Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): bump org.jboss.logging:jboss-logging from 3.5.1.Final to 3.6.1.Final in /jans-keycloak-integration #10066

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): bump org.jboss.logging:jboss-logging from 3.5.1.Final to 3.6.1.Final in /jans-keycloak-integration #10066

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 6, 2024 •
edited
Loading

Bumps org.jboss.logging:jboss-logging from 3.5.1.Final to 3.6.1.Final.

Release notes

Sourced from org.jboss.logging:jboss-logging's releases.

3.6.1.Final

What's Changed

Full Changelog: jboss-logging/jboss-logging@3.6.0.Final...3.6.1.Final

3.6.0.Final

What's Changed

New Contributors

Full Changelog: jboss-logging/jboss-logging@3.5.3.Final...3.6.0.Final

3.5.3.Final

What's Changed

Full Changelog: jboss-logging/jboss-logging@3.5.2.Final...3.5.3.Final

3.5.2.Final

What's Changed

... (truncated)

Commits
  • 086ff9f Prepare for 3.6.1.Final release
  • 1be977b Merge pull request #118 from jboss-logging/dependabot/maven/ch.qos.logback-lo...
  • 22763fa Merge pull request #117 from jamezp/JBLOGGING-190
  • 3d2e02c [JBLOGGING-190] When required, use a privileged action to find the class in t...
  • b1f2234 Bump ch.qos.logback:logback-classic from 1.5.6 to 1.5.8
  • 51864b2 Merge pull request #115 from jboss-logging/dependabot/maven/org.junit-junit-b...
  • be4e0ea Bump org.junit:junit-bom from 5.10.2 to 5.11.0
  • 069b3b7 Next is 3.6.1.Final
  • a778362 Prepare for 3.6.0.Final.
  • 99d11e2 Fix the JavaDoc plugin.
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot requested a review from uprightech as a code owner November 6, 2024 10:49
@dependabot dependabot bot added java Pull requests that update Java code kind-dependencies Pull requests that update a dependency file labels Nov 6, 2024
@dryrunsecurity DryRunSecurity
Copy link

dryrunsecurity bot commented Nov 6, 2024 •
edited
Loading

DryRun Security Summary

The pull request updates the jboss-logging dependency version from 3.5.1.Final to 3.6.1.Final in the pom.xml file as a routine maintenance task, with no immediate security concerns.

Expand for full summary

Summary:

The code change in this pull request updates the version of the jboss-logging dependency in the pom.xml file from 3.5.1.Final to 3.6.1.Final. From an application security perspective, this change is a routine maintenance task to ensure the project is using the latest stable version of the logging library. The version update itself does not introduce any known security vulnerabilities or issues. However, it's always a good practice to review the release notes of the new version to ensure there are no security-related bug fixes or improvements that should be considered. Overall, this change appears to be a straightforward dependency update and does not raise any immediate security concerns.

Files Changed:

  • jans-keycloak-integration/pom.xml: This file has been updated to change the version of the jboss-logging dependency from 3.5.1.Final to 3.6.1.Final. This is a routine maintenance task to ensure the project is using the latest stable version of the logging library.

Code Analysis

We ran 9 analyzers against 1 file and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer Findings
Sensitive Files Analyzer 1 finding

View PR in the DryRun Dashboard.

@moabu
Copy link
Member

moabu commented Nov 7, 2024

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/maven/jans-keycloak-integration/org.jboss.logging-jboss-logging-3.6.1.Final branch from 3811448 to f1c4963 Compare November 7, 2024 03:07
@moabu
Copy link
Member

moabu commented Nov 7, 2024

@dependabot recreate

@dependabot dependabot bot force-pushed the dependabot/maven/jans-keycloak-integration/org.jboss.logging-jboss-logging-3.6.1.Final branch from f1c4963 to b7c1b94 Compare November 7, 2024 03:09
@moabu
Copy link
Member

moabu commented Nov 7, 2024

@dependabot recreate

@dependabot dependabot bot force-pushed the dependabot/maven/jans-keycloak-integration/org.jboss.logging-jboss-logging-3.6.1.Final branch from b7c1b94 to 0f69f39 Compare November 7, 2024 03:32
@dependabot dependabot bot force-pushed the dependabot/maven/jans-keycloak-integration/org.jboss.logging-jboss-logging-3.6.1.Final branch 2 times, most recently from ce1f31d to e891218 Compare November 20, 2024 13:10
@dependabot dependabot bot force-pushed the dependabot/maven/jans-keycloak-integration/org.jboss.logging-jboss-logging-3.6.1.Final branch from e891218 to c356828 Compare November 21, 2024 12:05
@dependabot
chore(deps): bump org.jboss.logging:jboss-logging from 3.5.1.Final to…
4383b1f 
… 3.6.1.Final in /jans-keycloak-integration

Dependabot couldn't find the original pull request head commit, 3811448.
@dependabot dependabot bot force-pushed the dependabot/maven/jans-keycloak-integration/org.jboss.logging-jboss-logging-3.6.1.Final branch from c356828 to fb17a1b Compare December 6, 2024 09:51
@moabu moabu force-pushed the dependabot/maven/jans-keycloak-integration/org.jboss.logging-jboss-logging-3.6.1.Final branch from fb17a1b to 506eda8 Compare December 26, 2024 19:25
@moabu moabu force-pushed the main branch 2 times, most recently from 5126af2 to aa1b2ed Compare December 27, 2024 04:55
@moabu moabu force-pushed the dependabot/maven/jans-keycloak-integration/org.jboss.logging-jboss-logging-3.6.1.Final branch from 506eda8 to 4383b1f Compare December 27, 2024 04:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@uprightech uprightech Awaiting requested review from uprightech uprightech is a code owner

@duttarnab duttarnab Awaiting requested review from duttarnab

@jgomer2001 jgomer2001 Awaiting requested review from jgomer2001

@devrimyatar devrimyatar Awaiting requested review from devrimyatar

@yuriyz yuriyz Awaiting requested review from yuriyz

@yurem yurem Awaiting requested review from yurem

@yuriyzz yuriyzz Awaiting requested review from yuriyzz

@moabu moabu Awaiting requested review from moabu

@iromli iromli Awaiting requested review from iromli

At least 2 approving reviews are required to merge this pull request.

Assignees
No one assigned
Labels
java Pull requests that update Java code kind-dependencies Pull requests that update a dependency file
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@moabu