fix(deps): update all non-major dependencies #14

Open
renovatebot wants to merge 1 commit from renovate/all-minor-patch into main
Member

This PR contains the following updates:

Package Type Update Change
org.owasp:dependency-check-maven (source) build patch 12.0.1 -> 12.0.2
com.puppycrawl.tools:checkstyle (source) build patch 10.21.1 -> 10.21.2
org.springframework.boot:spring-boot-maven-plugin (source) build patch 3.4.1 -> 3.4.2
org.springframework.boot:spring-boot-dependencies (source) import patch 3.4.1 -> 3.4.2

Release Notes

jeremylong/DependencyCheck (org.owasp:dependency-check-maven)

v12.0.2

Compare Source

  • fix: correct JSON report error (#​7350)
  • fix: some compatability issues in the gitlab report (#​7349)
  • fix: ArtifactoryAnalyzer updated to use the HTTPClient5-based Downloader and skip unusable results (#​7293)
  • chore: allow messages via EngineVersionCheck (#​7353)
  • chore: switch from javax.json to jakarta.json (#​7326)

See the full listing of changes.

spring-projects/spring-boot (org.springframework.boot:spring-boot-maven-plugin)

v3.4.2

Compare Source

🐞 Bug Fixes
  • Property metadata for "logging.structured.json.customizer" has incorrect type #​43916
  • GraylogExtendedLogFormatProperties throws NullPointerException when only 'logging.structured.gelf.host' is specified #​43863
  • Structured logging properties have no effect in a native image #​43862
  • Docker Compose support for ClickHouse does not allow an empty password when ALLOW_EMPTY_PASSWORD=yes #​43790
  • docker compose ps now fails due to unknown --orphans flag with 2.23 or earlier #​43717
  • Build info timestamp is truncated to seconds #​43617
  • FileWatcher used for SSL reload does not support symlinks #​43604
  • BindableRuntimeHintsRegistrar should handle TypeNotPresentException #​43600
  • CapturedOutput is empty when using Log4J2 StatusLogger #​43578
  • Spring Boot 3.4 is not compatible with Gson 2.10 #​43442
  • NoClassDefFoundError when using JUnit to test a Gradle 7.6.x app that depends on spring-boot-actuator-autoconfigure but not on org.junit.platform:junit-platform-launcher #​43340
📔 Documentation
  • Document that the @ConfigurationProperties annotation processor cannot generate description and defaultValue metadata for external types #​43929
  • Fix description of management.metrics.graphql.autotime.enabled #​43905
  • Document 'base64:' prefix support #​43835
  • Document handling of @Fallback beans in ConditionalOnSingleCandidate's javadoc #​43826
  • Javadoc of DataSourceBuilder does not reference all supported types #​43732
  • Update OpenTelemetry section in Supported Monitoring Systems to refer to OTLP instead #​43729
  • Consistently document the minimum supported versions of Gradle #​43725
  • Document that system libraries are a reason to customize the builder and switch away from builder-jammy-java-tiny #​43716
  • Links to the Javadoc of Jakarta Messaging are invalid #​43662
  • Paragraph HTML tags are rendered as-is in Maven Plugin reference documentation #​43623
  • Javadoc link for jakarta.xml.bind is invalid #​43607
  • Documentation still has references to 'layertools' #​43605
  • Javadoc of ConstructorBinding should not use markdown formatting #​43599
  • Managed Dependency Coordinates lists Spock and OkHttp dependencies that are not managed #​43584
🔨 Dependency Upgrades
❤️ Contributors

Thank you to all the contributors who worked on this release:

@​arefbehboudi, @​dreis2211, @​gavarava, @​hezean, @​izeye, @​jxblum, @​ngocnhan-tran1996, @​nosan, @​quaff, and @​tmaciejewski


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck.git) ([source](https://github.com/jeremylong/DependencyCheck/tree/HEAD/maven)) | build | patch | `12.0.1` -> `12.0.2` | | [com.puppycrawl.tools:checkstyle](https://checkstyle.org/) ([source](https://github.com/checkstyle/checkstyle)) | build | patch | `10.21.1` -> `10.21.2` | | [org.springframework.boot:spring-boot-maven-plugin](https://spring.io/projects/spring-boot) ([source](https://github.com/spring-projects/spring-boot)) | build | patch | `3.4.1` -> `3.4.2` | | [org.springframework.boot:spring-boot-dependencies](https://spring.io/projects/spring-boot) ([source](https://github.com/spring-projects/spring-boot)) | import | patch | `3.4.1` -> `3.4.2` | --- ### Release Notes <details> <summary>jeremylong/DependencyCheck (org.owasp:dependency-check-maven)</summary> ### [`v12.0.2`](https://github.com/jeremylong/DependencyCheck/blob/HEAD/CHANGELOG.md#Version-1202-2025-01-29) [Compare Source](https://github.com/jeremylong/DependencyCheck/compare/v12.0.1...v12.0.2) - fix: correct JSON report error ([#&#8203;7350](https://github.com/jeremylong/DependencyCheck/issues/7350)) - fix: some compatability issues in the gitlab report ([#&#8203;7349](https://github.com/jeremylong/DependencyCheck/issues/7349)) - fix: ArtifactoryAnalyzer updated to use the HTTPClient5-based Downloader and skip unusable results ([#&#8203;7293](https://github.com/jeremylong/DependencyCheck/issues/7293)) - chore: allow messages via EngineVersionCheck ([#&#8203;7353](https://github.com/jeremylong/DependencyCheck/issues/7353)) - chore: switch from javax.json to jakarta.json ([#&#8203;7326](https://github.com/jeremylong/DependencyCheck/issues/7326)) See the full listing of [changes](https://github.com/jeremylong/DependencyCheck/milestone/93?closed=1). </details> <details> <summary>spring-projects/spring-boot (org.springframework.boot:spring-boot-maven-plugin)</summary> ### [`v3.4.2`](https://github.com/spring-projects/spring-boot/releases/tag/v3.4.2) [Compare Source](https://github.com/spring-projects/spring-boot/compare/v3.4.1...v3.4.2) ##### :lady_beetle: Bug Fixes - Property metadata for "logging.structured.json.customizer" has incorrect type [#&#8203;43916](https://github.com/spring-projects/spring-boot/issues/43916) - GraylogExtendedLogFormatProperties throws NullPointerException when only 'logging.structured.gelf.host' is specified [#&#8203;43863](https://github.com/spring-projects/spring-boot/pull/43863) - Structured logging properties have no effect in a native image [#&#8203;43862](https://github.com/spring-projects/spring-boot/pull/43862) - Docker Compose support for ClickHouse does not allow an empty password when ALLOW_EMPTY_PASSWORD=yes [#&#8203;43790](https://github.com/spring-projects/spring-boot/pull/43790) - docker compose ps now fails due to unknown --orphans flag with 2.23 or earlier [#&#8203;43717](https://github.com/spring-projects/spring-boot/issues/43717) - Build info timestamp is truncated to seconds [#&#8203;43617](https://github.com/spring-projects/spring-boot/issues/43617) - FileWatcher used for SSL reload does not support symlinks [#&#8203;43604](https://github.com/spring-projects/spring-boot/issues/43604) - BindableRuntimeHintsRegistrar should handle TypeNotPresentException [#&#8203;43600](https://github.com/spring-projects/spring-boot/issues/43600) - CapturedOutput is empty when using Log4J2 StatusLogger [#&#8203;43578](https://github.com/spring-projects/spring-boot/issues/43578) - Spring Boot 3.4 is not compatible with Gson 2.10 [#&#8203;43442](https://github.com/spring-projects/spring-boot/issues/43442) - NoClassDefFoundError when using JUnit to test a Gradle 7.6.x app that depends on spring-boot-actuator-autoconfigure but not on org.junit.platform:junit-platform-launcher [#&#8203;43340](https://github.com/spring-projects/spring-boot/issues/43340) ##### :notebook_with_decorative_cover: Documentation - Document that the `@ConfigurationProperties` annotation processor cannot generate description and defaultValue metadata for external types [#&#8203;43929](https://github.com/spring-projects/spring-boot/issues/43929) - Fix description of management.metrics.graphql.autotime.enabled [#&#8203;43905](https://github.com/spring-projects/spring-boot/issues/43905) - Document 'base64:' prefix support [#&#8203;43835](https://github.com/spring-projects/spring-boot/issues/43835) - Document handling of `@Fallback` beans in ConditionalOnSingleCandidate's javadoc [#&#8203;43826](https://github.com/spring-projects/spring-boot/pull/43826) - Javadoc of DataSourceBuilder does not reference all supported types [#&#8203;43732](https://github.com/spring-projects/spring-boot/issues/43732) - Update OpenTelemetry section in Supported Monitoring Systems to refer to OTLP instead [#&#8203;43729](https://github.com/spring-projects/spring-boot/issues/43729) - Consistently document the minimum supported versions of Gradle [#&#8203;43725](https://github.com/spring-projects/spring-boot/issues/43725) - Document that system libraries are a reason to customize the builder and switch away from builder-jammy-java-tiny [#&#8203;43716](https://github.com/spring-projects/spring-boot/issues/43716) - Links to the Javadoc of Jakarta Messaging are invalid [#&#8203;43662](https://github.com/spring-projects/spring-boot/issues/43662) - Paragraph HTML tags are rendered as-is in Maven Plugin reference documentation [#&#8203;43623](https://github.com/spring-projects/spring-boot/issues/43623) - Javadoc link for jakarta.xml.bind is invalid [#&#8203;43607](https://github.com/spring-projects/spring-boot/issues/43607) - Documentation still has references to 'layertools' [#&#8203;43605](https://github.com/spring-projects/spring-boot/issues/43605) - Javadoc of ConstructorBinding should not use markdown formatting [#&#8203;43599](https://github.com/spring-projects/spring-boot/issues/43599) - Managed Dependency Coordinates lists Spock and OkHttp dependencies that are not managed [#&#8203;43584](https://github.com/spring-projects/spring-boot/issues/43584) ##### :hammer: Dependency Upgrades - Upgrade to ActiveMQ 6.1.5 [#&#8203;43791](https://github.com/spring-projects/spring-boot/issues/43791) - Upgrade to Commons Codec 1.17.2 [#&#8203;43720](https://github.com/spring-projects/spring-boot/issues/43720) - Upgrade to Couchbase Client 3.7.7 [#&#8203;43843](https://github.com/spring-projects/spring-boot/issues/43843) - Upgrade to FreeMarker 2.3.34 [#&#8203;43721](https://github.com/spring-projects/spring-boot/issues/43721) - Upgrade to Hibernate 6.6.5.Final [#&#8203;43910](https://github.com/spring-projects/spring-boot/issues/43910) - Upgrade to HttpCore5 5.3.2 [#&#8203;43792](https://github.com/spring-projects/spring-boot/issues/43792) - Upgrade to Infinispan 15.0.12.Final [#&#8203;43911](https://github.com/spring-projects/spring-boot/issues/43911) - Upgrade to Jersey 3.1.10 [#&#8203;43793](https://github.com/spring-projects/spring-boot/issues/43793) - Upgrade to jOOQ 3.19.18 [#&#8203;43844](https://github.com/spring-projects/spring-boot/issues/43844) - Upgrade to Lettuce 6.4.2.RELEASE [#&#8203;43609](https://github.com/spring-projects/spring-boot/issues/43609) - Upgrade to Logback 1.5.16 [#&#8203;43715](https://github.com/spring-projects/spring-boot/issues/43715) - Upgrade to Micrometer 1.14.3 [#&#8203;43745](https://github.com/spring-projects/spring-boot/issues/43745) - Upgrade to Micrometer Tracing 1.4.2 [#&#8203;43746](https://github.com/spring-projects/spring-boot/issues/43746) - Upgrade to Netty 4.1.117.Final [#&#8203;43845](https://github.com/spring-projects/spring-boot/issues/43845) - Upgrade to Postgresql 42.7.5 [#&#8203;43846](https://github.com/spring-projects/spring-boot/issues/43846) - Upgrade to Pulsar 3.3.4 [#&#8203;43912](https://github.com/spring-projects/spring-boot/issues/43912) - Upgrade to R2DBC MySQL 1.3.1 [#&#8203;43722](https://github.com/spring-projects/spring-boot/issues/43722) - Upgrade to Reactor Bom 2024.0.2 [#&#8203;43747](https://github.com/spring-projects/spring-boot/issues/43747) - Upgrade to Spring AMQP 3.2.2 [#&#8203;43748](https://github.com/spring-projects/spring-boot/issues/43748) - Upgrade to Spring Data Bom 2024.1.2 [#&#8203;43749](https://github.com/spring-projects/spring-boot/issues/43749) - Upgrade to Spring Framework 6.2.2 [#&#8203;43750](https://github.com/spring-projects/spring-boot/issues/43750) - Upgrade to Spring Kafka 3.3.2 [#&#8203;43751](https://github.com/spring-projects/spring-boot/issues/43751) - Upgrade to Spring Pulsar 1.2.2 [#&#8203;43752](https://github.com/spring-projects/spring-boot/issues/43752) - Upgrade to SQLite JDBC 3.47.2.0 [#&#8203;43723](https://github.com/spring-projects/spring-boot/issues/43723) ##### :heart: Contributors Thank you to all the contributors who worked on this release: [@&#8203;arefbehboudi](https://github.com/arefbehboudi), [@&#8203;dreis2211](https://github.com/dreis2211), [@&#8203;gavarava](https://github.com/gavarava), [@&#8203;hezean](https://github.com/hezean), [@&#8203;izeye](https://github.com/izeye), [@&#8203;jxblum](https://github.com/jxblum), [@&#8203;ngocnhan-tran1996](https://github.com/ngocnhan-tran1996), [@&#8203;nosan](https://github.com/nosan), [@&#8203;quaff](https://github.com/quaff), and [@&#8203;tmaciejewski](https://github.com/tmaciejewski) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xMjYuMCIsInVwZGF0ZWRJblZlciI6IjM5LjEyNy4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->
renovatebot added 1 commit 2025-01-24 01:01:15 +01:00
fix(deps): update all non-major dependencies to v3.4.2
All checks were successful
SonarQube Scan / SonarQube Trigger (pull_request) Successful in 1m55s
c5610c8dd5
Signed-off-by: RenovateBot <renovatebot@w9r.dev>
oliver was assigned by renovatebot 2025-01-24 01:01:16 +01:00
requested review from oliver 2025-01-24 01:01:16 +01:00
Owner

This PR contains the following updates:

Package Type Update Change org.springframework.boot:spring-boot-maven-plugin ( https://spring.io/projects/spring-boot ) ( source ( https://github.com/spring-projects/spring-boot ) ) build patch 3.4.1 -> 3.4.2 org.springframework.boot:spring-boot-dependencies ( https://spring.io/projects/spring-boot ) ( source ( https://github.com/spring-projects/spring-boot ) ) import patch 3.4.1 -> 3.4.2

Release Notes

This PR contains the following updates: Package Type Update Change org.springframework.boot:spring-boot-maven-plugin ( https://spring.io/projects/spring-boot ) ( source ( https://github.com/spring-projects/spring-boot ) ) build patch 3.4.1 -> 3.4.2 org.springframework.boot:spring-boot-dependencies ( https://spring.io/projects/spring-boot ) ( source ( https://github.com/spring-projects/spring-boot ) ) import patch 3.4.1 -> 3.4.2 Release Notes
renovatebot force-pushed renovate/all-minor-patch from c5610c8dd5 to b00c7fc260 2025-02-01 23:05:33 +01:00 Compare
renovatebot changed title from fix(deps): update all non-major dependencies to v3.4.2 to fix(deps): update all non-major dependencies 2025-02-01 23:05:35 +01:00
All checks were successful
SonarQube Scan / SonarQube Trigger (pull_request) Successful in 3m21s
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/all-minor-patch:renovate/all-minor-patch
git checkout renovate/all-minor-patch

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git checkout main
git merge --no-ff renovate/all-minor-patch
git checkout renovate/all-minor-patch
git rebase main
git checkout main
git merge --ff-only renovate/all-minor-patch
git checkout renovate/all-minor-patch
git rebase main
git checkout main
git merge --no-ff renovate/all-minor-patch
git checkout main
git merge --squash renovate/all-minor-patch
git checkout main
git merge --ff-only renovate/all-minor-patch
git checkout main
git merge renovate/all-minor-patch
git push origin main
Sign in to join this conversation.
No reviewers
No labels
released
No milestone
No project
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: pom/spring-boot-starter#14
No description provided.