Bump mpxj from 5.2.2 to 10.14.1

[dependabot]

Bumps mpxj from 5.2.2 to 10.14.1.

Release notes

Sourced from mpxj's releases.

Version 10.14.1

• Fix CVE-2022-41954: Temporary File Information Disclosure Vulnerability (Contributed by Jonathan Leitschuh)

Version 10.14.0

• Handle missing default calendar when reading a PMXML file.
• When reading an MPP file using a file name or File instance, ensure a more memory-efficient approach is used.
• Improve reading certain FastTrack FTS files.
• Improve generation of timephased data where working time ends at midnight.
• Improve generation of timephased data for tasks with a calendar assigned.

Version 10.13.0

• Add support for reading a resource assignment's cost account from P6 schedules.
• Add support for writing a resource assignment's cost account to PMXML files.
• Read resource assignment custom field definitions present in MPP14 files.
• Improve identification of deleted resources when reading MPP9 files.
• Ensure tasks with task calendars in MPP files are handled correctly when generating timephased data.
• Improve generation of timephased data for material resource assignments.
• Improve accuracy of timephased data when reading certain MPP files.

Version 10.12.0

• Added the Resource Assignment attribute Calculate Costs From Units, and added read and write support for Primavera schedules.
• Added the Resource attribute Calculate Costs From Units, and added read and write support for Primavera schedules.
• Added the Resource and Role attribute Sequence Number, and added read and write support for Primavera schedules.
• Added the WBS attribute Sequence Number, and added read and write support for Primavera schedules.
• Ensure activity type is read from Phoenix schedules. (Contributed by Christopher John)
• Deprecate the CostAccount method getSequence and replace with getSequenceNumber to improve naming consistency.
• Deprecate the ExpenseCategory method getSequence and replace with getSequenceNumber to improve naming consistency.
• Avoid possible ArrayIndexOutOfBoundsException when reading GUID values from MPP files (Contributed by Rohit Sinha).

Version 10.11.0

• Deprecated the Resource methods getParentID and setParentID. Replaced with getParentResourceUniqueID and setParentResourceUniqueID for clarity and consistency.
• Added the Resource methods setParent and getParent.
• Added the ChildResourceContainer interface and ResourceContainer.updateStructure method to ensure that resources can be accessed hierarchically when reading a schedule.
• Added the ResourceAssignment methods getFieldByAlias and setFieldByAlias to simplify working with custom fields, and mkae the API consistent with existing methods on Task and Resource.
• Added the TaskContainer methods getCustomFields and getFieldTypeByAlias to simplify access to task custom fields.
• Added the ResourceContainer methods getCustomFields and getFieldTypeByAlias to simplify access to resource custom fields.
• Added the ResourceAssignmentContainer methods getCustomFields and getFieldTypeByAlias to simplify access to resource assignment custom fields.
• Added the getCustomFieldsByFieldTypeClass method to CustomFieldContainer to allow retrieval of custom field details by parent class.
• Deprecated the CustomFieldContainer method getFieldByAlias to be replaced by getFieldTypeByAlias to provide a more consistent method name.
• Don't attempt to write unknown extended attributes to MSPDI files.
• Don't populate graphical indicator data if the graphical indicator is not enabled.
• Don't set custom field aliases to empty strings.
• Added the CustomFieldContainer method add.
• Deprecated the CustomFieldContainer method getCustomField, which is replaced by the get method (which returns null if the field type is not configured) and the getOrCreate method (which will return an existing configuration or create a new one if the requested field does not yet have a configuration).

Version 10.10.0

• Add an option to import Phoenix schedules as a flat set of tasks with separate activity codes, rather than creating a hierarchy of tasks from the activity codes. Note the default is to disable this behavior so existing functionality is unchanged. (Contributed by Christopher Johns)
• Add a setProperties method to reader classes to allow configuration to be supplied via a Properties instance rather than having to call setter methods. Properties passed to the UniversalProjectReader version of this method will be forwarded to the reader class UniversalProjectReader chooses to reader the supplied file. Properties for multiple reader classes can be included in the Properties instance, each reader class will ignore irrelevant properties.
• Added the get method to Task, Resource, ResourceAssignment and ProjectProperties as a replacement for the getCurrentValue method. The new get method is paired with the existing set method to provide read and write access to attributes of these classes. This change is intended to improve the interfaces to these classes by making them more consistent, and thus easier to understand.
• Deprecated the getCurrentValue method on the Task, Resource, ResourceAssignment and ProjectProperties classes. Use the new get method instead.

... (truncated)

Changelog

Sourced from mpxj's changelog.

10.14.1 (2022-11-25)

• Fix CVE-2022-41954: Temporary File Information Disclosure Vulnerability (Contributed by Jonathan Leitschuh)

10.14.0 (2022-11-21)

• Handle missing default calendar when reading a PMXML file.
• When reading an MPP file using a file name or File instance, ensure a more memory-efficient approach is used.
• Improve reading certain FastTrack FTS files.
• Improve generation of timephased data where working time ends at midnight.
• Improve generation of timephased data for tasks with a calendar assigned.

10.13.0 (2022-11-16)

• Add support for reading a resource assignment's cost account from P6 schedules.
• Add support for writing a resource assignment's cost account to PMXML files.
• Read resource assignment custom field definitions present in MPP14 files.
• Improve identification of deleted resources when reading MPP9 files.
• Ensure tasks with task calendars in MPP files are handled correctly when generating timephased data.
• Improve generation of timephased data for material resource assignments.
• Improve accuracy of timephased data when reading certain MPP files.

10.12.0 (2022-11-01)

• Added the Resource Assignment attribute Calculate Costs From Units, and added read and write support for Primavera schedules.
• Added the Resource attribute Calculate Costs From Units, and added read and write support for Primavera schedules.
• Added the Resource and Role attribute Sequence Number, and added read and write support for Primavera schedules.
• Added the WBS attribute Sequence Number, and added read and write support for Primavera schedules.
• Ensure activity type is read from Phoenix schedules. (Contributed by Christopher John)
• Deprecate the CostAccount method getSequence and replace with getSequenceNumber to improve naming consistency.
• Deprecate the ExpenseCategory method getSequence and replace with getSequenceNumber to improve naming consistency.
• Avoid possible ArrayIndexOutOfBoundsException when reading GUID values from MPP files (Contributed by Rohit Sinha).

10.11.0 (2022-09-27)

• Deprecated the Resource methods getParentID and setParentID. Replaced with getParentResourceUniqueID and setParentResourceUniqueID for clarity and consistency.
• Added the Resource methods setParent and getParent.
• Added the ChildResourceContainer interface and ResourceContainer.updateStructure method to ensure that resources can be accessed hierarchically when reading a schedule.
• Added the ResourceAssignment methods getFieldByAlias and setFieldByAlias to simplify working with custom fields, and mkae the API consistent with existing methods on Task and Resource.
• Added the TaskContainer methods getCustomFields and getFieldTypeByAlias to simplify access to task custom fields.
• Added the ResourceContainer methods getCustomFields and getFieldTypeByAlias to simplify access to resource custom fields.
• Added the ResourceAssignmentContainer methods getCustomFields and getFieldTypeByAlias to simplify access to resource assignment custom fields.
• Added the getCustomFieldsByFieldTypeClass method to CustomFieldContainer to allow retrieval of custom field details by parent class.
• Deprecated the CustomFieldContainer method getFieldByAlias to be replaced by getFieldTypeByAlias to provide a more consistent method name.
• Don't attempt to write unknown extended attributes to MSPDI files.
• Don't populate graphical indicator data if the graphical indicator is not enabled.
• Don't set custom field aliases to empty strings.
• Added the CustomFieldContainer method add.
• Deprecated the CustomFieldContainer method getCustomField, which is replaced by the get method (which returns null if the field type is not configured) and the getOrCreate method (which will return an existing configuration or create a new one if the requested field does not yet have a configuration).

10.10.0 (2022-09-13)

• Add an option to import Phoenix schedules as a flat set of tasks with separate activity codes, rather than creating a hierarchy of tasks from the activity codes. Note the default is to disable this behavior so existing functionality is unchanged. (Contributed by Christopher John)
• Add a setProperties method to reader classes to allow configuration to be supplied via a Properties instance rather than having to call setter methods. Properties passed to the UniversalProjectReader version of this method will be forwarded to the reader class UniversalProjectReader chooses to reader the supplied file. Properties for multiple reader classes can be included in the Properties instance, each reader class will ignore irrelevant properties.
• Added the get method to Task, Resource, ResourceAssignment and ProjectProperties as a replacement for the getCurrentValue method. The new get method is paired with the existing set method to provide read and write access to attributes of these classes. This change is intended to improve the interfaces to these classes by making them more consistent, and thus easier to understand.
• Deprecated the getCurrentValue method on the Task, Resource, ResourceAssignment and ProjectProperties classes. Use the new get method instead.

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.