From 70ed00b66da1afc37d7b4e503acf3b574dff79ac Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 6 Oct 2024 07:47:06 +0000 Subject: [PATCH 01/14] Bump com.azure:azure-identity from 1.13.3 to 1.14.0 in /prime-router Bumps [com.azure:azure-identity](https://github.com/Azure/azure-sdk-for-java) from 1.13.3 to 1.14.0. - [Release notes](https://github.com/Azure/azure-sdk-for-java/releases) - [Commits](https://github.com/Azure/azure-sdk-for-java/compare/azure-identity_1.13.3...azure-core_1.14.0) --- updated-dependencies: - dependency-name: com.azure:azure-identity dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- prime-router/build.gradle.kts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/prime-router/build.gradle.kts b/prime-router/build.gradle.kts index 5705ce5bd18..aca7fdfabb8 100644 --- a/prime-router/build.gradle.kts +++ b/prime-router/build.gradle.kts @@ -871,7 +871,7 @@ dependencies { exclude(group = "com.azure", module = "azure-core") exclude(group = "com.azure", module = "azure-core-http-netty") } - implementation("com.azure:azure-identity:1.13.3") { + implementation("com.azure:azure-identity:1.14.0") { exclude(group = "com.azure", module = "azure-core") exclude(group = "com.azure", module = "azure-core-http-netty") } From df0bcf53ca4630c43f70f36ba488cf5ca122f25b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 13 Oct 2024 08:01:05 +0000 Subject: [PATCH 02/14] Bump io.mockk:mockk from 1.13.12 to 1.13.13 in /prime-router Bumps [io.mockk:mockk](https://github.com/mockk/mockk) from 1.13.12 to 1.13.13. - [Release notes](https://github.com/mockk/mockk/releases) - [Commits](https://github.com/mockk/mockk/compare/1.13.12...1.13.13) --- updated-dependencies: - dependency-name: io.mockk:mockk dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- prime-router/build.gradle.kts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/prime-router/build.gradle.kts b/prime-router/build.gradle.kts index c8dcd983c41..715deed6035 100644 --- a/prime-router/build.gradle.kts +++ b/prime-router/build.gradle.kts @@ -987,7 +987,7 @@ dependencies { runtimeOnly("io.jsonwebtoken:jjwt-jackson:0.11.5") testImplementation(kotlin("test-junit5")) - testImplementation("io.mockk:mockk:1.13.12") + testImplementation("io.mockk:mockk:1.13.13") testImplementation("io.ktor:ktor-client-mock:$ktorVersion") implementation(project(":shared")) From cf311bb86e477d9077285bc09c8cd79eae082171 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 13 Oct 2024 08:43:04 +0000 Subject: [PATCH 03/14] Bump com.nimbusds:oauth2-oidc-sdk from 11.19.1 to 11.20.1 in /auth Bumps [com.nimbusds:oauth2-oidc-sdk](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions) from 11.19.1 to 11.20.1. - [Changelog](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/src/master/CHANGELOG.txt) - [Commits](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/branches/compare/11.20.1..11.19.1) --- updated-dependencies: - dependency-name: com.nimbusds:oauth2-oidc-sdk dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- auth/build.gradle.kts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/auth/build.gradle.kts b/auth/build.gradle.kts index 9a8b9d8a923..4c7f86fae99 100644 --- a/auth/build.gradle.kts +++ b/auth/build.gradle.kts @@ -24,7 +24,7 @@ dependencies { implementation("org.springframework.cloud:spring-cloud-gateway-webflux") implementation("org.springframework.boot:spring-boot-starter-oauth2-resource-server") - runtimeOnly("com.nimbusds:oauth2-oidc-sdk:11.19.1") + runtimeOnly("com.nimbusds:oauth2-oidc-sdk:11.20.1") testImplementation("org.springframework.boot:spring-boot-starter-test") testImplementation("org.springframework.security:spring-security-test") From 93a263c3655b5d3da65c168b90cdc36bc2dae7c1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 13 Oct 2024 08:43:57 +0000 Subject: [PATCH 04/14] Bump plugin.spring from 2.0.0 to 2.0.21 in /auth Bumps [plugin.spring](https://github.com/JetBrains/kotlin) from 2.0.0 to 2.0.21. - [Release notes](https://github.com/JetBrains/kotlin/releases) - [Changelog](https://github.com/JetBrains/kotlin/blob/v2.0.21/ChangeLog.md) - [Commits](https://github.com/JetBrains/kotlin/compare/v2.0.0...v2.0.21) --- updated-dependencies: - dependency-name: plugin.spring dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- auth/build.gradle.kts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/auth/build.gradle.kts b/auth/build.gradle.kts index 9a8b9d8a923..174d2e3b0e2 100644 --- a/auth/build.gradle.kts +++ b/auth/build.gradle.kts @@ -4,7 +4,7 @@ plugins { id("org.springframework.boot") version "3.3.4" id("io.spring.dependency-management") version "1.1.6" id("reportstream.project-conventions") - kotlin("plugin.spring") version "2.0.0" + kotlin("plugin.spring") version "2.0.21" } group = "gov.cdc.prime" From 403ae3895ad02825e5a187ccb68218403fd55e50 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 13 Oct 2024 08:44:13 +0000 Subject: [PATCH 05/14] Bump com.azure.spring:spring-cloud-azure-dependencies in /auth Bumps [com.azure.spring:spring-cloud-azure-dependencies](https://github.com/Azure/azure-sdk-for-java) from 5.16.0 to 5.17.1. - [Release notes](https://github.com/Azure/azure-sdk-for-java/releases) - [Commits](https://github.com/Azure/azure-sdk-for-java/compare/spring-cloud-azure_5.16.0...spring-cloud-azure_5.17.1) --- updated-dependencies: - dependency-name: com.azure.spring:spring-cloud-azure-dependencies dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- auth/build.gradle.kts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/auth/build.gradle.kts b/auth/build.gradle.kts index 9a8b9d8a923..54572381d8a 100644 --- a/auth/build.gradle.kts +++ b/auth/build.gradle.kts @@ -45,7 +45,7 @@ configurations.all { dependencyManagement { imports { - mavenBom("com.azure.spring:spring-cloud-azure-dependencies:5.16.0") + mavenBom("com.azure.spring:spring-cloud-azure-dependencies:5.17.1") mavenBom("org.springframework.cloud:spring-cloud-dependencies:2023.0.3") } } From 905b9044fbd59f76572c4503ffb7a8a4932e4482 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 13 Oct 2024 08:47:13 +0000 Subject: [PATCH 06/14] Bump plugin.spring from 2.0.20 to 2.0.21 in /submissions Bumps [plugin.spring](https://github.com/JetBrains/kotlin) from 2.0.20 to 2.0.21. - [Release notes](https://github.com/JetBrains/kotlin/releases) - [Changelog](https://github.com/JetBrains/kotlin/blob/v2.0.21/ChangeLog.md) - [Commits](https://github.com/JetBrains/kotlin/compare/v2.0.20...v2.0.21) --- updated-dependencies: - dependency-name: plugin.spring dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- submissions/build.gradle.kts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/submissions/build.gradle.kts b/submissions/build.gradle.kts index 8c96e222de5..f31054a0d09 100644 --- a/submissions/build.gradle.kts +++ b/submissions/build.gradle.kts @@ -4,7 +4,7 @@ plugins { id("org.springframework.boot") version "3.3.4" id("io.spring.dependency-management") version "1.1.6" id("reportstream.project-conventions") - kotlin("plugin.spring") version "2.0.20" + kotlin("plugin.spring") version "2.0.21" } group = "gov.cdc.prime" From d2b3376dd5b412a196eadb073482fd9b806e963a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 20 Oct 2024 07:53:48 +0000 Subject: [PATCH 07/14] Bump com.avast.gradle.docker-compose in /prime-router Bumps [com.avast.gradle.docker-compose](https://github.com/avast/gradle-docker-compose-plugin) from 0.17.8 to 0.17.10. - [Release notes](https://github.com/avast/gradle-docker-compose-plugin/releases) - [Commits](https://github.com/avast/gradle-docker-compose-plugin/compare/0.17.8...0.17.10) --- updated-dependencies: - dependency-name: com.avast.gradle.docker-compose dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- prime-router/build.gradle.kts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/prime-router/build.gradle.kts b/prime-router/build.gradle.kts index c8dcd983c41..81c269e3323 100644 --- a/prime-router/build.gradle.kts +++ b/prime-router/build.gradle.kts @@ -42,7 +42,7 @@ plugins { id("com.adarshr.test-logger") version "4.0.0" id("jacoco") id("org.jetbrains.dokka") version "1.8.20" - id("com.avast.gradle.docker-compose") version "0.17.8" + id("com.avast.gradle.docker-compose") version "0.17.10" id("org.jetbrains.kotlin.plugin.serialization") version "$kotlinVersion" id("com.nocwriter.runsql") version ("1.0.3") id("io.swagger.core.v3.swagger-gradle-plugin") version "2.2.23" From 6f3afbe543bc73a8004f6d049c1e33b69207e4be Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 20 Oct 2024 07:54:11 +0000 Subject: [PATCH 08/14] Bump com.azure:azure-security-keyvault-secrets in /prime-router Bumps [com.azure:azure-security-keyvault-secrets](https://github.com/Azure/azure-sdk-for-java) from 4.8.7 to 4.9.0. - [Release notes](https://github.com/Azure/azure-sdk-for-java/releases) - [Commits](https://github.com/Azure/azure-sdk-for-java/compare/azure-security-keyvault-keys_4.8.7...azure-cosmos_4.9.0) --- updated-dependencies: - dependency-name: com.azure:azure-security-keyvault-secrets dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- prime-router/build.gradle.kts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/prime-router/build.gradle.kts b/prime-router/build.gradle.kts index c8dcd983c41..aeb2bd8119f 100644 --- a/prime-router/build.gradle.kts +++ b/prime-router/build.gradle.kts @@ -867,7 +867,7 @@ dependencies { implementation("com.azure:azure-storage-queue:12.22.0") { exclude(group = "com.azure", module = "azure-core") } - implementation("com.azure:azure-security-keyvault-secrets:4.8.7") { + implementation("com.azure:azure-security-keyvault-secrets:4.9.0") { exclude(group = "com.azure", module = "azure-core") exclude(group = "com.azure", module = "azure-core-http-netty") } From 5aa3bab8f3682b943e8a865cda215944af16efe7 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 23 Oct 2024 14:50:29 +0000 Subject: [PATCH 09/14] Bump org.commonmark:commonmark from 0.23.0 to 0.24.0 in /prime-router Bumps [org.commonmark:commonmark](https://github.com/commonmark/commonmark-java) from 0.23.0 to 0.24.0. - [Release notes](https://github.com/commonmark/commonmark-java/releases) - [Changelog](https://github.com/commonmark/commonmark-java/blob/main/CHANGELOG.md) - [Commits](https://github.com/commonmark/commonmark-java/compare/commonmark-parent-0.23.0...commonmark-parent-0.24.0) --- updated-dependencies: - dependency-name: org.commonmark:commonmark dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- prime-router/build.gradle.kts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/prime-router/build.gradle.kts b/prime-router/build.gradle.kts index 267caf5989d..cc1d3fc8dd3 100644 --- a/prime-router/build.gradle.kts +++ b/prime-router/build.gradle.kts @@ -926,7 +926,7 @@ dependencies { implementation("com.zaxxer:HikariCP:6.0.0") implementation("org.flywaydb:flyway-core:10.18.2") implementation("org.flywaydb:flyway-database-postgresql:10.18.2") - implementation("org.commonmark:commonmark:0.23.0") + implementation("org.commonmark:commonmark:0.24.0") implementation("com.google.guava:guava:33.3.1-jre") implementation("com.helger.as2:as2-lib:5.1.2") implementation("org.bouncycastle:bcprov-jdk15to18:1.78.1") From c74b7a871c09e3f1a771eee22a8a46ee0d1adac2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 23 Oct 2024 14:50:35 +0000 Subject: [PATCH 10/14] Bump org.springframework.security:spring-security-oauth2-jose Bumps [org.springframework.security:spring-security-oauth2-jose](https://github.com/spring-projects/spring-security) from 6.3.3 to 6.3.4. - [Release notes](https://github.com/spring-projects/spring-security/releases) - [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc) - [Commits](https://github.com/spring-projects/spring-security/compare/6.3.3...6.3.4) --- updated-dependencies: - dependency-name: org.springframework.security:spring-security-oauth2-jose dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- submissions/build.gradle.kts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/submissions/build.gradle.kts b/submissions/build.gradle.kts index 8c96e222de5..b246c65b133 100644 --- a/submissions/build.gradle.kts +++ b/submissions/build.gradle.kts @@ -16,7 +16,7 @@ dependencies { implementation("org.springframework.boot:spring-boot-starter-web") implementation("org.springframework.boot:spring-boot-starter-security") implementation("org.springframework.boot:spring-boot-starter-oauth2-resource-server") - implementation("org.springframework.security:spring-security-oauth2-jose:6.3.3") + implementation("org.springframework.security:spring-security-oauth2-jose:6.3.4") implementation("com.azure.spring:spring-cloud-azure-starter-storage") implementation("com.microsoft.azure:applicationinsights-runtime-attach:3.5.4") From 0dd2fa8d1dc043b8f291242a7b726f9c5c0406dc Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 27 Oct 2024 07:11:41 +0000 Subject: [PATCH 11/14] Bump ca.uhn.hapi.fhir:org.hl7.fhir.r4 in /prime-router Bumps ca.uhn.hapi.fhir:org.hl7.fhir.r4 from 6.3.24 to 6.4.0. --- updated-dependencies: - dependency-name: ca.uhn.hapi.fhir:org.hl7.fhir.r4 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- prime-router/build.gradle.kts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/prime-router/build.gradle.kts b/prime-router/build.gradle.kts index 267caf5989d..a79835e88de 100644 --- a/prime-router/build.gradle.kts +++ b/prime-router/build.gradle.kts @@ -904,7 +904,7 @@ dependencies { implementation("ca.uhn.hapi.fhir:hapi-fhir-client:7.4.2") // pin implementation("ca.uhn.hapi.fhir:org.hl7.fhir.utilities:6.3.29") - implementation("ca.uhn.hapi.fhir:org.hl7.fhir.r4:6.3.24") + implementation("ca.uhn.hapi.fhir:org.hl7.fhir.r4:6.4.0") implementation("ca.uhn.hapi:hapi-base:2.5.1") implementation("ca.uhn.hapi:hapi-structures-v251:2.5.1") implementation("ca.uhn.hapi:hapi-structures-v27:2.5.1") From c51268bf4cb5943d1453a613374438e7fda03d95 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 27 Oct 2024 07:11:47 +0000 Subject: [PATCH 12/14] Bump ca.uhn.hapi.fhir:org.hl7.fhir.utilities in /prime-router Bumps ca.uhn.hapi.fhir:org.hl7.fhir.utilities from 6.3.29 to 6.4.0. --- updated-dependencies: - dependency-name: ca.uhn.hapi.fhir:org.hl7.fhir.utilities dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- prime-router/build.gradle.kts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/prime-router/build.gradle.kts b/prime-router/build.gradle.kts index 267caf5989d..1a1820316e0 100644 --- a/prime-router/build.gradle.kts +++ b/prime-router/build.gradle.kts @@ -903,7 +903,7 @@ dependencies { implementation("ca.uhn.hapi.fhir:hapi-fhir-caching-caffeine:7.4.2") implementation("ca.uhn.hapi.fhir:hapi-fhir-client:7.4.2") // pin - implementation("ca.uhn.hapi.fhir:org.hl7.fhir.utilities:6.3.29") + implementation("ca.uhn.hapi.fhir:org.hl7.fhir.utilities:6.4.0") implementation("ca.uhn.hapi.fhir:org.hl7.fhir.r4:6.3.24") implementation("ca.uhn.hapi:hapi-base:2.5.1") implementation("ca.uhn.hapi:hapi-structures-v251:2.5.1") From 3113bc53efa1a62acbfaeba74fbdc871f69f6f1e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 27 Oct 2024 08:18:27 +0000 Subject: [PATCH 13/14] Bump org.springframework.boot from 3.3.4 to 3.3.5 in /auth Bumps [org.springframework.boot](https://github.com/spring-projects/spring-boot) from 3.3.4 to 3.3.5. - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](https://github.com/spring-projects/spring-boot/compare/v3.3.4...v3.3.5) --- updated-dependencies: - dependency-name: org.springframework.boot dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- auth/build.gradle.kts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/auth/build.gradle.kts b/auth/build.gradle.kts index e6d82c00810..4527efc9d34 100644 --- a/auth/build.gradle.kts +++ b/auth/build.gradle.kts @@ -1,7 +1,7 @@ apply(from = rootProject.file("buildSrc/shared.gradle.kts")) plugins { - id("org.springframework.boot") version "3.3.4" + id("org.springframework.boot") version "3.3.5" id("io.spring.dependency-management") version "1.1.6" id("reportstream.project-conventions") kotlin("plugin.spring") version "2.0.0" From 10a512bab21af479459215260489b16e445938e1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 27 Oct 2024 08:37:29 +0000 Subject: [PATCH 14/14] Bump org.springframework.boot from 3.3.4 to 3.3.5 in /submissions Bumps [org.springframework.boot](https://github.com/spring-projects/spring-boot) from 3.3.4 to 3.3.5. - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](https://github.com/spring-projects/spring-boot/compare/v3.3.4...v3.3.5) --- updated-dependencies: - dependency-name: org.springframework.boot dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- submissions/build.gradle.kts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/submissions/build.gradle.kts b/submissions/build.gradle.kts index 8c96e222de5..d1c2631a40a 100644 --- a/submissions/build.gradle.kts +++ b/submissions/build.gradle.kts @@ -1,7 +1,7 @@ apply(from = rootProject.file("buildSrc/shared.gradle.kts")) plugins { - id("org.springframework.boot") version "3.3.4" + id("org.springframework.boot") version "3.3.5" id("io.spring.dependency-management") version "1.1.6" id("reportstream.project-conventions") kotlin("plugin.spring") version "2.0.20"