dependabot[bot] opened a new pull request, #1489: URL: https://github.com/apache/opennlp/pull/1489
Bumps [io.github.classgraph:classgraph](https://github.com/classgraph/classgraph) from 4.8.196 to 4.8.197. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/classgraph/classgraph/releases";>io.github.classgraph:classgraph's releases</a>.</em></p> <blockquote> <h2>ClassGraph 4.8.197</h2> <p><strong>ClassGraph 5.0.0 is coming shortly</strong>, and requires JDK 17 or newer. 4.8.197 is a bugfix release on the 4.x maintenance branch. As before, most of the bugs listed here were found by Claude through careful code analysis, and were fixed on the v5 branch and backported to v4.</p> <h2>Behavior changes</h2> <ul> <li> <p><strong>A wildcard classpath entry such as <code>lib/*</code> now adds only jarfiles, as the java launcher does.</strong> It added every entry of the directory, including subdirectories, zipfiles and other files. The launcher decides by name alone, adding the entries whose names end in <code>.jar</code> or <code>.JAR</code>, and ClassGraph now applies the same rule.</p> </li> <li> <p><strong>Methods that require a scan option now throw <code>IllegalArgumentException</code> whenever that option was not enabled,</strong> even when there is nothing to test. Before, they returned an empty result when there was nothing to test (a class with no methods or fields, or a method with no parameters), and threw only otherwise. This applies to <code>ClassInfo#getMethodInfoWithAnnotation</code>, <code>getDeclaredMethodInfoWithAnnotation</code>, <code>getFieldInfoWithAnnotation</code> and <code>getDeclaredFieldInfoWithAnnotation</code> (which require <code>enableAnnotationInfo()</code>), <code>MethodInfo#hasParameterAnnotation</code> (likewise), and <code>ScanResult#getClassDependencyMap</code> and <code>getReverseClassDependencyMap</code> (which require <code>enableInterClassDependencies()</code>).</p> </li> </ul> <h2>Bug fixes: classpath and URLs</h2> <ul> <li> <p><strong>A URL with a custom scheme and an empty authority lost the slash that begins its path,</strong> so <code>custom:///a/b</code> became <code>custom://a/b</code>, which names <code>a</code> as the host. On Windows, <code>custom:///C:/a/b</code> also lost the slash before the drive letter, which made <code>C:</code> the host.</p> </li> <li> <p><strong>A classpath element with a custom URL scheme was reported under a <code>file:</code> URI,</strong> so <code>custom:/dir/x.jar</code> was reported as <code>file:custom%3a/dir/x.jar</code>. It is now reported under its own scheme.</p> </li> <li> <p><strong>The classpath entry <code>*</code> found nothing when the <code>user.dir</code> property could not be read</strong> (on JDK versions before 25). It now lists the current directory.</p> </li> <li> <p><strong>The extra classpath entries of Uno-Jar and One-Jar,</strong> which are separated by <code>|</code>, were each split again at the platform's path separator, so an entry whose name contained that separator was lost.</p> </li> <li> <p><strong>An automatic module name is no longer derived from a jarfile name that the JDK would reject:</strong> one with an empty part, a part that starts with a digit, or a part that is a Java keyword or literal.</p> </li> </ul> <h2>Bug fixes: reading streams</h2> <p><code>InputStream#read(byte[], int, int)</code> may return 0 without being at the end of the stream, and two readers mishandled this:</p> <ul> <li><strong>A classfile read from such a stream failed</strong> with "Tried to read past the end of the classfile".</li> <li><strong>Copying such a stream to a temporary file looped forever</strong> if the stream returned 0 at its end.</li> </ul> <h2>Bug fixes: the class graph</h2> <ul> <li> <p><strong><code>getFieldInfo()</code> and the field override order now search a class, then its direct superinterfaces, then its superclass,</strong> as the JVM resolves fields (JVMS 5.4.3.2).</p> </li> <li> <p><strong><code>MethodInfo#isDefault()</code> now reports only public, non-abstract, non-static interface methods.</strong></p> </li> <li> <p><strong><code>equalsIgnoringTypeParams()</code> now compares the suffixes of a class reference type signature,</strong> and ignores type annotations on type variables, as its documentation says.</p> </li> <li> <p><strong><code>AnnotationInfoList#getRepeatable()</code> now keeps the record of which annotations are directly present.</strong></p> </li> </ul> <h2>Documentation</h2> <p>Javadoc and comment corrections, among them: <code>getClasspath()</code> now says that a <code>:</code> inside a file path is written as <code>\:</code>, and <code>Resource#getLastModified()</code> now says that zip entry times have a resolution of two seconds.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/classgraph/classgraph/commit/ff37f9a17579a3728a8cfac9711f38f72e6e91cd";><code>ff37f9a</code></a> [maven-release-plugin] prepare release classgraph-4.8.197</li> <li><a href="https://github.com/classgraph/classgraph/commit/a5135534129d6b8c11b1d93c36ae84a8b13b2982";><code>a513553</code></a> Keep the slash before a drive letter in a custom-scheme URL on Windows</li> <li><a href="https://github.com/classgraph/classgraph/commit/a57323eee90f23f20362e759c64907243aec6eb2";><code>a57323e</code></a> Find the jarfiles in the current directory when user.dir cannot be read; keep...</li> <li><a href="https://github.com/classgraph/classgraph/commit/0d3926ff823858b4eb7c4f9f11ee60f19e19d2f7";><code>0d3926f</code></a> Keep reading a stream that returns zero bytes from a bulk read</li> <li><a href="https://github.com/classgraph/classgraph/commit/0a133b984f85047ac3579e1a8d3d52453b7098b7";><code>0a133b9</code></a> Keep a custom URL scheme in resolved paths and reported URIs</li> <li><a href="https://github.com/classgraph/classgraph/commit/cd2444988bfc7ae69df1de90dc69509bcfa31633";><code>cd24449</code></a> Backport v5 correctness fixes and comment corrections</li> <li><a href="https://github.com/classgraph/classgraph/commit/e484e131ddfb6dcf7b3318f2e218b947e31513d9";><code>e484e13</code></a> Add only jarfiles for a wildcard classpath entry, as the java launcher does</li> <li><a href="https://github.com/classgraph/classgraph/commit/b511a2ec76d50f2476ee341c0d5c3dce277b100e";><code>b511a2e</code></a> [maven-release-plugin] prepare for next development iteration</li> <li>See full diff in <a href="https://github.com/classgraph/classgraph/compare/classgraph-4.8.196...classgraph-4.8.197";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
