Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the dependencies group with 10 updates #1834

Merged
merged 1 commit into from
Dec 3, 2023

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 3, 2023

Bumps the dependencies group with 10 updates:

Package From To
ch.qos.logback:logback-classic 1.4.11 1.4.14
com.github.dasniko:testcontainers-keycloak 3.1.0 3.2.0
commons-io:commons-io 2.15.0 2.15.1
org.apache.commons:commons-lang3 3.13.0 3.14.0
org.keycloak:keycloak-servlet-filter-adapter 22.0.5 23.0.1
org.postgresql:postgresql 42.6.0 42.7.0
org.testcontainers:junit-jupiter 1.19.2 1.19.3
org.testcontainers:postgresql 1.19.2 1.19.3
org.codehaus.mojo:build-helper-maven-plugin 3.4.0 3.5.0
org.owasp:dependency-check-maven 8.4.3 9.0.2

Updates ch.qos.logback:logback-classic from 1.4.11 to 1.4.14

Commits
  • 407f935 prepare release 1.4.14
  • 7018a36 fix missing deseialization filter init call, enable commented out test case
  • 8a746eb start work on 1.4.14-SNAPSHOT
  • 7ee000a prepare release 1.4.13
  • 867bf58 remove superflus system.out call
  • 88abf59 prepare release 1.4.12
  • 2cd8cab cater for array size marked with -1
  • 9c782b4 prevent DOS attacks using on malicious serialized input
  • f6d690d further support for Virtual threads, issues 737
  • 9a1fc44 add support for Virtual threads
  • Additional commits viewable in compare view

Updates com.github.dasniko:testcontainers-keycloak from 3.1.0 to 3.2.0

Release notes

Sourced from com.github.dasniko:testcontainers-keycloak's releases.

v3.2.0

Upgrade dependencies to Keycloak 23.0

Commits

Updates commons-io:commons-io from 2.15.0 to 2.15.1

Updates org.apache.commons:commons-lang3 from 3.13.0 to 3.14.0

Updates org.keycloak:keycloak-servlet-filter-adapter from 22.0.5 to 23.0.1

Updates org.postgresql:postgresql from 42.6.0 to 42.7.0

Release notes

Sourced from org.postgresql:postgresql's releases.

v42.7.0

Known issues

  • NoSuchMethodError on ByteBuffer#position When Running on Java 8 when accessing arrays, issue pgjdbc/pgjdbc#3014
  • SET followed by SHOW in one statement returns wrong result, issue pgjdbc/pgjdbc#3007
  • 42.7.0 updated DateStyle from ISO to ISO, MDY (it aligns with PostgreSQL defaults), and it result in wrong results when server uses non-default DateStyle (see pgjdbc/pgjdbc#3008)

Changes

⬆️ Dependencies

... (truncated)

Changelog

Sourced from org.postgresql:postgresql's changelog.

[42.7.0] (2023-11-20 09:33:00 -0500)

Changed

Fixed

Commits
  • 1566eed update website for 42.7.0 (#3003)
  • 1c33111 Update changelog for release 42.7.0 (#3001)
  • 65f158e Use a switch statement to compare transaction isolation levels (#2998)
  • 3ced0bc feat: support SET statements combining with other queries with semicolon in P...
  • e4f47d0 test: fix assertion in RefCursorFetchTestultFetchSize" rows
  • 8bcc7ed style: remove excessive @​NonNull
  • 54ccdf7 test: add call.setFetchSize to RefCursorFetchTest
  • 2a17a35 test: use try-with-resources in LogicalReplicationStatusTest
  • 69debfa fix: sort the results of java.sql.DatabaseMetaData#getCatalogs as per its spe...
  • de74292 Return correct default from PgDatabaseMetaData.getDefaultTransactionIsolation...
  • Additional commits viewable in compare view

Updates org.testcontainers:junit-jupiter from 1.19.2 to 1.19.3

Release notes

Sourced from org.testcontainers:junit-jupiter's releases.

1.19.3

What's Changed

🐛 Bug Fixes

🧹 Housekeeping

Commits
  • 832d943 Register default network alias using ContainerDef (#7861)
  • 696481e Update Yugabyte CQL driver to 4.15.0-yb-1 (#7822)
  • f1f79dc Fix regression using GenericContainer#setImage (#7820)
  • b59888a Fix bugs in SQLScriptScanner with big String literals and PostgreSQL identi...
  • d80ce60 [create-pull-request] automated change (#7813)
  • ca036ae [create-pull-request] automated change (#7812)
  • See full diff in compare view

Updates org.testcontainers:postgresql from 1.19.2 to 1.19.3

Release notes

Sourced from org.testcontainers:postgresql's releases.

1.19.3

What's Changed

🐛 Bug Fixes

🧹 Housekeeping

Commits
  • 832d943 Register default network alias using ContainerDef (#7861)
  • 696481e Update Yugabyte CQL driver to 4.15.0-yb-1 (#7822)
  • f1f79dc Fix regression using GenericContainer#setImage (#7820)
  • b59888a Fix bugs in SQLScriptScanner with big String literals and PostgreSQL identi...
  • d80ce60 [create-pull-request] automated change (#7813)
  • ca036ae [create-pull-request] automated change (#7812)
  • See full diff in compare view

Updates org.codehaus.mojo:build-helper-maven-plugin from 3.4.0 to 3.5.0

Release notes

Sourced from org.codehaus.mojo:build-helper-maven-plugin's releases.

3.5.0

Changes

🚀 New features and improvements

📦 Dependency updates

👻 Maintenance

Commits
  • 820d0a8 [maven-release-plugin] prepare release 3.5.0
  • 497a9f5 Use plugins versions from parent in ITs
  • ad1076e Add skipIfMissing flag (#187)
  • faab936 Bump project version to next minor 3.5.0
  • b49b7e6 Add skip flags (#186)
  • 2237441 Deprecate maven-version goal
  • ef477d8 Drop stale action
  • 3df0c7f Bump org.codehaus.mojo:mojo-parent from 76 to 77
  • e6e9ba6 Use Maven Apache shared GitHub action
  • d7cb1c5 Fix antrun version in ITs
  • Additional commits viewable in compare view

Updates org.owasp:dependency-check-maven from 8.4.3 to 9.0.2

Release notes

Sourced from org.owasp:dependency-check-maven's releases.

v9.0.2

  • fix: remove virtual match string on NVD API Request (#6177)
  • fix: correct meta data in report after switching the NVD API (#6154)
  • fix: retry HTTP connections to NVD on 502 and 504 errors (#6151)
  • fix: Gitlab report format needs severity capitalized (#6182)
  • fix: improve JDK update version parsing (#6163)
  • fix: mute JCS logging (again) (#6153)

See the full listing of changes.

Version 9.0.1

  • fix: check java 8 update version; minimum JRE is 8 update 251 (#6118)
  • fix: add retry for failed NVD API requests (#6136)
  • docs: add default values to documentation for the NVD API Delay (#6135)
  • chore: Revert "build(deps): bump com.h2database:h2 from 2.1.214 to 2.2.224" (#6131)
    • this is a breaking change for anyone that successfully created the H2 database with 9.0.0.
  • fix: mute jcs logging (#6130)
  • docs: update NVD notice (#6110)
  • fix: Use the correct key for NVD API-Key from Maven Settings serverId (#6109)

See the full listing of changes.

Version 9.0.0

breaking changes: See the upgrade notice

  • feat: Utilize NVD API (#5978)
  • feat: gitlab dependency scanner report format #5919 (#5920)
  • fix: Use ASCII apostrophe for console message (#6076)

See the full listing of changes.

Changelog

Sourced from org.owasp:dependency-check-maven's changelog.

Version 9.0.2 (2023-12-01)

  • fix: remove virtual match string on NVD API Request (#6177)
  • fix: correct meta data in report after switching the NVD API (#6154)
  • fix: retry HTTP connections to NVD on 502 and 504 errors (#6151)
  • fix: Gitlab report format needs severity capitalized (#6182)
  • fix: improve JDK update version parsing (#6163)
  • fix: mute JCS logging (again) (#6153)

See the full listing of changes.

Version 9.0.1 (2023-11-26)

breaking changes: See the upgrade notice

  • fix: check java 8 update version; minimum JRE is 8 update 251 (#6118)
  • fix: add retry for failed NVD API requests (#6136)
  • docs: add default values to documentation for the NVD API Delay (#6135)
  • chore: Revert "build(deps): bump com.h2database:h2 from 2.1.214 to 2.2.224" (#6131)
    • this is a breaking change for anyone that successfully created the H2 database with 9.0.0.
  • fix: mute jcs logging (#6130)
  • docs: update NVD notice (#6110)
  • fix: Use the correct key for NVD API-Key from Maven Settings serverId (#6109)

See the full listing of changes.

Version 9.0.0 (2023-11-22)

breaking changes: See the upgrade notice

  • feat: Utilize NVD API (#5978)
  • feat: gitlab dependency scanner report format #5919 (#5920)
  • fix: Use ASCII apostrophe for console message (#6076)

See the full listing of changes.

Commits
  • 938c513 build: prepare release v9.0.2
  • 5869f89 docs: update release documentation
  • bb932af fix: remove virtual match string on NVD API Request (#6177)
  • 9c604f3 fix: Gitlab report format needs severity capitalized (#6182)
  • 857c377 build(deps): bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.1 t...
  • 355736f fix: Gitlab report broken after NVD api changes (#6166)
  • aec49c8 fix: improve update version parsing (#6163)
  • ed3912c fix: mute JCS logging (again) (#6153)
  • a620c12 fix: correct meta data in report after switching the NVD API (#6154)
  • c0b4320 fix: retry HTTP connections to NVD on 502 and 504 errors (#6151)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.4.11` | `1.4.14` |
| [com.github.dasniko:testcontainers-keycloak](https://github.com/dasniko/testcontainers-keycloak) | `3.1.0` | `3.2.0` |
| commons-io:commons-io | `2.15.0` | `2.15.1` |
| org.apache.commons:commons-lang3 | `3.13.0` | `3.14.0` |
| org.keycloak:keycloak-servlet-filter-adapter | `22.0.5` | `23.0.1` |
| [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) | `42.6.0` | `42.7.0` |
| [org.testcontainers:junit-jupiter](https://github.com/testcontainers/testcontainers-java) | `1.19.2` | `1.19.3` |
| [org.testcontainers:postgresql](https://github.com/testcontainers/testcontainers-java) | `1.19.2` | `1.19.3` |
| [org.codehaus.mojo:build-helper-maven-plugin](https://github.com/mojohaus/build-helper-maven-plugin) | `3.4.0` | `3.5.0` |
| [org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck) | `8.4.3` | `9.0.2` |


Updates `ch.qos.logback:logback-classic` from 1.4.11 to 1.4.14
- [Commits](qos-ch/logback@v_1.4.11...v_1.4.14)

Updates `com.github.dasniko:testcontainers-keycloak` from 3.1.0 to 3.2.0
- [Release notes](https://github.com/dasniko/testcontainers-keycloak/releases)
- [Commits](dasniko/testcontainers-keycloak@3.1.0...v3.2.0)

Updates `commons-io:commons-io` from 2.15.0 to 2.15.1

Updates `org.apache.commons:commons-lang3` from 3.13.0 to 3.14.0

Updates `org.keycloak:keycloak-servlet-filter-adapter` from 22.0.5 to 23.0.1

Updates `org.postgresql:postgresql` from 42.6.0 to 42.7.0
- [Release notes](https://github.com/pgjdbc/pgjdbc/releases)
- [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md)
- [Commits](pgjdbc/pgjdbc@REL42.6.0...REL42.7.0)

Updates `org.testcontainers:junit-jupiter` from 1.19.2 to 1.19.3
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.19.2...1.19.3)

Updates `org.testcontainers:postgresql` from 1.19.2 to 1.19.3
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.19.2...1.19.3)

Updates `org.codehaus.mojo:build-helper-maven-plugin` from 3.4.0 to 3.5.0
- [Release notes](https://github.com/mojohaus/build-helper-maven-plugin/releases)
- [Commits](mojohaus/build-helper-maven-plugin@3.4.0...3.5.0)

Updates `org.owasp:dependency-check-maven` from 8.4.3 to 9.0.2
- [Release notes](https://github.com/jeremylong/DependencyCheck/releases)
- [Changelog](https://github.com/jeremylong/DependencyCheck/blob/v9.0.2/CHANGELOG.md)
- [Commits](jeremylong/DependencyCheck@v8.4.3...v9.0.2)

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: com.github.dasniko:testcontainers-keycloak
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: commons-io:commons-io
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.commons:commons-lang3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.keycloak:keycloak-servlet-filter-adapter
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: org.postgresql:postgresql
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.testcontainers:junit-jupiter
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.testcontainers:postgresql
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.codehaus.mojo:build-helper-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.owasp:dependency-check-maven
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Dec 3, 2023
@hylkevds hylkevds merged commit fe5edd3 into v2.x Dec 3, 2023
2 checks passed
@hylkevds hylkevds deleted the dependabot/maven/v2.x/dependencies-eeda8b58de branch December 3, 2023 09:39
Solingen-digital pushed a commit to Solingen-digital/FROST-Server that referenced this pull request Dec 4, 2023
Bumps the dependencies group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.4.11` | `1.4.14` |
| [com.github.dasniko:testcontainers-keycloak](https://github.com/dasniko/testcontainers-keycloak) | `3.1.0` | `3.2.0` |
| commons-io:commons-io | `2.15.0` | `2.15.1` |
| org.apache.commons:commons-lang3 | `3.13.0` | `3.14.0` |
| org.keycloak:keycloak-servlet-filter-adapter | `22.0.5` | `23.0.1` |
| [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) | `42.6.0` | `42.7.0` |
| [org.testcontainers:junit-jupiter](https://github.com/testcontainers/testcontainers-java) | `1.19.2` | `1.19.3` |
| [org.testcontainers:postgresql](https://github.com/testcontainers/testcontainers-java) | `1.19.2` | `1.19.3` |
| [org.codehaus.mojo:build-helper-maven-plugin](https://github.com/mojohaus/build-helper-maven-plugin) | `3.4.0` | `3.5.0` |
| [org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck) | `8.4.3` | `9.0.2` |


Updates `ch.qos.logback:logback-classic` from 1.4.11 to 1.4.14
- [Commits](qos-ch/logback@v_1.4.11...v_1.4.14)

Updates `com.github.dasniko:testcontainers-keycloak` from 3.1.0 to 3.2.0
- [Release notes](https://github.com/dasniko/testcontainers-keycloak/releases)
- [Commits](dasniko/testcontainers-keycloak@3.1.0...v3.2.0)

Updates `commons-io:commons-io` from 2.15.0 to 2.15.1

Updates `org.apache.commons:commons-lang3` from 3.13.0 to 3.14.0

Updates `org.keycloak:keycloak-servlet-filter-adapter` from 22.0.5 to 23.0.1

Updates `org.postgresql:postgresql` from 42.6.0 to 42.7.0
- [Release notes](https://github.com/pgjdbc/pgjdbc/releases)
- [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md)
- [Commits](pgjdbc/pgjdbc@REL42.6.0...REL42.7.0)

Updates `org.testcontainers:junit-jupiter` from 1.19.2 to 1.19.3
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.19.2...1.19.3)

Updates `org.testcontainers:postgresql` from 1.19.2 to 1.19.3
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.19.2...1.19.3)

Updates `org.codehaus.mojo:build-helper-maven-plugin` from 3.4.0 to 3.5.0
- [Release notes](https://github.com/mojohaus/build-helper-maven-plugin/releases)
- [Commits](mojohaus/build-helper-maven-plugin@3.4.0...3.5.0)

Updates `org.owasp:dependency-check-maven` from 8.4.3 to 9.0.2
- [Release notes](https://github.com/jeremylong/DependencyCheck/releases)
- [Changelog](https://github.com/jeremylong/DependencyCheck/blob/v9.0.2/CHANGELOG.md)
- [Commits](jeremylong/DependencyCheck@v8.4.3...v9.0.2)

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: com.github.dasniko:testcontainers-keycloak
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: commons-io:commons-io
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.commons:commons-lang3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.keycloak:keycloak-servlet-filter-adapter
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: org.postgresql:postgresql
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.testcontainers:junit-jupiter
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.testcontainers:postgresql
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.codehaus.mojo:build-helper-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.owasp:dependency-check-maven
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant