search

GoogleCloudPlatform / functions-framework-java

FaaS (Function as a service) framework for writing portable Java functions
Apache License 2.0
130 stars 63 forks source link

chore(deps): update all non-major dependencies #264

Closed renovate-bot closed 5 months ago

renovate-bot commented 5 months ago

Mend Renovate

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
github/codeql-action action minor v3.23.1 -> v3.24.0 age adoption passing confidence
step-security/harden-runner action minor v2.6.1 -> v2.7.0 age adoption passing confidence
com.google.truth.extensions:truth-java8-extension test minor 1.2.0 -> 1.4.0 age adoption passing confidence
com.google.truth:truth test minor 1.2.0 -> 1.4.0 age adoption passing confidence
org.mockito:mockito-core test minor 5.7.0 -> 5.10.0 age adoption passing confidence
com.google.cloud.tools:appengine-maven-plugin (source) compile minor 2.6.0 -> 2.8.0 age adoption passing confidence

[!WARNING] Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

github/codeql-action (github/codeql-action) ### [`v3.24.0`](https://togithub.com/github/codeql-action/compare/v3.23.2...v3.24.0) [Compare Source](https://togithub.com/github/codeql-action/compare/v3.23.2...v3.24.0) ### [`v3.23.2`](https://togithub.com/github/codeql-action/compare/v3.23.1...v3.23.2) [Compare Source](https://togithub.com/github/codeql-action/compare/v3.23.1...v3.23.2)
step-security/harden-runner (step-security/harden-runner) ### [`v2.7.0`](https://togithub.com/step-security/harden-runner/releases/tag/v2.7.0) [Compare Source](https://togithub.com/step-security/harden-runner/compare/v2.6.1...v2.7.0) ##### What's Changed Release 2.7.0 by [@​varunsh-coder](https://togithub.com/varunsh-coder) and [@​h0x0er](https://togithub.com/h0x0er) in [https://github.com/step-security/harden-runner/pull/376](https://togithub.com/step-security/harden-runner/pull/376) This release: 1. Updates the node runtime to node20 2. Adds capability to inspect outbound HTTPS traffic on GitHub-hosted and self-hosted VM runners **Full Changelog**: https://github.com/step-security/harden-runner/compare/v2...v2.7.0
google/truth (com.google.truth.extensions:truth-java8-extension) ### [`v1.4.0`](https://togithub.com/google/truth/releases/tag/v1.4.0): 1.4.0 [Compare Source](https://togithub.com/google/truth/compare/v1.3.0...v1.4.0) In this release, our assertions on Java 8 types continue to move from the `Truth8` class to the main `Truth` class. This change should not break compatibility for any supported JDK or Android version, even users who test under old versions of Android without [API desugaring](https://developer.android.com/studio/write/java8-support#library-desugaring). Additionally, we will never break binary compatibility, though some users will have to make changes to their source code in order for it to compile against newer versions. This release is likely to lead to more **build failures** than [1.3.0](https://togithub.com/google/truth/releases/tag/v1.3.0) did. However, those failures should be **straightforward to fix**. #### Example build failure Foo.java:152: error: reference to assertThat is ambiguous assertThat(repo.findFileWithName("foo")).isNull(); ^ both method assertThat(@​org.jspecify.nullness.Nullable Path) in Truth8 and method assertThat(@​org.jspecify.nullness.Nullable Path) in Truth match #### Simplest upgrade strategy (if you can update all your code atomically in the same commit as the Truth upgrade) In the same commit: 1. Upgrade Truth to 1.4.0. 2. Replace `import static com.google.common.truth.Truth8.assertThat;` with `import static com.google.common.truth.Truth.assertThat;`. - If you use Kotlin, replace `import com.google.common.truth.Truth8.assertThat` with `import com.google.common.truth.Truth.assertThat`. 3. Replace `import com.google.common.truth.Truth8;` with `import com.google.common.truth.Truth;`. - again, similarly for Kotlin if needed 4. Replace remaining references to `Truth8` with references to `Truth`. - For example, replace `Truth8.assertThat(optional).isPresent()` with `Truth.assertThat(optional).isPresent()`. If you're feeling lucky, you can try this one-liner for the code updates: ```sh git grep -l Truth8 | xargs perl -pi -e 's/import static com.google.common.truth.Truth8.assertThat;/import static com.google.common.truth.Truth.assertThat;/g; s/import com.google.common.truth.Truth8.assertThat/import com.google.common.truth.Truth.assertThat/g; s/import com.google.common.truth.Truth8/import com.google.common.truth.Truth/g; s/\bTruth8[.]/Truth./g;' ``` After that process, it is possible that you'll still see build errors from ambiguous usages of `assertThat` static imports. If so, you can find a workaround in the section about overload ambiguity in the release notes for [1.3.0](https://togithub.com/google/truth/releases/tag/v1.3.0). Alternatively, you can wait to upgrade until after a future Truth release, which will eliminate the ambiguity by changing the signatures of some `Truth.assertThat` overloads. #### Incremental upgrade strategy If you have a very large repo or you have other reasons to prefer to upgrade incrementally, you can use the approach that we used inside Google. Roughly, that approach was: 1. Make the optional changes discussed in the release notes for [1.3.0](https://togithub.com/google/truth/releases/tag/v1.3.0). 2. For any remaining calls to `Truth8.assertThat`, change them to *avoid* static import. - That is, replace `assertThat(optional).isPresent()` with `Truth8.assertThat(optional).isPresent()`. 3. Upgrade Truth to 1.4.0. 4. Optionally replace references to `Truth8` with references to `Truth` (including restoring static imports if desired), as discussed in section about the simple upgrade strategy above. #### Optional additional changes - If you use `assertWithMessage(...).about(intStreams()).that(...)`, `expect.about(optionalLongs()).that(...)`, or similar, you can remove your call to `about`. This change will never be necessary; it is just a simplification. - This is similar to a previous optional change from [1.3.0](https://togithub.com/google/truth/releases/tag/v1.3.0), except that 1.3.0 solved this problem for `streams` and `optionals`, whereas 1.4.0 solves it for the other `Truth8` types. #### For help Please feel welcome to [open an issue](https://togithub.com/google/truth/issues/new) to report problems or request help. #### Changelog - Added the remaining `Truth8.assertThat` overloads to the main `Truth` class. ([`9be8e77`](https://togithub.com/google/truth/commit/9be8e774c), [`1f81827`](https://togithub.com/google/truth/commit/1f81827f1)) - Added more `that` overloads to make it possible to write type-specific assertions when using the remaining Java 8 types. ([`7c65fc6`](https://togithub.com/google/truth/commit/7c65fc611)) ### [`v1.3.0`](https://togithub.com/google/truth/releases/tag/v1.3.0): 1.3.0 [Compare Source](https://togithub.com/google/truth/compare/v1.2.0...v1.3.0) In this release, our assertions on Java 8 types begin to move from the `truth-java8-extensions` artifact and the `Truth8` class to the main `truth` artifact and the `Truth` class. This change should not break compatibility for anyone, even users who test under old versions of Android without [API desugaring](https://developer.android.com/studio/write/java8-support#library-desugaring). Additionally, we will never break binary compatibility, though some users will have to make changes to their source code in order for it to compile against newer versions. This change will be routine for most users, but we're providing as much information as we can for any users who do encounter problems. We will post fuller instructions for migration later on, once we've learned more from our internal migration efforts. For now, you may find that you need to make one kind of change, and you may elect to make others. (If we missed anything, please [open an issue](https://togithub.com/google/truth/issues/new) to report problems or request help.) The change you might need to make: - By adding new overloads of `Truth.assertThat`, we cause some code to fail to compile because of an overload ambiguity. This is rare, but it can happen if you static import both `Truth.assertThat` and some other `assertThat` method that includes overloads for `Optional` or `Stream`. (It does *not* happen for `Truth8.assertThat`, though, except with the Eclipse compiler. Nor it does *necessarily* happen for other `assertThat(Stream)` and `assertThat(Optional)` methods.) If this happens to you, you'll need to remove one of the static imports, changing the corresponding call sites from "`assertThat`" to "`FooSubject.assertThat`." - Alternatively, you may choose to wait until we make further changes to the new `Truth.assertThat` overloads. Once we make those further changes, you may be able to simultaneously replace all your imports of `Truth8.assertThat` with imports of `Truth.assertThat` as you upgrade to the new version, likely without introducing overload ambiguities. The changes you might elect to make: - If you use `Truth8.assertThat(Stream)` or `Truth8.assertThat(Optional)`, you can migrate to the new overloads in `Truth`. If you static import `Truth8.assertThat`, you can usually make this change simply by replacing that static import with a static import of `Truth.assertThat`—or, if you already have an import of `Truth.assertThat`, by just removing the import of `Truth8.assertThat`. (If you additionally use less common assertion methods, like `assertThat(OptionalInt)`, you'll want to use *both* imports for now. Later, we'll move `assertThat(OptionalInt)` and friends, too.) We recommend making this change now, since your calls to `Truth8.assertThat` will fail to compile against some future version of Truth, unless you plan to wait to update your Truth dependency until we've made all our changes for Java 8 types. - If you use `assertWithMessage(...).about(streams()).that(...)`, `expect.about(optionals()).that(...)`, or similar, you can remove your call to `about`. This change will never be necessary; it is just a simplification. - If you depend on `truth-java8-extension`, you may remove it. All its classes are now part of the main `truth` artifact. This change, too, is not necessary; it is just a simplification. (OK, if your build system has a concept of [strict deps](https://blog.bazel.build/2017/06/28/sjd-unused_deps.html), there is a chance that you'll *need* to add deps on `truth` to replace your deps on `truth-java8-extension`.) Finally, the changelog for this release: - Made `StreamSubject` avoid collecting the `Stream` until necessary, and made its `isEqualTo` and `isNotEqualTo` methods no longer always throw. ([`f8ecaec`](https://togithub.com/google/truth/commit/f8ecaec69)) - Added `assertThat` overloads for `Optional` and `Stream` to the main `Truth` class. ([`37fd8be`](https://togithub.com/google/truth/commit/37fd8bea9)) - Added `that` overloads to make it possible to write type-specific assertions when using `expect.that(optional)` and `expect.that(stream)`. ([`ca7e8f4`](https://togithub.com/google/truth/commit/ca7e8f4c5)) - Moved the `truth-java8-extension` classes into the main `truth` artifact. There is no longer any need to depend on `truth-java8-extension`, which is now empty. (We've also removed the `Truth8` [GWT](https://www.gwtproject.org/) module.) ([`eb0426e`](https://togithub.com/google/truth/commit/eb0426eb7)) Again, if you have any problems, please [let us know](https://togithub.com/google/truth/issues/new).
mockito/mockito (org.mockito:mockito-core) ### [`v5.10.0`](https://togithub.com/mockito/mockito/releases/tag/v5.10.0) *Changelog generated by [Shipkit Changelog Gradle Plugin](https://togithub.com/shipkit/shipkit-changelog)* ##### 5.10.0 - 2024-01-24 - [8 commit(s)](https://togithub.com/mockito/mockito/compare/v5.9.0...v5.10.0) by Andre Brait, dependabot\[bot] - Bump org.shipkit:shipkit-auto-version from 1.2.2 to 2.0.2 [(#​3248)](https://togithub.com/mockito/mockito/pull/3248) - Bump org.assertj:assertj-core from 3.25.1 to 3.25.2 [(#​3247)](https://togithub.com/mockito/mockito/pull/3247) - Bump org.shipkit:shipkit-changelog from 1.2.0 to 2.0.1 [(#​3245)](https://togithub.com/mockito/mockito/pull/3245) - Bump com.diffplug.spotless from 6.24.0 to 6.25.0 [(#​3244)](https://togithub.com/mockito/mockito/pull/3244) - Better typing for PluginLoader#loadPlugin(..) [(#​3242)](https://togithub.com/mockito/mockito/pull/3242) - Bump com.github.ben-manes.versions from 0.50.0 to 0.51.0 [(#​3241)](https://togithub.com/mockito/mockito/pull/3241) - Bump com.diffplug.spotless from 6.23.3 to 6.24.0 [(#​3236)](https://togithub.com/mockito/mockito/pull/3236) - Fixes [#​3219](https://togithub.com/mockito/mockito/issues/3219): Add support for static mocks on DoNotMockEnforcer [(#​3220)](https://togithub.com/mockito/mockito/pull/3220) - Mockito#mockStatic(Class\) skips DoNotMockEnforcer [(#​3219)](https://togithub.com/mockito/mockito/issues/3219) ### [`v5.9.0`](https://togithub.com/mockito/mockito/releases/tag/v5.9.0) *Changelog generated by [Shipkit Changelog Gradle Plugin](https://togithub.com/shipkit/shipkit-changelog)* ##### 5.9.0 - 2024-01-14 - [18 commit(s)](https://togithub.com/mockito/mockito/compare/v5.8.0...v5.9.0) by Björn Michael, Stefano Cordio, dependabot\[bot] - Bump org.gradle.toolchains.foojay-resolver-convention from 0.7.0 to 0.8.0 [(#​3234)](https://togithub.com/mockito/mockito/pull/3234) - Align Javadoc configuration to Java 21 standards [(#​3230)](https://togithub.com/mockito/mockito/pull/3230) - Bump com.google.googlejavaformat:google-java-format from 1.19.1 to 1.19.2 [(#​3228)](https://togithub.com/mockito/mockito/pull/3228) - Run release job on Java 21 [(#​3226)](https://togithub.com/mockito/mockito/pull/3226) - Update Gradle to 8.5 [(#​3225)](https://togithub.com/mockito/mockito/pull/3225) - Bump org.assertj:assertj-core from 3.25.0 to 3.25.1 [(#​3223)](https://togithub.com/mockito/mockito/pull/3223) - Bump org.assertj:assertj-core from 3.24.2 to 3.25.0 [(#​3218)](https://togithub.com/mockito/mockito/pull/3218) - [@​since](https://togithub.com/since) at ArgumentCaptor.captor() [(#​3214)](https://togithub.com/mockito/mockito/pull/3214) - Bump org.codehaus.groovy:groovy from 3.0.19 to 3.0.20 [(#​3213)](https://togithub.com/mockito/mockito/pull/3213) - Bump org.jetbrains.kotlin:kotlin-stdlib from 1.9.21 to 1.9.22 [(#​3211)](https://togithub.com/mockito/mockito/pull/3211) - Bump org.jetbrains.kotlin:kotlin-gradle-plugin from 1.9.21 to 1.9.22 [(#​3210)](https://togithub.com/mockito/mockito/pull/3210) - Bump versions.bytebuddy from 1.14.10 to 1.14.11 [(#​3208)](https://togithub.com/mockito/mockito/pull/3208) - Bump com.google.googlejavaformat:google-java-format from 1.18.1 to 1.19.1 [(#​3206)](https://togithub.com/mockito/mockito/pull/3206) - Bump actions/upload-artifact from 3 to 4 [(#​3201)](https://togithub.com/mockito/mockito/pull/3201) - Bump com.gradle.enterprise from 3.16 to 3.16.1 [(#​3200)](https://togithub.com/mockito/mockito/pull/3200) - Bump org.eclipse.platform:org.eclipse.osgi from 3.18.500 to 3.18.600 [(#​3193)](https://togithub.com/mockito/mockito/pull/3193) - Bump com.gradle.enterprise from 3.15.1 to 3.16 [(#​3192)](https://togithub.com/mockito/mockito/pull/3192) - Bump com.diffplug.spotless from 6.23.2 to 6.23.3 [(#​3191)](https://togithub.com/mockito/mockito/pull/3191) ### [`v5.8.0`](https://togithub.com/mockito/mockito/releases/tag/v5.8.0) *Changelog generated by [Shipkit Changelog Gradle Plugin](https://togithub.com/shipkit/shipkit-changelog)* ##### 5.8.0 - 2023-12-01 - [15 commit(s)](https://togithub.com/mockito/mockito/compare/v5.7.0...v5.8.0) by Andreas Turban, Mikaël Francoeur, dependabot\[bot], jfrantzius - [#​3000](https://togithub.com/mockito/mockito/issues/3000): fix ArrayIndexOutOfBoundsException [(#​3190)](https://togithub.com/mockito/mockito/pull/3190) - Bump com.diffplug.spotless from 6.23.1 to 6.23.2 [(#​3188)](https://togithub.com/mockito/mockito/pull/3188) - Bump com.diffplug.spotless from 6.23.0 to 6.23.1 [(#​3186)](https://togithub.com/mockito/mockito/pull/3186) - Bump actions/setup-java from 3 to 4 [(#​3185)](https://togithub.com/mockito/mockito/pull/3185) - Apply spotless to all java projects [(#​3184)](https://togithub.com/mockito/mockito/pull/3184) - Bump com.diffplug.spotless from 6.22.0 to 6.23.0 [(#​3182)](https://togithub.com/mockito/mockito/pull/3182) - Fixes [#​3179](https://togithub.com/mockito/mockito/issues/3179) : Add module for Java 21 tests. [(#​3180)](https://togithub.com/mockito/mockito/pull/3180) - Need separate module for java 21 tests [(#​3179)](https://togithub.com/mockito/mockito/issues/3179) - Bump org.jetbrains.kotlin:kotlin-gradle-plugin from 1.9.20 to 1.9.21 [(#​3176)](https://togithub.com/mockito/mockito/pull/3176) - Bump org.jetbrains.kotlin:kotlin-stdlib from 1.9.20 to 1.9.21 [(#​3175)](https://togithub.com/mockito/mockito/pull/3175) - Bump versions.bytebuddy from 1.14.9 to 1.14.10 [(#​3174)](https://togithub.com/mockito/mockito/pull/3174) - Fixes [#​3160](https://togithub.com/mockito/mockito/issues/3160) : Fix interference between spies when spying on records. [(#​3173)](https://togithub.com/mockito/mockito/pull/3173) - Bump com.github.ben-manes.versions from 0.49.0 to 0.50.0 [(#​3172)](https://togithub.com/mockito/mockito/pull/3172) - Bump versions.junitJupiter from 5.10.0 to 5.10.1 [(#​3169)](https://togithub.com/mockito/mockito/pull/3169) - Bump org.junit.platform:junit-platform-launcher from 1.10.0 to 1.10.1 [(#​3168)](https://togithub.com/mockito/mockito/pull/3168) - Deep Stubs Incompatible With Mocking Enum [(#​3167)](https://togithub.com/mockito/mockito/pull/3167) - Annotation-based spying on a generic class breaks existing final/inline Spies [(#​3160)](https://togithub.com/mockito/mockito/issues/3160) - ArrayIndexOutOfBoundsException with Version 5.3.1 [(#​3000)](https://togithub.com/mockito/mockito/issues/3000) - Deep Stubs Incompatible With Mocking Enum [(#​2984)](https://togithub.com/mockito/mockito/issues/2984)

Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

This PR has been generated by Mend Renovate. View repository job log here.