OpenBankingToolkit / cdr-standards-application-services

ForgeRock Consumer Data Right Standards Application Services is an example of how you can bundle all the micro-services together to create an CDR eco-system
1 stars 1 forks source link

Bump logstash-logback-encoder from 4.11 to 6.3 #22

Closed dependabot-preview[bot] closed 4 years ago

dependabot-preview[bot] commented 4 years ago

Bumps logstash-logback-encoder from 4.11 to 6.3.

Release notes

Sourced from logstash-logback-encoder's releases.

logstash-logback-encoder-6.3

Enhancements

  • #378 / #382 Masking support (with inspiration from @rusucosmin)
  • #363 jackson upgrades (@sdudzin )
  • #374 Added support for a line separator in CompositeJsonLayout (defaults to no line separator for backwards compitability, but can now be configured with a line separator like CompositeJsonEncoder)
  • #380 Set Automatic-Module-Name to logstash.logback.encoder in MANIFEST.MF
  • #379 Switch from travis ci to github actions (releases are now automated!)
    • Switch from oss-parent to nexus-staging-maven-plugin
    • Use mvnw for building
  • Added issue templates

Documentation Updates

Dependency Updates

Usage Dependency Old Version New Version
Runtime jackson 2.9.9.20190807 2.10.1
Compile-time maven-jar-plugin 3.1.2 3.2.0
Compile-time maven-source-plugin 3.1.0 3.2.0
Compile-time maven-javadoc-plugin 3.0.0 3.1.1
Compile-time maven-gpg-plugin n/a 1.6
Compile-time nexus-staging-maven-plugin n/a 1.6.8
Test-time assertj 3.13.2 3.14.0
Test-time mockito 2.28.2 3.2.0

logstash-logback-encoder-6.2

Enhancements

  • #341 Pro-actively reopen the connection when the socket reader detects the connection has been closed instead of waiting for the next event
  • #343 Introduce writeTimeout to detect stuck TCP write operations, and reopen the connection
  • #344 Add getConnectionDestination() to TCP appenders to provide visibility into the currently connected destination
  • #346 Async appenders now flush delegate OutputStreamAppenders at the end of each batch
  • #353 Don't block trying to publish a keep alive event if the ring buffer is full.
  • #357 Include all public packages from logstash-logback-encoder in OSGi Exported-Packages in manifest
  • #359 Update jackson-bom to 2.9.9.20190807, which updates jackson-databind to 2.9.9.3 to fix some deserialization security vulnerabilities (logstash-logback-encoder was not affected, since it does not deserialize JSON data) (@kubukoz)

Documentation Updates

  • #342 Clarified advantages/disadvantages of disabling write buffer
  • #345 Add required downcast in JsonFactoryDecorator example
  • #348 Mention in documentation that ShortenedThrowableConverter only applies to Throwables logged as extra arguments (e.g. not structured arguments or markers)
  • #358 Fixed xml tag in example (@agentgonzo)

Dependency Updates

| Usage | Dependency | Old Version | New Version |

... (truncated)
Commits
  • a712351 [maven-release-plugin] prepare release logstash-logback-encoder-6.3
  • 5896c93 [release] remove explicit configuration of scm plugin
  • dfb0776 [release]
  • 94a8f4d bump mockito to 3.2.0
  • 76ce6bb Add ability to specify paths and values to mask dynamically.
  • da2f1cd Set Automatic-Module-Name in manifest (#380)
  • 88cfe5a fix comment in readme
  • 00522ad fix reference
  • d8a1c1a Move masking stuff to net.logstash.logback.mask (from net.logstash.logback.de...
  • 555b045 Update issue templates
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @BohoCode.


Note: This repo was added to Dependabot recently, so you'll receive a maximum of 5 PRs for your first few update runs. Once an update run creates fewer than 5 PRs we'll remove that limit.

You can always request more updates by clicking Bump now in your Dependabot dashboard.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Automerge options (never/patch/minor, and dev/runtime dependencies) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired)