Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dependabot 20230301a #7487

Merged
merged 50 commits into from
Mar 1, 2023
Merged

Dependabot 20230301a #7487

Changes from 1 commit
Commits
Show all changes
50 commits
Select commit Hold shift click to select a range
434fa20
Bump spring-data-commons from 2.7.7 to 2.7.8
dependabot[bot] Mar 1, 2023
3410110
Bump chronicle-bom from 2.24ea38 to 2.24ea43
dependabot[bot] Mar 1, 2023
fef6f02
Bump tomcat-embed-core from 9.0.71 to 9.0.72
dependabot[bot] Mar 1, 2023
e8be433
Bump maven-compiler-plugin from 3.10.1 to 3.11.0
dependabot[bot] Mar 1, 2023
2d3d54d
Bump libthrift from 0.17.0 to 0.18.0
dependabot[bot] Mar 1, 2023
568f8ef
Bump maven-assembly-plugin from 3.4.2 to 3.5.0
dependabot[bot] Mar 1, 2023
ebf3939
Bump antlr4 from 4.11.1 to 4.12.0
dependabot[bot] Mar 1, 2023
57e0a12
Bump dependency-check-maven from 8.0.2 to 8.1.2
dependabot[bot] Mar 1, 2023
82b4c10
Bump lettuce-core from 6.2.2.RELEASE to 6.2.3.RELEASE
dependabot[bot] Mar 1, 2023
08deb48
Bump lombok from 1.18.24 to 1.18.26
dependabot[bot] Mar 1, 2023
25bed8d
Bump mockito.version from 4.11.0 to 5.0.0
dependabot[bot] Mar 1, 2023
8a617f4
Bump openlineage-java from 0.19.2 to 0.20.6
dependabot[bot] Mar 1, 2023
a77bc3a
Bump elasticsearch.version from 8.6.1 to 8.6.2
dependabot[bot] Mar 1, 2023
fc25bc7
Bump maven-deploy-plugin from 3.0.0 to 3.1.0
dependabot[bot] Mar 1, 2023
3b77abe
Bump maven-javadoc-plugin from 3.4.1 to 3.5.0
dependabot[bot] Mar 1, 2023
549926d
Bump maven-failsafe-plugin from 3.0.0-M8 to 3.0.0-M9
dependabot[bot] Mar 1, 2023
a5ff676
Bump snakeyaml from 1.33 to 2.0
dependabot[bot] Mar 1, 2023
fee446c
Bump tink from 1.7.0 to 1.8.0
dependabot[bot] Mar 1, 2023
c56fafb
Bump kafka-clients from 3.3.2 to 3.4.0
dependabot[bot] Mar 1, 2023
56e591f
Bump gremlin.version from 3.5.2 to 3.5.5
dependabot[bot] Mar 1, 2023
780bf6c
Bump io.github.classgraph:classgraph from 4.8.154 to 4.8.155
dependabot[bot] Mar 1, 2023
638ccb6
Bump net.openhft:chronicle-bom from 2.24ea38 to 2.24ea43
dependabot[bot] Mar 1, 2023
917b0e9
Bump classgraph from 4.8.154 to 4.8.155
dependabot[bot] Mar 1, 2023
b62ff52
Bump org.apache.kafka:kafka-clients from 3.3.2 to 3.4.0
dependabot[bot] Mar 1, 2023
c961686
Bump org.springframework.data:spring-data-commons from 2.7.7 to 2.7.8
dependabot[bot] Mar 1, 2023
b48b9fe
Bump com.google.protobuf:protobuf-java from 3.21.12 to 3.22.0
dependabot[bot] Mar 1, 2023
8ff61ba
Bump org.projectlombok:lombok from 1.18.24 to 1.18.26
dependabot[bot] Mar 1, 2023
3777055
Bump netty.version from 4.1.87.Final to 4.1.89.Final
dependabot[bot] Mar 1, 2023
8933a53
Bump io.openlineage:openlineage-java from 0.19.2 to 0.20.6
dependabot[bot] Mar 1, 2023
d4bd415
Bump io.freefair.aggregate-javadoc from 6.6.1 to 6.6.3
dependabot[bot] Mar 1, 2023
9f6146b
Bump io.micrometer:micrometer-registry-prometheus from 1.10.3 to 1.10.4
dependabot[bot] Mar 1, 2023
d6af3eb
Bump log4j-api from 2.19.0 to 2.20.0
dependabot[bot] Mar 1, 2023
72ea41c
Bump maven-surefire-plugin from 3.0.0-M8 to 3.0.0-M9
dependabot[bot] Mar 1, 2023
ad0fdff
Bump tomcatVersion from 9.0.71 to 9.0.72
dependabot[bot] Mar 1, 2023
34f9ad3
Bump groovy.version from 3.0.14 to 3.0.15
dependabot[bot] Mar 1, 2023
ca13f2a
Bump io.freefair.lombok from 6.6.1 to 6.6.3
dependabot[bot] Mar 1, 2023
940afe0
Bump com.autonomousapps.dependency-analysis from 1.18.0 to 1.19.0
dependabot[bot] Mar 1, 2023
fb0b3ae
Bump springsecurityVersion from 5.8.1 to 5.8.2
dependabot[bot] Mar 1, 2023
8e97e4d
Bump spring-boot.version from 2.7.8 to 2.7.9
dependabot[bot] Mar 1, 2023
02bc6ac
Bump springbootVersion from 2.7.8 to 2.7.9
dependabot[bot] Mar 1, 2023
670a6a0
Bump io.lettuce:lettuce-core from 6.2.2.RELEASE to 6.2.3.RELEASE
dependabot[bot] Mar 1, 2023
c3b2588
Bump org.antlr:antlr4 from 4.11.1 to 4.12.0
dependabot[bot] Mar 1, 2023
238e77d
Bump org.apache.thrift:libthrift from 0.17.0 to 0.18.0
dependabot[bot] Mar 1, 2023
a83f6af
Bump org.springframework.boot from 2.7.8 to 2.7.9
dependabot[bot] Mar 1, 2023
d86cd53
Bump org.apache.logging.log4j:log4j-api from 2.19.0 to 2.20.0
dependabot[bot] Mar 1, 2023
b969b7c
Bump gremlinVersion from 3.5.2 to 3.5.5
dependabot[bot] Mar 1, 2023
668b72a
Bump protobuf-java from 3.21.12 to 3.22.0
dependabot[bot] Mar 1, 2023
04d471a
Bump elasticsearchVersion from 8.6.1 to 8.6.2
dependabot[bot] Mar 1, 2023
9d6c96a
Bump tink from 1.7.0 to 1.8.0
planetf1 Mar 1, 2023
d4d0ac7
Ensure google repo available for updated tink libraries
planetf1 Mar 1, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Bump org.antlr:antlr4 from 4.11.1 to 4.12.0 
Bumps [org.antlr:antlr4](https://github.com/antlr/antlr4) from 4.11.1 to 4.12.0.
- [Release notes](https://github.com/antlr/antlr4/releases)
- [Changelog](https://github.com/antlr/antlr4/blob/master/CHANGES.txt)
- [Commits](antlr/antlr4@4.11.1...4.12.0)

---
updated-dependencies:
- dependency-name: org.antlr:antlr4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: Nigel Jones <nigel.l.jones [email protected]>
  • Loading branch information
@dependabot @planetf1
dependabot[bot] authored and planetf1 committed Mar 1, 2023
commit c3b25885402b85ba84a1a9ad51e6f81d30531a77
2 changes: 1 addition & 1 deletion build.gradle
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -304,7 304,7 @@ allprojects {
// Explicitly enforced versions of transitive dependencies to mitigate potential CVEs reported by static security scans.
//TODO: Remove dependency line below in case the new parent library is updated and pulls good version.
runtimeOnly("com.beust:jcommander:1.82")
runtimeOnly("org.antlr:antlr4:4.11.1")
runtimeOnly("org.antlr:antlr4:4.12.0")
runtimeOnly("org.apache.ivy:ivy:2.5.1")
}
implementation platform('net.openhft:chronicle-bom:2.24ea43')
Expand Down