Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 1, 2024

Bumps the all-deps-minor-and-patch group with 3 updates: org.projectlombok:lombok, org.springframework:spring-test and org.owasp.dependencycheck.

Updates org.projectlombok:lombok from 1.18.30 to 1.18.32

Changelog

Sourced from org.projectlombok:lombok's changelog.

v1.18.32 (March 20th, 2024)

  • PLATFORM: Initial JDK22 support added.
  • PLAFTORM Added support for Eclipse 2024-03. [Issue #3620](projectlombok/lombok#3620).
  • PLATFORM: Added support for recent versions of eclipse (released Q4 2023 or later or so) which would cause failures in the eclipse logs such as java.lang.NoSuchMethodError: 'java.lang.StringBuffer org.eclipse.jdt…. [Issue #3564](projectlombok/lombok#3564).
  • FEATURE: @Locked has been introduced. Like @Synchronized but with java.util.concurrent.locks locks instead of the synchronized primitive. Thanks, Pim van der Loos for the PR! [Issue #3506](projectlombok/lombok#3506).
  • NECROMANCY: Inlining a generated getter in eclipse would result in eclipse incorrectly replacing calls with @Getter instead of the actual field's name. [Issue #562](projectlombok/lombok#562). This issue is almost old enough to drink. Points for dedication go to Rawi for fixing this one.
  • BUGFIX: When @SuperBuilder was used on a type with an annotated generic type, it would error wrong number of type arguments. [Issue #3592](projectlombok/lombok#3592).
  • BUGFIX: It was possible to create an infinite build loop using @ExtensionMethod. [Issue #3225](projectlombok/lombok#3225).
  • BUGFIX: Using @Getter(lazy=true) would fail if the expression contained a variable called value. [Issue #2917](projectlombok/lombok#2917).
  • BUGFIX: Many lombok features wouldn't work properly on records contained within an outer type unless you explicitly marked it static. [Issue #3497](projectlombok/lombok#3497) [Issue #3559](projectlombok/lombok#3559).
  • BUGFIX: Eclipse projects using the com.pro-crafting.tools:jasperreports-plugin will now compile.
  • BUGFIX: @FieldNameConstants now works when generated fields are involved. [Issue #3529](projectlombok/lombok#3529).
  • IMPROBABLE BREAKING CHANGE: For JSpecify, the package name changed from org.jspecify.nullness to org.jspecify.annotations, which might lead to a different null analysis. [Issue #3608](projectlombok/lombok#3608).
Commits
  • 2618848 [release] pre-release version bump
  • 5719fde Update changelog in preparation for the upcoming release
  • 1b713ad Add eclipse 2024-03 as test target
  • 521be03 Remove unused string literal code
  • 3b20b70 Support @​Delegate in eclipse 2024-03
  • 98cdf67 Javadoc support for eclipse 2024-03
  • e4824cb Fix Javadoc in Eclipse
  • c93400d [fixes #2917] Use $value instead of value in lazy getter
  • 23307eb [jdk22] Adds support for unnamed variables (JEP 456)
  • a54ec70 Document using jdk22 GA
  • Additional commits viewable in compare view

Updates org.springframework:spring-test from 6.1.4 to 6.1.5

Release notes

Sourced from org.springframework:spring-test's releases.

v6.1.5

⭐ New Features

  • Extract reusable method for URI validations #32440
  • Allow UriTemplate to be built with an empty template #32432
  • Optimize Coroutine invocations #32390
  • Improve exception message when Scheduled tasks that are using Virtual Threads fail on shutdown #32381
  • Add query parameters to MockMvc Kotlin DSL #32371
  • Optimize content type parsing in ServletServerHttpResponse #32361
  • Refine handling of disconnected client error in ExceptionHandlerExceptionResolver #32359
  • Refine \*HttpMessageConverter#getContentLength return value null safety #32325
  • Optimize HttpHeaders.getAcceptLanguageAsLocales #32318
  • SimpleAsyncTaskScheduler: consistently apply default error handling #32298
  • Use Spliterator of underlying collection in MutablePropertyValues / MutablePropertySources #32281

🐞 Bug Fixes

  • SpEL fails to compile expression indexing into boolean array #32400
  • WebClient Observations are missing error #32389
  • WebClient request sent twice instantly when using @Cacheable #32370
  • AopUtils.getMostSpecificMethod does not return original method for proxy-derived method anymore #32365
  • Fix ServletResponseHttpHeaders#get null handling #32362
  • Compiled SpEL expression fails if #root or #this is a non-public type #32356
  • Suspend handler methods fail on nullable value class parameters #32353
  • Better protect against concurrent error handling for async requests #32340
  • Performance degradation due to Kotlin value class checks #32334
  • With value referenced from property file in XML configuration, setter selection can be random in case of overloaded setter methods (e.g. on SimpleClientHttpRequestFactory) #32329
  • constructor-impl of Kotlin value class is not called #32324
  • ContentCachingResponseWrapper no longer honors Content-Type and Content-Length #32317
  • Hibernate native image support broken by HHH-17643 #32311
  • Revisit DatabaseMetadata#getProcedures to only apply fallback if original search yield more than one result #32295
  • Remove Observation.Context from WebClient request #32198

📔 Documentation

  • Refine "Redirecting to a resource" section code sample #32423
  • Javadoc of ReactorNettyClientRequestFactory#setExchangeTimeout methods have wrong default value #32419
  • Fix order of 2 sections in the Validation chapter of the reference manual #32408
  • Fix Javadoc #32403
  • Document that SpEL expressions using array construction cannot be compiled #32401
  • Improve documentation for @Sql execution phases regarding lifecycle #32343
  • Omit parameter names in REST Clients section of reference docs #32335
  • Different transaction name when using TransactionAspectSupport.currentTransactionStatus().transactionName #32310
  • Provide guidelines for using Kotlin properties with proxies (@RequestScope and similar use cases) #32287
  • Correct documentation for userDestinationPrefix in MessageBrokerRegistry #32272

🔨 Dependency Upgrades

  • Upgrade to Micrometer 1.12.4 #32431
  • Upgrade to Reactor 2023.0.4 #32420

... (truncated)

Commits
  • c04290e Release v6.1.5
  • 381f790 Extract reusable checkSchemeAndPort method
  • f5a3658 Upgrade to Protobuf 3.25.3, Woodstox 6.6.1, JsonPath 2.9, QDox 2.1
  • 54a6d89 Additional unit tests for operations on empty UriTemplate
  • 2922a82 Merge pull request #32432 from bsgrd
  • a34ceb4 Polish "Allow UriTemplate to be built with an empty template"
  • 1b25a15 Allow UriTemplate to be built with an empty template
  • 723c94e Polishing
  • e5a69dc Upgrade to Reactor 2023.0.4 and Micrometer 1.12.4
  • c2248c9 Update Javadoc in DefaultUserDestinationResolver
  • Additional commits viewable in compare view

Updates org.owasp.dependencycheck from 9.0.9 to 9.1.0

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-deps-minor-and-patch group with 3 updates: [org.projectlombok:lombok](https://github.com/projectlombok/lombok), [org.springframework:spring-test](https://github.com/spring-projects/spring-framework) and org.owasp.dependencycheck.


Updates `org.projectlombok:lombok` from 1.18.30 to 1.18.32
- [Changelog](https://github.com/projectlombok/lombok/blob/master/doc/changelog.markdown)
- [Commits](projectlombok/lombok@v1.18.30...v1.18.32)

Updates `org.springframework:spring-test` from 6.1.4 to 6.1.5
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.1.4...v6.1.5)

Updates `org.owasp.dependencycheck` from 9.0.9 to 9.1.0

---
updated-dependencies:
- dependency-name: org.projectlombok:lombok
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.springframework:spring-test
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps-minor-and-patch
- dependency-name: org.owasp.dependencycheck
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 1, 2024
@dependabot dependabot bot requested review from Jorich, pr11t and rammrain April 1, 2024 05:35
@sonarqubecloud
Copy link

sonarqubecloud bot commented Apr 1, 2024

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

Copy link
Member

@rammrain rammrain left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@dependabot merge

@dependabot dependabot bot merged commit ac5fdbb into master Apr 2, 2024
@dependabot dependabot bot deleted the dependabot/gradle/all-deps-minor-and-patch-92fd76e6f5 branch April 2, 2024 07:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant