fix(deps): update all dependencies #836

renovate · 2025-02-24T03:25:57Z

This PR contains the following updates:

Package	Type	Update	Change
actions/upload-artifact	action	patch	`v4.6.0` -> `v4.6.1`
codecov/codecov-action	action	minor	`v5.3.1` -> `v5.4.0`
github/codeql-action	action	patch	`v3.28.8` -> `v3.28.10`
gradle (source)		minor	`8.12.1` -> `8.13`
ossf/scorecard-action	action	patch	`v2.4.0` -> `v2.4.1`
yarn (source)	packageManager	minor	`4.6.0` -> `4.7.0`
org.mockito:mockito-junit-jupiter	dependencies	minor	`5.15.2` -> `5.16.0`
net.sourceforge.plantuml:plantuml	dependencies	patch	`1.2025.0` -> `1.2025.2`
org.junit.jupiter:junit-jupiter (source)	dependencies	minor	`5.11.4` -> `5.12.0`
org.awaitility:awaitility (source)	dependencies	minor	`4.2.2` -> `4.3.0`
com.fasterxml.jackson.datatype:jackson-datatype-jsr310	dependencies	patch	`2.18.2` -> `2.18.3`
com.fasterxml.jackson.core:jackson-core	dependencies	patch	`2.18.2` -> `2.18.3`
com.fasterxml.jackson.core:jackson-databind (source)	dependencies	patch	`2.18.2` -> `2.18.3`
com.fasterxml.jackson.core:jackson-annotations (source)	dependencies	patch	`2.18.2` -> `2.18.3`
org.slf4j:slf4j-api (source, changelog)	dependencies	patch	`2.0.16` -> `2.0.17`
io.netty:netty-codec-http (source)	dependencies	patch	`4.1.117.Final` -> `4.1.119.Final`
io.netty:netty-codec (source)	dependencies	patch	`4.1.117.Final` -> `4.1.119.Final`
io.netty:netty-handler (source)	dependencies	patch	`4.1.118.Final` -> `4.1.119.Final`
io.netty:netty-handler-proxy (source)	dependencies	patch	`4.1.118.Final` -> `4.1.119.Final`
io.netty:netty-codec-socks (source)	dependencies	patch	`4.1.117.Final` -> `4.1.119.Final`
com.datadoghq:datadog-api-client	dependencies	minor	`2.31.0` -> `2.32.0`
io.projectreactor.netty:reactor-netty-core	dependencies	patch	`1.2.2` -> `1.2.3`
io.opentelemetry:opentelemetry-api	dependencies	minor	`1.46.0` -> `1.47.0`
io.projectreactor.netty:reactor-netty-http	dependencies	patch	`1.2.2` -> `1.2.3`

Release Notes

actions/upload-artifact (actions/upload-artifact)

`v4.6.1`

Compare Source

What's Changed

Update to use artifact 2.2.2 package by @yacaovsnc in https://github.com/actions/upload-artifact/pull/673

Full Changelog: actions/upload-artifact@v4...v4.6.1

codecov/codecov-action (codecov/codecov-action)

`v5.4.0`

Compare Source

What's Changed

update wrapper submodule to 0.2.0, add recurse_submodules arg by @matt-codecov in https://github.com/codecov/codecov-action/pull/1780
build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1 by @app/dependabot in https://github.com/codecov/codecov-action/pull/1775
build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 by @app/dependabot in https://github.com/codecov/codecov-action/pull/1776
build(deps): bump github/codeql-action from 3.28.9 to 3.28.10 by @app/dependabot in https://github.com/codecov/codecov-action/pull/1777
Clarify in README that use_pypi bypasses integrity checks too by @webknjaz in https://github.com/codecov/codecov-action/pull/1773
Fix use of safe.directory inside containers by @Flamefire in https://github.com/codecov/codecov-action/pull/1768
Fix description for report_type input by @craigscott-crascit in https://github.com/codecov/codecov-action/pull/1770
build(deps): bump github/codeql-action from 3.28.8 to 3.28.9 by @app/dependabot in https://github.com/codecov/codecov-action/pull/1765
Fix a typo in the example by @miranska in https://github.com/codecov/codecov-action/pull/1758
build(deps): bump github/codeql-action from 3.28.5 to 3.28.8 by @app/dependabot in https://github.com/codecov/codecov-action/pull/1757
build(deps): bump github/codeql-action from 3.28.1 to 3.28.5 by @app/dependabot in https://github.com/codecov/codecov-action/pull/1753

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.1..v5.4.0

github/codeql-action (github/codeql-action)

`v3.28.10`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.10 - 21 Feb 2025

Update default CodeQL bundle version to 2.20.5. #2772
Address an issue where the CodeQL Bundle would occasionally fail to decompress on macOS. #2768

See the full CHANGELOG.md for more information.

`v3.28.9`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.9 - 07 Feb 2025

Update default CodeQL bundle version to 2.20.4. #2753

See the full CHANGELOG.md for more information.

gradle/gradle (gradle)

`v8.13`

Compare Source

ossf/scorecard-action (ossf/scorecard-action)

`v2.4.1`

Compare Source

What's Changed

This update bumps the Scorecard version to the v5.1.1 release. For a complete list of changes, please refer to the v5.1.0 and v5.1.1 release notes.
Publishing results now uses half the API quota as before. The exact savings depends on the repository in question.
- use Scorecard library entrypoint instead of Cobra hooking by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1423
Some errors were made into annotations to make them more visible
- Make default branch error more prominent by @jsoref in https://github.com/ossf/scorecard-action/pull/1459
There is now an optional file_mode input which controls how repository files are fetched from GitHub. The default is archive, but git produces the most accurate results for repositories with .gitattributes files at the cost of analysis speed.
- add input for specifying --file-mode by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1509
The underlying container for the action is now hosted on GitHub Container Registry. There should be no functional changes.
- 🌱 publish docker images to GitHub Container Registry by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1453

Docs

Installation docs update by @JeremiahAHoward in https://github.com/ossf/scorecard-action/pull/1416

New Contributors

@JeremiahAHoward made their first contribution in https://github.com/ossf/scorecard-action/pull/1416
@jsoref made their first contribution in https://github.com/ossf/scorecard-action/pull/1459
Full Changelog: ossf/scorecard-action@v2.4.0...v2.4.1

yarnpkg/berry (yarn)

`v4.7.0`

Compare Source

mockito/mockito (org.mockito:mockito-junit-jupiter)

`v5.16.0`

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

5.16.0

2025-03-03 - 10 commit(s) by Brice Dutheil, Rafael Winterhalter, TDL, dependabot[bot]
Add support for including module-info in Mockito. (#3597)
Bump com.gradle.develocity from 3.19 to 3.19.1 (#3579)
Bump org.assertj:assertj-core from 3.27.2 to 3.27.3 (#3577)
Bump com.diffplug.spotless:spotless-plugin-gradle from 7.0.1 to 7.0.2 (#3574)
Bump com.diffplug.spotless:spotless-plugin-gradle from 6.25.0 to 7.0.1 (#3571)
Bump org.assertj:assertj-core from 3.27.1 to 3.27.2 (#3569)
Tweaks documentation on mockito agent config for maven (#3568)
Adds --info to diagnose closeAndReleaseStagingRepositories issues (#3567)
Refine reflection when calling management factory (#3566)
Avoid warning when dynamic attach is enabled (#3551)

DataDog/datadog-api-client-java (com.datadoghq:datadog-api-client)

`v2.32.0`

reactor/reactor-netty (io.projectreactor.netty:reactor-netty-core)

`v1.2.3`

Reactor Netty 1.2.3 is part of 2024.0.3 Release Train.

What's Changed

⚠️ Update considerations and deprecations

Make ChannelOperations.DisposedChannel#close non operational by @violetagg in #3592
Ensure HttpClient does not add Content-Length header when the send function does not change NettyOutbound or returns Mono#empty by @violetagg in #3605

✨ New features and improvements

Depend on Reactor Core v3.7.3 by @violetagg in 4e2176e, see release notes
Depend on Netty v4.1.118.Final by @violetagg in #3623
Use DnsNameResolverBuilder#datagramChannelFactory instead of the deprecated DnsNameResolverBuilder#channelFactory by @violetagg in #3598
Support for dynamic proxy configuration at the HTTP protocol level by @raccoonback in #3593
Supports configurable compression level by @raccoonback in #3567
Add API for specifying datagram channel strategies per DnsNameResolver by @violetagg in #3607

🐞 Bug fixes

When Mono#empty is provided as a deferred configuration, continue with the actual configuration by @violetagg in #3596
When null is provided as a deferred configuration, continue with the current configuration by @violetagg in #3602
Http2Pool: Ensure the permit is returned when the Borrower is cancelled by @violetagg in #3609

Full Changelog: reactor/reactor-netty@v1.2.2...v1.2.3

open-telemetry/opentelemetry-java (io.opentelemetry:opentelemetry-api)

`v1.47.0`

Compare Source

API

Incubator

Make ExtendedTracer easier to use
(#6943)
Add ExtendedLogRecordBuilder#setEventName and corresponding SDK and OTLP serialization
(#7012)
BREAKING: Drop event API / SDK
(#7053)

SDK

Remove -alpha artifacts from runtime classpath of stable components
(#6944)

Traces

Bugfix: Follow spec on span limits, batch processors
(#7030)
Add experimental SdkTracerProvider.setScopeConfigurator(ScopeConfigurator) for
updating TracerConfig at runtime
(#7021)

Profiles

Add AttributeKeyValue abstraction to common otlp exporters
(#7026)
Improve profiles attribute table handling
(#7031)

Exporters

Interpret timeout zero value as no limit
(#7023)
Bugfix - OTLP: Fix concurrent span reusable data marshaler
(#7041)
OTLP: Add ability to customize retry exception predicate
(#6991)
OTLP: Expand default OkHttp sender retry exception predicate
(#7047,
#7057)

Extensions

Autoconfigure: Consistent application of exporter customizers when otel.{signal}.exporter=none
(#7017)
Autoconfigure: Promote EnvironmentResourceProvider to public API
(#7052)
Autoconfigure: Ensure OTEL_PROPAGATORS still works when OTEL_SDK_DISABLED=true.
(#7062)%

Testing

Add W3CBaggagePropagator to OpenTelemetryRule, OpenTelemetryExtension.
(#7056)

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot requested a review from a team as a code owner February 24, 2025 03:25

renovate bot added the Type: Maintenance label Feb 24, 2025

renovate bot force-pushed the renovate/all branch 7 times, most recently from b5fcce2 to dee4ceb Compare March 3, 2025 17:58

fix(deps): update all dependencies

62c2577

renovate bot force-pushed the renovate/all branch from dee4ceb to 62c2577 Compare March 5, 2025 19:39

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update all dependencies #836

fix(deps): update all dependencies #836

renovate bot commented Feb 24, 2025 •

edited

Loading

fix(deps): update all dependencies #836

Are you sure you want to change the base?

fix(deps): update all dependencies #836

Conversation

renovate bot commented Feb 24, 2025 • edited Loading

Release Notes

What's Changed

What's Changed

CodeQL Action Changelog

3.28.10 - 21 Feb 2025

CodeQL Action Changelog

3.28.9 - 07 Feb 2025

What's Changed

Docs

New Contributors

5.16.0

Fixed

Added

Changed

What's Changed

⚠️ Update considerations and deprecations

✨ New features and improvements

🐞 Bug fixes

API

Incubator

SDK

Traces

Profiles

Exporters

Extensions

Testing

Configuration

renovate bot commented Feb 24, 2025 •

edited

Loading