You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@teaclave.apache.org by "dependabot[bot]" <no...@github.com.INVALID> on 2022/05/20 21:21:31 UTC

[apache/incubator-teaclave-sgx-sdk] build(deps): bump gson from 2.8.2 to 2.8.9 in /samplecode/ue-ra/ue-ra-client-java (PR #385)

Bumps [gson](https://github.com/google/gson) from 2.8.2 to 2.8.9.
&lt;details&gt;
&lt;summary&gt;Release notes&lt;/summary&gt;
&lt;p&gt;&lt;em&gt;Sourced from &lt;a href=&quot;https://github.com/google/gson/releases&quot;&gt;gson&#39;s releases&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;blockquote&gt;
&lt;h2&gt;Gson 2.8.9&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Make OSGi bundle&#39;s dependency on &lt;code&gt;sun.misc&lt;/code&gt; optional (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1993&quot;&gt;#1993&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;Deprecate &lt;code&gt;Gson.excluder()&lt;/code&gt; exposing internal &lt;code&gt;Excluder&lt;/code&gt; class (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1986&quot;&gt;#1986&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;Prevent Java deserialization of internal classes (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1991&quot;&gt;#1991&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;Improve number strategy implementation (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1987&quot;&gt;#1987&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;Fix LongSerializationPolicy null handling being inconsistent with Gson (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1990&quot;&gt;#1990&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;Support arbitrary Number implementation for Object and Number deserialization (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1290&quot;&gt;#1290&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;Bump proguard-maven-plugin from 2.4.0 to 2.5.1 (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1980&quot;&gt;#1980&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;Don&#39;t exclude static local classes (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1969&quot;&gt;#1969&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;Fix &lt;code&gt;RuntimeTypeAdapterFactory&lt;/code&gt; depending on internal &lt;code&gt;Streams&lt;/code&gt; class (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1959&quot;&gt;#1959&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;Improve Maven build (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1964&quot;&gt;#1964&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;Make dependency on &lt;code&gt;java.sql&lt;/code&gt; optional (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1707&quot;&gt;#1707&lt;/a&gt;).&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;Gson 2.8.8&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Fixed issue with recursive types (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1390&quot;&gt;#1390&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;Better behaviour with Java 9+ and &lt;code&gt;Unsafe&lt;/code&gt; if there is a security manager (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1712&quot;&gt;#1712&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;&lt;code&gt;EnumTypeAdapter&lt;/code&gt; now works better when ProGuard has obfuscated enum fields (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1495&quot;&gt;#1495&lt;/a&gt;).&lt;/li&gt;
&lt;/ul&gt;
&lt;/blockquote&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Changelog&lt;/summary&gt;
&lt;p&gt;&lt;em&gt;Sourced from &lt;a href=&quot;https://github.com/google/gson/blob/master/CHANGELOG.md&quot;&gt;gson&#39;s changelog&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;blockquote&gt;
&lt;h2&gt;Version 2.8.9&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Make OSGi bundle&#39;s dependency on &lt;code&gt;sun.misc&lt;/code&gt; optional (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1993&quot;&gt;#1993&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;Deprecate &lt;code&gt;Gson.excluder()&lt;/code&gt; exposing internal &lt;code&gt;Excluder&lt;/code&gt; class (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1986&quot;&gt;#1986&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;Prevent Java deserialization of internal classes (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1991&quot;&gt;#1991&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;Improve number strategy implementation (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1987&quot;&gt;#1987&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;Fix LongSerializationPolicy null handling being inconsistent with Gson (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1990&quot;&gt;#1990&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;Support arbitrary Number implementation for Object and Number deserialization (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1290&quot;&gt;#1290&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;Bump proguard-maven-plugin from 2.4.0 to 2.5.1 (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1980&quot;&gt;#1980&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;Don&#39;t exclude static local classes (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1969&quot;&gt;#1969&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;Fix &lt;code&gt;RuntimeTypeAdapterFactory&lt;/code&gt; depending on internal &lt;code&gt;Streams&lt;/code&gt; class (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1959&quot;&gt;#1959&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;Improve Maven build (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1964&quot;&gt;#1964&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;Make dependency on &lt;code&gt;java.sql&lt;/code&gt; optional (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1707&quot;&gt;#1707&lt;/a&gt;).&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;Version 2.8.8&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Fixed issue with recursive types (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1390&quot;&gt;#1390&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;Better behaviour with Java 9+ and &lt;code&gt;Unsafe&lt;/code&gt; if there is a security manager (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1712&quot;&gt;#1712&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;&lt;code&gt;EnumTypeAdapter&lt;/code&gt; now works better when ProGuard has obfuscated enum fields (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1495&quot;&gt;#1495&lt;/a&gt;).&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;Version 2.8.7&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Fixed &lt;code&gt;ISO8601UtilsTest&lt;/code&gt; failing on systems with UTC+X.&lt;/li&gt;
&lt;li&gt;Improved javadoc for &lt;code&gt;JsonStreamParser&lt;/code&gt;.&lt;/li&gt;
&lt;li&gt;Updated proguard.cfg (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1693&quot;&gt;#1693&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;Fixed &lt;code&gt;IllegalStateException&lt;/code&gt; in &lt;code&gt;JsonTreeWriter&lt;/code&gt; (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1592&quot;&gt;#1592&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;Added &lt;code&gt;JsonArray.isEmpty()&lt;/code&gt; (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1640&quot;&gt;#1640&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;Added new test cases (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1638&quot;&gt;#1638&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;Fixed OSGi metadata generation to work on JavaSE &amp;lt; 9 (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1603&quot;&gt;#1603&lt;/a&gt;).&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;Version 2.8.6&lt;/h2&gt;
&lt;p&gt;&lt;em&gt;2019-10-04&lt;/em&gt;  &lt;a href=&quot;https://github.com/google/gson/compare/gson-parent-2.8.5...gson-parent-2.8.6&quot;&gt;GitHub Diff&lt;/a&gt;&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Added static methods &lt;code&gt;JsonParser.parseString&lt;/code&gt; and &lt;code&gt;JsonParser.parseReader&lt;/code&gt; and deprecated instance method &lt;code&gt;JsonParser.parse&lt;/code&gt;&lt;/li&gt;
&lt;li&gt;Java 9 module-info support&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;Version 2.8.5&lt;/h2&gt;
&lt;p&gt;&lt;em&gt;2018-05-21&lt;/em&gt;  &lt;a href=&quot;https://github.com/google/gson/compare/gson-parent-2.8.4...gson-parent-2.8.5&quot;&gt;GitHub Diff&lt;/a&gt;&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Print Gson version while throwing AssertionError and IllegalArgumentException&lt;/li&gt;
&lt;li&gt;Moved &lt;code&gt;utils.VersionUtils&lt;/code&gt; class to &lt;code&gt;internal.JavaVersion&lt;/code&gt;. This is a potential backward incompatible change from 2.8.4&lt;/li&gt;
&lt;li&gt;Fixed issue &lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1310&quot;&gt;google/gson#1310&lt;/a&gt; by supporting Debian Java 9&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;Version 2.8.4&lt;/h2&gt;
&lt;p&gt;&lt;em&gt;2018-05-01&lt;/em&gt;  &lt;a href=&quot;https://github.com/google/gson/compare/gson-parent-2.8.3...gson-parent-2.8.4&quot;&gt;GitHub Diff&lt;/a&gt;&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Added a new FieldNamingPolicy, &lt;code&gt;LOWER_CASE_WITH_DOTS&lt;/code&gt; that mapps JSON name &lt;code&gt;someFieldName&lt;/code&gt; to &lt;code&gt;some.field.name&lt;/code&gt;&lt;/li&gt;
&lt;li&gt;Fixed issue &lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1305&quot;&gt;google/gson#1305&lt;/a&gt; by removing compile/runtime dependency on &lt;code&gt;sun.misc.Unsafe&lt;/code&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;Version 2.8.3&lt;/h2&gt;
&lt;p&gt;&lt;em&gt;2018-04-27&lt;/em&gt;  &lt;a href=&quot;https://github.com/google/gson/compare/gson-parent-2.8.2...gson-parent-2.8.3&quot;&gt;GitHub Diff&lt;/a&gt;&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Added a new API, &lt;code&gt;GsonBuilder.newBuilder()&lt;/code&gt; that clones the current builder&lt;/li&gt;
&lt;li&gt;Preserving DateFormatter behavior on JDK 9&lt;/li&gt;
&lt;/ul&gt;
&lt;!-- raw HTML omitted --&gt;
&lt;/blockquote&gt;
&lt;p&gt;... (truncated)&lt;/p&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Commits&lt;/summary&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/google/gson/commit/6a368d89da37917be7714c3072b8378f4120110a&quot;&gt;&lt;code&gt;6a368d8&lt;/code&gt;&lt;/a&gt; [maven-release-plugin] prepare release gson-parent-2.8.9&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/google/gson/commit/ba96d53bad35f7466073f14cb3d89d09383e1a2d&quot;&gt;&lt;code&gt;ba96d53&lt;/code&gt;&lt;/a&gt; Fix missing bounds checks for JsonTreeReader.getPath() (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/2001&quot;&gt;#2001&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/google/gson/commit/ca1df7f7e09f6b1a763882029dd7057f475b31de&quot;&gt;&lt;code&gt;ca1df7f&lt;/code&gt;&lt;/a&gt; &lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1981&quot;&gt;#1981&lt;/a&gt;: Optional OSGi bundle&#39;s dependency on sun.misc package (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1993&quot;&gt;#1993&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/google/gson/commit/c54caf308c3f7d4a6088cf3085c2caa9617e0458&quot;&gt;&lt;code&gt;c54caf3&lt;/code&gt;&lt;/a&gt; Deprecate &lt;code&gt;Gson.excluder()&lt;/code&gt; exposing internal &lt;code&gt;Excluder&lt;/code&gt; class (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1986&quot;&gt;#1986&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/google/gson/commit/e6fae590cf2a758c47cd5a17f9bf3780ce62c986&quot;&gt;&lt;code&gt;e6fae59&lt;/code&gt;&lt;/a&gt; Prevent Java deserialization of internal classes (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1991&quot;&gt;#1991&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/google/gson/commit/bda2e3d16af776e0f607d56bbab6eac22f8f2d58&quot;&gt;&lt;code&gt;bda2e3d&lt;/code&gt;&lt;/a&gt; Improve number strategy implementation (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1987&quot;&gt;#1987&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/google/gson/commit/cd748df7122ea4260d35dfe90cfab0c079a1504d&quot;&gt;&lt;code&gt;cd748df&lt;/code&gt;&lt;/a&gt; Fix LongSerializationPolicy null handling being inconsistent with Gson (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1990&quot;&gt;#1990&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/google/gson/commit/fe30b85224316cabf19f5dd3223843437c297802&quot;&gt;&lt;code&gt;fe30b85&lt;/code&gt;&lt;/a&gt; Support arbitrary Number implementation for Object and Number deserialization...&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/google/gson/commit/1cc16274235f89650349884dd04760bf15a95d96&quot;&gt;&lt;code&gt;1cc1627&lt;/code&gt;&lt;/a&gt; Fix incorrect feature request template label (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1982&quot;&gt;#1982&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/google/gson/commit/7b9a283a7a5d66878c9be01227b15e631afe2a5a&quot;&gt;&lt;code&gt;7b9a283&lt;/code&gt;&lt;/a&gt; Bump bnd-maven-plugin from 5.3.0 to 6.0.0 (&lt;a href=&quot;https://github-redirect.dependabot.com/google/gson/issues/1985&quot;&gt;#1985&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;Additional commits viewable in &lt;a href=&quot;https://github.com/google/gson/compare/gson-parent-2.8.2...gson-parent-2.8.9&quot;&gt;compare view&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/details&gt;
&lt;br /&gt;


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.google.code.gson:gson&amp;package-manager=maven&amp;previous-version=2.8.2&amp;new-version=2.8.9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don&#39;t alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

&lt;details&gt;
&lt;summary&gt;Dependabot commands and options&lt;/summary&gt;
&lt;br /&gt;

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/apache/incubator-teaclave-sgx-sdk/network/alerts).

&lt;/details&gt;
You can view, comment on, or merge this pull request online at:

  https://github.com/apache/incubator-teaclave-sgx-sdk/pull/385

-- Commit Summary --

  * build(deps): bump gson in /samplecode/ue-ra/ue-ra-client-java

-- File Changes --

    M samplecode/ue-ra/ue-ra-client-java/pom.xml (2)

-- Patch Links --

https://github.com/apache/incubator-teaclave-sgx-sdk/pull/385.patch
https://github.com/apache/incubator-teaclave-sgx-sdk/pull/385.diff

-- 
Reply to this email directly or view it on GitHub:
https://github.com/apache/incubator-teaclave-sgx-sdk/pull/385
You are receiving this because you are subscribed to this thread.

Message ID: &lt;apache/incubator-teaclave-sgx-sdk/pull/385@github.com&gt;

Re: [apache/incubator-teaclave-sgx-sdk] build(deps): bump gson from 2.8.2 to 2.8.9 in /samplecode/ue-ra/ue-ra-client-java (PR #385)

Posted by Yu Ding <no...@github.com.INVALID>.
Merged #385 into master.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/apache/incubator-teaclave-sgx-sdk/pull/385#event-6749943377
You are receiving this because you are subscribed to this thread.

Message ID: <ap...@github.com>