Commit Graph

127 Commits

Author SHA1 Message Date
dependabot[bot] b7a610e88d
Bump junit-pioneer from 1.9.0 to 1.9.1 (#7348) 2022-11-30 22:46:50 +00:00
Trask Stalnaker 238042afca
Remove scala from dependency management (#7296)
Will close #7216 after this is merged and that PR is rebased.

I tested and it does bring a few more scala versions into Intellij
without this, but scala is an odd case.
2022-11-29 07:55:35 -08:00
dependabot[bot] 011bc84dab
Bump slf4jVersion from 2.0.4 to 2.0.5 (#7325) 2022-11-29 00:47:33 +00:00
dependabot[bot] ac82016fdd
Bump opentelemetry-aws-xray-propagator from 1.20.0-alpha to 1.20.1-alpha in /dependencyManagement (#7280) 2022-11-23 07:57:33 +00:00
dependabot[bot] ec9f3df469
Bump jackson-bom from 2.14.0 to 2.14.1 in /dependencyManagement (#7279) 2022-11-23 00:25:35 +00:00
jack-berg 94ba33e395
Use contrib AwsXrayPropagator (#7234)
Reflects move of `AwsXrayPropagator` to
[opentelemetry-java-contrib/aws-xray-propagator](https://github.com/open-telemetry/opentelemetry-java-contrib/tree/main/aws-xray-propagator).
2022-11-21 11:31:17 -08:00
dependabot[bot] d1058b81a9
Bump nullaway from 0.10.4 to 0.10.5 in /dependencyManagement (#7246)
Bumps [nullaway](https://github.com/uber/NullAway) from 0.10.4 to
0.10.5.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/uber/NullAway/blob/master/CHANGELOG.md">nullaway's
changelog</a>.</em></p>
<blockquote>
<h2>Version 0.10.5</h2>
<ul>
<li>Report more unboxing errors in a single compilation (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/686">#686</a>)</li>
<li>Remove AccessPath.getAccessPathForNodeNoMapGet (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/687">#687</a>)</li>
<li>NullAwayInfer/Annotator data serialization support [experimental]
<ul>
<li>Fix Serialization: Split field initialization region into smaller
regions (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/658">#658</a>)</li>
<li>Add serialization format version to fix serialization output (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/688">#688</a>)</li>
<li>Fix serialization field region computation bug fix (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/689">#689</a>)</li>
</ul>
</li>
<li>EXPERIMENTAL support for JSpecify's 0.3.0 annotations
<ul>
<li>[Jspecify] Update tests to JSpecify 0.3.0-alpha-1 (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/673">#673</a>)</li>
<li>[Jspecify] Add checks for proper JSpecify generic type
instantiations (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/680">#680</a>)</li>
<li>(Note: Annotation support for generics is not complete/useful just
yet)</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e499d237be"><code>e499d23</code></a>
Prepare for release 0.10.5.</li>
<li><a
href="dbf1506b85"><code>dbf1506</code></a>
Add checks for proper JSpecify generic type instantiations (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/680">#680</a>)</li>
<li><a
href="3da177ac5e"><code>3da177a</code></a>
Update to JSpecify 0.3.0-alpha-1 (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/673">#673</a>)</li>
<li><a
href="b8dde69731"><code>b8dde69</code></a>
Fix serialization field region computation bug fix (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/689">#689</a>)</li>
<li><a
href="dd75827aa7"><code>dd75827</code></a>
Add serialization format version to fix serialization output (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/688">#688</a>)</li>
<li><a
href="eb62d5711b"><code>eb62d57</code></a>
Fix Serialization: Split field initialization region into smaller
regions (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/658">#658</a>)</li>
<li><a
href="19bbb91535"><code>19bbb91</code></a>
Remove <code>AccessPath.getAccessPathForNodeNoMapGet</code> (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/687">#687</a>)</li>
<li><a
href="93d4e79164"><code>93d4e79</code></a>
Report more unboxing errors in a single compilation (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/686">#686</a>)</li>
<li><a
href="01e2c29f06"><code>01e2c29</code></a>
Prepare next development version.</li>
<li>See full diff in <a
href="https://github.com/uber/NullAway/compare/v0.10.4...v0.10.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.uber.nullaway:nullaway&package-manager=gradle&previous-version=0.10.4&new-version=0.10.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-19 17:27:37 +02:00
dependabot[bot] a146995cd4
Bump logback-classic from 1.3.4 to 1.3.5 in /dependencyManagement (#7244)
Bumps [logback-classic](https://github.com/qos-ch/logback) from 1.3.4 to
1.3.5.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="dd4a0a8de7"><code>dd4a0a8</code></a>
preparfe release 1.3.5</li>
<li><a
href="4313ecb74e"><code>4313ecb</code></a>
fix LOGBACK-1698, [Nested appenders are not allowed] warning using
SiftingApp...</li>
<li><a
href="f22b07ae7a"><code>f22b07a</code></a>
align with 1.4 ordering of optional directive</li>
<li><a
href="08348646eb"><code>0834864</code></a>
bump slf4j version</li>
<li><a
href="5769294367"><code>5769294</code></a>
fix LOGBACK-1706</li>
<li><a
href="d54ab44ff5"><code>d54ab44</code></a>
fix LOGBACK-1703</li>
<li><a
href="8a441b2c12"><code>8a441b2</code></a>
fix LOGBACK-1703</li>
<li><a
href="7461ebaa79"><code>7461eba</code></a>
fix LOGBACK-1699</li>
<li><a
href="8112c02466"><code>8112c02</code></a>
start work on 1.3.5-SNAPSHOT</li>
<li>See full diff in <a
href="https://github.com/qos-ch/logback/compare/v_1.3.4...v_1.3.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ch.qos.logback:logback-classic&package-manager=gradle&previous-version=1.3.4&new-version=1.3.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-19 17:26:07 +02:00
Trask Stalnaker 61ed2d14db
Update SDK version (#7223)
Resolves #7221 
Resolves #7222
2022-11-18 18:13:39 +00:00
dependabot[bot] 12f7871848
Bump byteBuddyVersion from 1.12.18 to 1.12.19 in /dependencyManagement (#7231)
Bumps `byteBuddyVersion` from 1.12.18 to 1.12.19.
Updates `byte-buddy` from 1.12.18 to 1.12.19
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/releases">byte-buddy's
releases</a>.</em></p>
<blockquote>
<h2>Byte Buddy 1.12.19</h2>
<ul>
<li>Avoid possible lock through circular class loading of
<code>TypeDescription</code> subtypes.</li>
<li>Avoid access error when using unsafe API on Java 17 with an active
security manager.</li>
<li>Close URL class loader used in Gradle plugin.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md">byte-buddy's
changelog</a>.</em></p>
<blockquote>
<h2>Byte Buddy release notes</h2>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c93425a1e9"><code>c93425a</code></a>
[maven-release-plugin] prepare release byte-buddy-1.12.19</li>
<li><a
href="b1f4e9b4ee"><code>b1f4e9b</code></a>
[release] New release</li>
<li><a
href="8d17e3a2a3"><code>8d17e3a</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/raphw/byte-buddy/issues/1359">#1359</a>
from eyalkoren/protection-domain</li>
<li><a
href="c57139e69c"><code>c57139e</code></a>
Using explicit ProtectionDomain in dynamically loaded classes</li>
<li><a
href="ff8be9a91b"><code>ff8be9a</code></a>
Attempt cloning protection domain from accessible object to avoid
security ma...</li>
<li><a
href="6fe45f76ef"><code>6fe45f7</code></a>
Make s in message optional.</li>
<li><a
href="9023501243"><code>9023501</code></a>
Fix scope of summary variable.</li>
<li><a
href="02091f13f4"><code>02091f1</code></a>
Update codeql-analysis.yml</li>
<li><a
href="628b6a90c5"><code>628b6a9</code></a>
Close class loader in Gradle plugin, if possible.</li>
<li><a
href="9a81856525"><code>9a81856</code></a>
Remove unused import.</li>
<li>Additional commits viewable in <a
href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.12.18...byte-buddy-1.12.19">compare
view</a></li>
</ul>
</details>
<br />

Updates `byte-buddy-dep` from 1.12.18 to 1.12.19
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/releases">byte-buddy-dep's
releases</a>.</em></p>
<blockquote>
<h2>Byte Buddy 1.12.19</h2>
<ul>
<li>Avoid possible lock through circular class loading of
<code>TypeDescription</code> subtypes.</li>
<li>Avoid access error when using unsafe API on Java 17 with an active
security manager.</li>
<li>Close URL class loader used in Gradle plugin.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md">byte-buddy-dep's
changelog</a>.</em></p>
<blockquote>
<h2>Byte Buddy release notes</h2>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c93425a1e9"><code>c93425a</code></a>
[maven-release-plugin] prepare release byte-buddy-1.12.19</li>
<li><a
href="b1f4e9b4ee"><code>b1f4e9b</code></a>
[release] New release</li>
<li><a
href="8d17e3a2a3"><code>8d17e3a</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/raphw/byte-buddy/issues/1359">#1359</a>
from eyalkoren/protection-domain</li>
<li><a
href="c57139e69c"><code>c57139e</code></a>
Using explicit ProtectionDomain in dynamically loaded classes</li>
<li><a
href="ff8be9a91b"><code>ff8be9a</code></a>
Attempt cloning protection domain from accessible object to avoid
security ma...</li>
<li><a
href="6fe45f76ef"><code>6fe45f7</code></a>
Make s in message optional.</li>
<li><a
href="9023501243"><code>9023501</code></a>
Fix scope of summary variable.</li>
<li><a
href="02091f13f4"><code>02091f1</code></a>
Update codeql-analysis.yml</li>
<li><a
href="628b6a90c5"><code>628b6a9</code></a>
Close class loader in Gradle plugin, if possible.</li>
<li><a
href="9a81856525"><code>9a81856</code></a>
Remove unused import.</li>
<li>Additional commits viewable in <a
href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.12.18...byte-buddy-1.12.19">compare
view</a></li>
</ul>
</details>
<br />

Updates `byte-buddy-agent` from 1.12.18 to 1.12.19
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/releases">byte-buddy-agent's
releases</a>.</em></p>
<blockquote>
<h2>Byte Buddy 1.12.19</h2>
<ul>
<li>Avoid possible lock through circular class loading of
<code>TypeDescription</code> subtypes.</li>
<li>Avoid access error when using unsafe API on Java 17 with an active
security manager.</li>
<li>Close URL class loader used in Gradle plugin.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md">byte-buddy-agent's
changelog</a>.</em></p>
<blockquote>
<h2>Byte Buddy release notes</h2>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c93425a1e9"><code>c93425a</code></a>
[maven-release-plugin] prepare release byte-buddy-1.12.19</li>
<li><a
href="b1f4e9b4ee"><code>b1f4e9b</code></a>
[release] New release</li>
<li><a
href="8d17e3a2a3"><code>8d17e3a</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/raphw/byte-buddy/issues/1359">#1359</a>
from eyalkoren/protection-domain</li>
<li><a
href="c57139e69c"><code>c57139e</code></a>
Using explicit ProtectionDomain in dynamically loaded classes</li>
<li><a
href="ff8be9a91b"><code>ff8be9a</code></a>
Attempt cloning protection domain from accessible object to avoid
security ma...</li>
<li><a
href="6fe45f76ef"><code>6fe45f7</code></a>
Make s in message optional.</li>
<li><a
href="9023501243"><code>9023501</code></a>
Fix scope of summary variable.</li>
<li><a
href="02091f13f4"><code>02091f1</code></a>
Update codeql-analysis.yml</li>
<li><a
href="628b6a90c5"><code>628b6a9</code></a>
Close class loader in Gradle plugin, if possible.</li>
<li><a
href="9a81856525"><code>9a81856</code></a>
Remove unused import.</li>
<li>Additional commits viewable in <a
href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.12.18...byte-buddy-1.12.19">compare
view</a></li>
</ul>
</details>
<br />

Updates `byte-buddy-gradle-plugin` from 1.12.18 to 1.12.19
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/releases">byte-buddy-gradle-plugin's
releases</a>.</em></p>
<blockquote>
<h2>Byte Buddy 1.12.19</h2>
<ul>
<li>Avoid possible lock through circular class loading of
<code>TypeDescription</code> subtypes.</li>
<li>Avoid access error when using unsafe API on Java 17 with an active
security manager.</li>
<li>Close URL class loader used in Gradle plugin.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md">byte-buddy-gradle-plugin's
changelog</a>.</em></p>
<blockquote>
<h2>Byte Buddy release notes</h2>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c93425a1e9"><code>c93425a</code></a>
[maven-release-plugin] prepare release byte-buddy-1.12.19</li>
<li><a
href="b1f4e9b4ee"><code>b1f4e9b</code></a>
[release] New release</li>
<li><a
href="8d17e3a2a3"><code>8d17e3a</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/raphw/byte-buddy/issues/1359">#1359</a>
from eyalkoren/protection-domain</li>
<li><a
href="c57139e69c"><code>c57139e</code></a>
Using explicit ProtectionDomain in dynamically loaded classes</li>
<li><a
href="ff8be9a91b"><code>ff8be9a</code></a>
Attempt cloning protection domain from accessible object to avoid
security ma...</li>
<li><a
href="6fe45f76ef"><code>6fe45f7</code></a>
Make s in message optional.</li>
<li><a
href="9023501243"><code>9023501</code></a>
Fix scope of summary variable.</li>
<li><a
href="02091f13f4"><code>02091f1</code></a>
Update codeql-analysis.yml</li>
<li><a
href="628b6a90c5"><code>628b6a9</code></a>
Close class loader in Gradle plugin, if possible.</li>
<li><a
href="9a81856525"><code>9a81856</code></a>
Remove unused import.</li>
<li>Additional commits viewable in <a
href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.12.18...byte-buddy-1.12.19">compare
view</a></li>
</ul>
</details>
<br />


You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Mateusz Rzeszutek <mrzeszutek@splunk.com>
2022-11-18 17:06:57 +01:00
dependabot[bot] a7e93f2077
Bump logback-classic from 1.3.1 to 1.3.4 in /dependencyManagement (#7233)
Bumps [logback-classic](https://github.com/qos-ch/logback) from 1.3.1 to
1.3.4.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="01f1e455f3"><code>01f1e45</code></a>
prepare release 1.3.4</li>
<li><a
href="7bd25cf623"><code>7bd25cf</code></a>
fix LOGBACK-1695</li>
<li><a
href="d564918f51"><code>d564918</code></a>
add com.sun.mail as implementatoin</li>
<li><a
href="f4f1a23ce1"><code>f4f1a23</code></a>
test changes related to LOGBACK-1693 LOGBACK-1694</li>
<li><a
href="6c4fc98612"><code>6c4fc98</code></a>
cleanup dependency declarations</li>
<li><a
href="c3f992b17d"><code>c3f992b</code></a>
cleanup dependency declarations</li>
<li><a
href="aaabe89816"><code>aaabe89</code></a>
fix LOGBACK-1693</li>
<li><a
href="08daaf98a2"><code>08daaf9</code></a>
start work on 1.3.4-SNAPSHOT</li>
<li><a
href="daf07d203c"><code>daf07d2</code></a>
prepare release 1.3.3</li>
<li><a
href="2a451a88fa"><code>2a451a8</code></a>
fix LOGBACK-LOGBACK-1690</li>
<li>Additional commits viewable in <a
href="https://github.com/qos-ch/logback/compare/v_1.3.1...v_1.3.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ch.qos.logback:logback-classic&package-manager=gradle&previous-version=1.3.1&new-version=1.3.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-18 14:09:18 +01:00
dependabot[bot] 2fb5ecb21d
Bump slf4jVersion from 2.0.2 to 2.0.4 in /dependencyManagement (#7215) 2022-11-18 12:07:17 +00:00
dependabot[bot] 3a664bf403
Bump autoValueVersion from 1.10 to 1.10.1 in /dependencyManagement (#7232)
Bumps `autoValueVersion` from 1.10 to 1.10.1.
Updates `auto-value` from 1.10 to 1.10.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/auto/releases">auto-value's
releases</a>.</em></p>
<blockquote>
<h2>AutoValue 1.10.1</h2>
<ul>
<li>Two annotations from <code>org.jetbrains.annotations</code> were
accidentally included unshaded in the AutoValue jar. That has been
fixed. (6de325b0c)</li>
<li>Fixed an issue when a builder has a property <code>foo</code> with
both a getter <code>foo()</code> and a builder
<code>fooBuilder()</code>. (3659a0e64)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c698816ebd"><code>c698816</code></a>
Set version number for auto-value-parent to 1.10.1.</li>
<li><a
href="6de325b0cc"><code>6de325b</code></a>
Ensure that <code>org.jetbrains.annotations</code> is shaded in the
AutoValue jar.</li>
<li><a
href="61967ecd3c"><code>61967ec</code></a>
Fix the variable name in the example of &quot;When parameter names are
unavailable&quot;.</li>
<li><a
href="a91775b68f"><code>a91775b</code></a>
Bump mockito-core from 4.8.1 to 4.9.0 in /value</li>
<li><a
href="d7218d5820"><code>d7218d5</code></a>
Bump kotlin.version from 1.7.20 to 1.7.21 in /value</li>
<li><a
href="eea4094fdc"><code>eea4094</code></a>
Bump maven-shade-plugin from 3.4.0 to 3.4.1 in /value</li>
<li><a
href="3659a0e643"><code>3659a0e</code></a>
Fix an issue with builder getters.</li>
<li><a
href="aeffb9065d"><code>aeffb90</code></a>
Bump mockito-core from 4.8.0 to 4.8.1 in /value</li>
<li><a
href="b8f2bad387"><code>b8f2bad</code></a>
Bump styfle/cancel-workflow-action from 0.10.1 to 0.11.0</li>
<li><a
href="4bb91ca4fc"><code>4bb91ca</code></a>
Propagate parameter annotations in generated factory code.</li>
<li>Additional commits viewable in <a
href="https://github.com/google/auto/compare/auto-value-1.10...auto-value-1.10.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `auto-value-annotations` from 1.10 to 1.10.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/auto/releases">auto-value-annotations's
releases</a>.</em></p>
<blockquote>
<h2>AutoValue 1.10.1</h2>
<ul>
<li>Two annotations from <code>org.jetbrains.annotations</code> were
accidentally included unshaded in the AutoValue jar. That has been
fixed. (6de325b0c)</li>
<li>Fixed an issue when a builder has a property <code>foo</code> with
both a getter <code>foo()</code> and a builder
<code>fooBuilder()</code>. (3659a0e64)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c698816ebd"><code>c698816</code></a>
Set version number for auto-value-parent to 1.10.1.</li>
<li><a
href="6de325b0cc"><code>6de325b</code></a>
Ensure that <code>org.jetbrains.annotations</code> is shaded in the
AutoValue jar.</li>
<li><a
href="61967ecd3c"><code>61967ec</code></a>
Fix the variable name in the example of &quot;When parameter names are
unavailable&quot;.</li>
<li><a
href="a91775b68f"><code>a91775b</code></a>
Bump mockito-core from 4.8.1 to 4.9.0 in /value</li>
<li><a
href="d7218d5820"><code>d7218d5</code></a>
Bump kotlin.version from 1.7.20 to 1.7.21 in /value</li>
<li><a
href="eea4094fdc"><code>eea4094</code></a>
Bump maven-shade-plugin from 3.4.0 to 3.4.1 in /value</li>
<li><a
href="3659a0e643"><code>3659a0e</code></a>
Fix an issue with builder getters.</li>
<li><a
href="aeffb9065d"><code>aeffb90</code></a>
Bump mockito-core from 4.8.0 to 4.8.1 in /value</li>
<li><a
href="b8f2bad387"><code>b8f2bad</code></a>
Bump styfle/cancel-workflow-action from 0.10.1 to 0.11.0</li>
<li><a
href="4bb91ca4fc"><code>4bb91ca</code></a>
Propagate parameter annotations in generated factory code.</li>
<li>Additional commits viewable in <a
href="https://github.com/google/auto/compare/auto-value-1.10...auto-value-1.10.1">compare
view</a></li>
</ul>
</details>
<br />


You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-18 13:01:19 +01:00
dependabot[bot] 7adca73907
Bump testcontainers-bom from 1.17.5 to 1.17.6 in /dependencyManagement (#7204)
Bumps
[testcontainers-bom](https://github.com/testcontainers/testcontainers-java)
from 1.17.5 to 1.17.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/testcontainers/testcontainers-java/releases">testcontainers-bom's
releases</a>.</em></p>
<blockquote>
<h2>1.17.6</h2>
<h1>What's Changed</h1>
<h2>Highlights</h2>
<p>This release has been made possible through the efforts of 20
contributors. The Testcontainers does not cease to amaze us, thanks to
everyone of you and thanks for the ongoing support and collaboration
🥰.</p>
<p>This release brings a lot of database love with 2 new modules, and as
always a couple of bug fixes and improvements</p>
<h3>New Module: QuestDB (<a
href="https://github-redirect.dependabot.com/testcontainers/testcontainers-java/issues/5995">#5995</a>)
<a href="https://github.com/Vangreen"><code>@​Vangreen</code></a></h3>
<p><a href="https://questdb.io/">QuestDB</a>, is a high-performance,
open-source SQL database for applications in financial services, IoT,
machine learning, DevOps and observability.</p>
<pre lang="java"><code>var container = new
QuestDBContainer(&quot;questdb/questdb:6.5.3&quot;)
container.start()
var connectionUrl = container.getHttpUrl()
// use the connectionUrl and start testing!
</code></pre>
<h3>New Module: YugabyteDB (<a
href="https://github-redirect.dependabot.com/testcontainers/testcontainers-java/issues/4372">#4372</a>)
<a
href="https://github.com/srinivasa-vasu"><code>@​srinivasa-vasu</code></a></h3>
<p><a href="https://www.yugabyte.com/">YugabyteDB</a>, is a modern
distributed SQL database for transactional cloud native applications.
PostgreSQL compatible. It offers two APIs, SQL and CQL.</p>
<pre lang="java"><code>var container = new
YugabyteDBYSQLContainer(&quot;yugabytedb/yugabyte:2.14.4.0-b26&quot;);
container.start()
var jdbcUrl = container.getJdbcUrl();
// use the jdbcUrl and start testing!
</code></pre>
<pre lang="java"><code>var container = new
YugabyteDBYCQLContainer(&quot;yugabytedb/yugabyte:2.14.4.0-b26&quot;);
container.start()
var contactPoint = container.getContactPoint();
// use the contactPoint and start testing!
</code></pre>
<h2>🚀 Features &amp; Enhancements</h2>
<ul>
<li>InfluxDB v2 support (<a
href="https://github-redirect.dependabot.com/testcontainers/testcontainers-java/issues/3669">#3669</a>)
<a href="https://github.com/raminqaf"><code>@​raminqaf</code></a></li>
<li>Add support for flags in DatastoreEmulatorContainer (<a
href="https://github-redirect.dependabot.com/testcontainers/testcontainers-java/issues/5993">#5993</a>)
<a
href="https://github.com/eddumelendez"><code>@​eddumelendez</code></a></li>
<li>Expose Redpanda schema registry (<a
href="https://github-redirect.dependabot.com/testcontainers/testcontainers-java/issues/5994">#5994</a>)
<a
href="https://github.com/gustavomonarin"><code>@​gustavomonarin</code></a></li>
<li>Adds the ability to set a target build stage to a Dockerfile (<a
href="https://github-redirect.dependabot.com/testcontainers/testcontainers-java/issues/4810">#4810</a>)
<a
href="https://github.com/GenghisChen"><code>@​GenghisChen</code></a></li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li>Fixes wrong timestamp calculation (<a
href="https://github-redirect.dependabot.com/testcontainers/testcontainers-java/issues/5988">#5988</a>)
<a href="https://github.com/leblonk"><code>@​leblonk</code></a></li>
<li>Catch and ignore more errors when reflecting into container subclass
(<a
href="https://github-redirect.dependabot.com/testcontainers/testcontainers-java/issues/5990">#5990</a>)
<a href="https://github.com/akhaku"><code>@​akhaku</code></a></li>
<li>Return default for empty environment variable (<a
href="https://github-redirect.dependabot.com/testcontainers/testcontainers-java/issues/5983">#5983</a>)
<a href="https://github.com/roulpriya"><code>@​roulpriya</code></a></li>
</ul>
<h2>📖 Documentation</h2>
<ul>
<li>Add Spotify in Donors section (<a
href="https://github-redirect.dependabot.com/testcontainers/testcontainers-java/issues/6083">#6083</a>)
<a
href="https://github.com/eddumelendez"><code>@​eddumelendez</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4a2ca136cf"><code>4a2ca13</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/testcontainers/testcontainers-java/issues/6212">#6212</a>
from testcontainers/combined-pr-branch</li>
<li><a
href="388af569e9"><code>388af56</code></a>
Merge remote-tracking branch
'origin/dependabot/gradle/modules/localstack/com...</li>
<li><a
href="2748cf8f33"><code>2748cf8</code></a>
Merge remote-tracking branch
'origin/dependabot/gradle/modules/localstack/com...</li>
<li><a
href="889ea6b3f5"><code>889ea6b</code></a>
Add yugabytedb to mkdocs.yml (<a
href="https://github-redirect.dependabot.com/testcontainers/testcontainers-java/issues/6211">#6211</a>)</li>
<li><a
href="c17467606c"><code>c174676</code></a>
Bump aws-java-sdk-logs from 1.12.337 to 1.12.343 in
/modules/localstack</li>
<li><a
href="c2abe0d245"><code>c2abe0d</code></a>
Bump aws-java-sdk-s3 from 1.12.337 to 1.12.343 in
/modules/localstack</li>
<li><a
href="11c3079ba5"><code>11c3079</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/testcontainers/testcontainers-java/issues/6210">#6210</a>
from testcontainers/combined-pr-branch</li>
<li><a
href="aed19b8c3a"><code>aed19b8</code></a>
Merge remote-tracking branch
'origin/dependabot/gradle/modules/dynalite/com.a...</li>
<li><a
href="6633109869"><code>6633109</code></a>
Merge remote-tracking branch
'origin/dependabot/gradle/modules/gcloud/com.goo...</li>
<li><a
href="fa867b0d57"><code>fa867b0</code></a>
Merge remote-tracking branch
'origin/dependabot/gradle/examples/org.jetbrains...</li>
<li>Additional commits viewable in <a
href="https://github.com/testcontainers/testcontainers-java/compare/1.17.5...1.17.6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.testcontainers:testcontainers-bom&package-manager=gradle&previous-version=1.17.5&new-version=1.17.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-17 11:13:04 +01:00
Trask Stalnaker 3ae840bd15
Consolidate dependabot updates (#7176)
I did some testing, and it looks like dependabot understands this kind
of variable usage, and will update the variable, which should save us
several updates (and resulting conflicting merges).
2022-11-15 08:56:49 +01:00
dependabot[bot] c6bbf28eac
Bump junit-pioneer from 1.8.0 to 1.9.0 in /dependencyManagement (#7158) 2022-11-15 05:11:00 +00:00
dependabot[bot] 5e0a775c84
Bump jmh-core from 1.35 to 1.36 in /dependencyManagement (#7156) 2022-11-14 19:51:50 -08:00
dependabot[bot] 1385d5ecb5
Bump jmh-generator-bytecode from 1.35 to 1.36 in /dependencyManagement (#7161) 2022-11-14 19:26:05 -08:00
dependabot[bot] 629e5c2aae
Bump junit-pioneer from 1.7.2 to 1.8.0 in /dependencyManagement (#7141) 2022-11-12 00:23:00 +00:00
dependabot[bot] b9b3feadc0
Bump junit-pioneer from 1.7.1 to 1.7.2 in /dependencyManagement (#7122) 2022-11-09 15:30:51 -08:00
dependabot[bot] cfb475d7dd
Bump jackson-bom from 2.13.4.20221013 to 2.14.0 in /dependencyManagement (#7091)
Bumps [jackson-bom](https://github.com/FasterXML/jackson-bom) from
2.13.4.20221013 to 2.14.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="cd99403b64"><code>cd99403</code></a>
[maven-release-plugin] prepare release jackson-bom-2.14.0</li>
<li><a
href="50dedf02e5"><code>50dedf0</code></a>
Prepare for 2.14.0</li>
<li><a
href="69023b4ec9"><code>69023b4</code></a>
Back to snapshots</li>
<li><a
href="ffb3dd2940"><code>ffb3dd2</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li><a
href="229c0be857"><code>229c0be</code></a>
[maven-release-plugin] prepare release jackson-bom-2.14.0-rc3</li>
<li><a
href="b3e3950eb7"><code>b3e3950</code></a>
Prepare for 2.14.0-rc3 release</li>
<li><a
href="babf49afc8"><code>babf49a</code></a>
Merge branch '2.13' into 2.14</li>
<li><a
href="f52258f22a"><code>f52258f</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li><a
href="20416ee364"><code>20416ee</code></a>
Merge branch '2.13' into 2.14</li>
<li><a
href="fd343f3524"><code>fd343f3</code></a>
Merge branch '2.13' into 2.14</li>
<li>Additional commits viewable in <a
href="https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.13.4.20221013...jackson-bom-2.14.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.fasterxml.jackson:jackson-bom&package-manager=gradle&previous-version=2.13.4.20221013&new-version=2.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Trask Stalnaker <trask.stalnaker@gmail.com>
2022-11-08 13:19:09 +01:00
dependabot[bot] a8e5900244
Bump nullaway from 0.10.3 to 0.10.4 in /dependencyManagement (#7034) 2022-11-02 18:12:58 -07:00
dependabot[bot] 6bee632b8b
Bump nullaway from 0.10.2 to 0.10.3 in /dependencyManagement (#7014) 2022-10-31 15:38:08 -07:00
dependabot[bot] c677e231dc
Bump mockito-core from 4.8.0 to 4.8.1 in /dependencyManagement (#6971) 2022-10-25 21:10:45 +00:00
dependabot[bot] f033c38af4
Bump spring-boot-dependencies from 2.7.4 to 2.7.5 in /dependencyManagement (#6972) 2022-10-25 21:10:23 +00:00
dependabot[bot] 29ef29626e
Bump mockito-inline from 4.8.0 to 4.8.1 in /dependencyManagement (#6897) 2022-10-18 02:00:13 +00:00
dependabot[bot] cafab8e657
Bump groovyVersion from 4.0.5 to 4.0.6 in /dependencyManagement (#6896) 2022-10-17 23:44:00 +00:00
dependabot[bot] bf56414bc6
Bump mockito-junit-jupiter from 4.8.0 to 4.8.1 in /dependencyManagement (#6898) 2022-10-17 23:13:47 +00:00
dependabot[bot] 2c423b44b2
Bump jackson-bom from 2.13.4.20221012 to 2.13.4.20221013 in /dependencyManagement (#6873) 2022-10-13 21:02:19 -07:00
dependabot[bot] 0a88ade490
Bump jackson-bom from 2.13.4 to 2.13.4.20221012 in /dependencyManagement (#6865) 2022-10-12 18:21:53 -07:00
jack-berg aeac361816
Upgrade to otel java 1.19.0 (#6757)
Working PR to capture all the changes required to update to otel java
1.19.0. The new log API force allows
`:instrumentation-appender-api-internal` and
`:instrumentation-appender-sdk-internal`, but necessitates a decent
amount of refactoring as a result.

The PR points at the `1.19.0-SNAPSHOT`, which I'll update upon
publication.

Co-authored-by: Mateusz Rzeszutek <mrzeszutek@splunk.com>
Co-authored-by: Trask Stalnaker <trask.stalnaker@gmail.com>
Co-authored-by: Lauri Tulmin <ltulmin@splunk.com>
2022-10-12 09:19:37 -07:00
dependabot[bot] 3806e4f295
Bump error_prone_annotations from 2.15.0 to 2.16 in /dependencyManagement (#6847) 2022-10-11 14:20:34 -07:00
dependabot[bot] 59940699c7
Bump error_prone_test_helpers from 2.15.0 to 2.16 in /dependencyManagement (#6840) 2022-10-11 20:56:08 +00:00
dependabot[bot] 6c23d98387
Bump error_prone_core from 2.15.0 to 2.16 in /dependencyManagement (#6849) 2022-10-11 12:52:42 -07:00
Trask Stalnaker 45f95efc81
Update byte buddy from 1.12.17 to 1.12.18 (#6851)
I will rebase the dependabot PRs after this is merged, so that
dependabot won't mark these versions internally as ignored
2022-10-11 12:41:13 -07:00
dependabot[bot] d0782b54da
Bump auto-value-annotations from 1.9 to 1.10 in /dependencyManagement (#6822) 2022-10-06 23:34:40 +00:00
dependabot[bot] 7e6310255b
Bump auto-value from 1.9 to 1.10 in /dependencyManagement (#6821) 2022-10-06 16:00:00 -07:00
Trask Stalnaker 6f6af66c04
Update to slf4j 2.0.2 (#6774)
~testLatestDeps is failing, see #6791~
2022-10-06 01:28:53 +00:00
dependabot[bot] da3eecfd9f
Bump testcontainers-bom from 1.17.3 to 1.17.5 in /dependencyManagement (#6806) 2022-10-04 17:17:56 -07:00
Trask Stalnaker 6416a141cb
Use spock bom (#6785) 2022-09-30 12:04:48 +03:00
dependabot[bot] 7f3cfabaa8
Bump snakeyaml from 1.32 to 1.33 in /dependencyManagement (#6756)
Bumps [snakeyaml](https://bitbucket.org/snakeyaml/snakeyaml) from 1.32
to 1.33.

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Trask Stalnaker <trask.stalnaker@gmail.com>
2022-09-27 12:55:38 +03:00
Trask Stalnaker 429ecfc713
Update error prone (#6646)
(note that change from BDDMockito is due to
https://github.com/google/error-prone/issues/3396)
2022-09-23 11:24:40 -07:00
dependabot[bot] 1fb878875a
Bump mockito-inline from 4.7.0 to 4.8.0 in /dependencyManagement (#6727)
Bumps [mockito-inline](https://github.com/mockito/mockito) from 4.7.0 to
4.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/mockito/mockito/releases">mockito-inline's
releases</a>.</em></p>
<blockquote>
<h2>v4.8.0</h2>
<p><!-- raw HTML omitted --><!-- raw HTML omitted --><em>Changelog
generated by <a
href="https://github.com/shipkit/shipkit-changelog">Shipkit Changelog
Gradle Plugin</a></em><!-- raw HTML omitted --><!-- raw HTML omitted
--></p>
<h4>4.8.0</h4>
<ul>
<li>2022-09-07 - <a
href="https://github.com/mockito/mockito/compare/v4.7.0...v4.8.0">10
commit(s)</a> by Alex, James Baker, Johannes Spangenberg, Kurt Alfred
Kluever, Rafael Winterhalter, Thibault Helsmoortel, dependabot[bot]</li>
<li>GitHub Workflows security hardening [(<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2744">#2744</a>)](<a
href="https://github-redirect.dependabot.com/mockito/mockito/pull/2744">mockito/mockito#2744</a>)</li>
<li>Assign GlobalConfiguration initializer to unused variable [(<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2742">#2742</a>)](<a
href="https://github-redirect.dependabot.com/mockito/mockito/pull/2742">mockito/mockito#2742</a>)</li>
<li>Bump com.diffplug.spotless from 6.9.1 to 6.10.0 [(<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2738">#2738</a>)](<a
href="https://github-redirect.dependabot.com/mockito/mockito/pull/2738">mockito/mockito#2738</a>)</li>
<li>Drop varargs collector before invoking a user method. [(<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2736">#2736</a>)](<a
href="https://github-redirect.dependabot.com/mockito/mockito/pull/2736">mockito/mockito#2736</a>)</li>
<li>Bump versions.bytebuddy from 1.12.13 to 1.12.14 [(<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2734">#2734</a>)](<a
href="https://github-redirect.dependabot.com/mockito/mockito/pull/2734">mockito/mockito#2734</a>)</li>
<li>Remove useless thrown exception from constructor [(<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2732">#2732</a>)](<a
href="https://github-redirect.dependabot.com/mockito/mockito/pull/2732">mockito/mockito#2732</a>)</li>
<li>TypeSafeMatching no longer iterates over class methods inefficiently
[(<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2729">#2729</a>)](<a
href="https://github-redirect.dependabot.com/mockito/mockito/pull/2729">mockito/mockito#2729</a>)</li>
<li>Fixes <a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2720">#2720</a>:
Use StackWalker on Java 9+ to create Locations [(<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2723">#2723</a>)](<a
href="https://github-redirect.dependabot.com/mockito/mockito/pull/2723">mockito/mockito#2723</a>)</li>
<li>LocationImpl adds performance overheads due to instantiating a stack
trace [(<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2720">#2720</a>)](<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2720">mockito/mockito#2720</a>)</li>
<li>Fixes <a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2626">#2626</a>
: Introduce MockSettings.mockMaker [(<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2701">#2701</a>)](<a
href="https://github-redirect.dependabot.com/mockito/mockito/pull/2701">mockito/mockito#2701</a>)</li>
<li>Introduce option to disable inline-mock-maker for a specific
instance [(<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2626">#2626</a>)](<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2626">mockito/mockito#2626</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3e910ea990"><code>3e910ea</code></a>
Fixes <a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2626">#2626</a>
: Introduce MockSettings.mockMaker (<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2701">#2701</a>)</li>
<li><a
href="0753d48161"><code>0753d48</code></a>
Explicitly add permissions to GitHub actions (<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2744">#2744</a>)</li>
<li><a
href="530558ae3c"><code>530558a</code></a>
Assign GlobalConfiguration initializer to unused variable (<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2742">#2742</a>)</li>
<li><a
href="4b8042e24e"><code>4b8042e</code></a>
Bump com.diffplug.spotless from 6.9.1 to 6.10.0 (<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2738">#2738</a>)</li>
<li><a
href="9b93df72c9"><code>9b93df7</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2736">#2736</a>
from mockito/static-varargs-call</li>
<li><a
href="160e3daf44"><code>160e3da</code></a>
Drop varargs collector before invoking a user method.</li>
<li><a
href="e123c2cdf7"><code>e123c2c</code></a>
Bump versions.bytebuddy from 1.12.13 to 1.12.14 (<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2734">#2734</a>)</li>
<li><a
href="2ded10ec70"><code>2ded10e</code></a>
Remove useless thrown exception from constructor (<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2732">#2732</a>)</li>
<li><a
href="73a861f778"><code>73a861f</code></a>
Fixes <a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2720">#2720</a>:
Use StackWalker on Java 9+ to create Locations (<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2723">#2723</a>)</li>
<li><a
href="89698baaeb"><code>89698ba</code></a>
Optimize <code>TypeSafeMatching</code> iteration over class methods (<a
href="https://github-redirect.dependabot.com/mockito/mockito/issues/2729">#2729</a>)</li>
<li>See full diff in <a
href="https://github.com/mockito/mockito/compare/v4.7.0...v4.8.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.mockito:mockito-inline&package-manager=gradle&previous-version=4.7.0&new-version=4.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-23 10:17:49 +02:00
dependabot[bot] 1f2d2f78a8
Bump spring-boot-dependencies from 2.7.3 to 2.7.4 in /dependencyManagement (#6711) 2022-09-22 20:59:31 -07:00
dependabot[bot] 973fe7d077
Bump mockito-junit-jupiter from 4.7.0 to 4.8.0 in /dependencyManagement (#6719) 2022-09-22 20:50:20 -07:00
dependabot[bot] 0659d189a2
Bump mockito-core from 4.7.0 to 4.8.0 in /dependencyManagement (#6720) 2022-09-22 16:50:02 -07:00
Trask Stalnaker e7dd21477d
Update bytebuddy core dependency, and make dependencies more dependabot friendly (#6704)
(probably need to revisit later what's a "core dependency" and what's
not, but doesn't seem to be any real difference other than organization)
2022-09-22 09:53:53 -07:00
dependabot[bot] cf27f00046
Bump nullaway from 0.10.1 to 0.10.2 in /dependencyManagement (#6700) 2022-09-21 16:44:14 -07:00
dependabot[bot] de63ac7c74
Bump junit-bom from 5.9.0 to 5.9.1 in /dependencyManagement (#6686) 2022-09-20 17:48:52 -07:00
dependabot[bot] 00d8270f7b
Bump opentelemetry-proto from 0.17.0-alpha to 0.19.0-alpha in /dependencyManagement (#6655)
Bumps
[opentelemetry-proto](https://github.com/open-telemetry/opentelemetry-proto-java)
from 0.17.0-alpha to 0.19.0-alpha.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-proto-java/releases">opentelemetry-proto's
releases</a>.</em></p>
<blockquote>
<h2>Release v0.19.0-alpha</h2>
<p>Java Bindings for <a
href="https://github.com/open-telemetry/opentelemetry-proto/releases/tag/v0.19.0">OTLP
v0.19.0</a></p>
<h2>Release v0.18.0-alpha</h2>
<p>Java Bindings for <a
href="https://github.com/open-telemetry/opentelemetry-proto/releases/tag/v0.18.0">OTLP
v0.18.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/open-telemetry/opentelemetry-proto-java/commits">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.opentelemetry.proto:opentelemetry-proto&package-manager=gradle&previous-version=0.17.0-alpha&new-version=0.19.0-alpha)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Trask Stalnaker <trask.stalnaker@gmail.com>
2022-09-19 16:27:55 -07:00