Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the dependencies group with 7 updates #1701

Closed
wants to merge 1 commit into from
Closed

Bump the dependencies group with 7 updates #1701

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 4, 2023 •
edited
Loading

Bumps the dependencies group with 7 updates:

Package From To
org.apache.commons:commons-dbcp2 2.9.0 2.10.0
org.eclipse.jetty:jetty-servlet 10.0.15 10.0.16
org.slf4j:jul-to-slf4j 2.0.7 2.0.9
org.slf4j:slf4j-api 2.0.7 2.0.9
org.testcontainers:junit-jupiter 1.18.3 1.19.0
org.testcontainers:postgresql 1.18.3 1.19.0
com.diffplug.spotless:spotless-maven-plugin 2.38.0 2.39.0

Updates org.apache.commons:commons-dbcp2 from 2.9.0 to 2.10.0

Updates org.eclipse.jetty:jetty-servlet from 10.0.15 to 10.0.16

Release notes

Sourced from org.eclipse.jetty:jetty-servlet's releases.

10.0.16

Security Updates

Special Thanks to the following Eclipse Jetty community members

Changelog

  • #10397 - Iso88591StringBuilder.append seems to have a logic error
  • #10388 - Jetty10 inetaccess mod started error
  • #10329 - Various cleanups in HttpParser
  • #10271 - jetty.sh does not stop jetty anymore
  • #10211 - NPE in ArrayByteBufferPool.findOldestEntry()
  • #10176 - cleanups of DateCache
  • #10160 - Verify PROXY_AUTHENTICATION is sent to forward proxies
  • #10145 - WritePendingException over HTTP/2 tunnel
  • #10143 - Startup fails due to IllegalArgumentException: Comparison method violates its general contract
  • #10135 - Websocket: Using PerMessageDeflateExtension and flush in batchMode send FLUSH_FRAME to client.
  • #10105 - Document that Request objects are not reusable
  • #10086 - Revisiting ProxyConfiguration.getProxies()
  • #10066 - Allow SAXParserFactory or SAXParser to be configured in Jetty's XmlParser class - Allows for GHSA-58qw-p7qm-5rvh workaround
  • #9997 - No progress during Gzip Request Inflation results in bogus error
  • #9947 - Cannot invoke "org.eclipse.jetty.io.ManagedSelector.getTotalKeys()" because "selector" is null (@​strogiyotec)
  • #9938 - Bulletproof AbstractProxyServlet#destory() to make it easier to write (@​garydgregory)
  • #9895 - A MessageTooLargeException doesn't close a WebSocket connection
  • #9887 - Deprecate CGI Servlet
  • #9798 - review and cleanup of HTTP/3 QPACK Integer and String encoding
  • #9777 - CrossOriginFilter does not return Vary header on no-cors mode
  • #9761 - H3: Fix racy read from stream-less channel
  • #9749 - HTTP/2 improvements.
  • #9741 - Review of websocket parser, improve testing & comments.
  • #9728 - Fixes to QPACK configuration from SETTINGS frames.
  • #9715 - deprecate PushSessionCacheFilter
  • #9685 - Jetty doesn't set the date header on error responses
  • #9682 - RetainableByteBuffer buffer release bug in WebSocket
  • #9554 - Move (qpack/hpack) HuffmanDecoder / HuffmanEncoder / NBitInteger* to common location
  • #9476 - onCompleteFailure called multiple times
  • #8926 - HttpClient GZIPContentDecoder should remove Content-Length and Content-Encoding: gzip
  • #8556 - ServletContext.getSessionTimeout() incorrectly throws IllegalStateException
  • #8405 - Servlet 3.1 ReadListener.onAllDataRead() is called twice under h2 or h2c if the server doesn't respond within 30s
  • #7091 - Add SOCKS5 support (@​huisongma)
Commits

Updates org.slf4j:jul-to-slf4j from 2.0.7 to 2.0.9

Updates org.slf4j:slf4j-api from 2.0.7 to 2.0.9

Updates org.testcontainers:junit-jupiter from 1.18.3 to 1.19.0

Release notes

Sourced from org.testcontainers:junit-jupiter's releases.

1.19.0

Testcontainers for Java 1.19.0

Core

Modules

ClickHouse

Elasticsearch

DB2

GCloud

JUnit Jupiter

Kafka

See https://java.testcontainers.org/modules/kafka/

MS SQL Server

QuestDB

... (truncated)

Commits

Updates org.testcontainers:postgresql from 1.18.3 to 1.19.0

Release notes

Sourced from org.testcontainers:postgresql's releases.

1.19.0

Testcontainers for Java 1.19.0

Core

Modules

ClickHouse

Elasticsearch

DB2

GCloud

JUnit Jupiter

Kafka

See https://java.testcontainers.org/modules/kafka/

MS SQL Server

QuestDB

... (truncated)

Commits

Updates com.diffplug.spotless:spotless-maven-plugin from 2.38.0 to 2.39.0

Changelog

Sourced from com.diffplug.spotless:spotless-maven-plugin's changelog.

[2.39.0] - 2023-05-24

Added

  • Jvm.Support now accepts -SNAPSHOT versions, treated as the non-SNAPSHOT. (#1583)
  • Support Rome as a formatter for JavaScript and TypeScript code. Adds a new rome step to javascript and typescript formatter configurations. (#1663)
  • Add semantics-aware Java import ordering (i.e. sort by package, then class, then member). (#522)

Fixed

  • Fixed a regression which changed the import sorting order in googleJavaFormat introduced in 2.38.0. (#1680)
  • Equo-based formatters now work on platforms unsupported by Eclipse such as PowerPC (fixes durian-swt#20)
  • When P2 download fails, indicate the responsible formatter. (#1698)

Changes

  • Equo-based formatters now download metadata to ~/.m2/repository/dev/equo/p2-data rather than ~/.equo, and for CI machines without a home directory the p2 data goes to $GRADLE_USER_HOME/caches/p2-data. (#1714)
  • Bump default googleJavaFormat version to latest 1.16.0 -> 1.17.0. (#1710)
  • Bump default ktfmt version to latest 0.43 -> 0.44. (#1691)
  • Bump default ktlint version to latest 0.48.2 -> 0.49.1. (#1696)
    • Dropped support for ktlint 0.46.x following our policy of supporting two breaking changes at a time.
  • Bump default sortpom version to latest 3.0.0 -> 3.2.1. (#1675)
Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
org.eclipse.jetty:jetty-servlet [>= 11.a, < 12]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dependencies group with 7 updates
4a400d0 
Bumps the dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| org.apache.commons:commons-dbcp2 | `2.9.0` | `2.10.0` |
| [org.eclipse.jetty:jetty-servlet](https://github.com/eclipse/jetty.project) | `10.0.15` | `10.0.16` |
| org.slf4j:jul-to-slf4j | `2.0.7` | `2.0.9` |
| org.slf4j:slf4j-api | `2.0.7` | `2.0.9` |
| [org.testcontainers:junit-jupiter](https://github.com/testcontainers/testcontainers-java) | `1.18.3` | `1.19.0` |
| [org.testcontainers:postgresql](https://github.com/testcontainers/testcontainers-java) | `1.18.3` | `1.19.0` |
| [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) | `2.38.0` | `2.39.0` |


Updates `org.apache.commons:commons-dbcp2` from 2.9.0 to 2.10.0

Updates `org.eclipse.jetty:jetty-servlet` from 10.0.15 to 10.0.16
- [Release notes](https://github.com/eclipse/jetty.project/releases)
- [Commits](jetty/jetty.project@jetty-10.0.15...jetty-10.0.16)

Updates `org.slf4j:jul-to-slf4j` from 2.0.7 to 2.0.9

Updates `org.slf4j:slf4j-api` from 2.0.7 to 2.0.9

Updates `org.testcontainers:junit-jupiter` from 1.18.3 to 1.19.0
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.18.3...1.19.0)

Updates `org.testcontainers:postgresql` from 1.18.3 to 1.19.0
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.18.3...1.19.0)

Updates `com.diffplug.spotless:spotless-maven-plugin` from 2.38.0 to 2.39.0
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@lib/2.38.0...lib/2.39.0)

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-dbcp2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.eclipse.jetty:jetty-servlet
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.slf4j:jul-to-slf4j
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.slf4j:slf4j-api
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.testcontainers:junit-jupiter
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.testcontainers:postgresql
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 4, 2023
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 13, 2023

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Sep 13, 2023
@dependabot dependabot bot deleted the dependabot/maven/v2.1.x/dependencies-f7359d5667 branch September 13, 2023 07:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants