Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the minor-and-patch group across 1 directory with 5 updates #435

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 7, 2024

Bumps the minor-and-patch group with 5 updates in the / directory:

Package From To
io.micrometer:micrometer-registry-prometheus 1.12.8 1.13.5
redis.clients:jedis 5.1.5 5.2.0
com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.17.2 2.18.0
com.nimbusds:nimbus-jose-jwt 9.41.1 9.41.2
com.gradleup.shadow 8.3.0 8.3.3

Updates io.micrometer:micrometer-registry-prometheus from 1.12.8 to 1.13.5

Release notes

Sourced from io.micrometer:micrometer-registry-prometheus's releases.

1.13.5

🐞 Bug Fixes

  • ConcurrentModificationException when late meter filters are added #5489

🔨 Dependency Upgrades

  • Bump com.signalfx.public:signalfx-java from 1.0.45 to 1.0.46 #5506
  • Bump com.netflix.spectator:spectator-reg-atlas from 1.7.19 to 1.7.21 #5505

Tasks

  • Use Prometheus BOMs for dependency management #5468

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​mabartos, @​emmanuel-ferdman, and @​izeye

1.13.4

🐞 Bug Fixes

  • BOM contains a non-resolvable dependency: io.micrometer:concurrency-tests #5395
  • Zero percentile can be missing from Dynatrace meters where expected #4750

📔 Documentation

  • Fix a typo in meters.adoc #5399

🔨 Dependency Upgrades

  • Bump com.netflix.spectator:spectator-reg-atlas from 1.7.18 to 1.7.19 #5425
  • Bump dropwizard-metrics from 4.2.26 to 4.2.27 #5423
  • Bump com.signalfx.public:signalfx-java from 1.0.44 to 1.0.45 #5420

📝 Tasks

  • Bump org.apache.maven:maven-resolver-provider from 3.9.8 to 3.9.9 #5426
  • Bump io.spring.develocity.conventions from 0.0.19 to 0.0.20 #5424
  • Bump io.projectreactor:reactor-bom from 2022.0.21 to 2022.0.22 #5422
  • Bump spring-javaformat from 0.0.42 to 0.0.43 #5421
  • Bump org.postgresql:postgresql from 42.7.3 to 42.7.4 #5418
  • Fix GuavaCacheMetricsTest and CaffeineCacheMetricsTest #5405

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​izeye and @​madhead

... (truncated)

Commits
  • 37b2499 Bump io.netty:netty-bom from 4.1.113.Final to 4.1.114.Final (#5546)
  • 9fe4577 Bump io.spring.develocity.conventions from 0.0.21 to 0.0.22 (#5545)
  • 75c7671 Run concurrency tests as part of CI build (#5498)
  • 45df021 Bump io.netty:netty-bom from 4.1.112.Final to 4.1.113.Final (#5499)
  • a832be6 Bump com.signalfx.public:signalfx-java from 1.0.45 to 1.0.46 (#5506)
  • 2941011 Bump jetty9 from 9.4.55.v20240627 to 9.4.56.v20240826 (#5504)
  • d220ab5 Bump org.junit:junit-bom from 5.10.3 to 5.10.4 (#5501)
  • 1e04ea5 Bump com.netflix.spectator:spectator-reg-atlas from 1.7.19 to 1.7.21 (#5505)
  • 722c0bc Bump uk.org.webcompere:system-stubs-jupiter from 2.1.6 to 2.1.7 (#5503)
  • a27f7a4 Bump io.spring.develocity.conventions from 0.0.20 to 0.0.21 (#5502)
  • Additional commits viewable in compare view

Updates redis.clients:jedis from 5.1.5 to 5.2.0

Release notes

Sourced from redis.clients:jedis's releases.

5.2.0 GA

Enhanced Client-side caching

We are happy to announce that improved server-assisted, client-side caching is now generally available! Special thanks to all our beta testers for their valuable feedback, which helped us refine and improve the initial implementation.

Client-side caching is supported exclusively with the RESP3 protocol with Redis >= 7.4 and is available in UnifiedJedis, JedisPooled, and JedisCluster and other classes.

How to try Client-Side Caching

  1. Install Jedis 5.2.0
  2. Use the following code example to get started:
public class CSCExampleTest {
  public static void main() {
HostAndPort node = HostAndPort.from("localhost:6379");
JedisClientConfig clientConfig = DefaultJedisClientConfig.builder()
    .resp3()                // RESP3 protocol is required for client-side caching
    //.user("myuser")       // Redis server username (optional)
    //.password("mypass")   // Redis user's password (optional)
    .build();
CacheConfig cacheConfig = getCacheConfig();
Cache cache = CacheFactory.getCache(cacheConfig);
try (UnifiedJedis client = new UnifiedJedis(node, clientConfig, cache)) {
client.set("foo", "bar");
client.get("foo");
client.get("foo"); // Cache hit
System.out.println("Cache size: " + cache.getSize()); // 1
System.out.println(cache.getStats().toString());
//Let's change the value of "foo" to invalidate the value stored in the local cache
client.mset("foo", "new_value", "ignore_me:1", "another_value");
Thread.sleep(1000); // wait for the cache invalidation to happen
System.out.println(client.get("foo")); // Cache miss
System.out.println(cache.getStats().toString());
client.get("ignore_me:1"); // Client will ignore this key
System.out.println("Cache size: " + cache.getSize()); // still 1
// check the cache stats
System.out.println(cache.getStats().toString());
} catch (InterruptedException e) {
throw new RuntimeException(e);
}

</tr></table>

... (truncated)

Commits

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.17.2 to 2.18.0

Updates com.nimbusds:nimbus-jose-jwt from 9.41.1 to 9.41.2

Changelog

Sourced from com.nimbusds:nimbus-jose-jwt's changelog.

9.41.1 (2024-09-12) * Fixes JSONObjectUtils.parse((String)null) regression, must throw ParseException, not NullPointerException. Regression introduced in 9.24 after dependency switch from JSON Smart to Gson (iss #557). * Fixes JWKSet.parse((String)null) regression, must throw ParseException, not NullPointerException (iss #557). * The ParseException thrown by X509CertChainUtils.parse(List) must include the message from the underlying java.security.cert.CertificateException (iss #565).

9.41.2 (2024-10-01) * JWEHeader must support the special case of an "aud" header value of type string (iss #569).

Commits

Updates com.gradleup.shadow from 8.3.0 to 8.3.3

Release notes

Sourced from com.gradleup.shadow's releases.

8.3.3

Changed

  • Disable Develocity integration by default. (#993)

8.3.2

Added

  • Support Java 23. (#974)

Changed

  • ShadowExtension.component has been deprecated, now you can use component.shadow instead. (#956
  • BREAKING CHANGE: update to jdependency 2.11.0, this requires Java 11 or above to run. (#974)

Fixed

  • Stop publishing Shadow self fat jar to Maven repository. (#967)

8.3.1

Added

  • Apply an empty plugin that has the legacy com.github.johnrengelman.shadow plugin ID. This allows existing build logic to keep on reacting to the legacy plugin as the replacement is drop-in currently.

Fixed

  • Explicitly add classifier to maven publication. (#904)
  • Refix excluding Gradle APIs for java-gradle-plugin. (#948)
Commits
  • cfa33fb Prepare version 8.3.3
  • 88ca619 Update pull_request_template.md
  • 1888cb6 Disable Develocity integration by default (#993)
  • 196fd6c fix(deps): update dependency org.apache.logging.log4j:log4j-core to v2.24.1 (...
  • 63f6788 chore(deps): update goooler/extract-release-notes digest to 5b05257 (#988)
  • 15a5d53 fix(deps): update dependency com.github.node-gradle:gradle-node-plugin to v7....
  • d32b6b4 fix(deps): update junit5 monorepo to v5.11.1 (#987)
  • 5c71209 fix(deps): update dependency org.codehaus.plexus:plexus-utils to v4.0.2 (#985)
  • 6a2ac12 chore(deps): update dependency gradle to v8.10.2 (#984)
  • 9c8000a fix(deps): update dependency com.google.guava:guava to v33.3.1-jre (#983)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [io.micrometer:micrometer-registry-prometheus](https://github.com/micrometer-metrics/micrometer) | `1.12.8` | `1.13.5` |
| [redis.clients:jedis](https://github.com/redis/jedis) | `5.1.5` | `5.2.0` |
| com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.17.2` | `2.18.0` |
| [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) | `9.41.1` | `9.41.2` |
| [com.gradleup.shadow](https://github.com/GradleUp/shadow) | `8.3.0` | `8.3.3` |



Updates `io.micrometer:micrometer-registry-prometheus` from 1.12.8 to 1.13.5
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.12.8...v1.13.5)

Updates `redis.clients:jedis` from 5.1.5 to 5.2.0
- [Release notes](https://github.com/redis/jedis/releases)
- [Commits](redis/jedis@v5.1.5...v5.2.0)

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.17.2 to 2.18.0

Updates `com.nimbusds:nimbus-jose-jwt` from 9.41.1 to 9.41.2
- [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt)
- [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/commits)

Updates `com.gradleup.shadow` from 8.3.0 to 8.3.3
- [Release notes](https://github.com/GradleUp/shadow/releases)
- [Commits](GradleUp/shadow@8.3.0...8.3.3)

---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-registry-prometheus
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: redis.clients:jedis
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: com.nimbusds:nimbus-jose-jwt
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: com.gradleup.shadow
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner October 7, 2024 05:33
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 7, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants