Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: bump the maven-low-risk group across 1 directory with 13 updates #494

Open
wants to merge 1 commit into
base: develop
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 1, 2024

Bumps the maven-low-risk group with 13 updates in the / directory:

Package From To
org.apache.maven.plugins:maven-javadoc-plugin 3.7.0 3.10.1
org.apache.maven.plugins:maven-surefire-plugin 3.2.5 3.5.1
org.apache.maven.plugins:maven-gpg-plugin 3.2.4 3.2.7
commons-io:commons-io 2.16.1 2.17.0
io.github.bonigarcia:webdrivermanager 5.8.0 5.9.2
org.apache.commons:commons-lang3 3.14.0 3.17.0
com.fasterxml.jackson.core:jackson-databind 2.17.1 2.18.1
org.junit.vintage:junit-vintage-engine 5.10.2 5.11.3
com.github.eirslett:frontend-maven-plugin 1.15.0 1.15.1
com.microsoft.playwright:playwright 1.44.0 1.48.0
commons-codec:commons-codec 1.17.0 1.17.1
org.apache.commons:commons-compress 1.26.2 1.27.1
com.fasterxml.jackson.core:jackson-annotations 2.17.1 2.18.1

Updates org.apache.maven.plugins:maven-javadoc-plugin from 3.7.0 to 3.10.1

Release notes

Sourced from org.apache.maven.plugins:maven-javadoc-plugin's releases.

maven-javadoc-plugin-3.10.1

What's Changed

Full Changelog: apache/maven-javadoc-plugin@maven-javadoc-plugin-3.10.0...maven-javadoc-plugin-3.10.1

maven-javadoc-plugin-3.10.0

❗ NOTICE

Due to Doxia 2.x stack maven-site-plugin 3.20+ is requred.

What's Changed

Full Changelog: apache/maven-javadoc-plugin@maven-javadoc-plugin-3.8.0...maven-javadoc-plugin-3.10.0

maven-javadoc-plugin-3.8.0

What's Changed

Full Changelog: apache/maven-javadoc-plugin@maven-javadoc-plugin-3.7.0...maven-javadoc-plugin-3.8.0

Commits
  • 091785b [maven-release-plugin] prepare release maven-javadoc-plugin-3.10.1
  • cde7c56 [MJAVADOC-812] [REGRESSION] maven-javadoc-plugin 3.10.0 creates empty JARs
  • db6d7f6 [MJAVADOC-811] javadoc.bat fails to execute on Windows when project is not on...
  • a737e16 Bump commons-io:commons-io from 2.16.1 to 2.17.0
  • 577c204 Bump org.codehaus.plexus:plexus-io from 3.5.0 to 3.5.1
  • ff52cff Bump org.apache.commons:commons-lang3 from 3.16.0 to 3.17.0
  • 54a7651 Add goal prefix
  • a424c6b [MJAVADOC-810] [REGRESSION] MJAVADOC-791 causes forked Maven execution fail i...
  • d9c0002 [maven-release-plugin] prepare for next development iteration
  • 487e479 [maven-release-plugin] prepare release maven-javadoc-plugin-3.10.0
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.2.5 to 3.5.1

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.5.1

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

👻 Maintenance

3.5.0

... (truncated)

Commits
  • a69b0f8 [maven-release-plugin] prepare release surefire-3.5.1
  • ccc54d0 [SUREFIRE-2273] Bump org.hamcrest:hamcrest from 2.2 to 3.0 (#784)
  • ab77c35 [SUREFIRE-2272] Bump org.codehaus.plexus:plexus-java from 1.2.0 to 1.3.0 - JD...
  • 93317ff [SUREFIRE-2269] Allow fail during clean in surefire-its
  • d7f4dbb [SUREFIRE-2270] Use JUnit5 in surefire-shadefire
  • 7a98850 Drop comment from jira integration
  • b2aa8a6 [SUREFIRE-2267] Packages for commons-codec should be relocated in surefire-sh...
  • a928255 [SUREFIRE-1737] Fix disable in statelessTestsetReporter
  • 4584ebb [SUREFIRE-2226] Upgrade to Maven Verifier 2.0.0-M1
  • 5aa3515 [SUREFIRE-2266] Execute ITs in parallel
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-gpg-plugin from 3.2.4 to 3.2.7

Release notes

Sourced from org.apache.maven.plugins:maven-gpg-plugin's releases.

3.2.7

Fixes a lingering issue affecting whole 3.2.x lineage, that resulted in "bad passphrase" on Windows OS with GPG signer (see MGPG-136 for details).

What's Changed

Full Changelog: apache/maven-gpg-plugin@maven-gpg-plugin-3.2.6...maven-gpg-plugin-3.2.7

3.2.6

Release Notes - Maven GPG Plugin - Version 3.2.6


What's Changed

New Contributors

... (truncated)

Commits
  • 43af21c [maven-release-plugin] prepare release maven-gpg-plugin-3.2.7
  • 8c5a8d2 [MGPG-144] Bump commons-io:commons-io from 2.16.1 to 2.17.0 (#119)
  • cb5422f [MGPG-143] Bump com.kohlschutter.junixsocket:junixsocket-core from 2.10.0 to ...
  • 6b2a27f [MGPG-136] Windows passphrase corruption (#120)
  • 31e87e0 [maven-release-plugin] prepare for next development iteration
  • 1c9a14c [maven-release-plugin] prepare release maven-gpg-plugin-3.2.6
  • bbe6156 Add FAQ for "no pinentry" issue (#118)
  • 5b94273 [MGPG-141] Remove use of deprecated classes (#117)
  • afdfd28 [MGPG-138] Drop direct use of plexus-cipher and secdispatcher (#115)
  • 7516e7c [MGPG-140] Update Maven to 3.9.9 (#116)
  • Additional commits viewable in compare view

Updates commons-io:commons-io from 2.16.1 to 2.17.0

Updates io.github.bonigarcia:webdrivermanager from 5.8.0 to 5.9.2

Changelog

Sourced from io.github.bonigarcia:webdrivermanager's changelog.

[5.9.2] - 2024-07-25

Fixed

  • HTTP 404 when downloading microsoft edgedriver in macOS or Linux (#1320)

[5.9.1] - 2024-06-24

Removed

  • Remove using jackson-databind 2.17.1

[5.9.0] - 2024-06-24

Fixed

  • Fix architecture label to build URL for Edge ARM64

Changed

  • Force to use jackson-databind 2.17.1

Removed

  • Exclude org.bouncycastle:bcpkix-jdk18on from docker-java
Commits
  • 33adaaf [maven-release-plugin] prepare release webdrivermanager-5.9.2
  • 16545fb Update doc for release 5.9.2
  • a973d4a Improve logic for latest driver version detection
  • 19da22a Fix logic to detect browser version
  • d6f6d2d Improve logic to read msedgedriver latest version (#1320)
  • 3b7165a Enable Edge test in CI
  • 63b58ff Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.7.0 to 3.8.0 (#1322)
  • 1158826 Bump selenium.version from 4.22.0 to 4.23.0 (#1321)
  • 44b1440 Update mirror info (Sat Jul 20 12:02:21 UTC 2024)
  • 5a460e7 Update mirror info (Fri Jul 19 12:02:27 UTC 2024)
  • Additional commits viewable in compare view

Updates org.apache.commons:commons-lang3 from 3.14.0 to 3.17.0

Updates com.fasterxml.jackson.core:jackson-databind from 2.17.1 to 2.18.1

Commits

Updates org.junit.vintage:junit-vintage-engine from 5.10.2 to 5.11.3

Release notes

Sourced from org.junit.vintage:junit-vintage-engine's releases.

JUnit 5.11.3 = Platform 1.11.3 + Jupiter 5.11.3 + Vintage 5.11.3

See Release Notes.

Full Changelog: junit-team/junit5@r5.11.2...r5.11.3

JUnit 5.11.2 = Platform 1.11.2 + Jupiter 5.11.2 + Vintage 5.11.2

See Release Notes.

Full Changelog: junit-team/junit5@r5.11.1...r5.11.2

JUnit 5.11.1 = Platform 1.11.1 + Jupiter 5.11.1 + Vintage 5.11.1

See Release Notes.

Full Changelog: junit-team/junit5@r5.11.0...r5.11.1

JUnit 5.11.0 = Platform 1.11.0 + Jupiter 5.11.0 + Vintage 5.11.0

See Release Notes.

New Contributors

Full Changelog: junit-team/junit5@r5.10.3...r5.11.0

JUnit 5.11.0-RC1 = Platform 1.11.0-RC1 + Jupiter 5.11.0-RC1 + Vintage 5.11.0-RC1

See Release Notes.

New Contributors

... (truncated)

Commits
  • b20991e Release 5.11.3
  • e57b508 Finalize 5.11.3 release notes
  • fb1254c Allow repeating ExtendWith annotation on fields and parameters
  • a3192bd Fix package name comparison on Java 8 (#4077)
  • fcb7b01 Remove useless Order annotation
  • 57dfcb5 Allow repeating @…Source annotations when used as meta annotations
  • 09cd8b3 Add ArchUnit test for consistency of repeatable annotations
  • fa46a92 Hard-wrap at 90 characters
  • 8f45eea Find repeatable @⁠ExtendWith meta-annotations on fields again
  • b451122 Introduce release notes for 5.11.3
  • Additional commits viewable in compare view

Updates com.github.eirslett:frontend-maven-plugin from 1.15.0 to 1.15.1

Changelog

Sourced from com.github.eirslett:frontend-maven-plugin's changelog.

1.15.1

  • Fix #1150: Update lifecycle-mapping-metadata.xml for npx
Commits
  • 3f70757 [maven-release-plugin] prepare release frontend-plugins-1.15.1
  • c5c9aec Attempt 2: secrets for OSSRH deployment
  • 274bb70 Update secrets for OSSRH deployment
  • f39b40c Fix: bun windows support
  • a7d3b8b Update NodeInstaller.java
  • 2750625 Fix #1152: Copy npm script file
  • 622ac16 #1042 Use correct Xpp3Dom class
  • bca8bdf Replace tabs with spaces
  • 122cd9b #1042 Allow Authentication via Http Header
  • 60bbf02 Fix: delete only bun directory inside the installation directory instead of t...
  • Additional commits viewable in compare view

Updates com.microsoft.playwright:playwright from 1.44.0 to 1.48.0

Release notes

Sourced from com.microsoft.playwright:playwright's releases.

v1.48.0

WebSocket routing

New methods page.routeWebSocket() and browserContext.routeWebSocket() allow to intercept, modify and mock WebSocket connections initiated in the page. Below is a simple example that mocks WebSocket communication by responding to a "request" with a "response".

page.routeWebSocket("/ws", ws -> {
  ws.onMessage(message -> {
    if ("request".equals(message))
      ws.send("response");
  });
});

See WebSocketRoute for more details.

UI updates

  • New "copy" buttons for annotations and test location in the HTML report.
  • Route method calls like route.fulfill() are not shown in the report and trace viewer anymore. You can see which network requests were routed in the network tab instead.
  • New "Copy as cURL" and "Copy as fetch" buttons for requests in the network tab.

Miscellaneous

Browser Versions

  • Chromium 130.0.6723.19
  • Mozilla Firefox 130.0
  • WebKit 18.0

This version was also tested against the following stable channels:

  • Google Chrome 129
  • Microsoft Edge 129

v1.47.0

Network Tab improvements

The Network tab in the trace viewer has several nice improvements:

  • filtering by asset type and URL
  • better display of query string parameters
  • preview of font assets

Network tab now has filters

Miscellaneous

  • The mcr.microsoft.com/playwright/java:v1.47.0 now serves a Playwright image based on Ubuntu 24.04 Noble. To use the 22.02 jammy-based image, please use mcr.microsoft.com/playwright/java:v1.47.0-jammy instead.
  • The :latest/:focal/:jammy tag for Playwright Docker images is no longer being published. Pin to a specific version for better stability and reproducibility.
  • TLS client certificates can now be passed from memory by passing cert and key as byte arrays instead of file paths.
  • noWaitAfter in locator.selectOption() was deprecated.

... (truncated)

Commits

Updates commons-codec:commons-codec from 1.17.0 to 1.17.1

Changelog

Sourced from commons-codec:commons-codec's changelog.

Apache Commons Codec 1.17.1 RELEASE NOTES

The Apache Commons Codec component contains encoders and decoders for various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.

Feature and fix release. Requires a minimum of Java 8.

Fixed Bugs

  •         Md5Crypt now throws IllegalArgumentException on an invalid prefix. Thanks to Gary Gregory.
    

Changes

  •         Bump org.apache.commons:commons-parent from 69 to 71 [#286](https://github.com/apache/commons-codec/issues/286). Thanks to Gary Gregory.
    
  •         Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.23 to 1.24 [#293](https://github.com/apache/commons-codec/issues/293). Thanks to Dependabot.
    
  •         Bump org.codehaus.mojo:taglist-maven-plugin from 3.0.0 to 3.1.0 [#292](https://github.com/apache/commons-codec/issues/292). Thanks to Dependabot.
    

For complete information on Apache Commons Codec, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Codec website:

https://commons.apache.org/proper/commons-codec/

Download page: https://commons.apache.org/proper/commons-codec/download_codec.cgi


Commits

Updates org.apache.commons:commons-compress from 1.26.2 to 1.27.1

Updates com.fasterxml.jackson.core:jackson-annotations from 2.17.1 to 2.18.1

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven-low-risk group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) | `3.7.0` | `3.10.1` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.2.5` | `3.5.1` |
| [org.apache.maven.plugins:maven-gpg-plugin](https://github.com/apache/maven-gpg-plugin) | `3.2.4` | `3.2.7` |
| commons-io:commons-io | `2.16.1` | `2.17.0` |
| [io.github.bonigarcia:webdrivermanager](https://github.com/bonigarcia/webdrivermanager) | `5.8.0` | `5.9.2` |
| org.apache.commons:commons-lang3 | `3.14.0` | `3.17.0` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.17.1` | `2.18.1` |
| [org.junit.vintage:junit-vintage-engine](https://github.com/junit-team/junit5) | `5.10.2` | `5.11.3` |
| [com.github.eirslett:frontend-maven-plugin](https://github.com/eirslett/frontend-maven-plugin) | `1.15.0` | `1.15.1` |
| [com.microsoft.playwright:playwright](https://github.com/microsoft/playwright-java) | `1.44.0` | `1.48.0` |
| [commons-codec:commons-codec](https://github.com/apache/commons-codec) | `1.17.0` | `1.17.1` |
| org.apache.commons:commons-compress | `1.26.2` | `1.27.1` |
| [com.fasterxml.jackson.core:jackson-annotations](https://github.com/FasterXML/jackson) | `2.17.1` | `2.18.1` |



Updates `org.apache.maven.plugins:maven-javadoc-plugin` from 3.7.0 to 3.10.1
- [Release notes](https://github.com/apache/maven-javadoc-plugin/releases)
- [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.7.0...maven-javadoc-plugin-3.10.1)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.2.5 to 3.5.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.2.5...surefire-3.5.1)

Updates `org.apache.maven.plugins:maven-gpg-plugin` from 3.2.4 to 3.2.7
- [Release notes](https://github.com/apache/maven-gpg-plugin/releases)
- [Commits](apache/maven-gpg-plugin@maven-gpg-plugin-3.2.4...maven-gpg-plugin-3.2.7)

Updates `commons-io:commons-io` from 2.16.1 to 2.17.0

Updates `io.github.bonigarcia:webdrivermanager` from 5.8.0 to 5.9.2
- [Release notes](https://github.com/bonigarcia/webdrivermanager/releases)
- [Changelog](https://github.com/bonigarcia/webdrivermanager/blob/master/CHANGELOG.md)
- [Commits](bonigarcia/webdrivermanager@webdrivermanager-5.8.0...webdrivermanager-5.9.2)

Updates `org.apache.commons:commons-lang3` from 3.14.0 to 3.17.0

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.17.1 to 2.18.1
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `org.junit.vintage:junit-vintage-engine` from 5.10.2 to 5.11.3
- [Release notes](https://github.com/junit-team/junit5/releases)
- [Commits](junit-team/junit5@r5.10.2...r5.11.3)

Updates `com.github.eirslett:frontend-maven-plugin` from 1.15.0 to 1.15.1
- [Changelog](https://github.com/eirslett/frontend-maven-plugin/blob/master/CHANGELOG.md)
- [Commits](eirslett/frontend-maven-plugin@frontend-plugins-1.15.0...frontend-plugins-1.15.1)

Updates `com.microsoft.playwright:playwright` from 1.44.0 to 1.48.0
- [Release notes](https://github.com/microsoft/playwright-java/releases)
- [Commits](microsoft/playwright-java@v1.44.0...v1.48.0)

Updates `commons-codec:commons-codec` from 1.17.0 to 1.17.1
- [Changelog](https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-codec@rel/commons-codec-1.17.0...rel/commons-codec-1.17.1)

Updates `org.apache.commons:commons-compress` from 1.26.2 to 1.27.1

Updates `com.fasterxml.jackson.core:jackson-annotations` from 2.17.1 to 2.18.1
- [Commits](https://github.com/FasterXML/jackson/commits)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-javadoc-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-low-risk
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-low-risk
- dependency-name: org.apache.maven.plugins:maven-gpg-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-low-risk
- dependency-name: commons-io:commons-io
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-low-risk
- dependency-name: io.github.bonigarcia:webdrivermanager
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-low-risk
- dependency-name: org.apache.commons:commons-lang3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-low-risk
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-low-risk
- dependency-name: org.junit.vintage:junit-vintage-engine
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-low-risk
- dependency-name: com.github.eirslett:frontend-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-low-risk
- dependency-name: com.microsoft.playwright:playwright
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-low-risk
- dependency-name: commons-codec:commons-codec
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-low-risk
- dependency-name: org.apache.commons:commons-compress
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-low-risk
- dependency-name: com.fasterxml.jackson.core:jackson-annotations
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-low-risk
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner November 1, 2024 01:29
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 1, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant