Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): bump the prod-deps group across 1 directory with 7 updates #609

Merged
merged 2 commits into from
Jun 27, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 23, 2024

Bumps the prod-deps group with 6 updates in the / directory:

Package From To
org.springframework.boot:spring-boot-starter-parent 3.3.0 3.3.1
org.apache.maven.plugins:maven-clean-plugin 3.3.2 3.4.0
org.apache.maven.plugins:maven-checkstyle-plugin 3.3.1 3.4.0
org.apache.maven.plugins:maven-surefire-plugin 3.2.5 3.3.0
org.apache.maven.plugins:maven-failsafe-plugin 3.2.5 3.3.0
org.apache.maven.plugins:maven-release-plugin 3.0.1 3.1.0

Updates org.springframework.boot:spring-boot-starter-parent from 3.3.0 to 3.3.1

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v3.3.1

🐞 Bug Fixes

  • SQL Server JDBC URL is malformed after adding org.springframework.boot.jdbc.parameters label #41169
  • Git instant properties cannot be coerced following git-commit-id Maven plugin upgrade #41152
  • Excluding status code from DefaultErrorAttributes throws NPE #41141
  • Spring Boot remote restart with devtools causes 'factory already defined' Tomcat error when running with 'java -jar' #41107
  • MongoHealthIndicator not compliant with Mongo stable API with strict setting #41104
  • Service connection for bitnami mongodb fails to connect #41097
  • Image building requires builder to specify a stack #41091
  • DataSourceProperties fail to bind if java.sql module isn't included #41084
  • AOT causes Logback configuration error when using include #41081
  • Image building hangs when builder and buildpack are configured #41049
  • IllegalArgumentException when trying to use Tomcat's HttpNio2Protocol with Spring Boot-configured SSL #41010
  • Uber jar fails to start when it contains a dependency with Multi-Release: true in its manifest and unexpected file entries in META-INF/versions #41006
  • JSP-related resources may not be found in an executable war file when using Jetty #40996
  • The value of the tomcat.threads.config.max metric is always -1, irrespective of the configured maximum number of threads #40957
  • The auto-configured reactiveNeo4jTransactionManager may cause a failure due to multiple TransactionManager beans #40953
  • Application fails to start when server.tomcat.threads.max < 10 #40945
  • SBOM actuator endpoint doesn't work in a native image #40939
  • Starter parent applies its configuration of the CycloneDX Maven plugin too broadly #40927
  • buildInfo does not work with Gradle 8.7 or later when the configuration cache is enabled #40924
  • Prometheus Exemplars are missing from _count #40904
  • Extract fails due to a duplicate entry when BOOT-INF/classes contains a directory that's also present in the root of the jar #40903
  • sbom is not available to the actuator endpoint when using bootRun or bootWar #40890
  • A newline character is missing from the start of the default banner #40889

📔 Documentation

  • Fix links to Spring AMQP's javadoc #41144
  • Document more precisely how a Container's Docker image name is used to find the matching service connection #41123
  • Cross-link to the CDS how-to guide #41118
  • Fix typos in javadoc of MockServerRestClientCustomizer and MockServerRestTemplateCustomizer #41065
  • Improve readability when listing three pillars of observability #41064
  • Add CDS training run configuration documentation #41045
  • Document the need to switch to io.micrometer:micrometer-registry-prometheus-simpleclient to use the Prometheus push gateway #40993
  • Improve consistency of documentation guidelines for packaging and running applications #40977
  • Fix typos in method names and javadoc #40976
  • Replace hard-coded links to Micrometer in documentation #40967
  • Add Kotlin example for @Testcontainers #40943
  • Fix various minor inconsistencies of the documentation #40942
  • Warn in the documentation that spring.profiles.group can only be used in non-profile-specific documents #40941
  • Broken Micrometer links in documentation #40916
  • Document Buildpacks CDS and Spring AOT support #40762

🔨 Dependency Upgrades

  • Upgrade to Byte Buddy 1.14.17 #41066
  • Upgrade to FreeMarker 2.3.33 #41067
  • Upgrade to HSQLDB 2.7.3 #41068

... (truncated)

Commits

Updates org.springframework.boot:spring-boot-configuration-processor from 3.3.0 to 3.3.1

Release notes

Sourced from org.springframework.boot:spring-boot-configuration-processor's releases.

v3.3.1

🐞 Bug Fixes

  • SQL Server JDBC URL is malformed after adding org.springframework.boot.jdbc.parameters label #41169
  • Git instant properties cannot be coerced following git-commit-id Maven plugin upgrade #41152
  • Excluding status code from DefaultErrorAttributes throws NPE #41141
  • Spring Boot remote restart with devtools causes 'factory already defined' Tomcat error when running with 'java -jar' #41107
  • MongoHealthIndicator not compliant with Mongo stable API with strict setting #41104
  • Service connection for bitnami mongodb fails to connect #41097
  • Image building requires builder to specify a stack #41091
  • DataSourceProperties fail to bind if java.sql module isn't included #41084
  • AOT causes Logback configuration error when using include #41081
  • Image building hangs when builder and buildpack are configured #41049
  • IllegalArgumentException when trying to use Tomcat's HttpNio2Protocol with Spring Boot-configured SSL #41010
  • Uber jar fails to start when it contains a dependency with Multi-Release: true in its manifest and unexpected file entries in META-INF/versions #41006
  • JSP-related resources may not be found in an executable war file when using Jetty #40996
  • The value of the tomcat.threads.config.max metric is always -1, irrespective of the configured maximum number of threads #40957
  • The auto-configured reactiveNeo4jTransactionManager may cause a failure due to multiple TransactionManager beans #40953
  • Application fails to start when server.tomcat.threads.max < 10 #40945
  • SBOM actuator endpoint doesn't work in a native image #40939
  • Starter parent applies its configuration of the CycloneDX Maven plugin too broadly #40927
  • buildInfo does not work with Gradle 8.7 or later when the configuration cache is enabled #40924
  • Prometheus Exemplars are missing from _count #40904
  • Extract fails due to a duplicate entry when BOOT-INF/classes contains a directory that's also present in the root of the jar #40903
  • sbom is not available to the actuator endpoint when using bootRun or bootWar #40890
  • A newline character is missing from the start of the default banner #40889

📔 Documentation

  • Fix links to Spring AMQP's javadoc #41144
  • Document more precisely how a Container's Docker image name is used to find the matching service connection #41123
  • Cross-link to the CDS how-to guide #41118
  • Fix typos in javadoc of MockServerRestClientCustomizer and MockServerRestTemplateCustomizer #41065
  • Improve readability when listing three pillars of observability #41064
  • Add CDS training run configuration documentation #41045
  • Document the need to switch to io.micrometer:micrometer-registry-prometheus-simpleclient to use the Prometheus push gateway #40993
  • Improve consistency of documentation guidelines for packaging and running applications #40977
  • Fix typos in method names and javadoc #40976
  • Replace hard-coded links to Micrometer in documentation #40967
  • Add Kotlin example for @Testcontainers #40943
  • Fix various minor inconsistencies of the documentation #40942
  • Warn in the documentation that spring.profiles.group can only be used in non-profile-specific documents #40941
  • Broken Micrometer links in documentation #40916
  • Document Buildpacks CDS and Spring AOT support #40762

🔨 Dependency Upgrades

  • Upgrade to Byte Buddy 1.14.17 #41066
  • Upgrade to FreeMarker 2.3.33 #41067
  • Upgrade to HSQLDB 2.7.3 #41068

... (truncated)

Commits

Updates org.apache.maven.plugins:maven-clean-plugin from 3.3.2 to 3.4.0

Release notes

Sourced from org.apache.maven.plugins:maven-clean-plugin's releases.

3.4.0

What's Changed

New Contributors

Full Changelog: apache/maven-clean-plugin@maven-clean-plugin-3.3.2...maven-clean-plugin-3.4.0

Commits
  • 5774dbc [maven-release-plugin] prepare release maven-clean-plugin-3.4.0
  • 0da13b2 [MCLEAN-122] Cleanup declared dependencies, simplify unit test
  • 567be96 [MCLEAN-121] Bump com.google.inject:guice from 4.2.0 to 4.2.3 (#41)
  • ae4efa0 [MCLEAN-120] Bump org.codehaus.plexus:plexus-testing from 1.1.0 to 1.3.0 (#40)
  • a09a379 Build with Maven 4
  • f0aedd5 [MCLEAN-119] Bump org.apache.maven.plugins:maven-plugins from 41 to 42 (#44)
  • d3b2800 [MCLEAN-106] Switch to junit 5 (#27)
  • 7c1593f [MCLEAN-118] Require Maven 3.6.3
  • 1e87ea3 Fixed CleanMojoTest.java
  • c21ec13 Loggerinterface Basic
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-checkstyle-plugin from 3.3.1 to 3.4.0

Commits
  • 3af735f [maven-release-plugin] prepare release maven-checkstyle-plugin-3.4.0
  • e72bd83 [MCHECKSTYLE-448] Upgrade to Parent 42 and Maven 3.6.3
  • 61def02 Add missing dependencies
  • 142304a [MCHECKSTYLE-450] Checkstyle rule link format results in 404
  • 1ad6033 [MCHECKSTYLE-449] Add support for SARIF output format
  • a29a294 Bump maven-gh-actions-shared to v4
  • cf708a3 [MCHECKSTYLE-447] Bump org.codehaus.plexus:plexus-resources from 1.1.0 to 1.3...
  • 34fcf3e Bump org.codehaus.mojo:build-helper-maven-plugin from 3.4.0 to 3.5.0 (#127)
  • 05df96b Bump org.apache.commons:commons-lang3 from 3.12.0 to 3.14.0 (#128)
  • 6521c29 Bump org.codehaus.plexus:plexus-component-metadata from 2.1.1 to 2.2.0 (#131)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.2.5 to 3.3.0

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.3.0

Release Notes - Maven Surefire - Version 3.3.0

What's Changed

... (truncated)

Commits
  • d0b96a4 [maven-release-plugin] prepare release surefire-3.3.0
  • 71796af Bump org.codehaus.plexus:plexus-component-annotations
  • afb2d4e Bump org.codehaus.plexus:plexus-interpolation from 1.25 to 1.27
  • e6287dd [SUREFIRE-2232] [REGRESSION] StatelessXmlReporter fails to process failed res...
  • 57b7837 Bump org.htmlunit:htmlunit from 3.11.0 to 4.2.0
  • fd440c4 Bump org.xmlunit:xmlunit-core from 2.9.1 to 2.10.0
  • 5c34c43 Bump org.assertj:assertj-core from 3.25.3 to 3.26.0
  • 680fb00 Bump org.apache.commons:commons-compress from 1.26.1 to 1.26.2
  • cad0931 [SUREFIRE-2248] Make "type" attribute on failures and errors in (surefire|fai...
  • a88d786 [SUREFIRE-2047] Upgrade to maven-common-artifact-filters 3.4.0
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-failsafe-plugin from 3.2.5 to 3.3.0

Release notes

Sourced from org.apache.maven.plugins:maven-failsafe-plugin's releases.

3.3.0

Release Notes - Maven Surefire - Version 3.3.0

What's Changed

... (truncated)

Commits
  • d0b96a4 [maven-release-plugin] prepare release surefire-3.3.0
  • 71796af Bump org.codehaus.plexus:plexus-component-annotations
  • afb2d4e Bump org.codehaus.plexus:plexus-interpolation from 1.25 to 1.27
  • e6287dd [SUREFIRE-2232] [REGRESSION] StatelessXmlReporter fails to process failed res...
  • 57b7837 Bump org.htmlunit:htmlunit from 3.11.0 to 4.2.0
  • fd440c4 Bump org.xmlunit:xmlunit-core from 2.9.1 to 2.10.0
  • 5c34c43 Bump org.assertj:assertj-core from 3.25.3 to 3.26.0
  • 680fb00 Bump org.apache.commons:commons-compress from 1.26.1 to 1.26.2
  • cad0931 [SUREFIRE-2248] Make "type" attribute on failures and errors in (surefire|fai...
  • a88d786 [SUREFIRE-2047] Upgrade to maven-common-artifact-filters 3.4.0
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-release-plugin from 3.0.1 to 3.1.0

Release notes

Sourced from org.apache.maven.plugins:maven-release-plugin's releases.

3.1.0

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

👻 Maintenance

Commits
  • f2f9f4e [maven-release-plugin] prepare release maven-release-3.1.0
  • e109d3b Bump scmVersion from 2.0.1 to 2.1.0
  • 5f794a1 Bump org.apache.maven.shared:maven-invoker from 3.2.0 to 3.3.0
  • 28201bb Bump org.codehaus.plexus:plexus-interactivity-api from 1.2 to 1.3
  • 8547606 Bump org.codehaus.plexus:plexus-interpolation from 1.26 to 1.27
  • adf6aaf Bump org.xmlunit:xmlunit-core from 2.9.1 to 2.10.0
  • f3bbb77 [MRELEASE-1064] [REGRESSION] release:branch uses @​releaseLabel instead of @​br...
  • fa6c3db [MRELEASE-1145] Upgrade to Maven 3.6.3
  • 167db81 [MRELEASE-1147] @​junitVersion@ never replaced in UTs (make explicit)
  • 7249d1f [MRELEASE-1148] Release Manager pulls in transitive dependencies
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the prod-deps group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `3.3.0` | `3.3.1` |
| [org.apache.maven.plugins:maven-clean-plugin](https://github.com/apache/maven-clean-plugin) | `3.3.2` | `3.4.0` |
| [org.apache.maven.plugins:maven-checkstyle-plugin](https://github.com/apache/maven-checkstyle-plugin) | `3.3.1` | `3.4.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.2.5` | `3.3.0` |
| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.2.5` | `3.3.0` |
| [org.apache.maven.plugins:maven-release-plugin](https://github.com/apache/maven-release) | `3.0.1` | `3.1.0` |



Updates `org.springframework.boot:spring-boot-starter-parent` from 3.3.0 to 3.3.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.3.0...v3.3.1)

Updates `org.springframework.boot:spring-boot-configuration-processor` from 3.3.0 to 3.3.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.3.0...v3.3.1)

Updates `org.apache.maven.plugins:maven-clean-plugin` from 3.3.2 to 3.4.0
- [Release notes](https://github.com/apache/maven-clean-plugin/releases)
- [Commits](apache/maven-clean-plugin@maven-clean-plugin-3.3.2...maven-clean-plugin-3.4.0)

Updates `org.apache.maven.plugins:maven-checkstyle-plugin` from 3.3.1 to 3.4.0
- [Commits](apache/maven-checkstyle-plugin@maven-checkstyle-plugin-3.3.1...maven-checkstyle-plugin-3.4.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.2.5 to 3.3.0
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.2.5...surefire-3.3.0)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.2.5 to 3.3.0
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.2.5...surefire-3.3.0)

Updates `org.apache.maven.plugins:maven-release-plugin` from 3.0.1 to 3.1.0
- [Release notes](https://github.com/apache/maven-release/releases)
- [Commits](apache/maven-release@maven-release-3.0.1...maven-release-3.1.0)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.springframework.boot:spring-boot-configuration-processor
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.apache.maven.plugins:maven-clean-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.apache.maven.plugins:maven-checkstyle-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.apache.maven.plugins:maven-release-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner June 23, 2024 03:36
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jun 23, 2024
Copy link

sonarcloud bot commented Jun 27, 2024

Copy link
Contributor

@mukhiddin-yusuf mukhiddin-yusuf left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@dependabot squash and merge

@dependabot dependabot bot merged commit 886a186 into master Jun 27, 2024
6 checks passed
@dependabot dependabot bot deleted the dependabot/maven/prod-deps-244585e6fc branch June 27, 2024 11:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants