Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the prod-deps group with 6 updates #532

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 19, 2024

Bumps the prod-deps group with 6 updates:

Package From To
com.fasterxml.jackson:jackson-bom 2.16.1 2.17.0
org.glassfish.jaxb:jaxb-bom 4.0.4 4.0.5
org.apache.maven.plugins:maven-assembly-plugin 3.6.0 3.7.1
org.apache.maven.plugins:maven-compiler-plugin 3.12.1 3.13.0
io.smallrye:jandex-maven-plugin 3.1.6 3.1.7
org.sonarsource.scanner.maven:sonar-maven-plugin 3.10.0.2594 3.11.0.3922

Updates com.fasterxml.jackson:jackson-bom from 2.16.1 to 2.17.0

Commits
  • 518dce9 [maven-release-plugin] prepare release jackson-bom-2.17.0
  • 09f3f57 Prepare for 2.17.0 release
  • e35f5af Update to 2.17 jackson-parent
  • 8e000a1 Merge branch '2.16' into 2.17
  • 78fc05f Back to snapshot deps
  • 5cc2410 [maven-release-plugin] prepare for next development iteration
  • c8ad938 [maven-release-plugin] prepare release jackson-bom-2.16.2
  • 9f3a1c1 Prepare for 2.16.2 release
  • 80aef2e Back to snapshot deps
  • d465ba2 [maven-release-plugin] prepare for next development iteration
  • Additional commits viewable in compare view

Updates org.glassfish.jaxb:jaxb-bom from 4.0.4 to 4.0.5

Updates org.apache.maven.plugins:maven-assembly-plugin from 3.6.0 to 3.7.1

Release notes

Sourced from org.apache.maven.plugins:maven-assembly-plugin's releases.

3.7.1

Release Notes - Maven Assembly Plugin - Version 3.7.1

What's Changed

Full Changelog: apache/maven-assembly-plugin@maven-assembly-plugin-3.7.0...maven-assembly-plugin-3.7.1

3.7.0

Release Notes - Maven Assembly Plugin - Version 3.7.0

... (truncated)

Commits
  • 0afbb3e [maven-release-plugin] prepare release maven-assembly-plugin-3.7.1
  • 74e858a [MASSEMBLY-1022] Unresolved artifacts should be not processed
  • cb56382 [MASSEMBLY-1025] Bump org.codehaus.plexus:plexus-archiver from 4.9.1 to 4.9.2...
  • 86bbed0 [MASSEMBLY-1024] Bump org.apache.commons:commons-compress from 1.25.0 to 1.26...
  • bdcc4d0 [MASSEMBLY-1023] Bump org.apache.maven.shared:maven-filtering from 3.3.1 to 3...
  • 74fe92e [maven-release-plugin] prepare for next development iteration
  • 9be6e87 [maven-release-plugin] prepare release maven-assembly-plugin-3.7.0
  • e8630dc Bump apache/maven-gh-actions-shared from 3 to 4
  • 98f97a5 Bump org.postgresql:postgresql in /src/it/projects/bugs/massembly-730
  • c84e110 [MASSEMBLY-1019] Maven 3.6.3 as minimum requirements
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.12.1 to 3.13.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.13.0

🚀 New features and improvements

📦 Dependency updates

📝 Documentation updates

👻 Maintenance

Commits
  • a1415aa [maven-release-plugin] prepare release maven-compiler-plugin-3.13.0
  • b2b9196 [MCOMPILER-574] Propagate cause of exception in AbstractCompilerMojo
  • 6d2ce5a [MCOMPILER-584] Refresh page - Using Non-Javac Compilers
  • eebad60 [MCOMPILER-585] Refresh plugins versions in ITs
  • ceacf68 [MCOMPILER-582] Automatic detection of release option for JDK < 9
  • 110293f [MCOMPILER-583] Require Maven 3.6.3
  • 90131df [MCOMPILER-575] Bump plexusCompilerVersion from 2.14.2 to 2.15.0 (#227)
  • 74cfc72 [MCOMPILER-548] JDK 21 throws annotations processing warning that can not be ...
  • f85aa27 Bump apache/maven-gh-actions-shared from 3 to 4
  • d59ef49 extract Maven 3.3.1 specific method call
  • Additional commits viewable in compare view

Updates io.smallrye:jandex-maven-plugin from 3.1.6 to 3.1.7

Release notes

Sourced from io.smallrye:jandex-maven-plugin's releases.

3.1.7

  • #357 Release 3.1.7
  • #353 Bump org.postgresql:postgresql from 42.5.1 to 42.7.2 in /maven-plugin/src/it/someLibraries
  • #352 Fix class ordering when propagating type annotations, take two
  • #351 add Type.create(Class)
  • #350 add support for boxing/unboxing of primitive types
  • #349 Comparison method violates its general contract!
  • #344 Update plugin dependencies
Commits
  • 0f8ee62 [maven-release-plugin] prepare release 3.1.7
  • adc0177 Amendments before release
  • 808d222 Merge pull request #357 from smallrye/release-3.1.7
  • 9edb10a release 3.1.7
  • b271986 Merge pull request #353 from smallrye/dependabot/maven/maven-plugin/src/it/so...
  • 3b3efd6 Bump org.postgresql:postgresql in /maven-plugin/src/it/someLibraries
  • a50c850 Merge pull request #352 from Ladicek/index-postprocessing-sort
  • 6413798 Fix class ordering when propagating type annotations, take two
  • d682025 Merge pull request #351 from Ladicek/type-create
  • d10e95d improve javadoc of VoidType and MethodInfo
  • Additional commits viewable in compare view

Updates org.sonarsource.scanner.maven:sonar-maven-plugin from 3.10.0.2594 to 3.11.0.3922

Release notes

Sourced from org.sonarsource.scanner.maven:sonar-maven-plugin's releases.

3.11.0.3922

Release notes - Sonar Scanner for Maven - 3.11

Bug

MSONAR-205 Undesired behaviour when sonar.projectKey is specified in root pom or as user property

Documentation

MSONAR-203 Update license headers

Task

MSONAR-208 Migrate tests to JUnit 5

Improvement

MSONAR-202 Improve logging : log information about Maven options, Java version and the OS

MSONAR-204 "SonarQube version" is not displayed when communicating with SonarCloud

MSONAR-207 The scanner for Maven collects files outside of conventional sonar.sources

Commits
  • 250195e Upgrade release action to version 5.2.1 (#208)
  • f25764d MSONAR-205 Remove sonar.projectKey for submodules
  • 9059ca0 Fix quality flaw: refactor "findMavenProject" method
  • bce0bd0 MSONAR-211 Remove compatibility with old SQ modules( > 7.6 ) in ITs (#205)
  • 495d1c9 MSONAR-202 Improve logging with information about Maven options, Java versio...
  • b637acd MSONAR-212 Fix performance regression in our ITs with [LATEST_RELEASE] & [DE...
  • 4b86947 MSONAR-204 "SonarQube version" shouldn't be displayed when communicating with...
  • dd4f9cd MSONAR-208 Add junit-jupiter-api to enable the execution of tests from Intell...
  • 0faeade MSONAR-209 Bump maven-invoker-plugin to the latest version 3.6.0 (#198)
  • f2ab7c9 MSONAR-208 Migrate tests to JUnit 5 (#197)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the prod-deps group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `2.16.1` | `2.17.0` |
| org.glassfish.jaxb:jaxb-bom | `4.0.4` | `4.0.5` |
| [org.apache.maven.plugins:maven-assembly-plugin](https://github.com/apache/maven-assembly-plugin) | `3.6.0` | `3.7.1` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.12.1` | `3.13.0` |
| [io.smallrye:jandex-maven-plugin](https://github.com/smallrye/jandex) | `3.1.6` | `3.1.7` |
| [org.sonarsource.scanner.maven:sonar-maven-plugin](https://github.com/SonarSource/sonar-scanner-maven) | `3.10.0.2594` | `3.11.0.3922` |


Updates `com.fasterxml.jackson:jackson-bom` from 2.16.1 to 2.17.0
- [Commits](FasterXML/jackson-bom@jackson-bom-2.16.1...jackson-bom-2.17.0)

Updates `org.glassfish.jaxb:jaxb-bom` from 4.0.4 to 4.0.5

Updates `org.apache.maven.plugins:maven-assembly-plugin` from 3.6.0 to 3.7.1
- [Release notes](https://github.com/apache/maven-assembly-plugin/releases)
- [Commits](apache/maven-assembly-plugin@maven-assembly-plugin-3.6.0...maven-assembly-plugin-3.7.1)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.12.1 to 3.13.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.12.1...maven-compiler-plugin-3.13.0)

Updates `io.smallrye:jandex-maven-plugin` from 3.1.6 to 3.1.7
- [Release notes](https://github.com/smallrye/jandex/releases)
- [Commits](smallrye/jandex@3.1.6...3.1.7)

Updates `org.sonarsource.scanner.maven:sonar-maven-plugin` from 3.10.0.2594 to 3.11.0.3922
- [Release notes](https://github.com/SonarSource/sonar-scanner-maven/releases)
- [Commits](SonarSource/sonar-scanner-maven@3.10.0.2594...3.11.0.3922)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.glassfish.jaxb:jaxb-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.apache.maven.plugins:maven-assembly-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: io.smallrye:jandex-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.sonarsource.scanner.maven:sonar-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner March 19, 2024 12:18
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Mar 19, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 3, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Apr 3, 2024
@dependabot dependabot bot deleted the dependabot/maven/prod-deps-ba575ed4a1 branch April 3, 2024 12:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code kontrakt pom
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants