search

jooby-project / jooby

The modular web framework for Java and Kotlin
https://jooby.io
Apache License 2.0
1.7k stars 200 forks source link

build(deps): bump the dependencies group with 16 updates #3414

Closed dependabot[bot] closed 4 months ago

dependabot[bot] commented 4 months ago

Bumps the dependencies group with 16 updates:

Package From To
io.netty:netty-bom 4.1.108.Final 4.1.109.Final
io.netty:netty-common 4.1.108.Final 4.1.109.Final
io.netty:netty-buffer 4.1.108.Final 4.1.109.Final
io.netty:netty-handler 4.1.108.Final 4.1.109.Final
io.netty:netty-transport 4.1.108.Final 4.1.109.Final
io.netty:netty-transport-native-epoll 4.1.108.Final 4.1.109.Final
io.netty:netty-codec-http 4.1.108.Final 4.1.109.Final
io.netty:netty-codec-http2 4.1.108.Final 4.1.109.Final
io.netty:netty-transport-native-kqueue 4.1.108.Final 4.1.109.Final
com.amazonaws:aws-java-sdk-bom 1.12.701 1.12.705
ch.qos.logback:logback-classic 1.5.5 1.5.6
com.graphql-java:graphql-java 21.5 22.0
io.undertow:undertow-core 2.3.12.Final 2.3.13.Final
com.github.vladimir-bukhtoyarov:bucket4j-core 7.6.1 8.0.1
org.apache.maven.plugins:maven-jar-plugin 3.4.0 3.4.1
org.apache.maven.plugins:maven-gpg-plugin 3.2.3 3.2.4

Updates io.netty:netty-bom from 4.1.108.Final to 4.1.109.Final

Commits


Updates io.netty:netty-common from 4.1.108.Final to 4.1.109.Final

Commits


Updates io.netty:netty-buffer from 4.1.108.Final to 4.1.109.Final

Commits


Updates io.netty:netty-handler from 4.1.108.Final to 4.1.109.Final

Commits


Updates io.netty:netty-transport from 4.1.108.Final to 4.1.109.Final

Commits


Updates io.netty:netty-transport-native-epoll from 4.1.108.Final to 4.1.109.Final

Commits


Updates io.netty:netty-codec-http from 4.1.108.Final to 4.1.109.Final

Commits


Updates io.netty:netty-codec-http2 from 4.1.108.Final to 4.1.109.Final

Commits


Updates io.netty:netty-transport-native-kqueue from 4.1.108.Final to 4.1.109.Final

Commits


Updates com.amazonaws:aws-java-sdk-bom from 1.12.701 to 1.12.705

Changelog

Sourced from com.amazonaws:aws-java-sdk-bom's changelog.

1.12.705 2024-04-19

AWS Glue

  • Features

    • Adding RowFilter in the response for GetUnfilteredTableMetadata API

Amazon CloudWatch Internet Monitor

  • Features

    • This update introduces the GetInternetEvent and ListInternetEvents APIs, which provide access to internet events displayed on the Amazon CloudWatch Internet Weather Map.

Amazon Personalize

  • Features

    • This releases auto training capability while creating a solution and automatically syncing latest solution versions when creating/updating a campaign

1.12.704 2024-04-18

Amazon GuardDuty

  • Features

    • Added IPv6Address fields for local and remote IP addresses

Amazon QuickSight

  • Features

    • This release adds support for the Cross Sheet Filter and Control features, and support for warnings in asset imports for any permitted errors encountered during execution

Amazon SageMaker Service

  • Features

    • Removed deprecated enum values and updated API documentation.

Amazon WorkSpaces

  • Features

    • Adds new APIs for managing and sharing WorkSpaces BYOL configuration across accounts.

EMR Serverless

  • Features

    • This release adds the capability to publish detailed Spark engine metrics to Amazon Managed Service for Prometheus (AMP) for enhanced monitoring for Spark jobs.

Elastic Disaster Recovery Service

  • Features

    • Outpost ARN added to Source Server and Recovery Instance

IAM Roles Anywhere

  • Features

    • This release introduces the PutAttributeMapping and DeleteAttributeMapping APIs. IAM Roles Anywhere now provides the capability to define a set of mapping rules, allowing customers to specify which data is extracted from their X.509 end-entity certificates.

1.12.703 2024-04-17

Amazon Elastic Compute Cloud

  • Features

    • Documentation updates for Elastic Compute Cloud (EC2).

QBusiness

  • Features

    • This release adds support for IAM Identity Center (IDC) as the identity gateway for Q Business. It also allows users to provide an explicit intent for Q Business to identify how the Chat request should be handled.

... (truncated)

Commits
  • 6550a1e AWS SDK for Java 1.12.705
  • d5ae946 Update GitHub version number to 1.12.705-SNAPSHOT
  • 4066cae AWS SDK for Java 1.12.704
  • d572c58 Update GitHub version number to 1.12.704-SNAPSHOT
  • 3f254cb AWS SDK for Java 1.12.703
  • cdafde7 Update GitHub version number to 1.12.703-SNAPSHOT
  • e964dd4 AWS SDK for Java 1.12.702
  • c464536 Update GitHub version number to 1.12.702-SNAPSHOT
  • See full diff in compare view


Updates ch.qos.logback:logback-classic from 1.5.5 to 1.5.6

Commits
  • 7812a55 prepare release 1.5.6
  • 759fc25 fix issues/805 i.e. LOGBACK-1768, included file with inner conditional
  • 3d55638 start work on 1.5.6-SNAPSHOT
  • a91d2b6 notes about javadocs
  • See full diff in compare view


Updates com.graphql-java:graphql-java from 21.5 to 22.0

Release notes

Sourced from com.graphql-java:graphql-java's releases.

22.0

We are pleased to announce the release of graphql-java v22.0.

Thanks to everyone in the community who contributed to the release, whether that was code, helping to report issues, or participating in discussions.

This is a breaking change release.

The graphql-java team takes breaking changes very seriously but in the name of performance we have made some significant breaking changes in this release.

Major Performance Changes

Past releases have been very much performance focused and this one is no different. However, this release is aiming to reduce memory pressure more than reduce pure CPU usage. When the graphql-java engine is running, if it produces less objects it will ultimately run faster because of reduced memory pressure and less garbage to collect.

The engine has been changed in two major ways that reduce memory pressure.

ExecutionResult wrapping

The first was that all values that come back got wrapped internally into a ExecutionResult object where the data attribute was the value. This was a carry over from some very early GraphQL code but was unnecessary and hence has been removed. The follow on effect of this is that some graphql.execution.ExecutionStrategy protected methods and graphql.execution.instrumentation.Instrumentation methods used to receive and return ExecutionResult values and no longer do, which is an API breaking change. We have made this breaking changes in the name of memory pressure performance.

CompletableFuture wrapping

The second major change is that the engine no longer exclusively uses java.util.concurrent.CompletableFutures when composing together results. Let us explain the past code first so we can discuss the new code.

CompletableFuture is a fantastic construct because it represents a promise to a value and it can also hold an exceptional state inside itself. Async programming with CompletableFuture is viral. If stage 1 of some compute process returns a CompletableFuture then stage 2 and 3 and 4 are likely to as well to ensure everything is asynchronous.

We use to take values that were not asynchronous (such as DataFetcher that returned a simple in memory object) and wrap them in a CompletableFuture so that all of the other code composed together using CompletableFuture methods like .thenApply() and .thenCompose and so on. The code is cleaner if you use all CompletableFuture code patterns.

However many objects in a GraphQL request are not asynchronous but rather materialised objects in memory. Scalars, enums and list are often just values immediately available to be used and allocating a CompletableFuture makes the code easier to write but it has a memory pressure cost.

So we have sacrificed cleaner code for more memory performant code.

graphql-java engine graphql.execution.ExecutionStrategy methods now just return Object where that object might be either a CompletableFuture or a materialised value.

    private Object /*CompletableFuture<FetchedValue> | FetchedValue>*/
       fetchField(GraphQLFieldDefinition fieldDef, ExecutionContext executionContext, ExecutionStrategyParameters parameters) {

Notice we have lost type safety here. In the past this would have only been CompletableFuture<FetchedValue> and hence been both type safe and async composable.

Now the caller of that method has to handle the async case where it might be a CompletableFuture<FetchedValue> AND the materialised value case where it might be a FetchedValue but as most simple fields in GraphQL are in fact materialised values, this is worth the less clean code.

DataFetchers can of course continue to return CompletableFuture values and they will be handled in a polymorphic manner.

The upshot of all this work is that the graphql-java engine allocated way less CompletableFuture values and hence reduces the amount of memory used.

Instrumentation Changes

... (truncated)

Commits
  • 0eec91e Merge pull request #3551 from jbellenger/jbellenger-validate-dir-args
  • c4df085 Merge pull request #3567 from graphql-java/dependabot/github_actions/gradle/w...
  • 2cf3cc0 Merge pull request #3566 from graphql-java/dependabot/gradle/org.testng-testn...
  • 1d78326 Merge pull request #3565 from graphql-java/strict-mode-runtime-wiring
  • 207bb83 Bump gradle/wrapper-validation-action from 2 to 3
  • 9f613a6 Bump org.testng:testng from 7.10.0 to 7.10.1
  • bb82efb Better testing
  • 5a53ec4 strictMode for RuntimeWiring and TypeRuntimeWiring
  • 7f13678 Merge pull request #3564 from graphql-java/add-dataloader-3.3.0
  • b2dc510 Dataloader 3.3.0
  • Additional commits viewable in compare view


Updates io.undertow:undertow-core from 2.3.12.Final to 2.3.13.Final

Commits
  • 2b13a06 Prepare 2.3.13.Final
  • 313bd6c Merge pull request #1573 from baranowb/UNDERTOW-2291_2
  • 775b805 Merge pull request #1535 from rhusar/contributing-guide-fixes
  • 485fd79 Merge pull request #1581 from fl4via/UNDERTOW-2264
  • a635db5 Merge pull request #1565 from aogburn/03749756
  • 6c7cb58 Merge pull request #1580 from fl4via/UNDERTOW-2374
  • 0410f3c [UNDERTOW-2264] CVE-2023-1973 Force session timeout to 2 minutes when session...
  • 3e8a596 [UNDERTOW-2374] Move the check for allowUnescapedCharactersInUrl to outside o...
  • 4b8a8c1 [UNDERTOW-2291] Shush jdoc and compile warning obfuscating console
  • ddb4aee Merge pull request #1561 from ropalka/UNDERTOW-2347
  • Additional commits viewable in compare view


Updates io.netty:netty-common from 4.1.108.Final to 4.1.109.Final

Commits


Updates io.netty:netty-buffer from 4.1.108.Final to 4.1.109.Final

Commits


Updates io.netty:netty-handler from 4.1.108.Final to 4.1.109.Final

Commits


Updates io.netty:netty-transport from 4.1.108.Final to 4.1.109.Final

Commits


Updates io.netty:netty-transport-native-epoll from 4.1.108.Final to 4.1.109.Final

Commits


Updates io.netty:netty-codec-http from 4.1.108.Final to 4.1.109.Final

Commits


Updates com.github.vladimir-bukhtoyarov:bucket4j-core from 7.6.1 to 8.0.1

Release notes

Sourced from com.github.vladimir-bukhtoyarov:bucket4j-core's releases.

8.0.1

https://bucket4j.com/7.6.0/release-notes.html

The features in release scope are following:

Commits


Updates org.apache.maven.plugins:maven-jar-plugin from 3.4.0 to 3.4.1

Release notes

Sourced from org.apache.maven.plugins:maven-jar-plugin's releases.

3.4.1

🐛 Bug Fixes

📦 Dependency updates

Commits
  • 8b29adc [maven-release-plugin] prepare release maven-jar-plugin-3.4.1
  • 325b299 [MJAR-308] Bump org.apache.maven.plugins:maven-plugins from 41 to 42 (#85)
  • 52111cc [MJAR-307] Wrong version of commons-io cause a ClassNotFound o.a.commons.io.f...
  • 902d4c5 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view


Updates org.apache.maven.plugins:maven-gpg-plugin from 3.2.3 to 3.2.4

Release notes

Sourced from org.apache.maven.plugins:maven-gpg-plugin's releases.

3.2.4

Release Notes - Maven GPG Plugin - Version 3.2.4

📦 Dependency updates

Commits
  • 789149e [maven-release-plugin] prepare release maven-gpg-plugin-3.2.4
  • 893aedc [MGPG-125] Fix "bestPractices" (#95)
  • b6f0324 [MGPG-126] Bump commons-io:commons-io from 2.16.0 to 2.16.1 (#94)
  • 3c5878b [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view


Updates io.netty:netty-codec-http2 from 4.1.108.Final to 4.1.109.Final

Commits
  • 43455df [maven-release-plugin] prepare release netty-4.1.109.Final
  • b9af2e6 Utilize ByteBuf#indexOf (#13974)
  • 9f44b97 Fix DefaultChannelId#asLongText NPE (#13971)
  • eb48822 chore: remove repetitive words (#13972)
  • 0e436dd Use PlatformDependent.threadLocalRandom() to reduce memory footprint (#13977)
  • 4d961d0 Don't send a RST frame when closing the stream in a write future whil… (#13973)
  • e19c91f Improve new DefaultChannelId (#13960)
  • 02b54ca Refactor file descriptor handling in openFileDescri... _Description has been truncated_