pf-wikis / bots

A repository containing and running the bots for pathfinderwiki.com
0 stars 0 forks source link

Bump the dependencies group with 10 updates #36

Closed dependabot[bot] closed 7 months ago

dependabot[bot] commented 7 months ago

Bumps the dependencies group with 10 updates:

Package From To
org.projectlombok:lombok 1.18.30 1.18.32
io.github.classgraph:classgraph 4.8.168 4.8.170
com.fasterxml.jackson.core:jackson-databind 2.16.2 2.17.0
com.fasterxml.jackson.dataformat:jackson-dataformat-yaml 2.16.2 2.17.0
com.fasterxml.jackson.datatype:jackson-datatype-guava 2.16.2 2.17.0
com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.16.2 2.17.0
commons-io:commons-io 2.15.1 2.16.0
org.apache.pdfbox:pdfbox 3.0.1 3.0.2
net.dv8tion:JDA 5.0.0-beta.21 5.0.0-beta.22
org.apache.maven.plugins:maven-assembly-plugin 3.7.0 3.7.1

Updates org.projectlombok:lombok from 1.18.30 to 1.18.32

Changelog

Sourced from org.projectlombok:lombok's changelog.

v1.18.32 (March 20th, 2024)

  • PLATFORM: Initial JDK22 support added.
  • PLAFTORM Added support for Eclipse 2024-03. [Issue #3620](projectlombok/lombok#3620).
  • PLATFORM: Added support for recent versions of eclipse (released Q4 2023 or later or so) which would cause failures in the eclipse logs such as java.lang.NoSuchMethodError: 'java.lang.StringBuffer org.eclipse.jdt…. [Issue #3564](projectlombok/lombok#3564).
  • FEATURE: @Locked has been introduced. Like @Synchronized but with java.util.concurrent.locks locks instead of the synchronized primitive. Thanks, Pim van der Loos for the PR! [Issue #3506](projectlombok/lombok#3506).
  • NECROMANCY: Inlining a generated getter in eclipse would result in eclipse incorrectly replacing calls with @Getter instead of the actual field's name. [Issue #562](projectlombok/lombok#562). This issue is almost old enough to drink. Points for dedication go to Rawi for fixing this one.
  • BUGFIX: When @SuperBuilder was used on a type with an annotated generic type, it would error wrong number of type arguments. [Issue #3592](projectlombok/lombok#3592).
  • BUGFIX: It was possible to create an infinite build loop using @ExtensionMethod. [Issue #3225](projectlombok/lombok#3225).
  • BUGFIX: Using @Getter(lazy=true) would fail if the expression contained a variable called value. [Issue #2917](projectlombok/lombok#2917).
  • BUGFIX: Many lombok features wouldn't work properly on records contained within an outer type unless you explicitly marked it static. [Issue #3497](projectlombok/lombok#3497) [Issue #3559](projectlombok/lombok#3559).
  • BUGFIX: Eclipse projects using the com.pro-crafting.tools:jasperreports-plugin will now compile.
  • BUGFIX: @FieldNameConstants now works when generated fields are involved. [Issue #3529](projectlombok/lombok#3529).
  • IMPROBABLE BREAKING CHANGE: For JSpecify, the package name changed from org.jspecify.nullness to org.jspecify.annotations, which might lead to a different null analysis. [Issue #3608](projectlombok/lombok#3608).
Commits
  • 2618848 [release] pre-release version bump
  • 5719fde Update changelog in preparation for the upcoming release
  • 1b713ad Add eclipse 2024-03 as test target
  • 521be03 Remove unused string literal code
  • 3b20b70 Support @​Delegate in eclipse 2024-03
  • 98cdf67 Javadoc support for eclipse 2024-03
  • e4824cb Fix Javadoc in Eclipse
  • c93400d [fixes #2917] Use $value instead of value in lazy getter
  • 23307eb [jdk22] Adds support for unnamed variables (JEP 456)
  • a54ec70 Document using jdk22 GA
  • Additional commits viewable in compare view


Updates io.github.classgraph:classgraph from 4.8.168 to 4.8.170

Release notes

Sourced from io.github.classgraph:classgraph's releases.

classgraph-4.8.170

Fixes Zip64 central directory length calculation. Thanks to @​cushon for the bug report, analysis, and fix! (#841, #842.)

classgraph-4.8.169

Fix an obscure regression introduced in the previous release (#795, thanks to @​mgroth0 for noticing it).

Commits
  • da9a1b4 [maven-release-plugin] prepare release classgraph-4.8.170
  • 8a14a6f Merge pull request #842 from cushon/zip64
  • 99a97f1 Merge pull request #839 from classgraph/dependabot/maven/org.apache.maven.plu...
  • a687197 Merge pull request #838 from classgraph/dependabot/maven/org.apache.maven.plu...
  • 1aab2d4 Move cenSize check after reading the zip64 eocd
  • 6469440 Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.0 to 3.2.2
  • a2ca4ed Bump org.apache.maven.plugins:maven-compiler-plugin
  • ad7ec17 [maven-release-plugin] prepare for next development iteration
  • 9892abc Merge pull request #836 from classgraph/dependabot/maven/org.apache.maven.plu...
  • a43a29e Merge pull request #835 from classgraph/dependabot/maven/org.eclipse.jdt-org....
  • Additional commits viewable in compare view


Updates com.fasterxml.jackson.core:jackson-databind from 2.16.2 to 2.17.0

Commits


Updates com.fasterxml.jackson.dataformat:jackson-dataformat-yaml from 2.16.2 to 2.17.0

Commits
  • 5947a45 [maven-release-plugin] prepare release jackson-dataformats-text-2.17.0
  • 66e39ff Prepare for 2.17.0 release
  • 00d45d2 Merge branch '2.16' into 2.17
  • 17b06ec Back to snapshot dep
  • 6924d24 [maven-release-plugin] prepare for next development iteration
  • 5f89d60 Add explicit overrides for JsonParser.getNumberTypeFP()
  • 1b8ca46 Test renaming
  • 0550039 Minor test refactoring
  • a743df1 YAML: consider starting # and ending : as quotable characters (#465)
  • c603bd9 Back to snapshot deps
  • Additional commits viewable in compare view


Updates com.fasterxml.jackson.datatype:jackson-datatype-guava from 2.16.2 to 2.17.0

Commits
  • a838b85 [maven-release-plugin] prepare release jackson-datatypes-collections-2.17.0
  • c74d74b Prepare for 2.17.0 release
  • be63098 Merge branch '2.16' into 2.17
  • 8337dee Back to snapshot dep
  • 8d0c1de [maven-release-plugin] prepare for next development iteration
  • 7f7cccd Back to snapshot dep
  • 93bd461 [maven-release-plugin] prepare for next development iteration
  • 3c0aca6 [maven-release-plugin] prepare release jackson-datatypes-collections-2.17.0-rc1
  • 71a385c Prepare for 2.17.0-rc1
  • 71ad345 Merge branch '2.16' into 2.17
  • Additional commits viewable in compare view


Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.16.2 to 2.17.0

Updates commons-io:commons-io from 2.15.1 to 2.16.0

Updates org.apache.pdfbox:pdfbox from 3.0.1 to 3.0.2

Updates net.dv8tion:JDA from 5.0.0-beta.21 to 5.0.0-beta.22

Release notes

Sourced from net.dv8tion:JDA's releases.

v5.0.0-beta.22 | Bulk ban, premium apps, bug fixes

Overview

This release adds some newer API features, like premium app subscriptions, bot banners, and bulk banning users.

Besides new features, this release also includes improved errors and bug fixes.

Premium App Subscriptions (#2583)

If your bot is eligible for monetization, you can now use JDA to handle entitlements in interactions to restrict features. With event.replyWithPremiumRequired(), you can upsell a premium subscription to a user:

b306d1ccc7205d2291f4535f912a790e

Read more about entitlements and premium app subscriptions in the Discord Developer Docs.

Bulk Ban (#2630)

You can now ban up to 200 users in one request using guild.ban(users, messageDeleteTimeframe).

This endpoint has a few quirks to keep in mind:

  • The BulkBanResponse includes failed users and banned users
  • If a user was already banned, they are in the failed users
  • If you don't have permissions to ban a user (higher role / owner), they also appear in failed users
  • The self user also appears in failed users
  • If all users "failed" you get an error response instead

New Features

Changes

Bug Fixes

Full Changelog: https://github.com/discord-jda/JDA/compare/v5.0.0-beta.21...v5.0.0-beta.22

Installation

Gradle

</tr></table> 

... (truncated)

Commits


Updates org.apache.maven.plugins:maven-assembly-plugin from 3.7.0 to 3.7.1

Release notes

Sourced from org.apache.maven.plugins:maven-assembly-plugin's releases.

3.7.1

Release Notes - Maven Assembly Plugin - Version 3.7.1

What's Changed

Full Changelog: https://github.com/apache/maven-assembly-plugin/compare/maven-assembly-plugin-3.7.0...maven-assembly-plugin-3.7.1

Commits
  • 0afbb3e [maven-release-plugin] prepare release maven-assembly-plugin-3.7.1
  • 74e858a [MASSEMBLY-1022] Unresolved artifacts should be not processed
  • cb56382 [MASSEMBLY-1025] Bump org.codehaus.plexus:plexus-archiver from 4.9.1 to 4.9.2...
  • 86bbed0 [MASSEMBLY-1024] Bump org.apache.commons:commons-compress from 1.25.0 to 1.26...
  • bdcc4d0 [MASSEMBLY-1023] Bump org.apache.maven.shared:maven-filtering from 3.3.1 to 3...
  • 74fe92e [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 7 months ago

Looks like these dependencies are updatable in another way, so this is no longer needed.