Skip to content

Pre-2.20.0 dependency version dump#1209

Merged
ppkarwasz merged 19 commits intoapache:release-2.xfrom
ppkarwasz:deps-202301
Jan 15, 2023
Merged

Pre-2.20.0 dependency version dump#1209
ppkarwasz merged 19 commits intoapache:release-2.xfrom
ppkarwasz:deps-202301

Conversation

@ppkarwasz
Copy link
Contributor

This PR contains most upgrade suggestions from Dependabot since the latest 2.19.0 release.

Only LevelMixInXmlTest gave some problems with the newest Jackson version, but I came to the conclusion that it didn't apply: XML documents must have a root element, so simple text-only values such as Level are serialized as complex values. The deserializer can not always decide whether the document is a "JSON string" or "JSON object" and results vary between Jackson version.

dependabot bot and others added 19 commits January 14, 2023 21:33
Bumps [woodstox-core](https://github.com/FasterXML/woodstox) from 6.3.1 to 6.4.0.
- [Release notes](https://github.com/FasterXML/woodstox/releases)
- [Commits](FasterXML/woodstox@woodstox-core-6.3.1...woodstox-core-6.4.0)

---
updated-dependencies:
- dependency-name: com.fasterxml.woodstox:woodstox-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [plexus-utils](https://github.com/codehaus-plexus/plexus-utils) from 3.4.2 to 3.5.0.
- [Release notes](https://github.com/codehaus-plexus/plexus-utils/releases)
- [Commits](codehaus-plexus/plexus-utils@plexus-utils-3.4.2...plexus-utils-3.5.0)

---
updated-dependencies:
- dependency-name: org.codehaus.plexus:plexus-utils
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps `flume.version` from 1.10.1 to 1.11.0.

Updates `flume-file-channel` from 1.10.1 to 1.11.0

Updates `flume-ng-core` from 1.10.1 to 1.11.0

Updates `flume-ng-embedded-agent` from 1.10.1 to 1.11.0

Updates `flume-ng-node` from 1.10.1 to 1.11.0

Updates `flume-ng-sdk` from 1.10.1 to 1.11.0

---
updated-dependencies:
- dependency-name: org.apache.flume.flume-ng-channels:flume-file-channel
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: org.apache.flume:flume-ng-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.apache.flume:flume-ng-embedded-agent
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.apache.flume:flume-ng-node
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.apache.flume:flume-ng-sdk
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps commons-compress from 1.21 to 1.22.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-compress
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps `cassandra.version` from 3.11.13 to 3.11.14.

Updates `cassandra-all` from 3.11.13 to 3.11.14

Updates `cassandra-thrift` from 3.11.13 to 3.11.14

---
updated-dependencies:
- dependency-name: org.apache.cassandra:cassandra-all
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: org.apache.cassandra:cassandra-thrift
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps `jmh.version` from 1.35 to 1.36.

Updates `jmh-core` from 1.35 to 1.36
- [Release notes](https://github.com/openjdk/jmh/releases)
- [Commits](openjdk/jmh@1.35...1.36)

Updates `jmh-generator-annprocess` from 1.35 to 1.36
- [Release notes](https://github.com/openjdk/jmh/releases)
- [Commits](openjdk/jmh@1.35...1.36)

---
updated-dependencies:
- dependency-name: org.openjdk.jmh:jmh-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.openjdk.jmh:jmh-generator-annprocess
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [spring-ws-core](https://github.com/spring-projects/spring-ws) from 3.1.3 to 4.0.0.
- [Release notes](https://github.com/spring-projects/spring-ws/releases)
- [Commits](spring-projects/spring-ws@v3.1.3...v4.0.0)

---
updated-dependencies:
- dependency-name: org.springframework.ws:spring-ws-core
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [wiremock-jre8](https://github.com/wiremock/wiremock) from 2.34.0 to 2.35.0.
- [Release notes](https://github.com/wiremock/wiremock/releases)
- [Commits](wiremock/wiremock@2.34.0...2.35.0)

---
updated-dependencies:
- dependency-name: com.github.tomakehurst:wiremock-jre8
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [jackson-bom](https://github.com/FasterXML/jackson-bom) from 2.13.4.20221013 to 2.14.1.
- [Release notes](https://github.com/FasterXML/jackson-bom/releases)
- [Commits](FasterXML/jackson-bom@jackson-bom-2.13.4.20221013...jackson-bom-2.14.1)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps `mockito.version` from 4.8.1 to 4.11.0.

Updates `mockito-core` from 4.8.1 to 4.11.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v4.8.1...v4.11.0)

Updates `mockito-inline` from 4.8.1 to 4.11.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v4.8.1...v4.11.0)

Updates `mockito-junit-jupiter` from 4.8.1 to 4.11.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v4.8.1...v4.11.0)

---
updated-dependencies:
- dependency-name: org.mockito:mockito-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.mockito:mockito-inline
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.mockito:mockito-junit-jupiter
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [spring-framework-bom](https://github.com/spring-projects/spring-framework) from 5.3.23 to 5.3.24.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v5.3.23...v5.3.24)

---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps `spring-boot.version` from 2.7.5 to 2.7.7.

Updates `spring-boot` from 2.7.5 to 2.7.7
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v2.7.5...v2.7.7)

Updates `spring-boot-starter-test` from 2.7.5 to 2.7.7
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v2.7.5...v2.7.7)

Updates `spring-boot-dependencies` from 2.7.5 to 2.7.7
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v2.7.5...v2.7.7)

Updates `spring-boot-maven-plugin` from 2.7.5 to 2.7.7
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v2.7.5...v2.7.7)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.springframework.boot:spring-boot-starter-test
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [groovy-bom](https://github.com/apache/groovy) from 3.0.13 to 3.0.14.
- [Release notes](https://github.com/apache/groovy/releases)
- [Commits](https://github.com/apache/groovy/commits)

---
updated-dependencies:
- dependency-name: org.codehaus.groovy:groovy-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [elasticsearch-rest-high-level-client](https://github.com/elastic/elasticsearch) from 7.17.6 to 7.17.8.
- [Release notes](https://github.com/elastic/elasticsearch/releases)
- [Changelog](https://github.com/elastic/elasticsearch/blob/main/CHANGELOG.md)
- [Commits](elastic/elasticsearch@v7.17.6...v7.17.8)

---
updated-dependencies:
- dependency-name: org.elasticsearch.client:elasticsearch-rest-high-level-client
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [activemq-broker](https://github.com/apache/activemq) from 5.17.2 to 5.17.3.
- [Release notes](https://github.com/apache/activemq/releases)
- [Commits](apache/activemq@activemq-5.17.2...activemq-5.17.3)

---
updated-dependencies:
- dependency-name: org.apache.activemq:activemq-broker
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [jeromq](https://github.com/zeromq/jeromq) from 0.5.2 to 0.5.3.
- [Release notes](https://github.com/zeromq/jeromq/releases)
- [Changelog](https://github.com/zeromq/jeromq/blob/master/CHANGELOG.md)
- [Commits](zeromq/jeromq@v0.5.2...v0.5.3)

---
updated-dependencies:
- dependency-name: org.zeromq:jeromq
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [netty-bom](https://github.com/netty/netty) from 4.1.84.Final to 4.1.86.Final.
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.1.84.Final...netty-4.1.86.Final)

---
updated-dependencies:
- dependency-name: io.netty:netty-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [jetty-bom](https://github.com/eclipse/jetty.project) from 9.4.49.v20220914 to 9.4.50.v20221201.
- [Release notes](https://github.com/eclipse/jetty.project/releases)
- [Commits](jetty/jetty.project@jetty-9.4.49.v20220914...jetty-9.4.50.v20221201)

---
updated-dependencies:
- dependency-name: org.eclipse.jetty:jetty-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
The `LevelMixInXmlTest#testNameOnly` works sporadically on certain
Jackson versions. Anyway it doesn't make sense to serialize simple
string values as XML documents (that must always have a root).

The other test in `LevelMixInXmlTest` works correctly.
@ppkarwasz ppkarwasz merged commit c5cff93 into apache:release-2.x Jan 15, 2023
@ppkarwasz ppkarwasz deleted the deps-202301 branch January 15, 2023 22:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

Comments