Commit Graph

8322 Commits

Author SHA1 Message Date
Trask Stalnaker 3371d93f51
Remove Java 18 and add Java 20 in smoke tests (#6703)
Need to follow-up after images are published from `main` in order to
update the tests themselves.
2022-09-22 09:56:02 -07:00
Jean Bisutti c42eac95fd
Add marker attribute for Logback (#6652) 2022-09-22 09:54:55 -07:00
Jean Bisutti 429f083cf7
Add marker attribute for Log4j 2 (#6680)
Co-authored-by: Mateusz Rzeszutek <mrzeszutek@splunk.com>
2022-09-22 09:54:37 -07:00
Trask Stalnaker e7dd21477d
Update bytebuddy core dependency, and make dependencies more dependabot friendly (#6704)
(probably need to revisit later what's a "core dependency" and what's
not, but doesn't seem to be any real difference other than organization)
2022-09-22 09:53:53 -07:00
Mateusz Rzeszutek e994f8f840
Add classLoaderMatcher() for the spring-boot-actuator-autoconfigure i… (#6695)
…nstrumentation

See #6636
2022-09-22 09:53:19 -07:00
Trask Stalnaker a6702bc192
Increase dependabot limit (#6706) 2022-09-22 09:52:27 -07:00
Trask Stalnaker d5e9e7d639
Disable dependabot rebasing (#6705)
Because our build takes a long time, and most of the time rebasing is
not required. We can always manually request `@dependabot rebase` if it
is needed due to conflicts.
2022-09-22 12:33:10 +03:00
dependabot[bot] 33a1694aef
Bump byte-buddy-gradle-plugin from 1.12.16 to 1.12.17 in /gradle-plugins (#6698)
Bumps [byte-buddy-gradle-plugin](https://github.com/raphw/byte-buddy)
from 1.12.16 to 1.12.17.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md">byte-buddy-gradle-plugin's
changelog</a>.</em></p>
<blockquote>
<h2>Byte Buddy release notes</h2>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="2a080a8df9"><code>2a080a8</code></a>
[maven-release-plugin] prepare release byte-buddy-1.12.17</li>
<li><a
href="ae17a5589d"><code>ae17a55</code></a>
[release] Release new version.</li>
<li><a
href="399c4b28be"><code>399c4b2</code></a>
[release] Release new version.</li>
<li><a
href="0ce7a40689"><code>0ce7a40</code></a>
[release] Release new version</li>
<li><a
href="0cd4c912e1"><code>0cd4c91</code></a>
Add test rule and property for better handling JNA if not available or
in nee...</li>
<li><a
href="9c03f22c2e"><code>9c03f22</code></a>
Fix entry point.</li>
<li><a
href="dc18b405d3"><code>dc18b40</code></a>
Allow for different patch modes when patching transformers.</li>
<li><a
href="21a0b2591d"><code>21a0b25</code></a>
Restrict servers that are allowed during release step.</li>
<li><a
href="24198970ea"><code>2419897</code></a>
Update release notes and internal Byte Buddy.</li>
<li><a
href="9c12e711a3"><code>9c12e71</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li>See full diff in <a
href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.12.16...byte-buddy-1.12.17">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=net.bytebuddy:byte-buddy-gradle-plugin&package-manager=gradle&previous-version=1.12.16&new-version=1.12.17)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-22 12:32:41 +03:00
dependabot[bot] 1f88304510
Bump byte-buddy-gradle-plugin from 1.12.16 to 1.12.17 in /conventions (#6702) 2022-09-21 19:53:58 -07:00
dependabot[bot] 05a1c9d984
Bump byte-buddy-dep from 1.12.16 to 1.12.17 in /gradle-plugins (#6699) 2022-09-21 18:04:29 -07:00
dependabot[bot] 05bf88e9b0
Bump jmh-gradle-plugin from 0.6.7 to 0.6.8 in /conventions (#6701) 2022-09-21 17:08:16 -07:00
dependabot[bot] cf27f00046
Bump nullaway from 0.10.1 to 0.10.2 in /dependencyManagement (#6700) 2022-09-21 16:44:14 -07:00
Mateusz Rzeszutek ff498261c3
Fix the order of configuration file application (#6697)
Fixes #6696
2022-09-21 14:30:40 -07:00
Trask Stalnaker a7ab764036
Update maintainers/approvers list (#6689)
Updating maintainers and approvers list to reflect active folks. (we
miss you, stop by meetings any time!)

cc @iNikem @pavolloffay
2022-09-21 10:14:39 -07:00
Trask Stalnaker 4379ccd95f
Fix CI (#6692)
CI on `main` is failing on publishing snapshot, because javadoc is
emitting a warning and we fail on warnings. See code comment for more
explanation.

I tried pointing to
`https://docs.oracle.com/en/java/javase/11/docs/api/`, but that gives a
different error:

> warning: The code being documented uses packages in the unnamed
module, but the packages defined in
https://docs.oracle.com/en/java/javase/11/docs/api/ are in named
modules.
2022-09-21 10:17:25 +02:00
Aaron Ai 527bf612f6
Update attribute key of rocketmq's message tag (#6677)
Fixes #6676
2022-09-20 21:44:38 -07:00
dependabot[bot] de63ac7c74
Bump junit-bom from 5.9.0 to 5.9.1 in /dependencyManagement (#6686) 2022-09-20 17:48:52 -07:00
jamesmartinpp 2cfaf2d7ee
Propagate client span context in doOnRequest (#6621)
Copying the changes from Mike W. This fixes the problem where the jaxrs
and http client request spans are siblings instead of parent/child.

@mateuszrzeszutek please review

Co-authored-by: Trask Stalnaker <trask.stalnaker@gmail.com>
2022-09-20 17:47:46 -07:00
dependabot[bot] ea2ad4c4ea
Bump spotless-plugin-gradle from 6.9.0 to 6.11.0 in /conventions (#6687) 2022-09-20 16:55:34 -07:00
dependabot[bot] 53c9126d7c
Bump junit-bom from 5.9.0 to 5.9.1 in /conventions (#6688)
Bumps [junit-bom](https://github.com/junit-team/junit5) from 5.9.0 to
5.9.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/junit-team/junit5/releases">junit-bom's
releases</a>.</em></p>
<blockquote>
<p>JUnit 5.9.1 = Platform 1.9.1 + Jupiter 5.9.1 + Vintage 5.9.1</p>
<p>See <a
href="http://junit.org/junit5/docs/5.9.1/release-notes/">Release
Notes</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="732a5400f8"><code>732a540</code></a>
Release 5.9.1</li>
<li><a
href="88bf48d545"><code>88bf48d</code></a>
Prepare release notes for 5.9.1</li>
<li><a
href="d75e34d20f"><code>d75e34d</code></a>
Update scope for 5.9.1</li>
<li><a
href="9823f7329a"><code>9823f73</code></a>
Link to all 5.9 milestone pages</li>
<li><a
href="76719bb085"><code>76719bb</code></a>
Increase timeout for GraalVM test</li>
<li><a
href="2a809848e5"><code>2a80984</code></a>
Install GraalVM for main CI build on Linux</li>
<li><a
href="79f47f51aa"><code>79f47f5</code></a>
Refactor OpenTestReportGeneratingListener to work in native images</li>
<li><a
href="7229385d5e"><code>7229385</code></a>
Add failing integration test for execution on GraalVM native image</li>
<li><a
href="343170f314"><code>343170f</code></a>
Fix running tests in documentation from IntelliJ IDEA</li>
<li><a
href="352d06b3b2"><code>352d06b</code></a>
Attempt to stabilize test on Windows</li>
<li>Additional commits viewable in <a
href="https://github.com/junit-team/junit5/compare/r5.9.0...r5.9.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.junit:junit-bom&package-manager=gradle&previous-version=5.9.0&new-version=5.9.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-20 15:29:58 -07:00
dependabot[bot] 2894b2528d
Bump junit-bom from 5.9.0 to 5.9.1 in /gradle-plugins (#6683)
Bumps [junit-bom](https://github.com/junit-team/junit5) from 5.9.0 to
5.9.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/junit-team/junit5/releases">junit-bom's
releases</a>.</em></p>
<blockquote>
<p>JUnit 5.9.1 = Platform 1.9.1 + Jupiter 5.9.1 + Vintage 5.9.1</p>
<p>See <a
href="http://junit.org/junit5/docs/5.9.1/release-notes/">Release
Notes</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="732a5400f8"><code>732a540</code></a>
Release 5.9.1</li>
<li><a
href="88bf48d545"><code>88bf48d</code></a>
Prepare release notes for 5.9.1</li>
<li><a
href="d75e34d20f"><code>d75e34d</code></a>
Update scope for 5.9.1</li>
<li><a
href="9823f7329a"><code>9823f73</code></a>
Link to all 5.9 milestone pages</li>
<li><a
href="76719bb085"><code>76719bb</code></a>
Increase timeout for GraalVM test</li>
<li><a
href="2a809848e5"><code>2a80984</code></a>
Install GraalVM for main CI build on Linux</li>
<li><a
href="79f47f51aa"><code>79f47f5</code></a>
Refactor OpenTestReportGeneratingListener to work in native images</li>
<li><a
href="7229385d5e"><code>7229385</code></a>
Add failing integration test for execution on GraalVM native image</li>
<li><a
href="343170f314"><code>343170f</code></a>
Fix running tests in documentation from IntelliJ IDEA</li>
<li><a
href="352d06b3b2"><code>352d06b</code></a>
Attempt to stabilize test on Windows</li>
<li>Additional commits viewable in <a
href="https://github.com/junit-team/junit5/compare/r5.9.0...r5.9.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.junit:junit-bom&package-manager=gradle&previous-version=5.9.0&new-version=5.9.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-20 15:29:46 -07:00
Trask Stalnaker 2d79f7903c
Branch protection rules for dependabot (#6674) 2022-09-20 08:39:07 -07:00
dependabot[bot] 96ac5776f5
Bump com.diffplug.spotless from 6.9.0 to 6.11.0 in /conventions (#6660) 2022-09-19 17:32:46 -07:00
Trask Stalnaker 521075652e
Remove duplication (#6673)
Remove @jack-berg from triagers since now also under approvers.

Also let Intellij to format (wrap) the markdown.
2022-09-19 16:54:02 -07:00
dependabot[bot] 5ac41536d1
Bump byte-buddy-gradle-plugin from 1.12.10 to 1.12.16 in /conventions (#6671)
Bumps byte-buddy-gradle-plugin from 1.12.10 to 1.12.16.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=net.bytebuddy:byte-buddy-gradle-plugin&package-manager=gradle&previous-version=1.12.10&new-version=1.12.16)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 16:53:44 -07:00
dependabot[bot] 5f9235bd8e
Bump gradle-animalsniffer-plugin from 1.5.4 to 1.6.0 in /conventions (#6672)
Bumps gradle-animalsniffer-plugin from 1.5.4 to 1.6.0.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ru.vyarus:gradle-animalsniffer-plugin&package-manager=gradle&previous-version=1.5.4&new-version=1.6.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 16:53:32 -07:00
dependabot[bot] 00d8270f7b
Bump opentelemetry-proto from 0.17.0-alpha to 0.19.0-alpha in /dependencyManagement (#6655)
Bumps
[opentelemetry-proto](https://github.com/open-telemetry/opentelemetry-proto-java)
from 0.17.0-alpha to 0.19.0-alpha.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-proto-java/releases">opentelemetry-proto's
releases</a>.</em></p>
<blockquote>
<h2>Release v0.19.0-alpha</h2>
<p>Java Bindings for <a
href="https://github.com/open-telemetry/opentelemetry-proto/releases/tag/v0.19.0">OTLP
v0.19.0</a></p>
<h2>Release v0.18.0-alpha</h2>
<p>Java Bindings for <a
href="https://github.com/open-telemetry/opentelemetry-proto/releases/tag/v0.18.0">OTLP
v0.18.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/open-telemetry/opentelemetry-proto-java/commits">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.opentelemetry.proto:opentelemetry-proto&package-manager=gradle&previous-version=0.17.0-alpha&new-version=0.19.0-alpha)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Trask Stalnaker <trask.stalnaker@gmail.com>
2022-09-19 16:27:55 -07:00
dependabot[bot] de93a21477
Bump objenesis from 3.2 to 3.3 in /dependencyManagement (#6667)
Bumps [objenesis](https://github.com/easymock/objenesis) from 3.2 to
3.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/easymock/objenesis/releases">objenesis's
releases</a>.</em></p>
<blockquote>
<h2>3.3</h2>
<ul>
<li>migrate from TravisCI to GitHub Actions (<a
href="https://github-redirect.dependabot.com/easymock/objenesis/issues/88">#88</a>)</li>
<li><code>org.objenesis:objenesis-test</code> missing in Maven Central
(<a
href="https://github-redirect.dependabot.com/easymock/objenesis/issues/85">#85</a>)</li>
<li>added instructions for running Android TCK for Windows users (<a
href="https://github-redirect.dependabot.com/easymock/objenesis/issues/84">#84</a>)</li>
<li>Copyright and Owner is missing in license (<a
href="https://github-redirect.dependabot.com/easymock/objenesis/issues/83">#83</a>)</li>
<li>add Dependabot (<a
href="https://github-redirect.dependabot.com/easymock/objenesis/issues/77">#77</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="15c04843c5"><code>15c0484</code></a>
[maven-release-plugin] prepare release 3.3</li>
<li><a
href="6e6b3a9a3d"><code>6e6b3a9</code></a>
Add 3.3 release notes</li>
<li><a
href="29292d86a8"><code>29292d8</code></a>
Missing $ in the command</li>
<li><a
href="9dd5e8f7ad"><code>9dd5e8f</code></a>
We should not skip objenesis-test deployment since it's a test
dependency for...</li>
<li><a
href="fe1751a44e"><code>fe1751a</code></a>
Add modernizer</li>
<li><a
href="00bb6ff780"><code>00bb6ff</code></a>
Bump maven-remote-resources-plugin from 1.7.0 to 3.0.0</li>
<li><a
href="5a3a07ee12"><code>5a3a07e</code></a>
Add up to version 18</li>
<li><a
href="76af6a8120"><code>76af6a8</code></a>
New version of IntelliJ</li>
<li><a
href="1c05d97ecc"><code>1c05d97</code></a>
Remove the android module to let it compile on Java 9+</li>
<li><a
href="22371940cf"><code>2237194</code></a>
Bump junit5.version from 5.8.2 to 5.9.0</li>
<li>Additional commits viewable in <a
href="https://github.com/easymock/objenesis/compare/3.2...3.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.objenesis:objenesis&package-manager=gradle&previous-version=3.2&new-version=3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 16:27:27 -07:00
dependabot[bot] 97f2572bfd
Bump assertj-core from 3.22.0 to 3.23.1 in /conventions (#6670)
Bumps [assertj-core](https://github.com/assertj/assertj-core) from
3.22.0 to 3.23.1.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0256688fcf"><code>0256688</code></a>
[maven-release-plugin] prepare release assertj-core-3.23.1</li>
<li><a
href="6529933700"><code>6529933</code></a>
Downgrade <code>junit-jupiter</code> from 5.9.0-M1 to 5.8.2</li>
<li><a
href="d9cd2da03a"><code>d9cd2da</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li><a
href="6f19754e57"><code>6f19754</code></a>
[maven-release-plugin] prepare release assertj-core-3.23.0</li>
<li><a
href="c592c18a59"><code>c592c18</code></a>
Expose <code>ComparisonStrategy::areEqual</code> in
<code>AbstractAssert</code> (<a
href="https://github-redirect.dependabot.com/assertj/assertj-core/issues/2633">#2633</a>)</li>
<li><a
href="69c66a9bb6"><code>69c66a9</code></a>
Bump maven-invoker-plugin from 3.2.2 to 3.3.0 (<a
href="https://github-redirect.dependabot.com/assertj/assertj-core/issues/2636">#2636</a>)</li>
<li><a
href="795f5278be"><code>795f527</code></a>
Fix test</li>
<li><a
href="b44460623b"><code>b444606</code></a>
Bump hibernate-core from 6.0.1.Final to 6.0.2.Final (<a
href="https://github-redirect.dependabot.com/assertj/assertj-core/issues/2626">#2626</a>)</li>
<li><a
href="793241125e"><code>7932411</code></a>
Fix typos in Javadoc of ObjectEnumerableAssert (<a
href="https://github-redirect.dependabot.com/assertj/assertj-core/issues/2624">#2624</a>)</li>
<li><a
href="b746e6aeb4"><code>b746e6a</code></a>
[mvn] Update maven wrapper to 3.1.1 (<a
href="https://github-redirect.dependabot.com/assertj/assertj-core/issues/2622">#2622</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/assertj/assertj-core/compare/assertj-core-3.22.0...assertj-core-3.23.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.assertj:assertj-core&package-manager=gradle&previous-version=3.22.0&new-version=3.23.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 16:02:00 -07:00
dependabot[bot] 86c5c4d588
Bump assertj-core from 3.22.0 to 3.23.1 in /gradle-plugins (#6653)
Bumps [assertj-core](https://github.com/assertj/assertj-core) from
3.22.0 to 3.23.1.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0256688fcf"><code>0256688</code></a>
[maven-release-plugin] prepare release assertj-core-3.23.1</li>
<li><a
href="6529933700"><code>6529933</code></a>
Downgrade <code>junit-jupiter</code> from 5.9.0-M1 to 5.8.2</li>
<li><a
href="d9cd2da03a"><code>d9cd2da</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li><a
href="6f19754e57"><code>6f19754</code></a>
[maven-release-plugin] prepare release assertj-core-3.23.0</li>
<li><a
href="c592c18a59"><code>c592c18</code></a>
Expose <code>ComparisonStrategy::areEqual</code> in
<code>AbstractAssert</code> (<a
href="https://github-redirect.dependabot.com/assertj/assertj-core/issues/2633">#2633</a>)</li>
<li><a
href="69c66a9bb6"><code>69c66a9</code></a>
Bump maven-invoker-plugin from 3.2.2 to 3.3.0 (<a
href="https://github-redirect.dependabot.com/assertj/assertj-core/issues/2636">#2636</a>)</li>
<li><a
href="795f5278be"><code>795f527</code></a>
Fix test</li>
<li><a
href="b44460623b"><code>b444606</code></a>
Bump hibernate-core from 6.0.1.Final to 6.0.2.Final (<a
href="https://github-redirect.dependabot.com/assertj/assertj-core/issues/2626">#2626</a>)</li>
<li><a
href="793241125e"><code>7932411</code></a>
Fix typos in Javadoc of ObjectEnumerableAssert (<a
href="https://github-redirect.dependabot.com/assertj/assertj-core/issues/2624">#2624</a>)</li>
<li><a
href="b746e6aeb4"><code>b746e6a</code></a>
[mvn] Update maven wrapper to 3.1.1 (<a
href="https://github-redirect.dependabot.com/assertj/assertj-core/issues/2622">#2622</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/assertj/assertj-core/compare/assertj-core-3.22.0...assertj-core-3.23.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.assertj:assertj-core&package-manager=gradle&previous-version=3.22.0&new-version=3.23.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 13:58:29 -07:00
dependabot[bot] 8018026808
Bump groovyVersion from 4.0.4 to 4.0.5 in /dependencyManagement (#6654)
Bumps `groovyVersion` from 4.0.4 to 4.0.5.
Updates `groovy-bom` from 4.0.4 to 4.0.5
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/apache/groovy/commits">compare view</a></li>
</ul>
</details>
<br />

Updates `groovy` from 4.0.4 to 4.0.5
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/apache/groovy/commits">compare view</a></li>
</ul>
</details>
<br />

Updates `groovy-json` from 4.0.4 to 4.0.5
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/apache/groovy/commits">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 13:58:10 -07:00
dependabot[bot] 9b10956ade
Bump japicmp-gradle-plugin from 0.4.0 to 0.4.1 in /conventions (#6656)
Bumps japicmp-gradle-plugin from 0.4.0 to 0.4.1.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=me.champeau.gradle:japicmp-gradle-plugin&package-manager=gradle&previous-version=0.4.0&new-version=0.4.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 13:57:42 -07:00
dependabot[bot] 42ecfbd931
Bump byte-buddy-gradle-plugin from 1.12.10 to 1.12.16 in /gradle-plugins (#6657)
Bumps byte-buddy-gradle-plugin from 1.12.10 to 1.12.16.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=net.bytebuddy:byte-buddy-gradle-plugin&package-manager=gradle&previous-version=1.12.10&new-version=1.12.16)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 13:56:33 -07:00
dependabot[bot] 9bb8da1b5d
Bump nullaway from 0.9.9 to 0.10.1 in /dependencyManagement (#6659)
Bumps [nullaway](https://github.com/uber/NullAway) from 0.9.9 to 0.10.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/uber/NullAway/blob/master/CHANGELOG.md">nullaway's
changelog</a>.</em></p>
<blockquote>
<h2>Version 0.10.1</h2>
<p>This is a bug-fixing release for a crash introduced in 0.10.1 on
type.class
(for primitive type = boolean/int/void/etc.).</p>
<ul>
<li>Fix crash when querying null-markedness of primitive.class
expressions (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/654">#654</a>)</li>
<li>Fix for querying for generated code w/ primitive.class expressions.
(<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/655">#655</a>)</li>
</ul>
<h2>Version 0.10.0</h2>
<ul>
<li>Switch parameter overriding handler to use Nullness[] (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/648">#648</a>)
[performance opt!]</li>
<li>EXPERIMENTAL support for JSpecify's 0.3.0 <a
href="https://github.com/NullMarked"><code>@​NullMarked</code></a> and
<a
href="https://github.com/NullUnmarked"><code>@​NullUnmarked</code></a>
semantics
<ul>
<li>[JSpecify] Support <a
href="https://github.com/NullMarked"><code>@​NullMarked</code></a> on
methods. (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/644">#644</a>)</li>
<li>[JSpecify] Support <a
href="https://github.com/NullUnmarked"><code>@​NullUnmarked</code></a>.
(<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/651">#651</a>)</li>
<li>Allow AcknowledgeRestrictiveAnnotations to work on fields (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/652">#652</a>)</li>
</ul>
</li>
<li>Dependency Updates:
<ul>
<li>Update to WALA 1.5.8 (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/650">#650</a>)</li>
</ul>
</li>
<li>Build / CI tooling for NullAway itself:
<ul>
<li>Update to Gradle 7.5.1 (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/647">#647</a>)</li>
<li>Add Gradle versions plugin and update some &quot;safe&quot;
dependencies (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/649">#649</a>)</li>
</ul>
</li>
</ul>
<h2>Version 0.9.10</h2>
<ul>
<li>Improved support for library models on annotated code:
<ul>
<li>Make library models override annotations by default. (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/636">#636</a>)</li>
<li>Generalize handler APIs for argument nullability on (un-)annotated
code (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/639">#639</a>)
<ul>
<li>[Follow-up] Optimizations for parameter nullness handler /
overriding (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/646">#646</a>)</li>
</ul>
</li>
<li>Generalize handler APIs for return nullability on (un-)annotated
code (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/641">#641</a>)</li>
</ul>
</li>
<li>Support for specific libraries/APIs:
<ul>
<li>Add library model for Guava's Closer.register (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/632">#632</a>)</li>
<li>Support for Map.computeIfAbsent(...) (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/640">#640</a>)</li>
</ul>
</li>
<li>NullAwayInfer/Annotator data serialization support [experimental]
<ul>
<li>Augment error serializarion info (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/643">#643</a>)</li>
</ul>
</li>
<li>Dependency Updates:
<ul>
<li>Update to Checker Framework 3.24.0 (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/631">#631</a>)</li>
</ul>
</li>
<li>Fix javadoc and CONTRIBUTING.md typos (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/642">#642</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e2d82b1e78"><code>e2d82b1</code></a>
Prepare for release 0.10.1.</li>
<li><a
href="3d09158395"><code>3d09158</code></a>
Fix for querying for generated code w/ .class expressions. (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/655">#655</a>)</li>
<li><a
href="de1a12bfd9"><code>de1a12b</code></a>
Fix crash when querying null-markedness of $primitive.class expressions.
(<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/654">#654</a>)</li>
<li><a
href="99fc67b8c5"><code>99fc67b</code></a>
Prepare next development version.</li>
<li><a
href="f5439589fc"><code>f543958</code></a>
Prepare for release 0.10.0.</li>
<li><a
href="8f97e058bd"><code>8f97e05</code></a>
Allow AcknowledgeRestrictiveAnnotations to work on fields (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/652">#652</a>)</li>
<li><a
href="2d96d1d78b"><code>2d96d1d</code></a>
[JSpecify] Support <a
href="https://github.com/NullUnmarked"><code>@​NullUnmarked</code></a>.
(<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/651">#651</a>)</li>
<li><a
href="a5f56d3686"><code>a5f56d3</code></a>
Add Gradle versions plugin and update some &quot;safe&quot; dependencies
(<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/649">#649</a>)</li>
<li><a
href="c0fc4a9088"><code>c0fc4a9</code></a>
Update to WALA 1.5.8 (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/650">#650</a>)</li>
<li><a
href="3f6e0a5780"><code>3f6e0a5</code></a>
[JSpecify] Support <a
href="https://github.com/NullMarked"><code>@​NullMarked</code></a> on
methods. (<a
href="https://github-redirect.dependabot.com/uber/NullAway/issues/644">#644</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/uber/NullAway/compare/v0.9.9...v0.10.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.uber.nullaway:nullaway&package-manager=gradle&previous-version=0.9.9&new-version=0.10.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 13:55:47 -07:00
dependabot[bot] 778ee6b5e0
Bump byte-buddy-dep from 1.12.10 to 1.12.16 in /gradle-plugins (#6661)
Bumps [byte-buddy-dep](https://github.com/raphw/byte-buddy) from 1.12.10
to 1.12.16.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/releases">byte-buddy-dep's
releases</a>.</em></p>
<blockquote>
<h2>Byte Buddy 1.12.16</h2>
<ul>
<li>Fix Gradle release script to publish plugin.</li>
</ul>
<h2>Byte Buddy 1.12.15</h2>
<ul>
<li>Introduce ClassVisitorFactory which allows to translate to and from
class wrappers in a different ASM namespace.</li>
<li>Allow builders to change to ClassVisitors.</li>
<li>Add support for Android instrumentation from Gradle plugin.</li>
</ul>
<h2>Byte Buddy 1.12.14</h2>
<ul>
<li>Add <code>wrap</code> method to <code>DynamicType.Builder</code>
that allows for the representation of a dynamic type via a
<code>ClassVisitor</code>.</li>
<li>Add <code>ClassVisitorFactory</code> that allows to translate
between Byte Buddy's, the original, or other shaded representations of
ASM.</li>
<li>Fix visibility check for types in the default package.</li>
<li>Return correct value for types in the default package.</li>
</ul>
<h2>Byte Buddy 1.12.13</h2>
<ul>
<li>Avoid duplicate application of Byte Buddy Maven plugin.</li>
<li>Allow for class path discovery of <code>Plugin</code>s when using
Maven.</li>
<li>Fix build cache when using Byte Buddy Gradle plugin.</li>
<li>Allow <code>Plugin</code>s to define new types prior to
transformation.</li>
</ul>
<h2>Byte Buddy 1.12.12</h2>
<ul>
<li>Use correct annotation in Byte Buddy Gradle plugin.</li>
<li>Correctly resolve generified anonymous/local types that are declared
within a method.</li>
</ul>
<h2>Byte Buddy 1.12.11</h2>
<ul>
<li>Remove use of thread-local to guarantee Loom compatibility.</li>
<li>Allow usage of byte-buddy-parent as BOM for imports.</li>
<li>Add convenience for Maven to disable type validation on entry
point.</li>
<li>Allow Gradle plugin to consume pluginName property and discoverySet
to only load plugins in the plugin class loader.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md">byte-buddy-dep's
changelog</a>.</em></p>
<blockquote>
<h3>22. August 2022: version 1.12.16</h3>
<ul>
<li>Fix Gradle release script to publish plugin.</li>
</ul>
<h3>22. August 2022: version 1.12.15</h3>
<ul>
<li>Introduce <code>ClassVisitorFactory</code> which allows to translate
to and from class wrappers in a different ASM namespace.</li>
<li>Allow builders to change to <code>ClassVisitors</code>.</li>
<li>Add support for Android instrumentation from Gradle plugin.</li>
</ul>
<h3>22. August 2022: version 1.12.14</h3>
<ul>
<li>Add <code>wrap</code> method to <code>DynamicType.Builder</code>
that allows for the representation of a dynamic type via a
<code>ClassVisitor</code>.</li>
<li>Add <code>ClassVisitorFactory</code> that allows to translate
between Byte Buddy's, the original, or other shaded representations of
ASM.</li>
<li>Fix visibility check for types in the default package.</li>
<li>Return correct value for types in the default package.</li>
</ul>
<h3>1. August 2022: version 1.12.13</h3>
<ul>
<li>Avoid duplicate application of Byte Buddy Maven plugin.</li>
<li>Allow for class path discovery of <code>Plugin</code>s when using
Maven.</li>
<li>Fix build cache when using Byte Buddy Gradle plugin.</li>
<li>Allow <code>Plugin</code>s to define new types prior to
transformation.</li>
</ul>
<h3>25. June 2022: version 1.12.12</h3>
<ul>
<li>Use correct annotation in Byte Buddy Gradle plugin.</li>
<li>Correctly resolve generified anonymous/local types that are declared
within a method.</li>
</ul>
<h3>22. June 2022: version 1.12.11</h3>
<ul>
<li>Remove use of thread-local to guarantee Loom compatibility.</li>
<li>Allow usage of <em>byte-buddy-parent</em> as BOM for imports.</li>
<li>Add convenience for Maven to disable type validation on entry
point.</li>
<li>Allow Gradle plugin to consume <em>pluginName</em> property and
<em>discoverySet</em> to only load plugins in the plugin class
loader.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="d6b51d39b9"><code>d6b51d3</code></a>
[maven-release-plugin] prepare release byte-buddy-1.12.16</li>
<li><a
href="a0a1d5ca4d"><code>a0a1d5c</code></a>
[release] Remove unused dependencies.</li>
<li><a
href="94a2fc3542"><code>94a2fc3</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li><a
href="9c44201282"><code>9c44201</code></a>
[maven-release-plugin] prepare release byte-buddy-1.12.15</li>
<li><a
href="7e749c54f4"><code>7e749c5</code></a>
[release] Improve readme and trigger new release.</li>
<li><a
href="09beea98d2"><code>09beea9</code></a>
Add missing semicolon.</li>
<li><a
href="ac15bfc205"><code>ac15bfc</code></a>
Add missing javadoc.</li>
<li><a
href="583251b5cf"><code>583251b</code></a>
Remove obsolete class.</li>
<li><a
href="94d7602dec"><code>94d7602</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/raphw/byte-buddy/issues/1317">#1317</a>
from LikeTheSalad/master</li>
<li><a
href="e48c26b358"><code>e48c26b</code></a>
Creating parent dir from parent file</li>
<li>Additional commits viewable in <a
href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.12.10...byte-buddy-1.12.16">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=net.bytebuddy:byte-buddy-dep&package-manager=gradle&previous-version=1.12.10&new-version=1.12.16)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 13:55:07 -07:00
dependabot[bot] deed1ed1cf
Bump jmh-gradle-plugin from 0.6.6 to 0.6.7 in /conventions (#6662)
Bumps jmh-gradle-plugin from 0.6.6 to 0.6.7.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=me.champeau.jmh:jmh-gradle-plugin&package-manager=gradle&previous-version=0.6.6&new-version=0.6.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 13:54:55 -07:00
dependabot[bot] 224501f60f
Bump assertj-core from 3.22.0 to 3.23.1 in /dependencyManagement (#6664)
Bumps [assertj-core](https://github.com/assertj/assertj-core) from
3.22.0 to 3.23.1.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0256688fcf"><code>0256688</code></a>
[maven-release-plugin] prepare release assertj-core-3.23.1</li>
<li><a
href="6529933700"><code>6529933</code></a>
Downgrade <code>junit-jupiter</code> from 5.9.0-M1 to 5.8.2</li>
<li><a
href="d9cd2da03a"><code>d9cd2da</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li><a
href="6f19754e57"><code>6f19754</code></a>
[maven-release-plugin] prepare release assertj-core-3.23.0</li>
<li><a
href="c592c18a59"><code>c592c18</code></a>
Expose <code>ComparisonStrategy::areEqual</code> in
<code>AbstractAssert</code> (<a
href="https://github-redirect.dependabot.com/assertj/assertj-core/issues/2633">#2633</a>)</li>
<li><a
href="69c66a9bb6"><code>69c66a9</code></a>
Bump maven-invoker-plugin from 3.2.2 to 3.3.0 (<a
href="https://github-redirect.dependabot.com/assertj/assertj-core/issues/2636">#2636</a>)</li>
<li><a
href="795f5278be"><code>795f527</code></a>
Fix test</li>
<li><a
href="b44460623b"><code>b444606</code></a>
Bump hibernate-core from 6.0.1.Final to 6.0.2.Final (<a
href="https://github-redirect.dependabot.com/assertj/assertj-core/issues/2626">#2626</a>)</li>
<li><a
href="793241125e"><code>7932411</code></a>
Fix typos in Javadoc of ObjectEnumerableAssert (<a
href="https://github-redirect.dependabot.com/assertj/assertj-core/issues/2624">#2624</a>)</li>
<li><a
href="b746e6aeb4"><code>b746e6a</code></a>
[mvn] Update maven wrapper to 3.1.1 (<a
href="https://github-redirect.dependabot.com/assertj/assertj-core/issues/2622">#2622</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/assertj/assertj-core/compare/assertj-core-3.22.0...assertj-core-3.23.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.assertj:assertj-core&package-manager=gradle&previous-version=3.22.0&new-version=3.23.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 13:54:38 -07:00
dependabot[bot] 4ecfad8d85
Bump test-retry-gradle-plugin from 1.3.1 to 1.4.1 in /conventions (#6665)
Bumps test-retry-gradle-plugin from 1.3.1 to 1.4.1.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.gradle:test-retry-gradle-plugin&package-manager=gradle&previous-version=1.3.1&new-version=1.4.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 13:54:23 -07:00
dependabot[bot] 90637cc434
Bump spring-boot-dependencies from 2.7.2 to 2.7.3 in /dependencyManagement (#6666)
Bumps
[spring-boot-dependencies](https://github.com/spring-projects/spring-boot)
from 2.7.2 to 2.7.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/spring-projects/spring-boot/releases">spring-boot-dependencies's
releases</a>.</em></p>
<blockquote>
<h2>v2.7.3</h2>
<h2>🐞 Bug Fixes</h2>
<ul>
<li>Misleading error message when using JarMode Layertools and the
source is not an archive <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32097">#32097</a></li>
<li>ClassNotFoundException can be thrown for classes in nested jars when
under GC pressure <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32085">#32085</a></li>
<li>Flyway auto-configuration fails with Flyway 9 <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32034">#32034</a></li>
<li>BasicJsonParser does not protect against deeply nested maps <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32031">#32031</a></li>
<li>OptionalLiveReloadServer logs the wrong port number when it is
configured to use an ephemeral port <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31984">#31984</a></li>
<li>Servlet WebServerStartStopLifecycle doesn't set running to false on
stop <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31967">#31967</a></li>
<li>JUL-based logging performed during close of application context is
lost <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31963">#31963</a></li>
<li>The hash of spring-boot-jarmode-layertools.jar that's added to a fat
jar doesn't match the hash of the equivalent published artifact <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31949">#31949</a></li>
<li>management.endpoint.health.probes.add-additional-paths has no effect
when configuration properties have already created the liveness and/or
readiness groups <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31926">#31926</a></li>
<li>UnsupportedDataSourcePropertyException is thrown when attempting to
set jdbcUrl for C3P0 <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31921">#31921</a></li>
<li>Dev Tools restart failures caused by a too short quiet period are
hard to diagnose <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31906">#31906</a></li>
<li>HealthContributor beans managed by a CompositeHealthContributor are
recreated on each call <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31879">#31879</a></li>
<li>Dependency management for REST Assured is incomplete <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31877">#31877</a></li>
<li>Jar Handler never clears PROTOCOL_HANDLER system property <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31875">#31875</a></li>
<li>BasicJsonParser can fail with a timeout or stackoverflow with
malformed map JSON <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31873">#31873</a></li>
<li>BasicJsonParser can fail with a stackoverflow exception <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31871">#31871</a></li>
</ul>
<h2>📔 Documentation</h2>
<ul>
<li>Review Git contribution documentation <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32099">#32099</a></li>
<li>Documentation for Maven Plugin classifier has an unresolved external
reference <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32043">#32043</a></li>
<li>Update Static Content reference documentation to reflect the
DefaultServlet no longer being enabled by default <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32026">#32026</a></li>
<li>Example log output is out-of-date and inconsistent <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31987">#31987</a></li>
<li>Document that Undertow's record-request-start-time server option
must be enabled for %D to work in access logging <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31976">#31976</a></li>
<li>Update documentation on using H2C to consider running behind a proxy
that's performing TLS termination <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31974">#31974</a></li>
<li>Some properties in the Common Application Properties appendix have
no description <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31971">#31971</a></li>
<li>Fix links in documentations <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31951">#31951</a></li>
<li>External configuration documentation uses incorrect placeholder
syntax <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31943">#31943</a></li>
<li>server.reactive.session.cookie properties are not listed in the
application properties appendix <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31914">#31914</a></li>
<li>Remove documentation and metadata references to
ConfigFileApplicationListener <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31901">#31901</a></li>
<li>Metadata for 'spring.beaninfo.ignore' has incorrect SourceType <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31899">#31899</a></li>
<li>Remove reference to nitrite-spring-boot-starter <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31893">#31893</a></li>
<li>Remove reference to Azure Application Insights <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31890">#31890</a></li>
<li>Fix typos in code and documentation <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31865">#31865</a></li>
</ul>
<h2>🔨 Dependency Upgrades</h2>
<ul>
<li>Upgrade to Byte Buddy 1.12.13 <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32013">#32013</a></li>
<li>Upgrade to Couchbase Client 3.3.3 <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32014">#32014</a></li>
<li>Upgrade to Dependency Management Plugin 1.0.13.RELEASE <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32056">#32056</a></li>
<li>Upgrade to Dropwizard Metrics 4.2.11 <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32015">#32015</a></li>
<li>Upgrade to Embedded Mongo 3.4.8 <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32016">#32016</a></li>
<li>Upgrade to GraphQL Java 18.3 <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31945">#31945</a></li>
<li>Upgrade to Groovy 3.0.12 <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32017">#32017</a></li>
<li>Upgrade to Gson 2.9.1 <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32018">#32018</a></li>
<li>Upgrade to Hazelcast 5.1.3 <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32019">#32019</a></li>
<li>Upgrade to Hibernate Validator 6.2.4.Final <a
href="https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32020">#32020</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="bff9b3924f"><code>bff9b39</code></a>
Release v2.7.3</li>
<li><a
href="60e1cc510c"><code>60e1cc5</code></a>
Merge branch '2.6.x' into 2.7.x</li>
<li><a
href="13bd61b6fe"><code>13bd61b</code></a>
Revert nested jar fixes</li>
<li><a
href="bd74344025"><code>bd74344</code></a>
Revert &quot;Don't close jar files early&quot;</li>
<li><a
href="674022d401"><code>674022d</code></a>
Revert &quot;Don't close nested jars or wrapper when parent is
closed&quot;</li>
<li><a
href="3fcfcc4a3b"><code>3fcfcc4</code></a>
Merge branch '2.6.x' into 2.7.x</li>
<li><a
href="3b01325c6b"><code>3b01325</code></a>
Use asList consistently</li>
<li><a
href="ca63a6e9ad"><code>ca63a6e</code></a>
Merge branch '2.6.x' into 2.7.x</li>
<li><a
href="191593cf15"><code>191593c</code></a>
Review Git contribution documentation</li>
<li><a
href="1c6624db44"><code>1c6624d</code></a>
Merge branch '2.6.x' into 2.7.x</li>
<li>Additional commits viewable in <a
href="https://github.com/spring-projects/spring-boot/compare/v2.7.2...v2.7.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.springframework.boot:spring-boot-dependencies&package-manager=gradle&previous-version=2.7.2&new-version=2.7.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-19 13:54:04 -07:00
Trask Stalnaker 6e649d36c3
More dependabot (#6647)
Part of #6645
2022-09-19 11:13:31 -07:00
Trask Stalnaker 08ba0a9ddd
Create website PR on release (#6650) 2022-09-19 08:39:27 -07:00
Trask Stalnaker fc0d94ce4a
Update squash merge message setting (#6649)
Resolves #6624

I've updated the setting already
2022-09-19 08:39:11 -07:00
Trask Stalnaker 5224194740
Move versions to dependencyManagement (#6648)
Part of #6645
2022-09-19 12:05:06 +03:00
Trask Stalnaker 2f344d3689
Fix new properties (#6633)
Co-authored-by: Lauri Tulmin <ltulmin@splunk.com>
2022-09-18 13:59:51 +03:00
Lauri Tulmin 1cd3925e69
Enable armeria http client callback tests for latest deps test (#6632) 2022-09-18 12:35:41 +03:00
jason plumb e51eda26b6
Mitigates GHSA-9w3m-gqgf-c4p9 (#6642) 2022-09-18 12:34:32 +03:00
Mateusz Rzeszutek c88dda4699
Fix jApiCmp files (#6641) 2022-09-16 13:19:03 +03:00
Trask Stalnaker 6c9e88e78a
Fix at mention in operator pr (#6630) 2022-09-15 13:38:31 +03:00
Trask Stalnaker ba9876eae1
Fix operator pull request (#6629) 2022-09-14 17:58:38 -07:00
jack-berg 6b607c1e18
Add resource providers (#6574)
* Add resource providers

* Use autoservice annotation
2022-09-14 15:45:24 -07:00