Bump the dashboard-production-dependencies group across 1 directory with 6 updates #34

dependabot · 2025-03-01T03:49:28Z

Bumps the dashboard-production-dependencies group with 6 updates in the /dashboard directory:

Package	From	To
org.springframework.boot:spring-boot-starter-parent	`3.2.3`	`3.4.3`
redis.clients:jedis	`5.1.1`	`5.2.0`
com.google.auto.value:auto-value	`1.10.4`	`1.11.0`
joda-time:joda-time	`2.12.7`	`2.13.1`
com.google.guava:guava	`33.0.0-jre`	`33.4.0-jre`
com.fasterxml.jackson.datatype:jackson-datatype-joda	`2.16.1`	`2.18.3`

Updates org.springframework.boot:spring-boot-starter-parent from 3.2.3 to 3.4.3

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v3.4.3

⭐ New Features

Add TWENTY_FOUR to JavaVersion enum #44209

🐞 Bug Fixes

Console output may be lost when using Log4j2 with something that replaces System.out #44380

Maven plugin does not consistently use ArgFile for classpath argument on Windows #44328

Reactive Jetty web server does not fail fast when configured to use a server name bundle which Jetty does not support #44319

When web server application context refresh fails, the original failure is lost if stopping or destroying the web server throws an exception #44317

View resolver for Thymeleaf should back off if spring-webmvc is not present #44296

WebServer is not destroyed when ReactiveWebServerApplicationContext refresh fails #44294

Non-default DataSource candidates are not considered in H2ConsoleAutoConfiguration #44293

Banner placeholder and defaults do not work during development #44255

Mustache templates return with ISO-8859-1 charset rather than UTF-8 in Content-Type response header #44193

Servlet EndpointRequest doesn't match web server namespace correctly #44188

java.lang.ClassCastException when using default management security with WebFlux and health probes enabled #44052

Logback configuration that relies on inner-classes does not work in a native image #44025

IllegalStateException: Unable to register SSL bundle after 3.3.8 or 3.4.2 #43989

Metrics and health do not include non-default candidate beans #43481

📔 Documentation

Document that auto-configuration classes should be identified using their binary names #44303

Correct typo in MVC security when explaining when UserDetailsService auto-configuration will back off #44301

Link to JarLauncher's javadoc #44170

When using observability annotations, recommend that care is taken to avoid double instrumentation #44145

Fix typo in Running Your Application #44035

Document Kubernetes preStop handler when using a Docker image without a shell #44022

Source snippet in Developing Your First Spring Boot Application section uses the root package #43983

Correct the location of MyApplication.java in "Developing Your First Spring Boot Application" #43975

Add links to Jackson Javadoc #43971

Warn that some Quartz database schema scripts must be modified before use #43958

🔨 Dependency Upgrades

Upgrade to Commons Pool2 2.12.1 #44173

Upgrade to Couchbase Client 3.7.8 #44269

Upgrade to Groovy 4.0.25 #44174

Upgrade to Hibernate 6.6.8.Final #44332

Upgrade to HttpClient5 5.4.2 #44176

Upgrade to HttpCore5 5.3.3 #44177

Upgrade to Infinispan 15.0.13.Final #44178

Upgrade to jOOQ 3.19.19 #44368

Upgrade to Json-smart 2.5.2 #44264

Upgrade to Maven Clean Plugin 3.4.1 #44349

Upgrade to Micrometer 1.14.4 #44115

Upgrade to Micrometer Tracing 1.4.3 #44116

Upgrade to Native Build Tools Plugin 0.10.5 #44179

... (truncated)

Commits

2f53c0a Release v3.4.3
f99171f Merge branch '3.3.x' into 3.4.x
70e0744 Next development version (v3.3.10-SNAPSHOT)
07d9db3 Merge pull request #44380 from nosan
2295809 Register Log42J StatusListener
575655c Upgrade Tomcat 11 smoke tests to Tomcat 11.0.4
c74397a Merge branch '3.3.x' into 3.4.x
c718461 Protect against NoSuchMethodException on setReadOnly
7dc9bf2 Upgrade to Testcontainers Redis Module 2.2.4
7d1fc06 Upgrade to Testcontainers 1.20.5
Additional commits viewable in compare view

Updates redis.clients:jedis from 5.1.1 to 5.2.0

Release notes

Sourced from redis.clients:jedis's releases.

5.2.0 GA

Enhanced Client-side caching

We are happy to announce that improved server-assisted, client-side caching is now generally available! Special thanks to all our beta testers for their valuable feedback, which helped us refine and improve the initial implementation.

Client-side caching is supported exclusively with the RESP3 protocol with Redis >= 7.4 and is available in UnifiedJedis, JedisPooled, and JedisCluster and other classes.

How to try Client-Side Caching

Install Jedis 5.2.0
Use the following code example to get started:

public class CSCExampleTest {
  public static void main() {
HostAndPort node = HostAndPort.from(&quot;localhost:6379&quot;);
JedisClientConfig clientConfig = DefaultJedisClientConfig.builder()
    .resp3()                // RESP3 protocol is required for client-side caching
    //.user(&quot;myuser&quot;)       // Redis server username (optional)
    //.password(&quot;mypass&quot;)   // Redis user's password (optional)
    .build();
CacheConfig cacheConfig = getCacheConfig();
Cache cache = CacheFactory.getCache(cacheConfig);
try (UnifiedJedis client = new UnifiedJedis(node, clientConfig, cache)) {
client.set(&quot;foo&quot;, &quot;bar&quot;);
client.get(&quot;foo&quot;);
client.get(&quot;foo&quot;); // Cache hit
System.out.println(&quot;Cache size: &quot; + cache.getSize()); // 1
System.out.println(cache.getStats().toString());
//Let's change the value of &quot;foo&quot; to invalidate the value stored in the local cache
client.mset(&quot;foo&quot;, &quot;new_value&quot;, &quot;ignore_me:1&quot;, &quot;another_value&quot;);
Thread.sleep(1000); // wait for the cache invalidation to happen
System.out.println(client.get(&quot;foo&quot;)); // Cache miss
System.out.println(cache.getStats().toString());
client.get(&quot;ignore_me:1&quot;); // Client will ignore this key
System.out.println(&quot;Cache size: &quot; + cache.getSize()); // still 1
// check the cache stats
System.out.println(cache.getStats().toString());
} catch (InterruptedException e) {
throw new RuntimeException(e);
}

</tr></table>

... (truncated)

Commits

5442642 Support Server-assisted Client-side Caching (#3757)
d22df4b Improve QueryRangeExample and QueryGeoExample (#3970)
251831c Deprecate Triggers and Functions feature (#3968)
cc8c8ce DOC-4262 geo query examples (#3966)
43dd286 DOC-4244 added range query examples (#3965)
98a37e9 DOC-4296 added aggregation query examples (#3967)
8094063 DOC-4202 exact match search examples (#3964)
5f9c909 DOC-4252 full-text examples (#3963)
51e4f31 Polish #3304
1683255 Bump org.apache.httpcomponents.client5:httpclient5-fluent from 5.3.1 to 5.4 (...
Additional commits viewable in compare view

Updates com.google.auto.value:auto-value from 1.10.4 to 1.11.0

Release notes

Sourced from com.google.auto.value:auto-value's releases.

AutoValue 1.11.0

What's Changed

AutoValue (including AutoBuilder) no longer bundles the Kotlin metadata API. This may require adding an explicit dependency on org.jetbrains.kotlinx:kotlinx-metadata-jvm:0.9.0 or org.jetbrains.kotlin:kotlin-metadata-jvm:2.0.0 to client code that uses AutoBuilder to build Kotlin classes. The metadata API has changed from kotlinx.metadata to kotlin.metadata, but AutoBuilder uses reflection to function with either. (260b61ec7)

Support for generating Java 7 code has been removed from AutoValue, AutoAnnotation, and AutoBuilder. You must be on at least Java 8, or an Android version with desugaring that allows it to pass for Java 8. 1.10.4 is the last AutoValue version with support for Java 7. (b9142b7cd)

AutoBuilder now reports an error if it encounters a @Nullable primitive parameter. Primitive types cannot be null, and should not be annotated for nullness. (7cbdeb43b)

Annotations on type parameters, like abstract @Nullable T foo(), are now better propagated to fields and constructor parameters. (92d881ed9)

The generated toBuilder() method now says new AutoValue_Foo.Builder(this) rather than just new Builder(this), to do the right thing if an extension generates its own subclass of Builder. (324470ba2)

The "copy constructor" in a generated Builder is no longer private. (6730615c9)

Added support for extending AutoValue.Builder with abstract methods. (7d4b020dd)

The annotation processors now support all kinds of resource URLs when loading template resources. This change only affects the case where the AutoValue (etc) processors are being invoked in an unusual environment, for example from a GraalVM app. It does not affect code that is merely being compiled for such an environment. (80b0ada75)

Full Changelog: google/auto@auto-value-1.10.4...auto-value-1.11.0

Commits

5e02d64 Set version number for auto-value-parent to 1.11.0.
80b0ada Support all kinds of resource URLs when loading template resources.
260b61e Use reflection to avoid referencing the Kotlin metadata API directly.
76be89a Bump org.apache.maven.plugins:maven-invoker-plugin from 3.6.1 to 3.7.0 in /fa...
c11484e Bump org.apache.maven.plugins:maven-invoker-plugin from 3.6.1 to 3.7.0 in /value
b21d69d Bump kotlin.version from 1.9.24 to 2.0.0 in /value
e55e60a Update AutoValue to reflect recent Kotlin Metadata API changes.
29f739b Bump actions/checkout from 4.1.5 to 4.1.6
199a727 Bump kotlin.version from 1.9.23 to 1.9.24 in /value
f2b22e3 Bump actions/checkout from 4.1.4 to 4.1.5
Additional commits viewable in compare view

Updates joda-time:joda-time from 2.12.7 to 2.13.1

Release notes

Sourced from joda-time:joda-time's releases.

Release v2.13.1

See the change notes for more information.

What's Changed

Update time zone data to 2025agtz by @github-actions in JodaOrg/joda-time#805

Full Changelog: JodaOrg/joda-time@v2.13.0...v2.13.1

Release v2.13.0

See the change notes for more information.

What's Changed

Make ConverterManager.getInstance() init thread-safe. by @cpovirk in JodaOrg/joda-time#776

Add website page about secutity/CVEs by @jodastephen in JodaOrg/joda-time#781

fix: include native-image files correctly by @klopfdreh in JodaOrg/joda-time#784

Enhance TZDB compiler to better match spec by @jodastephen in JodaOrg/joda-time#786

Update GitHub actions to latest versions by @jodastephen in JodaOrg/joda-time#788

Fix TZDB compiler %z parsing by @jodastephen in JodaOrg/joda-time#787

Update tzdb handling by @jodastephen in JodaOrg/joda-time#789

Update time zone data to 2024bgtz by @github-actions in JodaOrg/joda-time#790

New Contributors

@cpovirk made their first contribution in JodaOrg/joda-time#776

@klopfdreh made their first contribution in JodaOrg/joda-time#784

Full Changelog: JodaOrg/joda-time@v2.12.7...v2.13.0

Commits

935d44e Release v2.13.1
f42d2d0 Update time zone data to 2025agtz (#805)
3fcd96c Update CI fuzz version
8430877 Add workflow dispatch
2ce9b4c Update changes.xml
0e45c95 Release v2.13.0
4d2a899 Update time zone data to 2024bgtz (#790)
f38a08e Update tzdb handling (#789)
54b3d1c Fix TZDB compiler %z parsing (#787)
0a264f1 Update GitHub actions to latest versions (#788)
Additional commits viewable in compare view

Updates com.google.guava:guava from 33.0.0-jre to 33.4.0-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.4.0

Maven
<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.4.0-jre</version>
  
  <version>33.4.0-android</version>
</dependency>
Jar files

33.4.0-jre.jar

33.4.0-android.jar

Guava requires one runtime dependency, which you can download here:

failureaccess-1.0.2.jar

Javadoc

33.4.0-jre

33.4.0-android

JDiff

33.4.0-jre vs. 33.3.1-jre

33.4.0-android vs. 33.3.1-android

33.4.0-android vs. 33.4.0-jre

Changelog

Exposed additional Java 8 APIs to Android users. (6082782134, 9b0109c662, 6ace8bc8ea, b650b9fe77, c6c268006c, 984f713d76, f9f3fffb87, cdc225474e)

base: Deprecated Charsets constants in favor of StandardCharsets. We will not remove the constants, but we recommend using StandardCharsets for consistency. (45e6be2688)

base: Added ToStringHelper.omitEmptyValues(). (f5ec2ab85c)

collect: Added an optimized copyOf method to TreeRangeMap. (a46565dd1c)

collect.testing: Fixed @Require annotations so that features implied by absent features are not also required to be absent. (81be061f85)

io: Changed ByteSink and CharSink to no longer call flush() in some cases before close(). This is a no-op for well-behaved streams, which internally flush their data as part of closing. However, we have discovered some stream implementations that have overridden close() to do nothing, including not to flush some buffered data. If this change causes problems, the simplest fix is usually to change the close() override to at least call flush(). (6ace8bc8ea)

net: Added HttpHeaders.ALT_SVC and MediaType.CBOR. (503ba429f9, 7c0bf0892d)

33.3.1

Maven
<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
</tr></table>

... (truncated)

Commits

See full diff in compare view

Updates com.fasterxml.jackson.datatype:jackson-datatype-joda from 2.16.1 to 2.18.3

Commits

796b895 [maven-release-plugin] prepare release jackson-datatype-joda-2.18.3
05290b6 Prep for 2.18.3
c2a28d6 Update Ubuntu in CI
5f45e32 Back to snapshot dep
fb0a11c [maven-release-plugin] prepare for next development iteration
d79c41b [maven-release-plugin] prepare release jackson-datatype-joda-2.18.2
91009ec Prep for 2.18.2
2f013e2 Merge branch '2.17' into 2.18
0e31fe3 Back to snapshot dep
2029f26 [maven-release-plugin] prepare for next development iteration
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ith 6 updates Bumps the dashboard-production-dependencies group with 6 updates in the /dashboard directory: | Package | From | To | | --- | --- | --- | | [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `3.2.3` | `3.4.3` | | [redis.clients:jedis](https://github.com/redis/jedis) | `5.1.1` | `5.2.0` | | [com.google.auto.value:auto-value](https://github.com/google/auto) | `1.10.4` | `1.11.0` | | [joda-time:joda-time](https://github.com/JodaOrg/joda-time) | `2.12.7` | `2.13.1` | | [com.google.guava:guava](https://github.com/google/guava) | `33.0.0-jre` | `33.4.0-jre` | | [com.fasterxml.jackson.datatype:jackson-datatype-joda](https://github.com/FasterXML/jackson-datatype-joda) | `2.16.1` | `2.18.3` | Updates `org.springframework.boot:spring-boot-starter-parent` from 3.2.3 to 3.4.3 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.2.3...v3.4.3) Updates `redis.clients:jedis` from 5.1.1 to 5.2.0 - [Release notes](https://github.com/redis/jedis/releases) - [Commits](redis/jedis@v5.1.1...v5.2.0) Updates `com.google.auto.value:auto-value` from 1.10.4 to 1.11.0 - [Release notes](https://github.com/google/auto/releases) - [Commits](google/auto@auto-value-1.10.4...auto-value-1.11.0) Updates `joda-time:joda-time` from 2.12.7 to 2.13.1 - [Release notes](https://github.com/JodaOrg/joda-time/releases) - [Changelog](https://github.com/JodaOrg/joda-time/blob/main/RELEASE-NOTES.txt) - [Commits](JodaOrg/joda-time@v2.12.7...v2.13.1) Updates `com.google.guava:guava` from 33.0.0-jre to 33.4.0-jre - [Release notes](https://github.com/google/guava/releases) - [Commits](https://github.com/google/guava/commits) Updates `com.fasterxml.jackson.datatype:jackson-datatype-joda` from 2.16.1 to 2.18.3 - [Commits](FasterXML/jackson-datatype-joda@jackson-datatype-joda-2.16.1...jackson-datatype-joda-2.18.3) --- updated-dependencies: - dependency-name: org.springframework.boot:spring-boot-starter-parent dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-production-dependencies - dependency-name: redis.clients:jedis dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-production-dependencies - dependency-name: com.google.auto.value:auto-value dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-production-dependencies - dependency-name: joda-time:joda-time dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-production-dependencies - dependency-name: com.google.guava:guava dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-production-dependencies - dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-joda dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dashboard-production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the dependencies Pull requests that update a dependency file label Mar 1, 2025

dependabot bot mentioned this pull request Mar 1, 2025

Bump the dashboard-production-dependencies group across 1 directory with 6 updates #32

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the dashboard-production-dependencies group across 1 directory with 6 updates #34

Bump the dashboard-production-dependencies group across 1 directory with 6 updates #34

Uh oh!

dependabot bot commented on behalf of github Mar 1, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Bump the dashboard-production-dependencies group across 1 directory with 6 updates #34

Are you sure you want to change the base?

Bump the dashboard-production-dependencies group across 1 directory with 6 updates #34

Uh oh!

Conversation

dependabot bot commented on behalf of github Mar 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v3.4.3

⭐ New Features

🐞 Bug Fixes

📔 Documentation

🔨 Dependency Upgrades

5.2.0 GA

Enhanced Client-side caching

How to try Client-Side Caching

AutoValue 1.11.0

What's Changed

Release v2.13.1

What's Changed

Release v2.13.0

What's Changed

New Contributors

33.4.0

Maven

Jar files

Javadoc

JDiff

Changelog

33.3.1

Maven

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Mar 1, 2025 •

edited

Loading