jooby-project / jooby

The modular web framework for Java and Kotlin
https://jooby.io
Apache License 2.0
1.7k stars 199 forks source link

build(deps): bump the dependencies group with 11 updates #3473

Closed dependabot[bot] closed 2 months ago

dependabot[bot] commented 2 months ago

Bumps the dependencies group with 11 updates:

Package From To
com.amazonaws:aws-java-sdk-bom 1.12.757 1.12.761
io.avaje:avaje-inject 9.12 10.0
io.avaje:avaje-inject-generator 10.0 10.0
io.avaje:avaje-jsonb 1.12 2.0
io.avaje:avaje-jsonb-generator 1.12 2.0
com.google.truth:truth 1.4.3 1.4.4
org.apache.maven.plugins:maven-surefire-plugin 3.3.0 3.3.1
io.projectreactor:reactor-core 3.6.7 3.6.8
io.smallrye.reactive:mutiny 2.6.1 2.6.2
org.jsoup:jsoup 1.17.2 1.18.1
org.assertj:assertj-core 3.26.0 3.26.3

Updates com.amazonaws:aws-java-sdk-bom from 1.12.757 to 1.12.761

Changelog

Sourced from com.amazonaws:aws-java-sdk-bom's changelog.

1.12.761 2024-07-12

AWS ARC - Zonal Shift

  • Features

    • Adds the option to subscribe to get notifications when a zonal autoshift occurs in a region.

AWS Certificate Manager Private Certificate Authority

  • Features

    • Minor refactoring of C2J model for AWS Private CA

AWS CodeBuild

  • Features

    • Add v2 smoke tests and smithy smokeTests trait for SDK testing.

AWS Global Accelerator

  • Features

    • This feature adds exceptions to the Customer API to avoid throwing Internal Service errors

Amazon DynamoDB

  • Features

    • Add v2 smoke tests and smithy smokeTests trait for SDK testing.

Amazon Pinpoint

  • Features

    • Add v2 smoke tests and smithy smokeTests trait for SDK testing.

Amazon QuickSight

  • Features

    • Vega ally control options and Support for Reviewed Answers in Topics

Amazon Relational Database Service

  • Features

    • Update path for CreateDBCluster resource identifier, and Add v2 smoke tests and smithy smokeTests trait for SDK testing.

Amazon Simple Notification Service

  • Features

    • Add v2 smoke tests and smithy smokeTests trait for SDK testing.

Auto Scaling

  • Features

    • Add v2 smoke tests and smithy smokeTests trait for SDK testing.

1.12.760 2024-07-10

AWS Batch

  • Features

    • This feature allows AWS Batch Jobs with EKS container orchestration type to be run as Multi-Node Parallel Jobs.

AWS Glue

  • Features

    • Add recipe step support for recipe node

... (truncated)

Commits
  • 0dd525a AWS SDK for Java 1.12.761
  • 758605b Update GitHub version number to 1.12.761-SNAPSHOT
  • 6095643 AWS SDK for Java 1.12.760
  • 9835330 Update GitHub version number to 1.12.760-SNAPSHOT
  • f47a18f AWS SDK for Java 1.12.759
  • 0407bda Update GitHub version number to 1.12.759-SNAPSHOT
  • de3a30b AWS SDK for Java 1.12.758
  • 3803124 Update GitHub version number to 1.12.758-SNAPSHOT
  • See full diff in compare view


Updates io.avaje:avaje-inject from 9.12 to 10.0

Commits
  • 1bb7796 Version 10.0
  • 3687813 Merge pull request #641 from avaje/dependabot/maven/net.bytebuddy-byte-buddy-...
  • b6cf2b0 Bump net.bytebuddy:byte-buddy from 1.14.17 to 1.14.18
  • 6484208 Merge pull request #640 from avaje/dependabot/maven/net.bytebuddy-byte-buddy-...
  • f413756 Bump net.bytebuddy:byte-buddy-agent from 1.14.17 to 1.14.18
  • 71bc173 Merge pull request #639 from avaje/feature/destroyPriority
  • 70ae1da Use destroyPriority() default as 1000
  • 519b3e5 Update Javadocs (#638)
  • 14127be bump plugin versions (#637)
  • b7c1b91 Version 10.0-RC11
  • Additional commits viewable in compare view


Updates io.avaje:avaje-inject-generator from 10.0 to 10.0

Updates io.avaje:avaje-jsonb from 1.12 to 2.0

Release notes

Sourced from io.avaje:avaje-jsonb's releases.

2.0

What's Changed

Dependencies

Full Changelog: https://github.com/avaje/avaje-jsonb/compare/1.12...2.0

Commits
  • 479ad44 Version 2.0
  • e945332 Fix Creator Generation Error (#261)
  • dd03ca4 Merge pull request #260 from avaje/dependabot/maven/com.fasterxml.jackson.cor...
  • 095a2c9 Bump com.fasterxml.jackson.core:jackson-core from 2.17.1 to 2.17.2
  • 77f98fd Merge pull request #259 from avaje/dependabot/maven/io.avaje-avaje-inject-10....
  • 39495a1 Merge pull request #258 from avaje/dependabot/maven/io.avaje-avaje-inject-gen...
  • 620fc44 Bump io.avaje:avaje-inject from 10.0-RC10 to 10.0-RC11
  • 568b19f Bump io.avaje:avaje-inject-generator from 10.0-RC10 to 10.0-RC11
  • 09f8e28 .gitignore avaje-processors.txt
  • 5d2b58c Version 2.0-RC5
  • Additional commits viewable in compare view


Updates io.avaje:avaje-jsonb-generator from 1.12 to 2.0

Updates io.avaje:avaje-jsonb-generator from 1.12 to 2.0

Updates com.google.truth:truth from 1.4.3 to 1.4.4

Release notes

Sourced from com.google.truth:truth's releases.

v1.4.4

  • Annotated the rest of the main package for nullness, and moved the @NullMarked annotation from individual classes up to the package to avoid a warning under --release 8. (e107aeadc)
  • Improved the failure message for matches to conditionally suggest using containsMatch. (7e9fc7aec)
Commits
  • ddeaa0c Set version number for truth-parent to 1.4.4.
  • e107aea Annotate the rest of the main package (basically just the Java 8 subjects) fo...
  • 8ac91a6 Document that truth-java8-extension is obsolete.
  • 99af8be Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.23 to 1.24 in the d...
  • 54e548c Bump the dependencies group with 2 updates
  • 2183a14 Migrate from legacy com.google.gwt to org.gwtproject.
  • 7e9fc7a Make StringSubject.matches suggest using containsMatch if matches(x) fails bu...
  • af140d6 Fix grammar in Javadoc comments.
  • See full diff in compare view


Updates org.apache.maven.plugins:maven-surefire-plugin from 3.3.0 to 3.3.1

Commits
  • 7e45620 [maven-release-plugin] prepare release surefire-3.3.1
  • 561b4ca [SUREFIRE-2250] Surefire Test Report Schema properties element is not consist...
  • 6aaea8a [SUREFIRE-1360] Ability to disable properties for successfully passed tests
  • c17b92b Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.23 to 1.24
  • 748d9dc Fix typos
  • f8092e9 Improve time units
  • c670335 [SUREFIRE-1934] Ability to disable system-out/system-err for successfully pas...
  • bce1b39 Improve docs of linkXRef
  • 3c49ebd Bump org.htmlunit:htmlunit from 4.2.0 to 4.3.0
  • 6ff0f83 [SUREFIRE-2242] Plain test report does not include names of the skipped tests
  • Additional commits viewable in compare view


Updates io.projectreactor:reactor-core from 3.6.7 to 3.6.8

Release notes

Sourced from io.projectreactor:reactor-core's releases.

v3.6.8

Reactor Core 3.6.8 is part of 2023.0.8 Release Train.

What's Changed

:lady_beetle: Bug fixes

Full Changelog: https://github.com/reactor/reactor-core/compare/v3.6.7...v3.6.8

Commits
  • 5caf58a [release] Prepare and release 3.6.8
  • 20e27ab Merge-ignore release 3.5.19 into 3.6.8
  • f1119e5 [release] Next development version 3.5.20-SNAPSHOT
  • c77e53f [release] Prepare and release 3.5.19
  • 732c74f Merge-ignore release 3.4.40 into 3.6.8
  • fb88d47 Merge-ignore release 3.4.40 into 3.5.19
  • 0eb426c [release] Next development version 3.4.41-SNAPSHOT
  • e28814e [release] Prepare and release 3.4.40
  • 5d262bc Bump Micrometer to version 1.12.8
  • f84efd6 Merge a367c57f2 into 3.6.8
  • Additional commits viewable in compare view


Updates io.smallrye.reactive:mutiny from 2.6.1 to 2.6.2

Release notes

Sourced from io.smallrye.reactive:mutiny's releases.

Release 2.6.2

Changelog

🔀 Merge

  • c0315b2 Merge pull request #1646 from smallrye/fix/flatmap-inner-cancellation, closes #1646
  • 1f727c5 Merge pull request #1647 from smallrye/dependabot/maven/version.surefire.plugin-3.3.1, closes #1647
  • 779083a Merge pull request #1644 from smallrye/dependabot/maven/org.assertj-assertj-core-3.26.3, closes #1644
  • 2724db8 Merge pull request #1645 from smallrye/dependabot/maven/io.projectreactor-reactor-core-3.6.8, closes #1645
  • 5b8ebbc Merge pull request #1643 from smallrye/dependabot/pip/documentation/zipp-3.19.1, closes #1643
  • 57c11f8 Merge pull request #1641 from smallrye/dependabot/maven/net.bytebuddy-byte-buddy-1.14.18, closes #1641
  • 58b6c5f Merge pull request #1640 from smallrye/dependabot/pip/documentation/certifi-2024.7.4, closes #1640
  • c8e5321 Merge pull request #1638 from smallrye/dependabot/maven/io.smallrye-smallrye-build-parent-45, closes #1638
  • 326b2fa Merge pull request #1639 from smallrye/ci/no-conventional-check-for-dependabot, closes #1639
  • 6222923 Merge pull request #1636 from smallrye/dependabot/maven/io.smallrye.common-smallrye-common-annotation-2.5.0, closes #1636
  • a522fd3 Merge pull request #1634 from smallrye/dependabot/maven/org.jreleaser-jreleaser-maven-plugin-1.13.1, closes #1634
  • 9fb0f54 Merge pull request #1635 from smallrye/dependabot/maven/org.codehaus.mojo-versions-maven-plugin-2.17.0, closes #1635
  • 4a851df Merge pull request #1633 from smallrye/dependabot/maven/junit.version-5.10.3, closes #1633
  • 89a8f45 Merge pull request #1631 from smallrye/dependabot/maven/org.apache.maven.plugins-maven-dependency-plugin-3.7.1, closes #1631
  • 6e1d104 Merge pull request #1632 from smallrye/dependabot/maven/io.smallrye.config-smallrye-config-3.8.3, closes #1632
  • b71ef10 Merge pull request #1630 from smallrye/fix/bom-add-core-deps, closes #1630

🐛 Fixes

ci

  • e49de97 do not check conventional commits with dependabot

tests

  • c0f359d await failures before asserting them

unscoped

  • b8c4096 ensure inner subscribers get cancelled on immediate inner failure
  • 9a6bcdb specify core dependency versions in the BOM

🧰 Tasks

release

  • b6b0934 release Mutiny 2.6.2
  • e2f37f5 set development version to 999-SNAPSHOT

🛠 Build

deps

  • 8751914 bump version.surefire.plugin from 3.3.0 to 3.3.1
  • e90756f bump io.projectreactor:reactor-core from 3.6.7 to 3.6.8
  • 4b326be bump org.assertj:assertj-core from 3.26.0 to 3.26.3
  • 2e1ba26 bump zipp from 3.18.1 to 3.19.1 in /documentation
  • 424a411 bump net.bytebuddy:byte-buddy from 1.14.17 to 1.14.18
  • 06012b9 bump certifi from 2024.2.2 to 2024.7.4 in /documentation
  • 414405d bump io.smallrye:smallrye-build-parent from 44 to 45
  • 2f73038 bump io.smallrye.common:smallrye-common-annotation
  • 5bd311e bump org.codehaus.mojo:versions-maven-plugin
  • 7f521f9 bump org.jreleaser:jreleaser-maven-plugin

... (truncated)

Commits
  • b6b0934 chore(release): release Mutiny 2.6.2
  • c0315b2 Merge pull request #1646 from smallrye/fix/flatmap-inner-cancellation
  • 1f727c5 Merge pull request #1647 from smallrye/dependabot/maven/version.surefire.plug...
  • 8751914 build(deps): bump version.surefire.plugin from 3.3.0 to 3.3.1
  • b8c4096 fix: ensure inner subscribers get cancelled on immediate inner failure
  • c0f359d fix(tests): await failures before asserting them
  • 779083a Merge pull request #1644 from smallrye/dependabot/maven/org.assertj-assertj-c...
  • 2724db8 Merge pull request #1645 from smallrye/dependabot/maven/io.projectreactor-rea...
  • e90756f build(deps): bump io.projectreactor:reactor-core from 3.6.7 to 3.6.8
  • 4b326be build(deps): bump org.assertj:assertj-core from 3.26.0 to 3.26.3
  • Additional commits viewable in compare view


Updates org.jsoup:jsoup from 1.17.2 to 1.18.1

Release notes

Sourced from org.jsoup:jsoup's releases.

jsoup-1.18.1

https://jsoup.org/news/release-1.18.1

Improvements

  • Stream Parser: A StreamParser provides a progressive parse of its input. As each Element is completed, it is emitted via a Stream or Iterator interface. Elements returned will be complete with all their children, and an (empty) next sibling, if applicable. Elements (or their children) may be removed from the DOM during the parse, for e.g. to conserve memory, providing a mechanism to parse an input document that would otherwise be too large to fit into memory, yet still providing a DOM interface to the document and its elements. Additionally, the parser provides a selectFirst(String query) / selectNext(String query), which will run the parser until a hit is found, at which point the parse is suspended. It can be resumed via another select() call, or via the stream() or iterator() methods. 2096
  • Download Progress: added a Response Progress event interface, which reports progress and URLs are downloaded (and parsed). Supported on both a session and a single connection level. 2164, 656
  • Added Path accepting parse methods: Jsoup.parse(Path), Jsoup.parse(path, charsetName, baseUri, parser), etc. 2055
  • Updated the button tag configuration to include a space between multiple button elements in the Element.text() method. 2105
  • Added support for the ns|* all elements in namespace Selector. 1811
  • When normalising attribute names during serialization, invalid characters are now replaced with _, vs being stripped. This should make the process clearer, and generally prevent an invalid attribute name being coerced unexpectedly. 2143

Changes

  • Removed previously deprecated internal classes and methods. 2094
  • Build change: the built jar's OSGi manifest no longer imports itself. 2158

Bug Fixes

  • When tracking source positions, if the first node was a TextNode, its position was incorrectly set to -1. 2106
  • When connecting (or redirecting) to URLs with characters such as {, } in the path, a Malformed URL exception would be thrown (if in development), or the URL might otherwise not be escaped correctly (if in production). The URL encoding process has been improved to handle these characters correctly. 2142
  • When using W3CDom with a custom output Document, a Null Pointer Exception would be thrown. 2114
  • The :has() selector did not match correctly when using sibling combinators (like e.g.: h1:has(+h2)). 2137
  • The :empty selector incorrectly matched elements that started with a blank text node and were followed by non-empty nodes, due to an incorrect short-circuit. 2130
  • Element.cssSelector() would fail with "Did not find balanced marker" when building a selector for elements that had a ( or [ in their class names. And selectors with those characters escaped would not match as expected. 2146
  • Updated Entities.escape(string) to make the escaped text suitable for both text nodes and attributes (previously was only for text nodes). This does not impact the output of Element.html() which correctly applies a minimal escape depending on if the use will be for text data or in a quoted

... (truncated)

Changelog

Sourced from org.jsoup:jsoup's changelog.

1.18.1 (Pending)

Improvements

  • Stream Parser: A StreamParser provides a progressive parse of its input. As each Element is completed, it is emitted via a Stream or Iterator interface. Elements returned will be complete with all their children, and an (empty) next sibling, if applicable. Elements (or their children) may be removed from the DOM during the parse, for e.g. to conserve memory, providing a mechanism to parse an input document that would otherwise be too large to fit into memory, yet still providing a DOM interface to the document and its elements. Additionally, the parser provides a selectFirst(String query) / selectNext(String query), which will run the parser until a hit is found, at which point the parse is suspended. It can be resumed via another select() call, or via the stream() or iterator() methods. 2096
  • Download Progress: added a Response Progress event interface, which reports progress and URLs are downloaded (and parsed). Supported on both a session and a single connection level. 2164, 656
  • Added Path accepting parse methods: Jsoup.parse(Path), Jsoup.parse(path, charsetName, baseUri, parser), etc. 2055
  • Updated the button tag configuration to include a space between multiple button elements in the Element.text() method. 2105
  • Added support for the ns|* all elements in namespace Selector. 1811
  • When normalising attribute names during serialization, invalid characters are now replaced with _, vs being stripped. This should make the process clearer, and generally prevent an invalid attribute name being coerced unexpectedly. 2143

Changes

  • Removed previously deprecated internal classes and methods. 2094
  • Build change: the built jar's OSGi manifest no longer imports itself. 2158

Bug Fixes

  • When tracking source positions, if the first node was a TextNode, its position was incorrectly set to -1. 2106
  • When connecting (or redirecting) to URLs with characters such as {, } in the path, a Malformed URL exception would be thrown (if in development), or the URL might otherwise not be escaped correctly (if in production). The URL encoding process has been improved to handle these characters correctly. 2142
  • When using W3CDom with a custom output Document, a Null Pointer Exception would be thrown. 2114
  • The :has() selector did not match correctly when using sibling combinators (like e.g.: h1:has(+h2)). 2137
  • The :empty selector incorrectly matched elements that started with a blank text node and were followed by non-empty nodes, due to an incorrect short-circuit. 2130
  • Element.cssSelector() would fail with "Did not find balanced marker" when building a selector for elements that had a ( or [ in their class names. And selectors with those characters escaped would not match as expected. 2146
  • Updated Entities.escape(string) to make the escaped text suitable for both text nodes and attributes (previously was only for text nodes). This does not impact the output of Element.html() which correctly applies a minimal escape depending on if the use will be for text data or in a quoted attribute. 1278

... (truncated)

Commits
  • 19e8539 [maven-release-plugin] prepare release jsoup-1.18.1
  • c8b6f2e Progress javadoc tweaks
  • 6cbe7e4 Replace attribute invalid characters with _, vs stripping
  • 68f6f9c Bump jetty.version from 9.4.54.v20240208 to 9.4.55.v20240627 (#2168)
  • 6423e65 Relaxed the multi-thread w/o newRequest test
  • 6c55f01 Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.23 to 1.24 (#2167)
  • e1bfee9 Shh
  • b4b3fd1 Added test of partial fetch in Stream Parser
  • 9ba6dc7 Make Entities.escape(string) suitable for both text and attributes
  • a0537c7 Handle escaped characters in consumeSubQuery
  • Additional commits viewable in compare view


Updates org.assertj:assertj-core from 3.26.0 to 3.26.3

Release notes

Sourced from org.assertj:assertj-core's releases.

v3.26.3

:jigsaw: Binary Compatibility

The release is:

  • Binary compatible with the previous minor version.
  • Binary incompatible with the previous patch version.

:boom: Breaking Changes

Core

  • Replace assertThat(Temporal) with assertThatTemporal(Temporal) #3519

:bug: Bug Fixes

Core

  • Fix Javadoc rendering on FactoryBasedNavigableListAssert::assertThat
  • Allow ComparingNormalizedFields instances to be reused across different assertions #3493

:hammer: Dependency Upgrades

Core

  • Upgrade to Byte Buddy 1.14.18 #3531
  • Upgrade to JUnit BOM 5.10.3 #3525

Guava

  • Upgrade to Guava 33.2.1-jre #3499

:heart: Contributors

Thanks to all the contributors who worked on this release:

@​genuss

Commits
  • 8e97f90 [maven-release-plugin] prepare release assertj-build-3.26.3
  • d1afefc chore(deps): bump com.github.spotbugs:spotbugs-maven-plugin from 4.8.6.1 to 4...
  • 2dc2cbf chore(deps): bump byte-buddy.version from 1.14.17 to 1.14.18 (#3531)
  • 2541d3c chore(deps-dev): bump com.fasterxml.jackson.core:jackson-databind from 2.17.1...
  • cdb906f [maven-release-plugin] prepare for next development iteration
  • c3b1f4a [maven-release-plugin] prepare release assertj-build-3.26.2
  • d5b52ab [maven-release-plugin] prepare for next development iteration
  • 17ea711 [maven-release-plugin] prepare release assertj-build-3.26.1
  • 8cf054d chore(deps): bump org.codehaus.mojo:versions-maven-plugin from 2.16.2 to 2.17...
  • 5e708b4 chore(deps-dev): bump org.apache.groovy:groovy from 4.0.21 to 4.0.22 (#3527)
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions