Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the dependencies group with 10 updates #1712

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 18, 2023

Bumps the dependencies group with 10 updates:

Package From To
org.apache.commons:commons-dbcp2 2.9.0 2.10.0
org.eclipse.jetty:jetty-servlet 10.0.15 10.0.16
org.keycloak:keycloak-servlet-filter-adapter 22.0.1 22.0.3
org.liquibase:liquibase-core 4.23.1 4.23.2
org.slf4j:jul-to-slf4j 2.0.7 2.0.9
org.slf4j:slf4j-api 2.0.7 2.0.9
org.testcontainers:junit-jupiter 1.18.3 1.19.0
org.testcontainers:postgresql 1.18.3 1.19.0
com.diffplug.spotless:spotless-maven-plugin 2.38.0 2.39.0
org.apache.maven.plugins:maven-javadoc-plugin 3.5.0 3.6.0

Updates org.apache.commons:commons-dbcp2 from 2.9.0 to 2.10.0

Updates org.eclipse.jetty:jetty-servlet from 10.0.15 to 10.0.16

Release notes

Sourced from org.eclipse.jetty:jetty-servlet's releases.

10.0.16

Security Updates

This release addresses:

Special Thanks to the following Eclipse Jetty community members

Changelog

  • #10397 - Iso88591StringBuilder.append seems to have a logic error
  • #10388 - Jetty10 inetaccess mod started error
  • #10352 - Jetty accepts "+" prefixed value in Content-Length (CVE-2023-40167)
  • #10329 - Various cleanups in HttpParser
  • #10271 - jetty.sh does not stop jetty anymore
  • #10211 - NPE in ArrayByteBufferPool.findOldestEntry()
  • #10176 - cleanups of DateCache
  • #10160 - Verify PROXY_AUTHENTICATION is sent to forward proxies
  • #10145 - WritePendingException over HTTP/2 tunnel
  • #10143 - Startup fails due to IllegalArgumentException: Comparison method violates its general contract
  • #10135 - Websocket: Using PerMessageDeflateExtension and flush in batchMode send FLUSH_FRAME to client.
  • #10105 - Document that Request objects are not reusable
  • #10086 - Revisiting ProxyConfiguration.getProxies()
  • #10066 - Allow SAXParserFactory or SAXParser to be configured in Jetty's XmlParser class - Allows for GHSA-58qw-p7qm-5rvh workaround
  • #9997 - No progress during Gzip Request Inflation results in bogus error
  • #9947 - Cannot invoke "org.eclipse.jetty.io.ManagedSelector.getTotalKeys()" because "selector" is null (@​strogiyotec)
  • #9938 - Bulletproof AbstractProxyServlet#destory() to make it easier to write (@​garydgregory)
  • #9895 - A MessageTooLargeException doesn't close a WebSocket connection
  • #9887 - Deprecate CGI Servlet (CVE-2023-36479)
  • #9798 - review and cleanup of HTTP/3 QPACK Integer and String encoding
  • #9777 - CrossOriginFilter does not return Vary header on no-cors mode
  • #9761 - H3: Fix racy read from stream-less channel
  • #9749 - HTTP/2 improvements.
  • #9741 - Review of websocket parser, improve testing & comments.
  • #9728 - Fixes to QPACK configuration from SETTINGS frames.
  • #9715 - deprecate PushSessionCacheFilter
  • #9685 - Jetty doesn't set the date header on error responses
  • #9682 - RetainableByteBuffer buffer release bug in WebSocket
  • #9554 - Move (qpack/hpack) HuffmanDecoder / HuffmanEncoder / NBitInteger* to common location
  • #9476 - onCompleteFailure called multiple times
  • #8926 - HttpClient GZIPContentDecoder should remove Content-Length and Content-Encoding: gzip
  • #8556 - ServletContext.getSessionTimeout() incorrectly throws IllegalStateException

... (truncated)

Commits

Updates org.keycloak:keycloak-servlet-filter-adapter from 22.0.1 to 22.0.3

Updates org.liquibase:liquibase-core from 4.23.1 to 4.23.2

Release notes

Sourced from org.liquibase:liquibase-core's releases.

Liquibase v4.23.2

Liquibase 4.23.2 is a patch release.

🐛 Bug Fixes 🛠

Changelog

Sourced from org.liquibase:liquibase-core's changelog.

Liquibase 4.23.2 is a patch release

Bug Fixes

Changes in version 4.23.1 (2023.08.09)

Commits
  • ae4f651 Merge pull request #4887 from liquibase/4-23-2-release_notes
  • 843f116 Release notes for 4.23.2
  • b3fb003 Tweaked exception message for invalid formatted SQL file (#4870)
  • 727c540 DAT-15857 - Fix for checksum upgrade in runWith change sets (#4874)
  • acfe8ed reset master to 4.23.1 (d9a4a92750653a4dacafbabe41a004a3188717b5) (#4873)
  • ad6517d Implement showSummaryOutput parameter (#4574)
  • 4e3a2d6 Improve update summary usability (#4395)
  • cb05bea Handle XML data types for DB2 DAT-12878 (#4827)
  • c294bcf More consistent message when included file is empty DAT-15551 (#4812)
  • 95ee61d Remove duplicated arguments (DAT-15461) (#4713)
  • Additional commits viewable in compare view

Updates org.slf4j:jul-to-slf4j from 2.0.7 to 2.0.9

Updates org.slf4j:slf4j-api from 2.0.7 to 2.0.9

Updates org.testcontainers:junit-jupiter from 1.18.3 to 1.19.0

Release notes

Sourced from org.testcontainers:junit-jupiter's releases.

1.19.0

Testcontainers for Java 1.19.0

Core

Modules

ClickHouse

Elasticsearch

DB2

GCloud

JUnit Jupiter

Kafka

See https://java.testcontainers.org/modules/kafka/

MS SQL Server

QuestDB

... (truncated)

Commits

Updates org.testcontainers:postgresql from 1.18.3 to 1.19.0

Release notes

Sourced from org.testcontainers:postgresql's releases.

1.19.0

Testcontainers for Java 1.19.0

Core

Modules

ClickHouse

Elasticsearch

DB2

GCloud

JUnit Jupiter

Kafka

See https://java.testcontainers.org/modules/kafka/

MS SQL Server

QuestDB

... (truncated)

Commits

Updates com.diffplug.spotless:spotless-maven-plugin from 2.38.0 to 2.39.0

Changelog

Sourced from com.diffplug.spotless:spotless-maven-plugin's changelog.

[2.39.0] - 2023-05-24

Added

  • Jvm.Support now accepts -SNAPSHOT versions, treated as the non-SNAPSHOT. (#1583)
  • Support Rome as a formatter for JavaScript and TypeScript code. Adds a new rome step to javascript and typescript formatter configurations. (#1663)
  • Add semantics-aware Java import ordering (i.e. sort by package, then class, then member). (#522)

Fixed

  • Fixed a regression which changed the import sorting order in googleJavaFormat introduced in 2.38.0. (#1680)
  • Equo-based formatters now work on platforms unsupported by Eclipse such as PowerPC (fixes durian-swt#20)
  • When P2 download fails, indicate the responsible formatter. (#1698)

Changes

  • Equo-based formatters now download metadata to ~/.m2/repository/dev/equo/p2-data rather than ~/.equo, and for CI machines without a home directory the p2 data goes to $GRADLE_USER_HOME/caches/p2-data. (#1714)
  • Bump default googleJavaFormat version to latest 1.16.0 -> 1.17.0. (#1710)
  • Bump default ktfmt version to latest 0.43 -> 0.44. (#1691)
  • Bump default ktlint version to latest 0.48.2 -> 0.49.1. (#1696)
    • Dropped support for ktlint 0.46.x following our policy of supporting two breaking changes at a time.
  • Bump default sortpom version to latest 3.0.0 -> 3.2.1. (#1675)
Commits

Updates org.apache.maven.plugins:maven-javadoc-plugin from 3.5.0 to 3.6.0

Release notes

Sourced from org.apache.maven.plugins:maven-javadoc-plugin's releases.

3.6.0

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

👻 Maintenance

... (truncated)

Commits
  • 7548066 [maven-release-plugin] prepare release maven-javadoc-plugin-3.6.0
  • 77adc47 [MJAVADOC-642] Make offline mode configurable (#238)
  • 24362d2 [MJAVADOC-742] Fix resolution of docletArtifacts (#186)
  • bee4197 fix jenkins link (#237)
  • 9830bdc Fix build on jenkins
  • 6f30bed [MJAVADOC-642] Make offline mode configurable (#232)
  • e4023d0 [JAVADOC-771] Upgrade Parent to 40 (#234)
  • 7904e45 [MJAVADOC-772] Refresh download page
  • 87c2424 Bump org.apache.maven:maven-core (#226)
  • 83ab01b Use 3.6.0 as release version (#233)
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
org.eclipse.jetty:jetty-servlet [>= 11.a, < 12]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| org.apache.commons:commons-dbcp2 | `2.9.0` | `2.10.0` |
| [org.eclipse.jetty:jetty-servlet](https://github.com/eclipse/jetty.project) | `10.0.15` | `10.0.16` |
| org.keycloak:keycloak-servlet-filter-adapter | `22.0.1` | `22.0.3` |
| [org.liquibase:liquibase-core](https://github.com/liquibase/liquibase) | `4.23.1` | `4.23.2` |
| org.slf4j:jul-to-slf4j | `2.0.7` | `2.0.9` |
| org.slf4j:slf4j-api | `2.0.7` | `2.0.9` |
| [org.testcontainers:junit-jupiter](https://github.com/testcontainers/testcontainers-java) | `1.18.3` | `1.19.0` |
| [org.testcontainers:postgresql](https://github.com/testcontainers/testcontainers-java) | `1.18.3` | `1.19.0` |
| [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) | `2.38.0` | `2.39.0` |
| [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) | `3.5.0` | `3.6.0` |


Updates `org.apache.commons:commons-dbcp2` from 2.9.0 to 2.10.0

Updates `org.eclipse.jetty:jetty-servlet` from 10.0.15 to 10.0.16
- [Release notes](https://github.com/eclipse/jetty.project/releases)
- [Commits](jetty/jetty.project@jetty-10.0.15...jetty-10.0.16)

Updates `org.keycloak:keycloak-servlet-filter-adapter` from 22.0.1 to 22.0.3

Updates `org.liquibase:liquibase-core` from 4.23.1 to 4.23.2
- [Release notes](https://github.com/liquibase/liquibase/releases)
- [Changelog](https://github.com/liquibase/liquibase/blob/master/changelog.txt)
- [Commits](liquibase/liquibase@v4.23.1...v4.23.2)

Updates `org.slf4j:jul-to-slf4j` from 2.0.7 to 2.0.9

Updates `org.slf4j:slf4j-api` from 2.0.7 to 2.0.9

Updates `org.testcontainers:junit-jupiter` from 1.18.3 to 1.19.0
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.18.3...1.19.0)

Updates `org.testcontainers:postgresql` from 1.18.3 to 1.19.0
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.18.3...1.19.0)

Updates `com.diffplug.spotless:spotless-maven-plugin` from 2.38.0 to 2.39.0
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@lib/2.38.0...lib/2.39.0)

Updates `org.apache.maven.plugins:maven-javadoc-plugin` from 3.5.0 to 3.6.0
- [Release notes](https://github.com/apache/maven-javadoc-plugin/releases)
- [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.5.0...maven-javadoc-plugin-3.6.0)

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-dbcp2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.eclipse.jetty:jetty-servlet
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.keycloak:keycloak-servlet-filter-adapter
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.liquibase:liquibase-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.slf4j:jul-to-slf4j
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.slf4j:slf4j-api
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.testcontainers:junit-jupiter
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.testcontainers:postgresql
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-javadoc-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 18, 2023
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 25, 2023

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Sep 25, 2023
@dependabot dependabot bot deleted the dependabot/maven/v2.1.x/dependencies-961df3242e branch September 25, 2023 06:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants