Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the maven group with 6 updates #4

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Aug 20, 2024

Bumps the maven group with 6 updates:

Package From To
io.netty:netty-handler 4.1.7.Final 4.1.94.Final
org.springframework:spring-beans 4.2.4.RELEASE 5.2.22.RELEASE
org.springframework:spring-context 4.2.4.RELEASE 5.2.21.RELEASE
junit:junit 4.12 4.13.1
org.apache.logging.log4j:log4j-core 2.6.2 2.12.4
org.springframework:spring-expression 4.2.4.RELEASE 5.3.39

Updates io.netty:netty-handler from 4.1.7.Final to 4.1.94.Final

Commits
  • da1a448 [maven-release-plugin] prepare release netty-4.1.94.Final
  • 535da17 Merge pull request from GHSA-6mjq-h674-j845
  • 1bb825b Reuse Bootstrap to create SocketChannel for DNS TCP (#13453)
  • dd2c2bb Use Two-Way for finding the delimiter in DelimiterBasedFrameDecoder (#13451)
  • 26a7df3 Implement contains for SelectedSelectionKeySet (#13452)
  • b878314 Delay possibility to reuse transaction id when query is failing becau… (#13446)
  • bf8e779 Simplify DnsQueryContext usage again (#13450)
  • 22bf43b Adjust resolver code to make it easier to test in the future (#13445)
  • c59a11c Rewrite DnsQueryContextManager to simplify and make it easier to debug (#13440)
  • 79c773c Release DnsRecords when failing to notify promise (#13437)
  • Additional commits viewable in compare view

Updates org.springframework:spring-beans from 4.2.4.RELEASE to 5.2.22.RELEASE

Release notes

Sourced from org.springframework:spring-beans's releases.

v5.2.22.RELEASE

⭐ New Features

  • Refine CachedIntrospectionResults property introspection #28446

🐞 Bug Fixes

  • Ignore invalid STOMP frame #28444

v5.2.21.RELEASE

⭐ New Features

  • Remove DNS lookups during websocket connection initiation #28281

🐞 Bug Fixes

  • Improve documentation and matching algorithm in data binders #28334
  • CodeGenerationException thrown when using AnnotationMBeanExporter on JDK 17 #28279
  • ResponseEntity objects are accumulated in ConcurrentReferenceHashMap #28273
  • NotWritablePropertyException when attempting to declaratively configure ClassLoader properties #28272

v5.2.20.RELEASE

⭐ New Features

  • Restrict access to property paths on Class references #28262
  • Improve diagnostics in SpEL for large array creation #28257

v5.2.19.RELEASE

⭐ New Features

  • Declare serialVersionUID on DefaultAopProxyFactory #27785
  • Use ByteArrayDecoder in DefaultClientResponse::createException #27667

🐞 Bug Fixes

  • ProxyFactoryBean getObject called before setInterceptorNames, silently creating an invalid proxy [SPR-7582] #27817
  • Possible NPE in Spring MVC LogFormatUtils #27783
  • UndertowHeadersAdapter's remove() method violates Map contract #27593
  • Fix assertion failure messages in DefaultDataBuffer.checkIndex() #27577

📔 Documentation

  • Lazy annotation throws exception if non-required bean does not exist #27660
  • Incorrect Javadoc in [NamedParameter]JdbcOperations.queryForObject methods regarding exceptions #27581
  • DefaultResponseErrorHandler update javadoc comment #27571

🔨 Dependency Upgrades

  • Upgrade to Reactor Dysprosium-SR25 #27635
  • Upgrade to Log4j2 2.16.0 #27825

... (truncated)

Commits
  • 8f4c172 Release v5.2.22.RELEASE
  • 9f238c9 Polishing
  • 50177b1 Refine CachedIntrospectionResults property introspection
  • 159a99b Ignore invalid STOMP frame
  • 41e158c Next development version (v5.2.22.BUILD-SNAPSHOT)
  • 833e750 Improve documentation and matching algorithm in data binders
  • d70054d Upgrade to Log4j2 2.17.2
  • 36e4951 Polishing
  • 87b5080 Consistent use of getLocalAddr() without DNS lookups in request adapters
  • 5cbf85a Avoid return value reference in potentially cached MethodParameter instance
  • Additional commits viewable in compare view

Updates org.springframework:spring-context from 4.2.4.RELEASE to 5.2.21.RELEASE

Release notes

Sourced from org.springframework:spring-context's releases.

v5.2.21.RELEASE

⭐ New Features

  • Remove DNS lookups during websocket connection initiation #28281

🐞 Bug Fixes

  • Improve documentation and matching algorithm in data binders #28334
  • CodeGenerationException thrown when using AnnotationMBeanExporter on JDK 17 #28279
  • ResponseEntity objects are accumulated in ConcurrentReferenceHashMap #28273
  • NotWritablePropertyException when attempting to declaratively configure ClassLoader properties #28272

v5.2.20.RELEASE

⭐ New Features

  • Restrict access to property paths on Class references #28262
  • Improve diagnostics in SpEL for large array creation #28257

v5.2.19.RELEASE

⭐ New Features

  • Declare serialVersionUID on DefaultAopProxyFactory #27785
  • Use ByteArrayDecoder in DefaultClientResponse::createException #27667

🐞 Bug Fixes

  • ProxyFactoryBean getObject called before setInterceptorNames, silently creating an invalid proxy [SPR-7582] #27817
  • Possible NPE in Spring MVC LogFormatUtils #27783
  • UndertowHeadersAdapter's remove() method violates Map contract #27593
  • Fix assertion failure messages in DefaultDataBuffer.checkIndex() #27577

📔 Documentation

  • Lazy annotation throws exception if non-required bean does not exist #27660
  • Incorrect Javadoc in [NamedParameter]JdbcOperations.queryForObject methods regarding exceptions #27581
  • DefaultResponseErrorHandler update javadoc comment #27571

🔨 Dependency Upgrades

  • Upgrade to Reactor Dysprosium-SR25 #27635
  • Upgrade to Log4j2 2.16.0 #27825

v5.2.18.RELEASE

⭐ New Features

  • Enhance DefaultResponseErrorHandler to allow logging complete error response body #27558
  • DefaultMessageListenerContainer does not log an error/warning when consumer tasks have been rejected #27457

🐞 Bug Fixes

... (truncated)

Commits
  • 2bdab89 Release v5.2.21.RELEASE
  • 833e750 Improve documentation and matching algorithm in data binders
  • d70054d Upgrade to Log4j2 2.17.2
  • 36e4951 Polishing
  • 87b5080 Consistent use of getLocalAddr() without DNS lookups in request adapters
  • 5cbf85a Avoid return value reference in potentially cached MethodParameter instance
  • 69c7eb9 Restore ability to configure setClassLoader methods
  • fb763dd Consistent fallback in case of fast-class generation failure
  • 1b75f39 Next development version (v5.2.21.BUILD-SNAPSHOT)
  • 996f701 Refine PropertyDescriptor filtering
  • Additional commits viewable in compare view

Updates junit:junit from 4.12 to 4.13.1

Release notes

Sourced from junit:junit's releases.

JUnit 4.13.1

Please refer to the release notes for details.

JUnit 4.13

Please refer to the release notes for details.

JUnit 4.13 RC 2

Please refer to the release notes for details.

JUnit 4.13 RC 1

Please refer to the release notes for details.

JUnit 4.13 Beta 3

Please refer to the release notes for details.

JUnit 4.13 Beta 2

Please refer to the release notes for details.

JUnit 4.13 Beta 1

Please refer to the release notes for details.

Commits

Updates org.apache.logging.log4j:log4j-core from 2.6.2 to 2.12.4

Updates org.springframework:spring-expression from 4.2.4.RELEASE to 5.3.39

Release notes

Sourced from org.springframework:spring-expression's releases.

v5.3.39

⭐ New Features

  • SimpleEvaluationContext should disable array allocation #33386

v5.3.38

⭐ New Features

  • Efficient handling of conditional HTTP requests #33378

🐞 Bug Fixes

  • Fix incorrect weak ETag validation #33377
  • SimpleEvaluationContext does not enforce read-only semantics #33320
  • ConversionService cannot convert primitive array to Object[] #33314
  • SpEL Indexer silently ignores failure to set property as index #33312
  • Mockito mock falsely initialized as CGLIB proxy with AspectJ aspect #33142
  • "file:." cannot be resolved to java.nio.file.Path (and plain "." value resolves to classpath root) #33140

📔 Documentation

  • Typo in Annotation-driven Listener Endpoints section of Spring Framework documentation #33052
  • Container Extension Points section of Spring Framework documentation refers to the wrong property name #33039
  • Incorrect constructor details in the javadoc for ApplicationContextEvent #33034

🔨 Dependency Upgrades

  • Upgrade to Reactor 2020.0.47 #33322

v5.3.37

⭐ New Features

  • AnnotationUtils performance degrades with deep stacks #32923

🐞 Bug Fixes

  • AspectJ CTW aspects executed twice #32974
  • SpEL compilation fails when indexing into a Map with a primitive #32911
  • SpEL compilation fails when indexing into an array or list with an Integer #32909
  • Application not starting with @EnableTransactionManagement(mode = AdviceMode.ASPECTJ) #32885

🔨 Dependency Upgrades

  • Upgrade to Reactor 2020.0.45 #33010

v5.3.36

🐞 Bug Fixes

  • Overridden aspect method runs twice #32868
  • @DateTimeFormat(iso = DateTimeFormat.ISO.DATE\_TIME) cannot convert UTC without milliseconds to java.util.Date #32860

... (truncated)

Commits
  • f1b128b Release v5.3.39
  • 8a44eaa Next development version (v5.3.39-SNAPSHOT)
  • f44d13c Disable array allocation in case of no constructor resolution
  • f00bc7b Remove snapshot repo
  • 582bfcc Efficient ETag parsing
  • 406b33d Upgrade to Netty 4.1.112
  • f9c3d00 Introduce withAssignmentDisabled() option for SimpleEvaluationContext
  • d2715d2 Fix incorrect weak ETag assertion
  • 57b02da Upgrade to Reactor 2020.0.47
  • df33bf2 Sync GHA setup
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the maven group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [io.netty:netty-handler](https://github.com/netty/netty) | `4.1.7.Final` | `4.1.94.Final` |
| [org.springframework:spring-beans](https://github.com/spring-projects/spring-framework) | `4.2.4.RELEASE` | `5.2.22.RELEASE` |
| [org.springframework:spring-context](https://github.com/spring-projects/spring-framework) | `4.2.4.RELEASE` | `5.2.21.RELEASE` |
| [junit:junit](https://github.com/junit-team/junit4) | `4.12` | `4.13.1` |
| org.apache.logging.log4j:log4j-core | `2.6.2` | `2.12.4` |
| [org.springframework:spring-expression](https://github.com/spring-projects/spring-framework) | `4.2.4.RELEASE` | `5.3.39` |


Updates `io.netty:netty-handler` from 4.1.7.Final to 4.1.94.Final
- [Commits](netty/netty@netty-4.1.7.Final...netty-4.1.94.Final)

Updates `org.springframework:spring-beans` from 4.2.4.RELEASE to 5.2.22.RELEASE
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v4.2.4.RELEASE...v5.2.22.RELEASE)

Updates `org.springframework:spring-context` from 4.2.4.RELEASE to 5.2.21.RELEASE
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v4.2.4.RELEASE...v5.2.21.RELEASE)

Updates `junit:junit` from 4.12 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.12.md)
- [Commits](junit-team/junit4@r4.12...r4.13.1)

Updates `org.apache.logging.log4j:log4j-core` from 2.6.2 to 2.12.4

Updates `org.springframework:spring-expression` from 4.2.4.RELEASE to 5.3.39
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v4.2.4.RELEASE...v5.3.39)

---
updated-dependencies:
- dependency-name: io.netty:netty-handler
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.springframework:spring-beans
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.springframework:spring-context
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: org.springframework:spring-expression
  dependency-type: direct:development
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Aug 20, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants