[GitHub] [commons-geometry] asfgit merged pull request #197: Spotbugs Fixes

2022-04-29 Thread GitBox


asfgit merged PR #197:
URL: https://github.com/apache/commons-geometry/pull/197


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Assigned] (GEOMETRY-146) PointSet/Map closest points

2022-04-29 Thread Matt Juntunen (Jira)


 [ 
https://issues.apache.org/jira/browse/GEOMETRY-146?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Matt Juntunen reassigned GEOMETRY-146:
--

Assignee: Matt Juntunen

> PointSet/Map closest points
> ---
>
> Key: GEOMETRY-146
> URL: https://issues.apache.org/jira/browse/GEOMETRY-146
> Project: Commons Geometry
>  Issue Type: New Feature
>Reporter: Matt Juntunen
>Assignee: Matt Juntunen
>Priority: Major
> Fix For: 1.1
>
>
> Add methods to the new {{PointSet}} and {{PointMap}} interfaces to allow 
> querying of points in order of distance from a query point.
> {code:java}
> PointSet {
> // find the closest point to pt or null if empty 
> P closest(P pt);
> // iterate through points in order, with points closest to pt coming first
> Iterable closestFirst(P pt);
> // find the farthest point from pt or null if emtpy
> P farthest(P pt);
> // iterate through point in order, with points farthest from pt coming 
> first
> Iterable farthestFirst(P pt);
> }
> {code}
> {{PointMap}} should have similar methods providing access to the map keys and 
> entries.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Resolved] (GEOMETRY-146) PointSet/Map closest points

2022-04-29 Thread Matt Juntunen (Jira)


 [ 
https://issues.apache.org/jira/browse/GEOMETRY-146?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Matt Juntunen resolved GEOMETRY-146.

Resolution: Done

> PointSet/Map closest points
> ---
>
> Key: GEOMETRY-146
> URL: https://issues.apache.org/jira/browse/GEOMETRY-146
> Project: Commons Geometry
>  Issue Type: New Feature
>Reporter: Matt Juntunen
>Priority: Major
> Fix For: 1.1
>
>
> Add methods to the new {{PointSet}} and {{PointMap}} interfaces to allow 
> querying of points in order of distance from a query point.
> {code:java}
> PointSet {
> // find the closest point to pt or null if empty 
> P closest(P pt);
> // iterate through points in order, with points closest to pt coming first
> Iterable closestFirst(P pt);
> // find the farthest point from pt or null if emtpy
> P farthest(P pt);
> // iterate through point in order, with points farthest from pt coming 
> first
> Iterable farthestFirst(P pt);
> }
> {code}
> {{PointMap}} should have similar methods providing access to the map keys and 
> entries.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Commented] (GEOMETRY-146) PointSet/Map closest points

2022-04-29 Thread Matt Juntunen (Jira)


[ 
https://issues.apache.org/jira/browse/GEOMETRY-146?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17530318#comment-17530318
 ] 

Matt Juntunen commented on GEOMETRY-146:


Merged in ffc9ff964654948aab93438dff8b8a2bbdab03d7

> PointSet/Map closest points
> ---
>
> Key: GEOMETRY-146
> URL: https://issues.apache.org/jira/browse/GEOMETRY-146
> Project: Commons Geometry
>  Issue Type: New Feature
>Reporter: Matt Juntunen
>Priority: Major
> Fix For: 1.1
>
>
> Add methods to the new {{PointSet}} and {{PointMap}} interfaces to allow 
> querying of points in order of distance from a query point.
> {code:java}
> PointSet {
> // find the closest point to pt or null if empty 
> P closest(P pt);
> // iterate through points in order, with points closest to pt coming first
> Iterable closestFirst(P pt);
> // find the farthest point from pt or null if emtpy
> P farthest(P pt);
> // iterate through point in order, with points farthest from pt coming 
> first
> Iterable farthestFirst(P pt);
> }
> {code}
> {{PointMap}} should have similar methods providing access to the map keys and 
> entries.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[GitHub] [commons-geometry] asfgit merged pull request #195: GEOMETRY-146: adding near/far methods to PointMap and PointSet

2022-04-29 Thread GitBox


asfgit merged PR #195:
URL: https://github.com/apache/commons-geometry/pull/195


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Commented] (GEOMETRY-147) BoundsXD Linecastable

2022-04-29 Thread Matt Juntunen (Jira)


[ 
https://issues.apache.org/jira/browse/GEOMETRY-147?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17530317#comment-17530317
 ] 

Matt Juntunen commented on GEOMETRY-147:


PR is in: https://github.com/apache/commons-geometry/pull/196

> BoundsXD Linecastable
> -
>
> Key: GEOMETRY-147
> URL: https://issues.apache.org/jira/browse/GEOMETRY-147
> Project: Commons Geometry
>  Issue Type: New Feature
>Reporter: Matt Juntunen
>Priority: Major
> Fix For: 1.1
>
>
> Make the {{Bounds2D}} and {{Bounds3D}} classes implement {{Linecastable}}. 
> Use the 
> ["slabs"|https://education.siggraph.org/static/HyperGraph/raytrace/rtinter3.htm]
>  algorithm to determine intersection points.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[GitHub] [commons-geometry] darkma773r opened a new pull request, #196: GEOMETRY-147: Bounds Linecast

2022-04-29 Thread GitBox


darkma773r opened a new pull request, #196:
URL: https://github.com/apache/commons-geometry/pull/196

   Adding linecast and line intersection methods to Bounds2D and Bounds3D


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-beanutils] dependabot[bot] opened a new pull request, #118: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #118:
URL: https://github.com/apache/commons-beanutils/pull/118

   Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 
to 2.
   
   Changelog
   Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md";>github/codeql-action's
 changelog.
   
   2.1.9 - 27 Apr 2022
   
   Add working-directory input to the autobuild 
action. https://github-redirect.dependabot.com/github/codeql-action/pull/1024";>#1024
   The analyze and upload-sarif actions will now 
wait up to 2 minutes for processing to complete after they have uploaded the 
results so they can report any processing errors that occurred. This behavior 
can be disabled by setting the wait-for-processing action input to 
"false". https://github-redirect.dependabot.com/github/codeql-action/pull/1007";>#1007
   Update default CodeQL bundle version to 2.9.0.
   Fix a bug where https://github-redirect.dependabot.com/github/codeql-action/issues/1041";>status
 reporting fails on Windows. https://github-redirect.dependabot.com/github/codeql-action/pull/1042";>#1042
   
   2.1.8 - 08 Apr 2022
   
   Update default CodeQL bundle version to 2.8.5. https://github-redirect.dependabot.com/github/codeql-action/pull/1014";>#1014
   Fix error where the init action would fail due to a GitHub API request 
that was taking too long to complete https://github-redirect.dependabot.com/github/codeql-action/pull/1025";>#1025
   
   2.1.7 - 05 Apr 2022
   
   A bug where additional queries specified in the workflow file would 
sometimes not be respected has been fixed. https://github-redirect.dependabot.com/github/codeql-action/pull/1018";>#1018
   
   2.1.6 - 30 Mar 2022
   
   [v2+ only] The CodeQL Action now runs on Node.js v16. https://github-redirect.dependabot.com/github/codeql-action/pull/1000";>#1000
   Update default CodeQL bundle version to 2.8.4. https://github-redirect.dependabot.com/github/codeql-action/pull/990";>#990
   Fix a bug where an invalid commit_oid was being sent to 
code scanning when a custom checkout path was being used. https://github-redirect.dependabot.com/github/codeql-action/pull/956";>#956
   
   
   
   
   Commits
   
   https://github.com/github/codeql-action/commit/3962f1bd85916dd70cf44f7dd36946a72763eef4";>3962f1b
 Bump glob from 7.1.7 to 8.0.1
   https://github.com/github/codeql-action/commit/9daf1de73ca769b18a8abc0ddfdfff845708cb1c";>9daf1de
 Update references to release branches
   https://github.com/github/codeql-action/commit/bce749b10f3bd8b6b463c7753915deeac5158bba";>bce749b
 Improve consistency of variable references in Bash
   https://github.com/github/codeql-action/commit/fce4a01cd713caf52887d7ef8fd4e262d9e4aaa3";>fce4a01
 Update the major version tag within the release process
   https://github.com/github/codeql-action/commit/bac9320f4fb6ba590f3722eb9b477576e59d42bd";>bac9320
 Update description of "Tag release and merge back" workflow
   https://github.com/github/codeql-action/commit/b3bf557359f79e6aa98c484e8a9ad6a782fe3a8a";>b3bf557
 Merge branch 'main' into henrymercer/handle-merge-conflicts-in-releases
   https://github.com/github/codeql-action/commit/f6312f1322bd54138163c559cc89e298d4b5e543";>f6312f1
 Commit any conflicts during v1 backport to simplify release process
   See full diff in https://github.com/github/codeql-action/compare/v1...v2";>compare 
view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=1&new-version=2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot cr

[GitHub] [commons-validator] dependabot[bot] opened a new pull request, #75: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #75:
URL: https://github.com/apache/commons-validator/pull/75

   Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 
to 2.
   
   Changelog
   Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md";>github/codeql-action's
 changelog.
   
   2.1.9 - 27 Apr 2022
   
   Add working-directory input to the autobuild 
action. https://github-redirect.dependabot.com/github/codeql-action/pull/1024";>#1024
   The analyze and upload-sarif actions will now 
wait up to 2 minutes for processing to complete after they have uploaded the 
results so they can report any processing errors that occurred. This behavior 
can be disabled by setting the wait-for-processing action input to 
"false". https://github-redirect.dependabot.com/github/codeql-action/pull/1007";>#1007
   Update default CodeQL bundle version to 2.9.0.
   Fix a bug where https://github-redirect.dependabot.com/github/codeql-action/issues/1041";>status
 reporting fails on Windows. https://github-redirect.dependabot.com/github/codeql-action/pull/1042";>#1042
   
   2.1.8 - 08 Apr 2022
   
   Update default CodeQL bundle version to 2.8.5. https://github-redirect.dependabot.com/github/codeql-action/pull/1014";>#1014
   Fix error where the init action would fail due to a GitHub API request 
that was taking too long to complete https://github-redirect.dependabot.com/github/codeql-action/pull/1025";>#1025
   
   2.1.7 - 05 Apr 2022
   
   A bug where additional queries specified in the workflow file would 
sometimes not be respected has been fixed. https://github-redirect.dependabot.com/github/codeql-action/pull/1018";>#1018
   
   2.1.6 - 30 Mar 2022
   
   [v2+ only] The CodeQL Action now runs on Node.js v16. https://github-redirect.dependabot.com/github/codeql-action/pull/1000";>#1000
   Update default CodeQL bundle version to 2.8.4. https://github-redirect.dependabot.com/github/codeql-action/pull/990";>#990
   Fix a bug where an invalid commit_oid was being sent to 
code scanning when a custom checkout path was being used. https://github-redirect.dependabot.com/github/codeql-action/pull/956";>#956
   
   
   
   
   Commits
   
   https://github.com/github/codeql-action/commit/3962f1bd85916dd70cf44f7dd36946a72763eef4";>3962f1b
 Bump glob from 7.1.7 to 8.0.1
   https://github.com/github/codeql-action/commit/9daf1de73ca769b18a8abc0ddfdfff845708cb1c";>9daf1de
 Update references to release branches
   https://github.com/github/codeql-action/commit/bce749b10f3bd8b6b463c7753915deeac5158bba";>bce749b
 Improve consistency of variable references in Bash
   https://github.com/github/codeql-action/commit/fce4a01cd713caf52887d7ef8fd4e262d9e4aaa3";>fce4a01
 Update the major version tag within the release process
   https://github.com/github/codeql-action/commit/bac9320f4fb6ba590f3722eb9b477576e59d42bd";>bac9320
 Update description of "Tag release and merge back" workflow
   https://github.com/github/codeql-action/commit/b3bf557359f79e6aa98c484e8a9ad6a782fe3a8a";>b3bf557
 Merge branch 'main' into henrymercer/handle-merge-conflicts-in-releases
   https://github.com/github/codeql-action/commit/f6312f1322bd54138163c559cc89e298d4b5e543";>f6312f1
 Commit any conflicts during v1 backport to simplify release process
   See full diff in https://github.com/github/codeql-action/compare/v1...v2";>compare 
view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=1&new-version=2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot crea

[jira] [Work logged] (COLLECTIONS-807) Upgrade org.junit.Test to org.junit.jupiter.api.Test

2022-04-29 Thread ASF GitHub Bot (Jira)


 [ 
https://issues.apache.org/jira/browse/COLLECTIONS-807?focusedWorklogId=764533&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-764533
 ]

ASF GitHub Bot logged work on COLLECTIONS-807:
--

Author: ASF GitHub Bot
Created on: 29/Apr/22 22:32
Start Date: 29/Apr/22 22:32
Worklog Time Spent: 10m 
  Work Description: kinow closed pull request #304: [COLLECTIONS-807] fix 
one place not updated
URL: https://github.com/apache/commons-collections/pull/304




Issue Time Tracking
---

Worklog Id: (was: 764533)
Time Spent: 1h 50m  (was: 1h 40m)

> Upgrade org.junit.Test to org.junit.jupiter.api.Test
> 
>
> Key: COLLECTIONS-807
> URL: https://issues.apache.org/jira/browse/COLLECTIONS-807
> Project: Commons Collections
>  Issue Type: Sub-task
>Reporter: John Patrick
>Priority: Major
> Fix For: 4.5
>
>  Time Spent: 1h 50m
>  Remaining Estimate: 0h
>
> Covers '17' usages of legacy usage of;
> {code:java}
> import org.junit.Test;
> {code}



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Work logged] (COLLECTIONS-807) Upgrade org.junit.Test to org.junit.jupiter.api.Test

2022-04-29 Thread ASF GitHub Bot (Jira)


 [ 
https://issues.apache.org/jira/browse/COLLECTIONS-807?focusedWorklogId=764534&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-764534
 ]

ASF GitHub Bot logged work on COLLECTIONS-807:
--

Author: ASF GitHub Bot
Created on: 29/Apr/22 22:32
Start Date: 29/Apr/22 22:32
Worklog Time Spent: 10m 
  Work Description: kinow commented on PR #304:
URL: 
https://github.com/apache/commons-collections/pull/304#issuecomment-1113832980

   Merged, thanks!




Issue Time Tracking
---

Worklog Id: (was: 764534)
Time Spent: 2h  (was: 1h 50m)

> Upgrade org.junit.Test to org.junit.jupiter.api.Test
> 
>
> Key: COLLECTIONS-807
> URL: https://issues.apache.org/jira/browse/COLLECTIONS-807
> Project: Commons Collections
>  Issue Type: Sub-task
>Reporter: John Patrick
>Priority: Major
> Fix For: 4.5
>
>  Time Spent: 2h
>  Remaining Estimate: 0h
>
> Covers '17' usages of legacy usage of;
> {code:java}
> import org.junit.Test;
> {code}



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[GitHub] [commons-collections] kinow commented on pull request #304: [COLLECTIONS-807] fix one place not updated

2022-04-29 Thread GitBox


kinow commented on PR #304:
URL: 
https://github.com/apache/commons-collections/pull/304#issuecomment-1113832980

   Merged, thanks!


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-collections] kinow closed pull request #304: [COLLECTIONS-807] fix one place not updated

2022-04-29 Thread GitBox


kinow closed pull request #304: [COLLECTIONS-807] fix one place not updated
URL: https://github.com/apache/commons-collections/pull/304


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Created] (COLLECTIONS-812) Fragile test EmptyPropertiesTest.testSave

2022-04-29 Thread Bruno P. Kinoshita (Jira)
Bruno P. Kinoshita created COLLECTIONS-812:
--

 Summary: Fragile test EmptyPropertiesTest.testSave
 Key: COLLECTIONS-812
 URL: https://issues.apache.org/jira/browse/COLLECTIONS-812
 Project: Commons Collections
  Issue Type: Test
Affects Versions: 4.4
Reporter: Bruno P. Kinoshita


Fragile test EmptyPropertiesTest.testSave, found in 
[https://github.com/apache/commons-collections/pull/304.]

It passed after I kicked GH Actions.
{noformat}
Error:  Failures: 
Error:EmptyPropertiesTest.testSave:278 #Hello world!
#Fri Apr 29 16:05:40 GMT 2022
 ==> array contents differ at index [32], expected: <52> but was: <51>
[INFO] 
Error:  Tests run: 22274, Failures: 1, Errors: 0, Skipped: 4 {noformat}



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Work logged] (COLLECTIONS-807) Upgrade org.junit.Test to org.junit.jupiter.api.Test

2022-04-29 Thread ASF GitHub Bot (Jira)


 [ 
https://issues.apache.org/jira/browse/COLLECTIONS-807?focusedWorklogId=764531&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-764531
 ]

ASF GitHub Bot logged work on COLLECTIONS-807:
--

Author: ASF GitHub Bot
Created on: 29/Apr/22 22:28
Start Date: 29/Apr/22 22:28
Worklog Time Spent: 10m 
  Work Description: kinow commented on PR #304:
URL: 
https://github.com/apache/commons-collections/pull/304#issuecomment-1113826740

   And now it's all green. Thanks @samabcde !




Issue Time Tracking
---

Worklog Id: (was: 764531)
Time Spent: 1h 40m  (was: 1.5h)

> Upgrade org.junit.Test to org.junit.jupiter.api.Test
> 
>
> Key: COLLECTIONS-807
> URL: https://issues.apache.org/jira/browse/COLLECTIONS-807
> Project: Commons Collections
>  Issue Type: Sub-task
>Reporter: John Patrick
>Priority: Major
> Fix For: 4.5
>
>  Time Spent: 1h 40m
>  Remaining Estimate: 0h
>
> Covers '17' usages of legacy usage of;
> {code:java}
> import org.junit.Test;
> {code}



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Work logged] (COLLECTIONS-807) Upgrade org.junit.Test to org.junit.jupiter.api.Test

2022-04-29 Thread ASF GitHub Bot (Jira)


 [ 
https://issues.apache.org/jira/browse/COLLECTIONS-807?focusedWorklogId=764530&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-764530
 ]

ASF GitHub Bot logged work on COLLECTIONS-807:
--

Author: ASF GitHub Bot
Created on: 29/Apr/22 22:28
Start Date: 29/Apr/22 22:28
Worklog Time Spent: 10m 
  Work Description: codecov-commenter commented on PR #304:
URL: 
https://github.com/apache/commons-collections/pull/304#issuecomment-1113826564

   # 
[Codecov](https://codecov.io/gh/apache/commons-collections/pull/304?src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation)
 Report
   > Merging 
[#304](https://codecov.io/gh/apache/commons-collections/pull/304?src=pr&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation)
 (369ae6b) into 
[master](https://codecov.io/gh/apache/commons-collections/commit/3d88221be08530da9dfff374fdcc2ba168c7d0ce?el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation)
 (3d88221) will **not change** coverage.
   > The diff coverage is `n/a`.
   
   ```diff
   @@Coverage Diff@@
   ## master #304   +/-   ##
   =
 Coverage 85.88%   85.88%   
 Complexity 4676 4676   
   =
 Files   292  292   
 Lines 1346913469   
 Branches   1955 1955   
   =
 Hits  1156811568   
 Misses 1324 1324   
 Partials577  577   
   ```
   
   
   
   --
   
   [Continue to review full report at 
Codecov](https://codecov.io/gh/apache/commons-collections/pull/304?src=pr&el=continue&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation).
   > **Legend** - [Click here to learn 
more](https://docs.codecov.io/docs/codecov-delta?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation)
   > `Δ = absolute  (impact)`, `ø = not affected`, `? = missing data`
   > Powered by 
[Codecov](https://codecov.io/gh/apache/commons-collections/pull/304?src=pr&el=footer&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation).
 Last update 
[3d88221...369ae6b](https://codecov.io/gh/apache/commons-collections/pull/304?src=pr&el=lastupdated&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation).
 Read the [comment 
docs](https://docs.codecov.io/docs/pull-request-comments?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation).
   




Issue Time Tracking
---

Worklog Id: (was: 764530)
Time Spent: 1.5h  (was: 1h 20m)

> Upgrade org.junit.Test to org.junit.jupiter.api.Test
> 
>
> Key: COLLECTIONS-807
> URL: https://issues.apache.org/jira/browse/COLLECTIONS-807
> Project: Commons Collections
>  Issue Type: Sub-task
>Reporter: John Patrick
>Priority: Major
> Fix For: 4.5
>
>  Time Spent: 1.5h
>  Remaining Estimate: 0h
>
> Covers '17' usages of legacy usage of;
> {code:java}
> import org.junit.Test;
> {code}



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[GitHub] [commons-collections] kinow commented on pull request #304: [COLLECTIONS-807] fix one place not updated

2022-04-29 Thread GitBox


kinow commented on PR #304:
URL: 
https://github.com/apache/commons-collections/pull/304#issuecomment-1113826740

   And now it's all green. Thanks @samabcde !


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-collections] codecov-commenter commented on pull request #304: [COLLECTIONS-807] fix one place not updated

2022-04-29 Thread GitBox


codecov-commenter commented on PR #304:
URL: 
https://github.com/apache/commons-collections/pull/304#issuecomment-1113826564

   # 
[Codecov](https://codecov.io/gh/apache/commons-collections/pull/304?src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation)
 Report
   > Merging 
[#304](https://codecov.io/gh/apache/commons-collections/pull/304?src=pr&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation)
 (369ae6b) into 
[master](https://codecov.io/gh/apache/commons-collections/commit/3d88221be08530da9dfff374fdcc2ba168c7d0ce?el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation)
 (3d88221) will **not change** coverage.
   > The diff coverage is `n/a`.
   
   ```diff
   @@Coverage Diff@@
   ## master #304   +/-   ##
   =
 Coverage 85.88%   85.88%   
 Complexity 4676 4676   
   =
 Files   292  292   
 Lines 1346913469   
 Branches   1955 1955   
   =
 Hits  1156811568   
 Misses 1324 1324   
 Partials577  577   
   ```
   
   
   
   --
   
   [Continue to review full report at 
Codecov](https://codecov.io/gh/apache/commons-collections/pull/304?src=pr&el=continue&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation).
   > **Legend** - [Click here to learn 
more](https://docs.codecov.io/docs/codecov-delta?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation)
   > `Δ = absolute  (impact)`, `ø = not affected`, `? = missing data`
   > Powered by 
[Codecov](https://codecov.io/gh/apache/commons-collections/pull/304?src=pr&el=footer&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation).
 Last update 
[3d88221...369ae6b](https://codecov.io/gh/apache/commons-collections/pull/304?src=pr&el=lastupdated&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation).
 Read the [comment 
docs](https://docs.codecov.io/docs/pull-request-comments?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation).
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-text] kinow merged pull request #319: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


kinow merged PR #319:
URL: https://github.com/apache/commons-text/pull/319


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-text] kinow merged pull request #320: Bump spotbugs-maven-plugin from 4.5.3.0 to 4.6.0.0

2022-04-29 Thread GitBox


kinow merged PR #320:
URL: https://github.com/apache/commons-text/pull/320


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-text] kinow merged pull request #321: Bump checkstyle from 10.1 to 10.2

2022-04-29 Thread GitBox


kinow merged PR #321:
URL: https://github.com/apache/commons-text/pull/321


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-daemon] markt-asf commented on a diff in pull request #39: Fix for https://issues.redhat.com/browse/JBCS-1261

2022-04-29 Thread GitBox


markt-asf commented on code in PR #39:
URL: https://github.com/apache/commons-daemon/pull/39#discussion_r862195635


##
src/native/windows/src/rprocess.c:
##
@@ -316,13 +373,16 @@ static BOOL __apxProcessClose(APXHANDLE hProcess)
 lpProc = APXHANDLE_DATA(hProcess);
 CHECK_IF_ACTIVE(lpProc);
 
+__apxProcessTerminateChild(lpProc->stProcInfo.dwProcessId, TRUE);
 /* Try to close the child's stdin first */

Review Comment:
   Can you explain the purpose of the above call? It seems odd to be forcibly 
terminating child processes this early. What am I missing?



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-bcel] garydgregory merged pull request #126: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


garydgregory merged PR #126:
URL: https://github.com/apache/commons-bcel/pull/126


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-bcel] garydgregory commented on pull request #125: Fix IAE when calling `toString(ConstantPool)` on a `Module` or `ModuleRequires`

2022-04-29 Thread GitBox


garydgregory commented on PR #125:
URL: https://github.com/apache/commons-bcel/pull/125#issuecomment-1113740147

   Hi @timboudreau 
   Thank you for this PR but it does not compile, see the GitHub build 
failures. In the future, you should build with Java 8 to make sure code is 
compatible. See git master for a fix and better tests. Close this PR or rebase 
to provide more.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-text] dependabot[bot] opened a new pull request, #321: Bump checkstyle from 10.1 to 10.2

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #321:
URL: https://github.com/apache/commons-text/pull/321

   Bumps [checkstyle](https://github.com/checkstyle/checkstyle) from 10.1 to 
10.2.
   
   Release notes
   Sourced from https://github.com/checkstyle/checkstyle/releases";>checkstyle's 
releases.
   
   checkstyle-10.2
   https://checkstyle.org/releasenotes.html#Release_10.2";>https://checkstyle.org/releasenotes.html#Release_10.2
   
   
   
   Commits
   
   https://github.com/checkstyle/checkstyle/commit/0678fc609ec1889e3534940aa9d094887a4af2f3";>0678fc6
 [maven-release-plugin] prepare release checkstyle-10.2
   https://github.com/checkstyle/checkstyle/commit/acf70b4d7e8e4423579f02bf88d9773ba9574a77";>acf70b4
 doc: release notes for 10.2
   https://github.com/checkstyle/checkstyle/commit/591b41028cecc786ea94556791a8e53a99defb4c";>591b410
 Issue https://github-redirect.dependabot.com/checkstyle/checkstyle/issues/4845";>#4845:
 remove dependency on netbuddy from test inputs
   https://github.com/checkstyle/checkstyle/commit/0fda5157d34980c229090931af2a1a1ce74e87a9";>0fda515
 dependency: bump maven-antrun-plugin from 3.0.0 to 3.1.0
   https://github.com/checkstyle/checkstyle/commit/7f5fcc814f63a590d24b34a3e6289facfbffc264";>7f5fcc8
 supplemental: Modify pitest.sh to support unstable mutations list
   https://github.com/checkstyle/checkstyle/commit/0ab05c948d302dde4f3e4144e97af30a2613900a";>0ab05c9
 Issue https://github-redirect.dependabot.com/checkstyle/checkstyle/issues/11528";>#11528:
 Kill surviving mutation in EqualsAvoidNullCheck
   https://github.com/checkstyle/checkstyle/commit/c2abb6fb4cef7c4d3e565bd05d061841fc86db50";>c2abb6f
 minor: fix link (link-check-plugin)
   https://github.com/checkstyle/checkstyle/commit/4a7e6fa6b7eeb0658d09c64bc9f390f24c3ab10b";>4a7e6fa
 dependency: bump nexus-staging-maven-plugin from 1.6.12 to 1.6.13
   https://github.com/checkstyle/checkstyle/commit/8035e76a5ba81f4841519d0d3ceb9e7a4f913506";>8035e76
 dependency: bump mockito-inline from 4.5.0 to 4.5.1
   https://github.com/checkstyle/checkstyle/commit/d00939d8400537a7eecc56e7ec1fdaf3f0574333";>d00939d
 dependency: bump maven-site-plugin from 3.11.0 to 3.12.0
   Additional commits viewable in https://github.com/checkstyle/checkstyle/compare/checkstyle-10.1...checkstyle-10.2";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.puppycrawl.tools:checkstyle&package-manager=maven&previous-version=10.1&new-version=10.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-text] dependabot[bot] opened a new pull request, #320: Bump spotbugs-maven-plugin from 4.5.3.0 to 4.6.0.0

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #320:
URL: https://github.com/apache/commons-text/pull/320

   Bumps 
[spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) from 
4.5.3.0 to 4.6.0.0.
   
   Release notes
   Sourced from https://github.com/spotbugs/spotbugs-maven-plugin/releases";>spotbugs-maven-plugin's
 releases.
   
   Spotbugs-maven-plugin 4.6.0.0
   
   Spotbugs 4.6.0 support
   Groovy 4.0.1 based
   
   note on groovy: If using groovy with same group id (already existing 
condition), an error may occur if not on same version.  To alleviate that, make 
sure groovy artifacts are defined in dependency management in order to force 
the loaded version correctly on your usage.
   note on 4.6.0.1/4.6.0.2: no change, not released.  Issue with site 
distribution via maven release plugin only that is being tested, use 4.6.0.0 
only.
   
   
   
   Commits
   
   https://github.com/spotbugs/spotbugs-maven-plugin/commit/1757c7fbfcb997e1d5d0cb696138bac199e4314c";>1757c7f
 [maven-release-plugin] prepare release spotbugs-maven-plugin-4.6.0.0
   https://github.com/spotbugs/spotbugs-maven-plugin/commit/7e022d79676d398e9a1ad207af10327a783998e2";>7e022d7
 [pom] Bump remainder to spotbugs 4.6.0
   https://github.com/spotbugs/spotbugs-maven-plugin/commit/aa8a2b1bcd3556ac26c0dcbec7d963b6bd4edd0d";>aa8a2b1
 Merge pull request https://github-redirect.dependabot.com/spotbugs/spotbugs-maven-plugin/issues/413";>#413
 from spotbugs/dependabot/maven/org.codehaus.mojo-vers...
   https://github.com/spotbugs/spotbugs-maven-plugin/commit/c51b51c842ada8f91085fec4090e31a0ebc72ca8";>c51b51c
 Bump versions-maven-plugin from 2.9.0 to 2.10.0
   https://github.com/spotbugs/spotbugs-maven-plugin/commit/fd7e0208a5100cffd5e1cf17a56b47a12f79b3df";>fd7e020
 Merge pull request https://github-redirect.dependabot.com/spotbugs/spotbugs-maven-plugin/issues/411";>#411
 from spotbugs/dependabot/maven/mavenVersion-3.8.5
   https://github.com/spotbugs/spotbugs-maven-plugin/commit/4b591e2ad1f8d3fd14c583d1badb319580b4cfd4";>4b591e2
 Bump mavenVersion from 3.8.4 to 3.8.5
   https://github.com/spotbugs/spotbugs-maven-plugin/commit/3276bfa6cbdd13346e81bba9e3a5818522d4db58";>3276bfa
 Merge pull request https://github-redirect.dependabot.com/spotbugs/spotbugs-maven-plugin/issues/412";>#412
 from spotbugs/dependabot/maven/mavenCoreVersion-3.8.5
   https://github.com/spotbugs/spotbugs-maven-plugin/commit/047836cedbf0e76cffda1051fb90df7e911959e3";>047836c
 Bump mavenCoreVersion from 3.8.4 to 3.8.5
   https://github.com/spotbugs/spotbugs-maven-plugin/commit/4fa6caa62dd3ba7a1d47ac1d58a0bf48c1eab330";>4fa6caa
 Merge pull request https://github-redirect.dependabot.com/spotbugs/spotbugs-maven-plugin/issues/409";>#409
 from spotbugs/dependabot/maven/com.github.spotbugs-sp...
   https://github.com/spotbugs/spotbugs-maven-plugin/commit/3d45f8ff7e9a50aae3164eb40140a7481ef42665";>3d45f8f
 Merge pull request https://github-redirect.dependabot.com/spotbugs/spotbugs-maven-plugin/issues/410";>#410
 from spotbugs/dependabot/maven/groovyVersion-4.0.1
   Additional commits viewable in https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-4.5.3.0...spotbugs-maven-plugin-4.6.0.0";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.github.spotbugs:spotbugs-maven-plugin&package-manager=maven&previous-version=4.5.3.0&new-version=4.6.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this depe

[GitHub] [commons-text] dependabot[bot] opened a new pull request, #319: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #319:
URL: https://github.com/apache/commons-text/pull/319

   Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 
to 2.
   
   Changelog
   Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md";>github/codeql-action's
 changelog.
   
   2.1.9 - 27 Apr 2022
   
   Add working-directory input to the autobuild 
action. https://github-redirect.dependabot.com/github/codeql-action/pull/1024";>#1024
   The analyze and upload-sarif actions will now 
wait up to 2 minutes for processing to complete after they have uploaded the 
results so they can report any processing errors that occurred. This behavior 
can be disabled by setting the wait-for-processing action input to 
"false". https://github-redirect.dependabot.com/github/codeql-action/pull/1007";>#1007
   Update default CodeQL bundle version to 2.9.0.
   Fix a bug where https://github-redirect.dependabot.com/github/codeql-action/issues/1041";>status
 reporting fails on Windows. https://github-redirect.dependabot.com/github/codeql-action/pull/1042";>#1042
   
   2.1.8 - 08 Apr 2022
   
   Update default CodeQL bundle version to 2.8.5. https://github-redirect.dependabot.com/github/codeql-action/pull/1014";>#1014
   Fix error where the init action would fail due to a GitHub API request 
that was taking too long to complete https://github-redirect.dependabot.com/github/codeql-action/pull/1025";>#1025
   
   2.1.7 - 05 Apr 2022
   
   A bug where additional queries specified in the workflow file would 
sometimes not be respected has been fixed. https://github-redirect.dependabot.com/github/codeql-action/pull/1018";>#1018
   
   2.1.6 - 30 Mar 2022
   
   [v2+ only] The CodeQL Action now runs on Node.js v16. https://github-redirect.dependabot.com/github/codeql-action/pull/1000";>#1000
   Update default CodeQL bundle version to 2.8.4. https://github-redirect.dependabot.com/github/codeql-action/pull/990";>#990
   Fix a bug where an invalid commit_oid was being sent to 
code scanning when a custom checkout path was being used. https://github-redirect.dependabot.com/github/codeql-action/pull/956";>#956
   
   
   
   
   Commits
   
   https://github.com/github/codeql-action/commit/3962f1bd85916dd70cf44f7dd36946a72763eef4";>3962f1b
 Bump glob from 7.1.7 to 8.0.1
   https://github.com/github/codeql-action/commit/9daf1de73ca769b18a8abc0ddfdfff845708cb1c";>9daf1de
 Update references to release branches
   https://github.com/github/codeql-action/commit/bce749b10f3bd8b6b463c7753915deeac5158bba";>bce749b
 Improve consistency of variable references in Bash
   https://github.com/github/codeql-action/commit/fce4a01cd713caf52887d7ef8fd4e262d9e4aaa3";>fce4a01
 Update the major version tag within the release process
   https://github.com/github/codeql-action/commit/bac9320f4fb6ba590f3722eb9b477576e59d42bd";>bac9320
 Update description of "Tag release and merge back" workflow
   https://github.com/github/codeql-action/commit/b3bf557359f79e6aa98c484e8a9ad6a782fe3a8a";>b3bf557
 Merge branch 'main' into henrymercer/handle-merge-conflicts-in-releases
   https://github.com/github/codeql-action/commit/f6312f1322bd54138163c559cc89e298d4b5e543";>f6312f1
 Commit any conflicts during v1 backport to simplify release process
   See full diff in https://github.com/github/codeql-action/compare/v1...v2";>compare 
view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=1&new-version=2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creatin

[GitHub] [commons-rdf] dependabot[bot] opened a new pull request, #85: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #85:
URL: https://github.com/apache/commons-rdf/pull/85

   Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 
to 2.
   
   Changelog
   Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md";>github/codeql-action's
 changelog.
   
   2.1.9 - 27 Apr 2022
   
   Add working-directory input to the autobuild 
action. https://github-redirect.dependabot.com/github/codeql-action/pull/1024";>#1024
   The analyze and upload-sarif actions will now 
wait up to 2 minutes for processing to complete after they have uploaded the 
results so they can report any processing errors that occurred. This behavior 
can be disabled by setting the wait-for-processing action input to 
"false". https://github-redirect.dependabot.com/github/codeql-action/pull/1007";>#1007
   Update default CodeQL bundle version to 2.9.0.
   Fix a bug where https://github-redirect.dependabot.com/github/codeql-action/issues/1041";>status
 reporting fails on Windows. https://github-redirect.dependabot.com/github/codeql-action/pull/1042";>#1042
   
   2.1.8 - 08 Apr 2022
   
   Update default CodeQL bundle version to 2.8.5. https://github-redirect.dependabot.com/github/codeql-action/pull/1014";>#1014
   Fix error where the init action would fail due to a GitHub API request 
that was taking too long to complete https://github-redirect.dependabot.com/github/codeql-action/pull/1025";>#1025
   
   2.1.7 - 05 Apr 2022
   
   A bug where additional queries specified in the workflow file would 
sometimes not be respected has been fixed. https://github-redirect.dependabot.com/github/codeql-action/pull/1018";>#1018
   
   2.1.6 - 30 Mar 2022
   
   [v2+ only] The CodeQL Action now runs on Node.js v16. https://github-redirect.dependabot.com/github/codeql-action/pull/1000";>#1000
   Update default CodeQL bundle version to 2.8.4. https://github-redirect.dependabot.com/github/codeql-action/pull/990";>#990
   Fix a bug where an invalid commit_oid was being sent to 
code scanning when a custom checkout path was being used. https://github-redirect.dependabot.com/github/codeql-action/pull/956";>#956
   
   
   
   
   Commits
   
   https://github.com/github/codeql-action/commit/3962f1bd85916dd70cf44f7dd36946a72763eef4";>3962f1b
 Bump glob from 7.1.7 to 8.0.1
   https://github.com/github/codeql-action/commit/9daf1de73ca769b18a8abc0ddfdfff845708cb1c";>9daf1de
 Update references to release branches
   https://github.com/github/codeql-action/commit/bce749b10f3bd8b6b463c7753915deeac5158bba";>bce749b
 Improve consistency of variable references in Bash
   https://github.com/github/codeql-action/commit/fce4a01cd713caf52887d7ef8fd4e262d9e4aaa3";>fce4a01
 Update the major version tag within the release process
   https://github.com/github/codeql-action/commit/bac9320f4fb6ba590f3722eb9b477576e59d42bd";>bac9320
 Update description of "Tag release and merge back" workflow
   https://github.com/github/codeql-action/commit/b3bf557359f79e6aa98c484e8a9ad6a782fe3a8a";>b3bf557
 Merge branch 'main' into henrymercer/handle-merge-conflicts-in-releases
   https://github.com/github/codeql-action/commit/f6312f1322bd54138163c559cc89e298d4b5e543";>f6312f1
 Commit any conflicts during v1 backport to simplify release process
   See full diff in https://github.com/github/codeql-action/compare/v1...v2";>compare 
view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=1&new-version=2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating a

[GitHub] [commons-bcel] dependabot[bot] opened a new pull request, #126: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #126:
URL: https://github.com/apache/commons-bcel/pull/126

   Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 
to 2.
   
   Changelog
   Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md";>github/codeql-action's
 changelog.
   
   2.1.9 - 27 Apr 2022
   
   Add working-directory input to the autobuild 
action. https://github-redirect.dependabot.com/github/codeql-action/pull/1024";>#1024
   The analyze and upload-sarif actions will now 
wait up to 2 minutes for processing to complete after they have uploaded the 
results so they can report any processing errors that occurred. This behavior 
can be disabled by setting the wait-for-processing action input to 
"false". https://github-redirect.dependabot.com/github/codeql-action/pull/1007";>#1007
   Update default CodeQL bundle version to 2.9.0.
   Fix a bug where https://github-redirect.dependabot.com/github/codeql-action/issues/1041";>status
 reporting fails on Windows. https://github-redirect.dependabot.com/github/codeql-action/pull/1042";>#1042
   
   2.1.8 - 08 Apr 2022
   
   Update default CodeQL bundle version to 2.8.5. https://github-redirect.dependabot.com/github/codeql-action/pull/1014";>#1014
   Fix error where the init action would fail due to a GitHub API request 
that was taking too long to complete https://github-redirect.dependabot.com/github/codeql-action/pull/1025";>#1025
   
   2.1.7 - 05 Apr 2022
   
   A bug where additional queries specified in the workflow file would 
sometimes not be respected has been fixed. https://github-redirect.dependabot.com/github/codeql-action/pull/1018";>#1018
   
   2.1.6 - 30 Mar 2022
   
   [v2+ only] The CodeQL Action now runs on Node.js v16. https://github-redirect.dependabot.com/github/codeql-action/pull/1000";>#1000
   Update default CodeQL bundle version to 2.8.4. https://github-redirect.dependabot.com/github/codeql-action/pull/990";>#990
   Fix a bug where an invalid commit_oid was being sent to 
code scanning when a custom checkout path was being used. https://github-redirect.dependabot.com/github/codeql-action/pull/956";>#956
   
   
   
   
   Commits
   
   https://github.com/github/codeql-action/commit/3962f1bd85916dd70cf44f7dd36946a72763eef4";>3962f1b
 Bump glob from 7.1.7 to 8.0.1
   https://github.com/github/codeql-action/commit/9daf1de73ca769b18a8abc0ddfdfff845708cb1c";>9daf1de
 Update references to release branches
   https://github.com/github/codeql-action/commit/bce749b10f3bd8b6b463c7753915deeac5158bba";>bce749b
 Improve consistency of variable references in Bash
   https://github.com/github/codeql-action/commit/fce4a01cd713caf52887d7ef8fd4e262d9e4aaa3";>fce4a01
 Update the major version tag within the release process
   https://github.com/github/codeql-action/commit/bac9320f4fb6ba590f3722eb9b477576e59d42bd";>bac9320
 Update description of "Tag release and merge back" workflow
   https://github.com/github/codeql-action/commit/b3bf557359f79e6aa98c484e8a9ad6a782fe3a8a";>b3bf557
 Merge branch 'main' into henrymercer/handle-merge-conflicts-in-releases
   https://github.com/github/codeql-action/commit/f6312f1322bd54138163c559cc89e298d4b5e543";>f6312f1
 Commit any conflicts during v1 backport to simplify release process
   See full diff in https://github.com/github/codeql-action/compare/v1...v2";>compare 
view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=1&new-version=2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creatin

[GitHub] [commons-daemon] markt-asf merged pull request #45: Use switch instead of multiple if statement.

2022-04-29 Thread GitBox


markt-asf merged PR #45:
URL: https://github.com/apache/commons-daemon/pull/45


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-io] naveensrinivasan commented on pull request #352: chore(deps): Included dependency review

2022-04-29 Thread GitBox


naveensrinivasan commented on PR #352:
URL: https://github.com/apache/commons-io/pull/352#issuecomment-1113546525

   Closing this. 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-io] naveensrinivasan closed pull request #352: chore(deps): Included dependency review

2022-04-29 Thread GitBox


naveensrinivasan closed pull request #352: chore(deps): Included dependency 
review
URL: https://github.com/apache/commons-io/pull/352


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-daemon] markt-asf merged pull request #46: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


markt-asf merged PR #46:
URL: https://github.com/apache/commons-daemon/pull/46


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Resolved] (DAEMON-441) When installing a Windows service using Commons Daemon 1.3.0 the errorlevel is -1073741819

2022-04-29 Thread Mark Thomas (Jira)


 [ 
https://issues.apache.org/jira/browse/DAEMON-441?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Mark Thomas resolved DAEMON-441.

Fix Version/s: 1.3.1
   Resolution: Fixed

> When installing a Windows service using Commons Daemon 1.3.0 the errorlevel 
> is -1073741819
> --
>
> Key: DAEMON-441
> URL: https://issues.apache.org/jira/browse/DAEMON-441
> Project: Commons Daemon
>  Issue Type: Bug
>Affects Versions: 1.3.0
> Environment: Windows 2016 Datacenter
>Reporter: Brian Andle
>Priority: Major
> Fix For: 1.3.1
>
> Attachments: Command_Prompt.png
>
>
> When attempting to use prunsrv.exe on Windows 2016 to create a service a 
> Windows Event error is logged and the errorlevel is returned as -1073741819
> Running the following command:
> {code:java}
> prunsrv.exe //IS/MyService --Startup=auto --Description=My Service 
> --DisplayName=My Service {code}
> Results in the following Windows Event Log entry
>  
> {code:java}
> Faulting application name: prunsrv.exe, version: 1.3.0.0, time stamp: 
> 0x622b3ac0
> Faulting module name: prunsrv.exe, version: 1.3.0.0, time stamp: 0x622b3ac0
> Exception code: 0xc005
> Fault offset: 0x6e70
> Faulting process id: 0x1d88
> Faulting application start time: 0x01d845f90eb4351a
> Faulting application path: C:\myfolder\prunsrv.exe
> Faulting module path: C:\myfolder\prunsrv.exe
> Report Id: 409b7098-42bd-4036-aa61-b19eecdb1bd7
> Faulting package full name: 
> Faulting package-relative application ID: {code}
> Doing an echo %errorlevel% shows -1073741819 instead of the expected 0
> Version 1.2.4.0 works correctly on both Windows 10 and 2016
> *NOTE:* The service does appear to actually install on 2016, however most 
> deploy scripts will expect an error level of 0 and will fail if a non 0 value 
> it returned.
> h3. Workaround
> Define a *--LogPath* value and do not use the default 
> %SystemRoot%\System32\LogFiles\Apache path



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Commented] (DAEMON-441) When installing a Windows service using Commons Daemon 1.3.0 the errorlevel is -1073741819

2022-04-29 Thread Mark Thomas (Jira)


[ 
https://issues.apache.org/jira/browse/DAEMON-441?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17530093#comment-17530093
 ] 

Mark Thomas commented on DAEMON-441:


I've updated the error message to show the path.

> When installing a Windows service using Commons Daemon 1.3.0 the errorlevel 
> is -1073741819
> --
>
> Key: DAEMON-441
> URL: https://issues.apache.org/jira/browse/DAEMON-441
> Project: Commons Daemon
>  Issue Type: Bug
>Affects Versions: 1.3.0
> Environment: Windows 2016 Datacenter
>Reporter: Brian Andle
>Priority: Major
> Attachments: Command_Prompt.png
>
>
> When attempting to use prunsrv.exe on Windows 2016 to create a service a 
> Windows Event error is logged and the errorlevel is returned as -1073741819
> Running the following command:
> {code:java}
> prunsrv.exe //IS/MyService --Startup=auto --Description=My Service 
> --DisplayName=My Service {code}
> Results in the following Windows Event Log entry
>  
> {code:java}
> Faulting application name: prunsrv.exe, version: 1.3.0.0, time stamp: 
> 0x622b3ac0
> Faulting module name: prunsrv.exe, version: 1.3.0.0, time stamp: 0x622b3ac0
> Exception code: 0xc005
> Fault offset: 0x6e70
> Faulting process id: 0x1d88
> Faulting application start time: 0x01d845f90eb4351a
> Faulting application path: C:\myfolder\prunsrv.exe
> Faulting module path: C:\myfolder\prunsrv.exe
> Report Id: 409b7098-42bd-4036-aa61-b19eecdb1bd7
> Faulting package full name: 
> Faulting package-relative application ID: {code}
> Doing an echo %errorlevel% shows -1073741819 instead of the expected 0
> Version 1.2.4.0 works correctly on both Windows 10 and 2016
> *NOTE:* The service does appear to actually install on 2016, however most 
> deploy scripts will expect an error level of 0 and will fail if a non 0 value 
> it returned.
> h3. Workaround
> Define a *--LogPath* value and do not use the default 
> %SystemRoot%\System32\LogFiles\Apache path



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Comment Edited] (COLLECTIONS-722) IteratorUtils.chainedIterator() Performance Degrades

2022-04-29 Thread Ng Tsz Sum (Jira)


[ 
https://issues.apache.org/jira/browse/COLLECTIONS-722?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17530087#comment-17530087
 ] 

Ng Tsz Sum edited comment on COLLECTIONS-722 at 4/29/22 4:22 PM:
-

Possible solutions:

Since the problem is due to deeply nested IteratorChain triggering huge amount 
of *hasNext()* call,

1. In IteratorChain.java, add a method *currentIteratorHasNext* method to 
replace all call to *currentIterator.hasNext()* and this method will act as a 
cache to reduce call to {*}currentIterator.hasNext(){*}, of course we need to 
clear the cache whenever *currentIterator* next/remove is called or is pointing 
to something else. Drawback is the code are less readable.

2. Update the document in *IteratorUtils.chainedIterator(iterator1, iterator2)* 
to warn user not to use this method inside a for loop to chain IteratorChain. 
which will create deeply nested object and result in bad performance. Suggest 
them to use
*chainedIterator(final Iterator... iterators)*
or
*chainedIterator(final Collection> iterators)*
instead.


was (Author: samabcde):
Possible solutions:

1. In IteratorChain.java, add a method *currentIteratorHasNext* method to 
replace all call to *currentIterator.next()* and this method will act as a 
cache to reduce call to {*}currentIterator.next(){*}, of course we need to 
clear the cache whenever *currentIterator* next/remove is called or is pointing 
to something else. Drawback is the code are less readable.

2. Update the document in *IteratorUtils.chainedIterator(iterator1, iterator2)* 
to warn user not to use this method inside a for loop to chain IteratorChain. 
which will create deeply nested object and result in bad performance. Suggest 
them to use
*chainedIterator(final Iterator... iterators)*
or
*chainedIterator(final Collection> iterators)*
instead.

> IteratorUtils.chainedIterator() Performance Degrades
> 
>
> Key: COLLECTIONS-722
> URL: https://issues.apache.org/jira/browse/COLLECTIONS-722
> Project: Commons Collections
>  Issue Type: Bug
>Affects Versions: 4.1
>Reporter: E P
>Priority: Major
> Attachments: IteratorUtilsTest.java
>
>
> IteratorUtils.chainedIterator() performance degrades when chaining iterators 
> with chained iterators.   The slowdown appears to be exponential, based upon 
> the number of chains created.  The attached test shows the issue.  
> As a reference, the same test below works as expected using Google's Guava 
> Iterator.concat() functionality.   It is possible I am misusing the API, but 
> the javadoc did not indicate as much.
>  



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Commented] (COLLECTIONS-722) IteratorUtils.chainedIterator() Performance Degrades

2022-04-29 Thread Ng Tsz Sum (Jira)


[ 
https://issues.apache.org/jira/browse/COLLECTIONS-722?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17530087#comment-17530087
 ] 

Ng Tsz Sum commented on COLLECTIONS-722:


Possible solutions:

1. In IteratorChain.java, add a method *currentIteratorHasNext* method to 
replace all call to *currentIterator.next()* and this method will act as a 
cache to reduce call to {*}currentIterator.next(){*}, of course we need to 
clear the cache whenever *currentIterator* next/remove is called or is pointing 
to something else. Drawback is the code are less readable.

2. Update the document in *IteratorUtils.chainedIterator(iterator1, iterator2)* 
to warn user not to use this method inside a for loop to chain IteratorChain. 
which will create deeply nested object and result in bad performance. Suggest 
them to use
*chainedIterator(final Iterator... iterators)*
or
*chainedIterator(final Collection> iterators)*
instead.

> IteratorUtils.chainedIterator() Performance Degrades
> 
>
> Key: COLLECTIONS-722
> URL: https://issues.apache.org/jira/browse/COLLECTIONS-722
> Project: Commons Collections
>  Issue Type: Bug
>Affects Versions: 4.1
>Reporter: E P
>Priority: Major
> Attachments: IteratorUtilsTest.java
>
>
> IteratorUtils.chainedIterator() performance degrades when chaining iterators 
> with chained iterators.   The slowdown appears to be exponential, based upon 
> the number of chains created.  The attached test shows the issue.  
> As a reference, the same test below works as expected using Google's Guava 
> Iterator.concat() functionality.   It is possible I am misusing the API, but 
> the javadoc did not indicate as much.
>  



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[GitHub] [commons-daemon] dependabot[bot] opened a new pull request, #46: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #46:
URL: https://github.com/apache/commons-daemon/pull/46

   Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 
to 2.
   
   Changelog
   Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md";>github/codeql-action's
 changelog.
   
   2.1.9 - 27 Apr 2022
   
   Add working-directory input to the autobuild 
action. https://github-redirect.dependabot.com/github/codeql-action/pull/1024";>#1024
   The analyze and upload-sarif actions will now 
wait up to 2 minutes for processing to complete after they have uploaded the 
results so they can report any processing errors that occurred. This behavior 
can be disabled by setting the wait-for-processing action input to 
"false". https://github-redirect.dependabot.com/github/codeql-action/pull/1007";>#1007
   Update default CodeQL bundle version to 2.9.0.
   Fix a bug where https://github-redirect.dependabot.com/github/codeql-action/issues/1041";>status
 reporting fails on Windows. https://github-redirect.dependabot.com/github/codeql-action/pull/1042";>#1042
   
   2.1.8 - 08 Apr 2022
   
   Update default CodeQL bundle version to 2.8.5. https://github-redirect.dependabot.com/github/codeql-action/pull/1014";>#1014
   Fix error where the init action would fail due to a GitHub API request 
that was taking too long to complete https://github-redirect.dependabot.com/github/codeql-action/pull/1025";>#1025
   
   2.1.7 - 05 Apr 2022
   
   A bug where additional queries specified in the workflow file would 
sometimes not be respected has been fixed. https://github-redirect.dependabot.com/github/codeql-action/pull/1018";>#1018
   
   2.1.6 - 30 Mar 2022
   
   [v2+ only] The CodeQL Action now runs on Node.js v16. https://github-redirect.dependabot.com/github/codeql-action/pull/1000";>#1000
   Update default CodeQL bundle version to 2.8.4. https://github-redirect.dependabot.com/github/codeql-action/pull/990";>#990
   Fix a bug where an invalid commit_oid was being sent to 
code scanning when a custom checkout path was being used. https://github-redirect.dependabot.com/github/codeql-action/pull/956";>#956
   
   
   
   
   Commits
   
   https://github.com/github/codeql-action/commit/3962f1bd85916dd70cf44f7dd36946a72763eef4";>3962f1b
 Bump glob from 7.1.7 to 8.0.1
   https://github.com/github/codeql-action/commit/9daf1de73ca769b18a8abc0ddfdfff845708cb1c";>9daf1de
 Update references to release branches
   https://github.com/github/codeql-action/commit/bce749b10f3bd8b6b463c7753915deeac5158bba";>bce749b
 Improve consistency of variable references in Bash
   https://github.com/github/codeql-action/commit/fce4a01cd713caf52887d7ef8fd4e262d9e4aaa3";>fce4a01
 Update the major version tag within the release process
   https://github.com/github/codeql-action/commit/bac9320f4fb6ba590f3722eb9b477576e59d42bd";>bac9320
 Update description of "Tag release and merge back" workflow
   https://github.com/github/codeql-action/commit/b3bf557359f79e6aa98c484e8a9ad6a782fe3a8a";>b3bf557
 Merge branch 'main' into henrymercer/handle-merge-conflicts-in-releases
   https://github.com/github/codeql-action/commit/f6312f1322bd54138163c559cc89e298d4b5e543";>f6312f1
 Commit any conflicts during v1 backport to simplify release process
   See full diff in https://github.com/github/codeql-action/compare/v1...v2";>compare 
view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=1&new-version=2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creatin

[jira] [Work logged] (COLLECTIONS-807) Upgrade org.junit.Test to org.junit.jupiter.api.Test

2022-04-29 Thread ASF GitHub Bot (Jira)


 [ 
https://issues.apache.org/jira/browse/COLLECTIONS-807?focusedWorklogId=764324&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-764324
 ]

ASF GitHub Bot logged work on COLLECTIONS-807:
--

Author: ASF GitHub Bot
Created on: 29/Apr/22 16:04
Start Date: 29/Apr/22 16:04
Worklog Time Spent: 10m 
  Work Description: samabcde opened a new pull request, #304:
URL: https://github.com/apache/commons-collections/pull/304

   Found one place not updated. Maybe better to include in other change as it 
is quite minor.




Issue Time Tracking
---

Worklog Id: (was: 764324)
Time Spent: 1h 20m  (was: 1h 10m)

> Upgrade org.junit.Test to org.junit.jupiter.api.Test
> 
>
> Key: COLLECTIONS-807
> URL: https://issues.apache.org/jira/browse/COLLECTIONS-807
> Project: Commons Collections
>  Issue Type: Sub-task
>Reporter: John Patrick
>Priority: Major
> Fix For: 4.5
>
>  Time Spent: 1h 20m
>  Remaining Estimate: 0h
>
> Covers '17' usages of legacy usage of;
> {code:java}
> import org.junit.Test;
> {code}



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[GitHub] [commons-collections] samabcde opened a new pull request, #304: [COLLECTIONS-807] fix one place not updated

2022-04-29 Thread GitBox


samabcde opened a new pull request, #304:
URL: https://github.com/apache/commons-collections/pull/304

   Found one place not updated. Maybe better to include in other change as it 
is quite minor.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-configuration] dependabot[bot] opened a new pull request, #178: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #178:
URL: https://github.com/apache/commons-configuration/pull/178

   Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 
to 2.
   
   Changelog
   Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md";>github/codeql-action's
 changelog.
   
   2.1.9 - 27 Apr 2022
   
   Add working-directory input to the autobuild 
action. https://github-redirect.dependabot.com/github/codeql-action/pull/1024";>#1024
   The analyze and upload-sarif actions will now 
wait up to 2 minutes for processing to complete after they have uploaded the 
results so they can report any processing errors that occurred. This behavior 
can be disabled by setting the wait-for-processing action input to 
"false". https://github-redirect.dependabot.com/github/codeql-action/pull/1007";>#1007
   Update default CodeQL bundle version to 2.9.0.
   Fix a bug where https://github-redirect.dependabot.com/github/codeql-action/issues/1041";>status
 reporting fails on Windows. https://github-redirect.dependabot.com/github/codeql-action/pull/1042";>#1042
   
   2.1.8 - 08 Apr 2022
   
   Update default CodeQL bundle version to 2.8.5. https://github-redirect.dependabot.com/github/codeql-action/pull/1014";>#1014
   Fix error where the init action would fail due to a GitHub API request 
that was taking too long to complete https://github-redirect.dependabot.com/github/codeql-action/pull/1025";>#1025
   
   2.1.7 - 05 Apr 2022
   
   A bug where additional queries specified in the workflow file would 
sometimes not be respected has been fixed. https://github-redirect.dependabot.com/github/codeql-action/pull/1018";>#1018
   
   2.1.6 - 30 Mar 2022
   
   [v2+ only] The CodeQL Action now runs on Node.js v16. https://github-redirect.dependabot.com/github/codeql-action/pull/1000";>#1000
   Update default CodeQL bundle version to 2.8.4. https://github-redirect.dependabot.com/github/codeql-action/pull/990";>#990
   Fix a bug where an invalid commit_oid was being sent to 
code scanning when a custom checkout path was being used. https://github-redirect.dependabot.com/github/codeql-action/pull/956";>#956
   
   
   
   
   Commits
   
   https://github.com/github/codeql-action/commit/3962f1bd85916dd70cf44f7dd36946a72763eef4";>3962f1b
 Bump glob from 7.1.7 to 8.0.1
   https://github.com/github/codeql-action/commit/9daf1de73ca769b18a8abc0ddfdfff845708cb1c";>9daf1de
 Update references to release branches
   https://github.com/github/codeql-action/commit/bce749b10f3bd8b6b463c7753915deeac5158bba";>bce749b
 Improve consistency of variable references in Bash
   https://github.com/github/codeql-action/commit/fce4a01cd713caf52887d7ef8fd4e262d9e4aaa3";>fce4a01
 Update the major version tag within the release process
   https://github.com/github/codeql-action/commit/bac9320f4fb6ba590f3722eb9b477576e59d42bd";>bac9320
 Update description of "Tag release and merge back" workflow
   https://github.com/github/codeql-action/commit/b3bf557359f79e6aa98c484e8a9ad6a782fe3a8a";>b3bf557
 Merge branch 'main' into henrymercer/handle-merge-conflicts-in-releases
   https://github.com/github/codeql-action/commit/f6312f1322bd54138163c559cc89e298d4b5e543";>f6312f1
 Commit any conflicts during v1 backport to simplify release process
   See full diff in https://github.com/github/codeql-action/compare/v1...v2";>compare 
view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=1&new-version=2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabo

[jira] [Commented] (RNG-176) Enhance the UniformRandomProvider interface with extra methods and default implementations

2022-04-29 Thread Gilles Sadowski (Jira)


[ 
https://issues.apache.org/jira/browse/RNG-176?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17530051#comment-17530051
 ] 

Gilles Sadowski commented on RNG-176:
-

{quote}I do not really see any harm in adding the methods.
{quote}
No, indeed, if the interface provides the non-optimized implementations, and 
the Javadoc indicates to recommended tool for heavy use. ;)

> Enhance the UniformRandomProvider interface with extra methods and default 
> implementations
> --
>
> Key: RNG-176
> URL: https://issues.apache.org/jira/browse/RNG-176
> Project: Commons RNG
>  Issue Type: New Feature
>Affects Versions: 1.4
>Reporter: Alex Herbert
>Assignee: Alex Herbert
>Priority: Major
>
> JDK 17 introduced the {{RandomGenerator}} interface with the following 
> methods:
> {code:java}
> DoubleStream doubles();
> DoubleStream doubles(double randomNumberOrigin, double randomNumberBound);
> DoubleStream doubles(long streamSize);
> DoubleStream doubles(long streamSize, double randomNumberOrigin,
>  double randomNumberBound);
> IntStream ints();
> IntStream ints(int randomNumberOrigin, int randomNumberBound);
> IntStream ints(long streamSize);
> IntStream ints(long streamSize, int randomNumberOrigin,
>int randomNumberBound);
> LongStream longs();
> LongStream longs(long randomNumberOrigin, long randomNumberBound);
> LongStream longs(long streamSize);
> LongStream longs(long streamSize, long randomNumberOrigin,
>  long randomNumberBound);
> boolean nextBoolean();
> void nextBytes(byte[] bytes);
> float nextFloat();
> float nextFloat(float bound);
> float nextFloat(float origin, float bound);
> double nextDouble();
> double nextDouble(double bound);
> double nextDouble(double origin, double bound);
> int nextInt();
> int nextInt(int bound);
> int nextInt(int origin, int bound);
> long nextLong();
> long nextLong(long bound);
> long nextLong(long origin, long bound);
> double nextGaussian();
> double nextGaussian(double mean, double stddev);
> double nextExponential();
> {code}
> The only method that is *non-default* is {{{}nextLong{}}}. This allows a new 
> generator to be simply implemented by providing the source of randomness as 
> 64-bit longs.
> The {{UniformRandomProvider}} interface can be expanded to include these 
> generation methods. Using Java 8 default interface methods will not require 
> any changes to generators currently implementing the interface.
> I propose to:
>  # Add the new methods for streams and numbers in a range.
>  # Add default implementations of the current API. These can be extracted 
> from the  o.a.c.rng.core.BaseProvider implementations.
>  # Remove the implementations in o.a.c.rng.core.BaseProvider. This change 
> would be binary compatible.
> The base classes in commons core for 32-bit and 64-bit sources of randomness, 
> IntProvider and LongProvider, can be updated suitably to only override the 
> default interface methods where they can be more efficiently implemented 
> given the source of randomness. This applies to:
> ||Source||Update||Details||
> |int|nextBytes|Use nextInt() for the source of bytes|
> | |nextBoolean|Use a cached int for the randomness|
> | |nextInt|Directly supply the int rather than using 32-bits from nextLong()|
> | |nextDouble|Optimise the bits used from two ints for the 53-bits required 
> for the double.|
> |long|nextInt; nextBoolean|Use a cached long for the randomness|
> h3. Note 1
> The UniformRandomProvider also has the method:
> {code:java}
> void nextBytes(byte[] bytes,
>int start,
>int len);
> {code}
> This can also have a default implementation using the output from nextLong().
> h3. Note 2
> The methods to generate an exponential and Gaussian are already implemented 
> in the {{commons-rng-sampling}} module.
> java.util.Random has a nextGaussian() method and so this method appears to be 
> for backward compatibility with legacy Java code. The method is implemented 
> using a modified Ziggurat sampler which uses an exponential sampler for the 
> long tail. The API has thus exposed the exponential sampling method that is 
> used internally in the nextGaussian implementation.
> With no backward compatibility requirements the Commons RNG interface can 
> avoid the distribution sampling methods. Users should select an appropriate 
> sampler from the sampling module.
>  



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[GitHub] [commons-codec] dependabot[bot] opened a new pull request, #130: Bump checkstyle from 9.3 to 10.2

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #130:
URL: https://github.com/apache/commons-codec/pull/130

   Bumps [checkstyle](https://github.com/checkstyle/checkstyle) from 9.3 to 
10.2.
   
   Release notes
   Sourced from https://github.com/checkstyle/checkstyle/releases";>checkstyle's 
releases.
   
   checkstyle-10.2
   https://checkstyle.org/releasenotes.html#Release_10.2";>https://checkstyle.org/releasenotes.html#Release_10.2
   checkstyle-10.1
   https://checkstyle.org/releasenotes.html#Release_10.1";>https://checkstyle.org/releasenotes.html#Release_10.1
   checkstyle-10.0
   https://checkstyle.org/releasenotes.html#Release_10.0";>https://checkstyle.org/releasenotes.html#Release_10.0
   
   
   
   Commits
   
   https://github.com/checkstyle/checkstyle/commit/0678fc609ec1889e3534940aa9d094887a4af2f3";>0678fc6
 [maven-release-plugin] prepare release checkstyle-10.2
   https://github.com/checkstyle/checkstyle/commit/acf70b4d7e8e4423579f02bf88d9773ba9574a77";>acf70b4
 doc: release notes for 10.2
   https://github.com/checkstyle/checkstyle/commit/591b41028cecc786ea94556791a8e53a99defb4c";>591b410
 Issue https://github-redirect.dependabot.com/checkstyle/checkstyle/issues/4845";>#4845:
 remove dependency on netbuddy from test inputs
   https://github.com/checkstyle/checkstyle/commit/0fda5157d34980c229090931af2a1a1ce74e87a9";>0fda515
 dependency: bump maven-antrun-plugin from 3.0.0 to 3.1.0
   https://github.com/checkstyle/checkstyle/commit/7f5fcc814f63a590d24b34a3e6289facfbffc264";>7f5fcc8
 supplemental: Modify pitest.sh to support unstable mutations list
   https://github.com/checkstyle/checkstyle/commit/0ab05c948d302dde4f3e4144e97af30a2613900a";>0ab05c9
 Issue https://github-redirect.dependabot.com/checkstyle/checkstyle/issues/11528";>#11528:
 Kill surviving mutation in EqualsAvoidNullCheck
   https://github.com/checkstyle/checkstyle/commit/c2abb6fb4cef7c4d3e565bd05d061841fc86db50";>c2abb6f
 minor: fix link (link-check-plugin)
   https://github.com/checkstyle/checkstyle/commit/4a7e6fa6b7eeb0658d09c64bc9f390f24c3ab10b";>4a7e6fa
 dependency: bump nexus-staging-maven-plugin from 1.6.12 to 1.6.13
   https://github.com/checkstyle/checkstyle/commit/8035e76a5ba81f4841519d0d3ceb9e7a4f913506";>8035e76
 dependency: bump mockito-inline from 4.5.0 to 4.5.1
   https://github.com/checkstyle/checkstyle/commit/d00939d8400537a7eecc56e7ec1fdaf3f0574333";>d00939d
 dependency: bump maven-site-plugin from 3.11.0 to 3.12.0
   Additional commits viewable in https://github.com/checkstyle/checkstyle/compare/checkstyle-9.3...checkstyle-10.2";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.puppycrawl.tools:checkstyle&package-manager=maven&previous-version=9.3&new-version=10.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-lang] dependabot[bot] opened a new pull request, #886: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #886:
URL: https://github.com/apache/commons-lang/pull/886

   Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 
to 2.
   
   Changelog
   Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md";>github/codeql-action's
 changelog.
   
   2.1.9 - 27 Apr 2022
   
   Add working-directory input to the autobuild 
action. https://github-redirect.dependabot.com/github/codeql-action/pull/1024";>#1024
   The analyze and upload-sarif actions will now 
wait up to 2 minutes for processing to complete after they have uploaded the 
results so they can report any processing errors that occurred. This behavior 
can be disabled by setting the wait-for-processing action input to 
"false". https://github-redirect.dependabot.com/github/codeql-action/pull/1007";>#1007
   Update default CodeQL bundle version to 2.9.0.
   Fix a bug where https://github-redirect.dependabot.com/github/codeql-action/issues/1041";>status
 reporting fails on Windows. https://github-redirect.dependabot.com/github/codeql-action/pull/1042";>#1042
   
   2.1.8 - 08 Apr 2022
   
   Update default CodeQL bundle version to 2.8.5. https://github-redirect.dependabot.com/github/codeql-action/pull/1014";>#1014
   Fix error where the init action would fail due to a GitHub API request 
that was taking too long to complete https://github-redirect.dependabot.com/github/codeql-action/pull/1025";>#1025
   
   2.1.7 - 05 Apr 2022
   
   A bug where additional queries specified in the workflow file would 
sometimes not be respected has been fixed. https://github-redirect.dependabot.com/github/codeql-action/pull/1018";>#1018
   
   2.1.6 - 30 Mar 2022
   
   [v2+ only] The CodeQL Action now runs on Node.js v16. https://github-redirect.dependabot.com/github/codeql-action/pull/1000";>#1000
   Update default CodeQL bundle version to 2.8.4. https://github-redirect.dependabot.com/github/codeql-action/pull/990";>#990
   Fix a bug where an invalid commit_oid was being sent to 
code scanning when a custom checkout path was being used. https://github-redirect.dependabot.com/github/codeql-action/pull/956";>#956
   
   
   
   
   Commits
   
   https://github.com/github/codeql-action/commit/3962f1bd85916dd70cf44f7dd36946a72763eef4";>3962f1b
 Bump glob from 7.1.7 to 8.0.1
   https://github.com/github/codeql-action/commit/9daf1de73ca769b18a8abc0ddfdfff845708cb1c";>9daf1de
 Update references to release branches
   https://github.com/github/codeql-action/commit/bce749b10f3bd8b6b463c7753915deeac5158bba";>bce749b
 Improve consistency of variable references in Bash
   https://github.com/github/codeql-action/commit/fce4a01cd713caf52887d7ef8fd4e262d9e4aaa3";>fce4a01
 Update the major version tag within the release process
   https://github.com/github/codeql-action/commit/bac9320f4fb6ba590f3722eb9b477576e59d42bd";>bac9320
 Update description of "Tag release and merge back" workflow
   https://github.com/github/codeql-action/commit/b3bf557359f79e6aa98c484e8a9ad6a782fe3a8a";>b3bf557
 Merge branch 'main' into henrymercer/handle-merge-conflicts-in-releases
   https://github.com/github/codeql-action/commit/f6312f1322bd54138163c559cc89e298d4b5e543";>f6312f1
 Commit any conflicts during v1 backport to simplify release process
   See full diff in https://github.com/github/codeql-action/compare/v1...v2";>compare 
view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=1&new-version=2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creatin

[GitHub] [commons-codec] dependabot[bot] opened a new pull request, #129: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #129:
URL: https://github.com/apache/commons-codec/pull/129

   Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 
to 2.
   
   Changelog
   Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md";>github/codeql-action's
 changelog.
   
   2.1.9 - 27 Apr 2022
   
   Add working-directory input to the autobuild 
action. https://github-redirect.dependabot.com/github/codeql-action/pull/1024";>#1024
   The analyze and upload-sarif actions will now 
wait up to 2 minutes for processing to complete after they have uploaded the 
results so they can report any processing errors that occurred. This behavior 
can be disabled by setting the wait-for-processing action input to 
"false". https://github-redirect.dependabot.com/github/codeql-action/pull/1007";>#1007
   Update default CodeQL bundle version to 2.9.0.
   Fix a bug where https://github-redirect.dependabot.com/github/codeql-action/issues/1041";>status
 reporting fails on Windows. https://github-redirect.dependabot.com/github/codeql-action/pull/1042";>#1042
   
   2.1.8 - 08 Apr 2022
   
   Update default CodeQL bundle version to 2.8.5. https://github-redirect.dependabot.com/github/codeql-action/pull/1014";>#1014
   Fix error where the init action would fail due to a GitHub API request 
that was taking too long to complete https://github-redirect.dependabot.com/github/codeql-action/pull/1025";>#1025
   
   2.1.7 - 05 Apr 2022
   
   A bug where additional queries specified in the workflow file would 
sometimes not be respected has been fixed. https://github-redirect.dependabot.com/github/codeql-action/pull/1018";>#1018
   
   2.1.6 - 30 Mar 2022
   
   [v2+ only] The CodeQL Action now runs on Node.js v16. https://github-redirect.dependabot.com/github/codeql-action/pull/1000";>#1000
   Update default CodeQL bundle version to 2.8.4. https://github-redirect.dependabot.com/github/codeql-action/pull/990";>#990
   Fix a bug where an invalid commit_oid was being sent to 
code scanning when a custom checkout path was being used. https://github-redirect.dependabot.com/github/codeql-action/pull/956";>#956
   
   
   
   
   Commits
   
   https://github.com/github/codeql-action/commit/3962f1bd85916dd70cf44f7dd36946a72763eef4";>3962f1b
 Bump glob from 7.1.7 to 8.0.1
   https://github.com/github/codeql-action/commit/9daf1de73ca769b18a8abc0ddfdfff845708cb1c";>9daf1de
 Update references to release branches
   https://github.com/github/codeql-action/commit/bce749b10f3bd8b6b463c7753915deeac5158bba";>bce749b
 Improve consistency of variable references in Bash
   https://github.com/github/codeql-action/commit/fce4a01cd713caf52887d7ef8fd4e262d9e4aaa3";>fce4a01
 Update the major version tag within the release process
   https://github.com/github/codeql-action/commit/bac9320f4fb6ba590f3722eb9b477576e59d42bd";>bac9320
 Update description of "Tag release and merge back" workflow
   https://github.com/github/codeql-action/commit/b3bf557359f79e6aa98c484e8a9ad6a782fe3a8a";>b3bf557
 Merge branch 'main' into henrymercer/handle-merge-conflicts-in-releases
   https://github.com/github/codeql-action/commit/f6312f1322bd54138163c559cc89e298d4b5e543";>f6312f1
 Commit any conflicts during v1 backport to simplify release process
   See full diff in https://github.com/github/codeql-action/compare/v1...v2";>compare 
view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=1&new-version=2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creati

[GitHub] [commons-dbutils] garydgregory merged pull request #116: Bump mockito-core from 4.4.0 to 4.5.1

2022-04-29 Thread GitBox


garydgregory merged PR #116:
URL: https://github.com/apache/commons-dbutils/pull/116


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Commented] (RNG-176) Enhance the UniformRandomProvider interface with extra methods and default implementations

2022-04-29 Thread Alex Herbert (Jira)


[ 
https://issues.apache.org/jira/browse/RNG-176?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17530036#comment-17530036
 ] 

Alex Herbert commented on RNG-176:
--

{quote}duplicate non-trivial functionality
{quote}
Yes. However note that the methods to generate a float in a range are not in 
the sampling module. This only has samples for int, long and double in a range.

The interface methods for ranges would be non-optimised. For a single 
generation this lack of optimisation will be a benefit over having to create a 
sampler class to obtain a single number. For the streams then the lack of 
optimisation would be a negative.

In the case of low frequency generation of random numbers in a range then the 
following is my preferred method:
{code:java}
double lo = 1.33;
double hi = 4.66;

// No RNG available
double d = ThreadLocalRandom.current().nextDouble(lo, hi);

UniformRandomProvider rng;
double d = lo + rng.nextDouble() * (hi - lo); 
{code}
The nextDouble(lo, hi) method effectively does exactly as specified but then 
adds a check that the upper bound is exclusive, which can occur due to rounding:
{noformat}
jshell> double lo = 3.5
lo ==> 3.5

jshell> double hi = 4.5
hi ==> 4.5

jshell> lo + Math.nextDown(1.0) * (hi - lo)
$14 ==> 4.5
{noformat}
I am finding that I am increasingly using the JDKs streaming methods for quick 
generation of random numbers, typically into arrays of test random data. For 
heavy generation in simulations I would use samplers, typically created once 
then shared out to threads via an Executor and a Jumpable RNG.

I do not really see any harm in adding the methods. It provides a convenience 
for consumers of the interface and brings in parity with the RandomGenerator 
interface.

This is the type of code I think the convenience methods are used for:
{code:java}
double[] data = new SplittableRandom().doubles(50, lo, hi).toArray();

// Current
UniformRandomProvider rng = ...;
double[] data = DoubleStream.generate(
ContinuousUniformSampler.of(rng, lo, hi)::sample)
.limit(50).toArray();

// New
double[] data = rng.doubles(50, lo, hi).toArray();
{code}
So here we are saving not many characters of typing but it does not require 
inclusion of the sampling module, or even knowledge of how to do this with the 
DoubleStream.

 

> Enhance the UniformRandomProvider interface with extra methods and default 
> implementations
> --
>
> Key: RNG-176
> URL: https://issues.apache.org/jira/browse/RNG-176
> Project: Commons RNG
>  Issue Type: New Feature
>Affects Versions: 1.4
>Reporter: Alex Herbert
>Assignee: Alex Herbert
>Priority: Major
>
> JDK 17 introduced the {{RandomGenerator}} interface with the following 
> methods:
> {code:java}
> DoubleStream doubles();
> DoubleStream doubles(double randomNumberOrigin, double randomNumberBound);
> DoubleStream doubles(long streamSize);
> DoubleStream doubles(long streamSize, double randomNumberOrigin,
>  double randomNumberBound);
> IntStream ints();
> IntStream ints(int randomNumberOrigin, int randomNumberBound);
> IntStream ints(long streamSize);
> IntStream ints(long streamSize, int randomNumberOrigin,
>int randomNumberBound);
> LongStream longs();
> LongStream longs(long randomNumberOrigin, long randomNumberBound);
> LongStream longs(long streamSize);
> LongStream longs(long streamSize, long randomNumberOrigin,
>  long randomNumberBound);
> boolean nextBoolean();
> void nextBytes(byte[] bytes);
> float nextFloat();
> float nextFloat(float bound);
> float nextFloat(float origin, float bound);
> double nextDouble();
> double nextDouble(double bound);
> double nextDouble(double origin, double bound);
> int nextInt();
> int nextInt(int bound);
> int nextInt(int origin, int bound);
> long nextLong();
> long nextLong(long bound);
> long nextLong(long origin, long bound);
> double nextGaussian();
> double nextGaussian(double mean, double stddev);
> double nextExponential();
> {code}
> The only method that is *non-default* is {{{}nextLong{}}}. This allows a new 
> generator to be simply implemented by providing the source of randomness as 
> 64-bit longs.
> The {{UniformRandomProvider}} interface can be expanded to include these 
> generation methods. Using Java 8 default interface methods will not require 
> any changes to generators currently implementing the interface.
> I propose to:
>  # Add the new methods for streams and numbers in a range.
>  # Add default implementations of the current API. These can be extracted 
> from the  o.a.c.rng.core.BaseProvider implementations.
>  # Remove the implementations in o.a.c.rng.core.BaseProvider. This change 
> would be binary compatible.
> The base classes in commons core for 32-bit and 64-bit sou

[GitHub] [commons-dbutils] garydgregory commented on pull request #117: Bump checkstyle from 9.2.1 to 10.2

2022-04-29 Thread GitBox


garydgregory commented on PR #117:
URL: https://github.com/apache/commons-dbutils/pull/117#issuecomment-1113412472

   Closing: Requires Java 11.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-dbutils] garydgregory commented on pull request #108: Bump spotbugs from 4.2.3 to 4.6.0

2022-04-29 Thread GitBox


garydgregory commented on PR #108:
URL: https://github.com/apache/commons-dbutils/pull/108#issuecomment-1113412124

   @dependabot rebase


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-dbutils] garydgregory commented on pull request #110: Bump spotbugs-maven-plugin from 4.4.2 to 4.6.0.0

2022-04-29 Thread GitBox


garydgregory commented on PR #110:
URL: https://github.com/apache/commons-dbutils/pull/110#issuecomment-1113411947

   @dependabot rebase


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-dbutils] garydgregory commented on pull request #116: Bump mockito-core from 4.4.0 to 4.5.1

2022-04-29 Thread GitBox


garydgregory commented on PR #116:
URL: https://github.com/apache/commons-dbutils/pull/116#issuecomment-1113411746

   @dependabot rebase


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-dbutils] garydgregory merged pull request #115: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


garydgregory merged PR #115:
URL: https://github.com/apache/commons-dbutils/pull/115


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-dbutils] garydgregory merged pull request #113: Bump commons-parent from 52 to 53

2022-04-29 Thread GitBox


garydgregory merged PR #113:
URL: https://github.com/apache/commons-dbutils/pull/113


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-vfs] garydgregory merged pull request #259: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


garydgregory merged PR #259:
URL: https://github.com/apache/commons-vfs/pull/259


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-vfs] dependabot[bot] commented on pull request #260: Bump checkstyle from 9.3 to 10.2

2022-04-29 Thread GitBox


dependabot[bot] commented on PR #260:
URL: https://github.com/apache/commons-vfs/pull/260#issuecomment-1113401343

   OK, I won't notify you again about this release, but will get in touch when 
a new version is available. If you'd rather skip all updates until the next 
major or minor version, let me know by commenting `@dependabot ignore this 
major version` or `@dependabot ignore this minor version`. You can also ignore 
all major, minor, or patch releases for a dependency by adding an [`ignore` 
condition](https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#ignore)
 with the desired `update_types` to your config file.
   
   If you change your mind, just re-open this PR and I'll resolve any conflicts 
on it.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-vfs] garydgregory commented on pull request #260: Bump checkstyle from 9.3 to 10.2

2022-04-29 Thread GitBox


garydgregory commented on PR #260:
URL: https://github.com/apache/commons-vfs/pull/260#issuecomment-1113401319

   Closing: Requires Java 11.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-vfs] garydgregory closed pull request #260: Bump checkstyle from 9.3 to 10.2

2022-04-29 Thread GitBox


garydgregory closed pull request #260: Bump checkstyle from 9.3 to 10.2
URL: https://github.com/apache/commons-vfs/pull/260


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-parent] garydgregory merged pull request #108: Bump maven-site-plugin from 3.11.0 to 3.12.0

2022-04-29 Thread GitBox


garydgregory merged PR #108:
URL: https://github.com/apache/commons-parent/pull/108


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-parent] garydgregory merged pull request #107: Bump maven-project-info-reports-plugin from 3.2.2 to 3.3.0

2022-04-29 Thread GitBox


garydgregory merged PR #107:
URL: https://github.com/apache/commons-parent/pull/107


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-pool] garydgregory merged pull request #144: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


garydgregory merged PR #144:
URL: https://github.com/apache/commons-pool/pull/144


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-pool] garydgregory closed pull request #145: Bump checkstyle from 9.3 to 10.2

2022-04-29 Thread GitBox


garydgregory closed pull request #145: Bump checkstyle from 9.3 to 10.2
URL: https://github.com/apache/commons-pool/pull/145


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-pool] dependabot[bot] commented on pull request #145: Bump checkstyle from 9.3 to 10.2

2022-04-29 Thread GitBox


dependabot[bot] commented on PR #145:
URL: https://github.com/apache/commons-pool/pull/145#issuecomment-1113394270

   OK, I won't notify you again about this release, but will get in touch when 
a new version is available. If you'd rather skip all updates until the next 
major or minor version, let me know by commenting `@dependabot ignore this 
major version` or `@dependabot ignore this minor version`. You can also ignore 
all major, minor, or patch releases for a dependency by adding an [`ignore` 
condition](https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#ignore)
 with the desired `update_types` to your config file.
   
   If you change your mind, just re-open this PR and I'll resolve any conflicts 
on it.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-pool] garydgregory commented on pull request #145: Bump checkstyle from 9.3 to 10.2

2022-04-29 Thread GitBox


garydgregory commented on PR #145:
URL: https://github.com/apache/commons-pool/pull/145#issuecomment-1113394224

   Closing: Requires Java 11.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-csv] garydgregory merged pull request #231: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


garydgregory merged PR #231:
URL: https://github.com/apache/commons-csv/pull/231


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-csv] dependabot[bot] commented on pull request #232: Bump checkstyle from 9.3 to 10.2

2022-04-29 Thread GitBox


dependabot[bot] commented on PR #232:
URL: https://github.com/apache/commons-csv/pull/232#issuecomment-1113391735

   OK, I won't notify you again about this release, but will get in touch when 
a new version is available. If you'd rather skip all updates until the next 
major or minor version, let me know by commenting `@dependabot ignore this 
major version` or `@dependabot ignore this minor version`. You can also ignore 
all major, minor, or patch releases for a dependency by adding an [`ignore` 
condition](https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#ignore)
 with the desired `update_types` to your config file.
   
   If you change your mind, just re-open this PR and I'll resolve any conflicts 
on it.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-csv] garydgregory closed pull request #232: Bump checkstyle from 9.3 to 10.2

2022-04-29 Thread GitBox


garydgregory closed pull request #232: Bump checkstyle from 9.3 to 10.2
URL: https://github.com/apache/commons-csv/pull/232


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-csv] garydgregory commented on pull request #232: Bump checkstyle from 9.3 to 10.2

2022-04-29 Thread GitBox


garydgregory commented on PR #232:
URL: https://github.com/apache/commons-csv/pull/232#issuecomment-1113391644

   Closing: Requires Java 11.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-collections] garydgregory merged pull request #303: Bump maven-antrun-plugin from 3.0.0 to 3.1.0

2022-04-29 Thread GitBox


garydgregory merged PR #303:
URL: https://github.com/apache/commons-collections/pull/303


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-collections] garydgregory merged pull request #302: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


garydgregory merged PR #302:
URL: https://github.com/apache/commons-collections/pull/302


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-collections] codecov-commenter commented on pull request #303: Bump maven-antrun-plugin from 3.0.0 to 3.1.0

2022-04-29 Thread GitBox


codecov-commenter commented on PR #303:
URL: 
https://github.com/apache/commons-collections/pull/303#issuecomment-1113258580

   # 
[Codecov](https://codecov.io/gh/apache/commons-collections/pull/303?src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation)
 Report
   > Merging 
[#303](https://codecov.io/gh/apache/commons-collections/pull/303?src=pr&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation)
 (db65497) into 
[master](https://codecov.io/gh/apache/commons-collections/commit/c6a6d8321ba505f32e2a34adb5c74d54bd9fff28?el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation)
 (c6a6d83) will **not change** coverage.
   > The diff coverage is `n/a`.
   
   ```diff
   @@Coverage Diff@@
   ## master #303   +/-   ##
   =
 Coverage 85.88%   85.88%   
 Complexity 4676 4676   
   =
 Files   292  292   
 Lines 1346913469   
 Branches   1955 1955   
   =
 Hits  1156811568   
 Misses 1324 1324   
 Partials577  577   
   ```
   
   
   
   --
   
   [Continue to review full report at 
Codecov](https://codecov.io/gh/apache/commons-collections/pull/303?src=pr&el=continue&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation).
   > **Legend** - [Click here to learn 
more](https://docs.codecov.io/docs/codecov-delta?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation)
   > `Δ = absolute  (impact)`, `ø = not affected`, `? = missing data`
   > Powered by 
[Codecov](https://codecov.io/gh/apache/commons-collections/pull/303?src=pr&el=footer&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation).
 Last update 
[c6a6d83...db65497](https://codecov.io/gh/apache/commons-collections/pull/303?src=pr&el=lastupdated&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation).
 Read the [comment 
docs](https://docs.codecov.io/docs/pull-request-comments?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation).
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-collections] dependabot[bot] opened a new pull request, #303: Bump maven-antrun-plugin from 3.0.0 to 3.1.0

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #303:
URL: https://github.com/apache/commons-collections/pull/303

   Bumps [maven-antrun-plugin](https://github.com/apache/maven-antrun-plugin) 
from 3.0.0 to 3.1.0.
   
   Commits
   
   https://github.com/apache/maven-antrun-plugin/commit/feceee80f82e1f52a8233a19015c1ed0e4cef2ef";>feceee8
 [maven-release-plugin] prepare release maven-antrun-plugin-3.1.0
   https://github.com/apache/maven-antrun-plugin/commit/4e899c4314aa9e1d8ee0e6b17844c849359c42ce";>4e899c4
 [MANTRUN-236] Upgrade Maven Plugin Plugin to 3.6.4
   https://github.com/apache/maven-antrun-plugin/commit/61c21bd0e95cb2e4433492f00eb473d5b39fb27d";>61c21bd
 Update CI URL
   https://github.com/apache/maven-antrun-plugin/commit/b44673765e5cb4990e779d9115226510403273a7";>b446737
 Bump checkstyle from 9.2.1 to 9.3
   https://github.com/apache/maven-antrun-plugin/commit/43cb90edb00dfd305574820b32d368a4ae25008d";>43cb90e
 [MANTRUN-232] Require Maven 3.2.5 - set proper maven scopes
   https://github.com/apache/maven-antrun-plugin/commit/2274253cdaed396d1de6964e1c6f93ebc7502141";>2274253
 Shared GitHub Actions v2
   https://github.com/apache/maven-antrun-plugin/commit/7911362e0ac86b5a1120bc8f6ef451c342ec";>7911362
 Bump checkstyle from 9.0.1 to 9.2.1
   https://github.com/apache/maven-antrun-plugin/commit/5bb03c35533255f04d98267c5662d3b2272835c2";>5bb03c3
 (doc) Update plugins before release
   https://github.com/apache/maven-antrun-plugin/commit/e773180d4e7d1b661efe6fa7882fcd24c11e84bc";>e773180
 Bump maven-site-plugin from 3.9.1 to 3.10.0
   https://github.com/apache/maven-antrun-plugin/commit/68fc8330e278b92829168e66065b5fa32086df93";>68fc833
 Bump xmlunit-matchers from 2.8.3 to 2.8.4
   Additional commits viewable in https://github.com/apache/maven-antrun-plugin/compare/maven-antrun-plugin-3.0.0...maven-antrun-plugin-3.1.0";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.maven.plugins:maven-antrun-plugin&package-manager=maven&previous-version=3.0.0&new-version=3.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-csv] dependabot[bot] opened a new pull request, #232: Bump checkstyle from 9.3 to 10.2

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #232:
URL: https://github.com/apache/commons-csv/pull/232

   Bumps [checkstyle](https://github.com/checkstyle/checkstyle) from 9.3 to 
10.2.
   
   Release notes
   Sourced from https://github.com/checkstyle/checkstyle/releases";>checkstyle's 
releases.
   
   checkstyle-10.2
   https://checkstyle.org/releasenotes.html#Release_10.2";>https://checkstyle.org/releasenotes.html#Release_10.2
   checkstyle-10.1
   https://checkstyle.org/releasenotes.html#Release_10.1";>https://checkstyle.org/releasenotes.html#Release_10.1
   checkstyle-10.0
   https://checkstyle.org/releasenotes.html#Release_10.0";>https://checkstyle.org/releasenotes.html#Release_10.0
   
   
   
   Commits
   
   https://github.com/checkstyle/checkstyle/commit/0678fc609ec1889e3534940aa9d094887a4af2f3";>0678fc6
 [maven-release-plugin] prepare release checkstyle-10.2
   https://github.com/checkstyle/checkstyle/commit/acf70b4d7e8e4423579f02bf88d9773ba9574a77";>acf70b4
 doc: release notes for 10.2
   https://github.com/checkstyle/checkstyle/commit/591b41028cecc786ea94556791a8e53a99defb4c";>591b410
 Issue https://github-redirect.dependabot.com/checkstyle/checkstyle/issues/4845";>#4845:
 remove dependency on netbuddy from test inputs
   https://github.com/checkstyle/checkstyle/commit/0fda5157d34980c229090931af2a1a1ce74e87a9";>0fda515
 dependency: bump maven-antrun-plugin from 3.0.0 to 3.1.0
   https://github.com/checkstyle/checkstyle/commit/7f5fcc814f63a590d24b34a3e6289facfbffc264";>7f5fcc8
 supplemental: Modify pitest.sh to support unstable mutations list
   https://github.com/checkstyle/checkstyle/commit/0ab05c948d302dde4f3e4144e97af30a2613900a";>0ab05c9
 Issue https://github-redirect.dependabot.com/checkstyle/checkstyle/issues/11528";>#11528:
 Kill surviving mutation in EqualsAvoidNullCheck
   https://github.com/checkstyle/checkstyle/commit/c2abb6fb4cef7c4d3e565bd05d061841fc86db50";>c2abb6f
 minor: fix link (link-check-plugin)
   https://github.com/checkstyle/checkstyle/commit/4a7e6fa6b7eeb0658d09c64bc9f390f24c3ab10b";>4a7e6fa
 dependency: bump nexus-staging-maven-plugin from 1.6.12 to 1.6.13
   https://github.com/checkstyle/checkstyle/commit/8035e76a5ba81f4841519d0d3ceb9e7a4f913506";>8035e76
 dependency: bump mockito-inline from 4.5.0 to 4.5.1
   https://github.com/checkstyle/checkstyle/commit/d00939d8400537a7eecc56e7ec1fdaf3f0574333";>d00939d
 dependency: bump maven-site-plugin from 3.11.0 to 3.12.0
   Additional commits viewable in https://github.com/checkstyle/checkstyle/compare/checkstyle-9.3...checkstyle-10.2";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.puppycrawl.tools:checkstyle&package-manager=maven&previous-version=9.3&new-version=10.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-pool] dependabot[bot] opened a new pull request, #145: Bump checkstyle from 9.3 to 10.2

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #145:
URL: https://github.com/apache/commons-pool/pull/145

   Bumps [checkstyle](https://github.com/checkstyle/checkstyle) from 9.3 to 
10.2.
   
   Release notes
   Sourced from https://github.com/checkstyle/checkstyle/releases";>checkstyle's 
releases.
   
   checkstyle-10.2
   https://checkstyle.org/releasenotes.html#Release_10.2";>https://checkstyle.org/releasenotes.html#Release_10.2
   checkstyle-10.1
   https://checkstyle.org/releasenotes.html#Release_10.1";>https://checkstyle.org/releasenotes.html#Release_10.1
   checkstyle-10.0
   https://checkstyle.org/releasenotes.html#Release_10.0";>https://checkstyle.org/releasenotes.html#Release_10.0
   
   
   
   Commits
   
   https://github.com/checkstyle/checkstyle/commit/0678fc609ec1889e3534940aa9d094887a4af2f3";>0678fc6
 [maven-release-plugin] prepare release checkstyle-10.2
   https://github.com/checkstyle/checkstyle/commit/acf70b4d7e8e4423579f02bf88d9773ba9574a77";>acf70b4
 doc: release notes for 10.2
   https://github.com/checkstyle/checkstyle/commit/591b41028cecc786ea94556791a8e53a99defb4c";>591b410
 Issue https://github-redirect.dependabot.com/checkstyle/checkstyle/issues/4845";>#4845:
 remove dependency on netbuddy from test inputs
   https://github.com/checkstyle/checkstyle/commit/0fda5157d34980c229090931af2a1a1ce74e87a9";>0fda515
 dependency: bump maven-antrun-plugin from 3.0.0 to 3.1.0
   https://github.com/checkstyle/checkstyle/commit/7f5fcc814f63a590d24b34a3e6289facfbffc264";>7f5fcc8
 supplemental: Modify pitest.sh to support unstable mutations list
   https://github.com/checkstyle/checkstyle/commit/0ab05c948d302dde4f3e4144e97af30a2613900a";>0ab05c9
 Issue https://github-redirect.dependabot.com/checkstyle/checkstyle/issues/11528";>#11528:
 Kill surviving mutation in EqualsAvoidNullCheck
   https://github.com/checkstyle/checkstyle/commit/c2abb6fb4cef7c4d3e565bd05d061841fc86db50";>c2abb6f
 minor: fix link (link-check-plugin)
   https://github.com/checkstyle/checkstyle/commit/4a7e6fa6b7eeb0658d09c64bc9f390f24c3ab10b";>4a7e6fa
 dependency: bump nexus-staging-maven-plugin from 1.6.12 to 1.6.13
   https://github.com/checkstyle/checkstyle/commit/8035e76a5ba81f4841519d0d3ceb9e7a4f913506";>8035e76
 dependency: bump mockito-inline from 4.5.0 to 4.5.1
   https://github.com/checkstyle/checkstyle/commit/d00939d8400537a7eecc56e7ec1fdaf3f0574333";>d00939d
 dependency: bump maven-site-plugin from 3.11.0 to 3.12.0
   Additional commits viewable in https://github.com/checkstyle/checkstyle/compare/checkstyle-9.3...checkstyle-10.2";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.puppycrawl.tools:checkstyle&package-manager=maven&previous-version=9.3&new-version=10.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-jexl] dependabot[bot] opened a new pull request, #93: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #93:
URL: https://github.com/apache/commons-jexl/pull/93

   Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 
to 2.
   
   Changelog
   Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md";>github/codeql-action's
 changelog.
   
   2.1.9 - 27 Apr 2022
   
   Add working-directory input to the autobuild 
action. https://github-redirect.dependabot.com/github/codeql-action/pull/1024";>#1024
   The analyze and upload-sarif actions will now 
wait up to 2 minutes for processing to complete after they have uploaded the 
results so they can report any processing errors that occurred. This behavior 
can be disabled by setting the wait-for-processing action input to 
"false". https://github-redirect.dependabot.com/github/codeql-action/pull/1007";>#1007
   Update default CodeQL bundle version to 2.9.0.
   Fix a bug where https://github-redirect.dependabot.com/github/codeql-action/issues/1041";>status
 reporting fails on Windows. https://github-redirect.dependabot.com/github/codeql-action/pull/1042";>#1042
   
   2.1.8 - 08 Apr 2022
   
   Update default CodeQL bundle version to 2.8.5. https://github-redirect.dependabot.com/github/codeql-action/pull/1014";>#1014
   Fix error where the init action would fail due to a GitHub API request 
that was taking too long to complete https://github-redirect.dependabot.com/github/codeql-action/pull/1025";>#1025
   
   2.1.7 - 05 Apr 2022
   
   A bug where additional queries specified in the workflow file would 
sometimes not be respected has been fixed. https://github-redirect.dependabot.com/github/codeql-action/pull/1018";>#1018
   
   2.1.6 - 30 Mar 2022
   
   [v2+ only] The CodeQL Action now runs on Node.js v16. https://github-redirect.dependabot.com/github/codeql-action/pull/1000";>#1000
   Update default CodeQL bundle version to 2.8.4. https://github-redirect.dependabot.com/github/codeql-action/pull/990";>#990
   Fix a bug where an invalid commit_oid was being sent to 
code scanning when a custom checkout path was being used. https://github-redirect.dependabot.com/github/codeql-action/pull/956";>#956
   
   
   
   
   Commits
   
   https://github.com/github/codeql-action/commit/3962f1bd85916dd70cf44f7dd36946a72763eef4";>3962f1b
 Bump glob from 7.1.7 to 8.0.1
   https://github.com/github/codeql-action/commit/9daf1de73ca769b18a8abc0ddfdfff845708cb1c";>9daf1de
 Update references to release branches
   https://github.com/github/codeql-action/commit/bce749b10f3bd8b6b463c7753915deeac5158bba";>bce749b
 Improve consistency of variable references in Bash
   https://github.com/github/codeql-action/commit/fce4a01cd713caf52887d7ef8fd4e262d9e4aaa3";>fce4a01
 Update the major version tag within the release process
   https://github.com/github/codeql-action/commit/bac9320f4fb6ba590f3722eb9b477576e59d42bd";>bac9320
 Update description of "Tag release and merge back" workflow
   https://github.com/github/codeql-action/commit/b3bf557359f79e6aa98c484e8a9ad6a782fe3a8a";>b3bf557
 Merge branch 'main' into henrymercer/handle-merge-conflicts-in-releases
   https://github.com/github/codeql-action/commit/f6312f1322bd54138163c559cc89e298d4b5e543";>f6312f1
 Commit any conflicts during v1 backport to simplify release process
   See full diff in https://github.com/github/codeql-action/compare/v1...v2";>compare 
view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=1&new-version=2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating 

[GitHub] [commons-csv] dependabot[bot] opened a new pull request, #231: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #231:
URL: https://github.com/apache/commons-csv/pull/231

   Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 
to 2.
   
   Changelog
   Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md";>github/codeql-action's
 changelog.
   
   2.1.9 - 27 Apr 2022
   
   Add working-directory input to the autobuild 
action. https://github-redirect.dependabot.com/github/codeql-action/pull/1024";>#1024
   The analyze and upload-sarif actions will now 
wait up to 2 minutes for processing to complete after they have uploaded the 
results so they can report any processing errors that occurred. This behavior 
can be disabled by setting the wait-for-processing action input to 
"false". https://github-redirect.dependabot.com/github/codeql-action/pull/1007";>#1007
   Update default CodeQL bundle version to 2.9.0.
   Fix a bug where https://github-redirect.dependabot.com/github/codeql-action/issues/1041";>status
 reporting fails on Windows. https://github-redirect.dependabot.com/github/codeql-action/pull/1042";>#1042
   
   2.1.8 - 08 Apr 2022
   
   Update default CodeQL bundle version to 2.8.5. https://github-redirect.dependabot.com/github/codeql-action/pull/1014";>#1014
   Fix error where the init action would fail due to a GitHub API request 
that was taking too long to complete https://github-redirect.dependabot.com/github/codeql-action/pull/1025";>#1025
   
   2.1.7 - 05 Apr 2022
   
   A bug where additional queries specified in the workflow file would 
sometimes not be respected has been fixed. https://github-redirect.dependabot.com/github/codeql-action/pull/1018";>#1018
   
   2.1.6 - 30 Mar 2022
   
   [v2+ only] The CodeQL Action now runs on Node.js v16. https://github-redirect.dependabot.com/github/codeql-action/pull/1000";>#1000
   Update default CodeQL bundle version to 2.8.4. https://github-redirect.dependabot.com/github/codeql-action/pull/990";>#990
   Fix a bug where an invalid commit_oid was being sent to 
code scanning when a custom checkout path was being used. https://github-redirect.dependabot.com/github/codeql-action/pull/956";>#956
   
   
   
   
   Commits
   
   https://github.com/github/codeql-action/commit/3962f1bd85916dd70cf44f7dd36946a72763eef4";>3962f1b
 Bump glob from 7.1.7 to 8.0.1
   https://github.com/github/codeql-action/commit/9daf1de73ca769b18a8abc0ddfdfff845708cb1c";>9daf1de
 Update references to release branches
   https://github.com/github/codeql-action/commit/bce749b10f3bd8b6b463c7753915deeac5158bba";>bce749b
 Improve consistency of variable references in Bash
   https://github.com/github/codeql-action/commit/fce4a01cd713caf52887d7ef8fd4e262d9e4aaa3";>fce4a01
 Update the major version tag within the release process
   https://github.com/github/codeql-action/commit/bac9320f4fb6ba590f3722eb9b477576e59d42bd";>bac9320
 Update description of "Tag release and merge back" workflow
   https://github.com/github/codeql-action/commit/b3bf557359f79e6aa98c484e8a9ad6a782fe3a8a";>b3bf557
 Merge branch 'main' into henrymercer/handle-merge-conflicts-in-releases
   https://github.com/github/codeql-action/commit/f6312f1322bd54138163c559cc89e298d4b5e543";>f6312f1
 Commit any conflicts during v1 backport to simplify release process
   See full diff in https://github.com/github/codeql-action/compare/v1...v2";>compare 
view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=1&new-version=2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating

[GitHub] [commons-collections] dependabot[bot] opened a new pull request, #302: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #302:
URL: https://github.com/apache/commons-collections/pull/302

   Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 
to 2.
   
   Changelog
   Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md";>github/codeql-action's
 changelog.
   
   2.1.9 - 27 Apr 2022
   
   Add working-directory input to the autobuild 
action. https://github-redirect.dependabot.com/github/codeql-action/pull/1024";>#1024
   The analyze and upload-sarif actions will now 
wait up to 2 minutes for processing to complete after they have uploaded the 
results so they can report any processing errors that occurred. This behavior 
can be disabled by setting the wait-for-processing action input to 
"false". https://github-redirect.dependabot.com/github/codeql-action/pull/1007";>#1007
   Update default CodeQL bundle version to 2.9.0.
   Fix a bug where https://github-redirect.dependabot.com/github/codeql-action/issues/1041";>status
 reporting fails on Windows. https://github-redirect.dependabot.com/github/codeql-action/pull/1042";>#1042
   
   2.1.8 - 08 Apr 2022
   
   Update default CodeQL bundle version to 2.8.5. https://github-redirect.dependabot.com/github/codeql-action/pull/1014";>#1014
   Fix error where the init action would fail due to a GitHub API request 
that was taking too long to complete https://github-redirect.dependabot.com/github/codeql-action/pull/1025";>#1025
   
   2.1.7 - 05 Apr 2022
   
   A bug where additional queries specified in the workflow file would 
sometimes not be respected has been fixed. https://github-redirect.dependabot.com/github/codeql-action/pull/1018";>#1018
   
   2.1.6 - 30 Mar 2022
   
   [v2+ only] The CodeQL Action now runs on Node.js v16. https://github-redirect.dependabot.com/github/codeql-action/pull/1000";>#1000
   Update default CodeQL bundle version to 2.8.4. https://github-redirect.dependabot.com/github/codeql-action/pull/990";>#990
   Fix a bug where an invalid commit_oid was being sent to 
code scanning when a custom checkout path was being used. https://github-redirect.dependabot.com/github/codeql-action/pull/956";>#956
   
   
   
   
   Commits
   
   https://github.com/github/codeql-action/commit/3962f1bd85916dd70cf44f7dd36946a72763eef4";>3962f1b
 Bump glob from 7.1.7 to 8.0.1
   https://github.com/github/codeql-action/commit/9daf1de73ca769b18a8abc0ddfdfff845708cb1c";>9daf1de
 Update references to release branches
   https://github.com/github/codeql-action/commit/bce749b10f3bd8b6b463c7753915deeac5158bba";>bce749b
 Improve consistency of variable references in Bash
   https://github.com/github/codeql-action/commit/fce4a01cd713caf52887d7ef8fd4e262d9e4aaa3";>fce4a01
 Update the major version tag within the release process
   https://github.com/github/codeql-action/commit/bac9320f4fb6ba590f3722eb9b477576e59d42bd";>bac9320
 Update description of "Tag release and merge back" workflow
   https://github.com/github/codeql-action/commit/b3bf557359f79e6aa98c484e8a9ad6a782fe3a8a";>b3bf557
 Merge branch 'main' into henrymercer/handle-merge-conflicts-in-releases
   https://github.com/github/codeql-action/commit/f6312f1322bd54138163c559cc89e298d4b5e543";>f6312f1
 Commit any conflicts during v1 backport to simplify release process
   See full diff in https://github.com/github/codeql-action/compare/v1...v2";>compare 
view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=1&new-version=2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot 

[GitHub] [commons-pool] dependabot[bot] opened a new pull request, #144: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #144:
URL: https://github.com/apache/commons-pool/pull/144

   Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 
to 2.
   
   Changelog
   Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md";>github/codeql-action's
 changelog.
   
   2.1.9 - 27 Apr 2022
   
   Add working-directory input to the autobuild 
action. https://github-redirect.dependabot.com/github/codeql-action/pull/1024";>#1024
   The analyze and upload-sarif actions will now 
wait up to 2 minutes for processing to complete after they have uploaded the 
results so they can report any processing errors that occurred. This behavior 
can be disabled by setting the wait-for-processing action input to 
"false". https://github-redirect.dependabot.com/github/codeql-action/pull/1007";>#1007
   Update default CodeQL bundle version to 2.9.0.
   Fix a bug where https://github-redirect.dependabot.com/github/codeql-action/issues/1041";>status
 reporting fails on Windows. https://github-redirect.dependabot.com/github/codeql-action/pull/1042";>#1042
   
   2.1.8 - 08 Apr 2022
   
   Update default CodeQL bundle version to 2.8.5. https://github-redirect.dependabot.com/github/codeql-action/pull/1014";>#1014
   Fix error where the init action would fail due to a GitHub API request 
that was taking too long to complete https://github-redirect.dependabot.com/github/codeql-action/pull/1025";>#1025
   
   2.1.7 - 05 Apr 2022
   
   A bug where additional queries specified in the workflow file would 
sometimes not be respected has been fixed. https://github-redirect.dependabot.com/github/codeql-action/pull/1018";>#1018
   
   2.1.6 - 30 Mar 2022
   
   [v2+ only] The CodeQL Action now runs on Node.js v16. https://github-redirect.dependabot.com/github/codeql-action/pull/1000";>#1000
   Update default CodeQL bundle version to 2.8.4. https://github-redirect.dependabot.com/github/codeql-action/pull/990";>#990
   Fix a bug where an invalid commit_oid was being sent to 
code scanning when a custom checkout path was being used. https://github-redirect.dependabot.com/github/codeql-action/pull/956";>#956
   
   
   
   
   Commits
   
   https://github.com/github/codeql-action/commit/3962f1bd85916dd70cf44f7dd36946a72763eef4";>3962f1b
 Bump glob from 7.1.7 to 8.0.1
   https://github.com/github/codeql-action/commit/9daf1de73ca769b18a8abc0ddfdfff845708cb1c";>9daf1de
 Update references to release branches
   https://github.com/github/codeql-action/commit/bce749b10f3bd8b6b463c7753915deeac5158bba";>bce749b
 Improve consistency of variable references in Bash
   https://github.com/github/codeql-action/commit/fce4a01cd713caf52887d7ef8fd4e262d9e4aaa3";>fce4a01
 Update the major version tag within the release process
   https://github.com/github/codeql-action/commit/bac9320f4fb6ba590f3722eb9b477576e59d42bd";>bac9320
 Update description of "Tag release and merge back" workflow
   https://github.com/github/codeql-action/commit/b3bf557359f79e6aa98c484e8a9ad6a782fe3a8a";>b3bf557
 Merge branch 'main' into henrymercer/handle-merge-conflicts-in-releases
   https://github.com/github/codeql-action/commit/f6312f1322bd54138163c559cc89e298d4b5e543";>f6312f1
 Commit any conflicts during v1 backport to simplify release process
   See full diff in https://github.com/github/codeql-action/compare/v1...v2";>compare 
view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=1&new-version=2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creatin

[jira] [Commented] (RNG-176) Enhance the UniformRandomProvider interface with extra methods and default implementations

2022-04-29 Thread Gilles Sadowski (Jira)


[ 
https://issues.apache.org/jira/browse/RNG-176?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17529939#comment-17529939
 ] 

Gilles Sadowski commented on RNG-176:
-

{quote}
I propose to:
# Add the new methods for streams and numbers in a range.
{quote}

This would duplicate non-trivial functionality (e.g. the optimized instances 
created for specific ranges) defined in "commons-rng-sampling".

bq. [...] Commons RNG interface can avoid the distribution sampling methods.

+1


> Enhance the UniformRandomProvider interface with extra methods and default 
> implementations
> --
>
> Key: RNG-176
> URL: https://issues.apache.org/jira/browse/RNG-176
> Project: Commons RNG
>  Issue Type: New Feature
>Affects Versions: 1.4
>Reporter: Alex Herbert
>Assignee: Alex Herbert
>Priority: Major
>
> JDK 17 introduced the {{RandomGenerator}} interface with the following 
> methods:
> {code:java}
> DoubleStream doubles();
> DoubleStream doubles(double randomNumberOrigin, double randomNumberBound);
> DoubleStream doubles(long streamSize);
> DoubleStream doubles(long streamSize, double randomNumberOrigin,
>  double randomNumberBound);
> IntStream ints();
> IntStream ints(int randomNumberOrigin, int randomNumberBound);
> IntStream ints(long streamSize);
> IntStream ints(long streamSize, int randomNumberOrigin,
>int randomNumberBound);
> LongStream longs();
> LongStream longs(long randomNumberOrigin, long randomNumberBound);
> LongStream longs(long streamSize);
> LongStream longs(long streamSize, long randomNumberOrigin,
>  long randomNumberBound);
> boolean nextBoolean();
> void nextBytes(byte[] bytes);
> float nextFloat();
> float nextFloat(float bound);
> float nextFloat(float origin, float bound);
> double nextDouble();
> double nextDouble(double bound);
> double nextDouble(double origin, double bound);
> int nextInt();
> int nextInt(int bound);
> int nextInt(int origin, int bound);
> long nextLong();
> long nextLong(long bound);
> long nextLong(long origin, long bound);
> double nextGaussian();
> double nextGaussian(double mean, double stddev);
> double nextExponential();
> {code}
> The only method that is *non-default* is {{{}nextLong{}}}. This allows a new 
> generator to be simply implemented by providing the source of randomness as 
> 64-bit longs.
> The {{UniformRandomProvider}} interface can be expanded to include these 
> generation methods. Using Java 8 default interface methods will not require 
> any changes to generators currently implementing the interface.
> I propose to:
>  # Add the new methods for streams and numbers in a range.
>  # Add default implementations of the current API. These can be extracted 
> from the  o.a.c.rng.core.BaseProvider implementations.
>  # Remove the implementations in o.a.c.rng.core.BaseProvider. This change 
> would be binary compatible.
> The base classes in commons core for 32-bit and 64-bit sources of randomness, 
> IntProvider and LongProvider, can be updated suitably to only override the 
> default interface methods where they can be more efficiently implemented 
> given the source of randomness. This applies to:
> ||Source||Update||Details||
> |int|nextBytes|Use nextInt() for the source of bytes|
> | |nextBoolean|Use a cached int for the randomness|
> | |nextInt|Directly supply the int rather than using 32-bits from nextLong()|
> | |nextDouble|Optimise the bits used from two ints for the 53-bits required 
> for the double.|
> |long|nextInt; nextBoolean|Use a cached long for the randomness|
> h3. Note 1
> The UniformRandomProvider also has the method:
> {code:java}
> void nextBytes(byte[] bytes,
>int start,
>int len);
> {code}
> This can also have a default implementation using the output from nextLong().
> h3. Note 2
> The methods to generate an exponential and Gaussian are already implemented 
> in the {{commons-rng-sampling}} module.
> java.util.Random has a nextGaussian() method and so this method appears to be 
> for backward compatibility with legacy Java code. The method is implemented 
> using a modified Ziggurat sampler which uses an exponential sampler for the 
> long tail. The API has thus exposed the exponential sampling method that is 
> used internally in the nextGaussian implementation.
> With no backward compatibility requirements the Commons RNG interface can 
> avoid the distribution sampling methods. Users should select an appropriate 
> sampler from the sampling module.
>  



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[GitHub] [commons-parent] dependabot[bot] opened a new pull request, #108: Bump maven-site-plugin from 3.11.0 to 3.12.0

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #108:
URL: https://github.com/apache/commons-parent/pull/108

   Bumps [maven-site-plugin](https://github.com/apache/maven-site-plugin) from 
3.11.0 to 3.12.0.
   
   Commits
   
   https://github.com/apache/maven-site-plugin/commit/8c597d8db03633feb010cacb2a036b1cceb29aee";>8c597d8
 [maven-release-plugin] prepare release maven-site-plugin-3.12.0
   https://github.com/apache/maven-site-plugin/commit/32be6ad8b99916dec6f908484f2d690044bf0b47";>32be6ad
 [MSITE-888] Upgrade to Maven 3.2.5
   https://github.com/apache/maven-site-plugin/commit/bf434e5d0e37ce85392a96587ad2f4ec58c63641";>bf434e5
 [MSITE-891] Upgrade plugins in ITs
   https://github.com/apache/maven-site-plugin/commit/5f10ad146fec988f892a56b82b83e5c41ede3604";>5f10ad1
 [MSITE-890] Upgrade Jetty to 9.4.46.v20220331
   https://github.com/apache/maven-site-plugin/commit/606a327097202f3f90bfd60e66a7c4cb6a53d004";>606a327
 [MSITE-857] Jetty engine fails to resolve web.xml DTD behind corporate 
proxy
   https://github.com/apache/maven-site-plugin/commit/522eddd70e4b822d8a14eba845c94b3f88edef7e";>522eddd
 [MSITE-889] Upgrade Plexus Utils to 3.3.1
   https://github.com/apache/maven-site-plugin/commit/d1bfb429cc41a79fbbeaed3fa725fbcb9cd9285d";>d1bfb42
 [MSITE-887] Deprecate templateFile parameter
   https://github.com/apache/maven-site-plugin/commit/6c42df388a5b8f50fe6e35ec4d74cb5981a13831";>6c42df3
 Add undeclared dependency
   https://github.com/apache/maven-site-plugin/commit/73df7bb9e0f9c2e421e79a8733302d557fa1b0ad";>73df7bb
 Remove unused properties
   https://github.com/apache/maven-site-plugin/commit/7a3ed19c5ff6339615b997d97dcfbae926dfbad1";>7a3ed19
 [MSITE-886] Upgrade Maven Wagon to 3.5.1
   Additional commits viewable in https://github.com/apache/maven-site-plugin/compare/maven-site-plugin-3.11.0...maven-site-plugin-3.12.0";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.maven.plugins:maven-site-plugin&package-manager=maven&previous-version=3.11.0&new-version=3.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-vfs] dependabot[bot] opened a new pull request, #260: Bump checkstyle from 9.3 to 10.2

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #260:
URL: https://github.com/apache/commons-vfs/pull/260

   Bumps [checkstyle](https://github.com/checkstyle/checkstyle) from 9.3 to 
10.2.
   
   Release notes
   Sourced from https://github.com/checkstyle/checkstyle/releases";>checkstyle's 
releases.
   
   checkstyle-10.2
   https://checkstyle.org/releasenotes.html#Release_10.2";>https://checkstyle.org/releasenotes.html#Release_10.2
   checkstyle-10.1
   https://checkstyle.org/releasenotes.html#Release_10.1";>https://checkstyle.org/releasenotes.html#Release_10.1
   checkstyle-10.0
   https://checkstyle.org/releasenotes.html#Release_10.0";>https://checkstyle.org/releasenotes.html#Release_10.0
   
   
   
   Commits
   
   https://github.com/checkstyle/checkstyle/commit/0678fc609ec1889e3534940aa9d094887a4af2f3";>0678fc6
 [maven-release-plugin] prepare release checkstyle-10.2
   https://github.com/checkstyle/checkstyle/commit/acf70b4d7e8e4423579f02bf88d9773ba9574a77";>acf70b4
 doc: release notes for 10.2
   https://github.com/checkstyle/checkstyle/commit/591b41028cecc786ea94556791a8e53a99defb4c";>591b410
 Issue https://github-redirect.dependabot.com/checkstyle/checkstyle/issues/4845";>#4845:
 remove dependency on netbuddy from test inputs
   https://github.com/checkstyle/checkstyle/commit/0fda5157d34980c229090931af2a1a1ce74e87a9";>0fda515
 dependency: bump maven-antrun-plugin from 3.0.0 to 3.1.0
   https://github.com/checkstyle/checkstyle/commit/7f5fcc814f63a590d24b34a3e6289facfbffc264";>7f5fcc8
 supplemental: Modify pitest.sh to support unstable mutations list
   https://github.com/checkstyle/checkstyle/commit/0ab05c948d302dde4f3e4144e97af30a2613900a";>0ab05c9
 Issue https://github-redirect.dependabot.com/checkstyle/checkstyle/issues/11528";>#11528:
 Kill surviving mutation in EqualsAvoidNullCheck
   https://github.com/checkstyle/checkstyle/commit/c2abb6fb4cef7c4d3e565bd05d061841fc86db50";>c2abb6f
 minor: fix link (link-check-plugin)
   https://github.com/checkstyle/checkstyle/commit/4a7e6fa6b7eeb0658d09c64bc9f390f24c3ab10b";>4a7e6fa
 dependency: bump nexus-staging-maven-plugin from 1.6.12 to 1.6.13
   https://github.com/checkstyle/checkstyle/commit/8035e76a5ba81f4841519d0d3ceb9e7a4f913506";>8035e76
 dependency: bump mockito-inline from 4.5.0 to 4.5.1
   https://github.com/checkstyle/checkstyle/commit/d00939d8400537a7eecc56e7ec1fdaf3f0574333";>d00939d
 dependency: bump maven-site-plugin from 3.11.0 to 3.12.0
   Additional commits viewable in https://github.com/checkstyle/checkstyle/compare/checkstyle-9.3...checkstyle-10.2";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.puppycrawl.tools:checkstyle&package-manager=maven&previous-version=9.3&new-version=10.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-parent] dependabot[bot] opened a new pull request, #107: Bump maven-project-info-reports-plugin from 3.2.2 to 3.3.0

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #107:
URL: https://github.com/apache/commons-parent/pull/107

   Bumps 
[maven-project-info-reports-plugin](https://github.com/apache/maven-project-info-reports-plugin)
 from 3.2.2 to 3.3.0.
   
   Commits
   
   https://github.com/apache/maven-project-info-reports-plugin/commit/563a0b261722719f9bf6ead946f3d5e30ef611c8";>563a0b2
 [maven-release-plugin] prepare release 
maven-project-info-reports-plugin-3.3.0
   https://github.com/apache/maven-project-info-reports-plugin/commit/9549763fbbdea2ee504412b06c2df1d14c25cb4a";>9549763
 [MPIR-416] Upgrade maven-dependency-tree to 3.1.0
   https://github.com/apache/maven-project-info-reports-plugin/commit/eab4f24d5cfc44aa91f62bde51e5f8001b36334f";>eab4f24
 [MPIR-417] Upgrade Parent to 36
   https://github.com/apache/maven-project-info-reports-plugin/commit/3538a85109299b942b3feab5a76b93d6d86d2b5c";>3538a85
 Bump project version for next release candidate
   https://github.com/apache/maven-project-info-reports-plugin/commit/634275979993b45426af278b0c1c886b32fa130a";>6342759
 PR template
   https://github.com/apache/maven-project-info-reports-plugin/commit/8d7b024591e8a4dad675b6a97ebbfb5f86fd2668";>8d7b024
 Use shared GitHub actions
   https://github.com/apache/maven-project-info-reports-plugin/commit/f784eef507716c789c2e05a93750c508ce8b9947";>f784eef
 [MPIR-399] Upgrade to Maven 3.2.5
   https://github.com/apache/maven-project-info-reports-plugin/commit/62f490b101f01215e39a86f2810679a77249e024";>62f490b
 [MPIR-415] Wrong old goal name in "Incompatibility Notice" table in 
website
   https://github.com/apache/maven-project-info-reports-plugin/commit/5bb94e115426c59340db739c9fc3302480528c63";>5bb94e1
 [maven-release-plugin] prepare for next development iteration
   See full diff in https://github.com/apache/maven-project-info-reports-plugin/compare/maven-project-info-reports-plugin-3.2.2...maven-project-info-reports-plugin-3.3.0";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.maven.plugins:maven-project-info-reports-plugin&package-manager=maven&previous-version=3.2.2&new-version=3.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Commented] (GEOMETRY-146) PointSet/Map closest points

2022-04-29 Thread Matt Juntunen (Jira)


[ 
https://issues.apache.org/jira/browse/GEOMETRY-146?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17529908#comment-17529908
 ] 

Matt Juntunen commented on GEOMETRY-146:


I'm planning on merging the above PR either today or tomorrow unless there are 
any objections.

> PointSet/Map closest points
> ---
>
> Key: GEOMETRY-146
> URL: https://issues.apache.org/jira/browse/GEOMETRY-146
> Project: Commons Geometry
>  Issue Type: New Feature
>Reporter: Matt Juntunen
>Priority: Major
> Fix For: 1.1
>
>
> Add methods to the new {{PointSet}} and {{PointMap}} interfaces to allow 
> querying of points in order of distance from a query point.
> {code:java}
> PointSet {
> // find the closest point to pt or null if empty 
> P closest(P pt);
> // iterate through points in order, with points closest to pt coming first
> Iterable closestFirst(P pt);
> // find the farthest point from pt or null if emtpy
> P farthest(P pt);
> // iterate through point in order, with points farthest from pt coming 
> first
> Iterable farthestFirst(P pt);
> }
> {code}
> {{PointMap}} should have similar methods providing access to the map keys and 
> entries.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[GitHub] [commons-crypto] dependabot[bot] opened a new pull request, #159: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #159:
URL: https://github.com/apache/commons-crypto/pull/159

   Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 
to 2.
   
   Changelog
   Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md";>github/codeql-action's
 changelog.
   
   2.1.9 - 27 Apr 2022
   
   Add working-directory input to the autobuild 
action. https://github-redirect.dependabot.com/github/codeql-action/pull/1024";>#1024
   The analyze and upload-sarif actions will now 
wait up to 2 minutes for processing to complete after they have uploaded the 
results so they can report any processing errors that occurred. This behavior 
can be disabled by setting the wait-for-processing action input to 
"false". https://github-redirect.dependabot.com/github/codeql-action/pull/1007";>#1007
   Update default CodeQL bundle version to 2.9.0.
   Fix a bug where https://github-redirect.dependabot.com/github/codeql-action/issues/1041";>status
 reporting fails on Windows. https://github-redirect.dependabot.com/github/codeql-action/pull/1042";>#1042
   
   2.1.8 - 08 Apr 2022
   
   Update default CodeQL bundle version to 2.8.5. https://github-redirect.dependabot.com/github/codeql-action/pull/1014";>#1014
   Fix error where the init action would fail due to a GitHub API request 
that was taking too long to complete https://github-redirect.dependabot.com/github/codeql-action/pull/1025";>#1025
   
   2.1.7 - 05 Apr 2022
   
   A bug where additional queries specified in the workflow file would 
sometimes not be respected has been fixed. https://github-redirect.dependabot.com/github/codeql-action/pull/1018";>#1018
   
   2.1.6 - 30 Mar 2022
   
   [v2+ only] The CodeQL Action now runs on Node.js v16. https://github-redirect.dependabot.com/github/codeql-action/pull/1000";>#1000
   Update default CodeQL bundle version to 2.8.4. https://github-redirect.dependabot.com/github/codeql-action/pull/990";>#990
   Fix a bug where an invalid commit_oid was being sent to 
code scanning when a custom checkout path was being used. https://github-redirect.dependabot.com/github/codeql-action/pull/956";>#956
   
   
   
   
   Commits
   
   https://github.com/github/codeql-action/commit/3962f1bd85916dd70cf44f7dd36946a72763eef4";>3962f1b
 Bump glob from 7.1.7 to 8.0.1
   https://github.com/github/codeql-action/commit/9daf1de73ca769b18a8abc0ddfdfff845708cb1c";>9daf1de
 Update references to release branches
   https://github.com/github/codeql-action/commit/bce749b10f3bd8b6b463c7753915deeac5158bba";>bce749b
 Improve consistency of variable references in Bash
   https://github.com/github/codeql-action/commit/fce4a01cd713caf52887d7ef8fd4e262d9e4aaa3";>fce4a01
 Update the major version tag within the release process
   https://github.com/github/codeql-action/commit/bac9320f4fb6ba590f3722eb9b477576e59d42bd";>bac9320
 Update description of "Tag release and merge back" workflow
   https://github.com/github/codeql-action/commit/b3bf557359f79e6aa98c484e8a9ad6a782fe3a8a";>b3bf557
 Merge branch 'main' into henrymercer/handle-merge-conflicts-in-releases
   https://github.com/github/codeql-action/commit/f6312f1322bd54138163c559cc89e298d4b5e543";>f6312f1
 Commit any conflicts during v1 backport to simplify release process
   See full diff in https://github.com/github/codeql-action/compare/v1...v2";>compare 
view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=1&new-version=2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creat

[GitHub] [commons-bsf] dependabot[bot] opened a new pull request, #44: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #44:
URL: https://github.com/apache/commons-bsf/pull/44

   Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 
to 2.
   
   Changelog
   Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md";>github/codeql-action's
 changelog.
   
   2.1.9 - 27 Apr 2022
   
   Add working-directory input to the autobuild 
action. https://github-redirect.dependabot.com/github/codeql-action/pull/1024";>#1024
   The analyze and upload-sarif actions will now 
wait up to 2 minutes for processing to complete after they have uploaded the 
results so they can report any processing errors that occurred. This behavior 
can be disabled by setting the wait-for-processing action input to 
"false". https://github-redirect.dependabot.com/github/codeql-action/pull/1007";>#1007
   Update default CodeQL bundle version to 2.9.0.
   Fix a bug where https://github-redirect.dependabot.com/github/codeql-action/issues/1041";>status
 reporting fails on Windows. https://github-redirect.dependabot.com/github/codeql-action/pull/1042";>#1042
   
   2.1.8 - 08 Apr 2022
   
   Update default CodeQL bundle version to 2.8.5. https://github-redirect.dependabot.com/github/codeql-action/pull/1014";>#1014
   Fix error where the init action would fail due to a GitHub API request 
that was taking too long to complete https://github-redirect.dependabot.com/github/codeql-action/pull/1025";>#1025
   
   2.1.7 - 05 Apr 2022
   
   A bug where additional queries specified in the workflow file would 
sometimes not be respected has been fixed. https://github-redirect.dependabot.com/github/codeql-action/pull/1018";>#1018
   
   2.1.6 - 30 Mar 2022
   
   [v2+ only] The CodeQL Action now runs on Node.js v16. https://github-redirect.dependabot.com/github/codeql-action/pull/1000";>#1000
   Update default CodeQL bundle version to 2.8.4. https://github-redirect.dependabot.com/github/codeql-action/pull/990";>#990
   Fix a bug where an invalid commit_oid was being sent to 
code scanning when a custom checkout path was being used. https://github-redirect.dependabot.com/github/codeql-action/pull/956";>#956
   
   
   
   
   Commits
   
   https://github.com/github/codeql-action/commit/3962f1bd85916dd70cf44f7dd36946a72763eef4";>3962f1b
 Bump glob from 7.1.7 to 8.0.1
   https://github.com/github/codeql-action/commit/9daf1de73ca769b18a8abc0ddfdfff845708cb1c";>9daf1de
 Update references to release branches
   https://github.com/github/codeql-action/commit/bce749b10f3bd8b6b463c7753915deeac5158bba";>bce749b
 Improve consistency of variable references in Bash
   https://github.com/github/codeql-action/commit/fce4a01cd713caf52887d7ef8fd4e262d9e4aaa3";>fce4a01
 Update the major version tag within the release process
   https://github.com/github/codeql-action/commit/bac9320f4fb6ba590f3722eb9b477576e59d42bd";>bac9320
 Update description of "Tag release and merge back" workflow
   https://github.com/github/codeql-action/commit/b3bf557359f79e6aa98c484e8a9ad6a782fe3a8a";>b3bf557
 Merge branch 'main' into henrymercer/handle-merge-conflicts-in-releases
   https://github.com/github/codeql-action/commit/f6312f1322bd54138163c559cc89e298d4b5e543";>f6312f1
 Commit any conflicts during v1 backport to simplify release process
   See full diff in https://github.com/github/codeql-action/compare/v1...v2";>compare 
view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=1&new-version=2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating a

[GitHub] [commons-vfs] dependabot[bot] opened a new pull request, #259: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #259:
URL: https://github.com/apache/commons-vfs/pull/259

   Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 
to 2.
   
   Changelog
   Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md";>github/codeql-action's
 changelog.
   
   2.1.9 - 27 Apr 2022
   
   Add working-directory input to the autobuild 
action. https://github-redirect.dependabot.com/github/codeql-action/pull/1024";>#1024
   The analyze and upload-sarif actions will now 
wait up to 2 minutes for processing to complete after they have uploaded the 
results so they can report any processing errors that occurred. This behavior 
can be disabled by setting the wait-for-processing action input to 
"false". https://github-redirect.dependabot.com/github/codeql-action/pull/1007";>#1007
   Update default CodeQL bundle version to 2.9.0.
   Fix a bug where https://github-redirect.dependabot.com/github/codeql-action/issues/1041";>status
 reporting fails on Windows. https://github-redirect.dependabot.com/github/codeql-action/pull/1042";>#1042
   
   2.1.8 - 08 Apr 2022
   
   Update default CodeQL bundle version to 2.8.5. https://github-redirect.dependabot.com/github/codeql-action/pull/1014";>#1014
   Fix error where the init action would fail due to a GitHub API request 
that was taking too long to complete https://github-redirect.dependabot.com/github/codeql-action/pull/1025";>#1025
   
   2.1.7 - 05 Apr 2022
   
   A bug where additional queries specified in the workflow file would 
sometimes not be respected has been fixed. https://github-redirect.dependabot.com/github/codeql-action/pull/1018";>#1018
   
   2.1.6 - 30 Mar 2022
   
   [v2+ only] The CodeQL Action now runs on Node.js v16. https://github-redirect.dependabot.com/github/codeql-action/pull/1000";>#1000
   Update default CodeQL bundle version to 2.8.4. https://github-redirect.dependabot.com/github/codeql-action/pull/990";>#990
   Fix a bug where an invalid commit_oid was being sent to 
code scanning when a custom checkout path was being used. https://github-redirect.dependabot.com/github/codeql-action/pull/956";>#956
   
   
   
   
   Commits
   
   https://github.com/github/codeql-action/commit/3962f1bd85916dd70cf44f7dd36946a72763eef4";>3962f1b
 Bump glob from 7.1.7 to 8.0.1
   https://github.com/github/codeql-action/commit/9daf1de73ca769b18a8abc0ddfdfff845708cb1c";>9daf1de
 Update references to release branches
   https://github.com/github/codeql-action/commit/bce749b10f3bd8b6b463c7753915deeac5158bba";>bce749b
 Improve consistency of variable references in Bash
   https://github.com/github/codeql-action/commit/fce4a01cd713caf52887d7ef8fd4e262d9e4aaa3";>fce4a01
 Update the major version tag within the release process
   https://github.com/github/codeql-action/commit/bac9320f4fb6ba590f3722eb9b477576e59d42bd";>bac9320
 Update description of "Tag release and merge back" workflow
   https://github.com/github/codeql-action/commit/b3bf557359f79e6aa98c484e8a9ad6a782fe3a8a";>b3bf557
 Merge branch 'main' into henrymercer/handle-merge-conflicts-in-releases
   https://github.com/github/codeql-action/commit/f6312f1322bd54138163c559cc89e298d4b5e543";>f6312f1
 Commit any conflicts during v1 backport to simplify release process
   See full diff in https://github.com/github/codeql-action/compare/v1...v2";>compare 
view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=1&new-version=2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating

[GitHub] [commons-logging] kinow merged pull request #86: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


kinow merged PR #86:
URL: https://github.com/apache/commons-logging/pull/86


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-compress] kinow merged pull request #288: Bump maven-javadoc-plugin from 3.3.2 to 3.4.0

2022-04-29 Thread GitBox


kinow merged PR #288:
URL: https://github.com/apache/commons-compress/pull/288


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-release-plugin] kinow commented on pull request #110: Bump checkstyle from 9.3 to 10.2

2022-04-29 Thread GitBox


kinow commented on PR #110:
URL: 
https://github.com/apache/commons-release-plugin/pull/110#issuecomment-1113154640

   @dependabot rebase


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-release-plugin] kinow merged pull request #109: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


kinow merged PR #109:
URL: https://github.com/apache/commons-release-plugin/pull/109


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-release-plugin] kinow commented on pull request #109: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


kinow commented on PR #109:
URL: 
https://github.com/apache/commons-release-plugin/pull/109#issuecomment-1113148741

   @dependabot rebase


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-release-plugin] kinow merged pull request #111: Bump commons-parent from 52 to 53

2022-04-29 Thread GitBox


kinow merged PR #111:
URL: https://github.com/apache/commons-release-plugin/pull/111


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Created] (RNG-176) Enhance the UniformRandomProvider interface with extra methods and default implementations

2022-04-29 Thread Alex Herbert (Jira)
Alex Herbert created RNG-176:


 Summary: Enhance the UniformRandomProvider interface with extra 
methods and default implementations
 Key: RNG-176
 URL: https://issues.apache.org/jira/browse/RNG-176
 Project: Commons RNG
  Issue Type: New Feature
Affects Versions: 1.4
Reporter: Alex Herbert
Assignee: Alex Herbert


JDK 17 introduced the {{RandomGenerator}} interface with the following methods:
{code:java}
DoubleStream doubles();
DoubleStream doubles(double randomNumberOrigin, double randomNumberBound);
DoubleStream doubles(long streamSize);
DoubleStream doubles(long streamSize, double randomNumberOrigin,
 double randomNumberBound);

IntStream ints();
IntStream ints(int randomNumberOrigin, int randomNumberBound);
IntStream ints(long streamSize);
IntStream ints(long streamSize, int randomNumberOrigin,
   int randomNumberBound);

LongStream longs();
LongStream longs(long randomNumberOrigin, long randomNumberBound);
LongStream longs(long streamSize);
LongStream longs(long streamSize, long randomNumberOrigin,
 long randomNumberBound);

boolean nextBoolean();

void nextBytes(byte[] bytes);

float nextFloat();
float nextFloat(float bound);
float nextFloat(float origin, float bound);

double nextDouble();
double nextDouble(double bound);
double nextDouble(double origin, double bound);

int nextInt();
int nextInt(int bound);
int nextInt(int origin, int bound);

long nextLong();
long nextLong(long bound);
long nextLong(long origin, long bound);

double nextGaussian();
double nextGaussian(double mean, double stddev);

double nextExponential();
{code}
The only method that is *non-default* is {{{}nextLong{}}}. This allows a new 
generator to be simply implemented by providing the source of randomness as 
64-bit longs.

The {{UniformRandomProvider}} interface can be expanded to include these 
generation methods. Using Java 8 default interface methods will not require any 
changes to generators currently implementing the interface.

I propose to:
 # Add the new methods for streams and numbers in a range.
 # Add default implementations of the current API. These can be extracted from 
the  o.a.c.rng.core.BaseProvider implementations.
 # Remove the implementations in o.a.c.rng.core.BaseProvider. This change would 
be binary compatible.

The base classes in commons core for 32-bit and 64-bit sources of randomness, 
IntProvider and LongProvider, can be updated suitably to only override the 
default interface methods where they can be more efficiently implemented given 
the source of randomness. This applies to:
||Source||Update||Details||
|int|nextBytes|Use nextInt() for the source of bytes|
| |nextBoolean|Use a cached int for the randomness|
| |nextInt|Directly supply the int rather than using 32-bits from nextLong()|
| |nextDouble|Optimise the bits used from two ints for the 53-bits required for 
the double.|
|long|nextInt; nextBoolean|Use a cached long for the randomness|
h3. Note 1

The UniformRandomProvider also has the method:
{code:java}
void nextBytes(byte[] bytes,
   int start,
   int len);
{code}
This can also have a default implementation using the output from nextLong().
h3. Note 2

The methods to generate an exponential and Gaussian are already implemented in 
the {{commons-rng-sampling}} module.

java.util.Random has a nextGaussian() method and so this method appears to be 
for backward compatibility with legacy Java code. The method is implemented 
using a modified Ziggurat sampler which uses an exponential sampler for the 
long tail. The API has thus exposed the exponential sampling method that is 
used internally in the nextGaussian implementation.

With no backward compatibility requirements the Commons RNG interface can avoid 
the distribution sampling methods. Users should select an appropriate sampler 
from the sampling module.

 



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[GitHub] [commons-logging] dependabot[bot] opened a new pull request, #86: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #86:
URL: https://github.com/apache/commons-logging/pull/86

   Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 
to 2.
   
   Changelog
   Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md";>github/codeql-action's
 changelog.
   
   2.1.9 - 27 Apr 2022
   
   Add working-directory input to the autobuild 
action. https://github-redirect.dependabot.com/github/codeql-action/pull/1024";>#1024
   The analyze and upload-sarif actions will now 
wait up to 2 minutes for processing to complete after they have uploaded the 
results so they can report any processing errors that occurred. This behavior 
can be disabled by setting the wait-for-processing action input to 
"false". https://github-redirect.dependabot.com/github/codeql-action/pull/1007";>#1007
   Update default CodeQL bundle version to 2.9.0.
   Fix a bug where https://github-redirect.dependabot.com/github/codeql-action/issues/1041";>status
 reporting fails on Windows. https://github-redirect.dependabot.com/github/codeql-action/pull/1042";>#1042
   
   2.1.8 - 08 Apr 2022
   
   Update default CodeQL bundle version to 2.8.5. https://github-redirect.dependabot.com/github/codeql-action/pull/1014";>#1014
   Fix error where the init action would fail due to a GitHub API request 
that was taking too long to complete https://github-redirect.dependabot.com/github/codeql-action/pull/1025";>#1025
   
   2.1.7 - 05 Apr 2022
   
   A bug where additional queries specified in the workflow file would 
sometimes not be respected has been fixed. https://github-redirect.dependabot.com/github/codeql-action/pull/1018";>#1018
   
   2.1.6 - 30 Mar 2022
   
   [v2+ only] The CodeQL Action now runs on Node.js v16. https://github-redirect.dependabot.com/github/codeql-action/pull/1000";>#1000
   Update default CodeQL bundle version to 2.8.4. https://github-redirect.dependabot.com/github/codeql-action/pull/990";>#990
   Fix a bug where an invalid commit_oid was being sent to 
code scanning when a custom checkout path was being used. https://github-redirect.dependabot.com/github/codeql-action/pull/956";>#956
   
   
   
   
   Commits
   
   https://github.com/github/codeql-action/commit/3962f1bd85916dd70cf44f7dd36946a72763eef4";>3962f1b
 Bump glob from 7.1.7 to 8.0.1
   https://github.com/github/codeql-action/commit/9daf1de73ca769b18a8abc0ddfdfff845708cb1c";>9daf1de
 Update references to release branches
   https://github.com/github/codeql-action/commit/bce749b10f3bd8b6b463c7753915deeac5158bba";>bce749b
 Improve consistency of variable references in Bash
   https://github.com/github/codeql-action/commit/fce4a01cd713caf52887d7ef8fd4e262d9e4aaa3";>fce4a01
 Update the major version tag within the release process
   https://github.com/github/codeql-action/commit/bac9320f4fb6ba590f3722eb9b477576e59d42bd";>bac9320
 Update description of "Tag release and merge back" workflow
   https://github.com/github/codeql-action/commit/b3bf557359f79e6aa98c484e8a9ad6a782fe3a8a";>b3bf557
 Merge branch 'main' into henrymercer/handle-merge-conflicts-in-releases
   https://github.com/github/codeql-action/commit/f6312f1322bd54138163c559cc89e298d4b5e543";>f6312f1
 Commit any conflicts during v1 backport to simplify release process
   See full diff in https://github.com/github/codeql-action/compare/v1...v2";>compare 
view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=1&new-version=2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creati

[GitHub] [commons-dbutils] dependabot[bot] opened a new pull request, #117: Bump checkstyle from 9.2.1 to 10.2

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #117:
URL: https://github.com/apache/commons-dbutils/pull/117

   Bumps [checkstyle](https://github.com/checkstyle/checkstyle) from 9.2.1 to 
10.2.
   
   Release notes
   Sourced from https://github.com/checkstyle/checkstyle/releases";>checkstyle's 
releases.
   
   checkstyle-10.2
   https://checkstyle.org/releasenotes.html#Release_10.2";>https://checkstyle.org/releasenotes.html#Release_10.2
   checkstyle-10.1
   https://checkstyle.org/releasenotes.html#Release_10.1";>https://checkstyle.org/releasenotes.html#Release_10.1
   checkstyle-10.0
   https://checkstyle.org/releasenotes.html#Release_10.0";>https://checkstyle.org/releasenotes.html#Release_10.0
   checkstyle-9.3
   https://checkstyle.org/releasenotes.html#Release_9.3";>https://checkstyle.org/releasenotes.html#Release_9.3
   
   
   
   Commits
   
   https://github.com/checkstyle/checkstyle/commit/0678fc609ec1889e3534940aa9d094887a4af2f3";>0678fc6
 [maven-release-plugin] prepare release checkstyle-10.2
   https://github.com/checkstyle/checkstyle/commit/acf70b4d7e8e4423579f02bf88d9773ba9574a77";>acf70b4
 doc: release notes for 10.2
   https://github.com/checkstyle/checkstyle/commit/591b41028cecc786ea94556791a8e53a99defb4c";>591b410
 Issue https://github-redirect.dependabot.com/checkstyle/checkstyle/issues/4845";>#4845:
 remove dependency on netbuddy from test inputs
   https://github.com/checkstyle/checkstyle/commit/0fda5157d34980c229090931af2a1a1ce74e87a9";>0fda515
 dependency: bump maven-antrun-plugin from 3.0.0 to 3.1.0
   https://github.com/checkstyle/checkstyle/commit/7f5fcc814f63a590d24b34a3e6289facfbffc264";>7f5fcc8
 supplemental: Modify pitest.sh to support unstable mutations list
   https://github.com/checkstyle/checkstyle/commit/0ab05c948d302dde4f3e4144e97af30a2613900a";>0ab05c9
 Issue https://github-redirect.dependabot.com/checkstyle/checkstyle/issues/11528";>#11528:
 Kill surviving mutation in EqualsAvoidNullCheck
   https://github.com/checkstyle/checkstyle/commit/c2abb6fb4cef7c4d3e565bd05d061841fc86db50";>c2abb6f
 minor: fix link (link-check-plugin)
   https://github.com/checkstyle/checkstyle/commit/4a7e6fa6b7eeb0658d09c64bc9f390f24c3ab10b";>4a7e6fa
 dependency: bump nexus-staging-maven-plugin from 1.6.12 to 1.6.13
   https://github.com/checkstyle/checkstyle/commit/8035e76a5ba81f4841519d0d3ceb9e7a4f913506";>8035e76
 dependency: bump mockito-inline from 4.5.0 to 4.5.1
   https://github.com/checkstyle/checkstyle/commit/d00939d8400537a7eecc56e7ec1fdaf3f0574333";>d00939d
 dependency: bump maven-site-plugin from 3.11.0 to 3.12.0
   Additional commits viewable in https://github.com/checkstyle/checkstyle/compare/checkstyle-9.2.1...checkstyle-10.2";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.puppycrawl.tools:checkstyle&package-manager=maven&previous-version=9.2.1&new-version=10.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-dbutils] dependabot[bot] opened a new pull request, #116: Bump mockito-core from 4.4.0 to 4.5.1

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #116:
URL: https://github.com/apache/commons-dbutils/pull/116

   Bumps [mockito-core](https://github.com/mockito/mockito) from 4.4.0 to 4.5.1.
   
   Release notes
   Sourced from https://github.com/mockito/mockito/releases";>mockito-core's 
releases.
   
   v4.5.1
   Changelog generated 
by https://github.com/shipkit/shipkit-changelog";>Shipkit Changelog 
Gradle Plugin
   4.5.1
   
   2022-04-21 - https://github.com/mockito/mockito/compare/v4.5.0...v4.5.1";>2 
commit(s) by Jeremy Landis, dependabot[bot]
   Fixes https://github-redirect.dependabot.com/mockito/mockito/issues/2623";>#2623:
 Use zulu distribution and java 11 for release GHA job [(https://github-redirect.dependabot.com/mockito/mockito/issues/2624";>#2624)](https://github-redirect.dependabot.com/mockito/mockito/pull/2624";>mockito/mockito#2624)
   Missing errorprone module for 4.5.0 in central as release was done with 
jdk 8 [(https://github-redirect.dependabot.com/mockito/mockito/issues/2623";>#2623)](https://github-redirect.dependabot.com/mockito/mockito/issues/2623";>mockito/mockito#2623)
   Bump kotlinVersion from 1.6.20 to 1.6.21 [(https://github-redirect.dependabot.com/mockito/mockito/issues/2622";>#2622)](https://github-redirect.dependabot.com/mockito/mockito/pull/2622";>mockito/mockito#2622)
   
   Missing net.bytebuddy.utility.GraalImageCode exception
   If you encounter any issues with missing ByteBuddy classes, make sure you 
are using ByteBuddy 1.12 or higher.
   v4.5.0
   Changelog generated 
by https://github.com/shipkit/shipkit-changelog";>Shipkit Changelog 
Gradle Plugin
   4.5.0
   
   2022-04-19 - https://github.com/mockito/mockito/compare/v4.4.0...v4.5.0";>15 
commit(s) by Andrei Silviu Dragnea, Rafael Winterhalter, Rick Ossendrijver, 
dependabot[bot]
   Bump versions.errorprone from 2.13.0 to 2.13.1 [(https://github-redirect.dependabot.com/mockito/mockito/issues/2621";>#2621)](https://github-redirect.dependabot.com/mockito/mockito/pull/2621";>mockito/mockito#2621)
   Bump versions.errorprone from 2.12.1 to 2.13.0 [(https://github-redirect.dependabot.com/mockito/mockito/issues/2619";>#2619)](https://github-redirect.dependabot.com/mockito/mockito/pull/2619";>mockito/mockito#2619)
   Groovy inline [(https://github-redirect.dependabot.com/mockito/mockito/issues/2618";>#2618)](https://github-redirect.dependabot.com/mockito/mockito/pull/2618";>mockito/mockito#2618)
   Bump actions/setup-java from 2 to 3 [(https://github-redirect.dependabot.com/mockito/mockito/issues/2615";>#2615)](https://github-redirect.dependabot.com/mockito/mockito/pull/2615";>mockito/mockito#2615)
   Bump versions.bytebuddy from 1.12.8 to 1.12.9 [(https://github-redirect.dependabot.com/mockito/mockito/issues/2614";>#2614)](https://github-redirect.dependabot.com/mockito/mockito/pull/2614";>mockito/mockito#2614)
   Support subclass mocks on Graal VM. [(https://github-redirect.dependabot.com/mockito/mockito/issues/2613";>#2613)](https://github-redirect.dependabot.com/mockito/mockito/pull/2613";>mockito/mockito#2613)
   Bump com.diffplug.spotless from 6.4.1 to 6.4.2 [(https://github-redirect.dependabot.com/mockito/mockito/issues/2611";>#2611)](https://github-redirect.dependabot.com/mockito/mockito/pull/2611";>mockito/mockito#2611)
   Bump kotlinx-coroutines-core from 1.6.0-native-mt to 1.6.1-native-mt 
[(https://github-redirect.dependabot.com/mockito/mockito/issues/2609";>#2609)](https://github-redirect.dependabot.com/mockito/mockito/pull/2609";>mockito/mockito#2609)
   Bump versions.errorprone from 2.10.0 to 2.12.1 [(https://github-redirect.dependabot.com/mockito/mockito/issues/2608";>#2608)](https://github-redirect.dependabot.com/mockito/mockito/pull/2608";>mockito/mockito#2608)
   Bump kotlinVersion from 1.6.10 to 1.6.20 [(https://github-redirect.dependabot.com/mockito/mockito/issues/2607";>#2607)](https://github-redirect.dependabot.com/mockito/mockito/pull/2607";>mockito/mockito#2607)
   Bump com.diffplug.spotless from 6.4.0 to 6.4.1 [(https://github-redirect.dependabot.com/mockito/mockito/issues/2606";>#2606)](https://github-redirect.dependabot.com/mockito/mockito/pull/2606";>mockito/mockito#2606)
   Bump com.diffplug.spotless from 6.3.0 to 6.4.0 [(https://github-redirect.dependabot.com/mockito/mockito/issues/2605";>#2605)](https://github-redirect.dependabot.com/mockito/mockito/pull/2605";>mockito/mockito#2605)
   Bump org.eclipse.osgi from 3.17.100 to 3.17.200 [(https://github-redirect.dependabot.com/mockito/mockito/issues/2597";>#2597)](https://github-redirect.dependabot.com/mockito/mockito/pull/2597";>mockito/mockito#2597)
   Deprecate ListUtil and Fields classes [(https://github-redirect.dependabot.com/mockito/mockito/issues/2593";>#2593)](https://github-redirect.dependabot.com/mockito/mockito/pull/2593";>mockito/mockito#2593)
   mockito-errorprone seems not compatible with ErrorProne 2.11.0 [(https://github-redirect.dependabot.com/mockito/mockito/issues/2554";>#2554)](https://github-redirect.dependabot.com/mo

[GitHub] [commons-dbutils] dependabot[bot] opened a new pull request, #115: Bump github/codeql-action from 1 to 2

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #115:
URL: https://github.com/apache/commons-dbutils/pull/115

   Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 
to 2.
   
   Changelog
   Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md";>github/codeql-action's
 changelog.
   
   2.1.9 - 27 Apr 2022
   
   Add working-directory input to the autobuild 
action. https://github-redirect.dependabot.com/github/codeql-action/pull/1024";>#1024
   The analyze and upload-sarif actions will now 
wait up to 2 minutes for processing to complete after they have uploaded the 
results so they can report any processing errors that occurred. This behavior 
can be disabled by setting the wait-for-processing action input to 
"false". https://github-redirect.dependabot.com/github/codeql-action/pull/1007";>#1007
   Update default CodeQL bundle version to 2.9.0.
   Fix a bug where https://github-redirect.dependabot.com/github/codeql-action/issues/1041";>status
 reporting fails on Windows. https://github-redirect.dependabot.com/github/codeql-action/pull/1042";>#1042
   
   2.1.8 - 08 Apr 2022
   
   Update default CodeQL bundle version to 2.8.5. https://github-redirect.dependabot.com/github/codeql-action/pull/1014";>#1014
   Fix error where the init action would fail due to a GitHub API request 
that was taking too long to complete https://github-redirect.dependabot.com/github/codeql-action/pull/1025";>#1025
   
   2.1.7 - 05 Apr 2022
   
   A bug where additional queries specified in the workflow file would 
sometimes not be respected has been fixed. https://github-redirect.dependabot.com/github/codeql-action/pull/1018";>#1018
   
   2.1.6 - 30 Mar 2022
   
   [v2+ only] The CodeQL Action now runs on Node.js v16. https://github-redirect.dependabot.com/github/codeql-action/pull/1000";>#1000
   Update default CodeQL bundle version to 2.8.4. https://github-redirect.dependabot.com/github/codeql-action/pull/990";>#990
   Fix a bug where an invalid commit_oid was being sent to 
code scanning when a custom checkout path was being used. https://github-redirect.dependabot.com/github/codeql-action/pull/956";>#956
   
   
   
   
   Commits
   
   https://github.com/github/codeql-action/commit/3962f1bd85916dd70cf44f7dd36946a72763eef4";>3962f1b
 Bump glob from 7.1.7 to 8.0.1
   https://github.com/github/codeql-action/commit/9daf1de73ca769b18a8abc0ddfdfff845708cb1c";>9daf1de
 Update references to release branches
   https://github.com/github/codeql-action/commit/bce749b10f3bd8b6b463c7753915deeac5158bba";>bce749b
 Improve consistency of variable references in Bash
   https://github.com/github/codeql-action/commit/fce4a01cd713caf52887d7ef8fd4e262d9e4aaa3";>fce4a01
 Update the major version tag within the release process
   https://github.com/github/codeql-action/commit/bac9320f4fb6ba590f3722eb9b477576e59d42bd";>bac9320
 Update description of "Tag release and merge back" workflow
   https://github.com/github/codeql-action/commit/b3bf557359f79e6aa98c484e8a9ad6a782fe3a8a";>b3bf557
 Merge branch 'main' into henrymercer/handle-merge-conflicts-in-releases
   https://github.com/github/codeql-action/commit/f6312f1322bd54138163c559cc89e298d4b5e543";>f6312f1
 Commit any conflicts during v1 backport to simplify release process
   See full diff in https://github.com/github/codeql-action/compare/v1...v2";>compare 
view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=1&new-version=2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot crea

[GitHub] [commons-release-plugin] dependabot[bot] opened a new pull request, #111: Bump commons-parent from 52 to 53

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #111:
URL: https://github.com/apache/commons-release-plugin/pull/111

   Bumps commons-parent from 52 to 53.
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.commons:commons-parent&package-manager=maven&previous-version=52&new-version=53)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-release-plugin] dependabot[bot] closed pull request #107: Bump checkstyle from 9.3 to 10.1

2022-04-29 Thread GitBox


dependabot[bot] closed pull request #107: Bump checkstyle from 9.3 to 10.1
URL: https://github.com/apache/commons-release-plugin/pull/107


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-release-plugin] dependabot[bot] commented on pull request #107: Bump checkstyle from 9.3 to 10.1

2022-04-29 Thread GitBox


dependabot[bot] commented on PR #107:
URL: 
https://github.com/apache/commons-release-plugin/pull/107#issuecomment-1113014575

   Superseded by #110.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [commons-release-plugin] dependabot[bot] opened a new pull request, #110: Bump checkstyle from 9.3 to 10.2

2022-04-29 Thread GitBox


dependabot[bot] opened a new pull request, #110:
URL: https://github.com/apache/commons-release-plugin/pull/110

   Bumps [checkstyle](https://github.com/checkstyle/checkstyle) from 9.3 to 
10.2.
   
   Release notes
   Sourced from https://github.com/checkstyle/checkstyle/releases";>checkstyle's 
releases.
   
   checkstyle-10.2
   https://checkstyle.org/releasenotes.html#Release_10.2";>https://checkstyle.org/releasenotes.html#Release_10.2
   checkstyle-10.1
   https://checkstyle.org/releasenotes.html#Release_10.1";>https://checkstyle.org/releasenotes.html#Release_10.1
   checkstyle-10.0
   https://checkstyle.org/releasenotes.html#Release_10.0";>https://checkstyle.org/releasenotes.html#Release_10.0
   
   
   
   Commits
   
   https://github.com/checkstyle/checkstyle/commit/0678fc609ec1889e3534940aa9d094887a4af2f3";>0678fc6
 [maven-release-plugin] prepare release checkstyle-10.2
   https://github.com/checkstyle/checkstyle/commit/acf70b4d7e8e4423579f02bf88d9773ba9574a77";>acf70b4
 doc: release notes for 10.2
   https://github.com/checkstyle/checkstyle/commit/591b41028cecc786ea94556791a8e53a99defb4c";>591b410
 Issue https://github-redirect.dependabot.com/checkstyle/checkstyle/issues/4845";>#4845:
 remove dependency on netbuddy from test inputs
   https://github.com/checkstyle/checkstyle/commit/0fda5157d34980c229090931af2a1a1ce74e87a9";>0fda515
 dependency: bump maven-antrun-plugin from 3.0.0 to 3.1.0
   https://github.com/checkstyle/checkstyle/commit/7f5fcc814f63a590d24b34a3e6289facfbffc264";>7f5fcc8
 supplemental: Modify pitest.sh to support unstable mutations list
   https://github.com/checkstyle/checkstyle/commit/0ab05c948d302dde4f3e4144e97af30a2613900a";>0ab05c9
 Issue https://github-redirect.dependabot.com/checkstyle/checkstyle/issues/11528";>#11528:
 Kill surviving mutation in EqualsAvoidNullCheck
   https://github.com/checkstyle/checkstyle/commit/c2abb6fb4cef7c4d3e565bd05d061841fc86db50";>c2abb6f
 minor: fix link (link-check-plugin)
   https://github.com/checkstyle/checkstyle/commit/4a7e6fa6b7eeb0658d09c64bc9f390f24c3ab10b";>4a7e6fa
 dependency: bump nexus-staging-maven-plugin from 1.6.12 to 1.6.13
   https://github.com/checkstyle/checkstyle/commit/8035e76a5ba81f4841519d0d3ceb9e7a4f913506";>8035e76
 dependency: bump mockito-inline from 4.5.0 to 4.5.1
   https://github.com/checkstyle/checkstyle/commit/d00939d8400537a7eecc56e7ec1fdaf3f0574333";>d00939d
 dependency: bump maven-site-plugin from 3.11.0 to 3.12.0
   Additional commits viewable in https://github.com/checkstyle/checkstyle/compare/checkstyle-9.3...checkstyle-10.2";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.puppycrawl.tools:checkstyle&package-manager=maven&previous-version=9.3&new-version=10.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



  1   2   >