moditect / layrry

A Runner and API for Layered Java Applications
Apache License 2.0
328 stars 33 forks source link

Bump rest-assured from 5.1.1 to 5.3.0 #208

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps rest-assured from 5.1.1 to 5.3.0.

Changelog

Sourced from rest-assured's changelog.

Changelog 5.3.0 (2022-11-18)

  • Added (much) improved support for CSRF tokens when sent as a header and not in a form
  • Enable the use of relaxedHTTPSValidation with two-way ssl (issue #1631) (thanks to Mathieu Amblard for pull request)
  • Lastest Spring Framework 6 is now supported again (thanks to Marcin Grzejszczak for pull request)
  • Removed content assignment from asPrettyString() (thanks to Bartłomiej Chabowski for pull request)
  • Allow contentType() to accept Spring MediaType in Spring MockMvc module (thanks to Hantsy Bai for pull request)
  • Upgraded kotlin from 1.7.10 to 1.7.20 in the kotlin module
  • Upgraded groovy from 4.0.1 to 4.0.6
  • Updated jackson from version 2.13.2 to 2.13.4

Changelog 5.2.1 (2022-11-18)

  • Lastest Spring Framework 6 is now supported again (thanks to Marcin Grzejszczak for pull request)

Changelog 5.2.0 (2022-09-09)

  • Improved FilterContext used in Filters by adding the method FilterContext#hasValue(name, object). This makes it easier to check if a value exists and is equal to the expect object.

  • Introducing a much improved CSRF (cross-site request forgery) support. For example: given(). csrf("/users"). formParm("firstName", "John"). formParm("lastName", "Doe"). when(). post("/users"). then(). statusCode(200);

    This will first make a GET request to /users (due to csrf("/users")) to get an HTML page that contains the CSRF token. Rest Assured will then automatically try to find the input field that contains the CSRF token and include in the POST to /users.

    Here's an example of what Rest Assured expects as a response for the GET request to /users:

... (truncated)

Commits
  • ebbedc7 [maven-release-plugin] prepare release rest-assured-5.3.0
  • 1e1f325 Updated jackson from version 2.13.2 to 2.13.4
  • 83fcc55 Removing @​ignore
  • 7bd9124 [ci skip] Preparing for release
  • fb926ec [ci skip] Updated changelog to reflect the latest changes
  • 00bc18b [ci skip] Updated changelog to reflect the latest changes
  • 481a55a [ci skip] Updated changelog to reflect the latest changes
  • afbf13b chore: add contentType to accept Spring MedieType (#1625)
  • 14ef2c6 Upgraded groovy from 4.0.1 to 4.0.6
  • da69e1b Upgraded kotlin from 1.7.10 to 1.7.20 in the kotlin module
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 1 year ago

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.