navikt / gandalf

Facelift for https://github.com/navikt/security-token-service
MIT License
0 stars 0 forks source link

build(deps): bump com.unboundid:unboundid-ldapsdk from 6.0.11 to 7.0.0 #222

Closed dependabot[bot] closed 6 months ago

dependabot[bot] commented 7 months ago

Bumps com.unboundid:unboundid-ldapsdk from 6.0.11 to 7.0.0.

Changelog

Sourced from com.unboundid:unboundid-ldapsdk's changelog.

          <div align="right">

${TARGET="offline"} LDAP SDK Home Page ${TARGET="offline"} Product Information

          <h2>Release Notes</h2>
      &lt;h3&gt;Version 7.0.0&lt;/h3&gt;

      &lt;p&gt;
        The following changes were made between the 6.0.11 and 7.0.0 releases:
      &lt;/p&gt;

      &lt;ul&gt;
        &lt;li&gt;
          Updated the LDAP SDK to require Java SE 8 or later.  As of the 7.0.0 release,
          Java 7 is no longer supported.
          &lt;br&gt;&lt;br&gt;
        &lt;/li&gt;

        &lt;li&gt;
          Updated the LDAPConnectionPool behavior in the case that an attempt to check out
          a connection from the pool first encounters an existing connection that is deemed
          not valid by the configured health check.  Previously, it would close that
          connection as defunct and try to create a new connection to replace it, but if
          that attempt was successful, the newly created connection would be added to the
          end of the pool's set of potentially available connections, and it would continue
          iterating through the set of connections to try to find one that is valid.  Now,
          if the pool is able to successfully create a new connection to replace the
          existing defunct connection, it will immediately return that new connection
          without checking any of the other existing connections.  This should
          substantially improve performance in the case that the pool has several
          connections that are already established but have become invalid for some reason
          in a way that does not prevent successfully establishing new connections.
          &lt;br&gt;&lt;br&gt;
        &lt;/li&gt;

        &lt;li&gt;
          Added a compare-ldap-schemas command-line tool that can be used to identify
          differences between the schemas of two LDAP servers.
          &lt;br&gt;&lt;br&gt;
        &lt;/li&gt;

        &lt;li&gt;
          Added the ability to reuse automatically generated JAAS configuration files if
          possible when attempting a SASL GSSAPI bind.  Previously, if the caller didn't
          explicitly provide a JAAS config file, the LDAP SDK would generate one based on
          the provided bind request properties.  It would do this for every GSSAPI bind
          attempt, even if they all used the same properties, which means that it could

... (truncated)

Commits


Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.