Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the dependabot-updates group with 4 updates #136

Merged
merged 1 commit into from
Jan 20, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 23, 2023

Bumps the dependabot-updates group with 4 updates: org.springframework.boot:spring-boot-starter-parent, org.jsoup:jsoup, io.projectreactor:reactor-test and org.jacoco:jacoco-maven-plugin.

Updates org.springframework.boot:spring-boot-starter-parent from 3.1.4 to 3.1.5

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v3.1.5

⚠️ Noteworthy Changes

  • The behavior of spring.jms.listener.concurrency has been corrected to match the documentation (#37180). If you were setting spring.jms.listener.concurrency without also setting spring.jms.listener.max-concurrency, please review your configuration when upgrading.

🐞 Bug Fixes

  • Constructor binding with a custom collection type does not work #37941
  • @Order does not work on (CommandLine|Application)Runner @Bean methods #37938
  • @ComponentScan on a test class is processed when creating a test context but is not included in the context's cache key #37924
  • Restarter creates memory leak in tests #37920
  • AOT processing fails when a @WebServlet found by scanning is annotated with @MultipartConfig #37883
  • Gradle plugin uses to-be-deprecated API for getting and setting file permissions #37881
  • Task executor metrics are not registered when using lazy initialization #37838
  • Gradle AOT processing tasks do not use project's Java toolchain #37826
  • @ServiceConnection is not found when used in an interface implemented by a test class #37671
  • Image building can fail when using GraalVM compilation and a remote Docker daemon #37665
  • NPE from Jetty's WebSocketUpgradeFilter when testing with @SpringBootTest, @AutoConfigureMockMvc, and MockMvc #37663
  • @WebListener does not work in a native image without additional reflection hints #37635
  • AspectJ transaction management with compile-time weaving does not work with spring.main.lazy-initialization=true #37632
  • IPv6 IP addresses cannot be used with RabbitMQ #37619
  • Unwanted Logback status messages are sometimes logged during startup #37600
  • Managed types for Neo4j are not used in Neo4j Data auto configuration #37594
  • fileMode and dirMode are not applied to all entries in an archive produced by BootJar #37588
  • Application fails to start when an optional config import cannot be resolved #37570
  • Contrary to the documentation, setting spring.jms.listener.concurrency alone configures the maximum concurrency #37553
  • Dependency management for kafka-server-common with a test classifier is missing #37542
  • RepackageMojo doesn't support 1 digit numerical values for project.build.outputTimestamp #37535

📔 Documentation

  • Document that 'spring.docker.compose.file' can be used to share Docker Compose configuration between applications #37886
  • Remove link to LiveReload website due to timeout #37691
  • Refer to ActiveMQ as ActiveMQ "Classic" #37615
  • Removal of spring.webflux.multipart.streaming is not documented #37609
  • Default value of spring.jmx.registration-policy is not documented #37596
  • Update documentation to align with Mockito 5 using the inline mock maker by default #37561
  • Add Javadoc since for AbstractAotMojo.getSession() #37547
  • Document support for Java 21 #37532
  • Use more idiomatic Kotlin in example for "Map Health Indicators to Micrometer Metrics" #37510

🔨 Dependency Upgrades

  • Upgrade to Byte Buddy 1.14.9 #37853
  • Upgrade to Couchbase Client 3.4.11 #37759
  • Upgrade to Dropwizard Metrics 4.2.21 #37897
  • Upgrade to Hibernate 6.2.13.Final #37854
  • Upgrade to HttpCore5 5.2.3 #37762
  • Upgrade to Infinispan 14.0.19.Final #37855
  • Upgrade to Jackson Bom 2.15.3 #37898

... (truncated)

Commits

Updates org.jsoup:jsoup from 1.16.1 to 1.16.2

Release notes

Sourced from org.jsoup:jsoup's releases.

jsoup 1.16.2

... (truncated)

Changelog

Sourced from org.jsoup:jsoup's changelog.

jsoup changelog

Release 1.16.2 [PENDING]

  • Improvement: optimized the performance of complex CSS selectors, by adding a cost-based query planner. Evaluators are sorted by their relative execution cost, and executed in order of lower to higher cost. This speeds the matching process by ensuring that simpler evaluations (such as a tag name match) are conducted prior to more complex evaluations (such as an attribute regex, or a deep child scan with a :has).

  • Improvement: added support for and tags (and their children). This includes tag namespaces and case preservation on applicable tags and attributes. jhy/jsoup#2008

  • Improvement: when converting jsoup Documents to W3C Documents in W3CDom, HTML documents will be placed in the http://www.w3.org/1999/xhtml namespace by default, per the HTML5 spec. This can be controlled by setting W3CDom#namespaceAware(false). jhy/jsoup#1848

  • Improvement: speed optimized the Structural Evaluators by memoizing previous evaluations. Particularly the ~ (any preceding sibling) and :nth-of-type selectors are improved. jhy/jsoup#1956

  • Improvement: tweaked the performance of the Element nextElementSibling, previousElementSibling, firstElementSibling, lastElementSibling, firstElementChild, and lastElementChild. They now inplace filter/skip in the child-node list, vs having to allocate and scan a complete Element filtered list.

  • Improvement: optimized internal methods that previously called Element.children() to use filter/skip child-node list accessors instead, reducing new Element List allocations.

  • Improvement: tweaked the performance of parsing :pseudo selectors.

  • Improvement: when using the :empty pseudo-selector, blank textnodes are now considered empty. Previously, an element containing any whitespace was not considered empty. jhy/jsoup#1976

  • Improvement: in forms, should be excluded from formData() (and hence from form submissions). jhy/jsoup#2010

  • Improvement: in Safelist, made isSafeTag and isSafeAttribute public methods, for extensibility. jhy/jsoup#1780

  • Bugfix: form elements and empty elements (such as img) did not have their attributes de-duplicated. jhy/jsoup#1950

  • Bugfix: if Document.OutputSettings was cloned from a clone, an NPE would be thrown when used. jhy/jsoup#1964

  • Bugfix: in Jsoup.connect(url), URL paths containing a %2B were incorrectly recoded to a '+', or a '+' was recoded to a ' '. Fixed by reverting to the previous behavior of not encoding supplied paths, other than normalizing to ASCII. jhy/jsoup#1952

... (truncated)

Commits
  • db6dc74 [maven-release-plugin] prepare release jsoup-1.16.2
  • da4e275 Update some URL tests
  • 6ccd158 Escape supplemental characters correctly
  • f0eb6bd Don't recode ascii only strings
  • 9de27fa Only attempt to correct 8559 -> UTF on response headers
  • eff1521 Clear child nodes' parent on parent.empty()
  • 545145a Update testcase
  • 7a83ffe Made getEnforcedAttributes public
  • 8a59792 Make isSafe* public
  • 5f20fcc Prevent noscript tags in Safelist
  • Additional commits viewable in compare view

Updates io.projectreactor:reactor-test from 3.5.10 to 3.5.11

Release notes

Sourced from io.projectreactor:reactor-test's releases.

v3.5.11

What's Changed

⚠️ Update considerations and deprecations

✨ New features and improvements

🐞 Bug fixes

📖 Documentation, Tests and Build

🆙 Dependency Upgrades

Full Changelog: reactor/reactor-core@v3.5.10...v3.5.11

Commits

Updates org.jacoco:jacoco-maven-plugin from 0.8.10 to 0.8.11

Release notes

Sourced from org.jacoco:jacoco-maven-plugin's releases.

0.8.11

New Features

  • JaCoCo now officially supports Java 21 (GitHub #1520).
  • Experimental support for Java 22 class files (GitHub #1479).
  • Part of bytecode generated by the Java compilers for exhaustive switch expressions is filtered out during generation of report (GitHub #1472).
  • Part of bytecode generated by the Java compilers for record patterns is filtered out during generation of report (GitHub #1473).

Fixed bugs

  • Instrumentation should not cause VerifyError when the last local variable of method parameters is overridden in the method body to store a value of type long or double (GitHub #893).
  • Restore exec file compatibility with versions from 0.7.5 to 0.8.8 in case of class files with zero line numbers (GitHub #1492).

Non-functional Changes

  • jacoco-maven-plugin now requires at least Java 8 (GitHub #1466, #1468).
  • JaCoCo build now requires at least Maven 3.5.4 (GitHub #1467).
  • Maven 3.9.2 should not produce warnings for jacoco-maven-plugin (GitHub #1468).
  • JaCoCo build now requires JDK 17 (GitHub #1482).
  • JaCoCo now depends on ASM 9.6 (GitHub #1518).
Commits
  • f33756c Prepare release 0.8.11
  • 0670530 Upgrade animal-sniffer-maven-plugin to 1.23
  • 206e5be Restore exec file compatibility after upgrade of ASM to version 9.5 (#1492)
  • 36fc079 Update documentation: JDK version 21 is officially supported (#1520)
  • 7162917 Add validation tests for boolean expressions (#1505)
  • 4bc9267 Fix link to Bytecode Outline Plug-In (#1519)
  • ded62fc Upgrade ASM to 9.6 (#1518)
  • 6798260 Fix links to ASM website (#1515)
  • 4ba332f Fix misleading outdated javadoc (#1513)
  • 7ca0f0f Opcodes.RET should be processed by visitVarInsn instead of visitInsn (#...
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps the dependabot-updates group with 4 updates: [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot), [org.jsoup:jsoup](https://github.com/jhy/jsoup), [io.projectreactor:reactor-test](https://github.com/reactor/reactor-core) and [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco).


Updates `org.springframework.boot:spring-boot-starter-parent` from 3.1.4 to 3.1.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.1.4...v3.1.5)

Updates `org.jsoup:jsoup` from 1.16.1 to 1.16.2
- [Release notes](https://github.com/jhy/jsoup/releases)
- [Changelog](https://github.com/jhy/jsoup/blob/master/CHANGES)
- [Commits](jhy/jsoup@jsoup-1.16.1...jsoup-1.16.2)

Updates `io.projectreactor:reactor-test` from 3.5.10 to 3.5.11
- [Release notes](https://github.com/reactor/reactor-core/releases)
- [Commits](reactor/reactor-core@v3.5.10...v3.5.11)

Updates `org.jacoco:jacoco-maven-plugin` from 0.8.10 to 0.8.11
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.10...v0.8.11)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependabot-updates
- dependency-name: org.jsoup:jsoup
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependabot-updates
- dependency-name: io.projectreactor:reactor-test
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependabot-updates
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependabot-updates
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Oct 23, 2023
@codecov
Copy link

codecov bot commented Oct 23, 2023

Codecov Report

Merging #136 (7cf6d08) into master (c1babb0) will not change coverage.
The diff coverage is n/a.

Additional details and impacted files
@@             Coverage Diff             @@
##              master      #136   +/-   ##
===========================================
  Coverage     100.00%   100.00%           
  Complexity        55        55           
===========================================
  Files              9         9           
  Lines             95        95           
  Branches           4         4           
===========================================
  Hits              95        95           

@antpas14 antpas14 merged commit 877051b into master Jan 20, 2024
3 checks passed
@dependabot dependabot bot deleted the dependabot/maven/dependabot-updates-1d543c9018 branch January 20, 2024 09:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant