven-gpg-plugin 3.1.0 3.2.4
org.apache.maven.plugins:maven-source-plugin 3.3.0 3.3.1
org.apache.maven.plugins:maven-compiler-plugin 3.12.1 3.13.0
org.apache.maven.plugins:maven-jar-plugin 3.3.0 3.4.1
org.apache.maven.plugins:maven-assembly-plugin 3.6.0 3.7.1
org.apache.maven.plugins:maven-install-plugin 3.1.1 3.1.2
org.apache.maven.plugins:maven-invoker-plugin 3.6.0 3.6.1
com.mycila:license-maven-plugin 4.3 4.4
org.jacoco:jacoco-maven-plugin 0.8.11 0.8.12
com.github.jknack:handlebars 4.3.1 4.4.0
org.mitre.dsmiley.httpproxy:smiley-http-proxy-servlet 1.12.1 2.0
org.projectlombok:lombok 1.18.30 1.18.32
org.codehaus.groovy:groovy-json 3.0.20 3.0.21
org.codehaus.groovy:groovy-xml 3.0.20 3.0.21
org.codehaus.groovy:groovy-jaxb 3.0.20 3.0.21

Updates org.apache.maven.plugins:maven-gpg-plugin from 3.1.0 to 3.2.4

Release notes

Sourced from org.apache.maven.plugins:maven-gpg-plugin's releases.

3.2.4

Release Notes - Maven GPG Plugin - Version 3.2.4


📦 Dependency updates

3.2.3

Release Notes - Maven GPG Plugin - Version 3.2.3

... (truncated)

Commits
  • 789149e [maven-release-plugin] prepare release maven-gpg-plugin-3.2.4
  • 893aedc [MGPG-125] Fix "bestPractices" (#95)
  • b6f0324 [MGPG-126] Bump commons-io:commons-io from 2.16.0 to 2.16.1 (#94)
  • 3c5878b [maven-release-plugin] prepare for next development iteration
  • 89b91a4 [maven-release-plugin] prepare release maven-gpg-plugin-3.2.3
  • fc2efa3 [MGPG-123][MGPG-124] Dependency upgrades (#93)
  • 50222d3 [MGPG-120] New mojo sign-deployed (#88)
  • a6c3a09 [MGPG-122] Bump org.apache.maven.plugins:maven-invoker-plugin from 3.6.0 to 3...
  • 78f5e37 [MGPG-121] Return the workaround for pseudo security (#90)
  • 582df74 [MGPG-117] Improve passphrase handling (#86)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-source-plugin from 3.3.0 to 3.3.1

Commits
  • f80596e [maven-release-plugin] prepare release maven-source-plugin-3.3.1
  • 7626998 Bump apache/maven-gh-actions-shared from 3 to 4
  • 83c963c Bump org.apache.maven.plugins:maven-plugins from 39 to 41 (#18)
  • 40ae495 Bump org.codehaus.plexus:plexus-archiver from 4.8.0 to 4.9.1 (#20)
  • 073462b Bump org.apache.maven:maven-archiver from 3.6.0 to 3.6.1 (#21)
  • 0b1c823 Fix typos in AbstractSourceJarMojo exception
  • 099c65a [MSOURCES-142] Bump org.codehaus.plexus:plexus-archiver from 4.7.1 to 4.8.0 (...
  • 1edeea4 [MSOURCES-139] Fix typo in AbstractSourceJarMojo exception
  • 436966e [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.12.1 to 3.13.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.13.0

🚀 New features and improvements

📦 Dependency updates

📝 Documentation updates

👻 Maintenance

Commits
  • a1415aa [maven-release-plugin] prepare release maven-compiler-plugin-3.13.0
  • b2b9196 [MCOMPILER-574] Propagate cause of exception in AbstractCompilerMojo
  • 6d2ce5a [MCOMPILER-584] Refresh page - Using Non-Javac Compilers
  • eebad60 [MCOMPILER-585] Refresh plugins versions in ITs
  • ceacf68 [MCOMPILER-582] Automatic detection of release option for JDK < 9
  • 110293f [MCOMPILER-583] Require Maven 3.6.3
  • 90131df [MCOMPILER-575] Bump plexusCompilerVersion from 2.14.2 to 2.15.0 (#227)
  • 74cfc72 [MCOMPILER-548] JDK 21 throws annotations processing warning that can not be ...
  • f85aa27 Bump apache/maven-gh-actions-shared from 3 to 4
  • d59ef49 extract Maven 3.3.1 specific method call
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-jar-plugin from 3.3.0 to 3.4.1

Release notes

Sourced from org.apache.maven.plugins:maven-jar-plugin's releases.

3.4.1

🐛 Bug Fixes

📦 Dependency updates

3.4.0

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

👻 Maintenance

Commits
  • 8b29adc [maven-release-plugin] prepare release maven-jar-plugin-3.4.1
  • 325b299 [MJAR-308] Bump org.apache.maven.plugins:maven-plugins from 41 to 42 (#85)
  • 52111cc [MJAR-307] Wrong version of commons-io cause a ClassNotFound o.a.commons.io.f...
  • 902d4c5 [maven-release-plugin] prepare for next development iteration
  • 992f44a [maven-release-plugin] prepare release maven-jar-plugin-3.4.0
  • 5e31b99 [MJAR-296] Allow including files excluded by default. (#67)
  • ddfb635 [MJAR-306] Use properties for plugins versions in LifecycleMapping
  • aeffa39 [MJAR-304] Refresh download page
  • ee85d59 [MJAR-303] Cleanup declared dependencies
  • 845c120 Bump org.junit:junit-bom from 5.10.1 to 5.10.2
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-assembly-plugin from 3.6.0 to 3.7.1

Release notes

Sourced from org.apache.maven.plugins:maven-assembly-plugin's releases.

3.7.1

Release Notes - Maven Assembly Plugin - Version 3.7.1

What's Changed

Full Changelog: https://github.com/apache/maven-assembly-plugin/compare/maven-assembly-plugin-3.7.0...maven-assembly-plugin-3.7.1

3.7.0

Release Notes - Maven Assembly Plugin - Version 3.7.0

... (truncated)

Commits
  • 0afbb3e [maven-release-plugin] prepare release maven-assembly-plugin-3.7.1
  • 74e858a [MASSEMBLY-1022] Unresolved artifacts should be not processed
  • cb56382 [MASSEMBLY-1025] Bump org.codehaus.plexus:plexus-archiver from 4.9.1 to 4.9.2...
  • 86bbed0 [MASSEMBLY-1024] Bump org.apache.commons:commons-compress from 1.25.0 to 1.26...
  • bdcc4d0 [MASSEMBLY-1023] Bump org.apache.maven.shared:maven-filtering from 3.3.1 to 3...
  • 74fe92e [maven-release-plugin] prepare for next development iteration
  • 9be6e87 [maven-release-plugin] prepare release maven-assembly-plugin-3.7.0
  • e8630dc Bump apache/maven-gh-actions-shared from 3 to 4
  • 98f97a5 Bump org.postgresql:postgresql in /src/it/projects/bugs/massembly-730
  • c84e110 [MASSEMBLY-1019] Maven 3.6.3 as minimum requirements
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-install-plugin from 3.1.1 to 3.1.2

Release notes

Sourced from org.apache.maven.plugins:maven-install-plugin's releases.

3.1.2

Release Notes - Maven Install Plugin - Version 3.1.2


What's Changed

New Contributors

Full Changelog: https://github.com/apache/maven-install-plugin/compare/maven-install-plugin-3.1.1...maven-install-plugin-3.1.2

Commits
  • e1494c1 [maven-release-plugin] prepare release maven-install-plugin-3.1.2
  • 6712ae8 Remove workaround, handle it centrally
  • 1fa847f Bump workflow
  • bdc93d5 Quickfix: move to zulu
  • 7b9bf51 [MINSTALL-193] Parent 42, min Maven 3.6.3 (#64)
  • e914367 [MINSTALL-195] Include artifactId in InstallMojo#processProject messages
  • 3ebb448 [MINSTALL-197] Update to parent 41, cleanup (#61)
  • 30d2b53 [MINSTALL-192] - Code cleanups
  • 429ad5b [MNG-6829] Replace StringUtils#isEmpty(String) & #isNotEmpty(String) (#58)
  • f6377c4 configure notifications
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-invoker-plugin from 3.6.0 to 3.6.1

Release notes

Sourced from org.apache.maven.plugins:maven-invoker-plugin's releases.

3.6.1

🚀 New features and improvements

📦 Dependency updates

👻 Maintenance

Commits
  • 324d17e [maven-release-plugin] prepare release maven-invoker-plugin-3.6.1
  • 3cb6f32 use github for all scm elements
  • fcae667 - Removed negative logic (#212)
  • 09a47e0 Bump org.apache.groovy:groovy-bom from 4.0.18 to 4.0.20
  • 8ee6f26 Bump commons-codec:commons-codec from 1.16.0 to 1.16.1
  • 6dc88b6 Bump apache/maven-gh-actions-shared from 3 to 4
  • 5cf008b Bump org.assertj:assertj-core from 3.25.1 to 3.25.3
  • 9c9095d Bump org.apache.groovy:groovy-bom from 4.0.17 to 4.0.18 (#213)
  • 637304c Bump commons-codec:commons-codec from 1.15 to 1.16.0 (#198)
  • 37e8679 Bump org.apache.groovy:groovy-bom from 4.0.12 to 4.0.17 (#205)
  • Additional commits viewable in compare view

Updates com.mycila:license-maven-plugin from 4.3 to 4.4

Commits
  • e4e71f4 [maven-release-plugin] prepare release license-maven-plugin-4.4
  • 666ac0f [GA] Update snapshot report
  • 071a373 Bump maven-plugin.version from 3.12.0 to 3.13.0
  • 14a1a99 [GHA] Adjust macos for java 8 to use zulu
  • 8483613 [GHA] Bump maven consumer run to 3.6.3 now
  • f716711 [GHA] Bump maven wrapper to 3.3.1
  • 0f8615a [pom] Require maven 3.6.3 per maven support
  • da39634 [mvn] Update maven wrapper to 3.3.1
  • bf73bba [renovate] update deprecated config
  • 0a0a13c Bump com.google.guava:guava from 33.1.0-jre to 33.2.0-jre
  • Additional commits viewable in compare view

Updates org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.12

Release notes

Sourced from org.jacoco:jacoco-maven-plugin's releases.

0.8.12

New Features

  • JaCoCo now officially supports Java 22 (GitHub #1596).
  • Experimental support for Java 23 class files (GitHub #1553).

Fixed bugs

  • Branches added by the Kotlin compiler for functions with default arguments and having more than 32 parameters are filtered out during generation of report (GitHub #1556).
  • Branch added by the Kotlin compiler version 1.5.0 and above for reading from lateinit property is filtered out during generation of report (GitHub #1568).

Non-functional Changes

  • JaCoCo now depends on ASM 9.7 (GitHub #1600).
Commits

Updates com.github.jknack:handlebars from 4.3.1 to 4.4.0

Release notes

Sourced from com.github.jknack:handlebars's releases.

handlebars 4.4.0

Happy to announce a new release! 🚀 🎉

  • #3228 kotlin: mount of coroutine routes doesn't work

Changes

TODO

  • document package change names required for Java Modules

Support my work

Commits
  • dda4d71 v4.4.0
  • d840749 build: release to central action
  • 878e965 build: rename sonatype profile to central
  • 7914400 build: rename tests module
  • d8ff863 java modules: convert missing jackson module
  • 0864c16 docs: update doc to reflect Java 17 support
  • d09b3c8 java modules: modularize handlebars modules
  • cd2d035 build: update maven plugin dependencies
  • 5df47e3 build: spring remove vulnerability
  • 726db2e build: update maven plugin dependencies
  • Additional commits viewable in compare view

Updates org.mitre.dsmiley.httpproxy:smiley-http-proxy-servlet from 1.12.1 to 2.0

Release notes

Sourced from org.mitre.dsmiley.httpproxy:smiley-http-proxy-servlet's releases.

2.0

#231: Added support of preserveCookiePath configuration parameter. It allows to keep cookie path unchanged in Set-Cookie server response header.

#237: Switched to the jakarta servlet-api. However, legacy javax servlet-api support is still available via the javax classifier.

#240: Require Java 11 as the minimum version

Changelog

Sourced from org.mitre.dsmiley.httpproxy:smiley-http-proxy-servlet's changelog.

Version 2.0 released on 2023-06-28

#231: Added support of preserveCookiePath configuration parameter. It allows to keep cookie path unchanged in Set-Cookie server response header.

#237: Switched to the jakarta servlet-api. However, legacy javax servlet-api support is still available via the javax classifier.

#240: Require Java 11 as the minimum version

Commits
  • cdac071 [maven-release-plugin] prepare release smiley-http-proxy-servlet-2.0
  • f3eaf30 Require Java 11. And bump build versions (#240)
  • 43e7680 Migrate to jakarta namespace (#238)
  • 5317093 preserveCookiePath configuration parameter support added. (#231)
  • 7ad6d44 Cooky "Secure" boolean should match that of the proxy (only if HTTPS) (#228)
  • 925c141 Releases 1.12.1
  • 604f7d1 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates org.projectlombok:lombok from 1.18.30 to 1.18.32

Changelog

Sourced from org.projectlombok:lombok's changelog.

v1.18.32 (March 20th, 2024)

  • PLATFORM: Initial JDK22 support added.
  • PLAFTORM Added support for Eclipse 2024-03. [Issue #3620](projectlombok/lombok#3620).
  • PLATFORM: Added support for recent versions of eclipse (released Q4 2023 or later or so) which would cause failures in the eclipse logs such as java.lang.NoSuchMethodError: 'java.lang.StringBuffer org.eclipse.jdt…. [Issue #3564](projectlombok/lombok#3564).
  • FEATURE: @Locked has been introduced. Like @Synchronized but with java.util.concurrent.locks locks instead of the synchronized primitive. Thanks, Pim van der Loos for the PR! [Issue #3506](projectlombok/lombok#3506).
  • NECROMANCY: Inlining a generated getter in eclipse would result in eclipse incorrectly replacing calls with @Getter instead of the actual field's name. [Issue #562](projectlombok/lombok#562). This issue is almost old enough to drink. Points for dedication go to Rawi for fixing this one.
  • BUGFIX: When @SuperBuilder was used on a type with an annotated generic type, it would error wrong number of type arguments. [Issue #3592](projectlombok/lombok#3592).
  • BUGFIX: It was possible to create an infinite build loop using @ExtensionMethod. [Issue #3225](projectlombok/lombok#3225).
  • BUGFIX: Using @Getter(lazy=true) would fail if the expression contained a variable called value. [Issue #2917](projectlombok/lombok#2917).
  • BUGFIX: Many lombok features wouldn't work properly on records contained within an outer type unless you explicitly marked it static. [Issue #3497](projectlombok/lombok#3497) [Issue #3559](projectlombok/lombok#3559).
  • BUGFIX: Eclipse projects using the com.pro-crafting.tools:jasperreports-plugin will now compile.
  • BUGFIX: @FieldNameConstants now works when generated fields are involved. [Issue #3529](projectlombok/lombok#3529).
  • IMPROBABLE BREAKING CHANGE: For JSpecify, the package name changed from org.jspecify.nullness to org.jspecify.annotations, which might lead to a different null analysis. [Issue #3608](projectlombok/lombok#3608).
Commits
  • 2618848 [release] pre-release version bump
  • 5719fde Update changelog in preparation for the upcoming release
  • 1b713ad Add eclipse 2024-03 as test target
  • 521be03 Remove unused string literal code
  • 3b20b70 Support @​Delegate in eclipse 2024-03
  • 98cdf67 Javadoc support for eclipse 2024-03
  • e4824cb Fix Javadoc in Eclipse
  • c93400d [fixes #2917] Use $value instead of value in lazy getter
  • 23307eb [jdk22] Adds support for unnamed variables (JEP 456)
  • a54ec70 Document using jdk22 GA
  • Additional commits viewable in compare view

Updates org.codehaus.groovy:groovy-json from 3.0.20 to 3.0.21

Commits

Updates org.codehaus.groovy:groovy-xml from 3.0.20 to 3.0.21

Commits

Updates org.codehaus.groovy:groovy-jaxb from 3.0.20 to 3.0.21

Commits

Updates org.codehaus.groovy:groovy-xml from 3.0.20 to 3.0.21

Commits

Updates org.codehaus.groovy:groovy-jaxb from 3.0.20 to 3.0.21

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

dependabot[bot] avatar May 07 '24 15:05 dependabot[bot]