Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
pl.project13.maven:git-commit-id-plugin	4.0.3 -> 4.9.10
org.apache.maven.plugins:maven-surefire-plugin	3.0.0-M5 -> 3.3.0
mysql:mysql-connector-java	8.0.23 -> 8.0.33
org.webjars.bower:moment (source)	2.27.0 -> 2.29.4
org.webjars.bower:jquery (source)	3.5.1 -> 3.7.1
org.webjars:font-awesome (source)	5.15.1 -> 5.15.4
org.webjars:Eonasdan-bootstrap-datetimepicker (source)	4.17.47 -> 4.17.49
org.webjars:bootstrap (source)	3.3.7 -> 3.4.1
org.codehaus.castor:castor-jdo (source)	1.3.3-rc1 -> 1.3.3-SNAPSHOT
commons-io:commons-io (source)	2.8.0 -> 2.16.1
junit:junit (source)	4.13.1 -> 4.13.2
net.sf.saxon:Saxon-HE (source)	10.3 -> 10.9
org.jsoup:jsoup (source)	1.13.1 -> 1.17.2
org.apache.maven.plugins:maven-compiler-plugin	3.8.1 -> 3.13.0
info.cqframework:cql-formatter (source)	1.5.1 -> 1.5.12
com.sun.xml.bind:jaxb-impl (source)	3.0.0 -> 3.0.2
com.sun.xml.bind:jaxb-core (source)	3.0.0 -> 3.0.2
org.eclipse.persistence:org.eclipse.persistence.jpa.modelgen.processor (source)	2.7.7 -> 2.7.15
org.opencds.cqf:r4 (source)	0.4.0 -> 0.4.1
info.cqframework:qdm (source)	1.5.4 -> 1.5.12
info.cqframework:quick (source)	1.5.4 -> 1.5.12
info.cqframework:elm (source)	1.5.4 -> 1.5.12
info.cqframework:cql-to-elm (source)	1.5.4 -> 1.5.12
info.cqframework:model (source)	1.5.4 -> 1.5.12
info.cqframework:cql (source)	1.5.4 -> 1.5.12
org.apache.maven.plugins:maven-war-plugin	3.3.1 -> 3.4.0
org.eclipse.persistence:eclipselink (source)	2.7.7 -> 2.7.15
org.apache.tomcat.embed:tomcat-embed-core	9.0.83 -> 9.0.90
org.slf4j:slf4j-api (source, changelog)	1.7.30 -> 1.7.36
org.springdoc:springdoc-openapi-ui (source)	1.5.4 -> 1.8.0
ca.uhn.hapi.fhir:hapi-fhir-validation-resources-r4 (source)	5.0.2 -> 5.7.9
ca.uhn.hapi.fhir:hapi-fhir-validation (source)	5.0.2 -> 5.7.9
ca.uhn.hapi.fhir:hapi-fhir-structures-r5 (source)	5.0.2 -> 5.7.9
ca.uhn.hapi.fhir:hapi-fhir-structures-r4 (source)	5.0.2 -> 5.7.9
ca.uhn.hapi.fhir:hapi-fhir-client (source)	5.0.2 -> 5.7.9
ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (source)	5.0.2 -> 5.7.9
ca.uhn.hapi.fhir:hapi-fhir-jaxrsserver-base (source)	5.0.2 -> 5.7.9
ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (source)	5.0.2 -> 5.7.9
ca.uhn.hapi.fhir:hapi-fhir-spring-boot-starter (source)	5.0.2 -> 5.7.9
org.opencds.cqf:cqf-ruler-r4 (source)	0.4.0 -> 0.4.1
com.fasterxml.jackson.core:jackson-annotations (source)	2.12.1 -> 2.17.1
com.fasterxml.jackson.core:jackson-databind (source)	2.12.1 -> 2.17.1
org.springframework.boot:spring-boot-starter-parent (source)	2.6.15 -> 2.7.18

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

git-commit-id/git-commit-id-maven-plugin (pl.project13.maven:git-commit-id-plugin)

v4.9.10: Version 4.9.10 (The continued relocation saga)

Compare Source

Where should I start....this release should not exists.
Ideally the entire 4.9.9 "relocation" release was just intended to inform that the plugin moved to a new artifactId/groupId combination.

As outlined in https://github.com/git-commit-id/git-commit-id-maven-plugin/issues/571 or https://issues.apache.org/jira/browse/MNG-7204 there seems to be a problem where Maven will not forward the correct settings when you use the old coordinates with the 4.9.9 version.
Since the 4.9.9 release contains relocation information it essentially became unusable triggering this "fix".
Please note that the plugin is still moving to it's new coordinates.
This 4.9.10 release is just a follow up to avoid any silent configuration issues being present somewhere....

TLDR:
If you can use:

<groupId>io.github.git-commit-id</groupId>
<artifactId>git-commit-id-maven-plugin</artifactId>
<version>5.0.0</version>

v4.9.9: Version 4.9.9 (Relocation Release)

Compare Source

This is a special release and should function in the same way as v4.0.5.

⚠️ WARNING
Based on the issue outlined in https://github.com/git-commit-id/git-commit-id-maven-plugin/issues/571 it is discouraged to use the old coordinates, since the plugin configuration might not be correctly applied to the plugin. Feel free to follow https://issues.apache.org/jira/browse/MNG-7204 for further informations.

Initially this release was just intended to inform that the plugin moved to a new artifactId/groupId combination, but to avoid having published a release that might be considered broken I decided to just "fix" it.
Currently the 4.9.9 release works only when using the new coordinates

<groupId>io.github.git-commit-id</groupId>
<artifactId>git-commit-id-maven-plugin</artifactId>
<version>4.9.9</version>

v4.0.5: Version 4.0.5

Compare Source

Version 4.0.5 is finally there and includes various bug-fixes and improvements :-)

New Features / Bug-Fixes:

The main key-aspects that have been improved or being worked on are the following:

• #​547 / #​540: add org.eclipse.jgit:org.eclipse.jgit.ssh.jsch as dependency
• #​548 / #​549: Plugin breaks if git config log.showSignature is 'true'
• #​556: update dependencies

Getting the latest release

The plugin is available from Maven Central (see here), so you don't have to configure any additional repositories to use this plugin. All you need to do is to configure it inside your project as dependency:

<dependency>
    <groupId>pl.project13.maven</groupId>
    <artifactId>git-commit-id-plugin</artifactId>
    <version>4.0.5</version>
</dependency>

Getting the latest snapshot (build automatically)

If you can't wait for the next release, you can also get the latest snapshot version from sonatype, that is being deployed automatically by travis:

<pluginRepositories>
    <pluginRepository>
        <id>sonatype-snapshots</id>
        <name>Sonatype Snapshots</name>
        <url>https://oss.sonatype.org/content/repositories/snapshots/</url>
    </pluginRepository>
</pluginRepositories>

Even though travis will only deploy a new snapshot once all tests have finished, it is recommended to rely on the released and more stable version.

Known Issues / Limitations:

• This plugin is unfortunately not working with Heroku which is due to the fact how Heroku works. In summary Heroku does not copy over the .git-repository but in order to determine the git properties this plugin relies on the fact that it has access to the git-repository. A somewhat workaround to get some information is outlined in https://github.com/ktoso/maven-git-commit-id-plugin/issues/279#issuecomment-301284022
• Using maven's plugin prefix resolution (e.g. mvn com.test.plugins:myPlugin:myMojo) might result in unresolved properties even with <injectAllReactorProjects>true</injectAllReactorProjects>. Please refer to https://github.com/git-commit-id/maven-git-commit-id-plugin/issues/287 or https://github.com/git-commit-id/maven-git-commit-id-plugin/issues/413#issuecomment-487952607 for details and potential workarounds

Reporting Problems

If you find any problem with this plugin, feel free to report it here

v4.0.4: Version 4.0.4

Compare Source

Version 4.0.4 is finally there and includes various bug-fixes and improvements :-)

New Features / Bug-Fixes:

The main key-aspects that have been improved or being worked on are the following:

• #​531 / #​532: fix a NullPointerException when session.getProjectDependencyGraph() might be null when running the plugin from eclipse
• #​523 / #​534: Avoid illegal reflective access warning in JDK11
• #​539: Support Bitbucket Pipelines CI for build number and branch
• #​544: add support for author and commiter times (properties will be exposed as git.commit.author.time, git.commit.committer.time)
• #​529: update dependencies

Getting the latest release

The plugin is available from Maven Central (see here), so you don't have to configure any additional repositories to use this plugin. All you need to do is to configure it inside your project as dependency:

<dependency>
    <groupId>pl.project13.maven</groupId>
    <artifactId>git-commit-id-plugin</artifactId>
    <version>4.0.4</version>
</dependency>

Getting the latest snapshot (build automatically)

If you can't wait for the next release, you can also get the latest snapshot version from sonatype, that is being deployed automatically by travis:

<pluginRepositories>
    <pluginRepository>
        <id>sonatype-snapshots</id>
        <name>Sonatype Snapshots</name>
        <url>https://oss.sonatype.org/content/repositories/snapshots/</url>
    </pluginRepository>
</pluginRepositories>

Even though travis will only deploy a new snapshot once all tests have finished, it is recommended to rely on the released and more stable version.

Known Issues / Limitations:

• This plugin is unfortunately not working with Heroku which is due to the fact how Heroku works. In summary Heroku does not copy over the .git-repository but in order to determine the git properties this plugin relies on the fact that it has access to the git-repository. A somewhat workaround to get some information is outlined in https://github.com/ktoso/maven-git-commit-id-plugin/issues/279#issuecomment-301284022
• Using maven's plugin prefix resolution (e.g. mvn com.test.plugins:myPlugin:myMojo) might result in unresolved properties even with <injectAllReactorProjects>true</injectAllReactorProjects>. Please refer to https://github.com/git-commit-id/maven-git-commit-id-plugin/issues/287 or https://github.com/git-commit-id/maven-git-commit-id-plugin/issues/413#issuecomment-487952607 for details and potential workarounds

Reporting Problems

If you find any problem with this plugin, feel free to report it here

moment/moment (org.webjars.bower:moment)

v2.29.4

Compare Source

• Release Jul 6, 2022
  • #​6015 [bugfix] Fix ReDoS in preprocessRFC2822 regex

v2.29.3

Compare Source

• Release Apr 17, 2022
  • #​5995 [bugfix] Remove const usage
  • #​5990 misc: fix advisory link

v2.29.1

Compare Source

• Release Oct 6, 2020

Updated deprecation message, bugfix in hi locale

jquery/jquery-dist (org.webjars.bower:jquery)

v3.7.1

Compare Source

v3.7.0

Compare Source

v3.6.3

Compare Source

v3.6.2

Compare Source

v3.6.1

Compare Source

v3.6.0

Compare Source

jhy/jsoup (org.jsoup:jsoup)

v1.17.2

Improvements

• Attribute object accessors: Added Element.attribute(String) and Attributes.attribute(String) to more simply
  obtain an Attribute object. 2069
• Attribute source tracking: If source tracking is on, and an Attribute's key is changed (
  via Attribute.setKey(String)), the source range is now still tracked
  in Attribute.sourceRange(). 2070
• Wildcard attribute selector: Added support for the [*] element with any attribute selector. And also restored
  support for selecting by an empty attribute name prefix ([^]). 2079

Bug Fixes

• Mixed-cased source position: When tracking the source position of attributes, if the source attribute name was
  mix-cased but the parser was lower-case normalizing attribute names, the source position for that attribute was not
  tracked correctly. 2067
• Source position NPE: When tracking the source position of a body fragment parse, a null pointer
  exception was thrown. 2068
• Multi-point emoji entity: A multi-point encoded emoji entity may be incorrectly decoded to the replacement
  character. 2074
• Selector sub-expressions: (Regression) in a selector like parent [attr=va], other, the , OR was binding
  to [attr=va] instead of parent [attr=va], causing incorrect selections. The fix includes a EvaluatorDebug class
  that generates a sexpr to represent the query, allowing simpler and more thorough query parse
  tests. 2073
• XML CData output: When generating XML-syntax output from parsed HTML, script nodes containing (pseudo) CData
  sections would have an extraneous CData section added, causing script execution errors. Now, the data content is
  emitted in a HTML/XML/XHTML polyglot format, if the data is not already within a CData
  section. 2078
• Thread safety: The :has evaluator held a non-thread-safe Iterator, and so if an Evaluator object was
  shared across multiple concurrent threads, a NoSuchElement exception may be thrown, and the selected results may be
  incorrect. Now, the iterator object is a thread-local. 2088

---

Older changes for versions 0.1.1 (2010-Jan-31) through 1.17.1 (2023-Nov-27) may be found in
change-archive.txt.

cqframework/clinical_quality_language (info.cqframework:cql-formatter)

v1.5.12: CQL 1.5 Maintenance Release (v1.5.12)

Compare Source

This is a maintenance release of the v1.5 version of the translator that incorporates several fixes for QICore ModelInfo as well as support for negation profiles in QICore:

What's Changed

• https://github.com/cqframework/clinical_quality_language/issues/724,https://github.com/cqframework/clinical_quality_language/issues/789: Fixed diagnosis cardinality; fixed missing primary code paths
• https://github.com/cqframework/clinical_quality_language/issues/803:
  • Expanded retrieve translation to support the case that a primary code path is a choice of Concept and ValueSet, resulting in the union of retrieves against the code element as a Concept and the code element as a ValueSet.
  • Expanded retrieve translation to support the case that a primary code path is a ValueSet, resulting in the use of a "contains" codeComparator.
  • Added a special-case exception to the use of the ValueSet type for FHIRHelpers in 1.4. It won't actually use it, but it has to be able to compile in order to be used backwards-compatibly.
  • Updated FHIRHelpers to add the ToValueSet function.
  • Updated QICore 4.0.0, 4.1.0, and 4.1.1 model infos.
  • Updated USCore 3.1.0 and 3.1.1 model infos.

Full Changelog: cqframework/clinical_quality_language@v1.5.11...v1.5.12

v1.5.11: CQL 1.5 Maintenance Release (v1.5.11)

Compare Source

What's Changed

• V15 by @​mdnazmulkarim in https://github.com/cqframework/clinical_quality_language/pull/776
• V 1.5.11 release by @​mdnazmulkarim in https://github.com/cqframework/clinical_quality_language/pull/778

Full Changelog: cqframework/clinical_quality_language@v1.5.10...v1.5.11

v1.5.10: CQL 1.5 Maintenance Release (v1.5.10)

Compare Source

What's Changed

• Add handling for empty source interval by @​JPercival in https://github.com/cqframework/clinical_quality_language/pull/772

Full Changelog: cqframework/clinical_quality_language@v1.5.9...v1.5.10

v1.5.9: CQL 1.5 Maintenance Release (v1.5.9)

Compare Source

What's Changed

• #​761: Fixed now(), today(), and timeOfDay() not resolving as FHIRPath… by @​brynrhodes in https://github.com/cqframework/clinical_quality_language/pull/762

Full Changelog: cqframework/clinical_quality_language@v1.5.8...v1.5.9

v1.5.8: CQL 1.5 Maintenance Release (v1.5.8)

Compare Source

What's Changed

• Updated Jackson and HAPI dependencies
• #​742 Added FHIR Platform API by @​brynrhodes in https://github.com/cqframework/clinical_quality_language/pull/743

Full Changelog: cqframework/clinical_quality_language@v1.5.7...v1.5.8

v1.5.7: CQL 1.5 Maintenance Release (v1.5.7)

Compare Source

What's Changed

• #​548: Fixed an error attempting to upcast to Any
• #​641: Support alphanumeric in version specifier by @​mdnazmulkarim in https://github.com/cqframework/clinical_quality_language/pull/679
• #​658: Improved condition type inference to use choice types
• #​672: Add option to load embedded model info by @​mdnazmulkarim in https://github.com/cqframework/clinical_quality_language/pull/717
• #​709: Added JavaDoc entries to CqlTranslatorOptions by @​echicoine-esac in https://github.com/cqframework/clinical_quality_language/pull/725
• #​715: Fixed the error "expected ElmExpressionRequirement" by @​brynrhodes in https://github.com/cqframework/clinical_quality_language/pull/716
• #​727: Fixed incorrect data requirements by @​brynrhodes in https://github.com/cqframework/clinical_quality_language/pull/728
• #​732: Fixed result type of FHIRPath extension functions and added modifierExtension functions by @​brynrhodes in https://github.com/cqframework/clinical_quality_language/pull/733
• #​739: The translator now correctly outputs a conversion function when… by @​brynrhodes in https://github.com/cqframework/clinical_quality_language/pull/740
• Fixed NPE during data requirements processing by @​brynrhodes in https://github.com/cqframework/clinical_quality_language/pull/737
• Added QICore 4.1.1 modelinfo to translator by [@​mholck](https://togithu

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.