Commit Graph

8136 Commits

Author SHA1 Message Date
Trask Stalnaker 6fdea85873
Remove unnecessary CI steps (#6742)
Since tests aren't run on assemble, these shouldn't be needed.
2022-09-25 13:12:10 +03:00
Trask Stalnaker 27f553e741
Fix testLatestDeps (#6745)
I'll open a tracking issue to fix for real.

Resolves #6737
Resolves #6738
2022-09-25 13:11:37 +03:00
Trask Stalnaker 5e2df2b81f
Run integration tests against Java 19 (#6690)
Co-authored-by: Lauri Tulmin <tulmin@gmail.com>
Co-authored-by: Lauri Tulmin <ltulmin@splunk.com>
2022-09-24 12:31:15 -07:00
Hao Tu 878dfc35af
add daemon attribute to process.runtime.jvm.threads.count (#6635)
Signed-off-by: HaoTu <haotu@alauda.io>

#6561  has closed

Signed-off-by: HaoTu <haotu@alauda.io>
2022-09-24 11:03:00 -07:00
Mateusz Rzeszutek 714ba9189e
Remove deprecated `http.host` and `http.server_name` attributes (#6709)
... and make sure the `TemporaryMetricsView` follows the current spec
2022-09-24 11:02:21 -07:00
Lauri Tulmin 49af5562e6
Remove snapshot repository (#6732)
I suspect it is not needed. Should avoid dependabot trying to use
snapshot dependencies like in
https://github.com/open-telemetry/opentelemetry-java-instrumentation/pull/6658
2022-09-23 19:56:00 -07:00
Trask Stalnaker 429ecfc713
Update error prone (#6646)
(note that change from BDDMockito is due to
https://github.com/google/error-prone/issues/3396)
2022-09-23 11:24:40 -07:00
Mateusz Rzeszutek 557c6d1290
Fix RocketMQ latestDepTest (#6731)
Fixes #6729 
Fixes #6730
2022-09-23 19:16:22 +03:00
yingziisme d26e456d1b
fix bugs with dubbo (#6640)
1. fix NullPointerException with dubbo getMetadata request

2. fix dubbo trace passing problem

the trace is third-demo -> consumer-demo -> provider-deme, but the
parent of provider-demo is third-demo.
wrong data like this
<img width="1994" alt="image"
src="https://user-images.githubusercontent.com/22729740/190597029-ea26569e-96b4-4e30-8ac3-46ead3871b92.png">

after fixed 
<img width="2015" alt="image"
src="https://user-images.githubusercontent.com/22729740/190596923-d65f8646-377d-47ab-9e65-6d75f1407ce0.png">

Co-authored-by: Mateusz Rzeszutek <mrzeszutek@splunk.com>
2022-09-23 15:48:48 +02:00
dependabot[bot] 1fb878875a
Bump mockito-inline from 4.7.0 to 4.8.0 in /dependencyManagement (#6727)
Bumps [mockito-inline](https://github.com/mockito/mockito) from 4.7.0 to
4.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/mockito/mockito/releases">mockito-inline's
releases</a>.</em></p>
<blockquote>
<h2>v4.8.0</h2>
<p><!-- raw HTML omitted --><!-- raw HTML omitted --><em>Changelog
generated by <a
href="https://github.com/shipkit/shipkit-changelog">Shipkit Changelog
Gradle Plugin</a></em><!-- raw HTML omitted --><!-- raw HTML omitted
--></p>
<h4>4.8.0</h4>
<ul>
<li>2022-09-07 - <a
href="https://github.com/mockito/mockito/compare/v4.7.0...v4.8.0">10
commit(s)</a> by Alex, James Baker, Johannes Spangenberg, Kurt Alfred
Kluever, Rafael Winterhalter, Thibault Helsmoortel, dependabot[bot]</li>
<li>GitHub Workflows security hardening [(<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2744">#2744</a>)](<a
href="https://github-redirect.dependabot.com/mockito/mockito/pull/2744">mockito/mockito#2744</a>)</li>
<li>Assign GlobalConfiguration initializer to unused variable [(<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2742">#2742</a>)](<a
href="https://github-redirect.dependabot.com/mockito/mockito/pull/2742">mockito/mockito#2742</a>)</li>
<li>Bump com.diffplug.spotless from 6.9.1 to 6.10.0 [(<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2738">#2738</a>)](<a
href="https://github-redirect.dependabot.com/mockito/mockito/pull/2738">mockito/mockito#2738</a>)</li>
<li>Drop varargs collector before invoking a user method. [(<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2736">#2736</a>)](<a
href="https://github-redirect.dependabot.com/mockito/mockito/pull/2736">mockito/mockito#2736</a>)</li>
<li>Bump versions.bytebuddy from 1.12.13 to 1.12.14 [(<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2734">#2734</a>)](<a
href="https://github-redirect.dependabot.com/mockito/mockito/pull/2734">mockito/mockito#2734</a>)</li>
<li>Remove useless thrown exception from constructor [(<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2732">#2732</a>)](<a
href="https://github-redirect.dependabot.com/mockito/mockito/pull/2732">mockito/mockito#2732</a>)</li>
<li>TypeSafeMatching no longer iterates over class methods inefficiently
[(<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2729">#2729</a>)](<a
href="https://github-redirect.dependabot.com/mockito/mockito/pull/2729">mockito/mockito#2729</a>)</li>
<li>Fixes <a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2720">#2720</a>:
Use StackWalker on Java 9+ to create Locations [(<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2723">#2723</a>)](<a
href="https://github-redirect.dependabot.com/mockito/mockito/pull/2723">mockito/mockito#2723</a>)</li>
<li>LocationImpl adds performance overheads due to instantiating a stack
trace [(<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2720">#2720</a>)](<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2720">mockito/mockito#2720</a>)</li>
<li>Fixes <a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2626">#2626</a>
: Introduce MockSettings.mockMaker [(<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2701">#2701</a>)](<a
href="https://github-redirect.dependabot.com/mockito/mockito/pull/2701">mockito/mockito#2701</a>)</li>
<li>Introduce option to disable inline-mock-maker for a specific
instance [(<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2626">#2626</a>)](<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2626">mockito/mockito#2626</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3e910ea990"><code>3e910ea</code></a>
Fixes <a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2626">#2626</a>
: Introduce MockSettings.mockMaker (<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2701">#2701</a>)</li>
<li><a
href="0753d48161"><code>0753d48</code></a>
Explicitly add permissions to GitHub actions (<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2744">#2744</a>)</li>
<li><a
href="530558ae3c"><code>530558a</code></a>
Assign GlobalConfiguration initializer to unused variable (<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2742">#2742</a>)</li>
<li><a
href="4b8042e24e"><code>4b8042e</code></a>
Bump com.diffplug.spotless from 6.9.1 to 6.10.0 (<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2738">#2738</a>)</li>
<li><a
href="9b93df72c9"><code>9b93df7</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2736">#2736</a>
from mockito/static-varargs-call</li>
<li><a
href="160e3daf44"><code>160e3da</code></a>
Drop varargs collector before invoking a user method.</li>
<li><a
href="e123c2cdf7"><code>e123c2c</code></a>
Bump versions.bytebuddy from 1.12.13 to 1.12.14 (<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2734">#2734</a>)</li>
<li><a
href="2ded10ec70"><code>2ded10e</code></a>
Remove useless thrown exception from constructor (<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2732">#2732</a>)</li>
<li><a
href="73a861f778"><code>73a861f</code></a>
Fixes <a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2720">#2720</a>:
Use StackWalker on Java 9+ to create Locations (<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2723">#2723</a>)</li>
<li><a
href="89698baaeb"><code>89698ba</code></a>
Optimize <code>TypeSafeMatching</code> iteration over class methods (<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2729">#2729</a>)</li>
<li>See full diff in <a
href="https://github.com/mockito/mockito/compare/v4.7.0...v4.8.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.mockito:mockito-inline&package-manager=gradle&previous-version=4.7.0&new-version=4.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-23 10:17:49 +02:00
dependabot[bot] 1f2d2f78a8
Bump spring-boot-dependencies from 2.7.3 to 2.7.4 in /dependencyManagement (#6711) 2022-09-22 20:59:31 -07:00
dependabot[bot] 973fe7d077
Bump mockito-junit-jupiter from 4.7.0 to 4.8.0 in /dependencyManagement (#6719) 2022-09-22 20:50:20 -07:00
dependabot[bot] 0659d189a2
Bump mockito-core from 4.7.0 to 4.8.0 in /dependencyManagement (#6720) 2022-09-22 16:50:02 -07:00
Trask Stalnaker 32d7febed5
Update repository settings for dependabot (#6715) 2022-09-22 16:03:36 -07:00
Trask Stalnaker 3371d93f51
Remove Java 18 and add Java 20 in smoke tests (#6703)
Need to follow-up after images are published from `main` in order to
update the tests themselves.
2022-09-22 09:56:02 -07:00
Jean Bisutti c42eac95fd
Add marker attribute for Logback (#6652) 2022-09-22 09:54:55 -07:00
Jean Bisutti 429f083cf7
Add marker attribute for Log4j 2 (#6680)
Co-authored-by: Mateusz Rzeszutek <mrzeszutek@splunk.com>
2022-09-22 09:54:37 -07:00
Trask Stalnaker e7dd21477d
Update bytebuddy core dependency, and make dependencies more dependabot friendly (#6704)
(probably need to revisit later what's a "core dependency" and what's
not, but doesn't seem to be any real difference other than organization)
2022-09-22 09:53:53 -07:00
Mateusz Rzeszutek e994f8f840
Add classLoaderMatcher() for the spring-boot-actuator-autoconfigure i… (#6695)
…nstrumentation

See #6636
2022-09-22 09:53:19 -07:00
Trask Stalnaker a6702bc192
Increase dependabot limit (#6706) 2022-09-22 09:52:27 -07:00
Trask Stalnaker d5e9e7d639
Disable dependabot rebasing (#6705)
Because our build takes a long time, and most of the time rebasing is
not required. We can always manually request `@dependabot rebase` if it
is needed due to conflicts.
2022-09-22 12:33:10 +03:00
dependabot[bot] 33a1694aef
Bump byte-buddy-gradle-plugin from 1.12.16 to 1.12.17 in /gradle-plugins (#6698)
Bumps [byte-buddy-gradle-plugin](https://github.com/raphw/byte-buddy)
from 1.12.16 to 1.12.17.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md">byte-buddy-gradle-plugin's
changelog</a>.</em></p>
<blockquote>
<h2>Byte Buddy release notes</h2>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="2a080a8df9"><code>2a080a8</code></a>
[maven-release-plugin] prepare release byte-buddy-1.12.17</li>
<li><a
href="ae17a5589d"><code>ae17a55</code></a>
[release] Release new version.</li>
<li><a
href="399c4b28be"><code>399c4b2</code></a>
[release] Release new version.</li>
<li><a
href="0ce7a40689"><code>0ce7a40</code></a>
[release] Release new version</li>
<li><a
href="0cd4c912e1"><code>0cd4c91</code></a>
Add test rule and property for better handling JNA if not available or
in nee...</li>
<li><a
href="9c03f22c2e"><code>9c03f22</code></a>
Fix entry point.</li>
<li><a
href="dc18b405d3"><code>dc18b40</code></a>
Allow for different patch modes when patching transformers.</li>
<li><a
href="21a0b2591d"><code>21a0b25</code></a>
Restrict servers that are allowed during release step.</li>
<li><a
href="24198970ea"><code>2419897</code></a>
Update release notes and internal Byte Buddy.</li>
<li><a
href="9c12e711a3"><code>9c12e71</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li>See full diff in <a
href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.12.16...byte-buddy-1.12.17">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=net.bytebuddy:byte-buddy-gradle-plugin&package-manager=gradle&previous-version=1.12.16&new-version=1.12.17)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-22 12:32:41 +03:00
dependabot[bot] 1f88304510
Bump byte-buddy-gradle-plugin from 1.12.16 to 1.12.17 in /conventions (#6702) 2022-09-21 19:53:58 -07:00
dependabot[bot] 05a1c9d984
Bump byte-buddy-dep from 1.12.16 to 1.12.17 in /gradle-plugins (#6699) 2022-09-21 18:04:29 -07:00
dependabot[bot] 05bf88e9b0
Bump jmh-gradle-plugin from 0.6.7 to 0.6.8 in /conventions (#6701) 2022-09-21 17:08:16 -07:00
dependabot[bot] cf27f00046
Bump nullaway from 0.10.1 to 0.10.2 in /dependencyManagement (#6700) 2022-09-21 16:44:14 -07:00
Mateusz Rzeszutek ff498261c3
Fix the order of configuration file application (#6697)
Fixes #6696
2022-09-21 14:30:40 -07:00
Trask Stalnaker a7ab764036
Update maintainers/approvers list (#6689)
Updating maintainers and approvers list to reflect active folks. (we
miss you, stop by meetings any time!)

cc @iNikem @pavolloffay
2022-09-21 10:14:39 -07:00
Trask Stalnaker 4379ccd95f
Fix CI (#6692)
CI on `main` is failing on publishing snapshot, because javadoc is
emitting a warning and we fail on warnings. See code comment for more
explanation.

I tried pointing to
`https://docs.oracle.com/en/java/javase/11/docs/api/`, but that gives a
different error:

> warning: The code being documented uses packages in the unnamed
module, but the packages defined in
https://docs.oracle.com/en/java/javase/11/docs/api/ are in named
modules.
2022-09-21 10:17:25 +02:00
Aaron Ai 527bf612f6
Update attribute key of rocketmq's message tag (#6677)
Fixes #6676
2022-09-20 21:44:38 -07:00
dependabot[bot] de63ac7c74
Bump junit-bom from 5.9.0 to 5.9.1 in /dependencyManagement (#6686) 2022-09-20 17:48:52 -07:00
jamesmartinpp 2cfaf2d7ee
Propagate client span context in doOnRequest (#6621)
Copying the changes from Mike W. This fixes the problem where the jaxrs
and http client request spans are siblings instead of parent/child.

@mateuszrzeszutek please review

Co-authored-by: Trask Stalnaker <trask.stalnaker@gmail.com>
2022-09-20 17:47:46 -07:00
dependabot[bot] ea2ad4c4ea
Bump spotless-plugin-gradle from 6.9.0 to 6.11.0 in /conventions (#6687) 2022-09-20 16:55:34 -07:00
dependabot[bot] 53c9126d7c
Bump junit-bom from 5.9.0 to 5.9.1 in /conventions (#6688)
Bumps [junit-bom](https://github.com/junit-team/junit5) from 5.9.0 to
5.9.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/junit-team/junit5/releases">junit-bom's
releases</a>.</em></p>
<blockquote>
<p>JUnit 5.9.1 = Platform 1.9.1 + Jupiter 5.9.1 + Vintage 5.9.1</p>
<p>See <a
href="http://junit.org/junit5/docs/5.9.1/release-notes/">Release
Notes</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="732a5400f8"><code>732a540</code></a>
Release 5.9.1</li>
<li><a
href="88bf48d545"><code>88bf48d</code></a>
Prepare release notes for 5.9.1</li>
<li><a
href="d75e34d20f"><code>d75e34d</code></a>
Update scope for 5.9.1</li>
<li><a
href="9823f7329a"><code>9823f73</code></a>
Link to all 5.9 milestone pages</li>
<li><a
href="76719bb085"><code>76719bb</code></a>
Increase timeout for GraalVM test</li>
<li><a
href="2a809848e5"><code>2a80984</code></a>
Install GraalVM for main CI build on Linux</li>
<li><a
href="79f47f51aa"><code>79f47f5</code></a>
Refactor OpenTestReportGeneratingListener to work in native images</li>
<li><a
href="7229385d5e"><code>7229385</code></a>
Add failing integration test for execution on GraalVM native image</li>
<li><a
href="343170f314"><code>343170f</code></a>
Fix running tests in documentation from IntelliJ IDEA</li>
<li><a
href="352d06b3b2"><code>352d06b</code></a>
Attempt to stabilize test on Windows</li>
<li>Additional commits viewable in <a
href="https://github.com/junit-team/junit5/compare/r5.9.0...r5.9.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.junit:junit-bom&package-manager=gradle&previous-version=5.9.0&new-version=5.9.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-20 15:29:58 -07:00
dependabot[bot] 2894b2528d
Bump junit-bom from 5.9.0 to 5.9.1 in /gradle-plugins (#6683)
Bumps [junit-bom](https://github.com/junit-team/junit5) from 5.9.0 to
5.9.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/junit-team/junit5/releases">junit-bom's
releases</a>.</em></p>
<blockquote>
<p>JUnit 5.9.1 = Platform 1.9.1 + Jupiter 5.9.1 + Vintage 5.9.1</p>
<p>See <a
href="http://junit.org/junit5/docs/5.9.1/release-notes/">Release
Notes</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="732a5400f8"><code>732a540</code></a>
Release 5.9.1</li>
<li><a
href="88bf48d545"><code>88bf48d</code></a>
Prepare release notes for 5.9.1</li>
<li><a
href="d75e34d20f"><code>d75e34d</code></a>
Update scope for 5.9.1</li>
<li><a
href="9823f7329a"><code>9823f73</code></a>
Link to all 5.9 milestone pages</li>
<li><a
href="76719bb085"><code>76719bb</code></a>
Increase timeout for GraalVM test</li>
<li><a
href="2a809848e5"><code>2a80984</code></a>
Install GraalVM for main CI build on Linux</li>
<li><a
href="79f47f51aa"><code>79f47f5</code></a>
Refactor OpenTestReportGeneratingListener to work in native images</li>
<li><a
href="7229385d5e"><code>7229385</code></a>
Add failing integration test for execution on GraalVM native image</li>
<li><a
href="343170f314"><code>343170f</code></a>
Fix running tests in documentation from IntelliJ IDEA</li>
<li><a
href="352d06b3b2"><code>352d06b</code></a>
Attempt to stabilize test on Windows</li>
<li>Additional commits viewable in <a
href="https://github.com/junit-team/junit5/compare/r5.9.0...r5.9.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.junit:junit-bom&package-manager=gradle&previous-version=5.9.0&new-version=5.9.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-20 15:29:46 -07:00
Trask Stalnaker 2d79f7903c
Branch protection rules for dependabot (#6674) 2022-09-20 08:39:07 -07:00
dependabot[bot] 96ac5776f5
Bump com.diffplug.spotless from 6.9.0 to 6.11.0 in /conventions (#6660) 2022-09-19 17:32:46 -07:00
Trask Stalnaker 521075652e
Remove duplication (#6673)
Remove @jack-berg from triagers since now also under approvers.

Also let Intellij to format (wrap) the markdown.
2022-09-19 16:54:02 -07:00
dependabot[bot] 5ac41536d1
Bump byte-buddy-gradle-plugin from 1.12.10 to 1.12.16 in /conventions (#6671)
Bumps byte-buddy-gradle-plugin from 1.12.10 to 1.12.16.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=net.bytebuddy:byte-buddy-gradle-plugin&package-manager=gradle&previous-version=1.12.10&new-version=1.12.16)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 16:53:44 -07:00
dependabot[bot] 5f9235bd8e
Bump gradle-animalsniffer-plugin from 1.5.4 to 1.6.0 in /conventions (#6672)
Bumps gradle-animalsniffer-plugin from 1.5.4 to 1.6.0.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ru.vyarus:gradle-animalsniffer-plugin&package-manager=gradle&previous-version=1.5.4&new-version=1.6.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 16:53:32 -07:00
dependabot[bot] 00d8270f7b
Bump opentelemetry-proto from 0.17.0-alpha to 0.19.0-alpha in /dependencyManagement (#6655)
Bumps
[opentelemetry-proto](https://github.com/open-telemetry/opentelemetry-proto-java)
from 0.17.0-alpha to 0.19.0-alpha.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-proto-java/releases">opentelemetry-proto's
releases</a>.</em></p>
<blockquote>
<h2>Release v0.19.0-alpha</h2>
<p>Java Bindings for <a
href="https://github.com/open-telemetry/opentelemetry-proto/releases/tag/v0.19.0">OTLP
v0.19.0</a></p>
<h2>Release v0.18.0-alpha</h2>
<p>Java Bindings for <a
href="https://github.com/open-telemetry/opentelemetry-proto/releases/tag/v0.18.0">OTLP
v0.18.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/open-telemetry/opentelemetry-proto-java/commits">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.opentelemetry.proto:opentelemetry-proto&package-manager=gradle&previous-version=0.17.0-alpha&new-version=0.19.0-alpha)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Trask Stalnaker <trask.stalnaker@gmail.com>
2022-09-19 16:27:55 -07:00
dependabot[bot] de93a21477
Bump objenesis from 3.2 to 3.3 in /dependencyManagement (#6667)
Bumps [objenesis](https://github.com/easymock/objenesis) from 3.2 to
3.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/easymock/objenesis/releases">objenesis's
releases</a>.</em></p>
<blockquote>
<h2>3.3</h2>
<ul>
<li>migrate from TravisCI to GitHub Actions (<a
href="https://github-redirect.dependabot.com/easymock/objenesis/issues/88">#88</a>)</li>
<li><code>org.objenesis:objenesis-test</code> missing in Maven Central
(<a
href="https://github-redirect.dependabot.com/easymock/objenesis/issues/85">#85</a>)</li>
<li>added instructions for running Android TCK for Windows users (<a
href="https://github-redirect.dependabot.com/easymock/objenesis/issues/84">#84</a>)</li>
<li>Copyright and Owner is missing in license (<a
href="https://github-redirect.dependabot.com/easymock/objenesis/issues/83">#83</a>)</li>
<li>add Dependabot (<a
href="https://github-redirect.dependabot.com/easymock/objenesis/issues/77">#77</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="15c04843c5"><code>15c0484</code></a>
[maven-release-plugin] prepare release 3.3</li>
<li><a
href="6e6b3a9a3d"><code>6e6b3a9</code></a>
Add 3.3 release notes</li>
<li><a
href="29292d86a8"><code>29292d8</code></a>
Missing $ in the command</li>
<li><a
href="9dd5e8f7ad"><code>9dd5e8f</code></a>
We should not skip objenesis-test deployment since it's a test
dependency for...</li>
<li><a
href="fe1751a44e"><code>fe1751a</code></a>
Add modernizer</li>
<li><a
href="00bb6ff780"><code>00bb6ff</code></a>
Bump maven-remote-resources-plugin from 1.7.0 to 3.0.0</li>
<li><a
href="5a3a07ee12"><code>5a3a07e</code></a>
Add up to version 18</li>
<li><a
href="76af6a8120"><code>76af6a8</code></a>
New version of IntelliJ</li>
<li><a
href="1c05d97ecc"><code>1c05d97</code></a>
Remove the android module to let it compile on Java 9+</li>
<li><a
href="22371940cf"><code>2237194</code></a>
Bump junit5.version from 5.8.2 to 5.9.0</li>
<li>Additional commits viewable in <a
href="https://github.com/easymock/objenesis/compare/3.2...3.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.objenesis:objenesis&package-manager=gradle&previous-version=3.2&new-version=3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 16:27:27 -07:00
dependabot[bot] 97f2572bfd
Bump assertj-core from 3.22.0 to 3.23.1 in /conventions (#6670)
Bumps [assertj-core](https://github.com/assertj/assertj-core) from
3.22.0 to 3.23.1.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0256688fcf"><code>0256688</code></a>
[maven-release-plugin] prepare release assertj-core-3.23.1</li>
<li><a
href="6529933700"><code>6529933</code></a>
Downgrade <code>junit-jupiter</code> from 5.9.0-M1 to 5.8.2</li>
<li><a
href="d9cd2da03a"><code>d9cd2da</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li><a
href="6f19754e57"><code>6f19754</code></a>
[maven-release-plugin] prepare release assertj-core-3.23.0</li>
<li><a
href="c592c18a59"><code>c592c18</code></a>
Expose <code>ComparisonStrategy::areEqual</code> in
<code>AbstractAssert</code> (<a
href="https://github-redirect.dependabot.com/assertj/assertj-core/issues/2633">#2633</a>)</li>
<li><a
href="69c66a9bb6"><code>69c66a9</code></a>
Bump maven-invoker-plugin from 3.2.2 to 3.3.0 (<a
href="https://github-redirect.dependabot.com/assertj/assertj-core/issues/2636">#2636</a>)</li>
<li><a
href="795f5278be"><code>795f527</code></a>
Fix test</li>
<li><a
href="b44460623b"><code>b444606</code></a>
Bump hibernate-core from 6.0.1.Final to 6.0.2.Final (<a
href="https://github-redirect.dependabot.com/assertj/assertj-core/issues/2626">#2626</a>)</li>
<li><a
href="793241125e"><code>7932411</code></a>
Fix typos in Javadoc of ObjectEnumerableAssert (<a
href="https://github-redirect.dependabot.com/assertj/assertj-core/issues/2624">#2624</a>)</li>
<li><a
href="b746e6aeb4"><code>b746e6a</code></a>
[mvn] Update maven wrapper to 3.1.1 (<a
href="https://github-redirect.dependabot.com/assertj/assertj-core/issues/2622">#2622</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/assertj/assertj-core/compare/assertj-core-3.22.0...assertj-core-3.23.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.assertj:assertj-core&package-manager=gradle&previous-version=3.22.0&new-version=3.23.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 16:02:00 -07:00
dependabot[bot] 86c5c4d588
Bump assertj-core from 3.22.0 to 3.23.1 in /gradle-plugins (#6653)
Bumps [assertj-core](https://github.com/assertj/assertj-core) from
3.22.0 to 3.23.1.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0256688fcf"><code>0256688</code></a>
[maven-release-plugin] prepare release assertj-core-3.23.1</li>
<li><a
href="6529933700"><code>6529933</code></a>
Downgrade <code>junit-jupiter</code> from 5.9.0-M1 to 5.8.2</li>
<li><a
href="d9cd2da03a"><code>d9cd2da</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li><a
href="6f19754e57"><code>6f19754</code></a>
[maven-release-plugin] prepare release assertj-core-3.23.0</li>
<li><a
href="c592c18a59"><code>c592c18</code></a>
Expose <code>ComparisonStrategy::areEqual</code> in
<code>AbstractAssert</code> (<a
href="https://github-redirect.dependabot.com/assertj/assertj-core/issues/2633">#2633</a>)</li>
<li><a
href="69c66a9bb6"><code>69c66a9</code></a>
Bump maven-invoker-plugin from 3.2.2 to 3.3.0 (<a
href="https://github-redirect.dependabot.com/assertj/assertj-core/issues/2636">#2636</a>)</li>
<li><a
href="795f5278be"><code>795f527</code></a>
Fix test</li>
<li><a
href="b44460623b"><code>b444606</code></a>
Bump hibernate-core from 6.0.1.Final to 6.0.2.Final (<a
href="https://github-redirect.dependabot.com/assertj/assertj-core/issues/2626">#2626</a>)</li>
<li><a
href="793241125e"><code>7932411</code></a>
Fix typos in Javadoc of ObjectEnumerableAssert (<a
href="https://github-redirect.dependabot.com/assertj/assertj-core/issues/2624">#2624</a>)</li>
<li><a
href="b746e6aeb4"><code>b746e6a</code></a>
[mvn] Update maven wrapper to 3.1.1 (<a
href="https://github-redirect.dependabot.com/assertj/assertj-core/issues/2622">#2622</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/assertj/assertj-core/compare/assertj-core-3.22.0...assertj-core-3.23.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.assertj:assertj-core&package-manager=gradle&previous-version=3.22.0&new-version=3.23.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 13:58:29 -07:00
dependabot[bot] 8018026808
Bump groovyVersion from 4.0.4 to 4.0.5 in /dependencyManagement (#6654)
Bumps `groovyVersion` from 4.0.4 to 4.0.5.
Updates `groovy-bom` from 4.0.4 to 4.0.5
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/apache/groovy/commits">compare view</a></li>
</ul>
</details>
<br />

Updates `groovy` from 4.0.4 to 4.0.5
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/apache/groovy/commits">compare view</a></li>
</ul>
</details>
<br />

Updates `groovy-json` from 4.0.4 to 4.0.5
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/apache/groovy/commits">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 13:58:10 -07:00
dependabot[bot] 9b10956ade
Bump japicmp-gradle-plugin from 0.4.0 to 0.4.1 in /conventions (#6656)
Bumps japicmp-gradle-plugin from 0.4.0 to 0.4.1.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=me.champeau.gradle:japicmp-gradle-plugin&package-manager=gradle&previous-version=0.4.0&new-version=0.4.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 13:57:42 -07:00
dependabot[bot] 42ecfbd931
Bump byte-buddy-gradle-plugin from 1.12.10 to 1.12.16 in /gradle-plugins (#6657)
Bumps byte-buddy-gradle-plugin from 1.12.10 to 1.12.16.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=net.bytebuddy:byte-buddy-gradle-plugin&package-manager=gradle&previous-version=1.12.10&new-version=1.12.16)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 13:56:33 -07:00
dependabot[bot] 9bb8da1b5d
Bump nullaway from 0.9.9 to 0.10.1 in /dependencyManagement (#6659)
Bumps [nullaway](https://github.com/uber/NullAway) from 0.9.9 to 0.10.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/uber/NullAway/blob/master/CHANGELOG.md">nullaway's
changelog</a>.</em></p>
<blockquote>
<h2>Version 0.10.1</h2>
<p>This is a bug-fixing release for a crash introduced in 0.10.1 on
type.class
(for primitive type = boolean/int/void/etc.).</p>
<ul>
<li>Fix crash when querying null-markedness of primitive.class
expressions (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/654">#654</a>)</li>
<li>Fix for querying for generated code w/ primitive.class expressions.
(<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/655">#655</a>)</li>
</ul>
<h2>Version 0.10.0</h2>
<ul>
<li>Switch parameter overriding handler to use Nullness[] (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/648">#648</a>)
[performance opt!]</li>
<li>EXPERIMENTAL support for JSpecify's 0.3.0 <a
href="https://github.com/NullMarked"><code>@​NullMarked</code></a> and
<a
href="https://github.com/NullUnmarked"><code>@​NullUnmarked</code></a>
semantics
<ul>
<li>[JSpecify] Support <a
href="https://github.com/NullMarked"><code>@​NullMarked</code></a> on
methods. (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/644">#644</a>)</li>
<li>[JSpecify] Support <a
href="https://github.com/NullUnmarked"><code>@​NullUnmarked</code></a>.
(<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/651">#651</a>)</li>
<li>Allow AcknowledgeRestrictiveAnnotations to work on fields (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/652">#652</a>)</li>
</ul>
</li>
<li>Dependency Updates:
<ul>
<li>Update to WALA 1.5.8 (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/650">#650</a>)</li>
</ul>
</li>
<li>Build / CI tooling for NullAway itself:
<ul>
<li>Update to Gradle 7.5.1 (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/647">#647</a>)</li>
<li>Add Gradle versions plugin and update some &quot;safe&quot;
dependencies (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/649">#649</a>)</li>
</ul>
</li>
</ul>
<h2>Version 0.9.10</h2>
<ul>
<li>Improved support for library models on annotated code:
<ul>
<li>Make library models override annotations by default. (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/636">#636</a>)</li>
<li>Generalize handler APIs for argument nullability on (un-)annotated
code (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/639">#639</a>)
<ul>
<li>[Follow-up] Optimizations for parameter nullness handler /
overriding (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/646">#646</a>)</li>
</ul>
</li>
<li>Generalize handler APIs for return nullability on (un-)annotated
code (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/641">#641</a>)</li>
</ul>
</li>
<li>Support for specific libraries/APIs:
<ul>
<li>Add library model for Guava's Closer.register (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/632">#632</a>)</li>
<li>Support for Map.computeIfAbsent(...) (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/640">#640</a>)</li>
</ul>
</li>
<li>NullAwayInfer/Annotator data serialization support [experimental]
<ul>
<li>Augment error serializarion info (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/643">#643</a>)</li>
</ul>
</li>
<li>Dependency Updates:
<ul>
<li>Update to Checker Framework 3.24.0 (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/631">#631</a>)</li>
</ul>
</li>
<li>Fix javadoc and CONTRIBUTING.md typos (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/642">#642</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e2d82b1e78"><code>e2d82b1</code></a>
Prepare for release 0.10.1.</li>
<li><a
href="3d09158395"><code>3d09158</code></a>
Fix for querying for generated code w/ .class expressions. (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/655">#655</a>)</li>
<li><a
href="de1a12bfd9"><code>de1a12b</code></a>
Fix crash when querying null-markedness of $primitive.class expressions.
(<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/654">#654</a>)</li>
<li><a
href="99fc67b8c5"><code>99fc67b</code></a>
Prepare next development version.</li>
<li><a
href="f5439589fc"><code>f543958</code></a>
Prepare for release 0.10.0.</li>
<li><a
href="8f97e058bd"><code>8f97e05</code></a>
Allow AcknowledgeRestrictiveAnnotations to work on fields (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/652">#652</a>)</li>
<li><a
href="2d96d1d78b"><code>2d96d1d</code></a>
[JSpecify] Support <a
href="https://github.com/NullUnmarked"><code>@​NullUnmarked</code></a>.
(<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/651">#651</a>)</li>
<li><a
href="a5f56d3686"><code>a5f56d3</code></a>
Add Gradle versions plugin and update some &quot;safe&quot; dependencies
(<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/649">#649</a>)</li>
<li><a
href="c0fc4a9088"><code>c0fc4a9</code></a>
Update to WALA 1.5.8 (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/650">#650</a>)</li>
<li><a
href="3f6e0a5780"><code>3f6e0a5</code></a>
[JSpecify] Support <a
href="https://github.com/NullMarked"><code>@​NullMarked</code></a> on
methods. (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/644">#644</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/uber/NullAway/compare/v0.9.9...v0.10.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.uber.nullaway:nullaway&package-manager=gradle&previous-version=0.9.9&new-version=0.10.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 13:55:47 -07:00
dependabot[bot] 778ee6b5e0
Bump byte-buddy-dep from 1.12.10 to 1.12.16 in /gradle-plugins (#6661)
Bumps [byte-buddy-dep](https://github.com/raphw/byte-buddy) from 1.12.10
to 1.12.16.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/releases">byte-buddy-dep's
releases</a>.</em></p>
<blockquote>
<h2>Byte Buddy 1.12.16</h2>
<ul>
<li>Fix Gradle release script to publish plugin.</li>
</ul>
<h2>Byte Buddy 1.12.15</h2>
<ul>
<li>Introduce ClassVisitorFactory which allows to translate to and from
class wrappers in a different ASM namespace.</li>
<li>Allow builders to change to ClassVisitors.</li>
<li>Add support for Android instrumentation from Gradle plugin.</li>
</ul>
<h2>Byte Buddy 1.12.14</h2>
<ul>
<li>Add <code>wrap</code> method to <code>DynamicType.Builder</code>
that allows for the representation of a dynamic type via a
<code>ClassVisitor</code>.</li>
<li>Add <code>ClassVisitorFactory</code> that allows to translate
between Byte Buddy's, the original, or other shaded representations of
ASM.</li>
<li>Fix visibility check for types in the default package.</li>
<li>Return correct value for types in the default package.</li>
</ul>
<h2>Byte Buddy 1.12.13</h2>
<ul>
<li>Avoid duplicate application of Byte Buddy Maven plugin.</li>
<li>Allow for class path discovery of <code>Plugin</code>s when using
Maven.</li>
<li>Fix build cache when using Byte Buddy Gradle plugin.</li>
<li>Allow <code>Plugin</code>s to define new types prior to
transformation.</li>
</ul>
<h2>Byte Buddy 1.12.12</h2>
<ul>
<li>Use correct annotation in Byte Buddy Gradle plugin.</li>
<li>Correctly resolve generified anonymous/local types that are declared
within a method.</li>
</ul>
<h2>Byte Buddy 1.12.11</h2>
<ul>
<li>Remove use of thread-local to guarantee Loom compatibility.</li>
<li>Allow usage of byte-buddy-parent as BOM for imports.</li>
<li>Add convenience for Maven to disable type validation on entry
point.</li>
<li>Allow Gradle plugin to consume pluginName property and discoverySet
to only load plugins in the plugin class loader.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md">byte-buddy-dep's
changelog</a>.</em></p>
<blockquote>
<h3>22. August 2022: version 1.12.16</h3>
<ul>
<li>Fix Gradle release script to publish plugin.</li>
</ul>
<h3>22. August 2022: version 1.12.15</h3>
<ul>
<li>Introduce <code>ClassVisitorFactory</code> which allows to translate
to and from class wrappers in a different ASM namespace.</li>
<li>Allow builders to change to <code>ClassVisitors</code>.</li>
<li>Add support for Android instrumentation from Gradle plugin.</li>
</ul>
<h3>22. August 2022: version 1.12.14</h3>
<ul>
<li>Add <code>wrap</code> method to <code>DynamicType.Builder</code>
that allows for the representation of a dynamic type via a
<code>ClassVisitor</code>.</li>
<li>Add <code>ClassVisitorFactory</code> that allows to translate
between Byte Buddy's, the original, or other shaded representations of
ASM.</li>
<li>Fix visibility check for types in the default package.</li>
<li>Return correct value for types in the default package.</li>
</ul>
<h3>1. August 2022: version 1.12.13</h3>
<ul>
<li>Avoid duplicate application of Byte Buddy Maven plugin.</li>
<li>Allow for class path discovery of <code>Plugin</code>s when using
Maven.</li>
<li>Fix build cache when using Byte Buddy Gradle plugin.</li>
<li>Allow <code>Plugin</code>s to define new types prior to
transformation.</li>
</ul>
<h3>25. June 2022: version 1.12.12</h3>
<ul>
<li>Use correct annotation in Byte Buddy Gradle plugin.</li>
<li>Correctly resolve generified anonymous/local types that are declared
within a method.</li>
</ul>
<h3>22. June 2022: version 1.12.11</h3>
<ul>
<li>Remove use of thread-local to guarantee Loom compatibility.</li>
<li>Allow usage of <em>byte-buddy-parent</em> as BOM for imports.</li>
<li>Add convenience for Maven to disable type validation on entry
point.</li>
<li>Allow Gradle plugin to consume <em>pluginName</em> property and
<em>discoverySet</em> to only load plugins in the plugin class
loader.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="d6b51d39b9"><code>d6b51d3</code></a>
[maven-release-plugin] prepare release byte-buddy-1.12.16</li>
<li><a
href="a0a1d5ca4d"><code>a0a1d5c</code></a>
[release] Remove unused dependencies.</li>
<li><a
href="94a2fc3542"><code>94a2fc3</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li><a
href="9c44201282"><code>9c44201</code></a>
[maven-release-plugin] prepare release byte-buddy-1.12.15</li>
<li><a
href="7e749c54f4"><code>7e749c5</code></a>
[release] Improve readme and trigger new release.</li>
<li><a
href="09beea98d2"><code>09beea9</code></a>
Add missing semicolon.</li>
<li><a
href="ac15bfc205"><code>ac15bfc</code></a>
Add missing javadoc.</li>
<li><a
href="583251b5cf"><code>583251b</code></a>
Remove obsolete class.</li>
<li><a
href="94d7602dec"><code>94d7602</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/raphw/byte-buddy/issues/1317">#1317</a>
from LikeTheSalad/master</li>
<li><a
href="e48c26b358"><code>e48c26b</code></a>
Creating parent dir from parent file</li>
<li>Additional commits viewable in <a
href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.12.10...byte-buddy-1.12.16">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=net.bytebuddy:byte-buddy-dep&package-manager=gradle&previous-version=1.12.10&new-version=1.12.16)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 13:55:07 -07:00
dependabot[bot] deed1ed1cf
Bump jmh-gradle-plugin from 0.6.6 to 0.6.7 in /conventions (#6662)
Bumps jmh-gradle-plugin from 0.6.6 to 0.6.7.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=me.champeau.jmh:jmh-gradle-plugin&package-manager=gradle&previous-version=0.6.6&new-version=0.6.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 13:54:55 -07:00