Skip to content

Bump the maven group with 10 updates #2773

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
eamonnmcmanus merged 1 commit into from
Nov 1, 2024
Merged

Bump the maven group with 10 updates #2773

eamonnmcmanus merged 1 commit into from
Nov 1, 2024
+12 −12

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 1, 2024 •
edited
Loading

Bumps the maven group with 10 updates:

Package From To
com.google.errorprone:error_prone_core 2.33.0 2.35.1
org.apache.maven.plugins:maven-artifact-plugin 3.5.1 3.5.3
org.apache.maven.plugins:maven-surefire-plugin 3.5.0 3.5.1
org.apache.maven.plugins:maven-failsafe-plugin 3.5.0 3.5.1
com.google.errorprone:error_prone_annotations 2.33.0 2.35.1
com.guardsquare:proguard-base 7.5.0 7.6.0
org.junit.jupiter:junit-jupiter 5.11.1 5.11.3
org.codehaus.mojo:exec-maven-plugin 3.4.1 3.5.0
com.fasterxml.jackson.core:jackson-databind 2.18.0 2.18.1
com.google.protobuf:protobuf-java 4.28.2 4.28.3

Updates com.google.errorprone:error_prone_core from 2.33.0 to 2.35.1

Release notes

Sourced from com.google.errorprone:error_prone_core's releases.

Error Prone 2.35.1

Error Prone's dependency on protobuf has been downgraded to 3.25.5 for this release.

Version 3.25.5 of protobuf still fixes CVE-2024-7254. This release is provided for users who aren't ready to update to 4.x, see also #4584 and #4634. Future versions of Error Prone will upgrade back to protobuf 4.x.

Full changelog: google/error-prone@v2.35.0...v2.35.1

Error Prone 2.35.0

Changes:

  • Fix handling of \s before the trailing delimiter in MisleadingEscapedSpace
  • TimeUnitMismatch improvements: handle binary trees, consider trees like fooSeconds * 1000 to have units of millis

New checks:

Full changelog: google/error-prone@v2.34.0...v2.35.0

Error Prone 2.34.0

Changes:

  • Passing the javac flag --should-stop=ifError=FLOW is now required when running Error Prone (#4595)
  • The MemberName check was renamed to IdentifierName

New checks:

Closed issues: #4595, #4598, #4620

Full changelog: google/error-prone@v2.33.0...v2.34.0

Commits
  • 0e06cc2 Release Error Prone 2.35.1
  • db6c890 Downgrade protobuf version to 3.25.5
  • ed6b121 Add a repro test for broken behavior inlining the parameter value into the fu...
  • a931fa3 Remove DoNotUseRuleChain from JavaCodeClarity.
  • ec2983b compileUnsafe -> compile for compile-time-constant expressions.
  • 2ce9632 Strip the quotation marks from the source code when reconstructing the literal.
  • 99a0d9d TimeUnitMismatch: handle BinaryTrees.
  • 60c5f76 TimeUnitMismatch: consider trees like fooSeconds * 1000 to have units of `m...
  • 427b51d GetSeconds to ToSeconds error prone
  • 82a2168 Recognize that Runtime.halt and exit never return.
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-artifact-plugin from 3.5.1 to 3.5.3

Commits
  • 3e7d8ff [maven-release-plugin] prepare release maven-artifact-plugin-3.5.3
  • 1f366a9 [MARTIFACT-74] always diagnose outputTimestamp
  • 252d911 [MARTIFACT-74] add describe-build-output IT
  • 094434e [MARTIFACT-74] describe groupId(s) and duplicate artifactId(s)
  • d735ec1 [MARTIFACT-76] fix consumer pom detection
  • c110700 [MARTIFACT-75] fix jar artifacts detection (#67)
  • d330ea7 Replace deprecated method (#65)
  • 4d1d9ac [maven-release-plugin] prepare for next development iteration
  • b147ab0 [maven-release-plugin] prepare release maven-artifact-plugin-3.5.2
  • 9f558a3 [MARTIFACT-73] add describe-build-output goal to site
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.0 to 3.5.1

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.5.1

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

👻 Maintenance

Commits
  • a69b0f8 [maven-release-plugin] prepare release surefire-3.5.1
  • ccc54d0 [SUREFIRE-2273] Bump org.hamcrest:hamcrest from 2.2 to 3.0 (#784)
  • ab77c35 [SUREFIRE-2272] Bump org.codehaus.plexus:plexus-java from 1.2.0 to 1.3.0 - JD...
  • 93317ff [SUREFIRE-2269] Allow fail during clean in surefire-its
  • d7f4dbb [SUREFIRE-2270] Use JUnit5 in surefire-shadefire
  • 7a98850 Drop comment from jira integration
  • b2aa8a6 [SUREFIRE-2267] Packages for commons-codec should be relocated in surefire-sh...
  • a928255 [SUREFIRE-1737] Fix disable in statelessTestsetReporter
  • 4584ebb [SUREFIRE-2226] Upgrade to Maven Verifier 2.0.0-M1
  • 5aa3515 [SUREFIRE-2266] Execute ITs in parallel
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-failsafe-plugin from 3.5.0 to 3.5.1

Release notes

Sourced from org.apache.maven.plugins:maven-failsafe-plugin's releases.

3.5.1

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

👻 Maintenance

Commits
  • a69b0f8 [maven-release-plugin] prepare release surefire-3.5.1
  • ccc54d0 [SUREFIRE-2273] Bump org.hamcrest:hamcrest from 2.2 to 3.0 (#784)
  • ab77c35 [SUREFIRE-2272] Bump org.codehaus.plexus:plexus-java from 1.2.0 to 1.3.0 - JD...
  • 93317ff [SUREFIRE-2269] Allow fail during clean in surefire-its
  • d7f4dbb [SUREFIRE-2270] Use JUnit5 in surefire-shadefire
  • 7a98850 Drop comment from jira integration
  • b2aa8a6 [SUREFIRE-2267] Packages for commons-codec should be relocated in surefire-sh...
  • a928255 [SUREFIRE-1737] Fix disable in statelessTestsetReporter
  • 4584ebb [SUREFIRE-2226] Upgrade to Maven Verifier 2.0.0-M1
  • 5aa3515 [SUREFIRE-2266] Execute ITs in parallel
  • Additional commits viewable in compare view

Updates com.google.errorprone:error_prone_annotations from 2.33.0 to 2.35.1

Release notes

Sourced from com.google.errorprone:error_prone_annotations's releases.

Error Prone 2.35.1

Error Prone's dependency on protobuf has been downgraded to 3.25.5 for this release.

Version 3.25.5 of protobuf still fixes CVE-2024-7254. This release is provided for users who aren't ready to update to 4.x, see also #4584 and #4634. Future versions of Error Prone will upgrade back to protobuf 4.x.

Full changelog: google/error-prone@v2.35.0...v2.35.1

Error Prone 2.35.0

Changes:

  • Fix handling of \s before the trailing delimiter in MisleadingEscapedSpace
  • TimeUnitMismatch improvements: handle binary trees, consider trees like fooSeconds * 1000 to have units of millis

New checks:

Full changelog: google/error-prone@v2.34.0...v2.35.0

Error Prone 2.34.0

Changes:

  • Passing the javac flag --should-stop=ifError=FLOW is now required when running Error Prone (#4595)
  • The MemberName check was renamed to IdentifierName

New checks:

Closed issues: #4595, #4598, #4620

Full changelog: google/error-prone@v2.33.0...v2.34.0

Commits
  • 0e06cc2 Release Error Prone 2.35.1
  • db6c890 Downgrade protobuf version to 3.25.5
  • ed6b121 Add a repro test for broken behavior inlining the parameter value into the fu...
  • a931fa3 Remove DoNotUseRuleChain from JavaCodeClarity.
  • ec2983b compileUnsafe -> compile for compile-time-constant expressions.
  • 2ce9632 Strip the quotation marks from the source code when reconstructing the literal.
  • 99a0d9d TimeUnitMismatch: handle BinaryTrees.
  • 60c5f76 TimeUnitMismatch: consider trees like fooSeconds * 1000 to have units of `m...
  • 427b51d GetSeconds to ToSeconds error prone
  • 82a2168 Recognize that Runtime.halt and exit never return.
  • Additional commits viewable in compare view

Updates com.guardsquare:proguard-base from 7.5.0 to 7.6.0

Release notes

Sourced from com.guardsquare:proguard-base's releases.

7.6

Java support

  • Add support for Java 23. (#387)

Improved

  • Improve obfuscation dictionary name performance with large dictionaries. (#413)

Bugfixes

  • Prevent unknown enum value for KmVersionRequirementVersionKind exception when processing code compiled with an outdated Kotlin version.
  • ReTrace: Fix separation of multiple frames with a newline. (#432)
Commits

Updates org.junit.jupiter:junit-jupiter from 5.11.1 to 5.11.3

Release notes

Sourced from org.junit.jupiter:junit-jupiter's releases.

JUnit 5.11.3 = Platform 1.11.3 + Jupiter 5.11.3 + Vintage 5.11.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.11.2...r5.11.3

JUnit 5.11.2 = Platform 1.11.2 + Jupiter 5.11.2 + Vintage 5.11.2

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.11.1...r5.11.2

Commits
  • b20991e Release 5.11.3
  • e57b508 Finalize 5.11.3 release notes
  • fb1254c Allow repeating ExtendWith annotation on fields and parameters
  • a3192bd Fix package name comparison on Java 8 (#4077)
  • fcb7b01 Remove useless Order annotation
  • 57dfcb5 Allow repeating @…Source annotations when used as meta annotations
  • 09cd8b3 Add ArchUnit test for consistency of repeatable annotations
  • fa46a92 Hard-wrap at 90 characters
  • 8f45eea Find repeatable @⁠ExtendWith meta-annotations on fields again
  • b451122 Introduce release notes for 5.11.3
  • Additional commits viewable in compare view

Updates org.codehaus.mojo:exec-maven-plugin from 3.4.1 to 3.5.0

Release notes

Sourced from org.codehaus.mojo:exec-maven-plugin's releases.

3.5.0

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

👻 Maintenance

Commits
  • b80d3d6 [maven-release-plugin] prepare release 3.5.0
  • 226a8ce Update site descriptor to 2.0.0
  • 47eac15 #322, enable to control the exec:java interaction with JVM classloader more f...
  • 582aed0 Bump project version
  • 8e7fa52 Update src/main/java/org/codehaus/mojo/exec/ExecMojo.java
  • d2bdc9c Add toolchain java path to environment variables in ExecMojo - added tests an...
  • eb62d78 Add toolchain java path to environment variables in ExecMojo - added tests an...
  • 8dbbb07 Add toolchain java path to environment variables in ExecMojo - added tests an...
  • 168b368 Add toolchain java path to environment variables in ExecMojo - added tests an...
  • 491526a Add toolchain java path to environment variables in ExecMojo - added tests an...
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.18.0 to 2.18.1

Commits

Updates com.google.protobuf:protobuf-java from 4.28.2 to 4.28.3

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 1, 2024
@eamonnmcmanus
Copy link
Member

eamonnmcmanus commented Nov 1, 2024

@dependabot rebase

@dependabot
Bump the maven group with 10 updates
dbb14e7 
Bumps the maven group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [com.google.errorprone:error_prone_core](https://github.com/google/error-prone) | `2.33.0` | `2.35.1` |
| [org.apache.maven.plugins:maven-artifact-plugin](https://github.com/apache/maven-artifact-plugin) | `3.5.1` | `3.5.3` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.0` | `3.5.1` |
| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.5.0` | `3.5.1` |
| [com.google.errorprone:error_prone_annotations](https://github.com/google/error-prone) | `2.33.0` | `2.35.1` |
| [com.guardsquare:proguard-base](https://github.com/Guardsquare/proguard) | `7.5.0` | `7.6.0` |
| [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit5) | `5.11.1` | `5.11.3` |
| [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.4.1` | `3.5.0` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.18.0` | `2.18.1` |
| [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `4.28.2` | `4.28.3` |


Updates `com.google.errorprone:error_prone_core` from 2.33.0 to 2.35.1
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.33.0...v2.35.1)

Updates `org.apache.maven.plugins:maven-artifact-plugin` from 3.5.1 to 3.5.3
- [Commits](apache/maven-artifact-plugin@maven-artifact-plugin-3.5.1...maven-artifact-plugin-3.5.3)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.0 to 3.5.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.0...surefire-3.5.1)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.0 to 3.5.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.0...surefire-3.5.1)

Updates `com.google.errorprone:error_prone_annotations` from 2.33.0 to 2.35.1
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.33.0...v2.35.1)

Updates `com.guardsquare:proguard-base` from 7.5.0 to 7.6.0
- [Release notes](https://github.com/Guardsquare/proguard/releases)
- [Commits](Guardsquare/proguard@v7.5...v7.6)

Updates `org.junit.jupiter:junit-jupiter` from 5.11.1 to 5.11.3
- [Release notes](https://github.com/junit-team/junit5/releases)
- [Commits](junit-team/junit-framework@r5.11.1...r5.11.3)

Updates `org.codehaus.mojo:exec-maven-plugin` from 3.4.1 to 3.5.0
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
- [Commits](mojohaus/exec-maven-plugin@3.4.1...3.5.0)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.0 to 2.18.1
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.google.protobuf:protobuf-java` from 4.28.2 to 4.28.3
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

---
updated-dependencies:
- dependency-name: com.google.errorprone:error_prone_core
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: org.apache.maven.plugins:maven-artifact-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: com.google.errorprone:error_prone_annotations
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: com.guardsquare:proguard-base
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: org.junit.jupiter:junit-jupiter
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: org.codehaus.mojo:exec-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: com.google.protobuf:protobuf-java
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/maven/maven-6b902f8265 branch from 97736ce to dbb14e7 Compare November 1, 2024 17:53
@eamonnmcmanus eamonnmcmanus merged commit 04f66f9 into main Nov 1, 2024
17 checks passed
@eamonnmcmanus eamonnmcmanus deleted the dependabot/maven/maven-6b902f8265 branch November 1, 2024 18:09
@Marcono1234 Marcono1234 mentioned this pull request Nov 1, 2024
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@eamonnmcmanus eamonnmcmanus eamonnmcmanus approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@eamonnmcmanus