Re: [PR] Bump org.cyclonedx:cyclonedx-maven-plugin from 2.8.1 to 2.8.2 [directory-ldap-api]
dependabot[bot] closed pull request #142: Bump org.cyclonedx:cyclonedx-maven-plugin from 2.8.1 to 2.8.2 URL: https://github.com/apache/directory-ldap-api/pull/142 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[PR] Bump org.cyclonedx:cyclonedx-maven-plugin from 2.8.1 to 2.9.0 [directory-ldap-api]
dependabot[bot] opened a new pull request, #145: URL: https://github.com/apache/directory-ldap-api/pull/145 Bumps [org.cyclonedx:cyclonedx-maven-plugin](https://github.com/CycloneDX/cyclonedx-maven-plugin) from 2.8.1 to 2.9.0. Release notes Sourced from https://github.com/CycloneDX/cyclonedx-maven-plugin/releases";>org.cyclonedx:cyclonedx-maven-plugin's releases. 2.9.0 :tada: Major features and improvements Support 1.6 spec (https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/556";>#556) https://github.com/thesurlydev";>@thesurlydev 🔧 Build run mvn verify in CI instead of package (https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/560";>#560) https://github.com/hboutemy";>@hboutemy Avoid resources filtering warning (https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/543";>#543) https://github.com/Bananeweizen";>@Bananeweizen fix site issues created by upgrades https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/issues/553";>#553 and https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/issues/552";>#552 (https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/559";>#559) https://github.com/hboutemy";>@hboutemy Bump org.apache.maven.plugins:maven-site-plugin from 3.12.1 to 3.20.0 (https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/553";>#553) https://github.com/dependabot";>@dependabot Bump actions/checkout from 4.1.7 to 4.2.0 (https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/555";>#555) https://github.com/dependabot";>@dependabot Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.8.0 to 3.10.1 (https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/558";>#558) https://github.com/dependabot";>@dependabot 2.8.2 🐛 Bug Fixes display configured classifier from https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/issues/506";>#506 (https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/550";>#550) https://github.com/hboutemy";>@hboutemy 📦 Dependency updates Bump plugin-tools.version from 3.13.1 to 3.15.0 (https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/551";>#551) https://github.com/dependabot";>@dependabot Bump org.apache.maven.plugins:maven-project-info-reports-plugin from 3.6.1 to 3.7.0 (https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/552";>#552) https://github.com/dependabot";>@dependabot Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.17.0 (https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/546";>#546) https://github.com/dependabot";>@dependabot Bump commons-codec:commons-codec from 1.17.0 to 1.17.1 (https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/537";>#537) https://github.com/dependabot";>@dependabot Commits https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/4a217a993923c7f19453d7e531c0f5002c04d07d";>4a217a9 [maven-release-plugin] prepare release cyclonedx-maven-plugin-2.9.0 https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/2ffab8df291dfd4db3002d707824ddf612ea38ac";>2ffab8d run mvn verify in CI instead of package https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/072dcd7b53b8d6a67c1b73639b97f1e5739e9aef";>072dcd7 Avoid resources filtering warning https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/be23759e53fd9263085e7cd8578d6c0c263874cd";>be23759 fix site issues created by upgrades https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/issues/553";>#553 and https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/issues/552";>#552 https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/999d5fb882c7675d707548eed0f30ef4028397c8";>999d5fb Bump org.apache.maven.plugins:maven-site-plugin from 3.12.1 to 3.20.0 https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/69d3cfddd4278444be23c120d7f558748bf2f93e";>69d3cfd Bump actions/checkout from 4.1.7 to 4.2.0 https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/73a108d654d0c7dbfbc6c97581eaa89e13fd6c1f";>73a108d Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.8.0 to 3.10.1 https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/a86023a0cdd10686e8caff13586fa6eb4e3bc5b5";>a86023a Merge pull request https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/issues/556";>#556 from thesurlydev/support-1.6-spec https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/567818d3050e84972b3bde2fa66d92c1d8692f20";>567818d Add support for 1.6 specification https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/dce6ee28ab7e1e1fbcbacf0fd987b71a6c5bd7ef";>dce6ee2 [maven-release-plugin] prepare for next development iteration Additional commits viewable in https://github.com/CycloneDX/cyclonedx-maven-plugin/compare/cyclonedx-maven-plugin-2.8.1...cyclonedx-maven-plugin-2.9.0";>compare view
Re: [PR] Bump org.cyclonedx:cyclonedx-maven-plugin from 2.8.1 to 2.8.2 [directory-ldap-api]
dependabot[bot] commented on PR #142: URL: https://github.com/apache/directory-ldap-api/pull/142#issuecomment-2401182994 Superseded by #145. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[PR] Bump org.junit.platform:junit-platform-runner from 1.11.0 to 1.11.1 [directory-ldap-api]
dependabot[bot] opened a new pull request, #138: URL: https://github.com/apache/directory-ldap-api/pull/138 Bumps [org.junit.platform:junit-platform-runner](https://github.com/junit-team/junit5) from 1.11.0 to 1.11.1. Commits See full diff in https://github.com/junit-team/junit5/commits";>compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[PR] Bump junit.engine.version from 5.11.0 to 5.11.1 [directory-ldap-api]
dependabot[bot] opened a new pull request, #137: URL: https://github.com/apache/directory-ldap-api/pull/137 Bumps `junit.engine.version` from 5.11.0 to 5.11.1. Updates `org.junit.jupiter:junit-jupiter-engine` from 5.11.0 to 5.11.1 Release notes Sourced from https://github.com/junit-team/junit5/releases";>org.junit.jupiter:junit-jupiter-engine's releases. JUnit 5.11.1 = Platform 1.11.1 + Jupiter 5.11.1 + Vintage 5.11.1 See http://junit.org/junit5/docs/5.11.1/release-notes/";>Release Notes. Full Changelog: https://github.com/junit-team/junit5/compare/r5.11.0...r5.11.1";>https://github.com/junit-team/junit5/compare/r5.11.0...r5.11.1 Commits https://github.com/junit-team/junit5/commit/e4b2c0c1384dd980abbd61c11322c419cf7cd1eb";>e4b2c0c Release 5.11.1 https://github.com/junit-team/junit5/commit/c37b179f74e06ddaa7a86d82ff4ea2a8d04a0ea9";>c37b179 Finalize 5.11.1 release notes https://github.com/junit-team/junit5/commit/a7b1c49702ddf8113a7e74da2cfe6ca9e3e35521";>a7b1c49 Include 5.10.4 release notes https://github.com/junit-team/junit5/commit/3646b7d37e3401d9cda0106290bbf9cb36a735b2";>3646b7d Document benefits of messageSupplier in Assertions (https://redirect.github.com/junit-team/junit5/issues/3938";>#3938) https://github.com/junit-team/junit5/commit/6b9f15d9d53ceef1db1a0fa1fd3e7f38f757e88e";>6b9f15d Delete unnecessary (and potentially misleading) comment in User Guide https://github.com/junit-team/junit5/commit/98dafd3746dcf141ac8b5906f26e69e9a140ff5d";>98dafd3 Reduce flakiness https://github.com/junit-team/junit5/commit/6529d8d4b14e0ab2b9134a9d9b0d9260ba2f6410";>6529d8d Allow for work stealing when only holding read locks (https://redirect.github.com/junit-team/junit5/issues/4012";>#4012) https://github.com/junit-team/junit5/commit/0d25a5a0ddab609df3d7382264b050dc61f54d2f";>0d25a5a Fix YAML syntax https://github.com/junit-team/junit5/commit/28dd375d31995365ed36c40270be619b4d64be99";>28dd375 Fix step label https://github.com/junit-team/junit5/commit/348ef61d6b2f945cb0bf315b97eef80a41686a88";>348ef61 Switch to Temurin for JDK 23 (https://redirect.github.com/junit-team/junit5/issues/4005";>#4005) Additional commits viewable in https://github.com/junit-team/junit5/compare/r5.11.0...r5.11.1";>compare view Updates `org.junit.jupiter:junit-jupiter-params` from 5.11.0 to 5.11.1 Release notes Sourced from https://github.com/junit-team/junit5/releases";>org.junit.jupiter:junit-jupiter-params's releases. JUnit 5.11.1 = Platform 1.11.1 + Jupiter 5.11.1 + Vintage 5.11.1 See http://junit.org/junit5/docs/5.11.1/release-notes/";>Release Notes. Full Changelog: https://github.com/junit-team/junit5/compare/r5.11.0...r5.11.1";>https://github.com/junit-team/junit5/compare/r5.11.0...r5.11.1 Commits https://github.com/junit-team/junit5/commit/e4b2c0c1384dd980abbd61c11322c419cf7cd1eb";>e4b2c0c Release 5.11.1 https://github.com/junit-team/junit5/commit/c37b179f74e06ddaa7a86d82ff4ea2a8d04a0ea9";>c37b179 Finalize 5.11.1 release notes https://github.com/junit-team/junit5/commit/a7b1c49702ddf8113a7e74da2cfe6ca9e3e35521";>a7b1c49 Include 5.10.4 release notes https://github.com/junit-team/junit5/commit/3646b7d37e3401d9cda0106290bbf9cb36a735b2";>3646b7d Document benefits of messageSupplier in Assertions (https://redirect.github.com/junit-team/junit5/issues/3938";>#3938) https://github.com/junit-team/junit5/commit/6b9f15d9d53ceef1db1a0fa1fd3e7f38f757e88e";>6b9f15d Delete unnecessary (and potentially misleading) comment in User Guide https://github.com/junit-team/junit5/commit/98dafd3746dcf141ac8b5906f26e69e9a140ff5d";>98dafd3 Reduce flakiness https://github.com/junit-team/junit5/commit/6529d8d4b14e0ab2b9134a9d9b0d9260ba2f6410";>6529d8d Allow for work stealing when only holding read locks (https://redirect.github.com/junit-team/junit5/issues/4012";>#4012) https://github.com/junit-team/junit5/commit/0d25a5a0ddab609df3d7382264b050dc61f54d2f";>0d25a5a Fix YAML syntax https://github.com/junit-team/junit5/commit/28dd375d31995365ed36c40270be619b4d64be99";>28dd375 Fix step label https://github.com/junit-team/junit5/commit/348ef61d6b2f945cb0bf315b97eef80a41686a88";>348ef61 Switch to Temurin for JDK 23 (https://redirect.github.com/junit-team/junit5/issues/4005";>#4005) Additional commits viewable in https://github.com/junit-team/junit5/compare/r5.11.0...r5.11.1";>compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreat
[PR] Bump github/codeql-action from 3.26.7 to 3.26.8 [directory-server]
dependabot[bot] opened a new pull request, #232: URL: https://github.com/apache/directory-server/pull/232 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.7 to 3.26.8. Changelog Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md";>github/codeql-action's changelog. CodeQL Action Changelog See the https://github.com/github/codeql-action/releases";>releases page for the relevant changes to the CodeQL CLI and language packs. Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers. [UNRELEASED] No user facing changes. 3.26.8 - 19 Sep 2024 Update default CodeQL bundle version to 2.19.0. https://redirect.github.com/github/codeql-action/pull/2483";>#2483 3.26.7 - 13 Sep 2024 Update default CodeQL bundle version to 2.18.4. https://redirect.github.com/github/codeql-action/pull/2471";>#2471 3.26.6 - 29 Aug 2024 Update default CodeQL bundle version to 2.18.3. https://redirect.github.com/github/codeql-action/pull/2449";>#2449 3.26.5 - 23 Aug 2024 Fix an issue where the csrutil system call used for telemetry would fail on MacOS ARM machines with System Integrity Protection disabled. https://redirect.github.com/github/codeql-action/pull/2441";>#2441 3.26.4 - 21 Aug 2024 Deprecation: The add-snippets input on the analyze Action is deprecated and will be removed in the first release in August 2025. https://redirect.github.com/github/codeql-action/pull/2436";>#2436 Fix an issue where the disk usage system call used for telemetry would fail on MacOS ARM machines with System Integrity Protection disabled, and then surface a warning. The system call is now disabled for these machines. https://redirect.github.com/github/codeql-action/pull/2434";>#2434 3.26.3 - 19 Aug 2024 Fix an issue where the CodeQL Action could not write diagnostic messages on Windows. This issue did not impact analysis quality. https://redirect.github.com/github/codeql-action/pull/2430";>#2430 3.26.2 - 14 Aug 2024 Update default CodeQL bundle version to 2.18.2. https://redirect.github.com/github/codeql-action/pull/2417";>#2417 3.26.1 - 13 Aug 2024 No user facing changes. 3.26.0 - 06 Aug 2024 Deprecation: Swift analysis on Ubuntu runner images is no longer supported. Please migrate to a macOS runner if this affects you. https://redirect.github.com/github/codeql-action/pull/2403";>#2403 Bump the minimum CodeQL bundle version to 2.13.5. https://redirect.github.com/github/codeql-action/pull/2408";>#2408 3.25.15 - 26 Jul 2024 ... (truncated) Commits https://github.com/github/codeql-action/commit/294a9d92911152fe08befb9ec03e240add280cb3";>294a9d9 Merge pull request https://redirect.github.com/github/codeql-action/issues/2490";>#2490 from github/update-v3.26.8-64431c66d https://github.com/github/codeql-action/commit/00b3604ce7da856a7d36784715970f8d24a0904b";>00b3604 Update changelog for v3.26.8 https://github.com/github/codeql-action/commit/64431c66d0e98a26d34f9485e5f8e317e14956fc";>64431c6 Merge pull request https://redirect.github.com/github/codeql-action/issues/2483";>#2483 from github/update-bundle/codeql-bundle-v2.19.0 https://github.com/github/codeql-action/commit/e0e2d7557dd5c205c43dbdc03c2870c5f7a871a7";>e0e2d75 Merge branch 'main' into update-bundle/codeql-bundle-v2.19.0 https://github.com/github/codeql-action/commit/cb28816228ffd4c85f55e62cf398ab8802ffbce8";>cb28816 Merge pull request https://redirect.github.com/github/codeql-action/issues/2487";>#2487 from rvermeulen/rvermeulen/uri-errors-as-warnings https://github.com/github/codeql-action/commit/498c508900c1cdbb9de7aa7be9c6dd8a3b27fd1f";>498c508 Rebuild JavaScript files https://github.com/github/codeql-action/commit/a1a585f2ab7dd04c9287080a82625f7d8c1fb05c";>a1a585f Merge branch 'main' into rvermeulen/uri-errors-as-warnings https://github.com/github/codeql-action/commit/34666c10b6a7be9d71b1a0ce70d3c0d2a1726d6e";>34666c1 Merge pull request https://redirect.github.com/github/codeql-action/issues/2488";>#2488 from github/henrymercer/debug-artifacts-better-logging https://github.com/github/codeql-action/commit/6e24973d7adf77c81ba32565e7a32243c5f1864f";>6e24973 Improve logging for combined SARIF debug artifact https://github.com/github/codeql-action/commit/d0a3cf2152cf8cb5726f920a7a258a326526702f";>d0a3cf2 Improve logging for debug artifacts Additional commits viewable in https://github.com/github/codeql-action/compare/8214744c546c1e5c8f
[PR] Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 [directory-scimple]
dependabot[bot] opened a new pull request, #681: URL: https://github.com/apache/directory-scimple/pull/681 Bumps [org.codehaus.mojo:extra-enforcer-rules](https://github.com/mojohaus/extra-enforcer-rules) from 1.8.0 to 1.9.0. Release notes Sourced from https://github.com/mojohaus/extra-enforcer-rules/releases";>org.codehaus.mojo:extra-enforcer-rules's releases. 1.9.0 🚀 New features and improvements Recognize JDK 24 (https://redirect.github.com/mojohaus/extra-enforcer-rules/pull/308";>#308) https://github.com/wendigo";>@wendigo Make parent level configurable for reference value in requirePropertyDiverges (https://redirect.github.com/mojohaus/extra-enforcer-rules/pull/295";>#295) https://github.com/piercemar";>@piercemar 📦 Dependency updates Bump org.codehaus.mojo:mojo-parent from 85 to 86 (https://redirect.github.com/mojohaus/extra-enforcer-rules/pull/307";>#307) https://github.com/dependabot";>@dependabot Bump org.codehaus.mojo:mojo-parent from 84 to 85 (https://redirect.github.com/mojohaus/extra-enforcer-rules/pull/306";>#306) https://github.com/dependabot";>@dependabot Bump commons-codec:commons-codec from 1.17.0 to 1.17.1 (https://redirect.github.com/mojohaus/extra-enforcer-rules/pull/304";>#304) https://github.com/dependabot";>@dependabot Bump org.codehaus.mojo:mojo-parent from 82 to 84 (https://redirect.github.com/mojohaus/extra-enforcer-rules/pull/301";>#301) https://github.com/dependabot";>@dependabot Bump org.apache.maven.shared:maven-common-artifact-filters from 3.3.2 to 3.4.0 (https://redirect.github.com/mojohaus/extra-enforcer-rules/pull/300";>#300) https://github.com/dependabot";>@dependabot Bump org.apache.maven.enforcer:enforcer-api from 3.4.1 to 3.5.0 (https://redirect.github.com/mojohaus/extra-enforcer-rules/pull/299";>#299) https://github.com/dependabot";>@dependabot Bump org.codehaus.mojo:mojo-parent from 80 to 82 (https://redirect.github.com/mojohaus/extra-enforcer-rules/pull/298";>#298) https://github.com/dependabot";>@dependabot Bump commons-codec:commons-codec from 1.16.1 to 1.17.0 (https://redirect.github.com/mojohaus/extra-enforcer-rules/pull/296";>#296) https://github.com/dependabot";>@dependabot 👻 Maintenance Remove outdated FAQ site (https://redirect.github.com/mojohaus/extra-enforcer-rules/pull/309";>#309) https://github.com/slawekjaranowski";>@slawekjaranowski Fix typo in site. (https://redirect.github.com/mojohaus/extra-enforcer-rules/pull/294";>#294) https://github.com/divyekapoor";>@divyekapoor Commits https://github.com/mojohaus/extra-enforcer-rules/commit/be237e4a142a15e8d6667ee99b3a38e32301fe91";>be237e4 [maven-release-plugin] prepare release 1.9.0 https://github.com/mojohaus/extra-enforcer-rules/commit/5b9d941db9896c91e9454b9fa799473f5e2a2989";>5b9d941 Bump org.codehaus.mojo:mojo-parent from 85 to 86 (https://redirect.github.com/mojohaus/extra-enforcer-rules/issues/307";>#307) https://github.com/mojohaus/extra-enforcer-rules/commit/3f2f6836d99e1f31d163414c18b31132ebd67778";>3f2f683 Remove outdated FAQ site https://github.com/mojohaus/extra-enforcer-rules/commit/a5b2a003e0c3f3a95a2ee438f80ce3a6fa613afc";>a5b2a00 Recognize JDK 24 https://github.com/mojohaus/extra-enforcer-rules/commit/206cee384227b2938f72c94a2445185f0782e27d";>206cee3 Bump org.codehaus.mojo:mojo-parent from 84 to 85 https://github.com/mojohaus/extra-enforcer-rules/commit/d706b499525a45d526b2d27a8a4293034a7f915f";>d706b49 Bump commons-codec:commons-codec from 1.17.0 to 1.17.1 https://github.com/mojohaus/extra-enforcer-rules/commit/89f3a9a9f873f70c477ce26089d5ba665846bc2b";>89f3a9a Bump org.codehaus.mojo:mojo-parent from 82 to 84 https://github.com/mojohaus/extra-enforcer-rules/commit/789af2c30ba2bba6d3068740f7fb28f77940cfc9";>789af2c Bump org.apache.maven.shared:maven-common-artifact-filters https://github.com/mojohaus/extra-enforcer-rules/commit/226130f2b7e1f93291f59338b46a8e6196258736";>226130f Bump org.apache.maven.enforcer:enforcer-api from 3.4.1 to 3.5.0 https://github.com/mojohaus/extra-enforcer-rules/commit/fba70bd064b343cbc9b86414c983a69f2344ccbb";>fba70bd Bump org.codehaus.mojo:mojo-parent from 80 to 82 Additional commits viewable in https://github.com/mojohaus/extra-enforcer-rules/compare/1.8.0...1.9.0";>compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (d
[PR] Bump github/codeql-action from 3.26.7 to 3.26.8 [directory-kerby]
dependabot[bot] opened a new pull request, #442: URL: https://github.com/apache/directory-kerby/pull/442 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.7 to 3.26.8. Changelog Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md";>github/codeql-action's changelog. CodeQL Action Changelog See the https://github.com/github/codeql-action/releases";>releases page for the relevant changes to the CodeQL CLI and language packs. Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers. [UNRELEASED] No user facing changes. 3.26.8 - 19 Sep 2024 Update default CodeQL bundle version to 2.19.0. https://redirect.github.com/github/codeql-action/pull/2483";>#2483 3.26.7 - 13 Sep 2024 Update default CodeQL bundle version to 2.18.4. https://redirect.github.com/github/codeql-action/pull/2471";>#2471 3.26.6 - 29 Aug 2024 Update default CodeQL bundle version to 2.18.3. https://redirect.github.com/github/codeql-action/pull/2449";>#2449 3.26.5 - 23 Aug 2024 Fix an issue where the csrutil system call used for telemetry would fail on MacOS ARM machines with System Integrity Protection disabled. https://redirect.github.com/github/codeql-action/pull/2441";>#2441 3.26.4 - 21 Aug 2024 Deprecation: The add-snippets input on the analyze Action is deprecated and will be removed in the first release in August 2025. https://redirect.github.com/github/codeql-action/pull/2436";>#2436 Fix an issue where the disk usage system call used for telemetry would fail on MacOS ARM machines with System Integrity Protection disabled, and then surface a warning. The system call is now disabled for these machines. https://redirect.github.com/github/codeql-action/pull/2434";>#2434 3.26.3 - 19 Aug 2024 Fix an issue where the CodeQL Action could not write diagnostic messages on Windows. This issue did not impact analysis quality. https://redirect.github.com/github/codeql-action/pull/2430";>#2430 3.26.2 - 14 Aug 2024 Update default CodeQL bundle version to 2.18.2. https://redirect.github.com/github/codeql-action/pull/2417";>#2417 3.26.1 - 13 Aug 2024 No user facing changes. 3.26.0 - 06 Aug 2024 Deprecation: Swift analysis on Ubuntu runner images is no longer supported. Please migrate to a macOS runner if this affects you. https://redirect.github.com/github/codeql-action/pull/2403";>#2403 Bump the minimum CodeQL bundle version to 2.13.5. https://redirect.github.com/github/codeql-action/pull/2408";>#2408 3.25.15 - 26 Jul 2024 ... (truncated) Commits https://github.com/github/codeql-action/commit/294a9d92911152fe08befb9ec03e240add280cb3";>294a9d9 Merge pull request https://redirect.github.com/github/codeql-action/issues/2490";>#2490 from github/update-v3.26.8-64431c66d https://github.com/github/codeql-action/commit/00b3604ce7da856a7d36784715970f8d24a0904b";>00b3604 Update changelog for v3.26.8 https://github.com/github/codeql-action/commit/64431c66d0e98a26d34f9485e5f8e317e14956fc";>64431c6 Merge pull request https://redirect.github.com/github/codeql-action/issues/2483";>#2483 from github/update-bundle/codeql-bundle-v2.19.0 https://github.com/github/codeql-action/commit/e0e2d7557dd5c205c43dbdc03c2870c5f7a871a7";>e0e2d75 Merge branch 'main' into update-bundle/codeql-bundle-v2.19.0 https://github.com/github/codeql-action/commit/cb28816228ffd4c85f55e62cf398ab8802ffbce8";>cb28816 Merge pull request https://redirect.github.com/github/codeql-action/issues/2487";>#2487 from rvermeulen/rvermeulen/uri-errors-as-warnings https://github.com/github/codeql-action/commit/498c508900c1cdbb9de7aa7be9c6dd8a3b27fd1f";>498c508 Rebuild JavaScript files https://github.com/github/codeql-action/commit/a1a585f2ab7dd04c9287080a82625f7d8c1fb05c";>a1a585f Merge branch 'main' into rvermeulen/uri-errors-as-warnings https://github.com/github/codeql-action/commit/34666c10b6a7be9d71b1a0ce70d3c0d2a1726d6e";>34666c1 Merge pull request https://redirect.github.com/github/codeql-action/issues/2488";>#2488 from github/henrymercer/debug-artifacts-better-logging https://github.com/github/codeql-action/commit/6e24973d7adf77c81ba32565e7a32243c5f1864f";>6e24973 Improve logging for combined SARIF debug artifact https://github.com/github/codeql-action/commit/d0a3cf2152cf8cb5726f920a7a258a326526702f";>d0a3cf2 Improve logging for debug artifacts Additional commits viewable in https://github.com/github/codeql-action/compare/8214744c546c1e5c8f0
[PR] Bump org.jline:jline from 3.26.3 to 3.27.0 [directory-kerby]
dependabot[bot] opened a new pull request, #441: URL: https://github.com/apache/directory-kerby/pull/441 Bumps [org.jline:jline](https://github.com/jline/jline3) from 3.26.3 to 3.27.0. Release notes Sourced from https://github.com/jline/jline3/releases";>org.jline:jline's releases. JLine 3.27.0 [maven-release-plugin] copy for tag jline-3.27.0 What's Changed Fix tag name format for release by https://github.com/gnodet";>@gnodet in https://redirect.github.com/jline/jline3/pull/1016";>jline/jline3#1016 Bump org.apache.maven.plugins:maven-compiler-plugin from 3.11.0 to 3.13.0 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/jline/jline3/pull/1040";>jline/jline3#1040 Console UI ListChoice's (relative)pageSize is never used, fixes https://redirect.github.com/jline/jline3/issues/1034";>#1034 by https://github.com/mattirn";>@mattirn in https://redirect.github.com/jline/jline3/pull/1041";>jline/jline3#1041 Add release workflow by https://github.com/gnodet";>@gnodet in https://redirect.github.com/jline/jline3/pull/1047";>jline/jline3#1047 Bump org.codehaus.mojo:exec-maven-plugin from 3.3.0 to 3.4.1 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/jline/jline3/pull/1054";>jline/jline3#1054 Bump sshd.version from 2.13.1 to 2.13.2 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/jline/jline3/pull/1049";>jline/jline3#1049 Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.7.0 to 3.8.0 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/jline/jline3/pull/1044";>jline/jline3#1044 Bump org.apache.maven.plugins:maven-site-plugin from 4.0.0-M15 to 4.0.0-M16 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/jline/jline3/pull/1045";>jline/jline3#1045 Bump org.easymock:easymock from 5.3.0 to 5.4.0 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/jline/jline3/pull/1050";>jline/jline3#1050 Bump slf4j.version from 2.0.13 to 2.0.16 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/jline/jline3/pull/1057";>jline/jline3#1057 Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.4 to 3.2.5 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/jline/jline3/pull/1058";>jline/jline3#1058 Build update by https://github.com/cstamas";>@cstamas in https://redirect.github.com/jline/jline3/pull/1055";>jline/jline3#1055 Bump junit.version from 5.10.3 to 5.11.0 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/jline/jline3/pull/1059";>jline/jline3#1059 Bump org.apache.maven.plugins:maven-install-plugin from 3.1.2 to 3.1.3 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/jline/jline3/pull/1061";>jline/jline3#1061 Bump org.apache.maven.plugins:maven-surefire-plugin from 3.3.1 to 3.5.0 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/jline/jline3/pull/1065";>jline/jline3#1065 Bump org.apache.maven.plugins:maven-dependency-plugin from 3.7.1 to 3.8.0 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/jline/jline3/pull/1064";>jline/jline3#1064 Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.8.0 to 3.10.0 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/jline/jline3/pull/1066";>jline/jline3#1066 Added possibility of cancelling prompts by https://github.com/quintesse";>@quintesse in https://redirect.github.com/jline/jline3/pull/1046";>jline/jline3#1046 Bump groovy.version from 4.0.22 to 4.0.23 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/jline/jline3/pull/1070";>jline/jline3#1070 [consoleui] Make it easier to extend ConsolePrompt by https://github.com/quintesse";>@quintesse in https://redirect.github.com/jline/jline3/pull/1068";>jline/jline3#1068 fix typo: inMode -> outMode in ffm by https://github.com/DasBabyPixel";>@DasBabyPixel in https://redirect.github.com/jline/jline3/pull/1075";>jline/jline3#1075 Bump org.graalvm.sdk:graal-sdk from 24.0.2 to 24.1.0 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/jline/jline3/pull/1073";>jline/jline3#1073 Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.5 to 3.2.6 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/jline/jline3/pull/1072";>jline/jline3#1072 Bump net.java.dev.jna:jna from 5.14.0 to 5.15.0 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/jline/jline3/pull/1071";>jline/jline3#1071 New Contributors https://github.com/quintesse";>@quintesse made their first contribution in https://redirect.github.com/jline/jline3/pull/1046";>jline/jline3#1046 https://github.com/DasBabyPixel";>@DasBabyPixel made their first contribution in https://redirect.github.
[PR] Bump github/codeql-action from 3.26.7 to 3.26.8 [directory-ldap-api]
dependabot[bot] opened a new pull request, #136: URL: https://github.com/apache/directory-ldap-api/pull/136 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.7 to 3.26.8. Changelog Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md";>github/codeql-action's changelog. CodeQL Action Changelog See the https://github.com/github/codeql-action/releases";>releases page for the relevant changes to the CodeQL CLI and language packs. Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers. [UNRELEASED] No user facing changes. 3.26.8 - 19 Sep 2024 Update default CodeQL bundle version to 2.19.0. https://redirect.github.com/github/codeql-action/pull/2483";>#2483 3.26.7 - 13 Sep 2024 Update default CodeQL bundle version to 2.18.4. https://redirect.github.com/github/codeql-action/pull/2471";>#2471 3.26.6 - 29 Aug 2024 Update default CodeQL bundle version to 2.18.3. https://redirect.github.com/github/codeql-action/pull/2449";>#2449 3.26.5 - 23 Aug 2024 Fix an issue where the csrutil system call used for telemetry would fail on MacOS ARM machines with System Integrity Protection disabled. https://redirect.github.com/github/codeql-action/pull/2441";>#2441 3.26.4 - 21 Aug 2024 Deprecation: The add-snippets input on the analyze Action is deprecated and will be removed in the first release in August 2025. https://redirect.github.com/github/codeql-action/pull/2436";>#2436 Fix an issue where the disk usage system call used for telemetry would fail on MacOS ARM machines with System Integrity Protection disabled, and then surface a warning. The system call is now disabled for these machines. https://redirect.github.com/github/codeql-action/pull/2434";>#2434 3.26.3 - 19 Aug 2024 Fix an issue where the CodeQL Action could not write diagnostic messages on Windows. This issue did not impact analysis quality. https://redirect.github.com/github/codeql-action/pull/2430";>#2430 3.26.2 - 14 Aug 2024 Update default CodeQL bundle version to 2.18.2. https://redirect.github.com/github/codeql-action/pull/2417";>#2417 3.26.1 - 13 Aug 2024 No user facing changes. 3.26.0 - 06 Aug 2024 Deprecation: Swift analysis on Ubuntu runner images is no longer supported. Please migrate to a macOS runner if this affects you. https://redirect.github.com/github/codeql-action/pull/2403";>#2403 Bump the minimum CodeQL bundle version to 2.13.5. https://redirect.github.com/github/codeql-action/pull/2408";>#2408 3.25.15 - 26 Jul 2024 ... (truncated) Commits https://github.com/github/codeql-action/commit/294a9d92911152fe08befb9ec03e240add280cb3";>294a9d9 Merge pull request https://redirect.github.com/github/codeql-action/issues/2490";>#2490 from github/update-v3.26.8-64431c66d https://github.com/github/codeql-action/commit/00b3604ce7da856a7d36784715970f8d24a0904b";>00b3604 Update changelog for v3.26.8 https://github.com/github/codeql-action/commit/64431c66d0e98a26d34f9485e5f8e317e14956fc";>64431c6 Merge pull request https://redirect.github.com/github/codeql-action/issues/2483";>#2483 from github/update-bundle/codeql-bundle-v2.19.0 https://github.com/github/codeql-action/commit/e0e2d7557dd5c205c43dbdc03c2870c5f7a871a7";>e0e2d75 Merge branch 'main' into update-bundle/codeql-bundle-v2.19.0 https://github.com/github/codeql-action/commit/cb28816228ffd4c85f55e62cf398ab8802ffbce8";>cb28816 Merge pull request https://redirect.github.com/github/codeql-action/issues/2487";>#2487 from rvermeulen/rvermeulen/uri-errors-as-warnings https://github.com/github/codeql-action/commit/498c508900c1cdbb9de7aa7be9c6dd8a3b27fd1f";>498c508 Rebuild JavaScript files https://github.com/github/codeql-action/commit/a1a585f2ab7dd04c9287080a82625f7d8c1fb05c";>a1a585f Merge branch 'main' into rvermeulen/uri-errors-as-warnings https://github.com/github/codeql-action/commit/34666c10b6a7be9d71b1a0ce70d3c0d2a1726d6e";>34666c1 Merge pull request https://redirect.github.com/github/codeql-action/issues/2488";>#2488 from github/henrymercer/debug-artifacts-better-logging https://github.com/github/codeql-action/commit/6e24973d7adf77c81ba32565e7a32243c5f1864f";>6e24973 Improve logging for combined SARIF debug artifact https://github.com/github/codeql-action/commit/d0a3cf2152cf8cb5726f920a7a258a326526702f";>d0a3cf2 Improve logging for debug artifacts Additional commits viewable in https://github.com/github/codeql-action/compare/8214744c546c1e5c
[PR] Bump commons-io:commons-io from 2.16.1 to 2.17.0 [directory-kerby]
dependabot[bot] opened a new pull request, #440: URL: https://github.com/apache/directory-kerby/pull/440 Bumps commons-io:commons-io from 2.16.1 to 2.17.0. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[PR] Bump com.puppycrawl.tools:checkstyle from 9.3 to 10.0 [directory-kerby]
dependabot[bot] opened a new pull request, #439: URL: https://github.com/apache/directory-kerby/pull/439 Bumps [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) from 9.3 to 10.0. Release notes Sourced from https://github.com/checkstyle/checkstyle/releases";>com.puppycrawl.tools:checkstyle's releases. checkstyle-10.0 https://checkstyle.org/releasenotes.html#Release_10.0";>https://checkstyle.org/releasenotes.html#Release_10.0 Commits https://github.com/checkstyle/checkstyle/commit/f1ad267111dcdd9757594116b83174b92d1e40ca";>f1ad267 [maven-release-plugin] prepare release checkstyle-10.0 https://github.com/checkstyle/checkstyle/commit/b81031fbfb6535421f79e4f619c4bf217f59d800";>b81031f doc: release notes 10.0 https://github.com/checkstyle/checkstyle/commit/6c8dbf3124c3df1b1acdbb2f63d8b78f86cf5b5d";>6c8dbf3 Issue https://redirect.github.com/checkstyle/checkstyle/issues/11345";>#11345: SuppressionsLoaderTest.loadFilterSet failing with SSLHandshakeE... https://github.com/checkstyle/checkstyle/commit/e292c079ced9ede7dfbc657e444208eca5b69538";>e292c07 Issue https://redirect.github.com/checkstyle/checkstyle/issues/10859";>#10859: FinalClass now exempts private-only ctor classes that are exten... https://github.com/checkstyle/checkstyle/commit/50a9a64b6d70aa722dcf754ad5d46e37784f5b05";>50a9a64 supplemental: refactor FinalClassCheck to ease update for https://redirect.github.com/checkstyle/checkstyle/issues/10859";>#10859 https://github.com/checkstyle/checkstyle/commit/890e1f4ab44a2950b58af3a9fb976a8c21e6eff1";>890e1f4 dependency: bump maven-project-info-reports-plugin from 3.2.1 to 3.2.2 https://github.com/checkstyle/checkstyle/commit/3ef61de60c1ae93cf0d9a06c56ad84cfedeefa88";>3ef61de Issue https://redirect.github.com/checkstyle/checkstyle/issues/6320";>#6320: add remove conditionals mutator for coding package https://github.com/checkstyle/checkstyle/commit/aec751dfba46e7ce6eae351cd93fde43f2cf3105";>aec751d dependency: bump nexus-staging-maven-plugin from 1.6.11 to 1.6.12 https://github.com/checkstyle/checkstyle/commit/eeeb96e26a850133eba894d7ae7282560dd3ba0a";>eeeb96e minor: use java-11 api https://github.com/checkstyle/checkstyle/commit/7fbe7999c22f739f6ba25ef0d2ad9ee649aa5429";>7fbe799 dependency: bump junit-pioneer from 1.6.0 to 1.6.1 Additional commits viewable in https://github.com/checkstyle/checkstyle/compare/checkstyle-9.3...checkstyle-10.0";>compare view Most Recent Ignore Conditions Applied to This Pull Request | Dependency Name | Ignore Conditions | | --- | --- | | com.puppycrawl.tools:checkstyle | [>= 10.a, < 11] | [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact I
[PR] Bump org.mockito:mockito-core from 4.11.0 to 5.0.0 [directory-ldap-api]
dependabot[bot] opened a new pull request, #134: URL: https://github.com/apache/directory-ldap-api/pull/134 Bumps [org.mockito:mockito-core](https://github.com/mockito/mockito) from 4.11.0 to 5.0.0. Release notes Sourced from https://github.com/mockito/mockito/releases";>org.mockito:mockito-core's releases. v5.0.0 Mockito 5: prepare for future JDK versions For a while now, we have seen an increase in problems/incompatibilities with recent versions of the JDK due to our usage of JVM-internal API. Most notably, JDK 17 made some changes which are incompatible with the current subclass mockmaker. Therefore, to prepare for the future of JDK, we are making some core changes to ensure Mockito keeps on working. Switch the default mockmaker to mockito-inline Back in Mockito 2.7.6, we published a new mockmaker based on the "inline bytecode" principle. This mockmaker creates mocks manipulating bytecode equivalent within the original class such that its method implementations hook into the normal Mockito machinery. As a comparison, the subclass mockmaker generates "real" subclasses for mocks, to mimic the same behavior. While the approaches are similar, the inline mockmaker avoids certain restrictions that the JDK imposes. For example, it does not violate module boundaries (introduced in JDK 9, but more heavily used in JDK 17) and avoids the leaking of the creation of the subclass. Massive thanks to community member https://github.com/reta";>@reta who implemented this change. Note: this does not affect mockito-android nor testing on Android. When should I still be using the subclass mockmaker? There are legitimate remaining use cases for the subclass mockmaker. For example, on the Graal VM's native image, the inline mockmaker will not work and the subclass mockmaker is the appropriate choice. Additionally, if you would like to avoid mocking final classes, using the subclass mockmaker is a possibibility. Note however that if you solely want to use the subclass mockmaker to avoid mocking final, you will run into the above mentioned issues on JDK 17+. We want to leave this choice up to our users, which is why we will keep on supporting the subclass mockmaker. If you want to use the subclass mockmaker instead, you can use the new mockito-subclass artifact (published https://search.maven.org/artifact/org.mockito/mockito-subclass";>on Maven Central along with all our other artifacts). Update the minimum supported Java version to 11 Mockito 4 supports Java 8 and above. Similar to other open source projects, we are moving away from JDK 8 and to newer versions. The primary reason for moving away from JDK 8 is the increasing maintenance costs with keeping our own infrastructure working. Lately we have been running into more and more JDK 8 breakages. Additionally, while we want to support the newest JDK API's, our current solution to support both JDK 8 and newer versions causes https://redirect.github.com/mockito/mockito/issues/2798";>issues with the SecurityManager. Since we want Mockito to work on the newest version and more and more businesses adopting JDK 11, we have decided to make the switch as well. Massive thanks to community member https://github.com/reta";>@reta who implemented this change. What should I do if I still run JDK 8? For JDK 8 and below, you can keep on using Mockito 4. This is similar to if you are using JDK 6, for which you can keep on using Mockito 2. The changes in Mockito 5 (for now) are primarily focused on the latest JDK versions, which means the API differences between Mockito 4 and 5 are minimal. However, over time this will most likely widen, so we do recommend adopting JDK 11 in the future. New type() method on ArgumentMatcher One of our most used public API's for customizing Mockito is the https://javadoc.io/doc/org.mockito/mockito-core/latest/org/mockito/ArgumentMatcher.html";>ArgumentMatcher interface. ... (truncated) Commits https://github.com/mockito/mockito/commit/adf528d173f8b763fcd4fedab245ed485b465211";>adf528d Bump versions.bytebuddy from 1.12.21 to 1.12.22 (https://redirect.github.com/mockito/mockito/issues/2864";>#2864) https://github.com/mockito/mockito/commit/2418419a1915bd234332eac2b4d5de85622d4699";>2418419 Bump versions.junitJupiter from 5.9.1 to 5.9.2 (https://redirect.github.com/mockito/mockito/issues/2858";>#2858) https://github.com/mockito/mockito/commit/3d40cd51d3982e33f7c2a2670c65d28233ceb66e";>3d40cd5 Bump junit-platform-launcher from 1.9.1 to 1.9.2 (https://redirect.github.com/mockito/mockito/issues/2859";>#2859) https://github.com/mockito/mockito/commit/9bec8e3a1a0f57e4baa9b64825d67641e9eb2d5e";>9bec8e3 Bump versions.errorprone from 2.17.0 to 2.18.0 (https://redirect.github.com/mockito/mockito/issues/2857";>#2857) https://github.com/mockito/mockito/commit/a9595f559cf4acdae
[PR] Bump com.github.ben-manes.caffeine:caffeine from 2.9.3 to 3.0.0 [directory-ldap-api]
dependabot[bot] opened a new pull request, #135: URL: https://github.com/apache/directory-ldap-api/pull/135 Bumps [com.github.ben-manes.caffeine:caffeine](https://github.com/ben-manes/caffeine) from 2.9.3 to 3.0.0. Release notes Sourced from https://github.com/ben-manes/caffeine/releases";>com.github.ben-manes.caffeine:caffeine's releases. 3.0.0 This release includes API incompatible changes. Highlights Java 11 or above is required Java 8 users can continue to use version 2.x, which will be supported API improvements Added Policy.refreshes() for a snapshot of the in-flight refresh operations CacheLoader and AsyncCacheLoader offer bulk factory methods AsyncCacheLoader methods may now throw checked exceptions Better usage of Checker Framework nullness annotations (https://redirect.github.com/ben-manes/caffeine/issues/337";>#337) LoadingCache.refresh now returns the in-flight future (https://redirect.github.com/ben-manes/caffeine/issues/143";>#143) Various unimplemented default methods are now abstract Added LoadingCache.refreshAll convenience method Bulk loads now receive a Set of keys (was Iterable) More flexible generic bounds and type parameters Implementation improvements Refresh operations ignore redundant calls during an in-flight load and are linearizable (https://redirect.github.com/ben-manes/caffeine/issues/193";>#193, https://redirect.github.com/ben-manes/caffeine/issues/236";>#236, https://redirect.github.com/ben-manes/caffeine/issues/282";>#282, https://redirect.github.com/ben-manes/caffeine/issues/322";>#322, https://redirect.github.com/ben-manes/caffeine/issues/373";>#373, https://redirect.github.com/ben-manes/caffeine/issues/467";>#467) The https://openjdk.java.net/jeps/264";>Java Platform Logging API is used instead of java.util.logging (https://redirect.github.com/ben-manes/caffeine/issues/456";>#456) sun.misc.Unsafe is no longer required (https://redirect.github.com/ben-manes/caffeine/issues/273";>#273) Incompatible changes VarExpiration time-based puts now return the old value instead of a boolean result Removed jandex resource as no longer utilized by Quarkus Split Policy.Expiration into fixed and refresh interfaces Deprecation removals CacheWriter, SingleConsumerQueue, and UnsafeAccess StatsCounter.recordEviction variations CacheStats constructors Notes CacheWriter usages can be replaced by Map computations and Caffeine.evictionListener For best performance Unsafe may be used if available, otherwise falls back to VarHandles We will continue to support and maintain version 2.x for Java 8 users Commits https://github.com/ben-manes/caffeine/commit/be6ad63ea4a7bf59eae10b92e62a1aed1883f951";>be6ad63 add checkerframework javadoc link https://github.com/ben-manes/caffeine/commit/a95ae264b0efff0519f3a6fab759b18a8fb7909a";>a95ae26 Added snapshot view of in-flight refresh operations https://github.com/ben-manes/caffeine/commit/0d239874033d6935f73c00e9f86223defb53ee73";>0d23987 misc improvements (javadoc, generics, build) https://github.com/ben-manes/caffeine/commit/b45b1cc93c7d36c093f9f8871b3aad0c8f2d2b76";>b45b1cc Add refreshAll(keys) convenience method (bulk not supported) https://github.com/ben-manes/caffeine/commit/b792cc3a059ca72b1d7616c0a0c54c6136acd613";>b792cc3 Split the release workflow out from the build action https://github.com/ben-manes/caffeine/commit/16ddc49000a5dc461831c4c325ffe6303cd0367c";>16ddc49 Update version to 3.0.0 https://github.com/ben-manes/caffeine/commit/28a456e5ccfb309b3b2c4f1c717de7acbad8ce2c";>28a456e Remove CacheWriter (deprecated for removal in v2.9) https://github.com/ben-manes/caffeine/commit/e1b3bca7c4bab5d2fdfb866bcf3b980ae28d387c";>e1b3bca Remove jandex as unused https://github.com/ben-manes/caffeine/commit/a0c310cb0650e6edc349bfc7c87bd76026da28f4";>a0c310c Prefer VarHandle for ring buffer array https://github.com/ben-manes/caffeine/commit/d63c871cd63063f97b5647ced7f98cdded7ce388";>d63c871 Mirror usage of https://github.com/CheckReturnValue";>@CheckReturnValue from Guava Additional commits viewable in https://github.com/ben-manes/caffeine/compare/v2.9.3...v3.0.0";>compare view Most Recent Ignore Conditions Applied to This Pull Request | Dependency Name | Ignore Conditions | | --- | --- | | com.github.ben-manes.caffeine:caffeine | [>= 3.a, < 4] | [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't a
[PR] Bump com.github.ben-manes.caffeine:caffeine from 2.9.3 to 3.0.0 [directory-server]
dependabot[bot] opened a new pull request, #231: URL: https://github.com/apache/directory-server/pull/231 Bumps [com.github.ben-manes.caffeine:caffeine](https://github.com/ben-manes/caffeine) from 2.9.3 to 3.0.0. Release notes Sourced from https://github.com/ben-manes/caffeine/releases";>com.github.ben-manes.caffeine:caffeine's releases. 3.0.0 This release includes API incompatible changes. Highlights Java 11 or above is required Java 8 users can continue to use version 2.x, which will be supported API improvements Added Policy.refreshes() for a snapshot of the in-flight refresh operations CacheLoader and AsyncCacheLoader offer bulk factory methods AsyncCacheLoader methods may now throw checked exceptions Better usage of Checker Framework nullness annotations (https://redirect.github.com/ben-manes/caffeine/issues/337";>#337) LoadingCache.refresh now returns the in-flight future (https://redirect.github.com/ben-manes/caffeine/issues/143";>#143) Various unimplemented default methods are now abstract Added LoadingCache.refreshAll convenience method Bulk loads now receive a Set of keys (was Iterable) More flexible generic bounds and type parameters Implementation improvements Refresh operations ignore redundant calls during an in-flight load and are linearizable (https://redirect.github.com/ben-manes/caffeine/issues/193";>#193, https://redirect.github.com/ben-manes/caffeine/issues/236";>#236, https://redirect.github.com/ben-manes/caffeine/issues/282";>#282, https://redirect.github.com/ben-manes/caffeine/issues/322";>#322, https://redirect.github.com/ben-manes/caffeine/issues/373";>#373, https://redirect.github.com/ben-manes/caffeine/issues/467";>#467) The https://openjdk.java.net/jeps/264";>Java Platform Logging API is used instead of java.util.logging (https://redirect.github.com/ben-manes/caffeine/issues/456";>#456) sun.misc.Unsafe is no longer required (https://redirect.github.com/ben-manes/caffeine/issues/273";>#273) Incompatible changes VarExpiration time-based puts now return the old value instead of a boolean result Removed jandex resource as no longer utilized by Quarkus Split Policy.Expiration into fixed and refresh interfaces Deprecation removals CacheWriter, SingleConsumerQueue, and UnsafeAccess StatsCounter.recordEviction variations CacheStats constructors Notes CacheWriter usages can be replaced by Map computations and Caffeine.evictionListener For best performance Unsafe may be used if available, otherwise falls back to VarHandles We will continue to support and maintain version 2.x for Java 8 users Commits https://github.com/ben-manes/caffeine/commit/be6ad63ea4a7bf59eae10b92e62a1aed1883f951";>be6ad63 add checkerframework javadoc link https://github.com/ben-manes/caffeine/commit/a95ae264b0efff0519f3a6fab759b18a8fb7909a";>a95ae26 Added snapshot view of in-flight refresh operations https://github.com/ben-manes/caffeine/commit/0d239874033d6935f73c00e9f86223defb53ee73";>0d23987 misc improvements (javadoc, generics, build) https://github.com/ben-manes/caffeine/commit/b45b1cc93c7d36c093f9f8871b3aad0c8f2d2b76";>b45b1cc Add refreshAll(keys) convenience method (bulk not supported) https://github.com/ben-manes/caffeine/commit/b792cc3a059ca72b1d7616c0a0c54c6136acd613";>b792cc3 Split the release workflow out from the build action https://github.com/ben-manes/caffeine/commit/16ddc49000a5dc461831c4c325ffe6303cd0367c";>16ddc49 Update version to 3.0.0 https://github.com/ben-manes/caffeine/commit/28a456e5ccfb309b3b2c4f1c717de7acbad8ce2c";>28a456e Remove CacheWriter (deprecated for removal in v2.9) https://github.com/ben-manes/caffeine/commit/e1b3bca7c4bab5d2fdfb866bcf3b980ae28d387c";>e1b3bca Remove jandex as unused https://github.com/ben-manes/caffeine/commit/a0c310cb0650e6edc349bfc7c87bd76026da28f4";>a0c310c Prefer VarHandle for ring buffer array https://github.com/ben-manes/caffeine/commit/d63c871cd63063f97b5647ced7f98cdded7ce388";>d63c871 Mirror usage of https://github.com/CheckReturnValue";>@CheckReturnValue from Guava Additional commits viewable in https://github.com/ben-manes/caffeine/compare/v2.9.3...v3.0.0";>compare view Most Recent Ignore Conditions Applied to This Pull Request | Dependency Name | Ignore Conditions | | --- | --- | | com.github.ben-manes.caffeine:caffeine | [>= 3.a, < 4] | [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alt
[PR] Bump org.eclipse.jetty:jetty-webapp from 9.4.56.v20240826 to 11.0.0 [directory-server]
dependabot[bot] opened a new pull request, #230: URL: https://github.com/apache/directory-server/pull/230 Bumps org.eclipse.jetty:jetty-webapp from 9.4.56.v20240826 to 11.0.0. Most Recent Ignore Conditions Applied to This Pull Request | Dependency Name | Ignore Conditions | | --- | --- | | org.eclipse.jetty:jetty-webapp | [>= 11.a, < 12] | | org.eclipse.jetty:jetty-webapp | [>= 10.a, < 11] | [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump actions/setup-java from 4.2.2 to 4.3.0 [directory-kerby]
coheigea merged PR #438: URL: https://github.com/apache/directory-kerby/pull/438 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump github/codeql-action from 3.26.6 to 3.26.7 [directory-kerby]
coheigea merged PR #437: URL: https://github.com/apache/directory-kerby/pull/437 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump com.nimbusds:nimbus-jose-jwt from 9.41 to 9.41.1 [directory-kerby]
coheigea merged PR #436: URL: https://github.com/apache/directory-kerby/pull/436 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump github/codeql-action from 3.26.6 to 3.26.7 [directory-server]
coheigea merged PR #229: URL: https://github.com/apache/directory-server/pull/229 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump github/codeql-action from 3.26.6 to 3.26.7 [directory-ldap-api]
coheigea merged PR #132: URL: https://github.com/apache/directory-ldap-api/pull/132 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump actions/setup-java from 4.2.2 to 4.3.0 [directory-ldap-api]
coheigea merged PR #133: URL: https://github.com/apache/directory-ldap-api/pull/133 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[PR] Bump github/codeql-action from 3.26.6 to 3.26.7 [directory-server]
dependabot[bot] opened a new pull request, #229: URL: https://github.com/apache/directory-server/pull/229 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.6 to 3.26.7. Changelog Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md";>github/codeql-action's changelog. CodeQL Action Changelog See the https://github.com/github/codeql-action/releases";>releases page for the relevant changes to the CodeQL CLI and language packs. Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers. [UNRELEASED] No user facing changes. 3.26.7 - 13 Sep 2024 Update default CodeQL bundle version to 2.18.4. https://redirect.github.com/github/codeql-action/pull/2471";>#2471 3.26.6 - 29 Aug 2024 Update default CodeQL bundle version to 2.18.3. https://redirect.github.com/github/codeql-action/pull/2449";>#2449 3.26.5 - 23 Aug 2024 Fix an issue where the csrutil system call used for telemetry would fail on MacOS ARM machines with System Integrity Protection disabled. https://redirect.github.com/github/codeql-action/pull/2441";>#2441 3.26.4 - 21 Aug 2024 Deprecation: The add-snippets input on the analyze Action is deprecated and will be removed in the first release in August 2025. https://redirect.github.com/github/codeql-action/pull/2436";>#2436 Fix an issue where the disk usage system call used for telemetry would fail on MacOS ARM machines with System Integrity Protection disabled, and then surface a warning. The system call is now disabled for these machines. https://redirect.github.com/github/codeql-action/pull/2434";>#2434 3.26.3 - 19 Aug 2024 Fix an issue where the CodeQL Action could not write diagnostic messages on Windows. This issue did not impact analysis quality. https://redirect.github.com/github/codeql-action/pull/2430";>#2430 3.26.2 - 14 Aug 2024 Update default CodeQL bundle version to 2.18.2. https://redirect.github.com/github/codeql-action/pull/2417";>#2417 3.26.1 - 13 Aug 2024 No user facing changes. 3.26.0 - 06 Aug 2024 Deprecation: Swift analysis on Ubuntu runner images is no longer supported. Please migrate to a macOS runner if this affects you. https://redirect.github.com/github/codeql-action/pull/2403";>#2403 Bump the minimum CodeQL bundle version to 2.13.5. https://redirect.github.com/github/codeql-action/pull/2408";>#2408 3.25.15 - 26 Jul 2024 Update default CodeQL bundle version to 2.18.1. https://redirect.github.com/github/codeql-action/pull/2385";>#2385 3.25.14 - 25 Jul 2024 ... (truncated) Commits https://github.com/github/codeql-action/commit/8214744c546c1e5c8f03dde8fab3a7353211988d";>8214744 Merge pull request https://redirect.github.com/github/codeql-action/issues/2478";>#2478 from github/update-v3.26.7-4a01ec798 https://github.com/github/codeql-action/commit/a3b3e07cecabba6fce92183951fcd7152dc3795d";>a3b3e07 Update changelog for v3.26.7 https://github.com/github/codeql-action/commit/4a01ec798636a8442fbe054c7795e139a5960d29";>4a01ec7 Merge pull request https://redirect.github.com/github/codeql-action/issues/2474";>#2474 from github/aeisenberg/always-upload-eslint-sarif https://github.com/github/codeql-action/commit/762dbaeeb79f3e01fe9f52f151cb17042dab7c84";>762dbae Merge pull request https://redirect.github.com/github/codeql-action/issues/2471";>#2471 from github/update-bundle/codeql-bundle-v2.18.4 https://github.com/github/codeql-action/commit/0d0f998f2891417c3609fda383e08753d605c77e";>0d0f998 Always upload eslint.sarif https://github.com/github/codeql-action/commit/e817992b3db357f199b6e99216d3bf853dafd0fc";>e817992 Merge pull request https://redirect.github.com/github/codeql-action/issues/2469";>#2469 from github/aeisenberg/upload-eslint-sarif https://github.com/github/codeql-action/commit/49021ad7f5a68089739ccf2e66e25b7e531c6bcf";>49021ad Merge pull request https://redirect.github.com/github/codeql-action/issues/2472";>#2472 from rvermeulen/rvermeulen/update-release-branch-authz https://github.com/github/codeql-action/commit/56b841888472b4f479ef3b9c0643f73434756177";>56b8418 Ignore suppressed alerts https://github.com/github/codeql-action/commit/f824adbf9bf63ebfa2c4278e0637d65d20b4ddbb";>f824adb Merge branch 'main' into rvermeulen/update-release-branch-authz https://github.com/github/codeql-action/commit/8d9ed0b40e24a3209eda0edca170ba215148ed22";>8d9ed0b Add changelog note Additional commits viewable in https://github.com/github/cod
[PR] Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.5 to 3.2.6 [directory-scimple]
dependabot[bot] opened a new pull request, #680: URL: https://github.com/apache/directory-scimple/pull/680 Bumps [org.apache.maven.plugins:maven-gpg-plugin](https://github.com/apache/maven-gpg-plugin) from 3.2.5 to 3.2.6. Release notes Sourced from https://github.com/apache/maven-gpg-plugin/releases";>org.apache.maven.plugins:maven-gpg-plugin's releases. 3.2.6 https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317521&version=12354997";>Release Notes - Maven GPG Plugin - Version 3.2.6 What's Changed [MGPG-135] Support Overriding / Enhance the signer in AbstractGpgMojo by https://github.com/laeubi";>@laeubi in https://redirect.github.com/apache/maven-gpg-plugin/pull/112";>apache/maven-gpg-plugin#112 Bump org.apache.maven.plugins:maven-invoker-plugin from 3.7.0 to 3.8.0 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/apache/maven-gpg-plugin/pull/114";>apache/maven-gpg-plugin#114 [MGPG-140] Update Maven to 3.9.9 by https://github.com/cstamas";>@cstamas in https://redirect.github.com/apache/maven-gpg-plugin/pull/116";>apache/maven-gpg-plugin#116 [MGPG-138] Drop direct use of plexus-cipher and secdispatcher by https://github.com/cstamas";>@cstamas in https://redirect.github.com/apache/maven-gpg-plugin/pull/115";>apache/maven-gpg-plugin#115 [MGPG-141] Remove use of deprecated classes by https://github.com/cstamas";>@cstamas in https://redirect.github.com/apache/maven-gpg-plugin/pull/117";>apache/maven-gpg-plugin#117 Add FAQ for "no pinentry" issue by https://github.com/cstamas";>@cstamas in https://redirect.github.com/apache/maven-gpg-plugin/pull/118";>apache/maven-gpg-plugin#118 New Contributors https://github.com/laeubi";>@laeubi made their first contribution in https://redirect.github.com/apache/maven-gpg-plugin/pull/112";>apache/maven-gpg-plugin#112 Full Changelog: https://github.com/apache/maven-gpg-plugin/compare/maven-gpg-plugin-3.2.5...maven-gpg-plugin-3.2.6";>https://github.com/apache/maven-gpg-plugin/compare/maven-gpg-plugin-3.2.5...maven-gpg-plugin-3.2.6 Commits https://github.com/apache/maven-gpg-plugin/commit/1c9a14c0eec9dae40baa4a5db674e6a7ec012be4";>1c9a14c [maven-release-plugin] prepare release maven-gpg-plugin-3.2.6 https://github.com/apache/maven-gpg-plugin/commit/bbe6156400212b3fe063d218399ba09c24795f44";>bbe6156 Add FAQ for "no pinentry" issue (https://redirect.github.com/apache/maven-gpg-plugin/issues/118";>#118) https://github.com/apache/maven-gpg-plugin/commit/5b9427333ab4b7b48b297a8b9a4158688211f14a";>5b94273 [MGPG-141] Remove use of deprecated classes (https://redirect.github.com/apache/maven-gpg-plugin/issues/117";>#117) https://github.com/apache/maven-gpg-plugin/commit/afdfd28bab4a0530cfd655397716a36adc1644b6";>afdfd28 [MGPG-138] Drop direct use of plexus-cipher and secdispatcher (https://redirect.github.com/apache/maven-gpg-plugin/issues/115";>#115) https://github.com/apache/maven-gpg-plugin/commit/7516e7c73d6e5c8c3d6c2cbab9d55deb3987f388";>7516e7c [MGPG-140] Update Maven to 3.9.9 (https://redirect.github.com/apache/maven-gpg-plugin/issues/116";>#116) https://github.com/apache/maven-gpg-plugin/commit/4ec571f561e330209189eb3c4387aaae0b37fb96";>4ec571f [MGPG-139] Bump org.apache.maven.plugins:maven-invoker-plugin from 3.7.0 to 3... https://github.com/apache/maven-gpg-plugin/commit/1126b7b09cb8a4540e35f62146b1198bcadeb795";>1126b7b use new Reproducible Central badge endpoint https://github.com/apache/maven-gpg-plugin/commit/1b40a0554b55c1d8a1c5da662e848688aa346aed";>1b40a05 [MGPG-135] Support Overriding / Enhance the signer in AbstractGpgMojo (https://redirect.github.com/apache/maven-gpg-plugin/issues/112";>#112) https://github.com/apache/maven-gpg-plugin/commit/3a31714e9cbdde86a6b12f1ef05d5c60252fef4a";>3a31714 [maven-release-plugin] prepare for next development iteration See full diff in https://github.com/apache/maven-gpg-plugin/compare/maven-gpg-plugin-3.2.5...maven-gpg-plugin-3.2.6";>compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to
[PR] Bump com.gradle:develocity-maven-extension from 1.21.6 to 1.22.1 [directory-scimple]
dependabot[bot] opened a new pull request, #678: URL: https://github.com/apache/directory-scimple/pull/678 Bumps com.gradle:develocity-maven-extension from 1.21.6 to 1.22.1. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump com.gradle:develocity-maven-extension from 1.21.6 to 1.22 [directory-scimple]
dependabot[bot] closed pull request #652: Bump com.gradle:develocity-maven-extension from 1.21.6 to 1.22 URL: https://github.com/apache/directory-scimple/pull/652 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[PR] Bump version.quarkus from 3.14.2 to 3.14.4 [directory-scimple]
dependabot[bot] opened a new pull request, #677: URL: https://github.com/apache/directory-scimple/pull/677 Bumps `version.quarkus` from 3.14.2 to 3.14.4. Updates `io.quarkus.platform:quarkus-bom` from 3.14.2 to 3.14.4 Commits https://github.com/quarkusio/quarkus-platform/commit/95be278adaac5dd541a11804abc92c0b602c5618";>95be278 [maven-release-plugin] prepare release 3.14.4 https://github.com/quarkusio/quarkus-platform/commit/dd5ecd1346090a290a0e8d853c829080d3778bc1";>dd5ecd1 Merge pull request https://redirect.github.com/quarkusio/quarkus-platform/issues/1278";>#1278 from gsmet/quarkus-3.14.4 https://github.com/quarkusio/quarkus-platform/commit/00b775dcd08bc968a52593e4aea62cbce38374fe";>00b775d Upgrade to Quarkus 3.14.4 https://github.com/quarkusio/quarkus-platform/commit/4ee1af3cb140ae98f233d30463aa1942360517db";>4ee1af3 [maven-release-plugin] prepare for next development iteration https://github.com/quarkusio/quarkus-platform/commit/d0b7b924b2411fa836d72d6278578a014029b8a4";>d0b7b92 [maven-release-plugin] prepare release 3.14.3 https://github.com/quarkusio/quarkus-platform/commit/ffef8c3013785b6ff346c6f53f9cae8808f5e8cf";>ffef8c3 Merge pull request https://redirect.github.com/quarkusio/quarkus-platform/issues/1276";>#1276 from gsmet/quarkus-3.14.3 https://github.com/quarkusio/quarkus-platform/commit/202c869818e8f0ba6e1dbf66cbe320e6c02b19b8";>202c869 Update QOSDK to 6.8.0 https://github.com/quarkusio/quarkus-platform/commit/f86f8e65ddcf557eff22531758daf68472b43cdb";>f86f8e6 Upgrade to Debezium 2.7.2.Final https://github.com/quarkusio/quarkus-platform/commit/7d7695a7c7d640b168f0bf8ce3ae6c675c37efaa";>7d7695a Upgrade to Quarkus 3.14.3 https://github.com/quarkusio/quarkus-platform/commit/908a2c13e73933b3c9566a2ecae04ec8cebf0e84";>908a2c1 [maven-release-plugin] prepare for next development iteration See full diff in https://github.com/quarkusio/quarkus-platform/compare/3.14.2...3.14.4";>compare view Updates `io.quarkus.platform:quarkus-maven-plugin` from 3.14.2 to 3.14.4 Commits https://github.com/quarkusio/quarkus-platform/commit/95be278adaac5dd541a11804abc92c0b602c5618";>95be278 [maven-release-plugin] prepare release 3.14.4 https://github.com/quarkusio/quarkus-platform/commit/dd5ecd1346090a290a0e8d853c829080d3778bc1";>dd5ecd1 Merge pull request https://redirect.github.com/quarkusio/quarkus-platform/issues/1278";>#1278 from gsmet/quarkus-3.14.4 https://github.com/quarkusio/quarkus-platform/commit/00b775dcd08bc968a52593e4aea62cbce38374fe";>00b775d Upgrade to Quarkus 3.14.4 https://github.com/quarkusio/quarkus-platform/commit/4ee1af3cb140ae98f233d30463aa1942360517db";>4ee1af3 [maven-release-plugin] prepare for next development iteration https://github.com/quarkusio/quarkus-platform/commit/d0b7b924b2411fa836d72d6278578a014029b8a4";>d0b7b92 [maven-release-plugin] prepare release 3.14.3 https://github.com/quarkusio/quarkus-platform/commit/ffef8c3013785b6ff346c6f53f9cae8808f5e8cf";>ffef8c3 Merge pull request https://redirect.github.com/quarkusio/quarkus-platform/issues/1276";>#1276 from gsmet/quarkus-3.14.3 https://github.com/quarkusio/quarkus-platform/commit/202c869818e8f0ba6e1dbf66cbe320e6c02b19b8";>202c869 Update QOSDK to 6.8.0 https://github.com/quarkusio/quarkus-platform/commit/f86f8e65ddcf557eff22531758daf68472b43cdb";>f86f8e6 Upgrade to Debezium 2.7.2.Final https://github.com/quarkusio/quarkus-platform/commit/7d7695a7c7d640b168f0bf8ce3ae6c675c37efaa";>7d7695a Upgrade to Quarkus 3.14.3 https://github.com/quarkusio/quarkus-platform/commit/908a2c13e73933b3c9566a2ecae04ec8cebf0e84";>908a2c1 [maven-release-plugin] prepare for next development iteration See full diff in https://github.com/quarkusio/quarkus-platform/compare/3.14.2...3.14.4";>compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore thi
Re: [PR] Bump org.wildfly.plugins:wildfly-maven-plugin from 3.0.1.Final to 5.0.0.Final [directory-scimple]
dependabot[bot] commented on PR #570: URL: https://github.com/apache/directory-scimple/pull/570#issuecomment-2353461212 Superseded by #676. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[PR] Bump org.codehaus.mojo:buildnumber-maven-plugin from 3.2.0 to 3.2.1 [directory-scimple]
dependabot[bot] opened a new pull request, #679: URL: https://github.com/apache/directory-scimple/pull/679 Bumps [org.codehaus.mojo:buildnumber-maven-plugin](https://github.com/mojohaus/buildnumber-maven-plugin) from 3.2.0 to 3.2.1. Release notes Sourced from https://github.com/mojohaus/buildnumber-maven-plugin/releases";>org.codehaus.mojo:buildnumber-maven-plugin's releases. 3.2.1 Changes Bump release-drafter/release-drafter from 5 to 6 (https://redirect.github.com/mojohaus/buildnumber-maven-plugin/pull/211";>#211) https://github.com/dependabot";>@dependabot 🚀 New features and improvements Add configuration to be able to use the plugin without scm info in pom (https://redirect.github.com/mojohaus/buildnumber-maven-plugin/pull/228";>#228) https://github.com/olamy";>@olamy 📦 Dependency updates Bump org.codehaus.mojo:mojo-parent from 84 to 85 (https://redirect.github.com/mojohaus/buildnumber-maven-plugin/pull/227";>#227) https://github.com/dependabot";>@dependabot Bump org.codehaus.mojo:mojo-parent from 80 to 84 (https://redirect.github.com/mojohaus/buildnumber-maven-plugin/pull/226";>#226) https://github.com/dependabot";>@dependabot Bump com.google.code.gson:gson from 2.10.1 to 2.11.0 (https://redirect.github.com/mojohaus/buildnumber-maven-plugin/pull/224";>#224) https://github.com/dependabot";>@dependabot Bump org.codehaus.plexus:plexus-xml from 3.0.0 to 3.0.1 (https://redirect.github.com/mojohaus/buildnumber-maven-plugin/pull/225";>#225) https://github.com/dependabot";>@dependabot Bump maven.scm.version from 2.0.1 to 2.1.0 (https://redirect.github.com/mojohaus/buildnumber-maven-plugin/pull/219";>#219) https://github.com/dependabot";>@dependabot Bump org.codehaus.plexus:plexus-utils from 4.0.0 to 4.0.1 (https://redirect.github.com/mojohaus/buildnumber-maven-plugin/pull/220";>#220) https://github.com/dependabot";>@dependabot Bump org.codehaus.mojo:extra-enforcer-rules from 1.7.0 to 1.8.0 (https://redirect.github.com/mojohaus/buildnumber-maven-plugin/pull/216";>#216) https://github.com/dependabot";>@dependabot Bump apache/maven-gh-actions-shared from 3 to 4 (https://redirect.github.com/mojohaus/buildnumber-maven-plugin/pull/215";>#215) https://github.com/dependabot";>@dependabot Bump org.codehaus.mojo:mojo-parent from 78 to 80 (https://redirect.github.com/mojohaus/buildnumber-maven-plugin/pull/213";>#213) https://github.com/dependabot";>@dependabot Bump org.codehaus.mojo:mojo-parent from 77 to 78 (https://redirect.github.com/mojohaus/buildnumber-maven-plugin/pull/207";>#207) https://github.com/dependabot";>@dependabot Require Maven 3.6.3+ (https://redirect.github.com/mojohaus/buildnumber-maven-plugin/pull/209";>#209) https://github.com/slachiewicz";>@slachiewicz Bump plexus-utils from 3.5.1 to 4.0.0 (https://redirect.github.com/mojohaus/buildnumber-maven-plugin/pull/193";>#193) https://github.com/dependabot";>@dependabot Bump actions/stale from 8 to 9 (https://redirect.github.com/mojohaus/buildnumber-maven-plugin/pull/206";>#206) https://github.com/dependabot";>@dependabot Bump org.codehaus.mojo:mojo-parent from 76 to 77 (https://redirect.github.com/mojohaus/buildnumber-maven-plugin/pull/203";>#203) https://github.com/dependabot";>@dependabot Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.4.0 to 3.4.1 (https://redirect.github.com/mojohaus/buildnumber-maven-plugin/pull/202";>#202) https://github.com/dependabot";>@dependabot Bump mojo-parent from 74 to 76 (https://redirect.github.com/mojohaus/buildnumber-maven-plugin/pull/198";>#198) https://github.com/dependabot";>@dependabot Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.3.0 to 3.4.0 (https://redirect.github.com/mojohaus/buildnumber-maven-plugin/pull/201";>#201) https://github.com/dependabot";>@dependabot 👻 Maintenance Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.3.0 to 3.4.0 (https://redirect.github.com/mojohaus/buildnumber-maven-plugin/pull/201";>#201) https://github.com/dependabot";>@dependabot Commits https://github.com/mojohaus/buildnumber-maven-plugin/commit/f4afd10e0d7daf202f2a2f58ca2c9b19be332bee";>f4afd10 [maven-release-plugin] prepare release 3.2.1 https://github.com/mojohaus/buildnumber-maven-plugin/commit/eb584036b2fc26cb86ebfb6f75925ec71695575f";>eb58403 Add configuration to be able to use the plugin without scm info in pom (https://redirect.github.com/mojohaus/buildnumber-maven-plugin/issues/228";>#228) https://github.com/mojohaus/buildnumber-maven-plugin/commit/e8bee16f42b06c025bfa6c39a4f6bc7c5a36bbb3";>e8bee16 Bump org.codehaus.mojo:mojo-parent from 84 to 85 https://github.com/mojohaus/buildnumber-maven-plugin/commit/a0a059fbc4a464af0756efc9caf320479c481ae0";>a0a059f Bump org.codehaus.mojo:mojo-parent from 80 to 84 https://github.com/mojohaus/buildnumber-maven-plugin/commit/6f52a09dd5bc1afbde329a0
Re: [PR] Bump com.gradle:develocity-maven-extension from 1.21.6 to 1.22 [directory-scimple]
dependabot[bot] commented on PR #652: URL: https://github.com/apache/directory-scimple/pull/652#issuecomment-2353461632 Superseded by #678. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[PR] Bump org.mockito:mockito-junit-jupiter from 5.12.0 to 5.13.0 [directory-scimple]
dependabot[bot] opened a new pull request, #674: URL: https://github.com/apache/directory-scimple/pull/674 Bumps [org.mockito:mockito-junit-jupiter](https://github.com/mockito/mockito) from 5.12.0 to 5.13.0. Release notes Sourced from https://github.com/mockito/mockito/releases";>org.mockito:mockito-junit-jupiter's releases. v5.13.0 Changelog generated by https://github.com/shipkit/shipkit-changelog";>Shipkit Changelog Gradle Plugin 5.13.0 2024-08-27 - https://github.com/mockito/mockito/compare/v5.12.0...v5.13.0";>43 commit(s) by Breno A, Caleb Cushing, Jinwoo, Kurt Alfred Kluever, Stefano Cordio, Thach Le, dependabot[bot] Bump versions.bytebuddy from 1.14.19 to 1.15.0 [(https://redirect.github.com/mockito/mockito/issues/3429";>#3429)](https://redirect.github.com/mockito/mockito/pull/3429";>mockito/mockito#3429) Bump org.jetbrains.kotlin:kotlin-stdlib from 2.0.10 to 2.0.20 [(https://redirect.github.com/mockito/mockito/issues/3427";>#3427)](https://redirect.github.com/mockito/mockito/pull/3427";>mockito/mockito#3427) Bump org.junit.platform:junit-platform-launcher from 1.10.3 to 1.11.0 [(https://redirect.github.com/mockito/mockito/issues/3425";>#3425)](https://redirect.github.com/mockito/mockito/pull/3425";>mockito/mockito#3425) Bump com.gradle.enterprise from 3.17.6 to 3.18 [(https://redirect.github.com/mockito/mockito/issues/3423";>#3423)](https://redirect.github.com/mockito/mockito/pull/3423";>mockito/mockito#3423) Fix a typo in InjectMocks [(https://redirect.github.com/mockito/mockito/issues/3422";>#3422)](https://redirect.github.com/mockito/mockito/pull/3422";>mockito/mockito#3422) Bump versions.bytebuddy from 1.14.18 to 1.14.19 [(https://redirect.github.com/mockito/mockito/issues/3417";>#3417)](https://redirect.github.com/mockito/mockito/pull/3417";>mockito/mockito#3417) Bump androidx.test:runner from 1.6.1 to 1.6.2 [(https://redirect.github.com/mockito/mockito/issues/3415";>#3415)](https://redirect.github.com/mockito/mockito/pull/3415";>mockito/mockito#3415) Bump versions.junitJupiter from 5.10.3 to 5.11.0 [(https://redirect.github.com/mockito/mockito/issues/3413";>#3413)](https://redirect.github.com/mockito/mockito/pull/3413";>mockito/mockito#3413) Bump org.jetbrains.kotlin:kotlin-stdlib from 2.0.0 to 2.0.10 [(https://redirect.github.com/mockito/mockito/issues/3409";>#3409)](https://redirect.github.com/mockito/mockito/pull/3409";>mockito/mockito#3409) Bump org.hamcrest:hamcrest-core from 2.2 to 3.0 [(https://redirect.github.com/mockito/mockito/issues/3408";>#3408)](https://redirect.github.com/mockito/mockito/pull/3408";>mockito/mockito#3408) Bump com.google.googlejavaformat:google-java-format from 1.22.0 to 1.23.0 [(https://redirect.github.com/mockito/mockito/issues/3407";>#3407)](https://redirect.github.com/mockito/mockito/pull/3407";>mockito/mockito#3407) Bump org.shipkit:shipkit-auto-version from 2.0.9 to 2.0.10 [(https://redirect.github.com/mockito/mockito/issues/3405";>#3405)](https://redirect.github.com/mockito/mockito/pull/3405";>mockito/mockito#3405) Bump com.gradle.enterprise from 3.17.5 to 3.17.6 [(https://redirect.github.com/mockito/mockito/issues/3404";>#3404)](https://redirect.github.com/mockito/mockito/pull/3404";>mockito/mockito#3404) Bump gradle/wrapper-validation-action from 3.4.2 to 3.5.0 [(https://redirect.github.com/mockito/mockito/issues/3401";>#3401)](https://redirect.github.com/mockito/mockito/pull/3401";>mockito/mockito#3401) Bump org.assertj:assertj-core from 3.26.0 to 3.26.3 [(https://redirect.github.com/mockito/mockito/issues/3398";>#3398)](https://redirect.github.com/mockito/mockito/pull/3398";>mockito/mockito#3398) Bump versions.bytebuddy from 1.14.17 to 1.14.18 [(https://redirect.github.com/mockito/mockito/issues/3397";>#3397)](https://redirect.github.com/mockito/mockito/pull/3397";>mockito/mockito#3397) ci: add .m2 dependencies cache [(https://redirect.github.com/mockito/mockito/issues/3396";>#3396)](https://redirect.github.com/mockito/mockito/pull/3396";>mockito/mockito#3396) Bump org.codehaus.groovy:groovy from 3.0.21 to 3.0.22 [(https://redirect.github.com/mockito/mockito/issues/3394";>#3394)](https://redirect.github.com/mockito/mockito/pull/3394";>mockito/mockito#3394) Bump androidx.test:runner from 1.6.0 to 1.6.1 [(https://redirect.github.com/mockito/mockito/issues/3393";>#3393)](https://redirect.github.com/mockito/mockito/pull/3393";>mockito/mockito#3393) Bump org.junit.platform:junit-platform-launcher from 1.10.2 to 1.10.3 [(https://redirect.github.com/mockito/mockito/issues/3392";>#3392)](https://redirect.github.com/mockito/mockito/pull/3392";>mockito/mockito#3392) Gradle lazy configuration [(https://redirect.github.com/mockito/mockito/issues/3391";>#3391)](https://redirect.github.com/mockito/mockito/pull/3391";>mockito/mockito#3391) Bump androidx.test.ext:junit from 1.2.0 to 1.2.1 [(https://redirect.github.com/mockito/mockito/issues/3388";>#3388)](ht
Re: [PR] Bump org.wildfly.plugins:wildfly-maven-plugin from 3.0.1.Final to 5.0.0.Final [directory-scimple]
dependabot[bot] closed pull request #570: Bump org.wildfly.plugins:wildfly-maven-plugin from 3.0.1.Final to 5.0.0.Final URL: https://github.com/apache/directory-scimple/pull/570 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[PR] Bump org.wildfly.plugins:wildfly-maven-plugin from 3.0.1.Final to 5.0.1.Final [directory-scimple]
dependabot[bot] opened a new pull request, #676: URL: https://github.com/apache/directory-scimple/pull/676 Bumps [org.wildfly.plugins:wildfly-maven-plugin](https://github.com/wildfly/wildfly-maven-plugin) from 3.0.1.Final to 5.0.1.Final. Release notes Sourced from https://github.com/wildfly/wildfly-maven-plugin/releases";>org.wildfly.plugins:wildfly-maven-plugin's releases. 5.0.1.Final What's Changed Allow the "file:relative/path" URL notation for manifest coordinate by https://github.com/TomasHofman";>@TomasHofman in https://redirect.github.com/wildfly/wildfly-maven-plugin/pull/517";>wildfly/wildfly-maven-plugin#517 Fix for WFMP-254, Dependency on maven-core should be provided by https://github.com/jfdenise";>@jfdenise in https://redirect.github.com/wildfly/wildfly-maven-plugin/pull/531";>wildfly/wildfly-maven-plugin#531 Fix for WFMP-255, Fix Galleon Options code snippet by https://github.com/jfdenise";>@jfdenise in https://redirect.github.com/wildfly/wildfly-maven-plugin/pull/532";>wildfly/wildfly-maven-plugin#532 [WFMP-256] Do not allow null keys or values to be added as environmen… by https://github.com/jamezp";>@jamezp in https://redirect.github.com/wildfly/wildfly-maven-plugin/pull/535";>wildfly/wildfly-maven-plugin#535 [WFMP-259] Add a dependency for the plexus-utils used by the execute-… by https://github.com/jamezp";>@jamezp in https://redirect.github.com/wildfly/wildfly-maven-plugin/pull/537";>wildfly/wildfly-maven-plugin#537 Various docs updates, upgrade WildFly to 32 and using the plugin itself for provisioning the test servers by https://github.com/jamezp";>@jamezp in https://redirect.github.com/wildfly/wildfly-maven-plugin/pull/538";>wildfly/wildfly-maven-plugin#538 [WFMP-260] Bump org.wildfly.glow:wildfly-glow-core from 1.0.0.Final to 1.0.6.Final by https://github.com/dependabot";>@dependabot in https://redirect.github.com/wildfly/wildfly-maven-plugin/pull/533";>wildfly/wildfly-maven-plugin#533 Bump version.org.jboss.galleon from 6.0.0.Final to 6.0.1.Final by https://github.com/dependabot";>@dependabot in https://redirect.github.com/wildfly/wildfly-maven-plugin/pull/526";>wildfly/wildfly-maven-plugin#526 [WFMP-262]: Allow to add labels to the images. by https://github.com/jamezp";>@jamezp in https://redirect.github.com/wildfly/wildfly-maven-plugin/pull/545";>wildfly/wildfly-maven-plugin#545 [WFMP-261] Deprecate the ApplicationImageInfo in favor of using param… by https://github.com/jamezp";>@jamezp in https://redirect.github.com/wildfly/wildfly-maven-plugin/pull/544";>wildfly/wildfly-maven-plugin#544 Bump org.mockito:mockito-core from 5.11.0 to 5.12.0 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/wildfly/wildfly-maven-plugin/pull/542";>wildfly/wildfly-maven-plugin#542 Add the https://github.com/since";>@since 5.0 on a few attributes that seem to have been missed. by https://github.com/jamezp";>@jamezp in https://redirect.github.com/wildfly/wildfly-maven-plugin/pull/552";>wildfly/wildfly-maven-plugin#552 [WFMP-264] Bump version.org.jboss.logging.jboss-logging from 3.5.3.Final to 3.6.0.Final by https://github.com/marko-bekhta";>@marko-bekhta in https://redirect.github.com/wildfly/wildfly-maven-plugin/pull/548";>wildfly/wildfly-maven-plugin#548 [WFMP-267] Bump version.org.wildfly.core from 23.0.3.Final to 25.0.1.Final by https://github.com/dependabot";>@dependabot in https://redirect.github.com/wildfly/wildfly-maven-plugin/pull/553";>wildfly/wildfly-maven-plugin#553 [WFMP-268] Bump version.org.jboss.galleon from 6.0.1.Final to 6.0.3.Final by https://github.com/dependabot";>@dependabot in https://redirect.github.com/wildfly/wildfly-maven-plugin/pull/556";>wildfly/wildfly-maven-plugin#556 Replace some hardcoded groupId with project property by https://github.com/jfdenise";>@jfdenise in https://redirect.github.com/wildfly/wildfly-maven-plugin/pull/558";>wildfly/wildfly-maven-plugin#558 Bump org.mockito:mockito-core from 5.12.0 to 5.13.0 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/wildfly/wildfly-maven-plugin/pull/557";>wildfly/wildfly-maven-plugin#557 [WFMP-271] Add name field to the ChannelConfiguration by https://github.com/jmesnil";>@jmesnil in https://redirect.github.com/wildfly/wildfly-maven-plugin/pull/560";>wildfly/wildfly-maven-plugin#560 [WFMP-272] Bump version.org.wildfly.core from 25.0.1.Final to 25.0.2.Final by https://github.com/dependabot";>@dependabot in https://redirect.github.com/wildfly/wildfly-maven-plugin/pull/559";>wildfly/wildfly-maven-plugin#559 [WFMP-273] Bump org.jboss.logging:jboss-logging from 3.6.0.Final to 3.6.1.Final by https://github.com/dependabot";>@dependabot in https://redirect.github.com/wildfly/wildfly-maven-plugin/pull/562";>wildfly/wildfly-maven-plugin#562 [WFMP-244] Allow the known management configuration system properties… by https://github.com/jamezp";>@jamezp i
[PR] Bump com.gradle:common-custom-user-data-maven-extension from 2.0 to 2.0.1 [directory-scimple]
dependabot[bot] opened a new pull request, #675: URL: https://github.com/apache/directory-scimple/pull/675 Bumps [com.gradle:common-custom-user-data-maven-extension](https://github.com/gradle/common-custom-user-data-maven-extension) from 2.0 to 2.0.1. Release notes Sourced from https://github.com/gradle/common-custom-user-data-maven-extension/releases";>com.gradle:common-custom-user-data-maven-extension's releases. 2.0.1 [NEW] JAR contains LICENSE and NOTICE files Commits https://github.com/gradle/common-custom-user-data-maven-extension/commit/7635e5ca6e7dbec7f8b65199d0d398e85b60031c";>7635e5c [maven-release-plugin] prepare release v2.0.1 https://github.com/gradle/common-custom-user-data-maven-extension/commit/58eaf1592641d325c90d038ef497987fc6945dd4";>58eaf15 Create release notes for 2.0.1 https://github.com/gradle/common-custom-user-data-maven-extension/commit/40395eedec15c92fbbc0c44edd52ffc11a724f4b";>40395ee Merge pull request https://redirect.github.com/gradle/common-custom-user-data-maven-extension/issues/241";>#241 from gradle/erichaagdev/license-notice-2 https://github.com/gradle/common-custom-user-data-maven-extension/commit/ba1de901053d40f495dd68d5b5554e1e860894b5";>ba1de90 Ensure this project's LICENSE and NOTICE are the only ones included in JARs https://github.com/gradle/common-custom-user-data-maven-extension/commit/4538056e86d8219010f5f1dd47a277a9af3e";>4538056 Add NOTICE file and include it and LICENSE in all assembled JAR files https://github.com/gradle/common-custom-user-data-maven-extension/commit/9889c7ac3be3680d0e780163e344099115bd459f";>9889c7a Revert "Add NOTICE file and include it and LICENSE in assembled JAR" https://github.com/gradle/common-custom-user-data-maven-extension/commit/43e17842a9e214e276d99135538da4d7519785af";>43e1784 Merge pull request https://redirect.github.com/gradle/common-custom-user-data-maven-extension/issues/240";>#240 from gradle/erichaagdev/license-notice https://github.com/gradle/common-custom-user-data-maven-extension/commit/7dade910e950fce12199b1a4d22c01ff99b1ffd3";>7dade91 Add NOTICE file and include it and LICENSE in assembled JAR https://github.com/gradle/common-custom-user-data-maven-extension/commit/6e251e32ab0bfedb14991770285ec30ba9bd872c";>6e251e3 Merge pull request https://redirect.github.com/gradle/common-custom-user-data-maven-extension/issues/239";>#239 from gradle/wrapperbot/common-custom-user-data-maven-... https://github.com/gradle/common-custom-user-data-maven-extension/commit/3ba34bdc02db7374fefe81167968095233235b2f";>3ba34bd Bump Maven Wrapper from 3.9.8 to 3.9.9 Additional commits viewable in https://github.com/gradle/common-custom-user-data-maven-extension/compare/v2...v2.0.1";>compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the s
[PR] Bump actions/setup-java from 4.2.2 to 4.3.0 [directory-kerby]
dependabot[bot] opened a new pull request, #438: URL: https://github.com/apache/directory-kerby/pull/438 Bumps [actions/setup-java](https://github.com/actions/setup-java) from 4.2.2 to 4.3.0. Release notes Sourced from https://github.com/actions/setup-java/releases";>actions/setup-java's releases. v4.3.0 What's Changed Add support for SapMachine JDK/JRE by https://github.com/Shegox";>@Shegox in https://redirect.github.com/actions/setup-java/issues/614";>#614 steps: - name: Checkout uses: actions/checkout@v4 - name: Setup-java uses: actions/setup-java@v4 with: distribution: ‘sapmachine’ java-version: ’21’ Bug fixes : Fix typos on Corretto by @johnshajiang in [#666](https://github.com/actions/setup-java/issues/666) IBM Semeru Enhancement on arm64 by @mahabaleshwars in [#677](https://github.com/actions/setup-java/issues/677) Resolve Basic Validation Check Failures by @aparnajyothi-y in [#682](https://github.com/actions/setup-java/issues/682) New Contributors : @johnshajiang made their first contribution in [#666](https://github.com/actions/setup-java/issues/666) @Shegox made their first contribution in [#614](https://github.com/actions/setup-java/issues/614) Full Changelog: https://github.com/actions/setup-java/compare/v4...v4.3.0";>https://github.com/actions/setup-java/compare/v4...v4.3.0 Commits https://github.com/actions/setup-java/commit/2dfa2011c5b2a0f1489bf9e433881c92c1631f88";>2dfa201 basic validation failure fix (https://redirect.github.com/actions/setup-java/issues/682";>#682) https://github.com/actions/setup-java/commit/7467385c615a13cecd14d5768e738332968d0792";>7467385 feat: add support for SapMachine JDK/JRE (https://redirect.github.com/actions/setup-java/issues/614";>#614) https://github.com/actions/setup-java/commit/8e04ddff28554375a9a1096c888a2ef2c9803cd7";>8e04ddf Update Error Messages and Fix Architecture Detection for IBM Semeru (https://redirect.github.com/actions/setup-java/issues/677";>#677) https://github.com/actions/setup-java/commit/67fbd726daaf08212a7b021c1c4d117f94a81dd3";>67fbd72 Fix typos on Corretto (https://redirect.github.com/actions/setup-java/issues/665";>#665) (https://redirect.github.com/actions/setup-java/issues/666";>#666) See full diff in https://github.com/actions/setup-java/compare/6a0805fcefea3d4657a47ac4c165951e33482018...2dfa2011c5b2a0f1489bf9e433881c92c1631f88";>compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To u
[PR] Bump github/codeql-action from 3.26.6 to 3.26.7 [directory-kerby]
dependabot[bot] opened a new pull request, #437: URL: https://github.com/apache/directory-kerby/pull/437 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.6 to 3.26.7. Changelog Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md";>github/codeql-action's changelog. CodeQL Action Changelog See the https://github.com/github/codeql-action/releases";>releases page for the relevant changes to the CodeQL CLI and language packs. Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers. [UNRELEASED] No user facing changes. 3.26.7 - 13 Sep 2024 Update default CodeQL bundle version to 2.18.4. https://redirect.github.com/github/codeql-action/pull/2471";>#2471 3.26.6 - 29 Aug 2024 Update default CodeQL bundle version to 2.18.3. https://redirect.github.com/github/codeql-action/pull/2449";>#2449 3.26.5 - 23 Aug 2024 Fix an issue where the csrutil system call used for telemetry would fail on MacOS ARM machines with System Integrity Protection disabled. https://redirect.github.com/github/codeql-action/pull/2441";>#2441 3.26.4 - 21 Aug 2024 Deprecation: The add-snippets input on the analyze Action is deprecated and will be removed in the first release in August 2025. https://redirect.github.com/github/codeql-action/pull/2436";>#2436 Fix an issue where the disk usage system call used for telemetry would fail on MacOS ARM machines with System Integrity Protection disabled, and then surface a warning. The system call is now disabled for these machines. https://redirect.github.com/github/codeql-action/pull/2434";>#2434 3.26.3 - 19 Aug 2024 Fix an issue where the CodeQL Action could not write diagnostic messages on Windows. This issue did not impact analysis quality. https://redirect.github.com/github/codeql-action/pull/2430";>#2430 3.26.2 - 14 Aug 2024 Update default CodeQL bundle version to 2.18.2. https://redirect.github.com/github/codeql-action/pull/2417";>#2417 3.26.1 - 13 Aug 2024 No user facing changes. 3.26.0 - 06 Aug 2024 Deprecation: Swift analysis on Ubuntu runner images is no longer supported. Please migrate to a macOS runner if this affects you. https://redirect.github.com/github/codeql-action/pull/2403";>#2403 Bump the minimum CodeQL bundle version to 2.13.5. https://redirect.github.com/github/codeql-action/pull/2408";>#2408 3.25.15 - 26 Jul 2024 Update default CodeQL bundle version to 2.18.1. https://redirect.github.com/github/codeql-action/pull/2385";>#2385 3.25.14 - 25 Jul 2024 ... (truncated) Commits https://github.com/github/codeql-action/commit/8214744c546c1e5c8f03dde8fab3a7353211988d";>8214744 Merge pull request https://redirect.github.com/github/codeql-action/issues/2478";>#2478 from github/update-v3.26.7-4a01ec798 https://github.com/github/codeql-action/commit/a3b3e07cecabba6fce92183951fcd7152dc3795d";>a3b3e07 Update changelog for v3.26.7 https://github.com/github/codeql-action/commit/4a01ec798636a8442fbe054c7795e139a5960d29";>4a01ec7 Merge pull request https://redirect.github.com/github/codeql-action/issues/2474";>#2474 from github/aeisenberg/always-upload-eslint-sarif https://github.com/github/codeql-action/commit/762dbaeeb79f3e01fe9f52f151cb17042dab7c84";>762dbae Merge pull request https://redirect.github.com/github/codeql-action/issues/2471";>#2471 from github/update-bundle/codeql-bundle-v2.18.4 https://github.com/github/codeql-action/commit/0d0f998f2891417c3609fda383e08753d605c77e";>0d0f998 Always upload eslint.sarif https://github.com/github/codeql-action/commit/e817992b3db357f199b6e99216d3bf853dafd0fc";>e817992 Merge pull request https://redirect.github.com/github/codeql-action/issues/2469";>#2469 from github/aeisenberg/upload-eslint-sarif https://github.com/github/codeql-action/commit/49021ad7f5a68089739ccf2e66e25b7e531c6bcf";>49021ad Merge pull request https://redirect.github.com/github/codeql-action/issues/2472";>#2472 from rvermeulen/rvermeulen/update-release-branch-authz https://github.com/github/codeql-action/commit/56b841888472b4f479ef3b9c0643f73434756177";>56b8418 Ignore suppressed alerts https://github.com/github/codeql-action/commit/f824adbf9bf63ebfa2c4278e0637d65d20b4ddbb";>f824adb Merge branch 'main' into rvermeulen/update-release-branch-authz https://github.com/github/codeql-action/commit/8d9ed0b40e24a3209eda0edca170ba215148ed22";>8d9ed0b Add changelog note Additional commits viewable in https://github.com/github/code
[PR] Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.5 to 3.2.6 [directory-project]
dependabot[bot] opened a new pull request, #68: URL: https://github.com/apache/directory-project/pull/68 Bumps [org.apache.maven.plugins:maven-gpg-plugin](https://github.com/apache/maven-gpg-plugin) from 3.2.5 to 3.2.6. Release notes Sourced from https://github.com/apache/maven-gpg-plugin/releases";>org.apache.maven.plugins:maven-gpg-plugin's releases. 3.2.6 https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317521&version=12354997";>Release Notes - Maven GPG Plugin - Version 3.2.6 What's Changed [MGPG-135] Support Overriding / Enhance the signer in AbstractGpgMojo by https://github.com/laeubi";>@laeubi in https://redirect.github.com/apache/maven-gpg-plugin/pull/112";>apache/maven-gpg-plugin#112 Bump org.apache.maven.plugins:maven-invoker-plugin from 3.7.0 to 3.8.0 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/apache/maven-gpg-plugin/pull/114";>apache/maven-gpg-plugin#114 [MGPG-140] Update Maven to 3.9.9 by https://github.com/cstamas";>@cstamas in https://redirect.github.com/apache/maven-gpg-plugin/pull/116";>apache/maven-gpg-plugin#116 [MGPG-138] Drop direct use of plexus-cipher and secdispatcher by https://github.com/cstamas";>@cstamas in https://redirect.github.com/apache/maven-gpg-plugin/pull/115";>apache/maven-gpg-plugin#115 [MGPG-141] Remove use of deprecated classes by https://github.com/cstamas";>@cstamas in https://redirect.github.com/apache/maven-gpg-plugin/pull/117";>apache/maven-gpg-plugin#117 Add FAQ for "no pinentry" issue by https://github.com/cstamas";>@cstamas in https://redirect.github.com/apache/maven-gpg-plugin/pull/118";>apache/maven-gpg-plugin#118 New Contributors https://github.com/laeubi";>@laeubi made their first contribution in https://redirect.github.com/apache/maven-gpg-plugin/pull/112";>apache/maven-gpg-plugin#112 Full Changelog: https://github.com/apache/maven-gpg-plugin/compare/maven-gpg-plugin-3.2.5...maven-gpg-plugin-3.2.6";>https://github.com/apache/maven-gpg-plugin/compare/maven-gpg-plugin-3.2.5...maven-gpg-plugin-3.2.6 Commits https://github.com/apache/maven-gpg-plugin/commit/1c9a14c0eec9dae40baa4a5db674e6a7ec012be4";>1c9a14c [maven-release-plugin] prepare release maven-gpg-plugin-3.2.6 https://github.com/apache/maven-gpg-plugin/commit/bbe6156400212b3fe063d218399ba09c24795f44";>bbe6156 Add FAQ for "no pinentry" issue (https://redirect.github.com/apache/maven-gpg-plugin/issues/118";>#118) https://github.com/apache/maven-gpg-plugin/commit/5b9427333ab4b7b48b297a8b9a4158688211f14a";>5b94273 [MGPG-141] Remove use of deprecated classes (https://redirect.github.com/apache/maven-gpg-plugin/issues/117";>#117) https://github.com/apache/maven-gpg-plugin/commit/afdfd28bab4a0530cfd655397716a36adc1644b6";>afdfd28 [MGPG-138] Drop direct use of plexus-cipher and secdispatcher (https://redirect.github.com/apache/maven-gpg-plugin/issues/115";>#115) https://github.com/apache/maven-gpg-plugin/commit/7516e7c73d6e5c8c3d6c2cbab9d55deb3987f388";>7516e7c [MGPG-140] Update Maven to 3.9.9 (https://redirect.github.com/apache/maven-gpg-plugin/issues/116";>#116) https://github.com/apache/maven-gpg-plugin/commit/4ec571f561e330209189eb3c4387aaae0b37fb96";>4ec571f [MGPG-139] Bump org.apache.maven.plugins:maven-invoker-plugin from 3.7.0 to 3... https://github.com/apache/maven-gpg-plugin/commit/1126b7b09cb8a4540e35f62146b1198bcadeb795";>1126b7b use new Reproducible Central badge endpoint https://github.com/apache/maven-gpg-plugin/commit/1b40a0554b55c1d8a1c5da662e848688aa346aed";>1b40a05 [MGPG-135] Support Overriding / Enhance the signer in AbstractGpgMojo (https://redirect.github.com/apache/maven-gpg-plugin/issues/112";>#112) https://github.com/apache/maven-gpg-plugin/commit/3a31714e9cbdde86a6b12f1ef05d5c60252fef4a";>3a31714 [maven-release-plugin] prepare for next development iteration See full diff in https://github.com/apache/maven-gpg-plugin/compare/maven-gpg-plugin-3.2.5...maven-gpg-plugin-3.2.6";>compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to i
[PR] Bump actions/setup-java from 4.2.2 to 4.3.0 [directory-ldap-api]
dependabot[bot] opened a new pull request, #133: URL: https://github.com/apache/directory-ldap-api/pull/133 Bumps [actions/setup-java](https://github.com/actions/setup-java) from 4.2.2 to 4.3.0. Release notes Sourced from https://github.com/actions/setup-java/releases";>actions/setup-java's releases. v4.3.0 What's Changed Add support for SapMachine JDK/JRE by https://github.com/Shegox";>@Shegox in https://redirect.github.com/actions/setup-java/issues/614";>#614 steps: - name: Checkout uses: actions/checkout@v4 - name: Setup-java uses: actions/setup-java@v4 with: distribution: ‘sapmachine’ java-version: ’21’ Bug fixes : Fix typos on Corretto by @johnshajiang in [#666](https://github.com/actions/setup-java/issues/666) IBM Semeru Enhancement on arm64 by @mahabaleshwars in [#677](https://github.com/actions/setup-java/issues/677) Resolve Basic Validation Check Failures by @aparnajyothi-y in [#682](https://github.com/actions/setup-java/issues/682) New Contributors : @johnshajiang made their first contribution in [#666](https://github.com/actions/setup-java/issues/666) @Shegox made their first contribution in [#614](https://github.com/actions/setup-java/issues/614) Full Changelog: https://github.com/actions/setup-java/compare/v4...v4.3.0";>https://github.com/actions/setup-java/compare/v4...v4.3.0 Commits https://github.com/actions/setup-java/commit/2dfa2011c5b2a0f1489bf9e433881c92c1631f88";>2dfa201 basic validation failure fix (https://redirect.github.com/actions/setup-java/issues/682";>#682) https://github.com/actions/setup-java/commit/7467385c615a13cecd14d5768e738332968d0792";>7467385 feat: add support for SapMachine JDK/JRE (https://redirect.github.com/actions/setup-java/issues/614";>#614) https://github.com/actions/setup-java/commit/8e04ddff28554375a9a1096c888a2ef2c9803cd7";>8e04ddf Update Error Messages and Fix Architecture Detection for IBM Semeru (https://redirect.github.com/actions/setup-java/issues/677";>#677) https://github.com/actions/setup-java/commit/67fbd726daaf08212a7b021c1c4d117f94a81dd3";>67fbd72 Fix typos on Corretto (https://redirect.github.com/actions/setup-java/issues/665";>#665) (https://redirect.github.com/actions/setup-java/issues/666";>#666) See full diff in https://github.com/actions/setup-java/compare/6a0805fcefea3d4657a47ac4c165951e33482018...2dfa2011c5b2a0f1489bf9e433881c92c1631f88";>compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - T
[PR] Bump github/codeql-action from 3.26.6 to 3.26.7 [directory-ldap-api]
dependabot[bot] opened a new pull request, #132: URL: https://github.com/apache/directory-ldap-api/pull/132 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.6 to 3.26.7. Changelog Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md";>github/codeql-action's changelog. CodeQL Action Changelog See the https://github.com/github/codeql-action/releases";>releases page for the relevant changes to the CodeQL CLI and language packs. Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers. [UNRELEASED] No user facing changes. 3.26.7 - 13 Sep 2024 Update default CodeQL bundle version to 2.18.4. https://redirect.github.com/github/codeql-action/pull/2471";>#2471 3.26.6 - 29 Aug 2024 Update default CodeQL bundle version to 2.18.3. https://redirect.github.com/github/codeql-action/pull/2449";>#2449 3.26.5 - 23 Aug 2024 Fix an issue where the csrutil system call used for telemetry would fail on MacOS ARM machines with System Integrity Protection disabled. https://redirect.github.com/github/codeql-action/pull/2441";>#2441 3.26.4 - 21 Aug 2024 Deprecation: The add-snippets input on the analyze Action is deprecated and will be removed in the first release in August 2025. https://redirect.github.com/github/codeql-action/pull/2436";>#2436 Fix an issue where the disk usage system call used for telemetry would fail on MacOS ARM machines with System Integrity Protection disabled, and then surface a warning. The system call is now disabled for these machines. https://redirect.github.com/github/codeql-action/pull/2434";>#2434 3.26.3 - 19 Aug 2024 Fix an issue where the CodeQL Action could not write diagnostic messages on Windows. This issue did not impact analysis quality. https://redirect.github.com/github/codeql-action/pull/2430";>#2430 3.26.2 - 14 Aug 2024 Update default CodeQL bundle version to 2.18.2. https://redirect.github.com/github/codeql-action/pull/2417";>#2417 3.26.1 - 13 Aug 2024 No user facing changes. 3.26.0 - 06 Aug 2024 Deprecation: Swift analysis on Ubuntu runner images is no longer supported. Please migrate to a macOS runner if this affects you. https://redirect.github.com/github/codeql-action/pull/2403";>#2403 Bump the minimum CodeQL bundle version to 2.13.5. https://redirect.github.com/github/codeql-action/pull/2408";>#2408 3.25.15 - 26 Jul 2024 Update default CodeQL bundle version to 2.18.1. https://redirect.github.com/github/codeql-action/pull/2385";>#2385 3.25.14 - 25 Jul 2024 ... (truncated) Commits https://github.com/github/codeql-action/commit/8214744c546c1e5c8f03dde8fab3a7353211988d";>8214744 Merge pull request https://redirect.github.com/github/codeql-action/issues/2478";>#2478 from github/update-v3.26.7-4a01ec798 https://github.com/github/codeql-action/commit/a3b3e07cecabba6fce92183951fcd7152dc3795d";>a3b3e07 Update changelog for v3.26.7 https://github.com/github/codeql-action/commit/4a01ec798636a8442fbe054c7795e139a5960d29";>4a01ec7 Merge pull request https://redirect.github.com/github/codeql-action/issues/2474";>#2474 from github/aeisenberg/always-upload-eslint-sarif https://github.com/github/codeql-action/commit/762dbaeeb79f3e01fe9f52f151cb17042dab7c84";>762dbae Merge pull request https://redirect.github.com/github/codeql-action/issues/2471";>#2471 from github/update-bundle/codeql-bundle-v2.18.4 https://github.com/github/codeql-action/commit/0d0f998f2891417c3609fda383e08753d605c77e";>0d0f998 Always upload eslint.sarif https://github.com/github/codeql-action/commit/e817992b3db357f199b6e99216d3bf853dafd0fc";>e817992 Merge pull request https://redirect.github.com/github/codeql-action/issues/2469";>#2469 from github/aeisenberg/upload-eslint-sarif https://github.com/github/codeql-action/commit/49021ad7f5a68089739ccf2e66e25b7e531c6bcf";>49021ad Merge pull request https://redirect.github.com/github/codeql-action/issues/2472";>#2472 from rvermeulen/rvermeulen/update-release-branch-authz https://github.com/github/codeql-action/commit/56b841888472b4f479ef3b9c0643f73434756177";>56b8418 Ignore suppressed alerts https://github.com/github/codeql-action/commit/f824adbf9bf63ebfa2c4278e0637d65d20b4ddbb";>f824adb Merge branch 'main' into rvermeulen/update-release-branch-authz https://github.com/github/codeql-action/commit/8d9ed0b40e24a3209eda0edca170ba215148ed22";>8d9ed0b Add changelog note Additional commits viewable in https://github.com/github/c
Re: [PR] Add tests for 404 when updating SCIM resources [directory-scimple]
bdemers merged PR #632: URL: https://github.com/apache/directory-scimple/pull/632 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump org.apache.commons:commons-lang3 from 3.16.0 to 3.17.0 [directory-scimple]
bdemers merged PR #667: URL: https://github.com/apache/directory-scimple/pull/667 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump version.spring-boot from 3.3.2 to 3.3.3 [directory-scimple]
bdemers merged PR #673: URL: https://github.com/apache/directory-scimple/pull/673 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump com.github.spotbugs:spotbugs-maven-plugin from 4.8.6.2 to 4.8.6.3 [directory-scimple]
bdemers merged PR #669: URL: https://github.com/apache/directory-scimple/pull/669 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Remove disabled test and corresponding dead code in Mapper [directory-scimple]
bdemers merged PR #664: URL: https://github.com/apache/directory-scimple/pull/664 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump version.quarkus from 3.14.1 to 3.14.2 [directory-scimple]
bdemers merged PR #672: URL: https://github.com/apache/directory-scimple/pull/672 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.4.0 to 3.5.0 [directory-scimple]
bdemers merged PR #670: URL: https://github.com/apache/directory-scimple/pull/670 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump io.swagger.core.v3:swagger-annotations from 2.2.22 to 2.2.23 [directory-scimple]
bdemers merged PR #671: URL: https://github.com/apache/directory-scimple/pull/671 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Publish SBOM durring release [directory-scimple]
bdemers merged PR #665: URL: https://github.com/apache/directory-scimple/pull/665 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Minor Javdoc cleanup [directory-scimple]
bdemers merged PR #666: URL: https://github.com/apache/directory-scimple/pull/666 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[PR] Bump com.nimbusds:nimbus-jose-jwt from 9.41 to 9.41.1 [directory-kerby]
dependabot[bot] opened a new pull request, #436: URL: https://github.com/apache/directory-kerby/pull/436 Bumps [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) from 9.41 to 9.41.1. Changelog Sourced from https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt";>com.nimbusds:nimbus-jose-jwt's changelog. 9.41 (2024-09-10) * JWEHeader receives typed support for the "iss" (issuer), "sub" (subject) and "aud" (audience) claims as replicated JWE header parameters. * Updates the JWE encryption with "PBES2-HS256+A128KW", "PBES2-HS384+A192KW" and "PBES2-HS512+A256KW" to use a JCA provider instead of a local PBKDF2 implementation. "PBKDF2WithHmacSHA256" support is available since Java 8 and Android API level 26 (iss https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/561";>#561). * For "RSA-OAEP" and "RSA-OAEP-256" the cipher mode should be either WRAP or UNWRAP, not ENCRYPT or DECRYPT. Otherwise it will throw an exception when used with a FIPS provider (iss https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/564";>#564). 9.41.1 (2024-09-12) * Fixes JSONObjectUtils.parse((String)null) regression, must throw ParseException, not NullPointerException. Regression introduced in 9.24 after dependency switch from JSON Smart to Gson (iss https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/557";>#557). * Fixes JWKSet.parse((String)null) regression, must throw ParseException, not NullPointerException (iss https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/557";>#557). * The ParseException thrown by X509CertChainUtils.parse(List) must include the message from the underlying java.security.cert.CertificateException (iss https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/565";>#565). Commits https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/70b16ac49b425a4d7d44b081ad97b184712f70c8";>70b16ac [maven-release-plugin] prepare for next development iteration https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/a6eefbfd476667df0adb474a85f61503d2eae1b7";>a6eefbf Adds BC provider test to PBKDF2Test https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/b2e803c85c600705bcb3534f6eb5d6b736c206f5";>b2e803c The ParseException thrown by X509CertChainUtils.parse(List) must incl... https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/9c05365bfb7d92c0208937565a7dce6c214ad379";>9c05365 Fixes X509CertChainUtilsTest.testParse_includeUnderlyingCertificateException ... https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/91c23268fe0e0317e8f7f709c9069803abe0ed03";>91c2326 Adds JWKSetTest.testParseNullString test (iss https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/557";>#557) https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/04bd9c1ee1c06d2af7d2ae0f89dc538ef0153c57";>04bd9c1 Fixes JSONObjectUtils.parse((String)null) regression, must throw ParseExcepti... https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/fa2cffe6b8ffccfcb44f6daa798c2c8ed7b671b5";>fa2cffe [maven-release-plugin] prepare release 9.41.1 See full diff in https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/9.41.1..9.41";>compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependa
Re: [PR] Bump actions/upload-artifact from 4.3.6 to 4.4.0 [directory-kerby]
coheigea merged PR #432: URL: https://github.com/apache/directory-kerby/pull/432 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump org.apache.maven.plugins:maven-surefire-plugin from 3.4.0 to 3.5.0 [directory-kerby]
coheigea merged PR #431: URL: https://github.com/apache/directory-kerby/pull/431 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump github/codeql-action from 3.26.5 to 3.26.6 [directory-kerby]
coheigea merged PR #433: URL: https://github.com/apache/directory-kerby/pull/433 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump netty.version from 4.1.112.Final to 4.1.113.Final [directory-kerby]
coheigea merged PR #434: URL: https://github.com/apache/directory-kerby/pull/434 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump ch.qos.logback:logback-classic from 1.5.7 to 1.5.8 [directory-server]
coheigea merged PR #227: URL: https://github.com/apache/directory-server/pull/227 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[PR] Bump version.quarkus from 3.14.1 to 3.14.2 [directory-scimple]
dependabot[bot] opened a new pull request, #672: URL: https://github.com/apache/directory-scimple/pull/672 Bumps `version.quarkus` from 3.14.1 to 3.14.2. Updates `io.quarkus.platform:quarkus-bom` from 3.14.1 to 3.14.2 Commits https://github.com/quarkusio/quarkus-platform/commit/3639b1508334e8add213662a236381d666a8b180";>3639b15 [maven-release-plugin] prepare release 3.14.2 https://github.com/quarkusio/quarkus-platform/commit/0ea21dd6142f13c6bbf710fae910ab406a0263fd";>0ea21dd Merge pull request https://redirect.github.com/quarkusio/quarkus-platform/issues/1266";>#1266 from gsmet/quarkus-3.14.2 https://github.com/quarkusio/quarkus-platform/commit/f35058fcfd66842a260d7146310fba3e20f70783";>f35058f Upgrade to Quarkus 3.14.2 https://github.com/quarkusio/quarkus-platform/commit/4e3f4cf7f2a5a84a02c1dda0a07c809138115916";>4e3f4cf [maven-release-plugin] prepare for next development iteration See full diff in https://github.com/quarkusio/quarkus-platform/compare/3.14.1...3.14.2";>compare view Updates `io.quarkus.platform:quarkus-maven-plugin` from 3.14.1 to 3.14.2 Commits https://github.com/quarkusio/quarkus-platform/commit/3639b1508334e8add213662a236381d666a8b180";>3639b15 [maven-release-plugin] prepare release 3.14.2 https://github.com/quarkusio/quarkus-platform/commit/0ea21dd6142f13c6bbf710fae910ab406a0263fd";>0ea21dd Merge pull request https://redirect.github.com/quarkusio/quarkus-platform/issues/1266";>#1266 from gsmet/quarkus-3.14.2 https://github.com/quarkusio/quarkus-platform/commit/f35058fcfd66842a260d7146310fba3e20f70783";>f35058f Upgrade to Quarkus 3.14.2 https://github.com/quarkusio/quarkus-platform/commit/4e3f4cf7f2a5a84a02c1dda0a07c809138115916";>4e3f4cf [maven-release-plugin] prepare for next development iteration See full diff in https://github.com/quarkusio/quarkus-platform/compare/3.14.1...3.14.2";>compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[PR] Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.4.0 to 3.5.0 [directory-scimple]
dependabot[bot] opened a new pull request, #670: URL: https://github.com/apache/directory-scimple/pull/670 Bumps [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) from 3.4.0 to 3.5.0. Commits https://github.com/apache/maven-surefire/commit/c78365f5a229155e7d0cfad2913445fc01d7a959";>c78365f [maven-release-plugin] prepare release surefire-3.5.0 https://github.com/apache/maven-surefire/commit/05e4681f38f53c2a54b7671291ca02dc63586a98";>05e4681 [SUREFIRE-2227] Dynamically calculate xrefTestLocation https://github.com/apache/maven-surefire/commit/f1a419a1457e5a83f9deb07a700a1376487f72ed";>f1a419a [SUREFIRE-2228] Upgrade to Doxia 2.0.0 Milestone Stack https://github.com/apache/maven-surefire/commit/5e14d4fb4ddf6e4ce4af0f6632398c7ba8df2325";>5e14d4f [SUREFIRE-2161] Align Mojo class names and output names https://github.com/apache/maven-surefire/commit/c0784ab18a9b3830812be4cf6bc147f5c5285005";>c0784ab Bump org.apache.commons:commons-compress from 1.27.0 to 1.27.1 https://github.com/apache/maven-surefire/commit/79ea7178aaf73190f4aead3d38d4b8276d7dd1b7";>79ea717 [SUREFIRE-2256] Upgrade to Parent 43 https://github.com/apache/maven-surefire/commit/4648b47403fb9a43025892b22f361f2bef5f057c";>4648b47 add Reproducible Builds badge https://github.com/apache/maven-surefire/commit/f64c1b3148626ece80726b74208c4b62641a40e3";>f64c1b3 [maven-release-plugin] prepare for next development iteration See full diff in https://github.com/apache/maven-surefire/compare/surefire-3.4.0...surefire-3.5.0";>compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[PR] Bump com.github.spotbugs:spotbugs-maven-plugin from 4.8.6.2 to 4.8.6.3 [directory-scimple]
dependabot[bot] opened a new pull request, #669: URL: https://github.com/apache/directory-scimple/pull/669 Bumps [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) from 4.8.6.2 to 4.8.6.3. Release notes Sourced from https://github.com/spotbugs/spotbugs-maven-plugin/releases";>com.github.spotbugs:spotbugs-maven-plugin's releases. Spotbugs Maven Plugin 4.8.6.3 Ability to disable logs in quite mode (spotbugs.quiet) https://redirect.github.com/spotbugs/spotbugs-maven-plugin/issues/842";>#842 Fix output directory per https://redirect.github.com/spotbugs/spotbugs-maven-plugin/issues/807";>#807 Update plugins / dependencies Fix tag used to build spotbugs during GHA Use inject annotation from jsr330 instead of deprecated component annotation Build Remove old overrides from pom as addressed Cleanup javadocs Remove snapshot from javadocs at 2.1 as non existent Order attribute order of annotations Use log commonly throughout (newer coded used getLog in one place) Sort imports Add opens for java.lang and java.util for site build as needed on newer jdks Correct GHA for site distribution Delete duplicate codeql github action Speed up github actions Commits https://github.com/spotbugs/spotbugs-maven-plugin/commit/4d122f59709a13234491915a252d804ae4e8c550";>4d122f5 [maven-release-plugin] prepare release spotbugs-maven-plugin-4.8.6.3 https://github.com/spotbugs/spotbugs-maven-plugin/commit/08e4e4997b5f42a1a3668e6b24e20629b6845c9d";>08e4e49 [mvn] Move deprecated component to jsr330 inject https://github.com/spotbugs/spotbugs-maven-plugin/commit/62edad6f704aa2dbb3d263f7e5dbc4acb001e1a6";>62edad6 [pom] Set version to 4.8.6.3 snapshot https://github.com/spotbugs/spotbugs-maven-plugin/commit/ec0c400c4a7f5710e0192c7ac52a2ff6bc7ff86d";>ec0c400 [pom] Bump surefire to 3.5.0 https://github.com/spotbugs/spotbugs-maven-plugin/commit/26cfa3810677945fae857015900f702d5bd0a41a";>26cfa38 Merge pull request https://redirect.github.com/spotbugs/spotbugs-maven-plugin/issues/878";>#878 from spotbugs/renovate/javaparserversion https://github.com/spotbugs/spotbugs-maven-plugin/commit/72a83d4f4eeba42baebf5f3ff07391eb88f1b6fd";>72a83d4 Update dependency com.github.javaparser:javaparser-core to v3.26.2 https://github.com/spotbugs/spotbugs-maven-plugin/commit/494c61eb1308bbf79a5ccd92d8eb39e23bdfda2c";>494c61e Merge pull request https://redirect.github.com/spotbugs/spotbugs-maven-plugin/issues/877";>#877 from hazendaz/master https://github.com/spotbugs/spotbugs-maven-plugin/commit/2e0118511499529b8248f3aa2593d8cd37eabf23";>2e01185 [GHA] Cleanup duplicate running in integration tests https://github.com/spotbugs/spotbugs-maven-plugin/commit/c8a6f4e02487e3a255e7630eb2d6f7c82140f45f";>c8a6f4e Merge pull request https://redirect.github.com/spotbugs/spotbugs-maven-plugin/issues/876";>#876 from hazendaz/master https://github.com/spotbugs/spotbugs-maven-plugin/commit/296a9a9021d504440e19f15ab98e28bc2f95f7e1";>296a9a9 [GHA] Remove extra clean option as not needed Additional commits viewable in https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-4.8.6.2...spotbugs-maven-plugin-4.8.6.3";>compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@
Re: [PR] Bump ch.qos.logback:logback-classic from 1.4.12 to 1.5.7 [directory-scimple]
dependabot[bot] closed pull request #651: Bump ch.qos.logback:logback-classic from 1.4.12 to 1.5.7 URL: https://github.com/apache/directory-scimple/pull/651 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump ch.qos.logback:logback-classic from 1.4.12 to 1.5.7 [directory-scimple]
dependabot[bot] commented on PR #651: URL: https://github.com/apache/directory-scimple/pull/651#issuecomment-2338661590 Superseded by #668. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Minor Javdoc cleanup [directory-scimple]
github-actions[bot] commented on PR #666: URL: https://github.com/apache/directory-scimple/pull/666#issuecomment-2336518905 View details about the 'Maven Verify (with Java 21-zulu)' build [1340](https://github.com/apache/directory-scimple/actions/runs/10756304029/job/29828995907) in the [Build Scan]() 📊 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Publish SBOM durring release [directory-scimple]
github-actions[bot] commented on PR #665: URL: https://github.com/apache/directory-scimple/pull/665#issuecomment-2336518443 View details about the 'Maven Verify (with Java 17-zulu)' build [1339](https://github.com/apache/directory-scimple/actions/runs/10756290750/job/29828969940) in the [Build Scan]() 📊 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Publish SBOM durring release [directory-scimple]
github-actions[bot] commented on PR #665: URL: https://github.com/apache/directory-scimple/pull/665#issuecomment-2336518437 View details about the 'Maven Verify (with Java 21-zulu)' build [1339](https://github.com/apache/directory-scimple/actions/runs/10756290750/job/29828969876) in the [Build Scan]() 📊 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[PR] Minor Javdoc cleanup [directory-scimple]
bdemers opened a new pull request, #666: URL: https://github.com/apache/directory-scimple/pull/666 Mostly the result of IntelliJ inspections and seeing warnings when Javadoc runs at release time -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Remove disabled test and corresponding dead code in Mapper [directory-scimple]
github-actions[bot] commented on PR #664: URL: https://github.com/apache/directory-scimple/pull/664#issuecomment-2336518148 View details about the 'Maven Verify (with Java 21-zulu)' build [1338](https://github.com/apache/directory-scimple/actions/runs/10756281685/job/29828956627) in the [Build Scan]() 📊 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Publish SBOM durring release [directory-scimple]
github-actions[bot] commented on PR #665: URL: https://github.com/apache/directory-scimple/pull/665#issuecomment-2336518004 View details about the 'Apache Rat - Check' build [71](https://github.com/apache/directory-scimple/actions/runs/10756290743/job/29828969868) in the [Build Scan]() 📊 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[PR] Remove disabled test and corresponding dead code in Mapper [directory-scimple]
bdemers opened a new pull request, #664: URL: https://github.com/apache/directory-scimple/pull/664 (no comment) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[PR] Bump ch.qos.logback:logback-classic from 1.5.7 to 1.5.8 [directory-server]
dependabot[bot] opened a new pull request, #227: URL: https://github.com/apache/directory-server/pull/227 Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.7 to 1.5.8. Commits https://github.com/qos-ch/logback/commit/92e1a5ea0adc3bc215fc9441fb711fb5726974e4";>92e1a5e prepare release 1.5.8 https://github.com/qos-ch/logback/commit/76d8dd86022daddf8733d11745f1e9fc42bc4a06";>76d8dd8 Update README.md, comment out CI action results https://github.com/qos-ch/logback/commit/d7e0d59cbed5c3904b00166e1bd54f658ff16f2e";>d7e0d59 Merge branch 'master' of github.com:qos-ch/logback https://github.com/qos-ch/logback/commit/fe3bf9d56533614864385ab7e35c29bf702b7e56";>fe3bf9d os.name property is expected to be Mac OS X on Apple computers https://github.com/qos-ch/logback/commit/980627396335ffb0eeb94e5a5a3e18f963494833";>9806273 Update README.md https://github.com/qos-ch/logback/commit/c45f110ba2f97cfe78e6b4ff28f7fa83d3c7a0ff";>c45f110 check for Mac OS X https://github.com/qos-ch/logback/commit/00c6f5eaf3a42b8ab012a6419fb24fa327ca6ef8";>00c6f5e what is the os.name https://github.com/qos-ch/logback/commit/7d03a42f4bd41e9eabaa8fc001d70c4f8aa122ef";>7d03a42 update actions/setup https://github.com/qos-ch/logback/commit/edacb3b99083274f1f08f68729790d661e051c4f";>edacb3b skip email sent termination test on MacOs https://github.com/qos-ch/logback/commit/3b5d041d03f88b3f7a6440cb41b2b98f8dd1018f";>3b5d041 allow more time for timetout Additional commits viewable in https://github.com/qos-ch/logback/compare/v_1.5.7...v_1.5.8";>compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[PR] Bump netty.version from 4.1.112.Final to 4.1.113.Final [directory-kerby]
dependabot[bot] opened a new pull request, #434: URL: https://github.com/apache/directory-kerby/pull/434 Bumps `netty.version` from 4.1.112.Final to 4.1.113.Final. Updates `io.netty:netty-transport` from 4.1.112.Final to 4.1.113.Final Commits https://github.com/netty/netty/commit/d0a109ef01ed6ad28bb8ffd4a5b1606fcae63ed1";>d0a109e [maven-release-plugin] prepare release netty-4.1.113.Final https://github.com/netty/netty/commit/e1d63849add6d100599e7cbc351934f829bb9167";>e1d6384 Cleanup fields on AdaptiveByteBuf::deallocate (https://redirect.github.com/netty/netty/issues/14273";>#14273) https://github.com/netty/netty/commit/8a02f4583df23e75e033181489260994a09bb880";>8a02f45 Upload hidden files for staging (https://redirect.github.com/netty/netty/issues/14275";>#14275) https://github.com/netty/netty/commit/c0fdb8e9f8f256990e902fcfffbbe10754d0f3dd";>c0fdb8e adjust continuation frame header length (https://redirect.github.com/netty/netty/issues/14245";>#14245) https://github.com/netty/netty/commit/95d86bbcee4f8e5a7d273d7ee16f69982cf2fab1";>95d86bb chore: clean code DefaultChannelPipeline add method (https://redirect.github.com/netty/netty/issues/14249";>#14249) https://github.com/netty/netty/commit/1c1da9f943322a12588e7c5b8b637c8e0fa642da";>1c1da9f Fix netty-all artifact snapshot deployments (https://redirect.github.com/netty/netty/issues/14264";>#14264) https://github.com/netty/netty/commit/235eb6f060e0ae5a063e96ba9be5efdc5806e5bf";>235eb6f Upgrade to netty-tcnative 2.0.66.Final (https://redirect.github.com/netty/netty/issues/14254";>#14254) https://github.com/netty/netty/commit/ceade95db41b592167acec45e30aaa21ea0d26a6";>ceade95 Ensure flushes are not discarded by ChunkedWriteHandler for passed th… (https://redirect.github.com/netty/netty/issues/14248";>#14248) https://github.com/netty/netty/commit/dc30c3337a766d9f9519e910438ed3a3ae1b3761";>dc30c33 Add new SslHandler.isEncrypted(...) variant that will not produce fal… (https://redirect.github.com/netty/netty/issues/14243";>#14243) https://github.com/netty/netty/commit/31d15922ca9a0ea63631ed705ee3cc413a6429bc";>31d1592 Remove reference to parent in recycled buffers for leak detection (https://redirect.github.com/netty/netty/issues/14250";>#14250) Additional commits viewable in https://github.com/netty/netty/compare/netty-4.1.112.Final...netty-4.1.113.Final";>compare view Updates `io.netty:netty-handler` from 4.1.112.Final to 4.1.113.Final Commits https://github.com/netty/netty/commit/d0a109ef01ed6ad28bb8ffd4a5b1606fcae63ed1";>d0a109e [maven-release-plugin] prepare release netty-4.1.113.Final https://github.com/netty/netty/commit/e1d63849add6d100599e7cbc351934f829bb9167";>e1d6384 Cleanup fields on AdaptiveByteBuf::deallocate (https://redirect.github.com/netty/netty/issues/14273";>#14273) https://github.com/netty/netty/commit/8a02f4583df23e75e033181489260994a09bb880";>8a02f45 Upload hidden files for staging (https://redirect.github.com/netty/netty/issues/14275";>#14275) https://github.com/netty/netty/commit/c0fdb8e9f8f256990e902fcfffbbe10754d0f3dd";>c0fdb8e adjust continuation frame header length (https://redirect.github.com/netty/netty/issues/14245";>#14245) https://github.com/netty/netty/commit/95d86bbcee4f8e5a7d273d7ee16f69982cf2fab1";>95d86bb chore: clean code DefaultChannelPipeline add method (https://redirect.github.com/netty/netty/issues/14249";>#14249) https://github.com/netty/netty/commit/1c1da9f943322a12588e7c5b8b637c8e0fa642da";>1c1da9f Fix netty-all artifact snapshot deployments (https://redirect.github.com/netty/netty/issues/14264";>#14264) https://github.com/netty/netty/commit/235eb6f060e0ae5a063e96ba9be5efdc5806e5bf";>235eb6f Upgrade to netty-tcnative 2.0.66.Final (https://redirect.github.com/netty/netty/issues/14254";>#14254) https://github.com/netty/netty/commit/ceade95db41b592167acec45e30aaa21ea0d26a6";>ceade95 Ensure flushes are not discarded by ChunkedWriteHandler for passed th… (https://redirect.github.com/netty/netty/issues/14248";>#14248) https://github.com/netty/netty/commit/dc30c3337a766d9f9519e910438ed3a3ae1b3761";>dc30c33 Add new SslHandler.isEncrypted(...) variant that will not produce fal… (https://redirect.github.com/netty/netty/issues/14243";>#14243) https://github.com/netty/netty/commit/31d15922ca9a0ea63631ed705ee3cc413a6429bc";>31d1592 Remove reference to parent in recycled buffers for leak detection (https://redirect.github.com/netty/netty/issues/14250";>#14250) Additional commits viewable in https://github.com/netty/netty/compare/netty-4.1.112.Final...netty-4.1.113.Final";>compare view Updates `io.netty:netty-common` from 4.1.112.Final to 4.1.113.Final Commits https://github.com/netty/netty/commit/d0a109ef01ed6ad28bb8ffd4a5b1606fcae63ed1";>d0a109e [maven-release-plugin] prepare release netty-4.1.113.Final https://github.com/netty/netty/commit/e1d63849add6d100
Re: [PR] Bump ch.qos.logback:logback-classic from 1.4.12 to 1.5.7 [directory-scimple]
bdemers commented on PR #651: URL: https://github.com/apache/directory-scimple/pull/651#issuecomment-2330197938 @dependabot rebase -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump version.quarkus from 3.13.2 to 3.14.1 [directory-scimple]
bdemers merged PR #658: URL: https://github.com/apache/directory-scimple/pull/658 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.8.0 to 3.10.0 [directory-scimple]
bdemers merged PR #659: URL: https://github.com/apache/directory-scimple/pull/659 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump org.apache.maven.plugins:maven-surefire-plugin from 3.4.0 to 3.5.0 [directory-scimple]
bdemers merged PR #660: URL: https://github.com/apache/directory-scimple/pull/660 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump version.resteasy from 6.2.9.Final to 6.2.10.Final [directory-scimple]
bdemers merged PR #661: URL: https://github.com/apache/directory-scimple/pull/661 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump org.jboss.weld.se:weld-se-core from 5.1.2.Final to 5.1.3.Final [directory-scimple]
bdemers merged PR #662: URL: https://github.com/apache/directory-scimple/pull/662 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[PR] Bump org.eclipse.jetty:jetty-webapp from 9.4.55.v20240627 to 9.4.56.v20240826 [directory-server]
dependabot[bot] opened a new pull request, #226: URL: https://github.com/apache/directory-server/pull/226 Bumps org.eclipse.jetty:jetty-webapp from 9.4.55.v20240627 to 9.4.56.v20240826. Most Recent Ignore Conditions Applied to This Pull Request | Dependency Name | Ignore Conditions | | --- | --- | | org.eclipse.jetty:jetty-webapp | [>= 11.a, < 12] | | org.eclipse.jetty:jetty-webapp | [>= 10.a, < 11] | [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump actions/upload-artifact from 4.3.6 to 4.4.0 [directory-server]
elecharny merged PR #225: URL: https://github.com/apache/directory-server/pull/225 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump github/codeql-action from 3.26.5 to 3.26.6 [directory-server]
elecharny merged PR #224: URL: https://github.com/apache/directory-server/pull/224 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[PR] Bump github/codeql-action from 3.26.5 to 3.26.6 [directory-server]
dependabot[bot] opened a new pull request, #224: URL: https://github.com/apache/directory-server/pull/224 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.5 to 3.26.6. Changelog Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md";>github/codeql-action's changelog. CodeQL Action Changelog See the https://github.com/github/codeql-action/releases";>releases page for the relevant changes to the CodeQL CLI and language packs. Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers. [UNRELEASED] No user facing changes. 3.26.6 - 29 Aug 2024 Update default CodeQL bundle version to 2.18.3. https://redirect.github.com/github/codeql-action/pull/2449";>#2449 3.26.5 - 23 Aug 2024 Fix an issue where the csrutil system call used for telemetry would fail on MacOS ARM machines with System Integrity Protection disabled. https://redirect.github.com/github/codeql-action/pull/2441";>#2441 3.26.4 - 21 Aug 2024 Deprecation: The add-snippets input on the analyze Action is deprecated and will be removed in the first release in August 2025. https://redirect.github.com/github/codeql-action/pull/2436";>#2436 Fix an issue where the disk usage system call used for telemetry would fail on MacOS ARM machines with System Integrity Protection disabled, and then surface a warning. The system call is now disabled for these machines. https://redirect.github.com/github/codeql-action/pull/2434";>#2434 3.26.3 - 19 Aug 2024 Fix an issue where the CodeQL Action could not write diagnostic messages on Windows. This issue did not impact analysis quality. https://redirect.github.com/github/codeql-action/pull/2430";>#2430 3.26.2 - 14 Aug 2024 Update default CodeQL bundle version to 2.18.2. https://redirect.github.com/github/codeql-action/pull/2417";>#2417 3.26.1 - 13 Aug 2024 No user facing changes. 3.26.0 - 06 Aug 2024 Deprecation: Swift analysis on Ubuntu runner images is no longer supported. Please migrate to a macOS runner if this affects you. https://redirect.github.com/github/codeql-action/pull/2403";>#2403 Bump the minimum CodeQL bundle version to 2.13.5. https://redirect.github.com/github/codeql-action/pull/2408";>#2408 3.25.15 - 26 Jul 2024 Update default CodeQL bundle version to 2.18.1. https://redirect.github.com/github/codeql-action/pull/2385";>#2385 3.25.14 - 25 Jul 2024 Experimental: add a new start-proxy action which starts the same HTTP proxy as used by https://github.com/github/dependabot-action";>github/dependabot-action. Do not use this in production as it is part of an internal experiment and subject to change at any time. https://redirect.github.com/github/codeql-action/pull/2376";>#2376 3.25.13 - 19 Jul 2024 ... (truncated) Commits https://github.com/github/codeql-action/commit/4dd16135b69a43b6c8efb853346f8437d92d3c93";>4dd1613 Merge pull request https://redirect.github.com/github/codeql-action/issues/2452";>#2452 from github/update-v3.26.6-7233ec5e6 https://github.com/github/codeql-action/commit/dd9dd2d5389e8ca48a8201513c3fd18d7fda567d";>dd9dd2d Update changelog for v3.26.6 https://github.com/github/codeql-action/commit/7233ec5e6b313c47141f047dd5be5f957560dd27";>7233ec5 Merge pull request https://redirect.github.com/github/codeql-action/issues/2449";>#2449 from github/update-bundle/codeql-bundle-v2.18.3 https://github.com/github/codeql-action/commit/a32c44dba17a9c6628320a29508e84e052128a3a";>a32c44d Add changelog note https://github.com/github/codeql-action/commit/2966897c6759237a41ccd8fd392565a4e86a5121";>2966897 Update default bundle to codeql-bundle-v2.18.3 https://github.com/github/codeql-action/commit/b8efe4dc6ab6d31abe3ec159420d2a4916880800";>b8efe4d Merge pull request https://redirect.github.com/github/codeql-action/issues/2435";>#2435 from github/update-supported-enterprise-server-versions https://github.com/github/codeql-action/commit/ab408a875b0616b0e5eaa4d0d86ac836a29cfb4e";>ab408a8 Merge branch 'main' into update-supported-enterprise-server-versions https://github.com/github/codeql-action/commit/864b979bc3eb6b10501334cb368b2b398a60ff1b";>864b979 Merge pull request https://redirect.github.com/github/codeql-action/issues/2443";>#2443 from github/dbartol/config-file-telemetry https://github.com/github/codeql-action/commit/d36c7aaf6a9744943ec1ee06e31a6dd1eb8e1357";>d36c7aa Merge pull request https://redirect.github.com/github/codeql-action/issues/2448";>#2
[PR] Bump actions/upload-artifact from 4.3.6 to 4.4.0 [directory-server]
dependabot[bot] opened a new pull request, #225: URL: https://github.com/apache/directory-server/pull/225 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.6 to 4.4.0. Release notes Sourced from https://github.com/actions/upload-artifact/releases";>actions/upload-artifact's releases. v4.4.0 Notice: Breaking Changes :warning: We will no longer include hidden files and folders by default in the upload-artifact action of this version. This reduces the risk that credentials are accidentally uploaded into artifacts. Customers who need to continue to upload these files can use a new option, include-hidden-files, to continue to do so. See https://github.blog/changelog/2024-08-19-notice-of-upcoming-deprecations-and-breaking-changes-in-github-actions-runners/";>"Notice of upcoming deprecations and breaking changes in GitHub Actions runners" changelog and https://redirect.github.com/actions/upload-artifact/issues/602";>this issue for more details. What's Changed Exclude hidden files by default by https://github.com/joshmgross";>@joshmgross in https://redirect.github.com/actions/upload-artifact/pull/598";>actions/upload-artifact#598 Full Changelog: https://github.com/actions/upload-artifact/compare/v4.3.6...v4.4.0";>https://github.com/actions/upload-artifact/compare/v4.3.6...v4.4.0 Commits https://github.com/actions/upload-artifact/commit/50769540e7f4bd5e21e526ee35c689e35e0d6874";>5076954 Merge pull request https://redirect.github.com/actions/upload-artifact/issues/598";>#598 from actions/joshmgross/exclude-hidden-files https://github.com/actions/upload-artifact/commit/d52396ac5d312b1bda1b9fe2ae55d862c65abd68";>d52396a Add a warning about enabling include-hidden-files https://github.com/actions/upload-artifact/commit/710f36207581d49e465ccbed3e007c317290fe11";>710f362 Remove "merged" from include-hidden-files input description https://github.com/actions/upload-artifact/commit/3b315f26f6f828f74089e1863e67e60e48e37563";>3b315f2 npm run release again 🙂 https://github.com/actions/upload-artifact/commit/3be2180eb79b56341b1b127ca06a5adba2a5a3e4";>3be2180 Remove another trailing comma https://github.com/actions/upload-artifact/commit/453e8d0a40444939146df5febed0b1221b9dd073";>453e8d0 Update glob license https://github.com/actions/upload-artifact/commit/0a398c14804ead69f18a166f0a99f91239261ee5";>0a398c1 npm run release https://github.com/actions/upload-artifact/commit/a0c40cf60283f329afac2bc0fa77f1a59fa11e6e";>a0c40cf Update to latest @actions/glob and fix tests https://github.com/actions/upload-artifact/commit/acb59e47763b6e601a344d04cf3c082ee336b709";>acb59e4 lint https://github.com/actions/upload-artifact/commit/cb6558bb10fe4afe4054d0be4b3136e673eb5e7f";>cb6558b Exclude hidden files by default See full diff in https://github.com/actions/upload-artifact/compare/834a144ee995460fba8ed112a2fc961b36a5ec5a...50769540e7f4bd5e21e526ee35c689e35e0d6874";>compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency
[PR] Bump org.mockito:mockito-core from 5.12.0 to 5.13.0 [directory-scimple]
dependabot[bot] opened a new pull request, #663: URL: https://github.com/apache/directory-scimple/pull/663 Bumps [org.mockito:mockito-core](https://github.com/mockito/mockito) from 5.12.0 to 5.13.0. Release notes Sourced from https://github.com/mockito/mockito/releases";>org.mockito:mockito-core's releases. v5.13.0 Changelog generated by https://github.com/shipkit/shipkit-changelog";>Shipkit Changelog Gradle Plugin 5.13.0 2024-08-27 - https://github.com/mockito/mockito/compare/v5.12.0...v5.13.0";>43 commit(s) by Breno A, Caleb Cushing, Jinwoo, Kurt Alfred Kluever, Stefano Cordio, Thach Le, dependabot[bot] Bump versions.bytebuddy from 1.14.19 to 1.15.0 [(https://redirect.github.com/mockito/mockito/issues/3429";>#3429)](https://redirect.github.com/mockito/mockito/pull/3429";>mockito/mockito#3429) Bump org.jetbrains.kotlin:kotlin-stdlib from 2.0.10 to 2.0.20 [(https://redirect.github.com/mockito/mockito/issues/3427";>#3427)](https://redirect.github.com/mockito/mockito/pull/3427";>mockito/mockito#3427) Bump org.junit.platform:junit-platform-launcher from 1.10.3 to 1.11.0 [(https://redirect.github.com/mockito/mockito/issues/3425";>#3425)](https://redirect.github.com/mockito/mockito/pull/3425";>mockito/mockito#3425) Bump com.gradle.enterprise from 3.17.6 to 3.18 [(https://redirect.github.com/mockito/mockito/issues/3423";>#3423)](https://redirect.github.com/mockito/mockito/pull/3423";>mockito/mockito#3423) Fix a typo in InjectMocks [(https://redirect.github.com/mockito/mockito/issues/3422";>#3422)](https://redirect.github.com/mockito/mockito/pull/3422";>mockito/mockito#3422) Bump versions.bytebuddy from 1.14.18 to 1.14.19 [(https://redirect.github.com/mockito/mockito/issues/3417";>#3417)](https://redirect.github.com/mockito/mockito/pull/3417";>mockito/mockito#3417) Bump androidx.test:runner from 1.6.1 to 1.6.2 [(https://redirect.github.com/mockito/mockito/issues/3415";>#3415)](https://redirect.github.com/mockito/mockito/pull/3415";>mockito/mockito#3415) Bump versions.junitJupiter from 5.10.3 to 5.11.0 [(https://redirect.github.com/mockito/mockito/issues/3413";>#3413)](https://redirect.github.com/mockito/mockito/pull/3413";>mockito/mockito#3413) Bump org.jetbrains.kotlin:kotlin-stdlib from 2.0.0 to 2.0.10 [(https://redirect.github.com/mockito/mockito/issues/3409";>#3409)](https://redirect.github.com/mockito/mockito/pull/3409";>mockito/mockito#3409) Bump org.hamcrest:hamcrest-core from 2.2 to 3.0 [(https://redirect.github.com/mockito/mockito/issues/3408";>#3408)](https://redirect.github.com/mockito/mockito/pull/3408";>mockito/mockito#3408) Bump com.google.googlejavaformat:google-java-format from 1.22.0 to 1.23.0 [(https://redirect.github.com/mockito/mockito/issues/3407";>#3407)](https://redirect.github.com/mockito/mockito/pull/3407";>mockito/mockito#3407) Bump org.shipkit:shipkit-auto-version from 2.0.9 to 2.0.10 [(https://redirect.github.com/mockito/mockito/issues/3405";>#3405)](https://redirect.github.com/mockito/mockito/pull/3405";>mockito/mockito#3405) Bump com.gradle.enterprise from 3.17.5 to 3.17.6 [(https://redirect.github.com/mockito/mockito/issues/3404";>#3404)](https://redirect.github.com/mockito/mockito/pull/3404";>mockito/mockito#3404) Bump gradle/wrapper-validation-action from 3.4.2 to 3.5.0 [(https://redirect.github.com/mockito/mockito/issues/3401";>#3401)](https://redirect.github.com/mockito/mockito/pull/3401";>mockito/mockito#3401) Bump org.assertj:assertj-core from 3.26.0 to 3.26.3 [(https://redirect.github.com/mockito/mockito/issues/3398";>#3398)](https://redirect.github.com/mockito/mockito/pull/3398";>mockito/mockito#3398) Bump versions.bytebuddy from 1.14.17 to 1.14.18 [(https://redirect.github.com/mockito/mockito/issues/3397";>#3397)](https://redirect.github.com/mockito/mockito/pull/3397";>mockito/mockito#3397) ci: add .m2 dependencies cache [(https://redirect.github.com/mockito/mockito/issues/3396";>#3396)](https://redirect.github.com/mockito/mockito/pull/3396";>mockito/mockito#3396) Bump org.codehaus.groovy:groovy from 3.0.21 to 3.0.22 [(https://redirect.github.com/mockito/mockito/issues/3394";>#3394)](https://redirect.github.com/mockito/mockito/pull/3394";>mockito/mockito#3394) Bump androidx.test:runner from 1.6.0 to 1.6.1 [(https://redirect.github.com/mockito/mockito/issues/3393";>#3393)](https://redirect.github.com/mockito/mockito/pull/3393";>mockito/mockito#3393) Bump org.junit.platform:junit-platform-launcher from 1.10.2 to 1.10.3 [(https://redirect.github.com/mockito/mockito/issues/3392";>#3392)](https://redirect.github.com/mockito/mockito/pull/3392";>mockito/mockito#3392) Gradle lazy configuration [(https://redirect.github.com/mockito/mockito/issues/3391";>#3391)](https://redirect.github.com/mockito/mockito/pull/3391";>mockito/mockito#3391) Bump androidx.test.ext:junit from 1.2.0 to 1.2.1 [(https://redirect.github.com/mockito/mockito/issues/3388";>#3388)](https://redirect.gith
[PR] Bump org.jboss.weld.se:weld-se-core from 5.1.2.Final to 5.1.3.Final [directory-scimple]
dependabot[bot] opened a new pull request, #662: URL: https://github.com/apache/directory-scimple/pull/662 Bumps org.jboss.weld.se:weld-se-core from 5.1.2.Final to 5.1.3.Final. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[PR] Bump version.resteasy from 6.2.9.Final to 6.2.10.Final [directory-scimple]
dependabot[bot] opened a new pull request, #661: URL: https://github.com/apache/directory-scimple/pull/661 Bumps `version.resteasy` from 6.2.9.Final to 6.2.10.Final. Updates `org.jboss.resteasy:resteasy-client` from 6.2.9.Final to 6.2.10.Final Release notes Sourced from https://github.com/resteasy/resteasy/releases";>org.jboss.resteasy:resteasy-client's releases. 6.2.10.Final What's Changed Bump org.wildfly:wildfly-channel-maven-plugin from 1.0.13 to 1.0.16 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/resteasy/resteasy/pull/4199";>resteasy/resteasy#4199 Bump version.org.wildfly.arquillian.wildfly-arquillian from 5.1.0.Beta2 to 5.1.0.Beta3 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/resteasy/resteasy/pull/4204";>resteasy/resteasy#4204 Bump org.asciidoctor:asciidoctorj-pdf from 2.3.15 to 2.3.17 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/resteasy/resteasy/pull/4205";>resteasy/resteasy#4205 Test BootableJar using Channel Manifest by https://github.com/tommaso-borgato";>@tommaso-borgato in https://redirect.github.com/resteasy/resteasy/pull/4108";>resteasy/resteasy#4108 Bump org.junit:junit-bom from 5.10.2 to 5.10.3 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/resteasy/resteasy/pull/4217";>resteasy/resteasy#4217 Bump version.org.eclipse.jetty from 11.0.20 to 11.0.22 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/resteasy/resteasy/pull/4221";>resteasy/resteasy#4221 [RESTEASY-3513] Bump version.io.undertow from 2.3.13.Final to 2.3.14.Final by https://github.com/dependabot";>@dependabot in https://redirect.github.com/resteasy/resteasy/pull/4216";>resteasy/resteasy#4216 Bump version.org.wildfly from 32.0.0.Final to 32.0.1.Final by https://github.com/dependabot";>@dependabot in https://redirect.github.com/resteasy/resteasy/pull/4200";>resteasy/resteasy#4200 Bump org.wildfly:wildfly-channel-maven-plugin from 1.0.16 to 1.0.18 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/resteasy/resteasy/pull/4224";>resteasy/resteasy#4224 [RESTEASY-3517] Bump version.io.undertow from 2.3.14.Final to 2.3.15.Final by https://github.com/dependabot";>@dependabot in https://redirect.github.com/resteasy/resteasy/pull/4232";>resteasy/resteasy#4232 [RESTEASY-3518] Upgrade Arquillian Core to 1.9.1.Final, Arquillian Ja… by https://github.com/jamezp";>@jamezp in https://redirect.github.com/resteasy/resteasy/pull/4240";>resteasy/resteasy#4240 Bump org.wildfly:wildfly-channel-maven-plugin from 1.0.18 to 1.0.19 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/resteasy/resteasy/pull/4247";>resteasy/resteasy#4247 Bump org.asciidoctor:asciidoctorj-pdf from 2.3.17 to 2.3.18 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/resteasy/resteasy/pull/4255";>resteasy/resteasy#4255 [RESTEASY-3520] If the generic type cannot be resolved for a ContextR… by https://github.com/jamezp";>@jamezp in https://redirect.github.com/resteasy/resteasy/pull/4252";>resteasy/resteasy#4252 [RESTEASY-3524] Bump the netty-vertx-dependencies group across 1 directory with 11 updates by https://github.com/dependabot";>@dependabot in https://redirect.github.com/resteasy/resteasy/pull/4236";>resteasy/resteasy#4236 [RESTEASY-3525] & [RESTEASY-3526] Bump the jakarta-json-dependencies group across 1 directory with 2 updates by https://github.com/dependabot";>@dependabot in https://redirect.github.com/resteasy/resteasy/pull/4256";>resteasy/resteasy#4256 [RESTEASY-3528] Bump jakarta.enterprise.concurrent:jakarta.enterprise.concurrent-api from 3.0.3 to 3.0.4 by https://github.com/dependabot";>@dependabot in https://redirect.github.com/resteasy/resteasy/pull/4218";>resteasy/resteasy#4218 [RESTEASY-3531] Ensure UndertowContainer is always the Weld container… by https://github.com/jamezp";>@jamezp in https://redirect.github.com/resteasy/resteasy/pull/4270";>resteasy/resteasy#4270 Upgrade resteasy-parent to 3. Update CI to test with Java 11, while r… by https://github.com/jamezp";>@jamezp in https://redirect.github.com/resteasy/resteasy/pull/4272";>resteasy/resteasy#4272 [RESTEASY-3533] Incorporate usages of the resteasy-junit-extension by https://github.com/jamezp";>@jamezp in https://redirect.github.com/resteasy/resteasy/pull/4280";>resteasy/resteasy#4280 Correct the path for the called workflow. by https://github.com/jamezp";>@jamezp in https://redirect.github.com/resteasy/resteasy/pull/4281";>resteasy/resteasy#4281 [RESTEASY-3532] Ensure there is a boundary set for headers on the Jetty Client Engine. by https://github.com/jamezp";>@jamezp in https://redirect.github.com/resteasy/resteasy/pull/4283";>resteasy/resteasy#4283 [RESTEASY-3510] Allow options to be looked up via a custom ResteasyCo… by http
[PR] Bump org.apache.maven.plugins:maven-surefire-plugin from 3.4.0 to 3.5.0 [directory-scimple]
dependabot[bot] opened a new pull request, #660: URL: https://github.com/apache/directory-scimple/pull/660 Bumps [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) from 3.4.0 to 3.5.0. Commits https://github.com/apache/maven-surefire/commit/c78365f5a229155e7d0cfad2913445fc01d7a959";>c78365f [maven-release-plugin] prepare release surefire-3.5.0 https://github.com/apache/maven-surefire/commit/05e4681f38f53c2a54b7671291ca02dc63586a98";>05e4681 [SUREFIRE-2227] Dynamically calculate xrefTestLocation https://github.com/apache/maven-surefire/commit/f1a419a1457e5a83f9deb07a700a1376487f72ed";>f1a419a [SUREFIRE-2228] Upgrade to Doxia 2.0.0 Milestone Stack https://github.com/apache/maven-surefire/commit/5e14d4fb4ddf6e4ce4af0f6632398c7ba8df2325";>5e14d4f [SUREFIRE-2161] Align Mojo class names and output names https://github.com/apache/maven-surefire/commit/c0784ab18a9b3830812be4cf6bc147f5c5285005";>c0784ab Bump org.apache.commons:commons-compress from 1.27.0 to 1.27.1 https://github.com/apache/maven-surefire/commit/79ea7178aaf73190f4aead3d38d4b8276d7dd1b7";>79ea717 [SUREFIRE-2256] Upgrade to Parent 43 https://github.com/apache/maven-surefire/commit/4648b47403fb9a43025892b22f361f2bef5f057c";>4648b47 add Reproducible Builds badge https://github.com/apache/maven-surefire/commit/f64c1b3148626ece80726b74208c4b62641a40e3";>f64c1b3 [maven-release-plugin] prepare for next development iteration See full diff in https://github.com/apache/maven-surefire/compare/surefire-3.4.0...surefire-3.5.0";>compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[PR] Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.8.0 to 3.10.0 [directory-scimple]
dependabot[bot] opened a new pull request, #659: URL: https://github.com/apache/directory-scimple/pull/659 Bumps [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) from 3.8.0 to 3.10.0. Commits https://github.com/apache/maven-javadoc-plugin/commit/487e47995424a5090dad5702b92fecaf8893a294";>487e479 [maven-release-plugin] prepare release maven-javadoc-plugin-3.10.0 https://github.com/apache/maven-javadoc-plugin/commit/9638a6a76c6db53c3bf8ffbd5cec7318b0e25303";>9638a6a [MJAVADOC-785] Align plugin implementation with AbstractMavenReport (maven-re... https://github.com/apache/maven-javadoc-plugin/commit/9d339255f160d259a64189d31ab4325f1d3fae4e";>9d33925 [MJAVADOC-784] Upgrade to Doxia 2.0.0 Milestone Stack https://github.com/apache/maven-javadoc-plugin/commit/a11b921429c884c7e9d1aa03092b2c7146508db8";>a11b921 [MJAVADOC-809] Align Mojo class names https://github.com/apache/maven-javadoc-plugin/commit/7c4b467e67b482fc709648b283e7ed2d3b50d042";>7c4b467 Bump org.apache.maven.plugins:maven-plugins from 42 to 43 https://github.com/apache/maven-javadoc-plugin/commit/636442b317e5506ca6687375c1d86c7395152f93";>636442b Improve ITs https://github.com/apache/maven-javadoc-plugin/commit/dbca15ac6c523c6eaa973ef5d733c4a5594c23ba";>dbca15a Bump org.hamcrest:hamcrest-core from 2.2 to 3.0 https://github.com/apache/maven-javadoc-plugin/commit/d02bb88d7a2849bdd39dfdf7a6098859145f42d0";>d02bb88 Bump org.apache.commons:commons-lang3 from 3.15.0 to 3.16.0 https://github.com/apache/maven-javadoc-plugin/commit/0a850a16589ff0e1e8379fe841159d04e686acfb";>0a850a1 [MJAVADOC-807] Simplify IT for MJAVADOC-498 https://github.com/apache/maven-javadoc-plugin/commit/43e901fc4b45c0fe868825f49f56866937210646";>43e901f Improve URL handling Additional commits viewable in https://github.com/apache/maven-javadoc-plugin/compare/maven-javadoc-plugin-3.8.0...maven-javadoc-plugin-3.10.0";>compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[PR] Bump version.quarkus from 3.13.2 to 3.14.1 [directory-scimple]
dependabot[bot] opened a new pull request, #658: URL: https://github.com/apache/directory-scimple/pull/658 Bumps `version.quarkus` from 3.13.2 to 3.14.1. Updates `io.quarkus.platform:quarkus-bom` from 3.13.2 to 3.14.1 Commits https://github.com/quarkusio/quarkus-platform/commit/099cbef142474904dfba0ead5eaa6833e4733350";>099cbef [maven-release-plugin] prepare release 3.14.1 https://github.com/quarkusio/quarkus-platform/commit/56206b54ac784601dca9b1d7064564b4d159167e";>56206b5 Merge pull request https://redirect.github.com/quarkusio/quarkus-platform/issues/1264";>#1264 from gsmet/quarkus-3.14.1 https://github.com/quarkusio/quarkus-platform/commit/f04085ccb44e0dd2137d61ef4230db1bb4153636";>f04085c Upgrade to Quarkus 3.14.1 https://github.com/quarkusio/quarkus-platform/commit/46ec886b603f82f9c22dfd29855b9a4a1852c998";>46ec886 Merge pull request https://redirect.github.com/quarkusio/quarkus-platform/issues/1259";>#1259 from loicmathieu/gcp-2-11-0 https://github.com/quarkusio/quarkus-platform/commit/373942a8f3a59825d5850abb44979fe72cb7fcd3";>373942a Upgrade Qute Web to 3.1.0 https://github.com/quarkusio/quarkus-platform/commit/f6b233f1c1c6b3db076599824ffacdb4c34807d1";>f6b233f Upgrade to Google Cloud extension pack 2.11.0 https://github.com/quarkusio/quarkus-platform/commit/525ca1fb626e1246b4e324063c1d64b4921e47ca";>525ca1f Merge pull request https://redirect.github.com/quarkusio/quarkus-platform/issues/1257";>#1257 from Naros/upgrade-debezium-2.7.1 https://github.com/quarkusio/quarkus-platform/commit/59a8073c00f0dd062492183e23c07c750cb04cb9";>59a8073 Merge pull request https://redirect.github.com/quarkusio/quarkus-platform/issues/1261";>#1261 from aldettinger/main https://github.com/quarkusio/quarkus-platform/commit/a157c9534ad3fc569ff335e4e4f801c1486dbc97";>a157c95 Upgrade to Camel Quarkus 3.14.0 https://github.com/quarkusio/quarkus-platform/commit/ba1c7047504f0bff32f80d4084117d06485aadcc";>ba1c704 Upgrade to Debezium 2.7.1.Final Additional commits viewable in https://github.com/quarkusio/quarkus-platform/compare/3.13.2...3.14.1";>compare view Updates `io.quarkus.platform:quarkus-maven-plugin` from 3.13.2 to 3.14.1 Commits https://github.com/quarkusio/quarkus-platform/commit/099cbef142474904dfba0ead5eaa6833e4733350";>099cbef [maven-release-plugin] prepare release 3.14.1 https://github.com/quarkusio/quarkus-platform/commit/56206b54ac784601dca9b1d7064564b4d159167e";>56206b5 Merge pull request https://redirect.github.com/quarkusio/quarkus-platform/issues/1264";>#1264 from gsmet/quarkus-3.14.1 https://github.com/quarkusio/quarkus-platform/commit/f04085ccb44e0dd2137d61ef4230db1bb4153636";>f04085c Upgrade to Quarkus 3.14.1 https://github.com/quarkusio/quarkus-platform/commit/46ec886b603f82f9c22dfd29855b9a4a1852c998";>46ec886 Merge pull request https://redirect.github.com/quarkusio/quarkus-platform/issues/1259";>#1259 from loicmathieu/gcp-2-11-0 https://github.com/quarkusio/quarkus-platform/commit/373942a8f3a59825d5850abb44979fe72cb7fcd3";>373942a Upgrade Qute Web to 3.1.0 https://github.com/quarkusio/quarkus-platform/commit/f6b233f1c1c6b3db076599824ffacdb4c34807d1";>f6b233f Upgrade to Google Cloud extension pack 2.11.0 https://github.com/quarkusio/quarkus-platform/commit/525ca1fb626e1246b4e324063c1d64b4921e47ca";>525ca1f Merge pull request https://redirect.github.com/quarkusio/quarkus-platform/issues/1257";>#1257 from Naros/upgrade-debezium-2.7.1 https://github.com/quarkusio/quarkus-platform/commit/59a8073c00f0dd062492183e23c07c750cb04cb9";>59a8073 Merge pull request https://redirect.github.com/quarkusio/quarkus-platform/issues/1261";>#1261 from aldettinger/main https://github.com/quarkusio/quarkus-platform/commit/a157c9534ad3fc569ff335e4e4f801c1486dbc97";>a157c95 Upgrade to Camel Quarkus 3.14.0 https://github.com/quarkusio/quarkus-platform/commit/ba1c7047504f0bff32f80d4084117d06485aadcc";>ba1c704 Upgrade to Debezium 2.7.1.Final Additional commits viewable in https://github.com/quarkusio/quarkus-platform/compare/3.13.2...3.14.1";>compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen th
Re: [PR] Bump org.owasp:dependency-check-maven from 8.4.3 to 10.0.3 [directory-scimple]
dependabot[bot] commented on PR #626: URL: https://github.com/apache/directory-scimple/pull/626#issuecomment-2325139062 Superseded by #657. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump org.owasp:dependency-check-maven from 8.4.3 to 10.0.3 [directory-scimple]
dependabot[bot] closed pull request #626: Bump org.owasp:dependency-check-maven from 8.4.3 to 10.0.3 URL: https://github.com/apache/directory-scimple/pull/626 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[PR] Bump org.owasp:dependency-check-maven from 8.4.3 to 10.0.4 [directory-scimple]
dependabot[bot] opened a new pull request, #657: URL: https://github.com/apache/directory-scimple/pull/657 Bumps [org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck) from 8.4.3 to 10.0.4. Release notes Sourced from https://github.com/jeremylong/DependencyCheck/releases";>org.owasp:dependency-check-maven's releases. Version 10.0.4 Refer to the https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md#change-log";>CHANGELOG.md for information about improvements and upgrade notes. Version 10.0.3 Refer to the https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md#change-log";>CHANGELOG.md for information about improvements and upgrade notes. Version 10.0.2 Refer to the https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md#change-log";>CHANGELOG.md for information about improvements and upgrade notes. Version 10.0.1 Refer to the https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md#change-log";>CHANGELOG.md for information about improvements and upgrade notes. Version 10.0.0 Refer to the https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md#change-log";>CHANGELOG.md for information about improvements and upgrade notes. Version 9.2.0 Refer to the https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md#change-log";>CHANGELOG.md for information about improvements and upgrade notes. Version 9.1.0 Refer to the https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md#change-log";>CHANGELOG.md for information about improvements and upgrade notes. Version 9.0.10 Refer to the https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md#change-log";>CHANGELOG.md for information about improvements and upgrade notes. Version 9.0.9 Refer to the https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md#change-log";>CHANGELOG.md for information about improvements and upgrade notes. Version 9.0.8 Refer to the https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md#change-log";>CHANGELOG.md for information about improvements and upgrade notes. Version 9.0.7 Refer to the https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md#change-log";>CHANGELOG.md for information about improvements and upgrade notes. Version 9.0.6 Refer to the https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md#change-log";>CHANGELOG.md for information about improvements and upgrade notes. Version 9.0.5 Refer to the https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md#change-log";>CHANGELOG.md for information about improvements and upgrade notes. Version 9.0.4 fix: utilize maven proxy if present (https://redirect.github.com/jeremylong/DependencyCheck/issues/6255";>#6255) fix: allow api key in cli to be quoted (https://redirect.github.com/jeremylong/DependencyCheck/issues/6253";>#6253) fix: use correct maven plugin reporting plugin (https://redirect.github.com/jeremylong/DependencyCheck/issues/6244";>#6244) fix: correct trailing comma in JSON report (https://redirect.github.com/jeremylong/DependencyCheck/issues/6245";>#6245) See the full listing of https://github.com/jeremylong/DependencyCheck/milestone/74?closed=1";>changes. Version 9.0.3 fix: use Java properties for proxy configuration (https://redirect.github.com/jeremylong/DependencyCheck/issues/6238";>#6238) docs: update proxy configuration documentation (https://redirect.github.com/jeremylong/DependencyCheck/issues/6237";>#6237) ... (truncated) Changelog Sourced from https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md";>org.owasp:dependency-check-maven's changelog. https://github.com/jeremylong/DependencyCheck/releases/tag/v10.0.4";>Version 10.0.4 (2024-09-01) build(deps): exclude unused dependency (https://redirect.github.com/jeremylong/DependencyCheck/issues/6916";>#6916) fix: improve regex (https://redirect.github.com/jeremylong/DependencyCheck/issues/6917";>#6917) fix: correctly handle null values in cpeMatch (https://redirect.github.com/jeremylong/DependencyCheck/issues/6915";>#6915) fix(site): Update Fluido skin to resolve broken fork-me-on-github image (https://redirect.github.com/jeremylong/DependencyCheck/issues/6914";>#6914) fix: do not report over 100% download complete (https://redirect.github.com/jeremylong/DependencyCheck/issues/6899";>#6899) fix: Correct spelling of occurring in NvdApiDataSource.java (https://redirect.github.com/jeremylong/DependencyCheck/issues/6883";>#6883) fix: skip blank lines in requirements.txt (https://redirect.github.com/jeremylong/DependencyCheck/issues/6867";>#6867) fix: correct percentage calculation (https://redirect.github.com/jeremylong/DependencyCheck/issues/6868";>#6868) docs: remove old recommendation (https://redirect.gi
[PR] Bump github/codeql-action from 3.26.5 to 3.26.6 [directory-kerby]
dependabot[bot] opened a new pull request, #433: URL: https://github.com/apache/directory-kerby/pull/433 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.5 to 3.26.6. Changelog Sourced from https://github.com/github/codeql-action/blob/main/CHANGELOG.md";>github/codeql-action's changelog. CodeQL Action Changelog See the https://github.com/github/codeql-action/releases";>releases page for the relevant changes to the CodeQL CLI and language packs. Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers. [UNRELEASED] No user facing changes. 3.26.6 - 29 Aug 2024 Update default CodeQL bundle version to 2.18.3. https://redirect.github.com/github/codeql-action/pull/2449";>#2449 3.26.5 - 23 Aug 2024 Fix an issue where the csrutil system call used for telemetry would fail on MacOS ARM machines with System Integrity Protection disabled. https://redirect.github.com/github/codeql-action/pull/2441";>#2441 3.26.4 - 21 Aug 2024 Deprecation: The add-snippets input on the analyze Action is deprecated and will be removed in the first release in August 2025. https://redirect.github.com/github/codeql-action/pull/2436";>#2436 Fix an issue where the disk usage system call used for telemetry would fail on MacOS ARM machines with System Integrity Protection disabled, and then surface a warning. The system call is now disabled for these machines. https://redirect.github.com/github/codeql-action/pull/2434";>#2434 3.26.3 - 19 Aug 2024 Fix an issue where the CodeQL Action could not write diagnostic messages on Windows. This issue did not impact analysis quality. https://redirect.github.com/github/codeql-action/pull/2430";>#2430 3.26.2 - 14 Aug 2024 Update default CodeQL bundle version to 2.18.2. https://redirect.github.com/github/codeql-action/pull/2417";>#2417 3.26.1 - 13 Aug 2024 No user facing changes. 3.26.0 - 06 Aug 2024 Deprecation: Swift analysis on Ubuntu runner images is no longer supported. Please migrate to a macOS runner if this affects you. https://redirect.github.com/github/codeql-action/pull/2403";>#2403 Bump the minimum CodeQL bundle version to 2.13.5. https://redirect.github.com/github/codeql-action/pull/2408";>#2408 3.25.15 - 26 Jul 2024 Update default CodeQL bundle version to 2.18.1. https://redirect.github.com/github/codeql-action/pull/2385";>#2385 3.25.14 - 25 Jul 2024 Experimental: add a new start-proxy action which starts the same HTTP proxy as used by https://github.com/github/dependabot-action";>github/dependabot-action. Do not use this in production as it is part of an internal experiment and subject to change at any time. https://redirect.github.com/github/codeql-action/pull/2376";>#2376 3.25.13 - 19 Jul 2024 ... (truncated) Commits https://github.com/github/codeql-action/commit/4dd16135b69a43b6c8efb853346f8437d92d3c93";>4dd1613 Merge pull request https://redirect.github.com/github/codeql-action/issues/2452";>#2452 from github/update-v3.26.6-7233ec5e6 https://github.com/github/codeql-action/commit/dd9dd2d5389e8ca48a8201513c3fd18d7fda567d";>dd9dd2d Update changelog for v3.26.6 https://github.com/github/codeql-action/commit/7233ec5e6b313c47141f047dd5be5f957560dd27";>7233ec5 Merge pull request https://redirect.github.com/github/codeql-action/issues/2449";>#2449 from github/update-bundle/codeql-bundle-v2.18.3 https://github.com/github/codeql-action/commit/a32c44dba17a9c6628320a29508e84e052128a3a";>a32c44d Add changelog note https://github.com/github/codeql-action/commit/2966897c6759237a41ccd8fd392565a4e86a5121";>2966897 Update default bundle to codeql-bundle-v2.18.3 https://github.com/github/codeql-action/commit/b8efe4dc6ab6d31abe3ec159420d2a4916880800";>b8efe4d Merge pull request https://redirect.github.com/github/codeql-action/issues/2435";>#2435 from github/update-supported-enterprise-server-versions https://github.com/github/codeql-action/commit/ab408a875b0616b0e5eaa4d0d86ac836a29cfb4e";>ab408a8 Merge branch 'main' into update-supported-enterprise-server-versions https://github.com/github/codeql-action/commit/864b979bc3eb6b10501334cb368b2b398a60ff1b";>864b979 Merge pull request https://redirect.github.com/github/codeql-action/issues/2443";>#2443 from github/dbartol/config-file-telemetry https://github.com/github/codeql-action/commit/d36c7aaf6a9744943ec1ee06e31a6dd1eb8e1357";>d36c7aa Merge pull request https://redirect.github.com/github/codeql-action/issues/2448";>#24
[PR] Bump actions/upload-artifact from 4.3.6 to 4.4.0 [directory-kerby]
dependabot[bot] opened a new pull request, #432: URL: https://github.com/apache/directory-kerby/pull/432 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.6 to 4.4.0. Release notes Sourced from https://github.com/actions/upload-artifact/releases";>actions/upload-artifact's releases. v4.4.0 Notice: Breaking Changes :warning: We will no longer include hidden files and folders by default in the upload-artifact action of this version. This reduces the risk that credentials are accidentally uploaded into artifacts. Customers who need to continue to upload these files can use a new option, include-hidden-files, to continue to do so. See https://github.blog/changelog/2024-08-19-notice-of-upcoming-deprecations-and-breaking-changes-in-github-actions-runners/";>"Notice of upcoming deprecations and breaking changes in GitHub Actions runners" changelog and https://redirect.github.com/actions/upload-artifact/issues/602";>this issue for more details. What's Changed Exclude hidden files by default by https://github.com/joshmgross";>@joshmgross in https://redirect.github.com/actions/upload-artifact/pull/598";>actions/upload-artifact#598 Full Changelog: https://github.com/actions/upload-artifact/compare/v4.3.6...v4.4.0";>https://github.com/actions/upload-artifact/compare/v4.3.6...v4.4.0 Commits https://github.com/actions/upload-artifact/commit/50769540e7f4bd5e21e526ee35c689e35e0d6874";>5076954 Merge pull request https://redirect.github.com/actions/upload-artifact/issues/598";>#598 from actions/joshmgross/exclude-hidden-files https://github.com/actions/upload-artifact/commit/d52396ac5d312b1bda1b9fe2ae55d862c65abd68";>d52396a Add a warning about enabling include-hidden-files https://github.com/actions/upload-artifact/commit/710f36207581d49e465ccbed3e007c317290fe11";>710f362 Remove "merged" from include-hidden-files input description https://github.com/actions/upload-artifact/commit/3b315f26f6f828f74089e1863e67e60e48e37563";>3b315f2 npm run release again 🙂 https://github.com/actions/upload-artifact/commit/3be2180eb79b56341b1b127ca06a5adba2a5a3e4";>3be2180 Remove another trailing comma https://github.com/actions/upload-artifact/commit/453e8d0a40444939146df5febed0b1221b9dd073";>453e8d0 Update glob license https://github.com/actions/upload-artifact/commit/0a398c14804ead69f18a166f0a99f91239261ee5";>0a398c1 npm run release https://github.com/actions/upload-artifact/commit/a0c40cf60283f329afac2bc0fa77f1a59fa11e6e";>a0c40cf Update to latest @actions/glob and fix tests https://github.com/actions/upload-artifact/commit/acb59e47763b6e601a344d04cf3c082ee336b709";>acb59e4 lint https://github.com/actions/upload-artifact/commit/cb6558bb10fe4afe4054d0be4b3136e673eb5e7f";>cb6558b Exclude hidden files by default See full diff in https://github.com/actions/upload-artifact/compare/834a144ee995460fba8ed112a2fc961b36a5ec5a...50769540e7f4bd5e21e526ee35c689e35e0d6874";>compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency
[PR] Bump org.apache.maven.plugins:maven-surefire-plugin from 3.4.0 to 3.5.0 [directory-kerby]
dependabot[bot] opened a new pull request, #431: URL: https://github.com/apache/directory-kerby/pull/431 Bumps [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) from 3.4.0 to 3.5.0. Commits https://github.com/apache/maven-surefire/commit/c78365f5a229155e7d0cfad2913445fc01d7a959";>c78365f [maven-release-plugin] prepare release surefire-3.5.0 https://github.com/apache/maven-surefire/commit/05e4681f38f53c2a54b7671291ca02dc63586a98";>05e4681 [SUREFIRE-2227] Dynamically calculate xrefTestLocation https://github.com/apache/maven-surefire/commit/f1a419a1457e5a83f9deb07a700a1376487f72ed";>f1a419a [SUREFIRE-2228] Upgrade to Doxia 2.0.0 Milestone Stack https://github.com/apache/maven-surefire/commit/5e14d4fb4ddf6e4ce4af0f6632398c7ba8df2325";>5e14d4f [SUREFIRE-2161] Align Mojo class names and output names https://github.com/apache/maven-surefire/commit/c0784ab18a9b3830812be4cf6bc147f5c5285005";>c0784ab Bump org.apache.commons:commons-compress from 1.27.0 to 1.27.1 https://github.com/apache/maven-surefire/commit/79ea7178aaf73190f4aead3d38d4b8276d7dd1b7";>79ea717 [SUREFIRE-2256] Upgrade to Parent 43 https://github.com/apache/maven-surefire/commit/4648b47403fb9a43025892b22f361f2bef5f057c";>4648b47 add Reproducible Builds badge https://github.com/apache/maven-surefire/commit/f64c1b3148626ece80726b74208c4b62641a40e3";>f64c1b3 [maven-release-plugin] prepare for next development iteration See full diff in https://github.com/apache/maven-surefire/compare/surefire-3.4.0...surefire-3.5.0";>compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.5.0 [directory-kerby]
coheigea merged PR #427: URL: https://github.com/apache/directory-kerby/pull/427 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump org.apache.ant:ant from 1.10.14 to 1.10.15 [directory-server]
coheigea merged PR #222: URL: https://github.com/apache/directory-server/pull/222 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump org.apache.commons:commons-lang3 from 3.16.0 to 3.17.0 [directory-server]
coheigea merged PR #223: URL: https://github.com/apache/directory-server/pull/223 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.5.0 [directory-kerby]
dependabot[bot] commented on PR #427: URL: https://github.com/apache/directory-kerby/pull/427#issuecomment-2324385621 The base commit for this pull request has not changed. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.5.0 [directory-kerby]
coheigea commented on PR #427: URL: https://github.com/apache/directory-kerby/pull/427#issuecomment-2324384389 @dependabot rebase -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump github/codeql-action from 3.26.5 to 3.26.6 [directory-ldap-api]
coheigea merged PR #130: URL: https://github.com/apache/directory-ldap-api/pull/130 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump actions/upload-artifact from 4.3.6 to 4.4.0 [directory-ldap-api]
coheigea merged PR #131: URL: https://github.com/apache/directory-ldap-api/pull/131 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
Re: [PR] Bump org.apache.maven.plugins:maven-checkstyle-plugin from 3.4.0 to 3.5.0 [directory-kerby]
coheigea merged PR #428: URL: https://github.com/apache/directory-kerby/pull/428 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
