Commit Graph

8676 Commits

Author SHA1 Message Date
dependabot[bot] 78ea6468bc
Bump armeria-grpc from 1.15.0 to 1.20.3 (#7331) 2022-11-28 14:18:30 -08:00
Trask Stalnaker a15402f2b9
Better dependabot configuration (#7298)
I noticed that the smoke test projects weren't getting picked up by
dependabot. It seems that dependabot's `directory` configuration doesn't
really mean recursive, it means find the gradle file in that directory,
and follow any includes from it.

I tested this on my fork (temporarily bumping the dependabot limit to
100) and it only created 14 new PRs, so not too bad...
2022-11-28 12:59:11 -08:00
Trask Stalnaker c336bf4cb1
Add test latest dep limit for struts2 (#7322) 2022-11-28 11:21:53 -08:00
Trask Stalnaker 0e4c66a428
Update images to Windows 2022 (#7300)
preliminary step for #7299
2022-11-27 09:50:08 -08:00
Trask Stalnaker 2ff372f77a
Add helper for reducing versions loaded by Intellij (#7297)
used this while looking into #7296, seems useful to keep
2022-11-26 17:39:37 -08:00
dependabot[bot] 53436fbe43
Bump spotless-plugin-gradle from 6.11.0 to 6.12.0 in /conventions (#7315)
Bumps [spotless-plugin-gradle](https://github.com/diffplug/spotless)
from 6.11.0 to 6.12.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a31bba3e5a"><code>a31bba3</code></a>
Published gradle/6.12.0</li>
<li><a
href="f2f8b08dd8"><code>f2f8b08</code></a>
Published lib/2.31.0</li>
<li><a
href="d7d7ecce6d"><code>d7d7ecc</code></a>
Fix publishing by bumping spotless-changelog to latest.</li>
<li><a
href="9ecec25cd0"><code>9ecec25</code></a>
Bump default <code>palantir-java-format</code> version to latest
<code>2.10</code> -&gt; <code>2.28</code> (<a
href="https://github-redirect.dependabot.com/diffplug/spotless/issues/1329">#1329</a>)</li>
<li><a
href="fd70d743f4"><code>fd70d74</code></a>
Fix CI</li>
<li><a
href="82e0aa2230"><code>82e0aa2</code></a>
Merge branch 'main' into
renovate/com.palantir.javaformat-palantir-java-forma...</li>
<li><a
href="7f73ad277b"><code>7f73ad2</code></a>
Merge branch 'main' into
renovate/com.palantir.javaformat-palantir-java-forma...</li>
<li><a
href="14c304453d"><code>14c3044</code></a>
fix(deps): update dependency org.cqfn.diktat:diktat-rules to v1.2.4.2
(<a
href="https://github-redirect.dependabot.com/diffplug/spotless/issues/1393">#1393</a>)</li>
<li><a
href="b047275f1c"><code>b047275</code></a>
Merge branch 'main' into renovate/ver_diktat</li>
<li><a
href="12c88cf0b6"><code>12c88cf</code></a>
fix(deps): update dependency org.scalameta:scalafmt-core_2.13 to v3.6.1
(<a
href="https://github-redirect.dependabot.com/diffplug/spotless/issues/1373">#1373</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/diffplug/spotless/compare/gradle/6.11.0...gradle/6.12.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.diffplug.spotless:spotless-plugin-gradle&package-manager=gradle&previous-version=6.11.0&new-version=6.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-26 12:20:35 +02:00
dependabot[bot] 9f44fc3ddf
Bump com.diffplug.spotless from 6.11.0 to 6.12.0 in /conventions (#7316)
Bumps com.diffplug.spotless from 6.11.0 to 6.12.0.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.diffplug.spotless&package-manager=gradle&previous-version=6.11.0&new-version=6.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-26 12:20:00 +02:00
dependabot[bot] b09c7058ea
Bump spotless-plugin-gradle from 6.11.0 to 6.12.0 in /examples/distro (#7317)
Bumps [spotless-plugin-gradle](https://github.com/diffplug/spotless)
from 6.11.0 to 6.12.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a31bba3e5a"><code>a31bba3</code></a>
Published gradle/6.12.0</li>
<li><a
href="f2f8b08dd8"><code>f2f8b08</code></a>
Published lib/2.31.0</li>
<li><a
href="d7d7ecce6d"><code>d7d7ecc</code></a>
Fix publishing by bumping spotless-changelog to latest.</li>
<li><a
href="9ecec25cd0"><code>9ecec25</code></a>
Bump default <code>palantir-java-format</code> version to latest
<code>2.10</code> -&gt; <code>2.28</code> (<a
href="https://github-redirect.dependabot.com/diffplug/spotless/issues/1329">#1329</a>)</li>
<li><a
href="fd70d743f4"><code>fd70d74</code></a>
Fix CI</li>
<li><a
href="82e0aa2230"><code>82e0aa2</code></a>
Merge branch 'main' into
renovate/com.palantir.javaformat-palantir-java-forma...</li>
<li><a
href="7f73ad277b"><code>7f73ad2</code></a>
Merge branch 'main' into
renovate/com.palantir.javaformat-palantir-java-forma...</li>
<li><a
href="14c304453d"><code>14c3044</code></a>
fix(deps): update dependency org.cqfn.diktat:diktat-rules to v1.2.4.2
(<a
href="https://github-redirect.dependabot.com/diffplug/spotless/issues/1393">#1393</a>)</li>
<li><a
href="b047275f1c"><code>b047275</code></a>
Merge branch 'main' into renovate/ver_diktat</li>
<li><a
href="12c88cf0b6"><code>12c88cf</code></a>
fix(deps): update dependency org.scalameta:scalafmt-core_2.13 to v3.6.1
(<a
href="https://github-redirect.dependabot.com/diffplug/spotless/issues/1373">#1373</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/diffplug/spotless/compare/gradle/6.11.0...gradle/6.12.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.diffplug.spotless:spotless-plugin-gradle&package-manager=gradle&previous-version=6.11.0&new-version=6.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-26 12:19:30 +02:00
dependabot[bot] b95996f266
Bump com.diffplug.spotless from 6.11.0 to 6.12.0 in /examples/extension (#7318)
Bumps com.diffplug.spotless from 6.11.0 to 6.12.0.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.diffplug.spotless&package-manager=gradle&previous-version=6.11.0&new-version=6.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-26 12:19:06 +02:00
Mateusz Rzeszutek 2b8f13830a
Limit spring boot version in grails latest dep tests (#7310)
Fixes #7309 
Fixes #7308
2022-11-25 15:14:09 +01:00
Mateusz Rzeszutek 7e2924c7cd
Add null check for the return value of `ReferenceQueue#remove()` (#7304) 2022-11-25 06:42:11 +01:00
Mateusz Rzeszutek 6ea1c2414a
Limit Spring Batch versions and exclude newly released 5.0 (#7305) 2022-11-24 14:08:12 +01:00
Peter Findeisen c4ceaaa8d9
Issue 7212 - Allow multiple YAML configuration files for JMX rules (#7284)
Co-authored-by: Trask Stalnaker <trask.stalnaker@gmail.com>
2022-11-24 11:20:08 +01:00
Trask Stalnaker 16272753cc
Refactor UrlParser (#7294)
I thought I was going to need this for #7293, but it seems like still a
good change, removes a bit of duplication across getHost and getPort,
and could be useful in the future if we want logic to grab both host and
port in a "single pass"
2022-11-24 10:19:19 +01:00
dependabot[bot] 01f313a136
Bump dockerJavaVersion from 3.2.13 to 3.2.14 in /smoke-tests (#7295)
Bumps `dockerJavaVersion` from 3.2.13 to 3.2.14.
Updates `docker-java-core` from 3.2.13 to 3.2.14
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker-java/docker-java/releases">docker-java-core's
releases</a>.</em></p>
<blockquote>
<h2>3.2.14</h2>
<h2>Changes</h2>
<ul>
<li>Add Imports for <code>DockerClientConfig</code> Documentation <a
href="https://github.com/aryeh-looker"><code>@​aryeh-looker</code></a>
(<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1966">#1966</a>)</li>
<li>Fix <a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1258">#1258</a>:
Support copyUIDGID option in CopyArchiveToContainerCmd <a
href="https://github.com/k-wall"><code>@​k-wall</code></a> (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1963">#1963</a>)</li>
<li>Bump jna from 5.8.0 to 5.12.1 <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1898">#1898</a>)</li>
<li>Handle network aliases without a custom network gracefully <a
href="https://github.com/REslim30"><code>@​REslim30</code></a> (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1942">#1942</a>)</li>
</ul>
<h2>📈 Enhancements</h2>
<ul>
<li>Add load async operation <a
href="https://github.com/eddumelendez"><code>@​eddumelendez</code></a>
(<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1982">#1982</a>)</li>
<li>Add support for <code>reference</code> query param in List Images <a
href="https://github.com/eddumelendez"><code>@​eddumelendez</code></a>
(<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1941">#1941</a>)</li>
<li>Add Automatic-Module-Name <a
href="https://github.com/eddumelendez"><code>@​eddumelendez</code></a>
(<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1962">#1962</a>)</li>
<li>Resolves <a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1949">#1949</a>
<a href="https://github.com/jmformenti"><code>@​jmformenti</code></a>
(<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1955">#1955</a>)</li>
<li>add missing param Init in ContainerSpec <a
href="https://github.com/ziminghua"><code>@​ziminghua</code></a> (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1927">#1927</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9b7adaeb0c"><code>9b7adae</code></a>
Add load async operation (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1982">#1982</a>)</li>
<li><a
href="f6f9d676d9"><code>f6f9d67</code></a>
Improve getting_started.md (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1966">#1966</a>)</li>
<li><a
href="d7db365f34"><code>d7db365</code></a>
Support copyUIDGID option in CopyArchiveToContainerCmd (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1963">#1963</a>)</li>
<li><a
href="3951333e35"><code>3951333</code></a>
Add support for <code>reference</code> query param in List Images (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1941">#1941</a>)</li>
<li><a
href="2c690f35a2"><code>2c690f3</code></a>
Add Automatic-Module-Name (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1962">#1962</a>)</li>
<li><a
href="ffb0920270"><code>ffb0920</code></a>
Add capability values (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1955">#1955</a>)</li>
<li><a
href="83f95f0ec8"><code>83f95f0</code></a>
Bump jna from 5.8.0 to 5.12.1 (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1898">#1898</a>)</li>
<li><a
href="3ea46f9a1d"><code>3ea46f9</code></a>
Add Init attribute in ContainerSpec (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1927">#1927</a>)</li>
<li><a
href="a961200d46"><code>a961200</code></a>
Handle network aliases without a custom network gracefully (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1942">#1942</a>)</li>
<li><a
href="8253a99982"><code>8253a99</code></a>
Stabilize tests</li>
<li>See full diff in <a
href="https://github.com/docker-java/docker-java/compare/3.2.13...3.2.14">compare
view</a></li>
</ul>
</details>
<br />

Updates `docker-java-transport-httpclient5` from 3.2.13 to 3.2.14
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker-java/docker-java/releases">docker-java-transport-httpclient5's
releases</a>.</em></p>
<blockquote>
<h2>3.2.14</h2>
<h2>Changes</h2>
<ul>
<li>Add Imports for <code>DockerClientConfig</code> Documentation <a
href="https://github.com/aryeh-looker"><code>@​aryeh-looker</code></a>
(<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1966">#1966</a>)</li>
<li>Fix <a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1258">#1258</a>:
Support copyUIDGID option in CopyArchiveToContainerCmd <a
href="https://github.com/k-wall"><code>@​k-wall</code></a> (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1963">#1963</a>)</li>
<li>Bump jna from 5.8.0 to 5.12.1 <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1898">#1898</a>)</li>
<li>Handle network aliases without a custom network gracefully <a
href="https://github.com/REslim30"><code>@​REslim30</code></a> (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1942">#1942</a>)</li>
</ul>
<h2>📈 Enhancements</h2>
<ul>
<li>Add load async operation <a
href="https://github.com/eddumelendez"><code>@​eddumelendez</code></a>
(<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1982">#1982</a>)</li>
<li>Add support for <code>reference</code> query param in List Images <a
href="https://github.com/eddumelendez"><code>@​eddumelendez</code></a>
(<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1941">#1941</a>)</li>
<li>Add Automatic-Module-Name <a
href="https://github.com/eddumelendez"><code>@​eddumelendez</code></a>
(<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1962">#1962</a>)</li>
<li>Resolves <a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1949">#1949</a>
<a href="https://github.com/jmformenti"><code>@​jmformenti</code></a>
(<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1955">#1955</a>)</li>
<li>add missing param Init in ContainerSpec <a
href="https://github.com/ziminghua"><code>@​ziminghua</code></a> (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1927">#1927</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9b7adaeb0c"><code>9b7adae</code></a>
Add load async operation (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1982">#1982</a>)</li>
<li><a
href="f6f9d676d9"><code>f6f9d67</code></a>
Improve getting_started.md (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1966">#1966</a>)</li>
<li><a
href="d7db365f34"><code>d7db365</code></a>
Support copyUIDGID option in CopyArchiveToContainerCmd (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1963">#1963</a>)</li>
<li><a
href="3951333e35"><code>3951333</code></a>
Add support for <code>reference</code> query param in List Images (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1941">#1941</a>)</li>
<li><a
href="2c690f35a2"><code>2c690f3</code></a>
Add Automatic-Module-Name (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1962">#1962</a>)</li>
<li><a
href="ffb0920270"><code>ffb0920</code></a>
Add capability values (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1955">#1955</a>)</li>
<li><a
href="83f95f0ec8"><code>83f95f0</code></a>
Bump jna from 5.8.0 to 5.12.1 (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1898">#1898</a>)</li>
<li><a
href="3ea46f9a1d"><code>3ea46f9</code></a>
Add Init attribute in ContainerSpec (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1927">#1927</a>)</li>
<li><a
href="a961200d46"><code>a961200</code></a>
Handle network aliases without a custom network gracefully (<a
href="https://github-redirect.dependabot.com/docker-java/docker-java/issues/1942">#1942</a>)</li>
<li><a
href="8253a99982"><code>8253a99</code></a>
Stabilize tests</li>
<li>See full diff in <a
href="https://github.com/docker-java/docker-java/compare/3.2.13...3.2.14">compare
view</a></li>
</ul>
</details>
<br />


You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-24 09:16:28 +00:00
Trask Stalnaker f9c2c80ef7
Avoid constructing URI (#7293)
Resolves #6568 (Reactor Netty optimization was already implemented in
#6600)
2022-11-24 10:14:10 +01:00
Lauri Tulmin 52cfafc44a
Clean WeakConcurrentMap from background thread (#6240)
Currently our `WeakConcurrentMap` is only cleaned of stale entries when
it is accessed. There is an option to clean from a background thread,
but this creates a separate thread for every map. This pr introduces a
single background thread that cleans all maps.
I removed the option to create a thread per map as we don't use it, if
there is interest I could attempt to find a way to add it back.

Co-authored-by: Trask Stalnaker <trask.stalnaker@gmail.com>
2022-11-23 09:24:51 -08:00
Aaron Ai 85b3644787
Remove redundant code in AbstractRocketMqClientTest (#7285) 2022-11-23 17:21:28 +01:00
dependabot[bot] ac82016fdd
Bump opentelemetry-aws-xray-propagator from 1.20.0-alpha to 1.20.1-alpha in /dependencyManagement (#7280) 2022-11-23 07:57:33 +00:00
Trask Stalnaker 88c79ee3f5
Temporarily limit latest dependency tests for spring-integration (#7278)
Created tracking issue for supporting version 6+: #7277

Resolves #7276
Resolves #7286
2022-11-22 20:55:26 -08:00
dependabot[bot] ec9f3df469
Bump jackson-bom from 2.14.0 to 2.14.1 in /dependencyManagement (#7279) 2022-11-23 00:25:35 +00:00
Trask Stalnaker 05471b053b
Webflux instrumentation fix (#7251)
When a webflux filter is added which throws an exception, the
instrumentation does not currently capture the `http.status_code`.

The fix is to move `WebClientTracingFilter` from the first to the last
filter in the chain, which I think(?) is the general strategy we've
taken for other client instrumentation, e.g. so that if a filter makes
another http call it won't be suppressed.

I don't love the test coverage I added, so let me know if you have any
better suggestions?

EDIT: btw, I did archaeology to confirm that behavior (adding to the
beginning of the chain) has been in place since the webflux
instrumentation was added originally
6f472a62a0 (diff-493ad89b5bde807c90387aa2bb67eb10d3bcef6b6a388bd31e11796a6d01ac38R36)
2022-11-22 15:09:22 -08:00
dependabot[bot] d8251d1fea
Bump jackson-databind from 2.14.0 to 2.14.1 in /examples/distro (#7282) 2022-11-22 14:43:31 -08:00
dependabot[bot] d30597be75
Bump jackson-databind from 2.14.0 to 2.14.1 in /examples/extension (#7281) 2022-11-22 14:43:10 -08:00
Mateusz Rzeszutek 95ec4a8c1f
HTTP semconv: filter out default peer/host ports (#7258)
After a loooong break, the next part of the HTTP semconv implementation:
filtering out default HTTP ports, client and server.

>  [5]: If not default (80 for http scheme, 443 for https).


https://github.com/open-telemetry/opentelemetry-specification/blob/main/specification/trace/semantic_conventions/http.md#http-client
2022-11-22 17:14:20 +00:00
OpenTelemetry Bot 5c5bde7853
Merge change log updates from release/v1.20.x (#7268)
Merge log updates from `release/v1.20.x`.

Co-authored-by: Trask Stalnaker <trask.stalnaker@gmail.com>
2022-11-22 16:36:37 +00:00
Mateusz Rzeszutek 82a3fe3001
Use otel.sdk.disabled property instead of the deprecated one (#7270) 2022-11-22 08:29:33 -08:00
Lauri Tulmin 910d177e6c
Rocketmq 5: set context for async callback (#7238)
Run callbacks added to the `CompletableFuture` returned from `sendAsync`
with the context that was used when `sendAsync` was called.
Add test for capturing message headers.
2022-11-22 08:25:59 -08:00
Lauri Tulmin ae49d4f642
Fix rabbitmq latest deps test (#7262)
Resolves #7269

Co-authored-by: Trask Stalnaker <trask.stalnaker@gmail.com>
2022-11-21 20:24:40 -08:00
jack-berg 94ba33e395
Use contrib AwsXrayPropagator (#7234)
Reflects move of `AwsXrayPropagator` to
[opentelemetry-java-contrib/aws-xray-propagator](https://github.com/open-telemetry/opentelemetry-java-contrib/tree/main/aws-xray-propagator).
2022-11-21 11:31:17 -08:00
Mateusz Rzeszutek 72cc791b39
Remove deprecated HTTP semconv code (#7259) 2022-11-21 11:30:40 -08:00
Vasi Vasireddy 27805615aa
Update the usage of set-output command in GH actions (#7260)
This PR updates the usage of set-output command in GH actions.

Reference :
https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/

CHANGELOG entry is not required
2022-11-21 11:29:57 -08:00
Trask Stalnaker f85728b751
Fix the boms (#7252)
the 1.20.1 instrumentation boms are busted, as they are missing versions
for their nested boms (sort of surprised maven central didn't reject
them), e.g.

```
<dependency>
<groupId>io.opentelemetry</groupId>
<artifactId>opentelemetry-bom</artifactId>
<type>pom</type>
<scope>import</scope>
</dependency>
```


https://repo.maven.apache.org/maven2/io/opentelemetry/instrumentation/opentelemetry-instrumentation-bom/1.20.1/opentelemetry-instrumentation-bom-1.20.1.pom

deserves another patch release
2022-11-20 20:21:54 -08:00
Trask Stalnaker d113ffeba5
Consolidate more dependabot updates (#7241) 2022-11-19 15:20:07 -08:00
dependabot[bot] dc6b45264c
Bump logback-classic from 1.4.4 to 1.4.5 in /examples/distro (#7248)
Bumps [logback-classic](https://github.com/qos-ch/logback) from 1.4.4 to
1.4.5.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="34a6efc534"><code>34a6efc</code></a>
preparfe release 1.4.5</li>
<li><a
href="0d3ac63114"><code>0d3ac63</code></a>
fix LOGBACK-1698, [Nested appenders are not allowed] warning using
SiftingApp...</li>
<li><a
href="a64b8d43b4"><code>a64b8d4</code></a>
make jakarta.servlet-api as both provided and optional</li>
<li><a
href="114b3ded2d"><code>114b3de</code></a>
bump slf4j version</li>
<li><a
href="1df66621e4"><code>1df6662</code></a>
fix LOGBACK-1706</li>
<li><a
href="ea165fb023"><code>ea165fb</code></a>
fix LOGBACK-1703</li>
<li><a
href="9e07bd075a"><code>9e07bd0</code></a>
fix LOGBACK-1703</li>
<li><a
href="a871e9f1b5"><code>a871e9f</code></a>
minor edits in README.md</li>
<li><a
href="7dc0ce5118"><code>7dc0ce5</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/qos-ch/logback/issues/605">#605</a>
from Zardoz89/patch-1</li>
<li><a
href="7130dfe3a4"><code>7130dfe</code></a>
README.md MUST inform about Java &amp; Jackarta EE support</li>
<li>Additional commits viewable in <a
href="https://github.com/qos-ch/logback/compare/v_1.4.4...v_1.4.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ch.qos.logback:logback-classic&package-manager=gradle&previous-version=1.4.4&new-version=1.4.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-19 17:36:29 +02:00
dependabot[bot] e13d1abab8
Bump logback-classic from 1.4.4 to 1.4.5 in /examples/extension (#7247)
Bumps [logback-classic](https://github.com/qos-ch/logback) from 1.4.4 to
1.4.5.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="34a6efc534"><code>34a6efc</code></a>
preparfe release 1.4.5</li>
<li><a
href="0d3ac63114"><code>0d3ac63</code></a>
fix LOGBACK-1698, [Nested appenders are not allowed] warning using
SiftingApp...</li>
<li><a
href="a64b8d43b4"><code>a64b8d4</code></a>
make jakarta.servlet-api as both provided and optional</li>
<li><a
href="114b3ded2d"><code>114b3de</code></a>
bump slf4j version</li>
<li><a
href="1df66621e4"><code>1df6662</code></a>
fix LOGBACK-1706</li>
<li><a
href="ea165fb023"><code>ea165fb</code></a>
fix LOGBACK-1703</li>
<li><a
href="9e07bd075a"><code>9e07bd0</code></a>
fix LOGBACK-1703</li>
<li><a
href="a871e9f1b5"><code>a871e9f</code></a>
minor edits in README.md</li>
<li><a
href="7dc0ce5118"><code>7dc0ce5</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/qos-ch/logback/issues/605">#605</a>
from Zardoz89/patch-1</li>
<li><a
href="7130dfe3a4"><code>7130dfe</code></a>
README.md MUST inform about Java &amp; Jackarta EE support</li>
<li>Additional commits viewable in <a
href="https://github.com/qos-ch/logback/compare/v_1.4.4...v_1.4.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ch.qos.logback:logback-classic&package-manager=gradle&previous-version=1.4.4&new-version=1.4.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-19 17:36:09 +02:00
dependabot[bot] d1058b81a9
Bump nullaway from 0.10.4 to 0.10.5 in /dependencyManagement (#7246)
Bumps [nullaway](https://github.com/uber/NullAway) from 0.10.4 to
0.10.5.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/uber/NullAway/blob/master/CHANGELOG.md">nullaway's
changelog</a>.</em></p>
<blockquote>
<h2>Version 0.10.5</h2>
<ul>
<li>Report more unboxing errors in a single compilation (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/686">#686</a>)</li>
<li>Remove AccessPath.getAccessPathForNodeNoMapGet (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/687">#687</a>)</li>
<li>NullAwayInfer/Annotator data serialization support [experimental]
<ul>
<li>Fix Serialization: Split field initialization region into smaller
regions (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/658">#658</a>)</li>
<li>Add serialization format version to fix serialization output (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/688">#688</a>)</li>
<li>Fix serialization field region computation bug fix (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/689">#689</a>)</li>
</ul>
</li>
<li>EXPERIMENTAL support for JSpecify's 0.3.0 annotations
<ul>
<li>[Jspecify] Update tests to JSpecify 0.3.0-alpha-1 (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/673">#673</a>)</li>
<li>[Jspecify] Add checks for proper JSpecify generic type
instantiations (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/680">#680</a>)</li>
<li>(Note: Annotation support for generics is not complete/useful just
yet)</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e499d237be"><code>e499d23</code></a>
Prepare for release 0.10.5.</li>
<li><a
href="dbf1506b85"><code>dbf1506</code></a>
Add checks for proper JSpecify generic type instantiations (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/680">#680</a>)</li>
<li><a
href="3da177ac5e"><code>3da177a</code></a>
Update to JSpecify 0.3.0-alpha-1 (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/673">#673</a>)</li>
<li><a
href="b8dde69731"><code>b8dde69</code></a>
Fix serialization field region computation bug fix (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/689">#689</a>)</li>
<li><a
href="dd75827aa7"><code>dd75827</code></a>
Add serialization format version to fix serialization output (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/688">#688</a>)</li>
<li><a
href="eb62d5711b"><code>eb62d57</code></a>
Fix Serialization: Split field initialization region into smaller
regions (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/658">#658</a>)</li>
<li><a
href="19bbb91535"><code>19bbb91</code></a>
Remove <code>AccessPath.getAccessPathForNodeNoMapGet</code> (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/687">#687</a>)</li>
<li><a
href="93d4e79164"><code>93d4e79</code></a>
Report more unboxing errors in a single compilation (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/686">#686</a>)</li>
<li><a
href="01e2c29f06"><code>01e2c29</code></a>
Prepare next development version.</li>
<li>See full diff in <a
href="https://github.com/uber/NullAway/compare/v0.10.4...v0.10.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.uber.nullaway:nullaway&package-manager=gradle&previous-version=0.10.4&new-version=0.10.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-19 17:27:37 +02:00
dependabot[bot] 6edcb4bd2e
Bump dependency-check-gradle from 7.3.0 to 7.3.2 in /conventions (#7245)
Bumps dependency-check-gradle from 7.3.0 to 7.3.2.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.owasp:dependency-check-gradle&package-manager=gradle&previous-version=7.3.0&new-version=7.3.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-19 17:26:31 +02:00
dependabot[bot] a146995cd4
Bump logback-classic from 1.3.4 to 1.3.5 in /dependencyManagement (#7244)
Bumps [logback-classic](https://github.com/qos-ch/logback) from 1.3.4 to
1.3.5.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="dd4a0a8de7"><code>dd4a0a8</code></a>
preparfe release 1.3.5</li>
<li><a
href="4313ecb74e"><code>4313ecb</code></a>
fix LOGBACK-1698, [Nested appenders are not allowed] warning using
SiftingApp...</li>
<li><a
href="f22b07ae7a"><code>f22b07a</code></a>
align with 1.4 ordering of optional directive</li>
<li><a
href="08348646eb"><code>0834864</code></a>
bump slf4j version</li>
<li><a
href="5769294367"><code>5769294</code></a>
fix LOGBACK-1706</li>
<li><a
href="d54ab44ff5"><code>d54ab44</code></a>
fix LOGBACK-1703</li>
<li><a
href="8a441b2c12"><code>8a441b2</code></a>
fix LOGBACK-1703</li>
<li><a
href="7461ebaa79"><code>7461eba</code></a>
fix LOGBACK-1699</li>
<li><a
href="8112c02466"><code>8112c02</code></a>
start work on 1.3.5-SNAPSHOT</li>
<li>See full diff in <a
href="https://github.com/qos-ch/logback/compare/v_1.3.4...v_1.3.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ch.qos.logback:logback-classic&package-manager=gradle&previous-version=1.3.4&new-version=1.3.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-19 17:26:07 +02:00
OpenTelemetry Bot 7cd2999639
Merge change log updates from release/v1.20.x (#7250) 2022-11-18 19:02:22 -08:00
Lauri Tulmin 4379cfbeec
Limit latest dep spring data version (#7237)
Spring data 3 depends on spring 6
2022-11-18 11:44:36 -08:00
Trask Stalnaker 61ed2d14db
Update SDK version (#7223)
Resolves #7221 
Resolves #7222
2022-11-18 18:13:39 +00:00
Trask Stalnaker 7ccf0bd655
Update doc PR now that annotations are stable (#7219)
Co-authored-by: Mateusz Rzeszutek <mrzeszutek@splunk.com>
2022-11-18 17:19:59 +00:00
dependabot[bot] 12f7871848
Bump byteBuddyVersion from 1.12.18 to 1.12.19 in /dependencyManagement (#7231)
Bumps `byteBuddyVersion` from 1.12.18 to 1.12.19.
Updates `byte-buddy` from 1.12.18 to 1.12.19
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/releases">byte-buddy's
releases</a>.</em></p>
<blockquote>
<h2>Byte Buddy 1.12.19</h2>
<ul>
<li>Avoid possible lock through circular class loading of
<code>TypeDescription</code> subtypes.</li>
<li>Avoid access error when using unsafe API on Java 17 with an active
security manager.</li>
<li>Close URL class loader used in Gradle plugin.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md">byte-buddy's
changelog</a>.</em></p>
<blockquote>
<h2>Byte Buddy release notes</h2>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c93425a1e9"><code>c93425a</code></a>
[maven-release-plugin] prepare release byte-buddy-1.12.19</li>
<li><a
href="b1f4e9b4ee"><code>b1f4e9b</code></a>
[release] New release</li>
<li><a
href="8d17e3a2a3"><code>8d17e3a</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/raphw/byte-buddy/issues/1359">#1359</a>
from eyalkoren/protection-domain</li>
<li><a
href="c57139e69c"><code>c57139e</code></a>
Using explicit ProtectionDomain in dynamically loaded classes</li>
<li><a
href="ff8be9a91b"><code>ff8be9a</code></a>
Attempt cloning protection domain from accessible object to avoid
security ma...</li>
<li><a
href="6fe45f76ef"><code>6fe45f7</code></a>
Make s in message optional.</li>
<li><a
href="9023501243"><code>9023501</code></a>
Fix scope of summary variable.</li>
<li><a
href="02091f13f4"><code>02091f1</code></a>
Update codeql-analysis.yml</li>
<li><a
href="628b6a90c5"><code>628b6a9</code></a>
Close class loader in Gradle plugin, if possible.</li>
<li><a
href="9a81856525"><code>9a81856</code></a>
Remove unused import.</li>
<li>Additional commits viewable in <a
href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.12.18...byte-buddy-1.12.19">compare
view</a></li>
</ul>
</details>
<br />

Updates `byte-buddy-dep` from 1.12.18 to 1.12.19
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/releases">byte-buddy-dep's
releases</a>.</em></p>
<blockquote>
<h2>Byte Buddy 1.12.19</h2>
<ul>
<li>Avoid possible lock through circular class loading of
<code>TypeDescription</code> subtypes.</li>
<li>Avoid access error when using unsafe API on Java 17 with an active
security manager.</li>
<li>Close URL class loader used in Gradle plugin.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md">byte-buddy-dep's
changelog</a>.</em></p>
<blockquote>
<h2>Byte Buddy release notes</h2>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c93425a1e9"><code>c93425a</code></a>
[maven-release-plugin] prepare release byte-buddy-1.12.19</li>
<li><a
href="b1f4e9b4ee"><code>b1f4e9b</code></a>
[release] New release</li>
<li><a
href="8d17e3a2a3"><code>8d17e3a</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/raphw/byte-buddy/issues/1359">#1359</a>
from eyalkoren/protection-domain</li>
<li><a
href="c57139e69c"><code>c57139e</code></a>
Using explicit ProtectionDomain in dynamically loaded classes</li>
<li><a
href="ff8be9a91b"><code>ff8be9a</code></a>
Attempt cloning protection domain from accessible object to avoid
security ma...</li>
<li><a
href="6fe45f76ef"><code>6fe45f7</code></a>
Make s in message optional.</li>
<li><a
href="9023501243"><code>9023501</code></a>
Fix scope of summary variable.</li>
<li><a
href="02091f13f4"><code>02091f1</code></a>
Update codeql-analysis.yml</li>
<li><a
href="628b6a90c5"><code>628b6a9</code></a>
Close class loader in Gradle plugin, if possible.</li>
<li><a
href="9a81856525"><code>9a81856</code></a>
Remove unused import.</li>
<li>Additional commits viewable in <a
href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.12.18...byte-buddy-1.12.19">compare
view</a></li>
</ul>
</details>
<br />

Updates `byte-buddy-agent` from 1.12.18 to 1.12.19
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/releases">byte-buddy-agent's
releases</a>.</em></p>
<blockquote>
<h2>Byte Buddy 1.12.19</h2>
<ul>
<li>Avoid possible lock through circular class loading of
<code>TypeDescription</code> subtypes.</li>
<li>Avoid access error when using unsafe API on Java 17 with an active
security manager.</li>
<li>Close URL class loader used in Gradle plugin.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md">byte-buddy-agent's
changelog</a>.</em></p>
<blockquote>
<h2>Byte Buddy release notes</h2>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c93425a1e9"><code>c93425a</code></a>
[maven-release-plugin] prepare release byte-buddy-1.12.19</li>
<li><a
href="b1f4e9b4ee"><code>b1f4e9b</code></a>
[release] New release</li>
<li><a
href="8d17e3a2a3"><code>8d17e3a</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/raphw/byte-buddy/issues/1359">#1359</a>
from eyalkoren/protection-domain</li>
<li><a
href="c57139e69c"><code>c57139e</code></a>
Using explicit ProtectionDomain in dynamically loaded classes</li>
<li><a
href="ff8be9a91b"><code>ff8be9a</code></a>
Attempt cloning protection domain from accessible object to avoid
security ma...</li>
<li><a
href="6fe45f76ef"><code>6fe45f7</code></a>
Make s in message optional.</li>
<li><a
href="9023501243"><code>9023501</code></a>
Fix scope of summary variable.</li>
<li><a
href="02091f13f4"><code>02091f1</code></a>
Update codeql-analysis.yml</li>
<li><a
href="628b6a90c5"><code>628b6a9</code></a>
Close class loader in Gradle plugin, if possible.</li>
<li><a
href="9a81856525"><code>9a81856</code></a>
Remove unused import.</li>
<li>Additional commits viewable in <a
href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.12.18...byte-buddy-1.12.19">compare
view</a></li>
</ul>
</details>
<br />

Updates `byte-buddy-gradle-plugin` from 1.12.18 to 1.12.19
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/releases">byte-buddy-gradle-plugin's
releases</a>.</em></p>
<blockquote>
<h2>Byte Buddy 1.12.19</h2>
<ul>
<li>Avoid possible lock through circular class loading of
<code>TypeDescription</code> subtypes.</li>
<li>Avoid access error when using unsafe API on Java 17 with an active
security manager.</li>
<li>Close URL class loader used in Gradle plugin.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md">byte-buddy-gradle-plugin's
changelog</a>.</em></p>
<blockquote>
<h2>Byte Buddy release notes</h2>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c93425a1e9"><code>c93425a</code></a>
[maven-release-plugin] prepare release byte-buddy-1.12.19</li>
<li><a
href="b1f4e9b4ee"><code>b1f4e9b</code></a>
[release] New release</li>
<li><a
href="8d17e3a2a3"><code>8d17e3a</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/raphw/byte-buddy/issues/1359">#1359</a>
from eyalkoren/protection-domain</li>
<li><a
href="c57139e69c"><code>c57139e</code></a>
Using explicit ProtectionDomain in dynamically loaded classes</li>
<li><a
href="ff8be9a91b"><code>ff8be9a</code></a>
Attempt cloning protection domain from accessible object to avoid
security ma...</li>
<li><a
href="6fe45f76ef"><code>6fe45f7</code></a>
Make s in message optional.</li>
<li><a
href="9023501243"><code>9023501</code></a>
Fix scope of summary variable.</li>
<li><a
href="02091f13f4"><code>02091f1</code></a>
Update codeql-analysis.yml</li>
<li><a
href="628b6a90c5"><code>628b6a9</code></a>
Close class loader in Gradle plugin, if possible.</li>
<li><a
href="9a81856525"><code>9a81856</code></a>
Remove unused import.</li>
<li>Additional commits viewable in <a
href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.12.18...byte-buddy-1.12.19">compare
view</a></li>
</ul>
</details>
<br />


You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Mateusz Rzeszutek <mrzeszutek@splunk.com>
2022-11-18 17:06:57 +01:00
dependabot[bot] d15d2446d1
Bump byte-buddy-gradle-plugin from 1.12.18 to 1.12.19 in /gradle-plugins (#7229)
Bumps byte-buddy-gradle-plugin from 1.12.18 to 1.12.19.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=net.bytebuddy:byte-buddy-gradle-plugin&package-manager=gradle&previous-version=1.12.18&new-version=1.12.19)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-18 17:06:41 +01:00
dependabot[bot] a7e93f2077
Bump logback-classic from 1.3.1 to 1.3.4 in /dependencyManagement (#7233)
Bumps [logback-classic](https://github.com/qos-ch/logback) from 1.3.1 to
1.3.4.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="01f1e455f3"><code>01f1e45</code></a>
prepare release 1.3.4</li>
<li><a
href="7bd25cf623"><code>7bd25cf</code></a>
fix LOGBACK-1695</li>
<li><a
href="d564918f51"><code>d564918</code></a>
add com.sun.mail as implementatoin</li>
<li><a
href="f4f1a23ce1"><code>f4f1a23</code></a>
test changes related to LOGBACK-1693 LOGBACK-1694</li>
<li><a
href="6c4fc98612"><code>6c4fc98</code></a>
cleanup dependency declarations</li>
<li><a
href="c3f992b17d"><code>c3f992b</code></a>
cleanup dependency declarations</li>
<li><a
href="aaabe89816"><code>aaabe89</code></a>
fix LOGBACK-1693</li>
<li><a
href="08daaf98a2"><code>08daaf9</code></a>
start work on 1.3.4-SNAPSHOT</li>
<li><a
href="daf07d203c"><code>daf07d2</code></a>
prepare release 1.3.3</li>
<li><a
href="2a451a88fa"><code>2a451a8</code></a>
fix LOGBACK-LOGBACK-1690</li>
<li>Additional commits viewable in <a
href="https://github.com/qos-ch/logback/compare/v_1.3.1...v_1.3.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ch.qos.logback:logback-classic&package-manager=gradle&previous-version=1.3.1&new-version=1.3.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-18 14:09:18 +01:00
dependabot[bot] 4cc0f465c7
Bump byte-buddy-dep from 1.12.18 to 1.12.19 in /conventions (#7230)
Bumps [byte-buddy-dep](https://github.com/raphw/byte-buddy) from 1.12.18
to 1.12.19.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/releases">byte-buddy-dep's
releases</a>.</em></p>
<blockquote>
<h2>Byte Buddy 1.12.19</h2>
<ul>
<li>Avoid possible lock through circular class loading of
<code>TypeDescription</code> subtypes.</li>
<li>Avoid access error when using unsafe API on Java 17 with an active
security manager.</li>
<li>Close URL class loader used in Gradle plugin.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md">byte-buddy-dep's
changelog</a>.</em></p>
<blockquote>
<h2>Byte Buddy release notes</h2>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c93425a1e9"><code>c93425a</code></a>
[maven-release-plugin] prepare release byte-buddy-1.12.19</li>
<li><a
href="b1f4e9b4ee"><code>b1f4e9b</code></a>
[release] New release</li>
<li><a
href="8d17e3a2a3"><code>8d17e3a</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/raphw/byte-buddy/issues/1359">#1359</a>
from eyalkoren/protection-domain</li>
<li><a
href="c57139e69c"><code>c57139e</code></a>
Using explicit ProtectionDomain in dynamically loaded classes</li>
<li><a
href="ff8be9a91b"><code>ff8be9a</code></a>
Attempt cloning protection domain from accessible object to avoid
security ma...</li>
<li><a
href="6fe45f76ef"><code>6fe45f7</code></a>
Make s in message optional.</li>
<li><a
href="9023501243"><code>9023501</code></a>
Fix scope of summary variable.</li>
<li><a
href="02091f13f4"><code>02091f1</code></a>
Update codeql-analysis.yml</li>
<li><a
href="628b6a90c5"><code>628b6a9</code></a>
Close class loader in Gradle plugin, if possible.</li>
<li><a
href="9a81856525"><code>9a81856</code></a>
Remove unused import.</li>
<li>Additional commits viewable in <a
href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.12.18...byte-buddy-1.12.19">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=net.bytebuddy:byte-buddy-dep&package-manager=gradle&previous-version=1.12.18&new-version=1.12.19)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-18 13:49:47 +01:00
dependabot[bot] a7c57fb1d4
Bump byte-buddy-dep from 1.12.18 to 1.12.19 in /examples/distro (#7228)
Bumps [byte-buddy-dep](https://github.com/raphw/byte-buddy) from 1.12.18
to 1.12.19.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/releases">byte-buddy-dep's
releases</a>.</em></p>
<blockquote>
<h2>Byte Buddy 1.12.19</h2>
<ul>
<li>Avoid possible lock through circular class loading of
<code>TypeDescription</code> subtypes.</li>
<li>Avoid access error when using unsafe API on Java 17 with an active
security manager.</li>
<li>Close URL class loader used in Gradle plugin.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md">byte-buddy-dep's
changelog</a>.</em></p>
<blockquote>
<h2>Byte Buddy release notes</h2>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c93425a1e9"><code>c93425a</code></a>
[maven-release-plugin] prepare release byte-buddy-1.12.19</li>
<li><a
href="b1f4e9b4ee"><code>b1f4e9b</code></a>
[release] New release</li>
<li><a
href="8d17e3a2a3"><code>8d17e3a</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/raphw/byte-buddy/issues/1359">#1359</a>
from eyalkoren/protection-domain</li>
<li><a
href="c57139e69c"><code>c57139e</code></a>
Using explicit ProtectionDomain in dynamically loaded classes</li>
<li><a
href="ff8be9a91b"><code>ff8be9a</code></a>
Attempt cloning protection domain from accessible object to avoid
security ma...</li>
<li><a
href="6fe45f76ef"><code>6fe45f7</code></a>
Make s in message optional.</li>
<li><a
href="9023501243"><code>9023501</code></a>
Fix scope of summary variable.</li>
<li><a
href="02091f13f4"><code>02091f1</code></a>
Update codeql-analysis.yml</li>
<li><a
href="628b6a90c5"><code>628b6a9</code></a>
Close class loader in Gradle plugin, if possible.</li>
<li><a
href="9a81856525"><code>9a81856</code></a>
Remove unused import.</li>
<li>Additional commits viewable in <a
href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.12.18...byte-buddy-1.12.19">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=net.bytebuddy:byte-buddy-dep&package-manager=gradle&previous-version=1.12.18&new-version=1.12.19)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-18 13:49:14 +01:00
dependabot[bot] 52c6065ef9
Bump byte-buddy-dep from 1.12.18 to 1.12.19 in /gradle-plugins (#7227)
Bumps [byte-buddy-dep](https://github.com/raphw/byte-buddy) from 1.12.18
to 1.12.19.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/releases">byte-buddy-dep's
releases</a>.</em></p>
<blockquote>
<h2>Byte Buddy 1.12.19</h2>
<ul>
<li>Avoid possible lock through circular class loading of
<code>TypeDescription</code> subtypes.</li>
<li>Avoid access error when using unsafe API on Java 17 with an active
security manager.</li>
<li>Close URL class loader used in Gradle plugin.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md">byte-buddy-dep's
changelog</a>.</em></p>
<blockquote>
<h2>Byte Buddy release notes</h2>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c93425a1e9"><code>c93425a</code></a>
[maven-release-plugin] prepare release byte-buddy-1.12.19</li>
<li><a
href="b1f4e9b4ee"><code>b1f4e9b</code></a>
[release] New release</li>
<li><a
href="8d17e3a2a3"><code>8d17e3a</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/raphw/byte-buddy/issues/1359">#1359</a>
from eyalkoren/protection-domain</li>
<li><a
href="c57139e69c"><code>c57139e</code></a>
Using explicit ProtectionDomain in dynamically loaded classes</li>
<li><a
href="ff8be9a91b"><code>ff8be9a</code></a>
Attempt cloning protection domain from accessible object to avoid
security ma...</li>
<li><a
href="6fe45f76ef"><code>6fe45f7</code></a>
Make s in message optional.</li>
<li><a
href="9023501243"><code>9023501</code></a>
Fix scope of summary variable.</li>
<li><a
href="02091f13f4"><code>02091f1</code></a>
Update codeql-analysis.yml</li>
<li><a
href="628b6a90c5"><code>628b6a9</code></a>
Close class loader in Gradle plugin, if possible.</li>
<li><a
href="9a81856525"><code>9a81856</code></a>
Remove unused import.</li>
<li>Additional commits viewable in <a
href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.12.18...byte-buddy-1.12.19">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=net.bytebuddy:byte-buddy-dep&package-manager=gradle&previous-version=1.12.18&new-version=1.12.19)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-18 13:48:36 +01:00
dependabot[bot] 93575ae58c
Bump byte-buddy-gradle-plugin from 1.12.18 to 1.12.19 in /conventions (#7226)
Bumps byte-buddy-gradle-plugin from 1.12.18 to 1.12.19.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=net.bytebuddy:byte-buddy-gradle-plugin&package-manager=gradle&previous-version=1.12.18&new-version=1.12.19)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-18 13:47:37 +01:00