Bump bagit from 4.9.0 to 5.2.0

[dependabot]

Bumps bagit from 4.9.0 to 5.2.0.

Release notes

Sourced from bagit's releases.

Release 5.2.0

updates to due to bagit specification 1.0 see https://tools.ietf.org/html/draft-kunze-bagit-16

Release 5.1.1

refs #112 - threading issue when doing a verify on a invalid bag. Sometimes instead of throwing a CorruptChecksumException it would throw a VerificationException.

Release 5.1.0

refs #107 - added 'repeatable' as a metadata profile attribute. This allows a profile to specify if a bag metadata tag should be allowed to show up multiple times.

Release 5.0.7

fixes #108 - if you had a payload file named data and performed a bagInPlace operation, then it would fail because it first tried to create a folder named data to move all the files into. This has been fixed by creating a temp directory and then later renaming the temp directory to the proper name of data

Release 5.0.6

Closes #106 - fixing bug caused by removing formatting. Added test to ensure fetch file format is tested during writing.

v5.0.5

closes #99 - Files listed in the fetch file were also being added to payload directory. This has been fixed and will now only list them in the fetch file. closes #101 - Hidden files were being included on windows due to a part of the code not using the updated logic for detecting hidden folders/files on windows.

Release 5.0.4

#99 - fixed the bug that fetch items that were listed in the manifest, were also being added to the data directory.

Release 5.0.3

• #94 - changed from using finalize to the AutoClosable interface because it integrates with other JVM languages better
• fixed incorrect payload-oxum calculation
• updated documentation

Release 5.0.2

Fixes #93 - bad logic for moving a file if including hidden files/folders when bagging in place.

Release 5.0.1

Fixes #92 - ArrayIndexOutOfBounds error that can occur when reading fetch files that are poorly formed.

Version 5.0

A complete rewrite of the bagit library. See the README for more details.

version 5.0 release candidate 13

with the new 1.0 bagit specification had to implement that all payload manifests must list all payload files.

Because of this, I had to also bump the 0.98 version for .bagit to 2.0.

release 5 candidate 12

No release notes provided.

v5.0.0-RC10

added a bunch more PMD code quality checks

version 5.0.0 Release candidate 9

fixes #51 - files containing \r and or \n caused a bag to fail validation. Now the filenames replace those with percent encoded strings instead.

... (truncated)

Changelog

Sourced from bagit's changelog.

Changes in 5.0.0

1. Complete rewrite using Java 8 and modern Java best practices
2. Bagging directly into a ZIP file is no longer a core feature. The examples directory shows how to support the serialization format and options of your choice.
3. Integrated support for fetch.txt has been removed as a core feature. The examples directory includes an implementation using the standard library which can serve as a reference for the more advanced implementations which most users will require.
4. Allow for ignoring hidden files except if specified in manifest.
5. Linter was created for documenting allowed but discouraged features of the BagIt specification.
6. Integration testing against known good and bad BagIt bags.

Changes in 4.10.0

1. Fixes defect in SimpleResult.add*Message() methods.
2. Reports an error when verifying payloads for a bag with no payload manifests.
3. Fix bugs causing streams to be left open after an exception is thrown.
4. Upgraded Commons Compress to 1.8.1.

Commits

• af00922 Merge pull request #118 from LibraryOfCongress/version1
• 97a6770 refs 116 updates due to version 1.0 spec
• e5b0c5d just change the version to 1.0
• 61c50c8 fixed ambiguous grammatical construct as pointed out by user
• 7709a66 Merge pull request #115 from LibraryOfCongress/junit5
• 8a97016 adding missing repeatable to bag info requirement
• 55fede2 upgrade spotbugs
• e1a8e30 increase code coverage
• 706b647 updated README gradle commands to use the built in gradle wrapper
• bd25736 fixing test for windows
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.