Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: [DevOps] bump the production-minor-patch group with 6 updates #710

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 3, 2025

Bumps the production-minor-patch group with 6 updates:

Package From To
org.wiremock:wiremock 3.10.0 3.11.0
commons-codec:commons-codec 1.17.2 1.18.0
io.vavr:vavr 0.10.5 0.10.6
com.google.code.gson:gson 2.11.0 2.12.1
com.auth0:java-jwt 4.4.0 4.5.0
org.apache.httpcomponents.client5:httpclient5 5.4.1 5.4.2

Updates org.wiremock:wiremock from 3.10.0 to 3.11.0

Release notes

Sourced from org.wiremock:wiremock's releases.

3.11.0

🚀 New Features

🐞 Bug fixes

📦 Dependency updates

✍ Other changes

Commits
  • dd8e739 Fixed test broken by suppression of HTTPS upgrade by the Apache HTTP Client
  • a7d9ac8 Bumped minor version
  • bd17065 Merge pull request #2918 from ianprime0509/xml-default-instance
  • 63a3a12 Update after-pattern.yaml to fix typo (#2949)
  • 437e3ec Disable problematic protocol update for httpclient 5.4 (#2951)
  • c3f3319 Bump jetty 12 version to 12.0.16 (#2947)
  • 9ccb1c8 improve performance of EqualToXmlPattern. (#2944)
  • f913265 Make EqualToXmlPattern namespace aware by default. (#2945)
  • 6217b77 Merge pull request #2943 from Ashish-CodeJourney/master
  • afe7de8 Merge pull request #1 from Ashish-CodeJourney/Ashish-CodeJourney-patch-1
  • Additional commits viewable in compare view

Updates commons-codec:commons-codec from 1.17.2 to 1.18.0

Changelog

Sourced from commons-codec:commons-codec's changelog.

Apache Commons Codec 1.18.0 Release Notes

The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.18.0.

The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.

This is a feature and maintenance release. Java 8 or later is required.

New features

  •         Add Base32.Builder.setHexDecodeTable(boolean). Thanks to Gary Gregory, Julian Reschke.
    
  •         Add Base32.Builder.setHexEncodeTable(boolean). Thanks to Gary Gregory, Julian Reschke.
    

Changes

  •         Bump org.apache.commons:commons-parent from 78 to 79. Thanks to Gary Gregory.
    

For complete information on Apache Commons Codec, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Codec website:

https://commons.apache.org/proper/commons-codec/

Download page: https://commons.apache.org/proper/commons-codec/download_codec.cgi


Commits
  • 5f76abb Update contributing file from user feedback
  • a38de95 Prepare for the next release candidate
  • 0689dc8 Prepare for the next release candidate
  • 4098222 Port from Doxia 1 to 2
  • ebb29e9 Make test fixture package private
  • 110a9f8 Don't need to end a paragraph with an extra line break
  • 6444237 Remove background color from site page
  • 9062af4 Merge branch 'master' of
  • 963ee73 Include more in the source assembly
  • 94b9c51 Add a file extension to TODO file
  • Additional commits viewable in compare view

Updates io.vavr:vavr from 0.10.5 to 0.10.6

Release notes

Sourced from io.vavr:vavr's releases.

Patch Release 0.10.6

This release brings Virtual-Thread-friendliness and documentation updates.

This is the last planned patch release for the 0.10.x train. 0.11.x incoming!

Changes

Full Changelog: vavr-io/vavr@v0.10.5...v0.10.6

Committers

🎉 MANY THANKS TO ALL COMMITTERS! 🎉

Commits

Updates com.google.code.gson:gson from 2.11.0 to 2.12.1

Release notes

Sourced from com.google.code.gson:gson's releases.

Gson 2.11.1

The only difference between this release and 2.11.0 is that OSGi declarations in the Gson jar now specify that com.google.errorprone.annotations is an optional dependency, not a required one. If you do not use OSGi then there is no effective change.

Gson 2.12.0

What's Changed

The biggest change is that we no longer support Java 7. People who still need to run on Java 7 will need to use an earlier version of Gson.

Other changes:

New Contributors

Full Changelog: google/gson@gson-parent-2.11.0...gson-parent-2.12.0

Commits
  • 29e3d1d [maven-release-plugin] prepare release gson-parent-2.12.1
  • be456cf Make the import of com.google.errorprone optional (#2795)
  • b2e26fa Bump the github-actions group with 3 updates (#2785)
  • 10bdd6d Simplify collection type adapters slightly. (#2791)
  • ab9c54f [maven-release-plugin] prepare for next development iteration
  • aaf7a12 [maven-release-plugin] prepare release gson-parent-2.12.0
  • a2b1c3c Allow registering adapters for JsonElement again (#2789)
  • e5dce84 Bump the maven group with 8 updates (#2784)
  • 84e5f16 Bump the maven group with 7 updates (#2777)
  • 9f3e577 Bump the github-actions group with 2 updates (#2778)
  • Additional commits viewable in compare view

Updates com.auth0:java-jwt from 4.4.0 to 4.5.0

Release notes

Sourced from com.auth0:java-jwt's releases.

4.5.0

Added

Fixed

  • empty expected audience array should throw InvalidClaimException #679 (jimmyjames)
Changelog

Sourced from com.auth0:java-jwt's changelog.

4.5.0 (2025-01-29)

Full Changelog

Added

Fixed

  • empty expected audience array should throw InvalidClaimException #679 (jimmyjames)

4.5.0 (2025-01-28)

Full Changelog

Added

Fixed

  • empty expected audience array should throw InvalidClaimException #679 (jimmyjames)

4.5.0 (2025-01-22)

Full Changelog

Added

Fixed

  • empty expected audience array should throw InvalidClaimException #679 (jimmyjames)
Commits

Updates org.apache.httpcomponents.client5:httpclient5 from 5.4.1 to 5.4.2

Changelog

Sourced from org.apache.httpcomponents.client5:httpclient5's changelog.

Release 5.4.2

This is a maintenance release that upgrades HttpCore to version 5.3.3 and fixes several regressions reported since the last release. One of the regressions could cause connection leaks and eventual connection pool exhaustion in case of proxy authentication failure when establishing a tunnel via the proxy.

Change Log

  • Upgraded HttpCore to version 5.3.3 Contributed by Oleg Kalnichevski

  • Improved internal state representation of the internal async execution runtime in order to prevent potential race conditions. Contributed by Oleg Kalnichevski

  • HTTPCLIENT-2357, regression: Classic HttpClient fails to release connection in case of a proxy authentication failure. Contributed by Oleg Kalnichevski

  • HTTPCLIENT-2355, regression: Reset protocol version in the execution context on a 200 response to CONNECT request. Contributed by Oleg Kalnichevski

  • HTTPCLIENT-2354: ResponseCachingPolicy to allow caching of responses with "must-revalidate" in shared caches with Authorization headers. The change aligns with RFC 9111 Section 5.2.2.2 (#609). Contributed by Arturo Bernal

  • Do not add Upgrade header if Connection header already present (the caller manually manages connection state). Contributed by Oleg Kalnichevski

  • Avoid logging HTTP message version where it can be a hint, not an actual protocol version Contributed by Oleg Kalnichevski

  • IDN encode hostnames with Unicode characters prior to DNS resolution (#608). Contributed by Arturo Bernal

  • HTTPCLIENT-2353: Fixed rejection of certificates with IDN encoded identities. (#607) Contributed by Arturo Bernal

Commits
  • 34f1b02 HttpClient 5.4.2 release
  • 2145d2c Updated release notes for HttpClient 5.4.2 release
  • 7e48abb Upgraded HttpCore to version 5.3.3
  • 1119d49 Disabled a test case that fails intermittently with GitHub Actions, pending r...
  • 9433bca Improved internal state representation of the internal async execution runtim...
  • 7f56b8e HTTPCLIENT-2357, regression: Classic HttpClient fails to release connect in c...
  • 8958b36 HTTPCLIENT-2355, regression: Reset protocol version in the execution context ...
  • f7f8069 Upgraded HttpCore to version 5.3.2
  • d048550 Fix HTTPCLIENT-2354 by updating ResponseCachingPolicy to allow caching of res...
  • 5ab09ea Do not add Upgrade header if Connection header already present (the calle...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Feb 3, 2025
@bot-sdk-js bot-sdk-js enabled auto-merge (squash) February 3, 2025 10:17
bot-sdk-js
bot-sdk-js previously approved these changes Feb 3, 2025
Bumps the production-minor-patch group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [org.wiremock:wiremock](https://github.com/wiremock/wiremock) | `3.10.0` | `3.11.0` |
| [commons-codec:commons-codec](https://github.com/apache/commons-codec) | `1.17.2` | `1.18.0` |
| [io.vavr:vavr](https://github.com/vavr-io/vavr) | `0.10.5` | `0.10.6` |
| [com.google.code.gson:gson](https://github.com/google/gson) | `2.11.0` | `2.12.1` |
| [com.auth0:java-jwt](https://github.com/auth0/java-jwt) | `4.4.0` | `4.5.0` |
| [org.apache.httpcomponents.client5:httpclient5](https://github.com/apache/httpcomponents-client) | `5.4.1` | `5.4.2` |


Updates `org.wiremock:wiremock` from 3.10.0 to 3.11.0
- [Release notes](https://github.com/wiremock/wiremock/releases)
- [Commits](wiremock/wiremock@3.10.0...3.11.0)

Updates `commons-codec:commons-codec` from 1.17.2 to 1.18.0
- [Changelog](https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-codec@rel/commons-codec-1.17.2...rel/commons-codec-1.18.0)

Updates `io.vavr:vavr` from 0.10.5 to 0.10.6
- [Release notes](https://github.com/vavr-io/vavr/releases)
- [Commits](vavr-io/vavr@v0.10.5...v0.10.6)

Updates `com.google.code.gson:gson` from 2.11.0 to 2.12.1
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-parent-2.11.0...gson-parent-2.12.1)

Updates `com.auth0:java-jwt` from 4.4.0 to 4.5.0
- [Release notes](https://github.com/auth0/java-jwt/releases)
- [Changelog](https://github.com/auth0/java-jwt/blob/master/CHANGELOG.md)
- [Commits](auth0/java-jwt@4.4.0...4.5.0)

Updates `org.apache.httpcomponents.client5:httpclient5` from 5.4.1 to 5.4.2
- [Changelog](https://github.com/apache/httpcomponents-client/blob/rel/v5.4.2/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-client@rel/v5.4.1...rel/v5.4.2)

---
updated-dependencies:
- dependency-name: org.wiremock:wiremock
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: commons-codec:commons-codec
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: io.vavr:vavr
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: com.google.code.gson:gson
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: com.auth0:java-jwt
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: org.apache.httpcomponents.client5:httpclient5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/maven/main/production-minor-patch-617782ce69 branch from f1ae2b3 to 93c64be Compare February 3, 2025 10:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant