You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@orc.apache.org by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2023/06/05 12:56:39 UTC
[GitHub] [orc] dependabot[bot] opened a new pull request, #1530: Bump byte-buddy from 1.12.23 to 1.14.5 in /java
dependabot[bot] opened a new pull request, #1530:
URL: https://github.com/apache/orc/pull/1530
Bumps [byte-buddy](https://github.com/raphw/byte-buddy) from 1.12.23 to 1.14.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/raphw/byte-buddy/releases">byte-buddy's releases</a>.</em></p>
<blockquote>
<h2>Byte Buddy 1.14.5</h2>
<ul>
<li>Avoid use of location if agent argument separator is contained.</li>
<li>Allow failure of member substitution if no element is separated.</li>
<li>Allow retry in case of parallel class injection.</li>
</ul>
<h2>Byte Buddy 1.14.4</h2>
<ul>
<li>Include instrumented type and auxiliary types in <code>TypePool</code> that is passed to <code>TypeWriter</code>.</li>
</ul>
<h2>Byte Buddy 1.14.3</h2>
<ul>
<li>Make <code>MethodGraph.Compiler</code> failsafe when processing incomplete methods.</li>
<li>Update ASM.</li>
</ul>
<h2>Byte Buddy 1.14.2</h2>
<ul>
<li>Fix offset mapping for local variable array remapping in <code>Advice</code>.</li>
<li>Add possibility to specify an index for <code>skipOn</code> and <code>repeatOn</code> which resolves the checked value from a returned array.</li>
</ul>
<h2>Byte Buddy 1.14.1</h2>
<ul>
<li>Add <em>extended</em> scope for Maven Byte Buddy plugin to include all non-test-dependencies.</li>
</ul>
<h2>Byte Buddy 1.14.0</h2>
<ul>
<li>Add <code>Step.Factory.ForDelegation</code> in <code>MemberSubstitution</code> that allows for delegation similar to <code>MethodDelegation</code> but in-code.</li>
<li>Add handlers for <code>MethodDelegation</code> and <code>Advice</code> that leverage method handles for field access and self-invocation.</li>
<li>Add <code>Step.Factory</code> for type assignment that allows casting the return value from a previous step to another type.</li>
<li>Avoid usage of <code>URL</code> class loader as it is deprecated, and use newer method if available.</li>
</ul>
<h2>Byte Buddy 1.13.0</h2>
<ul>
<li>Complete <code>MemberSubstitution</code> API which now retains the original instruction for invocation.</li>
<li>Allow excluding methods from a <code>MethodGraph.Compiler</code> using an <code>ElementMatcher</code>.</li>
<li>Add a filtering <code>ClassFileLocator</code>.</li>
<li>Add a matcher for a type's <code>ClassFileVersion</code>.</li>
<li>Unify resolution of constant values by introducing a <code>ConstantValue</code> API.</li>
<li>Do not exclude <code>ToThrown</code> assignment on <code>void</code> methods.</li>
<li>Allow constructors as target in <code>MemberSubstitution</code>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md">byte-buddy's changelog</a>.</em></p>
<blockquote>
<h2>Byte Buddy release notes</h2>
<h3>11. April 2023: version 1.14.4</h3>
<ul>
<li>Include instrumented type and auxiliary types in <code>TypePool</code> that is passed to <code>TypeWriter</code>.</li>
</ul>
<h3>13. March 2023: version 1.14.3</h3>
<ul>
<li>Make <code>MethodGraph.Compiler</code> failsafe when processing incomplete methods.</li>
<li>Update ASM.</li>
</ul>
<h3>13. March 2023: version 1.14.2</h3>
<ul>
<li>Fix offset mapping for local variable array remapping in <code>Advice</code>.</li>
<li>Add possibility to specify an index for <code>skipOn</code> and <code>repeatOn</code> which resolves the checked value from a returned array.</li>
</ul>
<h3>7. March 2023: version 1.14.1</h3>
<ul>
<li>Add <em>extended</em> scope for Maven Byte Buddy plugin to include all non-test-dependencies.</li>
</ul>
<h3>18. February 2023: version 1.14.0</h3>
<ul>
<li>Add <code>Step.Factory.ForDelegation</code> in <code>MemberSubstitution</code> that allows for delegation similar to <code>MethodDelegation</code> but in-code.</li>
<li>Add handlers for <code>MethodDelegation</code> and <code>Advice</code> that leverage method handles for field access and self-invocation.</li>
<li>Add <code>Step.Factory</code> for type assignment that allows casting the return value from a previous step to another type.</li>
<li>Avoid usage of <code>URL</code> class loader as it is deprecated, and use newer method if available.</li>
</ul>
<h3>13. February 2023: version 1.13.0</h3>
<ul>
<li>Complete <code>MemberSubstitution</code> API which now retains the original instruction for invocation.</li>
<li>Allow excluding methods from a <code>MethodGraph.Compiler</code> using an <code>ElementMatcher</code>.</li>
<li>Add a filtering <code>ClassFileLocator</code>.</li>
<li>Add a matcher for a type's <code>ClassFileVersion</code>.</li>
<li>Unify resolution of constant values by introducing a <code>ConstantValue</code> API.</li>
<li>Do not exclude <code>ToThrown</code> assignment on <code>void</code> methods.</li>
<li>Allow constructors as target in <code>MemberSubstitution</code>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/raphw/byte-buddy/commit/2074d31185d0fe8f41deb29a8f354967d2eb5c89"><code>2074d31</code></a> [maven-release-plugin] prepare release byte-buddy-1.14.5</li>
<li><a href="https://github.com/raphw/byte-buddy/commit/901e3ea3010f835dbfe32233f79c58a04df08353"><code>901e3ea</code></a> [release] Release new version.</li>
<li><a href="https://github.com/raphw/byte-buddy/commit/550ff9ddb7164dbc8bcb73a649e0cb0fc130ced6"><code>550ff9d</code></a> [release] Release new version.</li>
<li><a href="https://github.com/raphw/byte-buddy/commit/a326aae41c2928d20d299e457f3d162c94d5557c"><code>a326aae</code></a> [release] Release new version</li>
<li><a href="https://github.com/raphw/byte-buddy/commit/94e3e26ef5545b04138bd927b2935329b0eabad6"><code>94e3e26</code></a> Update JSON.org dependency being used.</li>
<li><a href="https://github.com/raphw/byte-buddy/commit/1a000611f2fe246cb81e6e0c1b550a7c06abda45"><code>1a00061</code></a> Add missing javadoc comment.</li>
<li><a href="https://github.com/raphw/byte-buddy/commit/54d053749ce67ded04592d2ace7a372104144056"><code>54d0537</code></a> Add getPackages method to JavaModule.</li>
<li><a href="https://github.com/raphw/byte-buddy/commit/2d77fd52ff815a6cae1afa6e9b666eb693740f75"><code>2d77fd5</code></a> Add option to exclude member substitution.</li>
<li><a href="https://github.com/raphw/byte-buddy/commit/4e3ae3cdd4e1613c7f1afa28fc2b923dba97aecb"><code>4e3ae3c</code></a> Fix exception type.</li>
<li><a href="https://github.com/raphw/byte-buddy/commit/7ddef27274286897e50540b1a48f20da38fbabe8"><code>7ddef27</code></a> Reduce commentary.</li>
<li>Additional commits viewable in <a href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.12.23...byte-buddy-1.14.5">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@orc.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [orc] dongjoon-hyun commented on pull request #1530: ORC-1441: Bump byte-buddy from 1.12.23 to 1.14.5
Posted by "dongjoon-hyun (via GitHub)" <gi...@apache.org>.
dongjoon-hyun commented on PR #1530:
URL: https://github.com/apache/orc/pull/1530#issuecomment-1694568387
This is reverted via https://github.com/apache/orc/commit/b169b698b6cb78c3b77796e8d5c20b26b8331293
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@orc.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [orc] wgtmac commented on pull request #1530: ORC-1441: Bump byte-buddy from 1.12.23 to 1.14.5
Posted by "wgtmac (via GitHub)" <gi...@apache.org>.
wgtmac commented on PR #1530:
URL: https://github.com/apache/orc/pull/1530#issuecomment-1694916673
> Hi, @wgtmac .
>
> The dependabot seems to have bugs. The bot should ignore this because we pinned this dependency via [ORC-1420](https://issues.apache.org/jira/browse/ORC-1420).
>
> Let me revert this PR~
Sorry about that! Thanks for letting me know.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@orc.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [orc] dongjoon-hyun commented on pull request #1530: ORC-1441: Bump byte-buddy from 1.12.23 to 1.14.5
Posted by "dongjoon-hyun (via GitHub)" <gi...@apache.org>.
dongjoon-hyun commented on PR #1530:
URL: https://github.com/apache/orc/pull/1530#issuecomment-1696562356
No problem at all because we didn't ship anything yet. :)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@orc.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [orc] dongjoon-hyun commented on pull request #1530: ORC-1441: Bump byte-buddy from 1.12.23 to 1.14.5
Posted by "dongjoon-hyun (via GitHub)" <gi...@apache.org>.
dongjoon-hyun commented on PR #1530:
URL: https://github.com/apache/orc/pull/1530#issuecomment-1694568312
Hi, @wgtmac .
The dependabot seems to have bugs. The bot should ignore this because we pinned this dependency via [ORC-1420](https://issues.apache.org/jira/browse/ORC-1420).
Let me revert this PR~
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@orc.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [orc] dongjoon-hyun commented on pull request #1530: ORC-1441: Bump byte-buddy from 1.12.23 to 1.14.5
Posted by "dongjoon-hyun (via GitHub)" <gi...@apache.org>.
dongjoon-hyun commented on PR #1530:
URL: https://github.com/apache/orc/pull/1530#issuecomment-1694568824
BTW, I made the same mistake today and reverted mine, too.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@orc.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [orc] dependabot[bot] commented on pull request #1530: ORC-1441: Bump byte-buddy from 1.12.23 to 1.14.5
Posted by "dependabot[bot] (via GitHub)" <gi...@apache.org>.
dependabot[bot] commented on PR #1530:
URL: https://github.com/apache/orc/pull/1530#issuecomment-1596192624
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting `@dependabot ignore this major version` or `@dependabot ignore this minor version`. You can also ignore all major, minor, or patch releases for a dependency by adding an [`ignore` condition](https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#ignore) with the desired `update_types` to your config file.
If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@orc.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [orc] wgtmac closed pull request #1530: ORC-1441: Bump byte-buddy from 1.12.23 to 1.14.5
Posted by "wgtmac (via GitHub)" <gi...@apache.org>.
wgtmac closed pull request #1530: ORC-1441: Bump byte-buddy from 1.12.23 to 1.14.5
URL: https://github.com/apache/orc/pull/1530
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@orc.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org