You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@servicecomb.apache.org by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2023/03/27 08:02:18 UTC

[GitHub] [servicecomb-java-chassis] dependabot[bot] opened a new pull request, #3732: Bump spring-boot-dependencies from 2.7.9 to 2.7.10

dependabot[bot] opened a new pull request, #3732:
URL: https://github.com/apache/servicecomb-java-chassis/pull/3732

   Bumps [spring-boot-dependencies](https://github.com/spring-projects/spring-boot) from 2.7.9 to 2.7.10.
   <details>
   <summary>Release notes</summary>
   <p><em>Sourced from <a href="https://github.com/spring-projects/spring-boot/releases">spring-boot-dependencies's releases</a>.</em></p>
   <blockquote>
   <h2>v2.7.10</h2>
   <h2>:lady_beetle: Bug Fixes</h2>
   <ul>
   <li>Some of the deprecated spring.security.saml2.relyingparty.registration.*.identityprovider.* properties are ignored <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34525">#34525</a></li>
   <li>Maven plugin uses timezone-local timestamps when outputTimestamp is used <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34424">#34424</a></li>
   <li>Loading application.yml fails with NoSuchMethodError when using SnakeYAML 2.0 <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34405">#34405</a></li>
   <li>EmbeddedWebServerFactoryCustomizerAutoConfiguration should not run when embedded web server is not configured <a href="https://redirect.github.com/spring-projects/spring-boot/pull/34332">#34332</a></li>
   <li>Image builds with podman fail when image buildpacks are configured <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34324">#34324</a></li>
   <li>org.springframework.boot.web.embedded.jetty.GracefulShutdown uses the wrong class to create its logger <a href="https://redirect.github.com/spring-projects/spring-boot/pull/34220">#34220</a></li>
   <li>StandardConfigDataResource can import the same file twice if the classpath includes '.' <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34212">#34212</a></li>
   </ul>
   <h2>:notebook_with_decorative_cover: Documentation</h2>
   <ul>
   <li>Document support for Java 20 <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34642">#34642</a></li>
   <li>Update two references to old APIs <a href="https://redirect.github.com/spring-projects/spring-boot/pull/34567">#34567</a></li>
   <li>Clarify conventions for custom error pages in WebFlux <a href="https://redirect.github.com/spring-projects/spring-boot/pull/34534">#34534</a></li>
   <li>Add documentation tip showing how to configure publishRegistry Maven properties from the command line <a href="https://redirect.github.com/spring-projects/spring-boot/pull/34517">#34517</a></li>
   <li>Document support for Gradle 8 <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34458">#34458</a></li>
   <li>Document how to get socket location for image building configuration with podman <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34435">#34435</a></li>
   <li>Fix typo in Encrypting Properties <a href="https://redirect.github.com/spring-projects/spring-boot/pull/34386">#34386</a></li>
   <li>Use plugins DSL consistently in Spring Boot Gradle Plugin docs  <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34048">#34048</a></li>
   <li>Add link to Failover starter <a href="https://redirect.github.com/spring-projects/spring-boot/pull/32943">#32943</a></li>
   </ul>
   <h2>:hammer: Dependency Upgrades</h2>
   <ul>
   <li>Upgrade to Dropwizard Metrics 4.2.18 <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34648">#34648</a></li>
   <li>Upgrade to GraphQL Java 18.4 <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34717">#34717</a></li>
   <li>Upgrade to Groovy 3.0.16 <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34649">#34649</a></li>
   <li>Upgrade to Jetty 9.4.51.v20230217 <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34651">#34651</a></li>
   <li>Upgrade to Jetty Reactive HTTPClient 1.1.14 <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34650">#34650</a></li>
   <li>Upgrade to Json-smart 2.4.10 <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34652">#34652</a></li>
   <li>Upgrade to Micrometer 1.9.9 <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34528">#34528</a></li>
   <li>Upgrade to Netty 4.1.90.Final <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34653">#34653</a></li>
   <li>Upgrade to Reactor Bom 2020.0.30 <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34529">#34529</a></li>
   <li>Upgrade to Spring AMQP 2.4.11 <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34607">#34607</a></li>
   <li>Upgrade to Spring Data Bom 2021.2.10 <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34530">#34530</a></li>
   <li>Upgrade to Spring Framework 5.3.26 <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34531">#34531</a></li>
   <li>Upgrade to Spring GraphQL 1.0.4 <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34532">#34532</a></li>
   <li>Upgrade to Spring HATEOAS 1.5.4 <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34654">#34654</a></li>
   <li>Upgrade to Spring Integration 5.5.17 <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34722">#34722</a></li>
   <li>Upgrade to Spring Session Bom 2021.2.1 <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34533">#34533</a></li>
   <li>Upgrade to Tomcat 9.0.73 <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34655">#34655</a></li>
   <li>Upgrade to UnboundID LDAPSDK 6.0.8 <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34656">#34656</a></li>
   </ul>
   <h2>:heart: Contributors</h2>
   <p>Thank you to all the contributors who worked on this release:</p>
   <p><a href="https://github.com/1993heqiang"><code>@​1993heqiang</code></a>, <a href="https://github.com/anandmnair"><code>@​anandmnair</code></a>, <a href="https://github.com/anthonydahanne"><code>@​anthonydahanne</code></a>, <a href="https://github.com/dsyer"><code>@​dsyer</code></a>, <a href="https://github.com/izeye"><code>@​izeye</code></a>, <a href="https://github.com/jongwooo"><code>@​jongwooo</code></a>, and <a href="https://github.com/terminux"><code>@​terminux</code></a></p>
   </blockquote>
   </details>
   <details>
   <summary>Commits</summary>
   <ul>
   <li><a href="https://github.com/spring-projects/spring-boot/commit/9d156e9e28d1ee32eb99725528036a848dbaf926"><code>9d156e9</code></a> Release v2.7.10</li>
   <li><a href="https://github.com/spring-projects/spring-boot/commit/1fc3c34fa294d643ad5a4ca3e58cdbb032838a25"><code>1fc3c34</code></a> Document support for Java 20</li>
   <li><a href="https://github.com/spring-projects/spring-boot/commit/1508e3cec81ad1f3edc630b8b3a0e607c2c3a563"><code>1508e3c</code></a> Upgrade to Spring Integration 5.5.17</li>
   <li><a href="https://github.com/spring-projects/spring-boot/commit/dd8f0c4e98a3bc4e3bb908377dca17390e14e6c9"><code>dd8f0c4</code></a> Upgrade to GraphQL Java 18.4</li>
   <li><a href="https://github.com/spring-projects/spring-boot/commit/f234980a1a675235fd97415075124f17db0cf9e5"><code>f234980</code></a> Merge pull request <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34534">#34534</a> from dsyer</li>
   <li><a href="https://github.com/spring-projects/spring-boot/commit/1c05ad2852a8810d11ceff386f171b7368908950"><code>1c05ad2</code></a> Polish &quot;Clarify conventions for custom error pages in WebFlux&quot;</li>
   <li><a href="https://github.com/spring-projects/spring-boot/commit/f285364f22f8cd11eae2479c5e9be370cc1dfe8d"><code>f285364</code></a> Clarify conventions for custom error pages in WebFlux</li>
   <li><a href="https://github.com/spring-projects/spring-boot/commit/bf48c6c7f3b6f4381a99cfd4e1953f1b87648bc4"><code>bf48c6c</code></a> Merge pull request <a href="https://redirect.github.com/spring-projects/spring-boot/issues/34517">#34517</a> from anthonydahanne</li>
   <li><a href="https://github.com/spring-projects/spring-boot/commit/932c203e061d527f4c1c63cf8c0091032ef3756b"><code>932c203</code></a> Upgrade to Spring Session Bom 2021.2.1</li>
   <li><a href="https://github.com/spring-projects/spring-boot/commit/ad680ed4ea14f1c6ac9ffe82193ee5fab148af37"><code>ad680ed</code></a> Polish &quot;Add documentation for publishing images with Maven command line&quot;</li>
   <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-boot/compare/v2.7.9...v2.7.10">compare view</a></li>
   </ul>
   </details>
   <br />
   
   
   [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.springframework.boot:spring-boot-dependencies&package-manager=maven&previous-version=2.7.9&new-version=2.7.10)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   <details>
   <summary>Dependabot commands and options</summary>
   <br />
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
   
   
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@servicecomb.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


[GitHub] [servicecomb-java-chassis] codecov-commenter commented on pull request #3732: Bump spring-boot-dependencies from 2.7.9 to 2.7.10

Posted by "codecov-commenter (via GitHub)" <gi...@apache.org>.
codecov-commenter commented on PR #3732:
URL: https://github.com/apache/servicecomb-java-chassis/pull/3732#issuecomment-1484735985

   ## [Codecov](https://codecov.io/gh/apache/servicecomb-java-chassis/pull/3732?src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation) Report
   > Merging [#3732](https://codecov.io/gh/apache/servicecomb-java-chassis/pull/3732?src=pr&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation) (42d2113) into [master](https://codecov.io/gh/apache/servicecomb-java-chassis/commit/7d02c1675625eeadd8b1048fbf5a3a5801157957?el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation) (7d02c16) will **increase** coverage by `0.04%`.
   > The diff coverage is `n/a`.
   
   > :exclamation: Current head 42d2113 differs from pull request most recent head 92c7db1. Consider uploading reports for the commit 92c7db1 to get more accurate results
   
   ```diff
   @@             Coverage Diff              @@
   ##             master    #3732      +/-   ##
   ============================================
   + Coverage     43.82%   43.86%   +0.04%     
   - Complexity     6068     6071       +3     
   ============================================
     Files          1555     1555              
     Lines         38245    38245              
     Branches       3516     3516              
   ============================================
   + Hits          16762    16778      +16     
   + Misses        20173    20158      -15     
   + Partials       1310     1309       -1     
   ```
   
   
   [see 11 files with indirect coverage changes](https://codecov.io/gh/apache/servicecomb-java-chassis/pull/3732/indirect-changes?src=pr&el=tree-more&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation)
   
   :mega: We’re building smart automated test selection to slash your CI/CD build times. [Learn more](https://about.codecov.io/iterative-testing/?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@servicecomb.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


[GitHub] [servicecomb-java-chassis] dependabot[bot] commented on pull request #3732: Bump spring-boot-dependencies from 2.7.9 to 2.7.10

Posted by "dependabot[bot] (via GitHub)" <gi...@apache.org>.
dependabot[bot] commented on PR #3732:
URL: https://github.com/apache/servicecomb-java-chassis/pull/3732#issuecomment-1519591464

   Superseded by #3760.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@servicecomb.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


[GitHub] [servicecomb-java-chassis] dependabot[bot] closed pull request #3732: Bump spring-boot-dependencies from 2.7.9 to 2.7.10

Posted by "dependabot[bot] (via GitHub)" <gi...@apache.org>.
dependabot[bot] closed pull request #3732: Bump spring-boot-dependencies from 2.7.9 to 2.7.10
URL: https://github.com/apache/servicecomb-java-chassis/pull/3732


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@servicecomb.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org