Skip to content

Update Mend: high confidence minor and patch dependency updates #46

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Update Mend: high confidence minor and patch dependency updates #46

wants to merge 1 commit into from

Conversation

@mend-for-github.amrom.workers.dev
Copy link
Contributor

@mend-for-github.amrom.workers.dev mend-for-github.amrom.workers.dev bot commented Feb 23, 2024 •
edited
Loading

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
event-source-polyfill 1.0.26 -> 1.0.31 age adoption passing confidence
maven (source) 3.8.1 -> 3.9.11 age adoption passing confidence
org.apache.maven.plugins:maven-enforcer-plugin (source) 3.3.0 -> 3.6.2 age adoption passing confidence
com.diffplug.spotless:spotless-maven-plugin 2.38.0 -> 2.46.1 age adoption passing confidence
org.hsqldb:hsqldb (source) 2.5.2 -> 2.7.4 age adoption passing confidence
org.apache.commons:commons-compress (source) 1.23.0 -> 1.28.0 age adoption passing confidence
com.auth0:java-jwt 4.4.0 -> 4.5.0 age adoption passing confidence
com.auth0:jwks-rsa 0.22.1 -> 0.23.0 age adoption passing confidence
org.apache.commons:commons-exec (source) 1.3 -> 1.6.0 age adoption passing confidence
org.ow2.asm:asm (source) 9.5 -> 9.9 age adoption passing confidence
com.nulab-inc:zxcvbn 1.8.0 -> 1.9.0 age adoption passing confidence
com.thoughtworks.xstream:xstream (source) 1.4.5 -> 1.4.21 age adoption passing confidence
org.apache.maven.plugins:maven-surefire-plugin (source) 3.1.2 -> 3.5.4 age adoption passing confidence
org.jsoup:jsoup (source) 1.16.1 -> 1.21.2 age adoption passing confidence
org.webjars:jquery (source) 3.6.4 -> 3.7.1 age adoption passing confidence
org.bitbucket.b_c:jose4j (source) 0.9.3 -> 0.9.6 age adoption passing confidence
io.jsonwebtoken:jjwt 0.9.1 -> 0.13.0 age adoption passing confidence
org.jacoco:jacoco-maven-plugin (source) 0.8.10 -> 0.8.14 age adoption passing confidence
com.google.guava:guava 32.1.1-jre -> 32.1.3-jre age adoption passing confidence
org.apache.commons:commons-text (source) 1.10.0 -> 1.14.0 age adoption passing confidence
org.apache.maven.plugins:maven-checkstyle-plugin (source) 3.3.0 -> 3.6.0 age adoption passing confidence

Release Notes

Yaffle/EventSource (event-source-polyfill)

v1.0.31

Compare Source

v1.0.30

Compare Source

v1.0.29

Compare Source

v1.0.28

Compare Source

apache/maven (maven)

v3.9.11: 3.9.11

Compare Source

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

🔧 Build

📦 Dependency updates

v3.9.10: 3.9.10

Compare Source

Release Notes - Maven - Version 3.9.10

Bug

  • [MNG-8096] - Inconsistent dependency resolution behaviour for concurrent multi-module build can cause failures
  • [MNG-8169] - MINGW support requires --add-opens java.base/java.lang=ALL-UNNAMED
  • [MNG-8170] - Maven 3.9.8 contains weird native library for Jansi on Windows/arm64
  • [MNG-8211] - Maven should fail builds that use CI Friendly versions but have no values set
  • [MNG-8248] - WARNING: A restricted method in java.lang.System has been called
  • [MNG-8256] - ProjectDependencyGraph bug: in case of filtering, non-direct module links are lost
  • [MNG-8315] - Failure of mvn.cmd if a .mvn directory is located at drive root
  • [MNG-8396] - Maven takes forever to resume
  • [MNG-8711] - "Duplicate artifact" in LifecycleDependencyResolver

Improvement

  • [MNG-8370] - Introduce maven.repo.local.head
  • [MNG-8399] - JDK 24+ issues warning about usage of sun.misc.Unsafe
  • [MNG-8707] - Add methods to remove compile and test source roots
  • [MNG-8712] - improve dependency version explanation: it&#​39;s a requirement, not always effective version
  • [MNG-8717] - Remove maven-plugin-plugin:addPluginArtifactMetadata from default binding
  • [MNG-8722] - Use a single standalone version of asm
  • [MNG-8731] - Use https for xsi:schemaLocation in generated descriptors
  • [MNG-8734] - Simplify scripting like "get project version" cases

Task

  • [MNG-8728] - Bump Eclipse Sisu from 0.9.0.M3 to 0.9.0.M4 and use Java 24 on CI

Dependency upgrade

  • [MNG-8289] - Update Plexus annotations to 2.2.0
  • [MNG-8443] - Bump com.google.guava:guava from 33.2.1-jre to 33.4.0-jre
  • [MNG-8531] - Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 3.6.0
  • [MNG-8532] - Bump commons-io:commons-io from 2.16.1 to 2.18.0
  • [MNG-8534] - Bump org.codehaus.mojo:buildnumber-maven-plugin from 3.2.0 to 3.2.1
  • [MNG-8635] - Bump com.google.guava:failureaccess from 1.0.2 to 1.0.3
  • [MNG-8636] - Bump com.google.guava:guava from 33.4.0-jre to 33.4.5-jre
  • [MNG-8640] - Bump org.apache.maven:maven-parent from 43 to 44
  • [MNG-8661] - Bump com.google.guava:guava from 33.4.5-jre to 33.4.6-jre
  • [MNG-8701] - Bump org.codehaus.plexus:plexus-interpolation from 1.27 to 1.28
  • [MNG-8702] - Bump org.codehaus.plexus:plexus-classworlds from 2.8.0 to 2.9.0
  • [MNG-8703] - Bump commons-io:commons-io from 2.18.0 to 2.19.0
  • [MNG-8704] - Bump com.google.guava:guava from 33.4.6-jre to 33.4.8-jre
  • [MNG-8705] - Bump commons-jxpath:commons-jxpath from 1.3 to 1.4.0
  • [MNG-8706] - Bump commons-cli:commons-cli from 1.8.0 to 1.9.0
  • [MNG-8715] - Bump org.fusesource.jansi:jansi from 2.4.1 to 2.4.2
  • [MNG-8716] - Bump resolver to 1.9.23
  • [MNG-8745] - Bump xmlunitVersion from 2.10.0 to 2.10.2

What's Changed

New Contributors

Full Changelog: apache/maven@maven-3.9.9...maven-3.9.10

v3.9.9: 3.9.9

Compare Source

Release Notes - Maven - Version 3.9.9

Bug

  • [MNG-8159] - Fix search for topDirectory when using -f / --file for Maven 3.9.x
  • [MNG-8165] - Maven does not find extensions for -f when current dir is root
  • [MNG-8177] - Warning "&#​39;dependencyManagement.dependencies.dependency.systemPath&#​39; for com.sun:tools:jar refers to a non-existing file C:\Temp\jdk-11.0.23\..\lib\tools.jar"
  • [MNG-8178] - Profile activation based on OS properties is broken for "mvn site"
  • [MNG-8180] - Resolver will blindly assume it is deploying a plugin by presence of META-INF/maven/plugins.xml in JAR
  • [MNG-8182] - Missing or mismatching Trusted Checksum for some artifacts is not properly reported
  • [MNG-8188] - [REGRESSION] Property not resolved in profile pluginManagement

Task

  • [MNG-8206] - Remove Maven 2.1 (v 2.0) compatibility bits

Dependency upgrade

What's Changed

New Contributors

Full Changelog: apache/maven@maven-3.9.8...maven-3.9.9

v3.9.8: 3.9.8

Compare Source

Release Notes - Maven - Version 3.9.8

Bug

  • [MNG-7758] - o.e.aether.resolution.ArtifactResolutionException incorrectly examined when multiple repositories are involved
  • [MNG-8066] - Maven hangs on self-referencing exceptions
  • [MNG-8116] - Plugin configuration can randomly fail in case of method overloading as it doesn&#​39;t take into account implementation attribute
  • [MNG-8131] - Property replacement in dependency pom no longer works
  • [MNG-8135] - Profile activation based on OS properties is no longer case insensitive
  • [MNG-8142] - If JDK profile activator gets "invalid" JDK version for whatever reason, it chokes but does not tell why
  • [MNG-8147] - Profile interpolation broke their evaluation in case of duplicate IDs

Improvement

  • [MNG-7902] - Sort plugins in validation report
  • [MNG-8140] - When a model is discarded (by model builder) for whatever reason, show why it happened
  • [MNG-8141] - Model Builder should report if not sure about "fully correct" outcome
  • [MNG-8150] - Make SimplexTransferListener handle absent source/target files

Task

Dependency upgrade

  • [MNG-8136] - Update to Eclipse Sisu 0.9.0.M3
  • [MNG-8143] - Update to commons-cli 1.8.0
  • [MNG-8144] - Update to Guava 32.2.1-jre
  • [MNG-8154] - Upgrade default plugin bindings

What's Changed

Full Changelog: apache/maven@maven-3.9.7...maven-3.9.8

v3.9.7: 3.9.7

Compare Source

Release Notes - Maven - Version 3.9.7

Bug

  • [MNG-8106] - Maven Metadata corruption if repository directory role overlaps
  • [MNG-8121] - NullPointerException at org.apache.maven.artifact.repository.metadata.Metadata.merge (Metadata.java:293)

New Feature

  • [MNG-5726] - Update OS Activation To Allow Wildcards In OS Version
  • [MNG-8030] - Backport: Add ability to ignore dependency repositories: mvn -itr

Improvement

  • [MNG-8019] - Streamline update policy of pluginRepository/repository of Maven Central in Super POM
  • [MNG-8029] - improve documentation of mirror in settings
  • [MNG-8031] - Backport: Make Maven transfer listener used with Resolver more concurrent friendly
  • [MNG-8081] - default profile activation should consider available system and user properties
  • [MNG-8085] - swtich from png+imagemap to svg
  • [MNG-8117] - Improve prerequisite evaluation and plugin version selection logging

Task

  • [MNG-7309] - Remove redundant MojoDescriptor parameterMap
  • [MNG-8011] - Minimize and make generic the README.txt
  • [MNG-8055] - Investigate possible solutions for build number diffs on deploy

Dependency upgrade

  • [MNG-8094] - Resolver 1.9.19
  • [MNG-8100] - Upgrade default plugin bindings
  • [MNG-8101] - Upgrade Parent to 42
  • [MNG-8109] - Resolver 1.9.20
  • [MNG-8115] - Upgrade minimal set of dependencies
  • [MNG-8125] - (build) Bump buildhelper-maven-plugin to 3.6.0 (was 3.4.0)
  • [MNG-8126] - Bump logback classic to 1.2.13 (was 1.2.12)
  • [MNG-8127] - Bump guava to 33.2.0-jre

What's Changed

New Contributors

Full Changelog: apache/maven@maven-3.9.6...maven-3.9.7

v3.9.6: 3.9.6

Compare Source

Release Notes - Maven - Version 3.9.6

Improvement

  • [MNG-7939] - Allow to exclude plugins from validation

Dependency upgrade

  • [MNG-7913] - Upgrade Sisu version to 0.9.0.M2
  • [MNG-7934] - Upgrade Resolver version to 1.9.18
  • [MNG-7942] - Upgrade to parent POM 41
  • [MNG-7943] - Upgrade default plugin bindings

v3.9.5: 3.9.5

Compare Source

Release Notes - Maven - Version 3.9.5

Bug

  • [MNG-7851] - Error message when modelVersion is 4.0 is confusing

Improvement

  • [MNG-7875] - colorize transfer messages
  • [MNG-7895] - Support ${project.basedir} in file profile activation

Task

  • [MNG-7856] - Maven Resolver Provider classes ctor change
  • [MNG-7870] - Undeprecate wrongly deprecated repository metadata
  • [MNG-7872] - Deprecate org.apache.maven.repository.internal.MavenResolverModule
  • [MNG-7874] - maven-resolver-provider: introduce NAME constants.

Dependency upgrade

  • [MNG-7859] - Update to Resolver 1.9.16

v3.9.4: 3.9.4

Compare Source

Release Notes - Maven - Version 3.9.4

Bug

  • [MNG-7846] - endless loop in DefaultExceptionHandler.getMessage()

Dependency upgrade

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

@mend-for-github.amrom.workers.dev mend-for-github.amrom.workers.dev bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch from 91e4d28 to 3d4946a Compare February 26, 2024 04:53
@mend-for-github.amrom.workers.dev mend-for-github.amrom.workers.dev bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 5 times, most recently from 1b9f935 to 1b58ef9 Compare March 16, 2024 06:32
@mend-for-github.amrom.workers.dev mend-for-github.amrom.workers.dev bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 5 times, most recently from 9d17800 to 2dbcc84 Compare March 28, 2024 14:23
@mend-for-github.amrom.workers.dev mend-for-github.amrom.workers.dev bot changed the title chore(deps): update mend: high confidence minor and patch dependency updates fix(deps): update mend: high confidence minor and patch dependency updates Mar 28, 2024
@mend-for-github.amrom.workers.dev mend-for-github.amrom.workers.dev bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 16 times, most recently from 4ca7627 to 9935281 Compare April 3, 2024 06:05
@mend-for-github.amrom.workers.dev mend-for-github.amrom.workers.dev bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 2 times, most recently from e9f9e62 to 4b02ac2 Compare April 7, 2024 04:36
@mend-for-github.amrom.workers.dev mend-for-github.amrom.workers.dev bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 2 times, most recently from 4b9a8c4 to 42f3d43 Compare May 10, 2025 09:10
@mend-for-github.amrom.workers.dev mend-for-github.amrom.workers.dev bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 4 times, most recently from 7c9be4b to 63ff0a3 Compare May 20, 2025 06:54
@mend-for-github.amrom.workers.dev mend-for-github.amrom.workers.dev bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 5 times, most recently from bd7bd3d to 61e37c2 Compare May 30, 2025 08:58
@mend-for-github.amrom.workers.dev mend-for-github.amrom.workers.dev bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 5 times, most recently from 84c13eb to 3404c6c Compare June 6, 2025 11:13
@mend-for-github.amrom.workers.dev mend-for-github.amrom.workers.dev bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 5 times, most recently from b91bbac to 3c176f6 Compare June 14, 2025 10:07
@mend-for-github.amrom.workers.dev mend-for-github.amrom.workers.dev bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch from 3c176f6 to 7ac7879 Compare June 16, 2025 14:35
@mend-for-github.amrom.workers.dev mend-for-github.amrom.workers.dev bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 5 times, most recently from 1c20702 to 5de72e9 Compare November 29, 2025 18:15
@mend-for-github.amrom.workers.dev mend-for-github.amrom.workers.dev bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch from 5de72e9 to 3b08451 Compare December 3, 2025 10:58
@mend-for-github.amrom.workers.dev mend-for-github.amrom.workers.dev bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch from 3b08451 to 21292a4 Compare December 4, 2025 18:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant