miracum / fhir-gateway

A thin layer between FHIR REST clients and resource processing pipelines.
Apache License 2.0
12 stars 7 forks source link

chore(deps): update all non-major dependencies #94

Closed renovate[bot] closed 10 months ago

renovate[bot] commented 10 months ago

Mend Renovate

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
gradle (source) minor 8.3 -> 8.4 age adoption passing confidence
io.micrometer:micrometer-core dependencies patch 1.11.4 -> 1.11.5 age adoption passing confidence
io.micrometer:micrometer-registry-prometheus dependencies patch 1.11.4 -> 1.11.5 age adoption passing confidence
ca.uhn.hapi.fhir:hapi-fhir-client-okhttp (source) dependencies patch 6.8.3 -> 6.8.5 age adoption passing confidence
ca.uhn.hapi.fhir:hapi-fhir-structures-r4 (source) dependencies patch 6.8.3 -> 6.8.5 age adoption passing confidence
ca.uhn.hapi.fhir:hapi-fhir-client (source) dependencies patch 6.8.3 -> 6.8.5 age adoption passing confidence
ca.uhn.hapi.fhir:hapi-fhir-base (source) dependencies patch 6.8.3 -> 6.8.5 age adoption passing confidence

Release Notes

gradle/gradle (gradle) ### [`v8.4`](https://togithub.com/gradle/gradle/releases/tag/v8.4.0): 8.4 [Compare Source](https://togithub.com/gradle/gradle/compare/v8.3.0...v8.4.0) The Gradle team is excited to announce Gradle 8.4. Amongst other improvements, this release addresses two security vulnerabilities: - [Incorrect permission assignment for symlinked files used in copy or archiving operations](https://togithub.com/gradle/gradle/security/advisories/GHSA-43r3-pqhv-f7h9) - [Possible local text file exfiltration by XML External entity injection](https://togithub.com/gradle/gradle/security/advisories/GHSA-mrff-q8qj-xvg8) [Read the Release Notes](https://docs.gradle.org/8.4/release-notes.html) We would like to thank the following community members for their contributions to this release of Gradle: [Ahmed Ehab](https://togithub.com/ahmedehabb), [Andrei Rybak](https://togithub.com/rybak), [Baptiste Decroix](https://togithub.com/bdecroix-spiria), [BjΓΆrn Kautler](https://togithub.com/Vampire), [Cesar de la Vega](https://togithub.com/vegaro), [Ganavi Jayaram](https://togithub.com/ganavijayaram), [Gaurav Padam](https://togithub.com/Gauravpadam), [hwanseok](https://togithub.com/hwanseok-dev), [J.T. McQuigg](https://togithub.com/JT122406), [Jakub Chrzanowski](https://togithub.com/hsz), [Jendrik Johannes](https://togithub.com/jjohannes), [kackey0-1](https://togithub.com/kackey0-1), [Konstantin Gribov](https://togithub.com/grossws), [Pratik Haldankar](https://togithub.com/pratik2315), [Qinglin](https://togithub.com/nodmp), [Sebastian Schuberth](https://togithub.com/sschuberth), [Thad House](https://togithub.com/ThadHouse), [valery1707](https://togithub.com/valery1707), [Vladimir Sitnikov](https://togithub.com/vlsi), [wuyangnju](https://togithub.com/wuyangnju), [Yanming Zhou](https://togithub.com/quaff), [Yanshun Li](https://togithub.com/Chaoba), [Yusuke Uehara](https://togithub.com/uskey512), [zeners](https://togithub.com/zeners) #### Upgrade instructions Switch your build to use Gradle 8.4 by updating your wrapper: ./gradlew wrapper --gradle-version=8.4 #### Reporting problems If you find a problem with this release, please file a bug on [GitHub Issues](https://togithub.com/gradle/gradle/issues) adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the [forum](https://discuss.gradle.org/c/help-discuss). We hope you will build happiness with Gradle, and we look forward to your feedback via [Twitter](https://twitter.com/gradle) or on [GitHub](https://togithub.com/gradle).
micrometer-metrics/micrometer (io.micrometer:micrometer-core) ### [`v1.11.5`](https://togithub.com/micrometer-metrics/micrometer/releases/tag/v1.11.5): 1.11.5 [Compare Source](https://togithub.com/micrometer-metrics/micrometer/compare/v1.11.4...v1.11.5) #### :lady_beetle: Bug Fixes - ObservationRegistry.NOOP is null [#​4096](https://togithub.com/micrometer-metrics/micrometer/issues/4096) - ConcurrentModificationException on Observation$Context.computeIfAbsent [#​3874](https://togithub.com/micrometer-metrics/micrometer/issues/3874) #### :hammer: Dependency Upgrades - Bump com.netflix.spectator:spectator-reg-atlas from 1.6.10 to 1.6.11 [#​4196](https://togithub.com/micrometer-metrics/micrometer/pull/4196) - Bump software.amazon.awssdk:cloudwatch from 2.20.161 to 2.20.162 [#​4191](https://togithub.com/micrometer-metrics/micrometer/pull/4191) - Bump com.amazonaws:aws-java-sdk-cloudwatch from 1.12.564 to 1.12.565 [#​4190](https://togithub.com/micrometer-metrics/micrometer/pull/4190) - Bump org.apache.felix:org.apache.felix.scr from 2.2.2 to 2.2.6 [#​4168](https://togithub.com/micrometer-metrics/micrometer/pull/4168) - Bump com.fasterxml.jackson.core:jackson-databind from 2.15.0 to 2.15.2 [#​4151](https://togithub.com/micrometer-metrics/micrometer/pull/4151) - Bump software.amazon.awssdk:cloudwatch from 2.20.143 to 2.20.161 [#​4149](https://togithub.com/micrometer-metrics/micrometer/pull/4149) - Bump org.apache.maven:maven-resolver-provider from 3.9.1 to 3.9.5 [#​4122](https://togithub.com/micrometer-metrics/micrometer/pull/4122) - Bump maven-resolver from 1.9.7 to 1.9.16 [#​4112](https://togithub.com/micrometer-metrics/micrometer/pull/4112) #### :heart: Contributors Thank you to all the contributors who worked on this release: [@​izeye](https://togithub.com/izeye) and [@​ttddyy](https://togithub.com/ttddyy)
hapifhir/hapi-fhir (ca.uhn.hapi.fhir:hapi-fhir-client-okhttp) ### [`v6.8.5`](https://togithub.com/hapifhir/hapi-fhir/releases/tag/v6.8.5) 6.8.5 ### [`v6.8.4`](https://togithub.com/hapifhir/hapi-fhir/releases/tag/v6.8.4) 6.8.4

Configuration

πŸ“… Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

β™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

πŸ‘» Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.



This PR has been generated by Mend Renovate. View repository job log here.

github-actions[bot] commented 10 months ago

πŸ¦™ MegaLinter status: βœ… SUCCESS

Descriptor Linter Files Fixed Errors Elapsed time
βœ… ACTION actionlint 4 0 0.12s
βœ… DOCKERFILE hadolint 2 0 1.38s
βœ… EDITORCONFIG editorconfig-checker 67 0 0.48s
βœ… GROOVY npm-groovy-lint 2 0 9.83s
βœ… JAVA checkstyle 18 0 4.81s
βœ… JSON eslint-plugin-jsonc 5 0 2.3s
βœ… JSON jsonlint 5 0 0.24s
βœ… JSON prettier 5 0 1.43s
βœ… JSON v8r 5 0 3.35s
βœ… MARKDOWN markdownlint 2 0 0.6s
βœ… PYTHON bandit 1 0 1.43s
βœ… PYTHON black 1 0 0.88s
βœ… PYTHON flake8 1 0 0.56s
βœ… PYTHON isort 1 0 0.28s
βœ… PYTHON mypy 1 0 5.36s
βœ… PYTHON ruff 1 0 0.04s
βœ… REPOSITORY checkov yes no 12.57s
βœ… REPOSITORY gitleaks yes no 0.55s
βœ… REPOSITORY git_diff yes no 0.01s
βœ… REPOSITORY grype yes no 11.02s
βœ… REPOSITORY kics yes no 50.09s
βœ… REPOSITORY secretlint yes no 0.8s
βœ… REPOSITORY syft yes no 0.4s
βœ… REPOSITORY trivy yes no 5.34s
βœ… REPOSITORY trivy-sbom yes no 1.12s
βœ… REPOSITORY trufflehog yes no 5.23s
βœ… SQL sql-lint 1 0 0.27s
βœ… XML xmllint 1 0 0.01s
βœ… YAML prettier 17 0 0.83s
βœ… YAML v8r 17 0 18.69s
βœ… YAML yamllint 17 0 0.31s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

_MegaLinter is graciously provided by OX Security_

miracum-bot commented 10 months ago

:tada: This PR is included in version 3.12.6 :tada:

The release is available on GitHub release

Your semantic-release bot :package::rocket: