Skip to content

chore: [DevOps] bump the production-minor-patch group with 7 updates#768

Closed
dependabot[bot] wants to merge 2 commits intomainfrom
dependabot/maven/main/production-minor-patch-f0fe807741
Closed

chore: [DevOps] bump the production-minor-patch group with 7 updates#768
dependabot[bot] wants to merge 2 commits intomainfrom
dependabot/maven/main/production-minor-patch-f0fe807741

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 31, 2025

Bumps the production-minor-patch group with 7 updates:

Package From To
io.swagger.parser.v3:swagger-parser 2.1.25 2.1.26
io.swagger.parser.v3:swagger-parser-core 2.1.25 2.1.26
com.puppycrawl.tools:checkstyle 10.21.4 10.22.0
org.projectlombok:lombok 1.18.36 1.18.38
com.google.guava:guava 33.4.5-jre 33.4.6-jre
org.apache.httpcomponents.client5:httpclient5 5.4.2 5.4.3
joda-time:joda-time 2.13.1 2.14.0

Updates io.swagger.parser.v3:swagger-parser from 2.1.25 to 2.1.26

Release notes

Sourced from io.swagger.parser.v3:swagger-parser's releases.

Swagger-parser 2.1.26 released!

  • allow non explicit style and explode with 'explicitStyleAndExplode' option (#2161)
  • fix(#2104): properly process inline refs in composed schemas (#2123)
Commits
  • eb23c46 prepare release 2.1.26
  • 36d791b fix(#2104): properly process inline refs in composed schemas
  • eabb6f1 update dependencies
  • 4f58976 allow non explicit style and explode with 'explicitStyleAndExplode' option
  • d395885 bump snapshot 2.1.26-SNAPSHOT
  • See full diff in compare view

Updates io.swagger.parser.v3:swagger-parser-core from 2.1.25 to 2.1.26

Updates io.swagger.parser.v3:swagger-parser-core from 2.1.25 to 2.1.26

Updates com.puppycrawl.tools:checkstyle from 10.21.4 to 10.22.0

Release notes

Sourced from com.puppycrawl.tools:checkstyle's releases.

checkstyle-10.22.0

Checkstyle 10.22.0 - https://checkstyle.org/releasenotes.html#Release_10.22.0

Breaking backward compatibility:

#9280 - JavadocVariable: new property 'accessModifiers' as substitution of 'scope' and 'excludeScope' #15499 - Change default or IllegalIdentifierName

Bug fixes:

#16641 - FileContents.getJavadocBefore(): Comments should not be skipped if it is not alone in line #16385 - JavadocTagContinuationIndentation Ignore indentation check when HTML tag break line #16628 - use SLL prediction mode for fast javadoc parsing to improve performance #43 - JavadocMethod: Javadoc Not Detected Above Multiline Comments #12817 - Incorrect Indentation errors for expression switches with google_checks.xml #6637 - SuppressWarningsHolder aliasList members don't act like aliases #13043 - Make references optional for link and linkplain tags #16005 - Parse errors if ``@see spans multiple lines #14446 - Parse error when Javadoc contains `@`snippet with code example that uses Java annotation

... (truncated)

Commits
  • b20ca3b [maven-release-plugin] prepare release checkstyle-10.22.0
  • b5c86f5 doc: release notes for 10.22.0
  • 1a6caf2 Issue #14631: Updated INPUT_HTML_TAG_NAME to new AST format
  • 82c21d5 Issue #16666: Updated Broken Link - Javadoc OpenJDK 8 Report in website, 404 ...
  • 23c3c59 Issue #16641: FileContents.getJavadocBefore should skip block comments only i...
  • 9fb5504 Issue #14857: Github generate site fails to generate links with anchors
  • e1c89b9 infra: update google-java-format.yml to 1.26.0 formatter
  • 06074e5 Issue #14631: Updated LITERAL_INCLUDE in JavadocTokenTypes.java to new AST fo...
  • b5c64b2 Issue #11163: Enforce file size for javaParser
  • ae8fde4 Issue #14631: Updated TR_TAG_END in JavadocTokenTypes.java to new AST format
  • Additional commits viewable in compare view

Updates org.projectlombok:lombok from 1.18.36 to 1.18.38

Changelog

Sourced from org.projectlombok:lombok's changelog.

v1.18.38 (March 31st, 2025)

  • PLATFORM: JDK24 support added.
  • FEATURE: Lombok's nullity annotation now supports JSpecify out of the box, using config key jspecify.
  • BUGFIX: Recent eclipse releases would get you 'negative length' error. The bug had always been in lombok but didn't matter until recent releases. [Issue #3823](projectlombok/lombok#3823).
  • BUGFIX: The 'extract local variable' refactor script of VSCode wouldn't replace all occurrences if run on a method call to a lombok generated method. [Issue #3783](projectlombok/lombok#3783).
Commits
  • 37b7e19 [release] pre-release version bump for v1.18.38
  • ec886ae [changelog] Mention fixing of #3783 in changelog.
  • ed0965b [docs] Cleaned up use of \<p> in maven and edge html.
  • b7896c5 #3824 Our own 'Comment' ad hoc impl now also needs to provide an impl for `...
  • 8ed8234 [unused-code] We kept a ref to the storeEnd in PrettyPrinter but we never u...
  • 975f96f Merge pull request #3856 from mmoayyed/github-workflow-config
  • 7783760 Fix github workflow YAML configuration
  • 3aa9779 [changelog] Mention fix for eclipse negative length (#3823) in changelog.
  • f4e5bbb [fix #3839] Fixing a mistake in my merge of 3939.
  • 41dfb0d [fix #3825] Stub compilation requires all non-core-java classes to be stubbed.
  • Additional commits viewable in compare view

Updates com.google.guava:guava from 33.4.5-jre to 33.4.6-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.4.6

Guava 33.4.6 fixes two problems that we introduced while modularizing Guava in 33.4.5.

Even if you're not upgrading from Guava 33.4.0 or earlier, still read the release notes for Guava 33.4.1. Those release notes contain information about Guava 33.4.5 and 33.4.6's effect on the module system.

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.4.6-jre</version>
  <!-- or, for Android: -->
  <version>33.4.6-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

  • Removed the extra copy of each class from the Guava jar. The extra copies were an accidental addition from the modularization work in Guava 33.4.5. (40485b93ce)
  • Fixed annotation-related warnings when using Guava in modular builds. The most common such warning is Cannot find annotation method 'value()' in type 'DoNotMock': .... (7e15ab3566)
Commits

Updates org.apache.httpcomponents.client5:httpclient5 from 5.4.2 to 5.4.3

Changelog

Sourced from org.apache.httpcomponents.client5:httpclient5's changelog.

Release 5.4.3

This maintenance release upgrades HttpCore to version 5.3.4 and fixes a regression preventing the PublicSuffixMatcherLoader from finding the resource containing the Public Suffix List and causing the Public Suffix List to be empty by default.

Change Log

  • MultipartEntityBuilder to include a random UUID in the boundary value by default. Contributed by Oleg Kalnichevski

  • HTTPCLIENT-2363: Ensure requests have a scheme and an authority populated before they get committed to the execution pipeline. Contributed by Oleg Kalnichevski

  • Upgraded HttpCore to version 5.3.4. Contributed by Oleg Kalnichevski

  • Fix PublicSuffixMatcherLoader#getDefault (#621). Contributed by Joe Gallo joegallo@gmail.com

  • HTTPCLIENT-2361: HTTP protocol handler to tolerate multiple Cookie headers added manually by the caller. Contributed by Oleg Kalnichevski

Commits
  • 48236f5 HttpClient 5.4.3 release
  • 36e40cd Updated release notes for HttpClient 5.4.3 release
  • d5622dc MultipartEntityBuilder to include a random UUID in the boundary value by default
  • 8d0f3b1 HTTPCLIENT-2363: ensure requests have a scheme and an authority populated bef...
  • 783502e Upgraded HttpCore to version 5.3.4
  • 98e8e9d Updated MultipartEntityBuilder javadocs clarifying content validation and san...
  • bff9c47 Fix PublicSuffixMatcherLoader#getDefault (#621)
  • b7ece75 HTTPCLIENT-2361: Tolerate multiple Cookie headers added by the caller
  • ad82f0d Upgraded HttpClient version to 5.4.3-SNAPSHOT
  • See full diff in compare view

Updates joda-time:joda-time from 2.13.1 to 2.14.0

Release notes

Sourced from joda-time:joda-time's releases.

Release v2.14.0

See the change notes for more information.

What's Changed

Full Changelog: JodaOrg/joda-time@v2.13.1...v2.14.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Mar 31, 2025
@bot-sdk-js bot-sdk-js enabled auto-merge (squash) April 1, 2025 10:19
bot-sdk-js
bot-sdk-js previously approved these changes Apr 1, 2025
Bumps the production-minor-patch group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [io.swagger.parser.v3:swagger-parser](https://github.com/swagger-api/swagger-parser) | `2.1.25` | `2.1.26` |
| io.swagger.parser.v3:swagger-parser-core | `2.1.25` | `2.1.26` |
| [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) | `10.21.4` | `10.22.0` |
| [org.projectlombok:lombok](https://github.com/projectlombok/lombok) | `1.18.36` | `1.18.38` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.4.5-jre` | `33.4.6-jre` |
| [org.apache.httpcomponents.client5:httpclient5](https://github.com/apache/httpcomponents-client) | `5.4.2` | `5.4.3` |
| [joda-time:joda-time](https://github.com/JodaOrg/joda-time) | `2.13.1` | `2.14.0` |


Updates `io.swagger.parser.v3:swagger-parser` from 2.1.25 to 2.1.26
- [Release notes](https://github.com/swagger-api/swagger-parser/releases)
- [Commits](swagger-api/swagger-parser@v2.1.25...v2.1.26)

Updates `io.swagger.parser.v3:swagger-parser-core` from 2.1.25 to 2.1.26

Updates `io.swagger.parser.v3:swagger-parser-core` from 2.1.25 to 2.1.26

Updates `com.puppycrawl.tools:checkstyle` from 10.21.4 to 10.22.0
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](checkstyle/checkstyle@checkstyle-10.21.4...checkstyle-10.22.0)

Updates `org.projectlombok:lombok` from 1.18.36 to 1.18.38
- [Changelog](https://github.com/projectlombok/lombok/blob/master/doc/changelog.markdown)
- [Commits](projectlombok/lombok@v1.18.36...v1.18.38)

Updates `com.google.guava:guava` from 33.4.5-jre to 33.4.6-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `org.apache.httpcomponents.client5:httpclient5` from 5.4.2 to 5.4.3
- [Changelog](https://github.com/apache/httpcomponents-client/blob/rel/v5.4.3/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-client@rel/v5.4.2...rel/v5.4.3)

Updates `joda-time:joda-time` from 2.13.1 to 2.14.0
- [Release notes](https://github.com/JodaOrg/joda-time/releases)
- [Changelog](https://github.com/JodaOrg/joda-time/blob/main/RELEASE-NOTES.txt)
- [Commits](JodaOrg/joda-time@v2.13.1...v2.14.0)

---
updated-dependencies:
- dependency-name: io.swagger.parser.v3:swagger-parser
  dependency-version: 2.1.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: io.swagger.parser.v3:swagger-parser-core
  dependency-version: 2.1.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: io.swagger.parser.v3:swagger-parser-core
  dependency-version: 2.1.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: 10.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: org.projectlombok:lombok
  dependency-version: 1.18.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: com.google.guava:guava
  dependency-version: 33.4.6-jre
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: org.apache.httpcomponents.client5:httpclient5
  dependency-version: 5.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: joda-time:joda-time
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/maven/main/production-minor-patch-f0fe807741 branch from 7446b1e to 02ad513 Compare April 1, 2025 10:20
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 7, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Apr 7, 2025
auto-merge was automatically disabled April 7, 2025 22:09

Pull request was closed

@dependabot dependabot bot deleted the dependabot/maven/main/production-minor-patch-f0fe807741 branch April 7, 2025 22:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants