You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@texera.apache.org by gi...@apache.org on 2026/07/06 00:49:59 UTC
(texera) 01/01: fix(deps): bump org.assertj:assertj-core from 3.24.2 to 3.27.7 (#6181)
This is an automated email from the ASF dual-hosted git repository.
github-merge-queue[bot] pushed a commit to branch gh-readonly-queue/main/pr-6181-50044cd8f341710ecaab2e3675f6cd86535c6860
in repository https://gitbox.apache.org/repos/asf/texera.git
commit effa9c732618b1a62d6fb8f07e116f139c8d3116
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon Jul 6 00:49:39 2026 +0000
fix(deps): bump org.assertj:assertj-core from 3.24.2 to 3.27.7 (#6181)
Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj)
from 3.24.2 to 3.27.7.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/assertj/assertj/releases">org.assertj:assertj-core's
releases</a>.</em></p>
<blockquote>
<h2>v3.27.7</h2>
<h2>:lock: Security</h2>
<h3>Core</h3>
<ul>
<li>Fix XXE vulnerability in <code>isXmlEqualTo</code> assertion
(CVE-2026-24400)
<ul>
<li>See GHSA-rqfh-9r24-8c9r for details; many thanks to <a
href="https://github.com/wxt201"><code>@wxt201</code></a> and <a
href="https://github.com/Song-Li"><code>@Song-Li</code></a> for
responsibly reporting it!</li>
</ul>
</li>
</ul>
<h2>:no_entry_sign: Deprecated</h2>
<h3>Core</h3>
<ul>
<li>Deprecate <code>XmlStringPrettyFormatter</code> with no
replacement</li>
</ul>
<h2>:bug: Bug Fixes</h2>
<h3>Guava</h3>
<ul>
<li>Navigation to <code>assertj-core</code> or <code>guava</code> types
from <code>assertj-guava</code> Javadoc site has unnecessary header <a
href="https://redirect.github.com/assertj/assertj/issues/3478">#3478</a></li>
</ul>
<h2>:hammer: Dependency Upgrades</h2>
<h3>Core</h3>
<ul>
<li>Upgrade to Byte Buddy 1.18.3</li>
<li>Upgrade to JUnit BOM 5.14.1</li>
</ul>
<h3>Guava</h3>
<ul>
<li>Upgrade to Guava 33.5.0-jre</li>
</ul>
<h2>v3.27.6</h2>
<h2>:bug: Bug Fixes</h2>
<h3>Core</h3>
<ul>
<li>Add missing export for <code>org.assertj.core.annotation</code> <a
href="https://redirect.github.com/assertj/assertj/issues/3951">#3951</a></li>
</ul>
<h2>:heart: Contributors</h2>
<p>Thanks to all the contributors who worked on this release:</p>
<p><a href="https://github.com/duponter"><code>@duponter</code></a></p>
<h2>v3.27.5</h2>
<h2>:zap: Improvements</h2>
<h3>Core</h3>
<ul>
<li>ByteBuddy in AssertJ 3.27.4 not compatible with Java 25 <a
href="https://redirect.github.com/assertj/assertj/issues/3946">#3946</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/assertj/assertj/commit/e84071667f5f8f13084af9dfa54cee5fd9db18db"><code>e840716</code></a>
[maven-release-plugin] prepare release assertj-build-3.27.7</li>
<li><a
href="https://github.com/assertj/assertj/commit/85ca7eb6609bb179c043b85ae7d290523b1ba79a"><code>85ca7eb</code></a>
Deprecate <code>XmlStringPrettyFormatter</code></li>
<li><a
href="https://github.com/assertj/assertj/commit/77081dc5eb107141df80f95bd0149b468e451341"><code>77081dc</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/assertj/assertj/commit/b68fc24a9de28f28a486fc5b887c1b8a003a5823"><code>b68fc24</code></a>
Bump github/codeql-action from 4.31.9 to 4.31.10 in the github-actions
group ...</li>
<li><a
href="https://github.com/assertj/assertj/commit/0cf5bb6c50f6ead3deaa2a2ff50ef1e7d933c8a3"><code>0cf5bb6</code></a>
Bump <code>kotlin.version</code> from 2.1.0 to 2.2.21</li>
<li><a
href="https://github.com/assertj/assertj/commit/d393ef1f5e48c89d47d7cf6d1eae359ceda0a126"><code>d393ef1</code></a>
Abort tests when symbolic links cannot be created (<a
href="https://redirect.github.com/assertj/assertj/issues/3788">#3788</a>)</li>
<li><a
href="https://github.com/assertj/assertj/commit/22124331e9922af5a43ab50f7a9a25b65be53be1"><code>2212433</code></a>
Add IntelliJ custom inspection for test class names</li>
<li><a
href="https://github.com/assertj/assertj/commit/5717d025cfe0f4c66de20f3253c0b0ecba259aa1"><code>5717d02</code></a>
Update JetBrains icon</li>
<li><a
href="https://github.com/assertj/assertj/commit/a8ec20bd42ed01f9cc6f654046c7dd424b0af07c"><code>a8ec20b</code></a>
Add icon for JetBrains products</li>
<li><a
href="https://github.com/assertj/assertj/commit/c05fb3d052b415fb2d6051df939f3b7903a76afe"><code>c05fb3d</code></a>
Bump Maven to 3.9.12 and Wrapper to 3.3.4</li>
<li>Additional commits viewable in <a
href="https://github.com/assertj/assertj/compare/assertj-build-3.24.2...assertj-build-3.27.7">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
Co-authored-by: Xinyuan Lin <xi...@uci.edu>
---
access-control-service/build.sbt | 2 +-
config-service/build.sbt | 2 +-
file-service/build.sbt | 2 +-
notebook-migration-service/build.sbt | 2 +-
workflow-compiling-service/build.sbt | 2 +-
5 files changed, 5 insertions(+), 5 deletions(-)
diff --git a/access-control-service/build.sbt b/access-control-service/build.sbt
index 3f5f967a1d..ce51131a67 100644
--- a/access-control-service/build.sbt
+++ b/access-control-service/build.sbt
@@ -60,7 +60,7 @@ Compile / scalacOptions ++= Seq(
val dropwizardVersion = "4.0.7"
val mockitoVersion = "5.4.0"
-val assertjVersion = "3.24.2"
+val assertjVersion = "3.27.7"
/////////////////////////////////////////////////////////////////////////////
// Test-related Dependencies
diff --git a/config-service/build.sbt b/config-service/build.sbt
index c9d7ff2701..7181bdb308 100644
--- a/config-service/build.sbt
+++ b/config-service/build.sbt
@@ -60,7 +60,7 @@ Compile / scalacOptions ++= Seq(
val dropwizardVersion = "4.0.7"
val mockitoVersion = "5.4.0"
-val assertjVersion = "3.24.2"
+val assertjVersion = "3.27.7"
/////////////////////////////////////////////////////////////////////////////
// Test-related Dependencies
diff --git a/file-service/build.sbt b/file-service/build.sbt
index c93f5e3230..3d2f90226d 100644
--- a/file-service/build.sbt
+++ b/file-service/build.sbt
@@ -60,7 +60,7 @@ Compile / scalacOptions ++= Seq(
val dropwizardVersion = "4.0.7"
val mockitoVersion = "5.4.0"
-val assertjVersion = "3.24.2"
+val assertjVersion = "3.27.7"
val testcontainersVersion = "0.44.1"
/////////////////////////////////////////////////////////////////////////////
diff --git a/notebook-migration-service/build.sbt b/notebook-migration-service/build.sbt
index f599eb3467..a3bf20cc2c 100644
--- a/notebook-migration-service/build.sbt
+++ b/notebook-migration-service/build.sbt
@@ -60,7 +60,7 @@ Compile / scalacOptions ++= Seq(
val dropwizardVersion = "4.0.7"
val mockitoVersion = "5.4.0"
-val assertjVersion = "3.24.2"
+val assertjVersion = "3.27.7"
/////////////////////////////////////////////////////////////////////////////
// Test-related Dependencies
diff --git a/workflow-compiling-service/build.sbt b/workflow-compiling-service/build.sbt
index 90355aaa73..0f0a1fae91 100644
--- a/workflow-compiling-service/build.sbt
+++ b/workflow-compiling-service/build.sbt
@@ -62,7 +62,7 @@ Compile / scalacOptions ++= Seq(
val dropwizardVersion = "4.0.7"
val mockitoVersion = "5.4.0"
-val assertjVersion = "3.24.2"
+val assertjVersion = "3.27.7"
/////////////////////////////////////////////////////////////////////////////
// Test-related Dependencies