search

InseeFr / Lunatic-Model

Data model for Lunatic
MIT License
1 stars 10 forks source link

chore(deps): update dependency org.xmlunit:xmlunit-matchers to v2.10.0 (v2-main) #222

Closed renovate[bot] closed 3 months ago

renovate[bot] commented 4 months ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
org.xmlunit:xmlunit-matchers (source) 2.9.1 -> 2.10.0 age adoption passing confidence

Release Notes

xmlunit/xmlunit (org.xmlunit:xmlunit-matchers) ### [`v2.10.0`](https://togithub.com/xmlunit/xmlunit/blob/HEAD/RELEASE_NOTES.md#XMLUnit-for-Java-2100---Released-2024-04-28) [Compare Source](https://togithub.com/xmlunit/xmlunit/compare/v2.9.1...v2.10.0) - add a new `ElementSelectors.byNameAndAllAttributes` variant that filters attributes before deciding whether elements can be compared. Inspired by Issue [#​259](https://togithub.com/xmlunit/xmlunit/issues/259) - By default the `TransformerFactory`s created will now try to disable extension functions. If you need extension functions for your transformations you may want to pass in your own instance of `TransformerFactory` and `TransformerFactoryConfigurer` may help with that. Inspired by Issue [#​264](https://togithub.com/xmlunit/xmlunit/issues/264) This is tracked as [CVE-2024-31573](https://togithub.com/xmlunit/xmlunit/security/advisories/GHSA-chfm-68vv-pvw5). - `JAXPXPathEngine` will now try to disable the execution of extension functions by default but uses `XPathFactory#setProperty` which is not available prior to Java 18. You may want to enable secure processing on an `XPathFactory` instance you pass to `JAXPXPathEngine` instead - and `XPathFactoryConfigurer` may help with that.

Configuration

📅 Schedule: Branch creation - "after 10pm every weekday,before 5am every weekday,every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

This PR has been generated by Mend Renovate. View repository job log here.

sonarcloud[bot] commented 4 months ago

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

renovate[bot] commented 3 months ago

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.