8000 Bump the gradle-version-updates group across 1 directory with 13 updates by dependabot[bot] · Pull Request #2970 · secureCodeBox/secureCodeBox · GitHub
[go: up one dir, main page]

Skip to content

Conversation

@dependabot
Copy link
Contributor
@dependabot dependabot bot commented on behalf of github Apr 7, 2025

Bumps the gradle-version-updates group with 13 updates in the /hooks/persistence-defectdojo/hook directory:

Package From To
org.junit:junit-bom 5.11.4 5.12.1
org.springframework:spring-web 6.2.3 6.2.5
com.fasterxml.jackson.core:jackson-core 2.18.2 2.18.3
com.fasterxml.jackson.core:jackson-annotations 2.18.2 2.18.3
com.fasterxml.jackson.core:jackson-databind 2.18.2 2.18.3
com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.18.2 2.18.3
org.slf4j:slf4j-api 2.0.16 2.0.17
org.slf4j:slf4j-log4j12 2.0.16 2.0.17
org.mockito:mockito-core 5.15.2 5.17.0
org.mockito:mockito-junit-jupiter 5.15.2 5.17.0
uk.org.webcompere:system-stubs-jupiter 2.1.7 2.1.8
io.freefair.lombok 8.12.1 8.13.1
org.sonarqube 6.0.1.5171 6.1.0.5360

Updates org.junit:junit-bom from 5.11.4 to 5.12.1

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 5.12.1 = Platform 1.12.1 + Jupiter 5.12.1 + Vintage 5.12.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.12.0...r5.12.1

JUnit 5.12.0 = Platform 1.12.0 + Jupiter 5.12.0 + Vintage 5.12.0

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r5.11.4...r5.12.0

JUnit 5.12.0-RC2 = Platform 1.12.0-RC2 + Jupiter 5.12.0-RC2 + Vintage 5.12.0-RC2

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.12.0-RC1...r5.12.0-RC2

JUnit 5.12.0-RC1 = Platform 1.12.0-RC1 + Jupiter 5.12.0-RC1 + Vintage 5.12.0-RC1

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.12.0-M1...r5.12.0-RC1

JUnit 5.12.0-M1 = Platform 1.12.0-M1 + Jupiter 5.12.0-M1 + Vintage 5.12.0-M1

See Release Notes.

New Contributors

... (truncated)

Commits
  • ba9c9ae Release 5.12.1
  • e28ad4a Finalize 5.12.1 release notes
  • 1044e2c Move entry to 5.12.1 release notes
  • bea821d Fix Javadoc formatting
  • 1a1a67d Set stable module name for the standalone JAR file
  • 062d3fa Remove internal packages from API reports
  • 74521ab Introduce ExtensionContext.getEnclosingTestClasses()
  • 1e135b9 Create initial 5.12.1 release notes from template
  • d540e4f Link to correct method
  • 31d60b7 Split API reports by module and package
  • Additional commits viewable in compare view

Updates org.springframework:spring-web from 6.2.3 to 6.2.5

Release notes

Sourced from org.springframework:spring-web's releases.

v6.2.5

⭐ New Features

  • Make dependencies on AssertJ and JUnit in spring-core-test optional #34612
  • Suggest compilation with -parameters when AspectJAdviceParameterNameDiscoverer fails against ambiguity #34609
  • SseBuilder in ServerResponse should allow empty comment #34608
  • MockServerWebExchange does not allow setting the ApplicationContext on the base class #34601
  • FormHttpMessageConverter should throw HttpMessageNotReadableException when the http form data is invalid #34594
  • Provide a method to retrieve all singleton autowire candidates from the bean factory #34591

🐞 Bug Fixes

  • PathMatchingResourcePatternResolver regression for jar root scanning in 6.2.4 #34607
  • AbstractReactiveTransactionManager throws IllegalStateException when rollback fails after commit attempt #34595
  • Recursively boxing/unboxing nested inline value classes #34592

📔 Documentation

  • MvcUriComponentsBuilder javadocs inaccurately reflects usage of forwarded headers #34615
  • Fix formatting and update links to scripting libraries and HDIV #34603
  • Remove dubious link to MockObjects Web site in reference manual #34593
  • Fix StringUtils#uriDecode Javadoc #34590

🔨 Dependency Upgrades

  • Upgrade to ASM 9.8 (for early Java 25 support) #34600

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Helmsdown, @​dmitrysulman, and @​ngocnhan-tran1996

v6.2.4

⭐ New Features

  • JettyCoreHttpHandlerAdapter compatibility with Jetty 12.0.17 #34561
  • HandlerMethodValidationException.Visitor should support RequestBody with method parameter constraints #34549
  • Allow ContentResultMatchersDsl matchers for supertypes of the checked type #34542
  • Avoid JarURLConnection resource leak in AbstractFileResolvingResource.exists() #34528
  • Deprecate rowsExpected property of SqlQuery for removal #34526
  • Supply RuntimeHints to an AotContextLoader #34513
  • Deprecate and remove use of UrlPathHelper in ServletWebSocketHandlerRegistry #34508
  • Avoid unnecessary CGLIB processing on configuration classes #34486
  • Inconsistent default class loaders in hint classes #34470
  • Add missing converters to DefaultRestClientBuilder #34439
  • Improve BeanFactory/ObjectProvider to select the only one default candidate among non-default candidates #34432

🐞 Bug Fixes

... (truncated)

Commits
  • 0f19fa5 Release v6.2.5
  • 208d52d Introduce Checkstyle rule for separator symbol location
  • 18c3b63 Fix dated Javadoc in MvcUriComponentsBuilder
  • 34c69bf Allow empty comment in ServerResponse.SseBuilder
  • 37d7af4 Allow setting ApplicationContext on MockServerWebExchange
  • cc986cd Defer triggerAfterCompletion invocation in doRollbackOnCommitException
  • 0141725 Polishing
  • 0c2ba4e Recursively box/unbox nested inline value classes
  • c6a9aa5 Remove BDDMockito Checkstyle rule
  • ad949a7 Add includeNonSingletons flag for ObjectProvider stream access
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-core from 2.18.2 to 2.18.3

Commits
  • cc34e8d [maven-release-plugin] prepare release jackson-core-2.18.3
  • 7aaf78f Prep for 2.18.3 release
  • e1f247f Update Ubuntu in CI
  • 31c74ac Fix credits wrt version number
  • 583a8c1 ...
  • 671f8ed fix the surrogate utf8 feature when custom characterEscapes is used (#1399)
  • 0aa97a7 Merge branch '2.17' into 2.18
  • 58889b0 Update release notes wrt #1397
  • 7e3c408 Changes post #4917: forcibly clear _numberString when new number token set ...
  • e67a3ec Merge branch '2.17' into 2.18
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-annotations from 2.18.2 to 2.18.3

Commits

Updates com.fasterxml.jackson.core:jackson-databind from 2.18.2 to 2.18.3

Commits

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.18.2 to 2.18.3

Updates org.slf4j:slf4j-api from 2.0.16 to 2.0.17

Updates org.slf4j:slf4j-log4j12 from 2.0.16 to 2.0.17

Updates org.mockito:mockito-core from 5.15.2 to 5.17.0

Release notes

Sourced from org.mockito:mockito-core's releases.

v5.17.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.17.0

v5.16.1

Changelog generated by Shipkit Changelog Gradle Plugin

5.16.1

v5.16.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.16.0

Commits
  • 7764992 Remove mention of mockito-inline from mockmaker exception (#3628)
  • ee92ad4 Fix broken banner image link (#3632)
  • 3edab52 Clarify structure of commit messages (#3626)
  • bfab743 Fall back to Throwable Location strategy on Android (#3619)
  • 4f469c8 MockitoExtension fails cleanup when aborted before setup (#3623)
  • 1764e62 Update links to javadoc.io (#3616)
  • 1e029d7 Add missing requirement to objenesis.
  • d000e63 Rework of injection strategy in the context of modules (#3608)
  • 0215884 Remove Arrays.asList from critical stubbing path in GenericMetadataSupport (#...
  • d185035 Add reference to Gradle documentation on how to make task relocatable (#3606)
  • Additional commits viewable in compare view

Updates org.mockito:mockito-junit-jupiter from 5.15.2 to 5.17.0

Release notes

Sourced from org.mockito:mockito-junit-jupiter's releases.

v5.17.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.17.0

v5.16.1

Changelog generated by Shipkit Changelog Gradle Plugin

5.16.1

v5.16.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.16.0

Commits
  • 7764992 Remove mention of mockito-inline from mockmaker exception (#3628)
  • ee92ad4 Fix broken banner image link (#3632)
  • 3edab52 Clarify structure of commit messages (#3626)
  • bfab743 Fall back to Throwable Location strategy on Android (#3619)
  • 4f469c8 MockitoExtension fails cleanup when aborted before setup (#3623)
  • 1764e62 Update links to javadoc.io (#3616)
  • 1e029d7 Add missing requirement to objenesis.
  • d000e63 Rework of injection strategy in the context of modules (#3608)
  • 0215884 Remove Arrays.asList from critical stubbing path in GenericMetadataSupport (#...
  • d185035 Add reference to Gradle documentation on how to make task relocatable (#3606)
  • Additional commits viewable in compare view

Updates uk.org.webcompere:system-stubs-jupiter from 2.1.7 to 2.1.8

Release notes

Sourced from uk.org.webcompere:system-stubs-jupiter's releases.

v2.1.8

Updates byte buddy for compatibility with later Java versions.

Adds workflow automation for future releases.

Commits
  • 05af258 Add the signature
  • 6061b87 Switch server username and password
  • 72f709a Put workflow in the right place
  • c2f9433 Set to version 2.1.8 with a release action
  • 562c933 Merge pull request #94 from webcompere/bump-byte-buddy
  • ac306d3 Bump to latest bytebuddy
  • d6e5c5f Merge pull request #91 from webcompere/release-2.1.7
  • 0ebbea5 Update readme with latest
  • f1dc6cc [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates io.freefair.lombok from 8.12.1 to 8.13.1

Release notes

Sourced from io.freefair.lombok's releases.

8.13.1

What's Changed

Full Changelog: freefair/gradle-plugins@8.13...8.13.1

8.13

What's Changed

Full Changelog: freefair/gradle-plugins@8.12.2.1...8.13

8.12.2.1

What's Changed

Full Changelog: freefair/gradle-plugins@8.12.2...8.12.2.1

8.12.2

What's Changed

Full Changelog: freefair/gradle-plugins@8.12.1...8.12.2

Commits
  • b45c035 Merge pull request #1340 from freefair/dependabot/gradle/de.larsgrefer.sass-s...
  • 9298f48 Bump de.larsgrefer.sass:sass-embedded-host from 4.0.2 to 4.1.0
  • 55e0fd6 Merge pull request #1338 from freefair/dependabot/gradle/examples/org.springf...
  • b686b0c Bump org.springframework.boot:spring-boot-starter in /examples
  • 7ff0f9d Fix javadoc generation
  • f936b47 Merge pull request #1330 from freefair/dependabot/gradle/examples/org.aspectj...
  • c12bd20 Merge pull request #1329 from freefair/dependabot/gradle/examples/org.aspectj...
  • 556678b Merge pull request #1335 from freefair/dependabot/gradle/examples/org.springf...
  • 86e9950 Stop extending the deprecated AbstractOptions class
  • 041b91d Merge pull request #1331 from freefair/dependabot/gradle/org.mockito-mockito-...
  • Additional commits viewable in compare view

Updates org.sonarqube from 6.0.1.5171 to 6.1.0.5360

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Apr 7, 2025
@netlify
Copy link
netlify bot commented Apr 7, 2025

Deploy Preview for docs-securecodebox canceled.

Name Link
🔨 Latest commit 4c1453a
🔍 Latest deploy log https://app.netlify.com/projects/docs-securecodebox/deploys/683725fd4e7bb800082b62a5

@Weltraumschaf Weltraumschaf moved this from Triage to To Review in secureCodeBox Apr 9, 2025
@github-project-automation github-project-automation bot moved this from To Review to Reviewer Approved in secureCo 8000 deBox Apr 9, 2025
@Weltraumschaf Weltraumschaf self-assigned this Apr 9, 2025
@Weltraumschaf Weltraumschaf force-pushed the dependabot/gradle/hooks/persistence-defectdojo/hook/gradle-version-updates-c3ea7ed6d4 branch from 55af036 to 374aecf Compare April 9, 2025 10:30
@Weltraumschaf Weltraumschaf moved this from Reviewer Approved to In Progress in secureCodeBox Apr 9, 2025
@github-actions
Copy link
github-actions bot commented Apr 9, 2025

🦙 MegaLinter status: ✅ SUCCESS

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ GROOVY npm-groovy-lint 1 0 0 7.07s
✅ YAML prettier 1 0 0 0.65s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by OX Security

@Weltraumschaf
Copy link
Member

Depends on #2975

@Weltraumschaf Weltraumschaf force-pushed the dependabot/gradle/hooks/persistence-defectdojo/hook/gradle-version-updates-c3ea7ed6d4 branch 3 times, most recently from a73a1d8 to a121d3e Compare April 15, 2025 11:25
@Weltraumschaf Weltraumschaf force-pushed the dependabot/gradle/hooks/persistence-defectdojo/hook/gradle-version-updates-c3ea7ed6d4 branch from 7343d05 to b448def Compare April 22, 2025 11:46
@Weltraumschaf Weltraumschaf force-pushed the dependabot/gradle/hooks/persistence-defectdojo/hook/gradle-version-updates-c3ea7ed6d4 branch 2 times, most recently from d409e5f to 986f175 Compare May 6, 2025 07:54
dependabot bot and others added 2 commits May 28, 2025 16:45
Bumps the gradle-version-updates group with 13 updates in the /hooks/persistence-defectdojo/hook directory:

| Package | From | To |
| --- | --- | --- |
| [org.junit:junit-bom](https://github.com/junit-team/junit5) | `5.11.4` | `5.12.1` |
| [org.springframework:spring-web](https://github.com/spring-projects/spring-framework) | `6.2.3` | `6.2.5` |
| [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.18.2` | `2.18.3` |
| [com.fasterxml.jackson.core:jackson-annotations](https://github.com/FasterXML/jackson) | `2.18.2` | `2.18.3` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.18.2` | `2.18.3` |
| com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.18.2` | `2.18.3` |
| org.slf4j:slf4j-api | `2.0.16` | `2.0.17` |
| org.slf4j:slf4j-log4j12 | `2.0.16` | `2.0.17` |
| [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.15.2` | `5.17.0` |
| [org.mockito:mockito-junit-jupiter](https://github.com/mockito/mockito) | `5.15.2` | `5.17.0` |
| [uk.org.webcompere:system-stubs-jupiter](https://github.com/webcompere/system-stubs) | `2.1.7` | `2.1.8` |
| [io.freefair.lombok](https://github.com/freefair/gradle-plugins) | `8.12.1` | `8.13.1` |
| org.sonarqube | `6.0.1.5171` | `6.1.0.5360` |



Updates `org.junit:junit-bom` from 5.11.4 to 5.12.1
- [Release notes](https://github.com/junit-team/junit5/releases)
- [Commits](junit-team/junit-framework@r5.11.4...r5.12.1)

Updates `org.springframework:spring-web` from 6.2.3 to 6.2.5
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.3...v6.2.5)

Updates `com.fasterxml.jackson.core:jackson-core` from 2.18.2 to 2.18.3
- [Commits](FasterXML/jackson-core@jackson-core-2.18.2...jackson-core-2.18.3)

Updates `com.fasterxml.jackson.core:jackson-annotations` from 2.18.2 to 2.18.3
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.2 to 2.18.3
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.18.2 to 2.18.3

Updates `org.slf4j:slf4j-api` from 2.0.16 to 2.0.17

Updates `org.slf4j:slf4j-log4j12` from 2.0.16 to 2.0.17

Updates `org.mockito:mockito-core` from 5.15.2 to 5.17.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.15.2...v5.17.0)

Updates `org.mockito:mockito-junit-jupiter` from 5.15.2 to 5.17.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.15.2...v5.17.0)

Updates `uk.org.webcompere:system-stubs-jupiter` from 2.1.7 to 2.1.8
- [Release notes](https://github.com/webcompere/system-stubs/releases)
- [Changelog](https://github.com/webcompere/system-stubs/blob/main/History.md)
- [Commits](webcompere/system-stubs@system-stubs-parent-2.1.7...system-stubs-parent-2.1.8)

Updates `io.freefair.lombok` from 8.12.1 to 8.13.1
- [Release notes](https://github.com/freefair/gradle-plugins/releases)
- [Commits](freefair/gradle-plugins@8.12.1...8.13.1)

Updates `org.sonarqube` from 6.0.1.5171 to 6.1.0.5360

---
updated-dependencies:
- dependency-name: org.junit:junit-bom
  dependency-version: 5.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-version-updates
- dependency-name: org.springframework:spring-web
  dependency-version: 6.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-version-updates
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: 2.18.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-version-updates
- dependency-name: com.fasterxml.jackson.core:jackson-annotations
  dependency-version: 2.18.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-version-updates
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.18.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-version-updates
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-version: 2.18.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-version-updates
- dependency-name: org.slf4j:slf4j-api
  dependency-version: 2.0.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-version-updates
- dependency-name: org.slf4j:slf4j-log4j12
  dependency-version: 2.0.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-version-updates
- dependency-name: org.mockito:mockito-core
  dependency-version: 5.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-version-updates
- dependency-name: org.mockito:mockito-junit-jupiter
  dependency-version: 5.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-version-updates
- dependency-name: uk.org.webcompere:system-stubs-jupiter
  dependency-version: 2.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-version-updates
- dependency-name: io.freefair.lombok
  dependency-version: 8.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-version-updates
- dependency-name: org.sonarqube
  dependency-version: 6.1.0.5360
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-version-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Sven Strittmatter <sven.strittmatter@iteratec.com>
@Weltraumschaf Weltraumschaf force-pushed the dependabot/gradle/hooks/persistence-defectdojo/hook/gradle-version-updates-c3ea7ed6d4 branch from 986f175 to ab6408f Compare May 28, 2025 14:45
This fixes another Gradle deprecation warning about automatic
test framework loading.

Signed-off-by: Sven Strittmatter <sven.strittmatter@iteratec.com>
@sonarqubecloud
Copy link

@Weltraumschaf Weltraumschaf merged commit 07cfe05 into main May 28, 2025
51 checks passed
@Weltraumschaf Weltraumschaf deleted the dependabot/gradle/hooks/persistence-defectdojo/hook/gradle-version-updates-c3ea7ed6d4 branch May 28, 2025 16:01
@github-project-automation github-project-automation bot moved this from In Progress to Done in secureCodeBox May 28, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

1 participant

0