Skip to content

Bump the maven-dependencies group with 3 updates#418

Merged
smcvb merged 1 commit intomasterfrom
dependabot/maven/maven-dependencies-87f76ec9c9
Mar 31, 2025
Merged

Bump the maven-dependencies group with 3 updates#418
smcvb merged 1 commit intomasterfrom
dependabot/maven/maven-dependencies-87f76ec9c9

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 30, 2025

Bumps the maven-dependencies group with 3 updates: com.google.protobuf:protobuf-bom, org.junit.support:testng-engine and org.apache.httpcomponents.client5:httpclient5.

Updates com.google.protobuf:protobuf-bom from 4.30.1 to 4.30.2

Commits
  • 43e1626 Updating version.json and repo version numbers to: 30.2
  • 7a4c63b Fix lite classes in the protobuf-java Maven release to be JDK8 compatible. (#...
  • 7831669 Remove dllexport attribute on variable definition. (#20833)
  • da9cadc Restore JDK8 compatibility in Bazel for libraries with dependencies from Mave...
  • 09b5078 Add protobuf_maven artifacts to protobuf_maven_dev as well so they can still ...
  • b7f06f1 Add volatile to featuresResolved (#20766)
  • b69f653 Restore generator headers in cmake install until the next breaking C++ releas...
  • f4b0a79 Restore custom protobuf maven namespaces to avoid polluting main maven namesp...
  • 2dc9f35 Fix Java concurrency issue in feature resolution for old <=3.25.x gencode usi...
  • 221b2a0 Change how we decide which empty string implementation to use. (#20708)
  • Additional commits viewable in compare view

Updates org.junit.support:testng-engine from 1.0.5 to 1.0.6

Release notes

Sourced from org.junit.support:testng-engine's releases.

1.0.6

Fixed

New Contributors

Full Changelog: junit-team/testng-engine@r1.0.5...r1.0.6

Commits
  • 4181273 Release 1.0.6
  • 7370434 Update documented versions
  • 9c817e2 Avoid NoSuchElementException caused by skipped config method
  • b6fde3f Update plugin com.gradle.common-custom-user-data-gradle-plugin to v2.2.1
  • 0795905 Update plugin com.gradle.common-custom-user-data-gradle-plugin to v2.2
  • 2b52d09 Update gradle/actions action to v4.3.1
  • 94eb2b7 Update oracle-actions/setup-java action to v1.4.1
  • f79cd70 Adjust CI builds to JDK 24 release
  • 4f84e6f Update dependency org.mockito:mockito-junit-jupiter to v5.16.1
  • fdafcc6 Update dependency org.mockito:mockito-junit-jupiter to v5.16.0
  • Additional commits viewable in compare view

Updates org.apache.httpcomponents.client5:httpclient5 from 5.4.2 to 5.4.3

Changelog

Sourced from org.apache.httpcomponents.client5:httpclient5's changelog.

Release 5.4.3

This maintenance release upgrades HttpCore to version 5.3.4 and fixes a regression preventing the PublicSuffixMatcherLoader from finding the resource containing the Public Suffix List and causing the Public Suffix List to be empty by default.

Change Log

  • MultipartEntityBuilder to include a random UUID in the boundary value by default. Contributed by Oleg Kalnichevski

  • HTTPCLIENT-2363: Ensure requests have a scheme and an authority populated before they get committed to the execution pipeline. Contributed by Oleg Kalnichevski

  • Upgraded HttpCore to version 5.3.4. Contributed by Oleg Kalnichevski

  • Fix PublicSuffixMatcherLoader#getDefault (#621). Contributed by Joe Gallo joegallo@gmail.com

  • HTTPCLIENT-2361: HTTP protocol handler to tolerate multiple Cookie headers added manually by the caller. Contributed by Oleg Kalnichevski

Commits
  • 48236f5 HttpClient 5.4.3 release
  • 36e40cd Updated release notes for HttpClient 5.4.3 release
  • d5622dc MultipartEntityBuilder to include a random UUID in the boundary value by default
  • 8d0f3b1 HTTPCLIENT-2363: ensure requests have a scheme and an authority populated bef...
  • 783502e Upgraded HttpCore to version 5.3.4
  • 98e8e9d Updated MultipartEntityBuilder javadocs clarifying content validation and san...
  • bff9c47 Fix PublicSuffixMatcherLoader#getDefault (#621)
  • b7ece75 HTTPCLIENT-2361: Tolerate multiple Cookie headers added by the caller
  • ad82f0d Upgraded HttpClient version to 5.4.3-SNAPSHOT
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven-dependencies group with 3 updates: [com.google.protobuf:protobuf-bom](https://github.com/protocolbuffers/protobuf), [org.junit.support:testng-engine](https://github.com/junit-team/testng-engine) and [org.apache.httpcomponents.client5:httpclient5](https://github.com/apache/httpcomponents-client).


Updates `com.google.protobuf:protobuf-bom` from 4.30.1 to 4.30.2
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](protocolbuffers/protobuf@v4.30.1...v4.30.2)

Updates `org.junit.support:testng-engine` from 1.0.5 to 1.0.6
- [Release notes](https://github.com/junit-team/testng-engine/releases)
- [Commits](junit-team/testng-engine@r1.0.5...r1.0.6)

Updates `org.apache.httpcomponents.client5:httpclient5` from 5.4.2 to 5.4.3
- [Changelog](https://github.com/apache/httpcomponents-client/blob/rel/v5.4.3/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-client@rel/v5.4.2...rel/v5.4.3)

---
updated-dependencies:
- dependency-name: com.google.protobuf:protobuf-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.junit.support:testng-engine
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.httpcomponents.client5:httpclient5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added this to the Axon Server Connector for Java 2025.0.0 milestone Mar 30, 2025
@sonarqubecloud
Copy link

@sonarqubecloud
Copy link

Please retry analysis of this Pull-Request directly on SonarQube Cloud

Copy link
Contributor

@smcvb smcvb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me 👍

@smcvb smcvb merged commit f23ce52 into master Mar 31, 2025
5 of 6 checks passed
@dependabot dependabot bot deleted the dependabot/maven/maven-dependencies-87f76ec9c9 branch March 31, 2025 07:28
@smcvb smcvb self-assigned this Mar 31, 2025
@smcvb smcvb modified the milestones: Axon Server Connector for Java 2025.0.0, Axon Server Connector for Java 2025.1.0 Jul 9, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant