Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 1, 2024

Bumps the dashboard-production-dependencies group with 6 updates in the /dashboard directory:

Package From To
org.springframework.boot:spring-boot-starter-parent 3.2.3 3.3.4
redis.clients:jedis 5.1.1 5.2.0
com.google.auto.value:auto-value 1.10.4 1.11.0
joda-time:joda-time 2.12.7 2.13.0
com.google.guava:guava 33.0.0-jre 33.3.1-jre
com.fasterxml.jackson.datatype:jackson-datatype-joda 2.16.1 2.18.0

Updates org.springframework.boot:spring-boot-starter-parent from 3.2.3 to 3.3.4

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v3.3.4

🐞 Bug Fixes

  • management.health.db.ignore-routing-datasources=true has no effect when an AbstractRoutingDataSource has been wrapped #42322
  • Missing details in OAuth2ClientProperties validation error message #42279
  • FileNotFoundException from unused mis-configured SSL bundles #42169
  • ZipkinHttpClientSender fails with "Failed to introspect Class" when spring-web is not on the classpath #42161
  • @RestartScope can cause 'Recursive update' exceptions when used with container beans #42107
  • JarLauncher fails to load large jar files #42079
  • PropertiesMigrationListener wrongly reports property as deprecated when has group #42071
  • Using an empty string MongoDB 'replica-set-name' property will result in ClusterType=REPLICA_SET #42059
  • Default Logback config uses deprecated "converterClass" attribute #42006

📔 Documentation

  • Document that spring.jmx.enabled is not intended for third-party libraries #42285
  • Update link to Log4j2 system properties #42263
  • Links to GraphQL in the reference guide redirect to the root instead of specific sections #42208
  • Syntax error in "Receive a message reactively section" of the reference guide #42200
  • Deprecation reason for the autotime enabled, percentiles, and percentiles-historgram properties is confusing #42193
  • Replace RFC 7807 by RFC 9457 in property documentation #42190
  • Document that configuration property binding to a Kotlin value class with a default is not supported #42176
  • Update documentation to reflect new no handler found exception behavior #42167
  • Polish configuration property reference #42165
  • Remove link to “Converting a Spring Boot JAR Application to a WAR” as the guide is no longer available #42111
  • Fix StatsD link typo on Metrics documentation page #42109
  • Improve docker without buildpacks documentation #42106
  • Improve documentation in "Command-line Completion" #42103
  • Kotlin code examples are missing from the Testing section #42094
  • Fix incorrect command in Docker configuration for Colima #42078
  • Gradle Plugin AOT documentation has sample error #42046

🔨 Dependency Upgrades

  • Upgrade to Groovy 4.0.23 #42292
  • Upgrade to Hibernate 6.5.3.Final #42365
  • Upgrade to Infinispan 15.0.8.Final #42253
  • Upgrade to Jakarta Servlet JSP JSTL 3.0.2 #42254
  • Upgrade to Jetty 12.0.13 #42256
  • Upgrade to Jetty Reactive HTTPClient 4.0.7 #42255
  • Upgrade to Logback 1.5.8 #42257
  • Upgrade to Micrometer 1.13.4 #42129
  • Upgrade to Micrometer Tracing 1.3.4 #42130
  • Upgrade to MSSQL JDBC 12.6.4.jre11 #42258
  • Upgrade to Native Build Tools Plugin 0.10.3 #42205
  • Upgrade to Netty 4.1.113.Final #42259
  • Upgrade to Postgresql 42.7.4 #42260
  • Upgrade to R2DBC MariaDB 1.2.2 #42326
  • Upgrade to Reactor Bom 2023.0.10 #42131
  • Upgrade to SendGrid 4.10.3 #42366

... (truncated)

Commits
  • 8e9dc7b Release v3.3.4
  • 4e860f1 Merge branch '3.2.x' into 3.3.x
  • d137191 Next development version (v3.2.11-SNAPSHOT)
  • 97dd01e Upgrade to SendGrid 4.10.3
  • 1b3b3aa Upgrade to Hibernate 6.5.3.Final
  • c2adc3b Upgrade to Zipkin Reporter 3.4.2
  • 0271b24 Merge branch '3.2.x' into 3.3.x
  • ae8315e Use Liberica for Java 23 CI
  • 4956990 Merge branch '3.2.x' into 3.3.x
  • f9379f4 Apply nohttp check per-project rather than at root
  • Additional commits viewable in compare view

Updates redis.clients:jedis from 5.1.1 to 5.2.0

Release notes

Sourced from redis.clients:jedis's releases.

5.2.0 GA

Enhanced Client-side caching

We are happy to announce that improved server-assisted, client-side caching is now generally available! Special thanks to all our beta testers for their valuable feedback, which helped us refine and improve the initial implementation.

Client-side caching is supported exclusively with the RESP3 protocol with Redis >= 7.4 and is available in UnifiedJedis, JedisPooled, and JedisCluster and other classes.

How to try Client-Side Caching

  1. Install Jedis 5.2.0
  2. Use the following code example to get started:
public class CSCExampleTest {
  public static void main() {
HostAndPort node = HostAndPort.from("localhost:6379");
JedisClientConfig clientConfig = DefaultJedisClientConfig.builder()
    .resp3()                // RESP3 protocol is required for client-side caching
    //.user("myuser")       // Redis server username (optional)
    //.password("mypass")   // Redis user's password (optional)
    .build();
CacheConfig cacheConfig = getCacheConfig();
Cache cache = CacheFactory.getCache(cacheConfig);
try (UnifiedJedis client = new UnifiedJedis(node, clientConfig, cache)) {
client.set("foo", "bar");
client.get("foo");
client.get("foo"); // Cache hit
System.out.println("Cache size: " + cache.getSize()); // 1
System.out.println(cache.getStats().toString());
//Let's change the value of "foo" to invalidate the value stored in the local cache
client.mset("foo", "new_value", "ignore_me:1", "another_value");
Thread.sleep(1000); // wait for the cache invalidation to happen
System.out.println(client.get("foo")); // Cache miss
System.out.println(cache.getStats().toString());
client.get("ignore_me:1"); // Client will ignore this key
System.out.println("Cache size: " + cache.getSize()); // still 1
// check the cache stats
System.out.println(cache.getStats().toString());
} catch (InterruptedException e) {
throw new RuntimeException(e);
}

</tr></table>

... (truncated)

Commits

Updates com.google.auto.value:auto-value from 1.10.4 to 1.11.0

Release notes

Sourced from com.google.auto.value:auto-value's releases.

AutoValue 1.11.0

What's Changed

  • AutoValue (including AutoBuilder) no longer bundles the Kotlin metadata API. This may require adding an explicit dependency on org.jetbrains.kotlinx:kotlinx-metadata-jvm:0.9.0 or org.jetbrains.kotlin:kotlin-metadata-jvm:2.0.0 to client code that uses AutoBuilder to build Kotlin classes. The metadata API has changed from kotlinx.metadata to kotlin.metadata, but AutoBuilder uses reflection to function with either. (260b61ec7)
  • Support for generating Java 7 code has been removed from AutoValue, AutoAnnotation, and AutoBuilder. You must be on at least Java 8, or an Android version with desugaring that allows it to pass for Java 8. 1.10.4 is the last AutoValue version with support for Java 7. (b9142b7cd)
  • AutoBuilder now reports an error if it encounters a @Nullable primitive parameter. Primitive types cannot be null, and should not be annotated for nullness. (7cbdeb43b)
  • Annotations on type parameters, like abstract @Nullable T foo(), are now better propagated to fields and constructor parameters. (92d881ed9)
  • The generated toBuilder() method now says new AutoValue_Foo.Builder(this) rather than just new Builder(this), to do the right thing if an extension generates its own subclass of Builder. (324470ba2)
  • The "copy constructor" in a generated Builder is no longer private. (6730615c9)
  • Added support for extending AutoValue.Builder with abstract methods. (7d4b020dd)
  • The annotation processors now support all kinds of resource URLs when loading template resources. This change only affects the case where the AutoValue (etc) processors are being invoked in an unusual environment, for example from a GraalVM app. It does not affect code that is merely being compiled for such an environment. (80b0ada75)

Full Changelog: google/auto@auto-value-1.10.4...auto-value-1.11.0

Commits
  • 5e02d64 Set version number for auto-value-parent to 1.11.0.
  • 80b0ada Support all kinds of resource URLs when loading template resources.
  • 260b61e Use reflection to avoid referencing the Kotlin metadata API directly.
  • 76be89a Bump org.apache.maven.plugins:maven-invoker-plugin from 3.6.1 to 3.7.0 in /fa...
  • c11484e Bump org.apache.maven.plugins:maven-invoker-plugin from 3.6.1 to 3.7.0 in /value
  • b21d69d Bump kotlin.version from 1.9.24 to 2.0.0 in /value
  • e55e60a Update AutoValue to reflect recent Kotlin Metadata API changes.
  • 29f739b Bump actions/checkout from 4.1.5 to 4.1.6
  • 199a727 Bump kotlin.version from 1.9.23 to 1.9.24 in /value
  • f2b22e3 Bump actions/checkout from 4.1.4 to 4.1.5
  • Additional commits viewable in compare view

Updates joda-time:joda-time from 2.12.7 to 2.13.0

Release notes

Sourced from joda-time:joda-time's releases.

Release v2.13.0

See the change notes for more information.

What's Changed

New Contributors

Full Changelog: JodaOrg/joda-time@v2.12.7...v2.13.0

Commits

Updates com.google.guava:guava from 33.0.0-jre to 33.3.1-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.3.1

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.3.1-jre</version>
  <!-- or, for Android: -->
  <version>33.3.1-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

33.3.0

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.3.0-jre</version>
  <!-- or, for Android: -->
  <version>33.3.0-android</version>
</dependency>

... (truncated)

Commits

Updates com.fasterxml.jackson.datatype:jackson-datatype-joda from 2.16.1 to 2.18.0

Commits
  • 39c42cd Merge branch '2.18' of github.com:FasterXML/jackson-datatype-joda into 2.18
  • 3b2b298 [maven-release-plugin] prepare release jackson-datatype-joda-2.18.0
  • 388117a Prepare for 2.18.0 release
  • d718ec2 Bump actions/setup-java from 4.2.1 to 4.2.2 in the github-actions group (#144)
  • 69ed1ff Back to snapshot
  • 96a9693 [maven-release-plugin] prepare for next development iteration
  • 1d52cdb [maven-release-plugin] prepare release jackson-datatype-joda-2.18.0-rc1
  • 74de7f0 Prepare for 2.18.0-rc1
  • b015dde To 2.18.0-rc1-SNAPSHOT
  • 3cbd777 Merge branch '2.17' into 2.18
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ith 6 updates

Bumps the dashboard-production-dependencies group with 6 updates in the /dashboard directory:

| Package | From | To |
| --- | --- | --- |
| [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `3.2.3` | `3.3.4` |
| [redis.clients:jedis](https://github.com/redis/jedis) | `5.1.1` | `5.2.0` |
| [com.google.auto.value:auto-value](https://github.com/google/auto) | `1.10.4` | `1.11.0` |
| [joda-time:joda-time](https://github.com/JodaOrg/joda-time) | `2.12.7` | `2.13.0` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.0.0-jre` | `33.3.1-jre` |
| [com.fasterxml.jackson.datatype:jackson-datatype-joda](https://github.com/FasterXML/jackson-datatype-joda) | `2.16.1` | `2.18.0` |



Updates `org.springframework.boot:spring-boot-starter-parent` from 3.2.3 to 3.3.4
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.2.3...v3.3.4)

Updates `redis.clients:jedis` from 5.1.1 to 5.2.0
- [Release notes](https://github.com/redis/jedis/releases)
- [Commits](redis/jedis@v5.1.1...v5.2.0)

Updates `com.google.auto.value:auto-value` from 1.10.4 to 1.11.0
- [Release notes](https://github.com/google/auto/releases)
- [Commits](google/auto@auto-value-1.10.4...auto-value-1.11.0)

Updates `joda-time:joda-time` from 2.12.7 to 2.13.0
- [Release notes](https://github.com/JodaOrg/joda-time/releases)
- [Changelog](https://github.com/JodaOrg/joda-time/blob/main/RELEASE-NOTES.txt)
- [Commits](JodaOrg/joda-time@v2.12.7...v2.13.0)

Updates `com.google.guava:guava` from 33.0.0-jre to 33.3.1-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.fasterxml.jackson.datatype:jackson-datatype-joda` from 2.16.1 to 2.18.0
- [Commits](FasterXML/jackson-datatype-joda@jackson-datatype-joda-2.16.1...jackson-datatype-joda-2.18.0)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dashboard-production-dependencies
- dependency-name: redis.clients:jedis
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dashboard-production-dependencies
- dependency-name: com.google.auto.value:auto-value
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dashboard-production-dependencies
- dependency-name: joda-time:joda-time
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dashboard-production-dependencies
- dependency-name: com.google.guava:guava
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dashboard-production-dependencies
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-joda
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dashboard-production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Oct 1, 2024
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 1, 2024

Superseded by #26.

@dependabot dependabot bot closed this Nov 1, 2024
@dependabot dependabot bot deleted the dependabot/maven/dashboard/dashboard-production-dependencies-9d9492182d branch November 1, 2024 03:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants