Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): bump the prod-deps group with 6 updates #1092

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 6, 2024

Bumps the prod-deps group with 6 updates:

Package From To
org.apache.logging.log4j:log4j-bom 2.24.0 2.24.1
org.junit:junit-bom 5.11.1 5.11.2
org.testcontainers:testcontainers-bom 1.20.1 1.20.2
com.puppycrawl.tools:checkstyle 10.18.1 10.18.2
org.apache.maven.plugins:maven-surefire-plugin 3.5.0 3.5.1
org.apache.maven.plugins:maven-failsafe-plugin 3.5.0 3.5.1

Updates org.apache.logging.log4j:log4j-bom from 2.24.0 to 2.24.1

Release notes

Sourced from org.apache.logging.log4j:log4j-bom's releases.

2.24.1

This release contains mainly bug fixes of problems encountered with the thread context map, logger registry and configuration reloading.

It also enhances integration tests to use Docker images of the most recent releases of MongoDB and Elastic Search.

Changed

  • Rework LoggerRegistry to make it MessageFactory-namespaced. This effectively allows loggers of same name, but different message factory. (#2936)
  • Enable Docker-based tests in CI for JSON Template Layout (#2953)

Fixed

  • Switch MongoDB tests to use Docker. (#2229)
  • Fix reloading of the configuration from an HTTP(S) source (#2937)
  • Fix putAll() in the default thread context map implementation (#2942)

Updated

  • Update org.apache.logging:logging-parent to version 11.3.0
Commits
  • 8ee9387 Update the project.build.outputTimestamp property
  • 767be86 Prepare release notes version 2.24.1
  • a92713c Pin Cassandra transitive deps
  • a05d921 Revert "Prepare release notes for 2.24.1"
  • 755497d Revert "Single constructor for ConfigurationSource"
  • a01f7e4 Prepare release notes for 2.24.1
  • 5d6bd3c Clean up changelog entries
  • 9c798ae Update com.github.luben:zstd-jni to version 1.5.6-6 (#2998)
  • a3d138b Update commons-io:commons-io to version 2.17.0 (#2984)
  • 13b5fda Update org.slf4j:slf4j-nop to version 2.0.16 (#2955)
  • Additional commits viewable in compare view

Updates org.junit:junit-bom from 5.11.1 to 5.11.2

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 5.11.2 = Platform 1.11.2 + Jupiter 5.11.2 + Vintage 5.11.2

See Release Notes.

Full Changelog: junit-team/junit5@r5.11.1...r5.11.2

Commits
  • 5b1a6d1 Release 5.11.2
  • b7816b6 Finalize 5.11.2 release notes
  • f8e22c7 Finalize 5.10.5 release notes
  • 8e63938 Remove reference to 5.10.4 in 5.11.2 release notes
  • 7e9d728 Document #4043 in 5.10.5 release notes
  • c11f224 Create initial 5.10.5 release notes from template
  • ab94140 Fix global read-write lock handling when not declared on top level
  • 9658fac Add initial 5.11.2 release notes from template
  • 5f52ced Fix link to milestone page
  • 558f480 Back to snapshots for further development
  • See full diff in compare view

Updates org.testcontainers:testcontainers-bom from 1.20.1 to 1.20.2

Release notes

Sourced from org.testcontainers:testcontainers-bom's releases.

1.20.2

What's Changed

🚀 Features & Enhancements

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

📦 Dependency updates

Commits
  • 8b36391 [mongodb] Remove incubating note
  • 8921a5a Add MongoDB Atlas implementation (#9290)
  • 04206d9 Remove exclusions from milvus-sdk-java dependency
  • 41b5786 Merge pull request #9286 from testcontainers/combined-pr-branch
  • d754435 Merge remote-tracking branch 'origin/dependabot/gradle/core/redis.clients-jed...
  • 38e73ad Merge remote-tracking branch 'origin/dependabot/gradle/modules/jdbc-test/org....
  • 193e842 Merge remote-tracking branch 'origin/dependabot/gradle/modules/hivemq/org.apa...
  • 61fe2a8 Merge remote-tracking branch 'origin/dependabot/gradle/modules/elasticsearch/...
  • b175776 Merge pull request #9285 from testcontainers/combined-pr-branch
  • 84cc17f Merge remote-tracking branch 'origin/dependabot/gradle/modules/cratedb/org.po...
  • Additional commits viewable in compare view

Updates com.puppycrawl.tools:checkstyle from 10.18.1 to 10.18.2

Release notes

Sourced from com.puppycrawl.tools:checkstyle's releases.

checkstyle-10.18.2

Checkstyle 10.18.2 - https://checkstyle.org/releasenotes.html#Release_10.18.2

Bug fixes:

#15690 - JavadocParagraph: allowNewlineParagraph should allow '\n' after P tag and content start from new line #15642 - google_checks: Section 4.1.3 should not be covered by EmptyBlock and EmptyCatchBlock #15609 - google_checks SuppressionXpathSingleFilter for 'MethodName' check is too lenient in several ways #15434 - MissingJavadocMethod does not give warning for missing javadoc for protected methods in google_checks.xml #13553 - False positive in FallThroughCheck on last case #15233 - Suppression for long identifiers for 4.4 Column Limit: 100 rule of google java style guide #15414 - Google style: Javadoc is optional for "simple, obvious" members

Commits
  • 3651c45 [maven-release-plugin] prepare release checkstyle-10.18.2
  • ca569e6 doc: release notes for 10.18.2
  • 4eec526 Issue #6207: add class data abstraction coupling xpath regression tests
  • fe4fde1 infra: fix link in exclude for jdepend-maven-plugin to fix run of maven-linkc...
  • 50cdde7 Issue #15456: Specify violation message for Nested Block (#11)
  • b1d923e Issue #15690: fix allowNewlineParagraph at JavadocParagraphCheck
  • b41666f dependency: bump org.apache.maven.plugins:maven-gpg-plugin
  • 4c378dc supplemental: added violation messages in JavadocParagraph's input files
  • 82bc795 dependency: bump junit.version from 5.11.0 to 5.11.1
  • 4704b0f Issue #6207: Add XPath IT Regression Test for ModifiedControlVariable
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.0 to 3.5.1

Commits
  • a69b0f8 [maven-release-plugin] prepare release surefire-3.5.1
  • ccc54d0 [SUREFIRE-2273] Bump org.hamcrest:hamcrest from 2.2 to 3.0 (#784)
  • ab77c35 [SUREFIRE-2272] Bump org.codehaus.plexus:plexus-java from 1.2.0 to 1.3.0 - JD...
  • 93317ff [SUREFIRE-2269] Allow fail during clean in surefire-its
  • d7f4dbb [SUREFIRE-2270] Use JUnit5 in surefire-shadefire
  • 7a98850 Drop comment from jira integration
  • b2aa8a6 [SUREFIRE-2267] Packages for commons-codec should be relocated in surefire-sh...
  • a928255 [SUREFIRE-1737] Fix disable in statelessTestsetReporter
  • 4584ebb [SUREFIRE-2226] Upgrade to Maven Verifier 2.0.0-M1
  • 5aa3515 [SUREFIRE-2266] Execute ITs in parallel
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-failsafe-plugin from 3.5.0 to 3.5.1

Commits
  • a69b0f8 [maven-release-plugin] prepare release surefire-3.5.1
  • ccc54d0 [SUREFIRE-2273] Bump org.hamcrest:hamcrest from 2.2 to 3.0 (#784)
  • ab77c35 [SUREFIRE-2272] Bump org.codehaus.plexus:plexus-java from 1.2.0 to 1.3.0 - JD...
  • 93317ff [SUREFIRE-2269] Allow fail during clean in surefire-its
  • d7f4dbb [SUREFIRE-2270] Use JUnit5 in surefire-shadefire
  • 7a98850 Drop comment from jira integration
  • b2aa8a6 [SUREFIRE-2267] Packages for commons-codec should be relocated in surefire-sh...
  • a928255 [SUREFIRE-1737] Fix disable in statelessTestsetReporter
  • 4584ebb [SUREFIRE-2226] Upgrade to Maven Verifier 2.0.0-M1
  • 5aa3515 [SUREFIRE-2266] Execute ITs in parallel
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot requested a review from a team as a code owner October 6, 2024 11:58
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Oct 6, 2024
@dependabot dependabot bot force-pushed the dependabot/maven/prod-deps-97202f3def branch from 2794a0e to e9e46d5 Compare October 8, 2024 11:31
@dependabot dependabot bot force-pushed the dependabot/maven/prod-deps-97202f3def branch from e9e46d5 to 840dcfd Compare October 9, 2024 13:39
Bumps the prod-deps group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [org.apache.logging.log4j:log4j-bom](https://github.com/apache/logging-log4j2) | `2.24.0` | `2.24.1` |
| [org.junit:junit-bom](https://github.com/junit-team/junit5) | `5.11.1` | `5.11.2` |
| [org.testcontainers:testcontainers-bom](https://github.com/testcontainers/testcontainers-java) | `1.20.1` | `1.20.2` |
| [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) | `10.18.1` | `10.18.2` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.0` | `3.5.1` |
| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.5.0` | `3.5.1` |


Updates `org.apache.logging.log4j:log4j-bom` from 2.24.0 to 2.24.1
- [Release notes](https://github.com/apache/logging-log4j2/releases)
- [Changelog](https://github.com/apache/logging-log4j2/blob/2.x/RELEASE-NOTES.adoc)
- [Commits](apache/logging-log4j2@rel/2.24.0...rel/2.24.1)

Updates `org.junit:junit-bom` from 5.11.1 to 5.11.2
- [Release notes](https://github.com/junit-team/junit5/releases)
- [Commits](junit-team/junit5@r5.11.1...r5.11.2)

Updates `org.testcontainers:testcontainers-bom` from 1.20.1 to 1.20.2
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.20.1...1.20.2)

Updates `com.puppycrawl.tools:checkstyle` from 10.18.1 to 10.18.2
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](checkstyle/checkstyle@checkstyle-10.18.1...checkstyle-10.18.2)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.0 to 3.5.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.0...surefire-3.5.1)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.0 to 3.5.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.0...surefire-3.5.1)

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.junit:junit-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.testcontainers:testcontainers-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/maven/prod-deps-97202f3def branch from 840dcfd to 269ee3d Compare October 13, 2024 11:21
Copy link

sonarcloud bot commented Oct 13, 2024

Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 14, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Oct 14, 2024
@dependabot dependabot bot deleted the dependabot/maven/prod-deps-97202f3def branch October 14, 2024 10:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants