Bump the dashboard-production-dependencies group across 1 directory with 6 updates #26

dependabot · 2024-11-01T03:43:29Z

Bumps the dashboard-production-dependencies group with 6 updates in the /dashboard directory:

Package	From	To
org.springframework.boot:spring-boot-starter-parent	`3.2.3`	`3.3.5`
redis.clients:jedis	`5.1.1`	`5.2.0`
com.google.auto.value:auto-value	`1.10.4`	`1.11.0`
joda-time:joda-time	`2.12.7`	`2.13.0`
com.google.guava:guava	`33.0.0-jre`	`33.3.1-jre`
com.fasterxml.jackson.datatype:jackson-datatype-joda	`2.16.1`	`2.18.1`

Updates org.springframework.boot:spring-boot-starter-parent from 3.2.3 to 3.3.5

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v3.3.5

🐞 Bug Fixes

Running mvn spring-boot:run with classpaths that exceeds Windows' length limits leaves temporary files #42841

Report produced by ConditionReportApplicationContextFailureProcessor is always empty in a failed test #42785

Case-insensitive comparisons may be adversely affected by the user's locale #42735

DataSourceProperties#driverClassIsLoadable should not print a stacktrace to the error stream when it fails #42683

Some @ControllerEndpoint and @RestControllerEndpoint infrastructure remains undeprecated #42498

Auto-configuration for Rabbit Streams doesn't consider RabbitConnectionDetails #42490

ClassNotFoundException is thrown when loading protocol resolvers from ForkJoinPool task #42468

ActiveMQ Artemis Connection Factory creation fails in native image #42421

Duplicate meter binding when context contains multiple registries, none are primary, and one or more is a composite #42397

📔 Documentation

Document that embedded Tomcat must be at least 10.1.25 #42849

Fix systemd example configuration #42805

Document that the exact behavior of the maximum HTTP request header size property is server-specific #42789

Clarify why @Primary is recommended when defining your own ObjectMapper that replaces JacksonAutoConfiguration's #42787

Polish javadoc for Binder#bindOrCreate(String, Class) #42778

Document that Tomcat's maxQueueCapacity need to be greater than 0 #42726

Remove stale link to jar-to-war getting started guide #42723

Fix typos and formatting errors in documentation #42718

Fix case used for examples in "Sanitize Sensitive Values" #42702

Fix Regex javadoc links #42685

Document how Map properties are bound from environment variables #42672

Improve classpath index documentation for reproducible builds #42643

Remove links to Spring Data GemFire #42596

Order alphabetically the sections in Common Application Properties #42520

Improve the javadoc describing when @ConditionalOn(Missing)Bean will infer the type to match #42505

Document how to handle MANIFEST.MF in native image with Maven #42476

Fix links to Micrometer reference doc #42467

Polish documentation #42454

Add Javadoc since for PrometheusScrapeEndpoint(PrometheusRegistry, Properties) #42406

Remove note about graceful shutdown with Tomcat requiring 9.0.33 or later as we now require 10.1.x #42382

Document support for Java 23 #42380

Improve documentation for CycloneDX integration #41506

🔨 Dependency Upgrades

Prohibit upgrades to Undertow 2.3.18.Final #42756

Upgrade to CycloneDX Maven Plugin 2.8.2 #42631

Upgrade to GraphQL Java 22.3 #42757

Upgrade to Infinispan 15.0.10.Final #42632

Upgrade to Jaybird 5.0.6.java11 #42752

Upgrade to Jersey 3.1.9 #42633

Upgrade to Jetty 12.0.14 #42635

Upgrade to Jetty Reactive HTTPClient 4.0.8 #42634

Upgrade to jOOQ 3.19.14 #42818

Upgrade to JUnit Jupiter 5.10.5 #42637

... (truncated)

Commits

2316ce6 Release v3.3.5
02f6eb4 Merge branch '3.2.x' into 3.3.x
728deaf Next development version (v3.2.12-SNAPSHOT)
9ca6667 Merge branch '3.2.x' into 3.3.x
9858b4b Fix release script
2bf3e5a Document that embedded Tomcat must be 10.1.25 or later
13e75dc Upgrade to Spring Integration 6.3.5
131bbaf Merge branch '3.2.x' into 3.3.x
83a3212 Use github.ref_name when deploying snapshots
2d91385 Merge branch '3.2.x' into 3.3.x
Additional commits viewable in compare view

Updates redis.clients:jedis from 5.1.1 to 5.2.0

Release notes

Sourced from redis.clients:jedis's releases.

5.2.0 GA

Enhanced Client-side caching

We are happy to announce that improved server-assisted, client-side caching is now generally available! Special thanks to all our beta testers for their valuable feedback, which helped us refine and improve the initial implementation.

Client-side caching is supported exclusively with the RESP3 protocol with Redis >= 7.4 and is available in UnifiedJedis, JedisPooled, and JedisCluster and other classes.

How to try Client-Side Caching

Install Jedis 5.2.0
Use the following code example to get started:

public class CSCExampleTest {
  public static void main() {
HostAndPort node = HostAndPort.from(&quot;localhost:6379&quot;);
JedisClientConfig clientConfig = DefaultJedisClientConfig.builder()
    .resp3()                // RESP3 protocol is required for client-side caching
    //.user(&quot;myuser&quot;)       // Redis server username (optional)
    //.password(&quot;mypass&quot;)   // Redis user's password (optional)
    .build();
CacheConfig cacheConfig = getCacheConfig();
Cache cache = CacheFactory.getCache(cacheConfig);
try (UnifiedJedis client = new UnifiedJedis(node, clientConfig, cache)) {
client.set(&quot;foo&quot;, &quot;bar&quot;);
client.get(&quot;foo&quot;);
client.get(&quot;foo&quot;); // Cache hit
System.out.println(&quot;Cache size: &quot; + cache.getSize()); // 1
System.out.println(cache.getStats().toString());
//Let's change the value of &quot;foo&quot; to invalidate the value stored in the local cache
client.mset(&quot;foo&quot;, &quot;new_value&quot;, &quot;ignore_me:1&quot;, &quot;another_value&quot;);
Thread.sleep(1000); // wait for the cache invalidation to happen
System.out.println(client.get(&quot;foo&quot;)); // Cache miss
System.out.println(cache.getStats().toString());
client.get(&quot;ignore_me:1&quot;); // Client will ignore this key
System.out.println(&quot;Cache size: &quot; + cache.getSize()); // still 1
// check the cache stats
System.out.println(cache.getStats().toString());
} catch (InterruptedException e) {
throw new RuntimeException(e);
}

</tr></table>

... (truncated)

Commits

5442642 Support Server-assisted Client-side Caching (#3757)
d22df4b Improve QueryRangeExample and QueryGeoExample (#3970)
251831c Deprecate Triggers and Functions feature (#3968)
cc8c8ce DOC-4262 geo query examples (#3966)
43dd286 DOC-4244 added range query examples (#3965)
98a37e9 DOC-4296 added aggregation query examples (#3967)
8094063 DOC-4202 exact match search examples (#3964)
5f9c909 DOC-4252 full-text examples (#3963)
51e4f31 Polish #3304
1683255 Bump org.apache.httpcomponents.client5:httpclient5-fluent from 5.3.1 to 5.4 (...
Additional commits viewable in compare view

Updates com.google.auto.value:auto-value from 1.10.4 to 1.11.0

Release notes

Sourced from com.google.auto.value:auto-value's releases.

AutoValue 1.11.0

What's Changed

AutoValue (including AutoBuilder) no longer bundles the Kotlin metadata API. This may require adding an explicit dependency on org.jetbrains.kotlinx:kotlinx-metadata-jvm:0.9.0 or org.jetbrains.kotlin:kotlin-metadata-jvm:2.0.0 to client code that uses AutoBuilder to build Kotlin classes. The metadata API has changed from kotlinx.metadata to kotlin.metadata, but AutoBuilder uses reflection to function with either. (260b61ec7)

Support for generating Java 7 code has been removed from AutoValue, AutoAnnotation, and AutoBuilder. You must be on at least Java 8, or an Android version with desugaring that allows it to pass for Java 8. 1.10.4 is the last AutoValue version with support for Java 7. (b9142b7cd)

AutoBuilder now reports an error if it encounters a @Nullable primitive parameter. Primitive types cannot be null, and should not be annotated for nullness. (7cbdeb43b)

Annotations on type parameters, like abstract @Nullable T foo(), are now better propagated to fields and constructor parameters. (92d881ed9)

The generated toBuilder() method now says new AutoValue_Foo.Builder(this) rather than just new Builder(this), to do the right thing if an extension generates its own subclass of Builder. (324470ba2)

The "copy constructor" in a generated Builder is no longer private. (6730615c9)

Added support for extending AutoValue.Builder with abstract methods. (7d4b020dd)

The annotation processors now support all kinds of resource URLs when loading template resources. This change only affects the case where the AutoValue (etc) processors are being invoked in an unusual environment, for example from a GraalVM app. It does not affect code that is merely being compiled for such an environment. (80b0ada75)

Full Changelog: google/auto@auto-value-1.10.4...auto-value-1.11.0

Commits

5e02d64 Set version number for auto-value-parent to 1.11.0.
80b0ada Support all kinds of resource URLs when loading template resources.
260b61e Use reflection to avoid referencing the Kotlin metadata API directly.
76be89a Bump org.apache.maven.plugins:maven-invoker-plugin from 3.6.1 to 3.7.0 in /fa...
c11484e Bump org.apache.maven.plugins:maven-invoker-plugin from 3.6.1 to 3.7.0 in /value
b21d69d Bump kotlin.version from 1.9.24 to 2.0.0 in /value
e55e60a Update AutoValue to reflect recent Kotlin Metadata API changes.
29f739b Bump actions/checkout from 4.1.5 to 4.1.6
199a727 Bump kotlin.version from 1.9.23 to 1.9.24 in /value
f2b22e3 Bump actions/checkout from 4.1.4 to 4.1.5
Additional commits viewable in compare view

Updates joda-time:joda-time from 2.12.7 to 2.13.0

Release notes

Sourced from joda-time:joda-time's releases.

Release v2.13.0

See the change notes for more information.

What's Changed

Make ConverterManager.getInstance() init thread-safe. by @cpovirk in JodaOrg/joda-time#776

Add website page about secutity/CVEs by @jodastephen in JodaOrg/joda-time#781

fix: include native-image files correctly by @klopfdreh in JodaOrg/joda-time#784

Enhance TZDB compiler to better match spec by @jodastephen in JodaOrg/joda-time#786

Update GitHub actions to latest versions by @jodastephen in JodaOrg/joda-time#788

Fix TZDB compiler %z parsing by @jodastephen in JodaOrg/joda-time#787

Update tzdb handling by @jodastephen in JodaOrg/joda-time#789

Update time zone data to 2024bgtz by @github-actions in JodaOrg/joda-time#790

New Contributors

@cpovirk made their first contribution in JodaOrg/joda-time#776

@klopfdreh made their first contribution in JodaOrg/joda-time#784

Full Changelog: JodaOrg/joda-time@v2.12.7...v2.13.0

Commits

0e45c95 Release v2.13.0
4d2a899 Update time zone data to 2024bgtz (#790)
f38a08e Update tzdb handling (#789)
54b3d1c Fix TZDB compiler %z parsing (#787)
0a264f1 Update GitHub actions to latest versions (#788)
2e9d255 Enhance TZDB compiler to better match spec (#786)
038646b Include native-image files correctly (#784)
4a1402a Add website page about secutity/CVEs (#781)
34197d2 Make ConverterManager.getInstance() init thread-safe. (#776)
See full diff in compare view

Updates com.google.guava:guava from 33.0.0-jre to 33.3.1-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.3.1

Maven
<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.3.1-jre</version>
  
  <version>33.3.1-android</version>
</dependency>
Jar files

33.3.1-jre.jar

33.3.1-android.jar

Guava requires one runtime dependency, which you can download here:

failureaccess-1.0.1.jar

Javadoc

33.3.1-jre

33.3.1-android

JDiff

33.3.1-jre vs. 33.3.0-jre

33.3.1-android vs. 33.3.0-android

33.3.1-android vs. 33.3.1-jre

Changelog

Added j2objc-annotations to the Gradle runtime classpath to stop producing an Android Gradle Plugin error. (a3b51888c2)

33.3.0

Maven
<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.3.0-jre</version>
  
  <version>33.3.0-android</version>
</dependency>

... (truncated)

Commits

See full diff in compare view

Updates com.fasterxml.jackson.datatype:jackson-datatype-joda from 2.16.1 to 2.18.1

Commits

49ad7fb [maven-release-plugin] prepare release jackson-datatype-joda-2.18.1
63f8138 Prep for 2.18.1 release
68bf3d1 Back to snapshot dep
ad2c89c [maven-release-plugin] prepare for next development iteration
39c42cd Merge branch '2.18' of github.com:FasterXML/jackson-datatype-joda into 2.18
3b2b298 [maven-release-plugin] prepare release jackson-datatype-joda-2.18.0
388117a Prepare for 2.18.0 release
d718ec2 Bump actions/setup-java from 4.2.1 to 4.2.2 in the github-actions group (#144)
69ed1ff Back to snapshot
96a9693 [maven-release-plugin] prepare for next development iteration
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ith 6 updates Bumps the dashboard-production-dependencies group with 6 updates in the /dashboard directory: | Package | From | To | | --- | --- | --- | | [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `3.2.3` | `3.3.5` | | [redis.clients:jedis](https://github.com/redis/jedis) | `5.1.1` | `5.2.0` | | [com.google.auto.value:auto-value](https://github.com/google/auto) | `1.10.4` | `1.11.0` | | [joda-time:joda-time](https://github.com/JodaOrg/joda-time) | `2.12.7` | `2.13.0` | | [com.google.guava:guava](https://github.com/google/guava) | `33.0.0-jre` | `33.3.1-jre` | | [com.fasterxml.jackson.datatype:jackson-datatype-joda](https://github.com/FasterXML/jackson-datatype-joda) | `2.16.1` | `2.18.1` | Updates `org.springframework.boot:spring-boot-starter-parent` from 3.2.3 to 3.3.5 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.2.3...v3.3.5) Updates `redis.clients:jedis` from 5.1.1 to 5.2.0 - [Release notes](https://github.com/redis/jedis/releases) - [Commits](redis/jedis@v5.1.1...v5.2.0) Updates `com.google.auto.value:auto-value` from 1.10.4 to 1.11.0 - [Release notes](https://github.com/google/auto/releases) - [Commits](google/auto@auto-value-1.10.4...auto-value-1.11.0) Updates `joda-time:joda-time` from 2.12.7 to 2.13.0 - [Release notes](https://github.com/JodaOrg/joda-time/releases) - [Changelog](https://github.com/JodaOrg/joda-time/blob/main/RELEASE-NOTES.txt) - [Commits](JodaOrg/joda-time@v2.12.7...v2.13.0) Updates `com.google.guava:guava` from 33.0.0-jre to 33.3.1-jre - [Release notes](https://github.com/google/guava/releases) - [Commits](https://github.com/google/guava/commits) Updates `com.fasterxml.jackson.datatype:jackson-datatype-joda` from 2.16.1 to 2.18.1 - [Commits](FasterXML/jackson-datatype-joda@jackson-datatype-joda-2.16.1...jackson-datatype-joda-2.18.1) --- updated-dependencies: - dependency-name: org.springframework.boot:spring-boot-starter-parent dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-production-dependencies - dependency-name: redis.clients:jedis dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-production-dependencies - dependency-name: com.google.auto.value:auto-value dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-production-dependencies - dependency-name: joda-time:joda-time dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-production-dependencies - dependency-name: com.google.guava:guava dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-production-dependencies - dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-joda dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2024-12-01T03:40:56Z

Superseded by #28.

dependabot bot added the dependencies Pull requests that update a dependency file label Nov 1, 2024

dependabot bot mentioned this pull request Nov 1, 2024

Bump the dashboard-production-dependencies group across 1 directory with 6 updates #23

Closed

dependabot bot closed this Dec 1, 2024

dependabot bot deleted the dependabot/maven/dashboard/dashboard-production-dependencies-e5fb7d7364 branch December 1, 2024 03:40

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the dashboard-production-dependencies group across 1 directory with 6 updates #26

Bump the dashboard-production-dependencies group across 1 directory with 6 updates #26

Uh oh!

dependabot bot commented on behalf of github Nov 1, 2024 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Dec 1, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Bump the dashboard-production-dependencies group across 1 directory with 6 updates #26

Bump the dashboard-production-dependencies group across 1 directory with 6 updates #26

Uh oh!

Conversation

dependabot bot commented on behalf of github Nov 1, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v3.3.5

🐞 Bug Fixes

📔 Documentation

🔨 Dependency Upgrades

5.2.0 GA

Enhanced Client-side caching

How to try Client-Side Caching

AutoValue 1.11.0

What's Changed

Release v2.13.0

What's Changed

New Contributors

33.3.1

Maven

Jar files

Javadoc

JDiff

Changelog

33.3.0

Maven

Uh oh!

dependabot bot commented on behalf of github Dec 1, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Nov 1, 2024 •

edited

Loading