Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update all non-major dependencies #168

Merged
merged 1 commit into from
Nov 5, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Oct 1, 2024

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
docker.io/bitnami/kafka (source) minor 3.7.1 -> 3.8.1 age adoption passing confidence
docker.io/curlimages/curl minor 8.8.0 -> 8.10.1 age adoption passing confidence
docker.io/hapiproject/hapi minor v7.2.0 -> v7.4.0 age adoption passing confidence
docker.io/library/gradle stage minor 8.8.0-jdk21 -> 8.10.2-jdk21 age adoption passing confidence
ghcr.io/miracum/fhir-pseudonymizer minor v2.21.11 -> v2.22.0 age adoption passing confidence
ghcr.io/miracum/loinc-conversion minor v1.14.10 -> v1.15.2 age adoption passing confidence
gradle (source) minor 8.8 -> 8.10.2 age adoption passing confidence
com.uber.nullaway:nullaway dependencies patch 0.12.0 -> 0.12.1 age adoption passing confidence
com.google.errorprone:error_prone_core (source) dependencies minor 2.34.0 -> 2.35.1 age adoption passing confidence
com.h2database:h2 (source) dependencies minor 2.2.224 -> 2.3.232 age adoption passing confidence
org.postgresql:postgresql (source) dependencies patch 42.7.3 -> 42.7.4 age adoption passing confidence
io.micrometer:micrometer-core dependencies patch 1.13.1 -> 1.13.6 age adoption passing confidence
io.micrometer:micrometer-registry-prometheus dependencies patch 1.13.1 -> 1.13.6 age adoption passing confidence
org.miracum:kafka-fhir-serializer dependencies patch 1.0.6 -> 1.0.7 age adoption passing confidence
ca.uhn.hapi.fhir:hapi-fhir-client-okhttp (source) dependencies minor 7.2.1 -> 7.4.5 age adoption passing confidence
ca.uhn.hapi.fhir:hapi-fhir-structures-r4 (source) dependencies minor 7.2.1 -> 7.4.5 age adoption passing confidence
ca.uhn.hapi.fhir:hapi-fhir-client (source) dependencies minor 7.2.1 -> 7.4.5 age adoption passing confidence
ca.uhn.hapi.fhir:hapi-fhir-base (source) dependencies minor 7.2.1 -> 7.4.5 age adoption passing confidence
org.springframework.cloud:spring-cloud-dependencies (source) dependencies patch 2023.0.2 -> 2023.0.3 age adoption passing confidence
org.springframework.boot plugin patch 3.3.4 -> 3.3.5 age adoption passing confidence

Release Notes

curl/curl-container (docker.io/curlimages/curl)

v8.10.1

Compare Source

Changed
  • bump to curl 8.10.1

v8.10.0

Compare Source

Changed
  • bump to curl 8.10.0
  • bump to alpine:3.20.3

v8.9.1

Compare Source

Changed
  • bump to curl 8.9.1

v8.9.0

Compare Source

Changed
  • bump to curl 8.9.0
  • bump to alpine 3.20.2
miracum/fhir-pseudonymizer (ghcr.io/miracum/fhir-pseudonymizer)

v2.22.0

Compare Source

Features
  • added support for truncating crypto-hashed values to a max length (#​207) (54dae1e)
Miscellaneous Chores

v2.21.16

Compare Source

Miscellaneous Chores

v2.21.15

Compare Source

Miscellaneous Chores

v2.21.14

Compare Source

Miscellaneous Chores

v2.21.13

Compare Source

Miscellaneous Chores

v2.21.12

Compare Source

Documentation
Miscellaneous Chores
Build
miracum/loinc-conversion (ghcr.io/miracum/loinc-conversion)

v1.15.2

Compare Source

Bug Fixes
Miscellaneous Chores

v1.15.1

Compare Source

Miscellaneous Chores

v1.15.0

Compare Source

Features
  • make loinc version configurable, provide both 2.67 (default) and 2.77 (#​72) (1ba71d3)
Bug Fixes
Documentation
Miscellaneous Chores
gradle/gradle (gradle)

v8.10.2

Compare Source

v8.10.1

Compare Source

v8.10

Compare Source

v8.9

Compare Source

uber/NullAway (com.uber.nullaway:nullaway)

v0.12.1

  • Add library model for Apache Commons CollectionUtils.isNotEmpty (#​932) (#​1062)
  • Handle records in targetTypeMatches (#​1061)
google/error-prone (com.google.errorprone:error_prone_core)

v2.35.1: Error Prone 2.35.1

Error Prone's dependency on protobuf has been downgraded to 3.25.5 for this release.

Version 3.25.5 of protobuf still fixes CVE-2024-7254. This release is provided for users who aren't ready to update to 4.x, see also #​4584 and #​4634. Future versions of Error Prone will upgrade back to protobuf 4.x.

Full changelog: google/error-prone@v2.35.0...v2.35.1

v2.35.0: Error Prone 2.35.0

Changes:

  • Fix handling of \s before the trailing delimiter in MisleadingEscapedSpace
  • TimeUnitMismatch improvements: handle binary trees, consider trees like fooSeconds * 1000 to have units of millis

New checks:

Full changelog: google/error-prone@v2.34.0...v2.35.0

pgjdbc/pgjdbc (org.postgresql:postgresql)

v42.7.4

Added
  • chore: SCRAM dependency to 3.1 and support channel binding PR #​3188
  • chore: Add PostgreSQL 15, 16, and 17beta1 to CI tests PR #​3299
  • test: Update to 17beta3 PR #​3308
  • chore: Implement direct SSL ALPN connections PR #​3252
  • translation: Add Korean translation file PR #​3276
Fixed
  • fix: PgInterval ignores case for represented interval string PR #​3344
  • perf: Avoid extra copies when receiving int4 and int2 in PGStream PR #​3295
  • fix: Add support for Infinity::numeric values in ResultSet.getObject PR #​3304
  • fix: Ensure order of results for getDouble PR #​3301
  • perf: Replace BufferedOutputStream with unsynchronized PgBufferedOutputStream, allow configuring different Java and SO_SNDBUF buffer sizes PR #​3248
  • fix: Fix SSL tests PR #​3260
  • fix: Support bytea in preferQueryMode=simple PR #​3243
  • fix: Fix #​3234 - Return -1 as update count for stored procedure calls PR #​3235
  • fix: Fix #​3224 - conversion for TIME '24:00' to LocalTime breaks in binary-mode PR #​3225
  • perf: Speed up getDate by parsing bytes instead of String PR #​3141
  • fix: support PreparedStatement.setBlob(1, Blob) and PreparedStatement.setClob(1, Clob) for lobs that return -1 for length PR #​3136
  • fix: Validates resultset Params in PGStatement constructor. uses assertThro… PR #​3171
  • fix: Validates resultset parameters PR #​3167
  • docs: Replace greater to with greater than PR #​3315
  • docs: Clarify binaryTransfer and prepareThreshold PR #​3338
  • docs: use.md, typo PR #​3314
  • test: Use docker v2 which changes docker-compose to docker compose #​3339
  • refactor: Merge PgPreparedStatement#setBinaryStream int and long methods PR #​3165
  • test: Test both binaryMode=true,false when creating connections in DatabaseMetaDataTest PR #​3231
  • docs: Fixed typos in all source code and documentations PR #​3242
  • chore: Remove self-hosted runner PR #​3227
  • docs: Add cancelSignalTimeout in README PR #​3190
  • docs: Document READ_ONLY_MODE in README PR #​3175
  • test: Test for +/- infinity double values PR #​3294
  • test: Switch localhost and auth-test around for test-gss PR #​3343
  • fix: remove preDescribe from internalExecuteBatch PR #​2883
Deprecated
  • test: Deprecate all PostgreSQL versions older than 9.1 PR #​3335
micrometer-metrics/micrometer (io.micrometer:micrometer-core)

v1.13.6: 1.13.6

⭐ New Features / Enhancements

  • Improve memory usage of StepBucketHistogram #​4954

🐞 Bug Fixes

  • Instrumented Java 11 HttpClient does not re-throw exceptions in sendAsync call #​5136
  • Map time units to UCUM format for Dynatrace #​5588
  • Aspects' tagsBasedOnJoinPoint may throw uncaught exception #​5584
  • Set user agent header in OTLP registry #​5577
  • MicrometerHttpRequestExecutor fails to instrument with Apache HC 5.4 #​5575

📔 Documentation

  • Remove duplicated context-propagation documentation in Micrometer docs #​5549
  • [OTLP Registry] Document batch size configuration #​5578

🔨 Dependency Upgrades

  • Bump dropwizard-metrics from 4.2.27 to 4.2.28 #​5566
  • Bump context-propagation to 1.1.2 #​5592

📝 Tasks

  • Bump org.junit:junit-bom from 5.10.4 to 5.10.5 #​5571
  • Bump me.champeau.gradle:japicmp-gradle-plugin from 0.4.3 to 0.4.4 #​5567
  • Bump jersey3 from 3.0.12 to 3.0.16 #​5560
  • Do not include formerly removed micrometer-samples-jetty12 subproject #​5554
  • Bump spring from 5.3.37 to 5.3.39 #​5419
  • Bump org.junit.platform:junit-platform-launcher from 1.10.4 to 1.10.5 #​5557
  • Bump org.mongodb:mongodb-driver-sync from 4.11.3 to 4.11.4 #​5538
  • Bump uk.org.webcompere:system-stubs-jupiter from 2.1.6 to 2.1.7 #​5536
  • Bump io.netty:netty-bom from 4.1.112.Final to 4.1.114.Final #​5534
  • Bump io.spring.develocity.conventions from 0.0.20 to 0.0.22 #​5533
  • Bump org.junit.platform:junit-platform-launcher from 1.10.3 to 1.10.4 #​5532
  • Bump jetty9 from 9.4.55.v20240627 to 9.4.56.v20240826 #​5531
  • Bump junit from 5.10.3 to 5.10.4 #​5530
  • Bump spring from 5.3.37 to 5.3.39 #​5455

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​lenin-jaganathan, @​pirgeo, @​kinddevil, and @​joaopgrassi

v1.13.5: 1.13.5

🐞 Bug Fixes

  • ConcurrentModificationException when late meter filters are added #​5489

🔨 Dependency Upgrades

  • Bump com.signalfx.public:signalfx-java from 1.0.45 to 1.0.46 #​5506
  • Bump com.netflix.spectator:spectator-reg-atlas from 1.7.19 to 1.7.21 #​5505

Tasks

  • Use Prometheus BOMs for dependency management #​5468

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​mabartos, @​emmanuel-ferdman, and @​izeye

v1.13.4: 1.13.4

🐞 Bug Fixes

  • BOM contains a non-resolvable dependency: io.micrometer:concurrency-tests #​5395
  • Zero percentile can be missing from Dynatrace meters where expected #​4750

📔 Documentation

🔨 Dependency Upgrades

  • Bump com.netflix.spectator:spectator-reg-atlas from 1.7.18 to 1.7.19 #​5425
  • Bump dropwizard-metrics from 4.2.26 to 4.2.27 #​5423
  • Bump com.signalfx.public:signalfx-java from 1.0.44 to 1.0.45 #​5420

📝 Tasks

  • Bump org.apache.maven:maven-resolver-provider from 3.9.8 to 3.9.9 #​5426
  • Bump io.spring.develocity.conventions from 0.0.19 to 0.0.20 #​5424
  • Bump io.projectreactor:reactor-bom from 2022.0.21 to 2022.0.22 #​5422
  • Bump spring-javaformat from 0.0.42 to 0.0.43 #​5421
  • Bump org.postgresql:postgresql from 42.7.3 to 42.7.4 #​5418
  • Fix GuavaCacheMetricsTest and CaffeineCacheMetricsTest #​5405

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​izeye and @​madhead

v1.13.3: 1.13.3

🐞 Bug Fixes

  • Add default factoryType tag in CommonsObjectPool2Metrics #​5316
  • Buffered statsd lines are not published on close #​2141
  • Disable kotlinSourcesJar since it conflicts with sourcesJar #​5151

📔 Documentation

  • Make more explicit that recording a metric is safe to call #​5365

🔨 Dependency Upgrades

  • Bump com.fasterxml.jackson.core:jackson-databind from 2.17.1 to 2.17.2 #​5364
  • Bump com.gradle.develocity from 3.17.5 to 3.17.6 #​5357
  • Bump com.netflix.spectator:spectator-reg-atlas from 1.7.14 to 1.7.17 #​5356
  • Bump com.signalfx.public:signalfx-java from 1.0.43 to 1.0.44 #​5362
  • Bump io.netty:netty-bom from 4.1.111.Final to 4.1.112.Final #​5360
  • Bump io.projectreactor:reactor-bom from 2022.0.20 to 2022.0.21 #​5358
  • Bump jersey3 from 3.0.11 to 3.0.12 #​5378
  • Bump jetty9 from 9.4.54.v20240208 to 9.4.55.v20240627 #​5361
  • Bump org.jetbrains.kotlin.jvm from 1.9.23 to 1.9.24 #​5294

📝 Tasks

  • Make PrometheusMeterRegistryTest less flaky #​5302
  • Migrate to io.spring.develocity.conventions:0.0.19 #​5312
  • Apply test-retry settings to all tests #​5303

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​izeye, @​HYEONSEOK1, @​BJMg, and @​cbrachem

v1.13.2: 1.13.2

🐞 Bug Fixes

  • Avoid calling naming convention on scrape #​5288
  • Fix histogram consistency in PrometheusMeterRegistry #​5193
  • Fix log to include stack trace in OtlpMeterRegistry.publish() #​5141

🔨 Dependency Upgrades

  • Bump software.amazon.awssdk:cloudwatch from 2.25.69 to 2.25.70 #​5277
  • Bump com.netflix.spectator:spectator-reg-atlas from 1.7.13 to 1.7.14 #​5276
  • Bump com.signalfx.public:signalfx-java from 1.0.42 to 1.0.43 #​5272

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​izeye and @​shalk

miracum/kafka-fhir-serializer (org.miracum:kafka-fhir-serializer)

v1.0.7

What's Changed

Full Changelog: miracum/kafka-fhir-serializer@v1.0.6...v1.0.7

hapifhir/hapi-fhir (ca.uhn.hapi.fhir:hapi-fhir-client-okhttp)

v7.4.5

7.4.5

v7.4.4

7.4.4

v7.4.3

7.4.3

v7.4.2

7.4.2

v7.4.0

7.4.0

v7.2.3

7.2.3

v7.2.2

7.2.2

spring-cloud/spring-cloud-release (org.springframework.cloud:spring-cloud-dependencies)

v2023.0.3

Full Changelog: spring-cloud/spring-cloud-release@v2023.0.2...v2023.0.3

Module Version Issues
Spring Cloud Vault 4.1.3
Spring Cloud Bus 4.1.2
Spring Cloud Zookeeper 4.1.2
Spring Cloud Kubernetes 3.1.3 (issues)
Spring Cloud Task 3.1.2 (issues)
Spring Cloud Function 4.1.3 (issues)
Spring Cloud Commons 4.1.4 (issues)
Spring Cloud OpenFeign 4.1.3 (issues)
Spring Cloud CircuitBreaker 3.1.2 (issues)
Spring Cloud Starter Build 2023.0.3
Spring Cloud Stream 4.1.3
Spring Cloud Gateway 4.1.5 (issues)
Spring Cloud Consul 4.1.2
Spring Cloud Contract 4.1.4 (issues)
Spring Cloud Config 4.1.3 (issues)
Spring Cloud Build 4.1.3
Spring Cloud Netflix 4.1.3 (issues)

Configuration

📅 Schedule: Branch creation - "every 3 months on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copy link

github-actions bot commented Oct 1, 2024

🦙 MegaLinter status: ✅ SUCCESS

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 4 0 0.06s
✅ DOCKERFILE hadolint 2 0 0.15s
✅ EDITORCONFIG editorconfig-checker 67 0 0.39s
✅ GROOVY npm-groovy-lint 2 0 9.4s
✅ JAVA checkstyle 19 0 5.25s
✅ JSON jsonlint 5 0 0.22s
✅ JSON prettier 5 0 1.34s
✅ JSON v8r 5 0 5.13s
✅ MARKDOWN markdownlint 2 0 0.62s
✅ PYTHON bandit 1 0 1.27s
✅ PYTHON black 1 0 1.21s
✅ PYTHON flake8 1 0 0.61s
✅ PYTHON isort 1 0 0.31s
✅ PYTHON mypy 1 0 7.93s
✅ PYTHON ruff 1 0 0.03s
✅ REPOSITORY checkov yes no 18.51s
✅ REPOSITORY gitleaks yes no 0.62s
✅ REPOSITORY git_diff yes no 0.03s
✅ REPOSITORY grype yes no 15.16s
✅ REPOSITORY kics yes no 4.21s
✅ REPOSITORY secretlint yes no 0.88s
✅ REPOSITORY syft yes no 1.77s
✅ REPOSITORY trivy yes no 8.05s
✅ REPOSITORY trivy-sbom yes no 0.82s
✅ REPOSITORY trufflehog yes no 5.69s
✅ XML xmllint 1 0 0.62s
✅ YAML prettier 17 0 1.13s
✅ YAML yamllint 17 0 0.56s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

MegaLinter is graciously provided by OX Security

@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 1e491ee to 459f8ca Compare October 1, 2024 03:06
Copy link

github-actions bot commented Oct 1, 2024

Code Coverage Report

Overall Project 29.93%

There is no coverage information present for the Files changed

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from a572339 to f274e06 Compare October 4, 2024 21:05
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 13 times, most recently from 7d56e84 to 8948bd8 Compare October 20, 2024 10:55
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 11 times, most recently from af387ff to 4de793a Compare October 28, 2024 18:02
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from e3e75df to f9de3b2 Compare November 5, 2024 11:09
Copy link

sonarcloud bot commented Nov 5, 2024

Copy link

github-actions bot commented Nov 5, 2024

Trivy image scan report

ghcr.io/miracum/fhir-gateway:pr-168 (debian 12.7)

No Vulnerabilities found

No Misconfigurations found

Java

1 known vulnerabilities found (MEDIUM: 0 LOW: 0 CRITICAL: 0 HIGH: 1)

Show detailed table of vulnerabilities
Package ID Severity Installed Version Fixed Version
commons-io:commons-io CVE-2024-47554 HIGH 2.11.0 2.14.0

No Misconfigurations found

@chgl chgl merged commit ef66ccd into master Nov 5, 2024
17 checks passed
@chgl chgl deleted the renovate/all-minor-patch branch November 5, 2024 13:55
miracum-bot pushed a commit that referenced this pull request Nov 8, 2024
## [3.14.2](v3.14.1...v3.14.2) (2024-11-08)

### Miscellaneous Chores

* **deps:** update all non-major dependencies ([#168](#168)) ([ef66ccd](ef66ccd))
* **deps:** update tchiotludo/akhq:0.25.1 docker digest to cfaef8f ([#167](#167)) ([a521570](a521570))
* **deps:** updates kafka-fhir-serializer to 1.0.8 ([#179](#179)) ([de3ca0b](de3ca0b))
@miracum-bot
Copy link

🎉 This PR is included in version 3.14.2 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants