Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the maven-dependencies group with 6 updates #24

Merged
merged 1 commit into from
Nov 1, 2023
Merged

Bump the maven-dependencies group with 6 updates #24

merged 1 commit into from
Nov 1, 2023

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 1, 2023

Bumps the maven-dependencies group with 6 updates:

Package From To
org.mockito:mockito-core 5.5.0 5.6.0
com.google.guava:guava 32.1.2-jre 32.1.3-jre
org.codehaus.mojo:versions-maven-plugin 2.9.0 2.16.1
org.apache.maven.plugins:maven-surefire-plugin 3.1.2 3.2.1
org.owasp:dependency-check-maven 8.4.0 8.4.2
org.jacoco:jacoco-maven-plugin 0.8.10 0.8.11

Updates org.mockito:mockito-core from 5.5.0 to 5.6.0

Release notes

Sourced from org.mockito:mockito-core's releases.

v5.6.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.6.0

Commits
  • 6f4eb02 Add parameter support for @Captor with JUnit Jupiter (#3133)
  • fb48e09 Make MockUtil.getMockMaker() public Mockito API (#3129)
  • 597e902 Use spdx identifier for license name (#3134)
  • 2dd0f08 Bump com.google.googlejavaformat:google-java-format (#3131)
  • 1c02bd7 Bump com.gradle.enterprise from 3.15 to 3.15.1 (#3132)
  • edc6243 Bump com.google.googlejavaformat:google-java-format (#3126)
  • 6d093b4 Bump com.diffplug.spotless from 6.21.0 to 6.22.0 (#3125)
  • 5d946b4 Bump versions.errorprone from 2.21.1 to 2.22.0 (#3122)
  • 20e878f Bump versions.bytebuddy from 1.14.7 to 1.14.8 (#3117)
  • bf3f9e9 Bump com.gradle.enterprise from 3.14.1 to 3.15 (#3115)
  • Additional commits viewable in compare view

Updates com.google.guava:guava from 32.1.2-jre to 32.1.3-jre

Release notes

Sourced from com.google.guava:guava's releases.

32.1.3

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>32.1.3-jre</version>
  <!-- or, for Android: -->
  <version>32.1.3-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

  • Changed Gradle Metadata to include dependency versions directly. This may address "Could not find some-dependency" errors that some users have reported (which might be a result of users' excluding guava-parent). (c6d35cf1a5)
  • collect: Changed Multisets.unmodifiableMultiset(set).removeIf(predicate) to throw an exception always, even if nothing matches predicate. (61dbccfda3)
  • graph: Fixed the behavior of Graph/ValueGraph views for a node when that node is removed from the graph. (950799691c)
  • io: Fixed Files.createTempDir and FileBackedOutputStream under Windows services, a rare use case. (The fix actually covers only Java 9+ because Java 8 would require an additional approach. Let us know if you need support under Java 8.) (f87f68cd3e)
  • net: Made MediaType.parse allow and skip over whitespace around the / and = separator tokens in addition to the ; separator, for which it was already being allowed. (2786f83291)
  • util.concurrent: Tweaked Futures.getChecked constructor-selection behavior: The method continues to prefer to call constructors with a String parameter, but now it breaks ties based on whether the constructor has a Throwable parameter. Beyond that, the choice of constructor remains undefined. (For this and other reasons, we discourage the use of getChecked.) (59cfb2267a)
Commits

Updates org.codehaus.mojo:versions-maven-plugin from 2.9.0 to 2.16.1

Release notes

Sourced from org.codehaus.mojo:versions-maven-plugin's releases.

2.16.1

Changes

🐛 Bug Fixes

📦 Dependency updates

👻 Maintenance

2.16.0

Changes

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

... (truncated)

Commits
  • a7e6cdb [maven-release-plugin] prepare release 2.16.1
  • d24a89c Cleanup pluginManagement from mock artifacts
  • 1d03956 Resolves #978
  • 15d7a17 #1001: added a test case
  • 0b0fdf8 Correct message if the latest version of parent is used for update-parent
  • 220c4ef Resolves #995: Minimum version required for Versions Maven Plugin should is n...
  • 1cfdb54 Resolves #990: Check prerequisites if required enforcer Maven version is empty
  • 938ebdf Bump org.springframework:spring-framework-bom
  • 6cd759c Bump org.apache.commons:commons-lang3 from 3.12.0 to 3.13.0
  • 018856c Fix links for XSD in report models
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.1.2 to 3.2.1

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.2.1

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

Commits
  • df9f657 [maven-release-plugin] prepare release surefire-3.2.1
  • 0910b75 Fix formatting
  • 97c84a1 [maven-release-plugin] prepare for next development iteration
  • ad0639f [maven-release-plugin] prepare release surefire-3.2.0
  • edfb965 [SUREFIRE-2196] maven-surefire-report-plugin:failsafe-report-only failed: Unm...
  • 0a5dba8 [SUREFIRE-2188] Upgrade to Parent 40
  • 5a09438 [SUREFIRE-2202] NullPointerException if super class meets specific condition
  • 176937d Simplify temp dir creation
  • 9b79bda [SUREFIRE-1124] Support forkNumber in environment variables
  • 2966964 Fix TestNG web site URL
  • Additional commits viewable in compare view

Updates org.owasp:dependency-check-maven from 8.4.0 to 8.4.2

Release notes

Sourced from org.owasp:dependency-check-maven's releases.

Version 8.4.2

  • fix: correct log configuration in cli (#6002)

See the full listing of changes.

Version 8.4.1

  • fix: upgrade to JCS3 (#5114)
  • fix: Support ~= version specifier in requirements.txt and pipfile (#5902)
  • fix: Version of dependency no longer ignored when CPE product has a 'java' suffix in a product name (#5901)
  • fix: Do not filter out evidences added by hints (#5900)
  • fix: fixes FP #5925 (#5927)

See the full listing of changes.

Changelog

Sourced from org.owasp:dependency-check-maven's changelog.

Version 8.4.2 (2023-10-22)

  • fix: correct log configuration in cli (#6002)

See the full listing of changes.

Version 8.4.1 (2023-10-21)

Fixed

  • fix: upgrade to JCS3 (#5114)
  • fix: Support ~= version specifier in requirements.txt and pipfile (#5902)
  • fix: Version of dependency no longer ignored when CPE product has a 'java' suffix in a product name (#5901)
  • fix: Do not filter out evidences added by hints (#5900)
  • fix: fixes FP #5925 (#5927)

See the full listing of changes.

Commits
  • c15b3b9 build: prepare release v8.4.2
  • dbdb84d docs: release 8.4.2
  • 74f5156 fix: dependabot config
  • 1162b3e fix: correct log configuration in cli (#6002)
  • e105540 chore: Release 8.4.1 (#6000)
  • 5cc8df0 build: prepare for next development iteration
  • 61377ad build: prepare release v8.4.1
  • e2649a6 docs: prepare release
  • 778185b build(deps): bump org.jacoco:jacoco-maven-plugin from 0.8.10 to 0.8.11 (#5994)
  • 81bd778 build(deps): bump se.bjurr.violations:violations-lib from 1.156.6 to 1.156.7 ...
  • Additional commits viewable in compare view

Updates org.jacoco:jacoco-maven-plugin from 0.8.10 to 0.8.11

Release notes

Sourced from org.jacoco:jacoco-maven-plugin's releases.

0.8.11

New Features

  • JaCoCo now officially supports Java 21 (GitHub #1520).
  • Experimental support for Java 22 class files (GitHub #1479).
  • Part of bytecode generated by the Java compilers for exhaustive switch expressions is filtered out during generation of report (GitHub #1472).
  • Part of bytecode generated by the Java compilers for record patterns is filtered out during generation of report (GitHub #1473).

Fixed bugs

  • Instrumentation should not cause VerifyError when the last local variable of method parameters is overridden in the method body to store a value of type long or double (GitHub #893).
  • Restore exec file compatibility with versions from 0.7.5 to 0.8.8 in case of class files with zero line numbers (GitHub #1492).

Non-functional Changes

  • jacoco-maven-plugin now requires at least Java 8 (GitHub #1466, #1468).
  • JaCoCo build now requires at least Maven 3.5.4 (GitHub #1467).
  • Maven 3.9.2 should not produce warnings for jacoco-maven-plugin (GitHub #1468).
  • JaCoCo build now requires JDK 17 (GitHub #1482).
  • JaCoCo now depends on ASM 9.6 (GitHub #1518).
Commits
  • f33756c Prepare release 0.8.11
  • 0670530 Upgrade animal-sniffer-maven-plugin to 1.23
  • 206e5be Restore exec file compatibility after upgrade of ASM to version 9.5 (#1492)
  • 36fc079 Update documentation: JDK version 21 is officially supported (#1520)
  • 7162917 Add validation tests for boolean expressions (#1505)
  • 4bc9267 Fix link to Bytecode Outline Plug-In (#1519)
  • ded62fc Upgrade ASM to 9.6 (#1518)
  • 6798260 Fix links to ASM website (#1515)
  • 4ba332f Fix misleading outdated javadoc (#1513)
  • 7ca0f0f Opcodes.RET should be processed by visitVarInsn instead of visitInsn (#...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the maven-dependencies group with 6 updates
feaa8ea 
Bumps the maven-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.5.0` | `5.6.0` |
| [com.google.guava:guava](https://github.com/google/guava) | `32.1.2-jre` | `32.1.3-jre` |
| [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) | `2.9.0` | `2.16.1` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.1.2` | `3.2.1` |
| [org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck) | `8.4.0` | `8.4.2` |
| [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.10` | `0.8.11` |


Updates `org.mockito:mockito-core` from 5.5.0 to 5.6.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.5.0...v5.6.0)

Updates `com.google.guava:guava` from 32.1.2-jre to 32.1.3-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `org.codehaus.mojo:versions-maven-plugin` from 2.9.0 to 2.16.1
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](mojohaus/versions@versions-maven-plugin-2.9.0...2.16.1)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.1.2 to 3.2.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.1.2...surefire-3.2.1)

Updates `org.owasp:dependency-check-maven` from 8.4.0 to 8.4.2
- [Release notes](https://github.com/jeremylong/DependencyCheck/releases)
- [Changelog](https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md)
- [Commits](jeremylong/DependencyCheck@v8.4.0...v8.4.2)

Updates `org.jacoco:jacoco-maven-plugin` from 0.8.10 to 0.8.11
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.10...v0.8.11)

---
updated-dependencies:
- dependency-name: org.mockito:mockito-core
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: com.google.guava:guava
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.owasp:dependency-check-maven
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 1, 2023
@overheadhunter
Copy link
Member

@dependabot squash and merge

@dependabot dependabot bot merged commit 685d5aa into develop Nov 1, 2023
7 checks passed
@dependabot dependabot bot deleted the dependabot/maven/maven-dependencies-9d64bd1e05 branch November 1, 2023 12:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@overheadhunter overheadhunter overheadhunter approved these changes

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@overheadhunter