You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@texera.apache.org by gi...@apache.org on 2026/07/06 00:49:58 UTC
(texera) branch gh-readonly-queue/main/pr-6181-50044cd8f341710ecaab2e3675f6cd86535c6860 created (now effa9c7326)
This is an automated email from the ASF dual-hosted git repository.
github-merge-queue[bot] pushed a change to branch gh-readonly-queue/main/pr-6181-50044cd8f341710ecaab2e3675f6cd86535c6860
in repository https://gitbox.apache.org/repos/asf/texera.git
at effa9c7326 fix(deps): bump org.assertj:assertj-core from 3.24.2 to 3.27.7 (#6181)
This branch includes the following new commits:
new effa9c7326 fix(deps): bump org.assertj:assertj-core from 3.24.2 to 3.27.7 (#6181)
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
(texera) 01/01: fix(deps): bump org.assertj:assertj-core from 3.24.2 to 3.27.7 (#6181)
Posted by gi...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
github-merge-queue[bot] pushed a commit to branch gh-readonly-queue/main/pr-6181-50044cd8f341710ecaab2e3675f6cd86535c6860
in repository https://gitbox.apache.org/repos/asf/texera.git
commit effa9c732618b1a62d6fb8f07e116f139c8d3116
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon Jul 6 00:49:39 2026 +0000
fix(deps): bump org.assertj:assertj-core from 3.24.2 to 3.27.7 (#6181)
Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj)
from 3.24.2 to 3.27.7.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/assertj/assertj/releases">org.assertj:assertj-core's
releases</a>.</em></p>
<blockquote>
<h2>v3.27.7</h2>
<h2>:lock: Security</h2>
<h3>Core</h3>
<ul>
<li>Fix XXE vulnerability in <code>isXmlEqualTo</code> assertion
(CVE-2026-24400)
<ul>
<li>See GHSA-rqfh-9r24-8c9r for details; many thanks to <a
href="https://github.com/wxt201"><code>@wxt201</code></a> and <a
href="https://github.com/Song-Li"><code>@Song-Li</code></a> for
responsibly reporting it!</li>
</ul>
</li>
</ul>
<h2>:no_entry_sign: Deprecated</h2>
<h3>Core</h3>
<ul>
<li>Deprecate <code>XmlStringPrettyFormatter</code> with no
replacement</li>
</ul>
<h2>:bug: Bug Fixes</h2>
<h3>Guava</h3>
<ul>
<li>Navigation to <code>assertj-core</code> or <code>guava</code> types
from <code>assertj-guava</code> Javadoc site has unnecessary header <a
href="https://redirect.github.com/assertj/assertj/issues/3478">#3478</a></li>
</ul>
<h2>:hammer: Dependency Upgrades</h2>
<h3>Core</h3>
<ul>
<li>Upgrade to Byte Buddy 1.18.3</li>
<li>Upgrade to JUnit BOM 5.14.1</li>
</ul>
<h3>Guava</h3>
<ul>
<li>Upgrade to Guava 33.5.0-jre</li>
</ul>
<h2>v3.27.6</h2>
<h2>:bug: Bug Fixes</h2>
<h3>Core</h3>
<ul>
<li>Add missing export for <code>org.assertj.core.annotation</code> <a
href="https://redirect.github.com/assertj/assertj/issues/3951">#3951</a></li>
</ul>
<h2>:heart: Contributors</h2>
<p>Thanks to all the contributors who worked on this release:</p>
<p><a href="https://github.com/duponter"><code>@duponter</code></a></p>
<h2>v3.27.5</h2>
<h2>:zap: Improvements</h2>
<h3>Core</h3>
<ul>
<li>ByteBuddy in AssertJ 3.27.4 not compatible with Java 25 <a
href="https://redirect.github.com/assertj/assertj/issues/3946">#3946</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/assertj/assertj/commit/e84071667f5f8f13084af9dfa54cee5fd9db18db"><code>e840716</code></a>
[maven-release-plugin] prepare release assertj-build-3.27.7</li>
<li><a
href="https://github.com/assertj/assertj/commit/85ca7eb6609bb179c043b85ae7d290523b1ba79a"><code>85ca7eb</code></a>
Deprecate <code>XmlStringPrettyFormatter</code></li>
<li><a
href="https://github.com/assertj/assertj/commit/77081dc5eb107141df80f95bd0149b468e451341"><code>77081dc</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/assertj/assertj/commit/b68fc24a9de28f28a486fc5b887c1b8a003a5823"><code>b68fc24</code></a>
Bump github/codeql-action from 4.31.9 to 4.31.10 in the github-actions
group ...</li>
<li><a
href="https://github.com/assertj/assertj/commit/0cf5bb6c50f6ead3deaa2a2ff50ef1e7d933c8a3"><code>0cf5bb6</code></a>
Bump <code>kotlin.version</code> from 2.1.0 to 2.2.21</li>
<li><a
href="https://github.com/assertj/assertj/commit/d393ef1f5e48c89d47d7cf6d1eae359ceda0a126"><code>d393ef1</code></a>
Abort tests when symbolic links cannot be created (<a
href="https://redirect.github.com/assertj/assertj/issues/3788">#3788</a>)</li>
<li><a
href="https://github.com/assertj/assertj/commit/22124331e9922af5a43ab50f7a9a25b65be53be1"><code>2212433</code></a>
Add IntelliJ custom inspection for test class names</li>
<li><a
href="https://github.com/assertj/assertj/commit/5717d025cfe0f4c66de20f3253c0b0ecba259aa1"><code>5717d02</code></a>
Update JetBrains icon</li>
<li><a
href="https://github.com/assertj/assertj/commit/a8ec20bd42ed01f9cc6f654046c7dd424b0af07c"><code>a8ec20b</code></a>
Add icon for JetBrains products</li>
<li><a
href="https://github.com/assertj/assertj/commit/c05fb3d052b415fb2d6051df939f3b7903a76afe"><code>c05fb3d</code></a>
Bump Maven to 3.9.12 and Wrapper to 3.3.4</li>
<li>Additional commits viewable in <a
href="https://github.com/assertj/assertj/compare/assertj-build-3.24.2...assertj-build-3.27.7">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
Co-authored-by: Xinyuan Lin <xi...@uci.edu>
---
access-control-service/build.sbt | 2 +-
config-service/build.sbt | 2 +-
file-service/build.sbt | 2 +-
notebook-migration-service/build.sbt | 2 +-
workflow-compiling-service/build.sbt | 2 +-
5 files changed, 5 insertions(+), 5 deletions(-)
diff --git a/access-control-service/build.sbt b/access-control-service/build.sbt
index 3f5f967a1d..ce51131a67 100644
--- a/access-control-service/build.sbt
+++ b/access-control-service/build.sbt
@@ -60,7 +60,7 @@ Compile / scalacOptions ++= Seq(
val dropwizardVersion = "4.0.7"
val mockitoVersion = "5.4.0"
-val assertjVersion = "3.24.2"
+val assertjVersion = "3.27.7"
/////////////////////////////////////////////////////////////////////////////
// Test-related Dependencies
diff --git a/config-service/build.sbt b/config-service/build.sbt
index c9d7ff2701..7181bdb308 100644
--- a/config-service/build.sbt
+++ b/config-service/build.sbt
@@ -60,7 +60,7 @@ Compile / scalacOptions ++= Seq(
val dropwizardVersion = "4.0.7"
val mockitoVersion = "5.4.0"
-val assertjVersion = "3.24.2"
+val assertjVersion = "3.27.7"
/////////////////////////////////////////////////////////////////////////////
// Test-related Dependencies
diff --git a/file-service/build.sbt b/file-service/build.sbt
index c93f5e3230..3d2f90226d 100644
--- a/file-service/build.sbt
+++ b/file-service/build.sbt
@@ -60,7 +60,7 @@ Compile / scalacOptions ++= Seq(
val dropwizardVersion = "4.0.7"
val mockitoVersion = "5.4.0"
-val assertjVersion = "3.24.2"
+val assertjVersion = "3.27.7"
val testcontainersVersion = "0.44.1"
/////////////////////////////////////////////////////////////////////////////
diff --git a/notebook-migration-service/build.sbt b/notebook-migration-service/build.sbt
index f599eb3467..a3bf20cc2c 100644
--- a/notebook-migration-service/build.sbt
+++ b/notebook-migration-service/build.sbt
@@ -60,7 +60,7 @@ Compile / scalacOptions ++= Seq(
val dropwizardVersion = "4.0.7"
val mockitoVersion = "5.4.0"
-val assertjVersion = "3.24.2"
+val assertjVersion = "3.27.7"
/////////////////////////////////////////////////////////////////////////////
// Test-related Dependencies
diff --git a/workflow-compiling-service/build.sbt b/workflow-compiling-service/build.sbt
index 90355aaa73..0f0a1fae91 100644
--- a/workflow-compiling-service/build.sbt
+++ b/workflow-compiling-service/build.sbt
@@ -62,7 +62,7 @@ Compile / scalacOptions ++= Seq(
val dropwizardVersion = "4.0.7"
val mockitoVersion = "5.4.0"
-val assertjVersion = "3.24.2"
+val assertjVersion = "3.27.7"
/////////////////////////////////////////////////////////////////////////////
// Test-related Dependencies