From 583484ec683cd47ba4ef93e44e25422e675f5423 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 5 Aug 2024 18:08:59 +0000 Subject: [PATCH] [PF-2987]: Bump the minor-patch-dependencies group across 1 directory with 14 updates Bumps the minor-patch-dependencies group with 14 updates in the / directory: | Package | From | To | | --- | --- | --- | | com.jfrog.artifactory | `5.2.2` | `5.2.3` | | org.sonarqube | `5.0.0.4638` | `5.1.0.4882` | | [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `2.17.1` | `2.17.2` | | [com.google.cloud:libraries-bom](https://github.com/googleapis/java-cloud-bom) | `26.42.0` | `26.43.0` | | org.apache.commons:commons-lang3 | `3.14.0` | `3.15.0` | | [org.springframework:spring-context](https://github.com/spring-projects/spring-framework) | `6.1.10` | `6.1.11` | | [org.springframework:spring-web](https://github.com/spring-projects/spring-framework) | `6.1.10` | `6.1.11` | | [org.liquibase:liquibase-core](https://github.com/liquibase/liquibase) | `4.28.0` | `4.29.1` | | [io.spring.dependency-management](https://github.com/spring-gradle-plugins/dependency-management-plugin) | `1.1.5` | `1.1.6` | | [org.springframework.boot](https://github.com/spring-projects/spring-boot) | `3.3.1` | `3.3.2` | | [com.azure:azure-messaging-servicebus](https://github.com/Azure/azure-sdk-for-java) | `7.17.1` | `7.17.2` | | [com.azure:azure-identity](https://github.com/Azure/azure-sdk-for-java) | `1.13.0` | `1.13.2` | | [io.netty:netty-bom](https://github.com/netty/netty) | `4.1.111.Final` | `4.1.112.Final` | | org.apache.commons:commons-compress | `1.26.0` | `1.26.2` | Updates `com.jfrog.artifactory` from 5.2.2 to 5.2.3 Updates `org.sonarqube` from 5.0.0.4638 to 5.1.0.4882 Updates `com.fasterxml.jackson:jackson-bom` from 2.17.1 to 2.17.2 - [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.17.1...jackson-bom-2.17.2) Updates `com.google.cloud:libraries-bom` from 26.42.0 to 26.43.0 - [Release notes](https://github.com/googleapis/java-cloud-bom/releases) - [Changelog](https://github.com/googleapis/java-cloud-bom/blob/main/release-please-config.json) - [Commits](https://github.com/googleapis/java-cloud-bom/compare/v26.42.0...v26.43.0) Updates `org.apache.commons:commons-lang3` from 3.14.0 to 3.15.0 Updates `org.springframework:spring-context` from 6.1.10 to 6.1.11 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](https://github.com/spring-projects/spring-framework/compare/v6.1.10...v6.1.11) Updates `org.springframework:spring-web` from 6.1.10 to 6.1.11 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](https://github.com/spring-projects/spring-framework/compare/v6.1.10...v6.1.11) Updates `org.liquibase:liquibase-core` from 4.28.0 to 4.29.1 - [Release notes](https://github.com/liquibase/liquibase/releases) - [Changelog](https://github.com/liquibase/liquibase/blob/master/changelog.txt) - [Commits](https://github.com/liquibase/liquibase/compare/v4.28.0...v4.29.1) Updates `io.spring.dependency-management` from 1.1.5 to 1.1.6 - [Release notes](https://github.com/spring-gradle-plugins/dependency-management-plugin/releases) - [Commits](https://github.com/spring-gradle-plugins/dependency-management-plugin/compare/v1.1.5...v1.1.6) Updates `org.springframework.boot` from 3.3.1 to 3.3.2 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](https://github.com/spring-projects/spring-boot/compare/v3.3.1...v3.3.2) Updates `com.azure:azure-messaging-servicebus` from 7.17.1 to 7.17.2 - [Release notes](https://github.com/Azure/azure-sdk-for-java/releases) - [Commits](https://github.com/Azure/azure-sdk-for-java/compare/azure-messaging-servicebus_7.17.1...azure-messaging-servicebus_7.17.2) Updates `com.azure:azure-identity` from 1.13.0 to 1.13.2 - [Release notes](https://github.com/Azure/azure-sdk-for-java/releases) - [Commits](https://github.com/Azure/azure-sdk-for-java/compare/azure-core_1.13.0...azure-identity_1.13.2) Updates `io.netty:netty-bom` from 4.1.111.Final to 4.1.112.Final - [Commits](https://github.com/netty/netty/compare/netty-4.1.111.Final...netty-4.1.112.Final) Updates `org.apache.commons:commons-compress` from 1.26.0 to 1.26.2 --- updated-dependencies: - dependency-name: com.jfrog.artifactory dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch-dependencies - dependency-name: org.sonarqube dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch-dependencies - dependency-name: com.fasterxml.jackson:jackson-bom dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch-dependencies - dependency-name: com.google.cloud:libraries-bom dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch-dependencies - dependency-name: org.apache.commons:commons-lang3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch-dependencies - dependency-name: org.springframework:spring-context dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch-dependencies - dependency-name: org.springframework:spring-web dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch-dependencies - dependency-name: org.liquibase:liquibase-core dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch-dependencies - dependency-name: io.spring.dependency-management dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch-dependencies - dependency-name: org.springframework.boot dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch-dependencies - dependency-name: com.azure:azure-messaging-servicebus dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch-dependencies - dependency-name: com.azure:azure-identity dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch-dependencies - dependency-name: io.netty:netty-bom dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch-dependencies - dependency-name: org.apache.commons:commons-compress dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch-dependencies ... Signed-off-by: dependabot[bot] --- build.gradle | 4 ++-- buildSrc/build.gradle | 2 +- stairctl/build.gradle | 4 ++-- stairway-azure/build.gradle | 8 ++++---- stairway-gcp/build.gradle | 4 ++-- stairway/build.gradle | 12 ++++++------ 6 files changed, 17 insertions(+), 17 deletions(-) diff --git a/build.gradle b/build.gradle index b5a1a184..4a79fec8 100644 --- a/build.gradle +++ b/build.gradle @@ -2,8 +2,8 @@ plugins { id 'idea' id 'maven-publish' - id 'com.jfrog.artifactory' version '5.2.2' - id "org.sonarqube" version "5.0.0.4638" + id 'com.jfrog.artifactory' version '5.2.3' + id "org.sonarqube" version "5.1.0.4882" } // task dependencies is NOT recursively executed on subprojects diff --git a/buildSrc/build.gradle b/buildSrc/build.gradle index f8dbac7a..6b0c0210 100644 --- a/buildSrc/build.gradle +++ b/buildSrc/build.gradle @@ -11,5 +11,5 @@ repositories { dependencies { implementation group: 'com.diffplug.spotless', name: 'spotless-plugin-gradle', version: '6.25.0' implementation group: 'com.srcclr.gradle', name: 'com.srcclr.gradle.gradle.plugin', version: '3.1.12' - implementation group: 'org.apache.commons', name: 'commons-compress', version: '1.26.0' + implementation group: 'org.apache.commons', name: 'commons-compress', version: '1.26.2' } diff --git a/stairctl/build.gradle b/stairctl/build.gradle index f7217c41..031d186a 100644 --- a/stairctl/build.gradle +++ b/stairctl/build.gradle @@ -2,9 +2,9 @@ plugins { id 'application' id 'stairway.java-conventions' - id 'io.spring.dependency-management' version '1.1.5' + id 'io.spring.dependency-management' version '1.1.6' // Spring Boot and Spring Shell versions should stay in sync - id 'org.springframework.boot' version '3.3.1' + id 'org.springframework.boot' version '3.3.2' } version = gradle.version diff --git a/stairway-azure/build.gradle b/stairway-azure/build.gradle index 0ef5a978..9f49ef21 100644 --- a/stairway-azure/build.gradle +++ b/stairway-azure/build.gradle @@ -5,14 +5,14 @@ plugins { dependencies { api project(':stairway') - implementation group: 'org.apache.commons', name: 'commons-lang3', version: '3.14.0' + implementation group: 'org.apache.commons', name: 'commons-lang3', version: '3.15.0' //Azure service bus dependencies - implementation 'com.azure:azure-messaging-servicebus:7.17.1' - implementation 'com.azure:azure-identity:1.13.0' + implementation 'com.azure:azure-messaging-servicebus:7.17.2' + implementation 'com.azure:azure-identity:1.13.2' // Azure dependencies pull in out-of-date, vulnerable io.netty dependencies. // If they update them in a future release, this may be removed: - implementation platform('io.netty:netty-bom:4.1.111.Final') + implementation platform('io.netty:netty-bom:4.1.112.Final') testImplementation 'org.mockito:mockito-junit-jupiter:5.12.0' } diff --git a/stairway-gcp/build.gradle b/stairway-gcp/build.gradle index dc5b6b7f..6bf112bf 100644 --- a/stairway-gcp/build.gradle +++ b/stairway-gcp/build.gradle @@ -5,10 +5,10 @@ plugins { dependencies { api project(':stairway') - implementation group: 'org.apache.commons', name: 'commons-lang3', version: '3.14.0' + implementation group: 'org.apache.commons', name: 'commons-lang3', version: '3.15.0' // Google dependencies - implementation platform('com.google.cloud:libraries-bom:26.42.0') // use common bom + implementation platform('com.google.cloud:libraries-bom:26.43.0') // use common bom implementation group: 'com.google.cloud', name: 'google-cloud-pubsub' } diff --git a/stairway/build.gradle b/stairway/build.gradle index 184b7616..257dfbb6 100644 --- a/stairway/build.gradle +++ b/stairway/build.gradle @@ -5,11 +5,11 @@ plugins { dependencies { implementation group: 'org.apache.commons', name: 'commons-dbcp2', version: '2.12.0' implementation group: 'org.apache.commons', name: 'commons-pool2', version: '2.12.0' - implementation group: 'org.apache.commons', name: 'commons-lang3', version: '3.14.0' + implementation group: 'org.apache.commons', name: 'commons-lang3', version: '3.15.0' implementation group: 'org.apache.commons', name: 'commons-collections4', version: '4.4' // JSON processing - implementation platform('com.fasterxml.jackson:jackson-bom:2.17.1') + implementation platform('com.fasterxml.jackson:jackson-bom:2.17.2') implementation group: 'com.fasterxml.jackson.core', name: 'jackson-databind' implementation group: 'com.fasterxml.jackson.datatype', name: 'jackson-datatype-guava' implementation group: 'com.fasterxml.jackson.datatype', name: 'jackson-datatype-jdk8' @@ -18,17 +18,17 @@ dependencies { implementation group: 'org.openapitools', name: 'jackson-databind-nullable', version: '0.2.6' // Spring - implementation group: 'org.springframework', name: 'spring-context', version: '6.1.10' - implementation group: 'org.springframework', name: 'spring-web', version: '6.1.10' + implementation group: 'org.springframework', name: 'spring-context', version: '6.1.11' + implementation group: 'org.springframework', name: 'spring-web', version: '6.1.11' // Annotations implementation group: 'jakarta.annotation', name: 'jakarta.annotation-api', version: '3.0.0' // Database - implementation group: 'org.liquibase', name: 'liquibase-core', version: '4.28.0' + implementation group: 'org.liquibase', name: 'liquibase-core', version: '4.29.1' // Google dependencies - implementation platform('com.google.cloud:libraries-bom:26.42.0') // use common bom + implementation platform('com.google.cloud:libraries-bom:26.43.0') // use common bom implementation group: 'com.google.cloud', name: 'google-cloud-pubsub' // File handling during testing