Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the build-dependencies group with 4 updates #4472

Merged
merged 1 commit into from
Jan 21, 2025
Merged

Bump the build-dependencies group with 4 updates #4472

merged 1 commit into from
Jan 21, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 21, 2025

Bumps the build-dependencies group with 4 updates: com.diffplug.spotless:spotless-maven-plugin, org.owasp:dependency-check-maven, org.assertj:assertj-core and org.postgresql:postgresql.

Updates com.diffplug.spotless:spotless-maven-plugin from 2.44.1 to 2.44.2

Release notes

Sourced from com.diffplug.spotless:spotless-maven-plugin's releases.

Maven Plugin v2.44.2

  • Eclipse-based tasks can now handle parallel configuration (#2389)
Commits

Updates org.owasp:dependency-check-maven from 12.0.0 to 12.0.1

Release notes

Sourced from org.owasp:dependency-check-maven's releases.

Version 12.0.1

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Changelog

Sourced from org.owasp:dependency-check-maven's changelog.

Version 12.0.1 (2025-01-19)

  • docs: Fix OSS Index Maven config documentation (#7322)
  • Fix OSS Index Maven config documentation
  • chore(docs): Document Gradle plugin support for failBuildOnUnusedSuppressionRule (#7307)
  • chore(docs): Correct analyzers config example to use Gradle dot-syntax (#7305)
  • fix: improve error message on improperly configured serverId credentials in settings.xml (#7313)
  • fix: Lower Basic serverId when Bearer was expected to a warning
  • fix: improve error message on improperly configured serverId credentials
  • fix: Correct nonProxyHosts support when no sys properties set (#7306)
  • core(docs): Group failBuildOnUnusedSuppressionRule flag next to suppression file configuration
  • core(docs): Update Gradle plugin documentation for failBuildOnUnusedSuppressionRule support
  • fix: Correct nonProxyHosts support when no sys properties set
  • chore(docs): Correct analyzers config example to use Gradle dot-syntax

See the full listing of changes.

Commits
  • eee5b46 build: prepare release v12.0.1
  • 8f76b42 docs: prepare release
  • 9424f85 build(deps): bump org.sonatype.goodies:package-url-java from 1.1.1 to 1.2.0 (...
  • c5e6bce build(deps): bump org.apache.maven.plugins:maven-artifact-plugin from 3.5.3 t...
  • 7181e6a build(deps): bump joda-time:joda-time from 2.10.4 to 2.13.0 (#7300)
  • 2c7b19b build(deps-dev): bump io.netty:netty-codec-http from 4.1.115.Final to 4.1.117...
  • 9502f82 build(deps): bump golang from 1.23.4-alpine to 1.23.5-alpine (#7323)
  • eb6be01 docs: Fix OSS Index Maven config documentation (#7322)
  • 7485f9f build(deps): bump golang from 1.23.4-alpine to 1.23.5-alpine
  • d883343 Fix OSS Index Maven config documentation
  • Additional commits viewable in compare view

Updates org.assertj:assertj-core from 3.27.2 to 3.27.3

Release notes

Sourced from org.assertj:assertj-core's releases.

v3.27.3

💥 Breaking Changes

Core

  • Revert "Propagate common basetype for the extracting method" #3737

    The enhancement introduced with #3673 breaks existing code on Kotlin 1.9; therefore, it has been reverted.

    As Spring Boot 3.4 currently supports Kotlin 1.9, we want to keep the same compatibility on AssertJ 3.x, while AssertJ 4.x will require Kotlin 2.x.

    Existing code relying on the changes introduced with #3673 will no longer compile and should be refactored.

🐛 Bug Fixes

Core

  • Fix StandardRepresentation regression for unquoted strings #3735

⚡ Improvements

Core

  • Add Class info to class loading strategy failures #3746

❤️ Contributors

Thanks to all the contributors who worked on this release:

@​ccrvincent

Commits
  • c928dd3 [maven-release-plugin] prepare release assertj-build-3.27.3
  • f308d95 Fix StandardRepresentation regression for unquoted strings (#3735)
  • e5959f4 Add Java and Kotlin release references
  • 3eb809d Add Kotlin EAP reference
  • b39a8cf Add Kotlin 2.1.10-RC
  • e20e40d Add Class info to failure exception (#3746)
  • 79b87f0 Revert "Propagate common basetype for the extracting method (#3673)" (#3737)
  • bf439b3 chore(deps): bump com.diffplug.spotless:spotless-maven-plugin from 2.43.0 to ...
  • 30936ca Restructure Kotlin tests, add DisplayNameGenerator
  • b5b86cc Add Kotlin cross-version job (#3732)
  • Additional commits viewable in compare view

Updates org.postgresql:postgresql from 42.7.4 to 42.7.5

Release notes

Sourced from org.postgresql:postgresql's releases.

v42.7.5

Changes

⬆️ Dependencies

... (truncated)

Changelog

Sourced from org.postgresql:postgresql's changelog.

[42.7.5] (2025-01-14 08:00:00 -0400)

Added

Fixed

Commits
  • 94a1693 update changelogs and increment version in gradle.properties for release (#3478)
  • ce54dfd chore: replace deprecated kotlinOptions with a replacement API
  • 398029e chore: avoid failure in osgi-test/onlyIf if -PjdkBuildVersion is missing at t...
  • 7245443 test: skip :pgjdbc-osgi-test:test when runnning tests with Java 8
  • 7747527 chore(deps): update dependency gradle to v8.12
  • bb07a4b chore(deps): update codecov/codecov-action digest to adfacf2
  • f545514 chore(deps): update dependency sbt/sbt to v1.10.7
  • 45df56c fix(deps): update dependency org.ops4j.pax.url:pax-url-aether to v2.6.15
  • b87e106 fix(deps): update junit5 monorepo to v5.11.4
  • 5603477 fix(deps): update dependency com.github.spotbugs:com.github.spotbugs.gradle.p...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the build-dependencies group with 4 updates
abd7658 
Bumps the build-dependencies group with 4 updates: [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless), [org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck), [org.assertj:assertj-core](https://github.com/assertj/assertj) and [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc).


Updates `com.diffplug.spotless:spotless-maven-plugin` from 2.44.1 to 2.44.2
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@maven/2.44.1...maven/2.44.2)

Updates `org.owasp:dependency-check-maven` from 12.0.0 to 12.0.1
- [Release notes](https://github.com/jeremylong/DependencyCheck/releases)
- [Changelog](https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md)
- [Commits](jeremylong/DependencyCheck@v12.0.0...v12.0.1)

Updates `org.assertj:assertj-core` from 3.27.2 to 3.27.3
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-build-3.27.2...assertj-build-3.27.3)

Updates `org.postgresql:postgresql` from 42.7.4 to 42.7.5
- [Release notes](https://github.com/pgjdbc/pgjdbc/releases)
- [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md)
- [Commits](pgjdbc/pgjdbc@REL42.7.4...REL42.7.5)

---
updated-dependencies:
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: build-dependencies
- dependency-name: org.owasp:dependency-check-maven
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: build-dependencies
- dependency-name: org.assertj:assertj-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: build-dependencies
- dependency-name: org.postgresql:postgresql
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: build-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jan 21, 2025
@marko-bekhta marko-bekhta merged commit 001938a into main Jan 21, 2025
8 checks passed
@dependabot dependabot bot deleted the dependabot/maven/build-dependencies-dceef0f1aa branch January 21, 2025 09:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@marko-bekhta marko-bekhta marko-bekhta approved these changes

Assignees

@marko-bekhta marko-bekhta

Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@marko-bekhta