dependabot[bot] opened a new pull request, #29: URL: https://github.com/apache/maven-shared-jar/pull/29
Bumps [org.apache.bcel:bcel](https://github.com/apache/commons-bcel) from 6.7.0 to 6.8.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/apache/commons-bcel/blob/master/RELEASE-NOTES.txt";>org.apache.bcel:bcel's changelog</a>.</em></p> <blockquote> <pre><code> Apache Commons BCEL Version 6.8.0 RELEASE NOTES </code></pre> <p>INTRODUCTION:</p> <p>The Apache Commons BCEL team is pleased to announce the release of Apache Commons BCEL 6.8.0!</p> <p>The Byte Code Engineering Library (BCEL) is intended to give users a convenient way to analyze, create, and manipulate compiled .class files. Classes are represented by objects containing all the symbolic information of the given class: methods, fields and byte code instructions.</p> <p>Maintenance and bug fix release.</p> <h1>NEW FEATURES:</h1> <p>o Add and use InvalidMethodSignatureException extending ClassFormatException. Thanks to Gary Gregory. o Increase code coverage in Class2HTMLTestCase with new test input Java4Example <a href="https://redirect.github.com/apache/commons-bcel/issues/186";>#186</a>. Thanks to nbauma109. o Add verifier tests on some opcodes <a href="https://redirect.github.com/apache/commons-bcel/issues/180";>#180</a>. Thanks to nbauma109. o Added signature test cases for class/method, and bad signatures <a href="https://redirect.github.com/apache/commons-bcel/issues/182";>#182</a>. Thanks to nbauma109. o Add Const.MAJOR_20. Thanks to Gary Gregory. o Add Const.MINOR_20. Thanks to Gary Gregory. o Add Const.MAJOR_21. Thanks to Gary Gregory. o Add Const.MINOR_21. Thanks to Gary Gregory. o [Bcelifier] stackmap support to pass JDK verifier <a href="https://redirect.github.com/apache/commons-bcel/issues/177";>#177</a>. Thanks to nbauma109, Gary Gregory, Mark Roberts. o Fix SpotBugs [ERROR] Class org.apache.bcel.util.ClassVector defines non-transient non-serializable instance field vec [org.apache.bcel.util.ClassVector] In ClassVector.java SE_BAD_FIELD. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Switch statement found in org.apache.bcel.util.BCELFactory.visitAllocationInstruction(AllocationInstruction) where one case falls through to the next case [org.apache.bcel.util.BCELFactory, org.apache.bcel.util.BCELFactory] At BCELFactory.java:[lines 188-191]Another occurrence at BCELFactory.java:[lines 192-196] SF_SWITCH_FALLTHROUGH. Thanks to Gary Gregory.</p> <h1>FIXED BUGS:</h1> <p>o When parsing an class with an invalid constant reference, ensure ClassParser.parse() throws ClassFormatException, not NullPointerException. Thanks to OSS-Fuzz. o Ensure that references to a constant pool entry with index zero trigger a ClassFormatException, not a NullPointerException. Thanks to OSS-Fuzz. o Ensure that references to the unused constant pool entry after a long/double entry triggers a ClassFormatException, not a NullPointerException. Thanks to OSS-Fuzz. o Test and coverage of InstructionFactory <a href="https://redirect.github.com/apache/commons-bcel/issues/190";>#190</a>. Thanks to nbauma109. o Verifier: test and coverage for SWAP instruction <a href="https://redirect.github.com/apache/commons-bcel/issues/188";>#188</a>. Thanks to nbauma109. o Exception parsing Kotlin class with 'fun <code>method name with () in it</code>()' <a href="https://redirect.github.com/apache/commons-bcel/issues/205";>#205</a>. Thanks to Jason Copenhaver, Gary Gregory. o Fix null pointers in AnnotationEntry <a href="https://redirect.github.com/apache/commons-bcel/issues/213";>#213</a>. Thanks to nbauma109, Gary Gregory. o Field not found, search field in both super class and implemented interfaces (5x duplicated code to find field by name and type is refactored to a new method and now supports package-private) <a href="https://redirect.github.com/apache/commons-bcel/issues/181";>#181</a>. Thanks to nbauma109. o BCEL-366: Use alternative name for broken classes under test <a href="https://redirect.github.com/apache/commons-bcel/issues/220";>#220</a>. Thanks to Slawomir Jaranowski. o BCEL-367: Fixes java.lang.IndexOutOfBoundsException for ATHROW on empty stack <a href="https://redirect.github.com/apache/commons-bcel/issues/223";>#223</a>. Thanks to Katherine Hough, Gary Gregory. o BCEL-368: Fixes java.lang.StackOverflowError in Select#toString(boolean) <a href="https://redirect.github.com/apache/commons-bcel/issues/229";>#229</a>. Thanks to Katherine Hough, Gary Gregory. o Fix for type.getType(...) use on non-signature type names <a href="https://redirect.github.com/apache/commons-bcel/issues/221";>#221</a>. Thanks to nbauma109, Judit Knoll, Gary Gregory. o Fix EmptyVisitorTestCase on Java 21. Thanks to Gary Gregory.</p> <p>CHANGES:</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/commons-bcel/commit/cf6f7e710abf4eda2e0aa9aa914aa17878999583";><code>cf6f7e7</code></a> Prepare for release candidate</li> <li><a href="https://github.com/apache/commons-bcel/commit/62d5d7722f5da8989da00ad6bf18147ef99a429f";><code>62d5d77</code></a> Prepare for the next release candidate</li> <li><a href="https://github.com/apache/commons-bcel/commit/d1922441355c47167fe3a6a908f0ad30330ad825";><code>d192244</code></a> Bump commons-parent from 64 to 65</li> <li><a href="https://github.com/apache/commons-bcel/commit/867977ad016151bbacb923c373bbbeadf985f13a";><code>867977a</code></a> Fix SpotBugs: No fall through hack</li> <li><a href="https://github.com/apache/commons-bcel/commit/2df092673abb9de8b0c6c157f1d5398a69ca2cb1";><code>2df0926</code></a> Fix Spotbugs [ERROR] Class org.apache.bcel.util.ClassVector defines</li> <li><a href="https://github.com/apache/commons-bcel/commit/86de3690f1e5b3230d7fbbf1386fcaa46a9108e3";><code>86de369</code></a> Internal clean up</li> <li><a href="https://github.com/apache/commons-bcel/commit/7cc07639e2d9d1873696b5fe44aeeba2b5a1c43c";><code>7cc0763</code></a> Bump actions/setup-java from 3.13.0 to 4.0.0</li> <li><a href="https://github.com/apache/commons-bcel/commit/e7473b5aceb05bfbc6801beea30841e2ceb72316";><code>e7473b5</code></a> Bump actions/setup-java from 3.13.0 to 4.0.0</li> <li><a href="https://github.com/apache/commons-bcel/commit/78418a6f81ba5234657cef5f03b5b1c34223e583";><code>78418a6</code></a> Bump actions/setup-java from 3.13.0 to 4.0.0</li> <li><a href="https://github.com/apache/commons-bcel/commit/17c21077e180bc20e896491d5791600de7c8a529";><code>17c2107</code></a> Drop reference to IRC</li> <li>Additional commits viewable in <a href="https://github.com/apache/commons-bcel/compare/rel/commons-bcel-6.7.0...rel/commons-bcel-6.8.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
