Bump the dashboard-production-dependencies group across 1 directory with 6 updates #28

dependabot · 2024-12-01T03:40:54Z

Bumps the dashboard-production-dependencies group with 6 updates in the /dashboard directory:

Package	From	To
org.springframework.boot:spring-boot-starter-parent	`3.2.3`	`3.4.0`
redis.clients:jedis	`5.1.1`	`5.2.0`
com.google.auto.value:auto-value	`1.10.4`	`1.11.0`
joda-time:joda-time	`2.12.7`	`2.13.0`
com.google.guava:guava	`33.0.0-jre`	`33.3.1-jre`
com.fasterxml.jackson.datatype:jackson-datatype-joda	`2.16.1`	`2.18.2`

Updates org.springframework.boot:spring-boot-starter-parent from 3.2.3 to 3.4.0

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v3.4.0

⭐ New Features

Add withDefaultRequestConfigCustomizer method to HttpComponentsClientHttpRequestFactoryBuilder #43139

Fail JsonWriter if duplicate names are detected #43041

Add JsonObjectDeserializer.nullSafeValue method that accepts a mapper Function #42972

Support timeout property for GraphQL over SSE #42966

Improve performance of ConfigurationPropertiesBinder by storing bind handlers on first access #42950

Improve performance of ConcurrentReferenceCachingMetadataReaderFactory #42949

Log warning in HikariCheckpointRestoreLifecycle if pool suspension isn't configured #42937

Remove spring-boot-starter-aop dependency from spring-boot-starter-data-jpa and spring-boot-starter-integration #42934

🐞 Bug Fixes

Jersey body handling is inconsistent with Spring Webflux and Spring MVC #43209

Classes are accidentally named "structure logging" instead of "structured logging" #43203

StructuredLoggingJsonProperties customizer should be a Class reference rather than a String #43202

Cannot package OCI image when 'docker.io/paketobuildpacks/new-relic' is provided as a buildpack #43171

Incorrect Type for 'management.endpoints.access.default' defined in additional-spring-configuration-metadata.json #43154

WebServerPortFileWriter fails when using a portfile without extension #43117

SslOptions.isSpecified() only returns true if ciphers and enabled protocols are set #43084

SslHealthIndicator throws NullPointerException when using SslBundle with SslStoreBundle.NONE #43078

JdkClientHttpRequestFactoryBuilder and JettyClientHttpRequestFactoryBuilder do not set Ciphers or Enabled Protocols #43077

Root cause of errors is hidden when loading images from archive #43070

mvn spring-boot:run fails on Windows with "Could Not Find or Load Main Class" when path contains non-ASCII characters #43062

A @SpyBean on the output of a FactoryBean is not reset #43053

Logback logging system does not process URLs with paths not ending in .xml #42990

Bean-based conditions do not consider factory beans correctly when determining if they are a candidate #42970

NPE in bootBuildImage when setting DOCKER_CONTEXT=default #42960

Warning due to duplicate MockResolver extensions #42957

HttpHostConnectException is thrown when using buildpacks with Gradle or Maven on Windows #42952

build-info doesn't support seconds since the epoch from project.build.outputTimestamp #42936

NPE in OnClassCondition.resolveOutcomesThreaded following thread interruption because firstHalf is null #42926

Default WebSocketMessageBrokerConfigurer is always overriding custom channel executor #42924

X-Registry-Auth header sent to Docker Engine API contains field "authHeader" #42915

ApplicationContextRunner has inconsistent behaviour with duplicate auto-configuration class names #17963

📔 Documentation

Migrate class references to full javadoc links #43239

Documentation for 'spring.datasource.type' is misleading #43199

Update "Upgrading From" section to use "2.x" #43160

Include spring-boot-loader in API documentation #43153

Document how and where to add custom GraalVM configuration files #43074

Rework DataSource configuration examples to separate defining an additional DataSource and defining a DataSource of a different type #43059

Location of the layers schema is incorrect in the Maven Plugin's examples #43033

Link to Eclipse setup instructions #42954

Fix link to Checkpoint and Restore status page #42939

🔨 Dependency Upgrades

... (truncated)

Commits

8964203 Release v3.4.0
109e731 Revert "Add @ConditionalOnMissingBean for JobRepository"
d21952d Merge branch '3.3.x'
4151938 Next development version (v3.3.7-SNAPSHOT)
14989a5 Upgrade to Testcontainers 1.20.4
c188822 Upgrade to Spring Security 6.4.1
e286739 Upgrade to Spring Batch 5.2.0
73fc351 Add @ConditionalOnMissingBean for JobRepository
3cae5c2 Merge branch '3.3.x'
283bc6f Merge branch '3.2.x' into 3.3.x
Additional commits viewable in compare view

Updates redis.clients:jedis from 5.1.1 to 5.2.0

Release notes

Sourced from redis.clients:jedis's releases.

5.2.0 GA

Enhanced Client-side caching

We are happy to announce that improved server-assisted, client-side caching is now generally available! Special thanks to all our beta testers for their valuable feedback, which helped us refine and improve the initial implementation.

Client-side caching is supported exclusively with the RESP3 protocol with Redis >= 7.4 and is available in UnifiedJedis, JedisPooled, and JedisCluster and other classes.

How to try Client-Side Caching

Install Jedis 5.2.0
Use the following code example to get started:

public class CSCExampleTest {
  public static void main() {
HostAndPort node = HostAndPort.from(&quot;localhost:6379&quot;);
JedisClientConfig clientConfig = DefaultJedisClientConfig.builder()
    .resp3()                // RESP3 protocol is required for client-side caching
    //.user(&quot;myuser&quot;)       // Redis server username (optional)
    //.password(&quot;mypass&quot;)   // Redis user's password (optional)
    .build();
CacheConfig cacheConfig = getCacheConfig();
Cache cache = CacheFactory.getCache(cacheConfig);
try (UnifiedJedis client = new UnifiedJedis(node, clientConfig, cache)) {
client.set(&quot;foo&quot;, &quot;bar&quot;);
client.get(&quot;foo&quot;);
client.get(&quot;foo&quot;); // Cache hit
System.out.println(&quot;Cache size: &quot; + cache.getSize()); // 1
System.out.println(cache.getStats().toString());
//Let's change the value of &quot;foo&quot; to invalidate the value stored in the local cache
client.mset(&quot;foo&quot;, &quot;new_value&quot;, &quot;ignore_me:1&quot;, &quot;another_value&quot;);
Thread.sleep(1000); // wait for the cache invalidation to happen
System.out.println(client.get(&quot;foo&quot;)); // Cache miss
System.out.println(cache.getStats().toString());
client.get(&quot;ignore_me:1&quot;); // Client will ignore this key
System.out.println(&quot;Cache size: &quot; + cache.getSize()); // still 1
// check the cache stats
System.out.println(cache.getStats().toString());
} catch (InterruptedException e) {
throw new RuntimeException(e);
}

</tr></table>

... (truncated)

Commits

5442642 Support Server-assisted Client-side Caching (#3757)
d22df4b Improve QueryRangeExample and QueryGeoExample (#3970)
251831c Deprecate Triggers and Functions feature (#3968)
cc8c8ce DOC-4262 geo query examples (#3966)
43dd286 DOC-4244 added range query examples (#3965)
98a37e9 DOC-4296 added aggregation query examples (#3967)
8094063 DOC-4202 exact match search examples (#3964)
5f9c909 DOC-4252 full-text examples (#3963)
51e4f31 Polish #3304
1683255 Bump org.apache.httpcomponents.client5:httpclient5-fluent from 5.3.1 to 5.4 (...
Additional commits viewable in compare view

Updates com.google.auto.value:auto-value from 1.10.4 to 1.11.0

Release notes

Sourced from com.google.auto.value:auto-value's releases.

AutoValue 1.11.0

What's Changed

AutoValue (including AutoBuilder) no longer bundles the Kotlin metadata API. This may require adding an explicit dependency on org.jetbrains.kotlinx:kotlinx-metadata-jvm:0.9.0 or org.jetbrains.kotlin:kotlin-metadata-jvm:2.0.0 to client code that uses AutoBuilder to build Kotlin classes. The metadata API has changed from kotlinx.metadata to kotlin.metadata, but AutoBuilder uses reflection to function with either. (260b61ec7)

Support for generating Java 7 code has been removed from AutoValue, AutoAnnotation, and AutoBuilder. You must be on at least Java 8, or an Android version with desugaring that allows it to pass for Java 8. 1.10.4 is the last AutoValue version with support for Java 7. (b9142b7cd)

AutoBuilder now reports an error if it encounters a @Nullable primitive parameter. Primitive types cannot be null, and should not be annotated for nullness. (7cbdeb43b)

Annotations on type parameters, like abstract @Nullable T foo(), are now better propagated to fields and constructor parameters. (92d881ed9)

The generated toBuilder() method now says new AutoValue_Foo.Builder(this) rather than just new Builder(this), to do the right thing if an extension generates its own subclass of Builder. (324470ba2)

The "copy constructor" in a generated Builder is no longer private. (6730615c9)

Added support for extending AutoValue.Builder with abstract methods. (7d4b020dd)

The annotation processors now support all kinds of resource URLs when loading template resources. This change only affects the case where the AutoValue (etc) processors are being invoked in an unusual environment, for example from a GraalVM app. It does not affect code that is merely being compiled for such an environment. (80b0ada75)

Full Changelog: google/auto@auto-value-1.10.4...auto-value-1.11.0

Commits

5e02d64 Set version number for auto-value-parent to 1.11.0.
80b0ada Support all kinds of resource URLs when loading template resources.
260b61e Use reflection to avoid referencing the Kotlin metadata API directly.
76be89a Bump org.apache.maven.plugins:maven-invoker-plugin from 3.6.1 to 3.7.0 in /fa...
c11484e Bump org.apache.maven.plugins:maven-invoker-plugin from 3.6.1 to 3.7.0 in /value
b21d69d Bump kotlin.version from 1.9.24 to 2.0.0 in /value
e55e60a Update AutoValue to reflect recent Kotlin Metadata API changes.
29f739b Bump actions/checkout from 4.1.5 to 4.1.6
199a727 Bump kotlin.version from 1.9.23 to 1.9.24 in /value
f2b22e3 Bump actions/checkout from 4.1.4 to 4.1.5
Additional commits viewable in compare view

Updates joda-time:joda-time from 2.12.7 to 2.13.0

Release notes

Sourced from joda-time:joda-time's releases.

Release v2.13.0

See the change notes for more information.

What's Changed

Make ConverterManager.getInstance() init thread-safe. by @cpovirk in JodaOrg/joda-time#776

Add website page about secutity/CVEs by @jodastephen in JodaOrg/joda-time#781

fix: include native-image files correctly by @klopfdreh in JodaOrg/joda-time#784

Enhance TZDB compiler to better match spec by @jodastephen in JodaOrg/joda-time#786

Update GitHub actions to latest versions by @jodastephen in JodaOrg/joda-time#788

Fix TZDB compiler %z parsing by @jodastephen in JodaOrg/joda-time#787

Update tzdb handling by @jodastephen in JodaOrg/joda-time#789

Update time zone data to 2024bgtz by @github-actions in JodaOrg/joda-time#790

New Contributors

@cpovirk made their first contribution in JodaOrg/joda-time#776

@klopfdreh made their first contribution in JodaOrg/joda-time#784

Full Changelog: JodaOrg/joda-time@v2.12.7...v2.13.0

Commits

0e45c95 Release v2.13.0
4d2a899 Update time zone data to 2024bgtz (#790)
f38a08e Update tzdb handling (#789)
54b3d1c Fix TZDB compiler %z parsing (#787)
0a264f1 Update GitHub actions to latest versions (#788)
2e9d255 Enhance TZDB compiler to better match spec (#786)
038646b Include native-image files correctly (#784)
4a1402a Add website page about secutity/CVEs (#781)
34197d2 Make ConverterManager.getInstance() init thread-safe. (#776)
See full diff in compare view

Updates com.google.guava:guava from 33.0.0-jre to 33.3.1-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.3.1

Maven
<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.3.1-jre</version>
  
  <version>33.3.1-android</version>
</dependency>
Jar files

33.3.1-jre.jar

33.3.1-android.jar

Guava requires one runtime dependency, which you can download here:

failureaccess-1.0.1.jar

Javadoc

33.3.1-jre

33.3.1-android

JDiff

33.3.1-jre vs. 33.3.0-jre

33.3.1-android vs. 33.3.0-android

33.3.1-android vs. 33.3.1-jre

Changelog

Added j2objc-annotations to the Gradle runtime classpath to stop producing an Android Gradle Plugin error. (a3b51888c2)

33.3.0

Maven
<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.3.0-jre</version>
  
  <version>33.3.0-android</version>
</dependency>

... (truncated)

Commits

See full diff in compare view

Updates com.fasterxml.jackson.datatype:jackson-datatype-joda from 2.16.1 to 2.18.2

Commits

d79c41b [maven-release-plugin] prepare release jackson-datatype-joda-2.18.2
91009ec Prep for 2.18.2
2f013e2 Merge branch '2.17' into 2.18
0e31fe3 Back to snapshot dep
2029f26 [maven-release-plugin] prepare for next development iteration
c932741 [maven-release-plugin] prepare release jackson-datatype-joda-2.17.3
17dc073 Prep for 2.17.3
9788acf Minor clean up wrt #146 test
a46f82c Test cleanup
b04b573 Add reproduction for #146 (failing test)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ith 6 updates Bumps the dashboard-production-dependencies group with 6 updates in the /dashboard directory: | Package | From | To | | --- | --- | --- | | [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `3.2.3` | `3.4.0` | | [redis.clients:jedis](https://github.com/redis/jedis) | `5.1.1` | `5.2.0` | | [com.google.auto.value:auto-value](https://github.com/google/auto) | `1.10.4` | `1.11.0` | | [joda-time:joda-time](https://github.com/JodaOrg/joda-time) | `2.12.7` | `2.13.0` | | [com.google.guava:guava](https://github.com/google/guava) | `33.0.0-jre` | `33.3.1-jre` | | [com.fasterxml.jackson.datatype:jackson-datatype-joda](https://github.com/FasterXML/jackson-datatype-joda) | `2.16.1` | `2.18.2` | Updates `org.springframework.boot:spring-boot-starter-parent` from 3.2.3 to 3.4.0 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.2.3...v3.4.0) Updates `redis.clients:jedis` from 5.1.1 to 5.2.0 - [Release notes](https://github.com/redis/jedis/releases) - [Commits](redis/jedis@v5.1.1...v5.2.0) Updates `com.google.auto.value:auto-value` from 1.10.4 to 1.11.0 - [Release notes](https://github.com/google/auto/releases) - [Commits](google/auto@auto-value-1.10.4...auto-value-1.11.0) Updates `joda-time:joda-time` from 2.12.7 to 2.13.0 - [Release notes](https://github.com/JodaOrg/joda-time/releases) - [Changelog](https://github.com/JodaOrg/joda-time/blob/main/RELEASE-NOTES.txt) - [Commits](JodaOrg/joda-time@v2.12.7...v2.13.0) Updates `com.google.guava:guava` from 33.0.0-jre to 33.3.1-jre - [Release notes](https://github.com/google/guava/releases) - [Commits](https://github.com/google/guava/commits) Updates `com.fasterxml.jackson.datatype:jackson-datatype-joda` from 2.16.1 to 2.18.2 - [Commits](FasterXML/jackson-datatype-joda@jackson-datatype-joda-2.16.1...jackson-datatype-joda-2.18.2) --- updated-dependencies: - dependency-name: org.springframework.boot:spring-boot-starter-parent dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-production-dependencies - dependency-name: redis.clients:jedis dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-production-dependencies - dependency-name: com.google.auto.value:auto-value dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-production-dependencies - dependency-name: joda-time:joda-time dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-production-dependencies - dependency-name: com.google.guava:guava dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-production-dependencies - dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-joda dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-01-01T03:11:37Z

Superseded by #29.

dependabot bot added the dependencies Pull requests that update a dependency file label Dec 1, 2024

dependabot bot mentioned this pull request Dec 1, 2024

Bump the dashboard-production-dependencies group across 1 directory with 6 updates #26

Closed

dependabot bot closed this Jan 1, 2025

dependabot bot deleted the dependabot/maven/dashboard/dashboard-production-dependencies-ede4940254 branch January 1, 2025 03:11

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the dashboard-production-dependencies group across 1 directory with 6 updates #28

Bump the dashboard-production-dependencies group across 1 directory with 6 updates #28

Uh oh!

dependabot bot commented on behalf of github Dec 1, 2024 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Jan 1, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Bump the dashboard-production-dependencies group across 1 directory with 6 updates #28

Bump the dashboard-production-dependencies group across 1 directory with 6 updates #28

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 1, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v3.4.0

⭐ New Features

🐞 Bug Fixes

📔 Documentation

🔨 Dependency Upgrades

5.2.0 GA

Enhanced Client-side caching

How to try Client-Side Caching

AutoValue 1.11.0

What's Changed

Release v2.13.0

What's Changed

New Contributors

33.3.1

Maven

Jar files

Javadoc

JDiff

Changelog

33.3.0

Maven

Uh oh!

dependabot bot commented on behalf of github Jan 1, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Dec 1, 2024 •

edited

Loading