Commit 7a2f0b0
authored
chore: update upper bound dependencies file (#3966)
This PR contains the following updates:
| Package | Change | Age | Confidence |
|---|---|---|---|
|
[com.fasterxml.jackson:jackson-bom](https://redirect.github.com/FasterXML/jackson-bom)
| `2.20.0` -> `2.20.1` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
|
[com.google.crypto.tink:tink](https://redirect.github.com/tink-crypto/tink-java)
| `1.18.0` -> `1.19.0` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
|
[com.google.errorprone:error_prone_annotations](https://errorprone.info)
([source](https://redirect.github.com/google/error-prone)) | `2.42.0` ->
`2.43.0` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
| [dev.cel:cel](https://redirect.github.com/google/cel-java) | `0.11.0`
-> `0.11.1` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>tink-crypto/tink-java (com.google.crypto.tink:tink)</summary>
###
[`v1.19.0`](https://redirect.github.com/tink-crypto/tink-java/releases/tag/v1.19.0):
Tink Java v1.19.0
[Compare
Source](https://redirect.github.com/tink-crypto/tink-java/compare/v1.18.0...v1.19.0)
Tink is a multi-language, cross-platform library that provides simple
and misuse-proof APIs for common cryptographic tasks.
**This is Tink Java 1.19**
The complete list of changes since 1.18.0 can be found
[here](https://redirect.github.com/tink-crypto/tink-java/compare/v1.18.0...v.1.19.0).
#### Build changes
- For Bazel builds, we now use Bazel 7.6.1. in our tests.
- For Bazel builds, Tink now supports bzlmod.
- Tink no longer supports Java 8. The minimum version starting from
1.19.0 is Java 11.
#### Dependencies
- Protobuf 4.28.2 was upgraded to Protobuf 4.32.1. (Note: we plan to
shade protobuf in the next minor version of Tink which should resolve
compatibility issues)
#### Obscure behaviour changes
- Tink will reject custom key types where the Type-Url has non-ASCII
characters.
- Tink may serialize keysets slightly differently in certain cases. For
example, in the serialization of a ECDSA keyset, the points might be
padded
differently than before. Users should not depend on the exact format of
Tink's serialization.
- Use Conscrypt's AES-CMAC implementation when available and when the
input is larger than 64 byte. This may improves the performance of
AES-CMAC, AES-SIV and AES-EAX for large inputs.
- Removed usage of thread-local Ciphers for ChaCha20Poly1305.
#### Added APIs
- Added public `JwtEcdsaParameters.Algorithm.getEcParameterSpec` method.
- The AES-SIV implementation in subtle now accepts multiple associated
datas.
#### Future work
To see what we're working towards, check our [project
roadmap](https://developers.google.com/tink/roadmap).
#### Getting started
To get started using Tink, see [the setup
guide](https://developers.google.com/tink/tink-setup#java).
##### Maven:
```
<dependency>
<groupId>com.google.crypto.tink</groupId>
<artifactId>tink</artifactId>
<version>1.19.0</version>
</dependency>
```
##### Gradle:
```
dependencies {
implementation 'com.google.crypto.tink:tink-android:1.19.0'
}
```
##### Bazel:
##### Using bzlmod
```
bazel_dep(name = "tink_java", version = "1.19.0")
git_override(
module_name = "tink_java",
remote = "https://github.com/tink-crypto/tink-java",
tag = "v1.19.0",
)
```
##### Using WORKSPACE
```python
load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
RULES_JVM_EXTERNAL_TAG = "4.5"
RULES_JVM_EXTERNAL_SHA ="b17d7388feb9bfa7f2fa09031b32707df529f26c91ab9e5d909eb1676badd9a6"
http_archive(
name = "rules_jvm_external",
strip_prefix = "rules_jvm_external-%s" % RULES_JVM_EXTERNAL_TAG,
sha256 = RULES_JVM_EXTERNAL_SHA,
url = "https://github.com/bazelbuild/rules_jvm_external/archive/refs/tags/%s.zip" % RULES_JVM_EXTERNAL_TAG,
)
load("@​rules_jvm_external//:repositories.bzl", "rules_jvm_external_deps")
rules_jvm_external_deps()
load("@​rules_jvm_external//:setup.bzl", "rules_jvm_external_setup")
rules_jvm_external_setup()
load("@​rules_jvm_external//:defs.bzl", "maven_install")
maven_install(
artifacts = [
"com.google.crypto.tink:tink:NEXT_VERSION",
# ... other dependencies ...
],
repositories = [
"https://repo1.maven.org/maven2",
],
)
```
Alternatively, one can build Tink from source, and include it with
`http_archive`:
```python
http_archive(
name = "com_github_tink_crypto_tink_java",
urls = ["https://github.com/tink-crypto/tink-java/archive/refs/tags/NEXT_VERSION.zip"],
strip_prefix = "tink-java-NEXT_VERSION",
sha256 = ...
)
load("@​tink_java//:tink_java_deps.bzl", "TINK_MAVEN_ARTIFACTS", "tink_java_deps")
tink_java_deps()
load("@​tink_java//:tink_java_deps_init.bzl", "tink_java_deps_init")
tink_java_deps_init()
# ...
maven_install(
artifacts = TINK_MAVEN_ARTIFACTS + # ... other dependencies ...
repositories = [
"https://repo1.maven.org/maven2",
],
)
```
</details>
<details>
<summary>google/error-prone
(com.google.errorprone:error_prone_annotations)</summary>
###
[`v2.43.0`](https://redirect.github.com/google/error-prone/releases/tag/v2.43.0):
Error Prone 2.43.0
Changes:
- `-XepPatchChecks` now skips disabled checks
([#​4943](https://redirect.github.com/google/error-prone/issues/4943))
- `AndroidJdkLibsChecker` has been removed, the recommended replacement
for Android code is Android Lint's NewApi check
New checks:
-
[`NullNeedsCastForVarargs`](https://errorprone.info/bugpattern/NullNeedsCastForVarargs):
Detect calls that incorrectly passes a `null` *array* instead of a
`null` *element*.
-
[`RedundantNullCheck`](https://errorprone.info/bugpattern/RedundantNullCheck):
detect checks on expressions that are non-null.
Closed issues:
[#​4943](https://redirect.github.com/google/error-prone/issues/4943),
[#​5102](https://redirect.github.com/google/error-prone/issues/5102),
[#​5107](https://redirect.github.com/google/error-prone/issues/5107),
[#​5121](https://redirect.github.com/google/error-prone/issues/5121),
[#​5158](https://redirect.github.com/google/error-prone/issues/5158),
[#​5217](https://redirect.github.com/google/error-prone/issues/5217),
[#​5239](https://redirect.github.com/google/error-prone/issues/5239)
Full changelog:
<google/error-prone@v2.42.0...v2.43.0>
</details>
<details>
<summary>google/cel-java (dev.cel:cel)</summary>
###
[`v0.11.1`](https://redirect.github.com/google/cel-java/releases/tag/v0.11.1)
[Compare
Source](https://redirect.github.com/google/cel-java/compare/v0.11.0...v0.11.1)
##### Significant changes
- CEL-Java evaluates the following expressions to their proto equivalent
form:
```
timestamp(100) -> google.protobuf.Timestamp
duration("1h") -> google.protobuf.Duration
```
Starting with this release, the runtime can evaluate these literals to
the following Java native type equivalents:
```
timestamp(100) -> java.time.Instant
duration("1h") -> java.time.Duration
```
This new behavior is not yet enabled by default. Call
`CelOptions.Builder.evaluateCanonicalTypesToNativeValues(true)` to
explicitly enable it.
- Previously only identifiers containing a period were allowed to be
aliased. This constraint has been removed, so the following aliasing is
now allowed:
```
CelContainer.newBuilder().addAlias("short", "really_long_package_name").build();
```
#### What's Changed
##### Features
- Evaluate CEL's timestamp and duration types to their native equivalent
values in
[#​790](https://redirect.github.com/google/cel-java/pull/790)
- Relax constraint for fully qualifying a package name when aliasing in
[#​837](https://redirect.github.com/google/cel-java/pull/837)
##### Optimizations
- Enhance CSE to handle two variable comprehensions in
[#​808](https://redirect.github.com/google/cel-java/pull/808)
- Override environment's expected result type during constant folding in
[#​815](https://redirect.github.com/google/cel-java/pull/815)
- Allow constant folding to fold equals operator in
[#​822](https://redirect.github.com/google/cel-java/pull/822)
- Enhance ConstantFoldingOptimizer to fold arithmetics involving
timestamps and durations in
[#​825](https://redirect.github.com/google/cel-java/pull/825)
##### Safety
- Add comprehension nesting validator. in
[#​829](https://redirect.github.com/google/cel-java/pull/829)
##### Bug fixes
- Fixed negative zero comparison. `"0.0 == -0.0"` now evaluates to
`true`
- Fixed FileDescriptorSetConverter to always reference WellKnownTypes
descriptors from generated ones in
[#​833](https://redirect.github.com/google/cel-java/pull/833)
- Fixed bytes(string) standard function to respect
evaluateCanonicalTypesToNativeValues flag in
[#​828](https://redirect.github.com/google/cel-java/pull/828)
##### Testing infra
- Setup of the coverage index. in
[#​811](https://redirect.github.com/google/cel-java/pull/811)
##### Miscellaneous
- Renaming the CelComprehensionsExtensions docs to align more closely
with lib implementation in
[#​807](https://redirect.github.com/google/cel-java/pull/807)
- Remove capability to serially increment mangled variable indices in
[#​806](https://redirect.github.com/google/cel-java/pull/806)
- Add an overload for `CelMutableExpr.ofComprehension`. in
[#​812](https://redirect.github.com/google/cel-java/pull/812)
- Fix Typo: "descedent" to "descendent". in
[#​827](https://redirect.github.com/google/cel-java/pull/827)
- Include comprehensions in CelEnvironment in
[#​838](https://redirect.github.com/google/cel-java/pull/838)
- Update evaluateCanonicalTypesToNativeValues documentation and fix
tests in
[#​840](https://redirect.github.com/google/cel-java/pull/840)
**Full Changelog**:
<google/cel-java@v0.11.0...v0.11.1>
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/googleapis/sdk-platform-java).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTYuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE1OS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->1 parent 1e4a7e5 commit 7a2f0b0
1 file changed
+4
-4
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
16 | 16 | | |
17 | 17 | | |
18 | 18 | | |
19 | | - | |
| 19 | + | |
20 | 20 | | |
21 | 21 | | |
22 | 22 | | |
| |||
32 | 32 | | |
33 | 33 | | |
34 | 34 | | |
35 | | - | |
| 35 | + | |
36 | 36 | | |
37 | 37 | | |
38 | 38 | | |
| |||
43 | 43 | | |
44 | 44 | | |
45 | 45 | | |
46 | | - | |
47 | | - | |
| 46 | + | |
| 47 | + | |
48 | 48 | | |
49 | 49 | | |
50 | 50 | | |
0 commit comments