Bump the dashboard-production-dependencies group across 1 directory with 6 updates #32

dependabot · 2025-02-01T03:55:35Z

Bumps the dashboard-production-dependencies group with 6 updates in the /dashboard directory:

Package	From	To
org.springframework.boot:spring-boot-starter-parent	`3.2.3`	`3.4.2`
redis.clients:jedis	`5.1.1`	`5.2.0`
com.google.auto.value:auto-value	`1.10.4`	`1.11.0`
joda-time:joda-time	`2.12.7`	`2.13.0`
com.google.guava:guava	`33.0.0-jre`	`33.4.0-jre`
com.fasterxml.jackson.datatype:jackson-datatype-joda	`2.16.1`	`2.18.2`

Updates org.springframework.boot:spring-boot-starter-parent from 3.2.3 to 3.4.2

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v3.4.2

🐞 Bug Fixes

Property metadata for "logging.structured.json.customizer" has incorrect type #43916

GraylogExtendedLogFormatProperties throws NullPointerException when only 'logging.structured.gelf.host' is specified #43863

Structured logging properties have no effect in a native image #43862

Docker Compose support for ClickHouse does not allow an empty password when ALLOW_EMPTY_PASSWORD=yes #43790

docker compose ps now fails due to unknown --orphans flag with 2.23 or earlier #43717

Build info timestamp is truncated to seconds #43617

FileWatcher used for SSL reload does not support symlinks #43604

BindableRuntimeHintsRegistrar should handle TypeNotPresentException #43600

CapturedOutput is empty when using Log4J2 StatusLogger #43578

Spring Boot 3.4 is not compatible with Gson 2.10 #43442

NoClassDefFoundError when using JUnit to test a Gradle 7.6.x app that depends on spring-boot-actuator-autoconfigure but not on org.junit.platform:junit-platform-launcher #43340

📔 Documentation

Document that the @ConfigurationProperties annotation processor cannot generate description and defaultValue metadata for external types #43929

Fix description of management.metrics.graphql.autotime.enabled #43905

Document 'base64:' prefix support #43835

Document handling of @Fallback beans in ConditionalOnSingleCandidate's javadoc #43826

Javadoc of DataSourceBuilder does not reference all supported types #43732

Update OpenTelemetry section in Supported Monitoring Systems to refer to OTLP instead #43729

Consistently document the minimum supported versions of Gradle #43725

Document that system libraries are a reason to customize the builder and switch away from builder-jammy-java-tiny #43716

Links to the Javadoc of Jakarta Messaging are invalid #43662

Paragraph HTML tags are rendered as-is in Maven Plugin reference documentation #43623

Javadoc link for jakarta.xml.bind is invalid #43607

Documentation still has references to 'layertools' #43605

Javadoc of ConstructorBinding should not use markdown formatting #43599

Managed Dependency Coordinates lists Spock and OkHttp dependencies that are not managed #43584

🔨 Dependency Upgrades

Upgrade to ActiveMQ 6.1.5 #43791

Upgrade to Commons Codec 1.17.2 #43720

Upgrade to Couchbase Client 3.7.7 #43843

Upgrade to FreeMarker 2.3.34 #43721

Upgrade to Hibernate 6.6.5.Final #43910

Upgrade to HttpCore5 5.3.2 #43792

Upgrade to Infinispan 15.0.12.Final #43911

Upgrade to Jersey 3.1.10 #43793

Upgrade to jOOQ 3.19.18 #43844

Upgrade to Lettuce 6.4.2.RELEASE #43609

Upgrade to Logback 1.5.16 #43715

Upgrade to Micrometer 1.14.3 #43745

Upgrade to Micrometer Tracing 1.4.2 #43746

Upgrade to Netty 4.1.117.Final #43845

Upgrade to Postgresql 42.7.5 #43846

Upgrade to Pulsar 3.3.4 #43912

... (truncated)

Commits

f775945 Release v3.4.2
068b960 Merge branch '3.3.x' into 3.4.x
34c8353 Next development version (v3.3.9-SNAPSHOT)
f184e98 Merge branch '3.3.x' into 3.4.x
390963f Document when defaultValue and description cannot be extracted
ef82719 Fix memory comparison in ProcessInfoTests
1e35a0b Correct the type of logging.structured.json.customizer
24e40e8 Upgrade to Spring Pulsar 1.2.2
30dd62a Merge branch '3.3.x' into 3.4.x
a3eaafb Upgrade to Spring Pulsar 1.1.8
Additional commits viewable in compare view

Updates redis.clients:jedis from 5.1.1 to 5.2.0

Release notes

Sourced from redis.clients:jedis's releases.

5.2.0 GA

Enhanced Client-side caching

We are happy to announce that improved server-assisted, client-side caching is now generally available! Special thanks to all our beta testers for their valuable feedback, which helped us refine and improve the initial implementation.

Client-side caching is supported exclusively with the RESP3 protocol with Redis >= 7.4 and is available in UnifiedJedis, JedisPooled, and JedisCluster and other classes.

How to try Client-Side Caching

Install Jedis 5.2.0
Use the following code example to get started:

public class CSCExampleTest {
  public static void main() {
HostAndPort node = HostAndPort.from(&quot;localhost:6379&quot;);
JedisClientConfig clientConfig = DefaultJedisClientConfig.builder()
    .resp3()                // RESP3 protocol is required for client-side caching
    //.user(&quot;myuser&quot;)       // Redis server username (optional)
    //.password(&quot;mypass&quot;)   // Redis user's password (optional)
    .build();
CacheConfig cacheConfig = getCacheConfig();
Cache cache = CacheFactory.getCache(cacheConfig);
try (UnifiedJedis client = new UnifiedJedis(node, clientConfig, cache)) {
client.set(&quot;foo&quot;, &quot;bar&quot;);
client.get(&quot;foo&quot;);
client.get(&quot;foo&quot;); // Cache hit
System.out.println(&quot;Cache size: &quot; + cache.getSize()); // 1
System.out.println(cache.getStats().toString());
//Let's change the value of &quot;foo&quot; to invalidate the value stored in the local cache
client.mset(&quot;foo&quot;, &quot;new_value&quot;, &quot;ignore_me:1&quot;, &quot;another_value&quot;);
Thread.sleep(1000); // wait for the cache invalidation to happen
System.out.println(client.get(&quot;foo&quot;)); // Cache miss
System.out.println(cache.getStats().toString());
client.get(&quot;ignore_me:1&quot;); // Client will ignore this key
System.out.println(&quot;Cache size: &quot; + cache.getSize()); // still 1
// check the cache stats
System.out.println(cache.getStats().toString());
} catch (InterruptedException e) {
throw new RuntimeException(e);
}

</tr></table>

... (truncated)

Commits

5442642 Support Server-assisted Client-side Caching (#3757)
d22df4b Improve QueryRangeExample and QueryGeoExample (#3970)
251831c Deprecate Triggers and Functions feature (#3968)
cc8c8ce DOC-4262 geo query examples (#3966)
43dd286 DOC-4244 added range query examples (#3965)
98a37e9 DOC-4296 added aggregation query examples (#3967)
8094063 DOC-4202 exact match search examples (#3964)
5f9c909 DOC-4252 full-text examples (#3963)
51e4f31 Polish #3304
1683255 Bump org.apache.httpcomponents.client5:httpclient5-fluent from 5.3.1 to 5.4 (...
Additional commits viewable in compare view

Updates com.google.auto.value:auto-value from 1.10.4 to 1.11.0

Release notes

Sourced from com.google.auto.value:auto-value's releases.

AutoValue 1.11.0

What's Changed

AutoValue (including AutoBuilder) no longer bundles the Kotlin metadata API. This may require adding an explicit dependency on org.jetbrains.kotlinx:kotlinx-metadata-jvm:0.9.0 or org.jetbrains.kotlin:kotlin-metadata-jvm:2.0.0 to client code that uses AutoBuilder to build Kotlin classes. The metadata API has changed from kotlinx.metadata to kotlin.metadata, but AutoBuilder uses reflection to function with either. (260b61ec7)

Support for generating Java 7 code has been removed from AutoValue, AutoAnnotation, and AutoBuilder. You must be on at least Java 8, or an Android version with desugaring that allows it to pass for Java 8. 1.10.4 is the last AutoValue version with support for Java 7. (b9142b7cd)

AutoBuilder now reports an error if it encounters a @Nullable primitive parameter. Primitive types cannot be null, and should not be annotated for nullness. (7cbdeb43b)

Annotations on type parameters, like abstract @Nullable T foo(), are now better propagated to fields and constructor parameters. (92d881ed9)

The generated toBuilder() method now says new AutoValue_Foo.Builder(this) rather than just new Builder(this), to do the right thing if an extension generates its own subclass of Builder. (324470ba2)

The "copy constructor" in a generated Builder is no longer private. (6730615c9)

Added support for extending AutoValue.Builder with abstract methods. (7d4b020dd)

The annotation processors now support all kinds of resource URLs when loading template resources. This change only affects the case where the AutoValue (etc) processors are being invoked in an unusual environment, for example from a GraalVM app. It does not affect code that is merely being compiled for such an environment. (80b0ada75)

Full Changelog: google/auto@auto-value-1.10.4...auto-value-1.11.0

Commits

5e02d64 Set version number for auto-value-parent to 1.11.0.
80b0ada Support all kinds of resource URLs when loading template resources.
260b61e Use reflection to avoid referencing the Kotlin metadata API directly.
76be89a Bump org.apache.maven.plugins:maven-invoker-plugin from 3.6.1 to 3.7.0 in /fa...
c11484e Bump org.apache.maven.plugins:maven-invoker-plugin from 3.6.1 to 3.7.0 in /value
b21d69d Bump kotlin.version from 1.9.24 to 2.0.0 in /value
e55e60a Update AutoValue to reflect recent Kotlin Metadata API changes.
29f739b Bump actions/checkout from 4.1.5 to 4.1.6
199a727 Bump kotlin.version from 1.9.23 to 1.9.24 in /value
f2b22e3 Bump actions/checkout from 4.1.4 to 4.1.5
Additional commits viewable in compare view

Updates joda-time:joda-time from 2.12.7 to 2.13.0

Release notes

Sourced from joda-time:joda-time's releases.

Release v2.13.0

See the change notes for more information.

What's Changed

Make ConverterManager.getInstance() init thread-safe. by @cpovirk in JodaOrg/joda-time#776

Add website page about secutity/CVEs by @jodastephen in JodaOrg/joda-time#781

fix: include native-image files correctly by @klopfdreh in JodaOrg/joda-time#784

Enhance TZDB compiler to better match spec by @jodastephen in JodaOrg/joda-time#786

Update GitHub actions to latest versions by @jodastephen in JodaOrg/joda-time#788

Fix TZDB compiler %z parsing by @jodastephen in JodaOrg/joda-time#787

Update tzdb handling by @jodastephen in JodaOrg/joda-time#789

Update time zone data to 2024bgtz by @github-actions in JodaOrg/joda-time#790

New Contributors

@cpovirk made their first contribution in JodaOrg/joda-time#776

@klopfdreh made their first contribution in JodaOrg/joda-time#784

Full Changelog: JodaOrg/joda-time@v2.12.7...v2.13.0

Commits

0e45c95 Release v2.13.0
4d2a899 Update time zone data to 2024bgtz (#790)
f38a08e Update tzdb handling (#789)
54b3d1c Fix TZDB compiler %z parsing (#787)
0a264f1 Update GitHub actions to latest versions (#788)
2e9d255 Enhance TZDB compiler to better match spec (#786)
038646b Include native-image files correctly (#784)
4a1402a Add website page about secutity/CVEs (#781)
34197d2 Make ConverterManager.getInstance() init thread-safe. (#776)
See full diff in compare view

Updates com.google.guava:guava from 33.0.0-jre to 33.4.0-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.4.0

Maven
<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.4.0-jre</version>
  
  <version>33.4.0-android</version>
</dependency>
Jar files

33.4.0-jre.jar

33.4.0-android.jar

Guava requires one runtime dependency, which you can download here:

failureaccess-1.0.2.jar

Javadoc

33.4.0-jre

33.4.0-android

JDiff

33.4.0-jre vs. 33.3.1-jre

33.4.0-android vs. 33.3.1-android

33.4.0-android vs. 33.4.0-jre

Changelog

Exposed additional Java 8 APIs to Android users. (6082782134, 9b0109c662, 6ace8bc8ea, b650b9fe77, c6c268006c, 984f713d76, f9f3fffb87, cdc225474e)

base: Deprecated Charsets constants in favor of StandardCharsets. We will not remove the constants, but we recommend using StandardCharsets for consistency. (45e6be2688)

base: Added ToStringHelper.omitEmptyValues(). (f5ec2ab85c)

collect: Added an optimized copyOf method to TreeRangeMap. (a46565dd1c)

collect.testing: Fixed @Require annotations so that features implied by absent features are not also required to be absent. (81be061f85)

io: Changed ByteSink and CharSink to no longer call flush() in some cases before close(). This is a no-op for well-behaved streams, which internally flush their data as part of closing. However, we have discovered some stream implementations that have overridden close() to do nothing, including not to flush some buffered data. If this change causes problems, the simplest fix is usually to change the close() override to at least call flush(). (6ace8bc8ea)

net: Added HttpHeaders.ALT_SVC and MediaType.CBOR. (503ba429f9, 7c0bf0892d)

33.3.1

Maven
<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
</tr></table>

... (truncated)

Commits

See full diff in compare view

Updates com.fasterxml.jackson.datatype:jackson-datatype-joda from 2.16.1 to 2.18.2

Commits

d79c41b [maven-release-plugin] prepare release jackson-datatype-joda-2.18.2
91009ec Prep for 2.18.2
2f013e2 Merge branch '2.17' into 2.18
0e31fe3 Back to snapshot dep
2029f26 [maven-release-plugin] prepare for next development iteration
c932741 [maven-release-plugin] prepare release jackson-datatype-joda-2.17.3
17dc073 Prep for 2.17.3
9788acf Minor clean up wrt #146 test
a46f82c Test cleanup
b04b573 Add reproduction for #146 (failing test)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ith 6 updates Bumps the dashboard-production-dependencies group with 6 updates in the /dashboard directory: | Package | From | To | | --- | --- | --- | | [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `3.2.3` | `3.4.2` | | [redis.clients:jedis](https://github.com/redis/jedis) | `5.1.1` | `5.2.0` | | [com.google.auto.value:auto-value](https://github.com/google/auto) | `1.10.4` | `1.11.0` | | [joda-time:joda-time](https://github.com/JodaOrg/joda-time) | `2.12.7` | `2.13.0` | | [com.google.guava:guava](https://github.com/google/guava) | `33.0.0-jre` | `33.4.0-jre` | | [com.fasterxml.jackson.datatype:jackson-datatype-joda](https://github.com/FasterXML/jackson-datatype-joda) | `2.16.1` | `2.18.2` | Updates `org.springframework.boot:spring-boot-starter-parent` from 3.2.3 to 3.4.2 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.2.3...v3.4.2) Updates `redis.clients:jedis` from 5.1.1 to 5.2.0 - [Release notes](https://github.com/redis/jedis/releases) - [Commits](redis/jedis@v5.1.1...v5.2.0) Updates `com.google.auto.value:auto-value` from 1.10.4 to 1.11.0 - [Release notes](https://github.com/google/auto/releases) - [Commits](google/auto@auto-value-1.10.4...auto-value-1.11.0) Updates `joda-time:joda-time` from 2.12.7 to 2.13.0 - [Release notes](https://github.com/JodaOrg/joda-time/releases) - [Changelog](https://github.com/JodaOrg/joda-time/blob/main/RELEASE-NOTES.txt) - [Commits](JodaOrg/joda-time@v2.12.7...v2.13.0) Updates `com.google.guava:guava` from 33.0.0-jre to 33.4.0-jre - [Release notes](https://github.com/google/guava/releases) - [Commits](https://github.com/google/guava/commits) Updates `com.fasterxml.jackson.datatype:jackson-datatype-joda` from 2.16.1 to 2.18.2 - [Commits](FasterXML/jackson-datatype-joda@jackson-datatype-joda-2.16.1...jackson-datatype-joda-2.18.2) --- updated-dependencies: - dependency-name: org.springframework.boot:spring-boot-starter-parent dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-production-dependencies - dependency-name: redis.clients:jedis dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-production-dependencies - dependency-name: com.google.auto.value:auto-value dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-production-dependencies - dependency-name: joda-time:joda-time dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-production-dependencies - dependency-name: com.google.guava:guava dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-production-dependencies - dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-joda dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-03-01T03:49:30Z

Superseded by #34.

dependabot bot added the dependencies Pull requests that update a dependency file label Feb 1, 2025

dependabot bot mentioned this pull request Feb 1, 2025

Bump the dashboard-production-dependencies group across 1 directory with 6 updates #29

Closed

dependabot bot closed this Mar 1, 2025

dependabot bot deleted the dependabot/maven/dashboard/dashboard-production-dependencies-fe2dec721e branch March 1, 2025 03:50

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the dashboard-production-dependencies group across 1 directory with 6 updates #32

Bump the dashboard-production-dependencies group across 1 directory with 6 updates #32

Uh oh!

dependabot bot commented on behalf of github Feb 1, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Mar 1, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Bump the dashboard-production-dependencies group across 1 directory with 6 updates #32

Bump the dashboard-production-dependencies group across 1 directory with 6 updates #32

Uh oh!

Conversation

dependabot bot commented on behalf of github Feb 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v3.4.2

🐞 Bug Fixes

📔 Documentation

🔨 Dependency Upgrades

5.2.0 GA

Enhanced Client-side caching

How to try Client-Side Caching

AutoValue 1.11.0

What's Changed

Release v2.13.0

What's Changed

New Contributors

33.4.0

Maven

Jar files

Javadoc

JDiff

Changelog

33.3.1

Maven

Uh oh!

dependabot bot commented on behalf of github Mar 1, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Feb 1, 2025 •

edited

Loading