Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 31, 2025

Bumps the dependencies group with 13 updates:

Package From To
org.ow2.asm:asm 9.7.1 9.8
org.ow2.asm:asm-util 9.7.1 9.8
io.avaje:avaje-inject 11.3 11.4
io.avaje:avaje-inject-generator 11.3 11.4
io.swagger.parser.v3:swagger-parser 2.1.25 2.1.26
org.hibernate.orm:hibernate-core 6.6.11.Final 6.6.12.Final
org.jdbi:jdbi3-core 3.48.0 3.49.0
com.zaxxer:HikariCP 6.2.1 6.3.0
com.google.guava:guava 33.4.5-jre 33.4.6-jre
org.apache.maven.plugins:maven-surefire-plugin 3.5.2 3.5.3
gg.jte:jte 3.1.16 3.2.0
gg.jte:jte-models 3.1.16 3.2.0
software.amazon.awssdk:bom 2.31.6 2.31.11

Updates org.ow2.asm:asm from 9.7.1 to 9.8

Updates org.ow2.asm:asm-util from 9.7.1 to 9.8

Updates org.ow2.asm:asm-util from 9.7.1 to 9.8

Updates io.avaje:avaje-inject from 11.3 to 11.4

Release notes

Sourced from io.avaje:avaje-inject's releases.

11.4

What's Changed

Dependencies

Full Changelog: avaje/avaje-inject@11.3...11.4

Commits

Updates io.avaje:avaje-inject-generator from 11.3 to 11.4

Updates io.avaje:avaje-inject-generator from 11.3 to 11.4

Updates io.swagger.parser.v3:swagger-parser from 2.1.25 to 2.1.26

Release notes

Sourced from io.swagger.parser.v3:swagger-parser's releases.

Swagger-parser 2.1.26 released!

  • allow non explicit style and explode with 'explicitStyleAndExplode' option (#2161)
  • fix(#2104): properly process inline refs in composed schemas (#2123)
Commits
  • eb23c46 prepare release 2.1.26
  • 36d791b fix(#2104): properly process inline refs in composed schemas
  • eabb6f1 update dependencies
  • 4f58976 allow non explicit style and explode with 'explicitStyleAndExplode' option
  • d395885 bump snapshot 2.1.26-SNAPSHOT
  • See full diff in compare view

Updates org.hibernate.orm:hibernate-core from 6.6.11.Final to 6.6.12.Final

Release notes

Sourced from org.hibernate.orm:hibernate-core's releases.

Hibernate ORM 6.6.12.Final released

Today, we published a new release of Hibernate ORM 6.6: 6.6.12.Final.

You can find the full list of 6.6.12.Final changes here.

What's new

This release introduces a few minor improvements as well as bug fixes.

Conclusion

For additional details, see:

See also the following resources related to supported APIs:

Visit the website for details on getting in touch with us.

Changelog

Sourced from org.hibernate.orm:hibernate-core's changelog.

Changes in 6.6.12.Final (March 30, 2025)

https://hibernate.atlassian.net/projects/HHH/versions/32945

** Bug * [HHH-19109] - Hibernate Data Repositories are @​RequestScoped * [HHH-19059] - Bytecode enhancement fails when inherited fields are mapped using property access in subclass * [HHH-19017] - Class Cast Exception for PersistentAttributeInterceptable * [HHH-18920] - Enum parameters in Jakarta Data repository method return type constructor are not properly matched * [HHH-18745] - Unnecessary joins when use TREAT operator * [HHH-14694] - Use stable proxy names to avoid managing proxy state and memory leaks

** Task * [HHH-19230] - Ensure that thread local for org.hibernate.bytecode.enhance.internal.bytebuddy.SafeCacheProvider + OverridingClassFileLocator are completely cleared

Commits
  • 5f65de1 Pre-steps for release : 6.6.12.Final
  • 84e5d19 HHH-19059 Fix check for property access fields on hierarchies
  • 2fd1191 HHH-19059 Add test for issue
  • 565693b HHH-19017: Address ClassCastException for PersistentAttributeInterceptable
  • cb89514 HHH-18745 Avoid resolving unnecessary table references for subtypes
  • a92e0db HHH-18745 Add test for issue
  • 69f4951 HHH-19109 fix use of @​TransactionScoped by repository
  • e357123 HHH-18920 Proper class name is JpaSelection.getJavaTypeName(), not JpaSelecti...
  • 776e4a5 HHH-18920 Test case - Jakarta Data repository with query selecting enum column
  • 02ef8c1 HHH-19230 Avoid class loader leak in enhancement and improve bytebuddy type c...
  • Additional commits viewable in compare view

Updates org.jdbi:jdbi3-core from 3.48.0 to 3.49.0

Release notes

Sourced from org.jdbi:jdbi3-core's releases.

3.49.0

Changelog

Sourced from org.jdbi:jdbi3-core's changelog.

Unreleased

Commits
  • ca0ef36 [maven-release-plugin] prepare release v3.49.0
  • 06028eb release docs 3.49.0
  • 6d905f5 release notes #2733
  • 16718b2 Minor documentation update
  • 8b2bb52 Fixed checkstyle errors
  • d3c6c4d Use a plain java Function instead of RowMapperFieldPostProcessor
  • 51a9c30 Added dosc on the combination of @​Nested and Optional
  • 3d68ad8 fixed unneeded use of fully qualified names
  • e2ab0aa Removed functionality that automatically set results to null when all values ...
  • 4ec8068 Use existing method for getting the type parameter
  • Additional commits viewable in compare view

Updates com.zaxxer:HikariCP from 6.2.1 to 6.3.0

Changelog

Sourced from com.zaxxer:HikariCP's changelog.

HikariCP Changes

Changes in 6.3.0

  • increase keepaliveTime variance from 10% to 20%

  • merged #2266 support duration values for configuration from properties, such as 10ms, 20s, 30m, 40h or 50d

  • merged #2284 align logs from HikariPool.logPoolState()

  • merged #2285 set default value for maxIdle in HikariConfig constructor (no functional change)

  • merged #2294 Allow setting String[] and int[] properties (useful for pgjdbc HA configuration)

  • merged #2300 catch java.lang.Error instead of java.lang.Exception under certain conditions

Changes in 6.2.1

  • change default keepaliveTime to 2 minutes

  • fix commons-compress dependency, make test scope

Changes in 6.2.0

  • merged #2238 handle SQLTimeoutException without eviction. Users looking to preserve previous behavior should provide an implementation of com.zaxxer.hikari.SQLExceptionOverride to the pool configuration.

  • added new enum value, Override.MUST_EVICT, available to implementations of com.zaxxer.hikari.SQLExceptionOverride

  • enhanced debug logging in circumstances where the pool falls to zero size and new connections to the database continue to fail.

  • update test dependencies that were flagged as having vulnerabilities

Changes in 6.1.0

  • fixed #1960 allow SQLExceptionOverride to adjudicate all exceptions for eviction

  • merged #1962 dropwizard 5 metrics are now supported via the setMetricRegistry() method in HikariConfig and in HikariDataSource

  • merged #2244 improve JavassistProxyFactory

  • merged #2243 fix inconsistency between isWrapperFor and unwrap

  • merged #1827 support loading properties file in unnamed resources module

  • merged #1842 don't clear isCommitStateDirty flag in setReadOnly

  • change default maxLifetime variance from 2.5% to 25% to further avoid mass connection die-off dips

... (truncated)

Commits
  • ef165cf [maven-release-plugin] prepare release HikariCP-6.3.0
  • 00456a1 Update changelog and next release version.
  • d6f0ccc Allow setting String[] and int[] properties (#2291)
  • 0bff26e Align HikariPool.logPoolState (#2284)
  • bbd698e Setting default value for maxIdle in HikariConfig constructor (#2285)
  • 8257a99 Although rare, JDBC drivers can and do throw java.lang.Error instead of java....
  • 8de2eb8 Drop Support section in README and reorganize its content (#2301)
  • a28b6ec Add license headers (#2271)
  • 9fa66d1 minor code cleanup
  • 1164493 Update README.md
  • Additional commits viewable in compare view

Updates com.google.guava:guava from 33.4.5-jre to 33.4.6-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.4.6

Guava 33.4.6 fixes two problems that we introduced while modularizing Guava in 33.4.5.

Even if you're not upgrading from Guava 33.4.0 or earlier, still read the release notes for Guava 33.4.1. Those release notes contain information about Guava 33.4.5 and 33.4.6's effect on the module system.

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.4.6-jre</version>
  <!-- or, for Android: -->
  <version>33.4.6-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

  • Removed the extra copy of each class from the Guava jar. The extra copies were an accidental addition from the modularization work in Guava 33.4.5. (40485b93ce)
  • Fixed annotation-related warnings when using Guava in modular builds. The most common such warning is Cannot find annotation method 'value()' in type 'DoNotMock': .... (7e15ab3566)
Commits

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.2 to 3.5.3

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.5.3

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • 4434650 [maven-release-plugin] prepare release surefire-3.5.3
  • 1270950 use github directly
  • 59f3a1f release tag name backward compatible
  • dfbabe2 assertj-core must be test scope (#826)
  • e1f8119 back to 3.5.3-SNAPSHOT
  • c497559 [maven-release-plugin] prepare for next development iteration
  • 3962112 [maven-release-plugin] prepare release v3.5.3
  • 227c134 surefire shared utils version current version (#825)
  • 1d34c34 Bump org.htmlunit:htmlunit from 4.10.0 to 4.11.1
  • 906b65a Update site descriptors
  • Additional commits viewable in compare view

Updates gg.jte:jte from 3.1.16 to 3.2.0

Release notes

Sourced from gg.jte:jte's releases.

3.2.0

Commits
  • ee80f87 Bump version to 3.2.0
  • 84721bf Merge pull request #431 from TheKinrar/kotlin2.1
  • c2e9868 Merge remote-tracking branch 'origin/main' into kotlin2.1
  • 1956ac6 Update Gradle in Kotlin tests
  • 24a1777 Update Kotlin version in tests
  • f0b6fa2 Merge pull request #432 from SebastianSchlecht/java-compiler-error-matching
  • 7cd0a95 Adds test for template with deprecated method
  • 0e39e34 Displays first compiler error message of type 'error'
  • f1884da Only support Kotlin 2.1
  • dbecede Bump version to 3.1.17-SNAPSHOT for further development
  • See full diff in compare view

Updates gg.jte:jte-models from 3.1.16 to 3.2.0

Release notes

Sourced from gg.jte:jte-models's releases.

3.2.0

Commits
  • ee80f87 Bump version to 3.2.0
  • 84721bf Merge pull request #431 from TheKinrar/kotlin2.1
  • c2e9868 Merge remote-tracking branch 'origin/main' into kotlin2.1
  • 1956ac6 Update Gradle in Kotlin tests
  • 24a1777 Update Kotlin version in tests
  • f0b6fa2 Merge pull request #432 from SebastianSchlecht/java-compiler-error-matching
  • 7cd0a95 Adds test for template with deprecated method
  • 0e39e34 Displays first compiler error message of type 'error'
  • f1884da Only support Kotlin 2.1
  • dbecede Bump version to 3.1.17-SNAPSHOT for further development
  • See full diff in compare view

Updates gg.jte:jte-models from 3.1.16 to 3.2.0

Release notes

Sourced from gg.jte:jte-models's releases.

3.2.0

Commits
  • ee80f87 Bump version to 3.2.0
  • 84721bf Merge pull request #431 from TheKinrar/kotlin2.1
  • c2e9868 Merge remote-tracking branch 'origin/main' into kotlin2.1
  • 1956ac6 Update Gradle in Kotlin tests
  • 24a1777 Update Kotlin version in tests
  • f0b6fa2 Merge pull request #432 from SebastianSchlecht/java-compiler-error-matching
  • 7cd0a95 Adds test for template with deprecated method
  • 0e39e34 Displays first compiler error message of type 'error'
  • f1884da Only support Kotlin 2.1
  • dbecede Bump version to 3.1.17-SNAPSHOT for further development
  • See full diff in compare view

Updates software.amazon.awssdk:bom from 2.31.6 to 2.31.11

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| org.ow2.asm:asm | `9.7.1` | `9.8` |
| org.ow2.asm:asm-util | `9.7.1` | `9.8` |
| [io.avaje:avaje-inject](https://github.com/avaje/avaje-inject) | `11.3` | `11.4` |
| io.avaje:avaje-inject-generator | `11.3` | `11.4` |
| [io.swagger.parser.v3:swagger-parser](https://github.com/swagger-api/swagger-parser) | `2.1.25` | `2.1.26` |
| [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) | `6.6.11.Final` | `6.6.12.Final` |
| [org.jdbi:jdbi3-core](https://github.com/jdbi/jdbi) | `3.48.0` | `3.49.0` |
| [com.zaxxer:HikariCP](https://github.com/brettwooldridge/HikariCP) | `6.2.1` | `6.3.0` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.4.5-jre` | `33.4.6-jre` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.2` | `3.5.3` |
| [gg.jte:jte](https://github.com/casid/jte) | `3.1.16` | `3.2.0` |
| [gg.jte:jte-models](https://github.com/casid/jte) | `3.1.16` | `3.2.0` |
| software.amazon.awssdk:bom | `2.31.6` | `2.31.11` |


Updates `org.ow2.asm:asm` from 9.7.1 to 9.8

Updates `org.ow2.asm:asm-util` from 9.7.1 to 9.8

Updates `org.ow2.asm:asm-util` from 9.7.1 to 9.8

Updates `io.avaje:avaje-inject` from 11.3 to 11.4
- [Release notes](https://github.com/avaje/avaje-inject/releases)
- [Commits](avaje/avaje-inject@11.3...11.4)

Updates `io.avaje:avaje-inject-generator` from 11.3 to 11.4

Updates `io.avaje:avaje-inject-generator` from 11.3 to 11.4

Updates `io.swagger.parser.v3:swagger-parser` from 2.1.25 to 2.1.26
- [Release notes](https://github.com/swagger-api/swagger-parser/releases)
- [Commits](swagger-api/swagger-parser@v2.1.25...v2.1.26)

Updates `org.hibernate.orm:hibernate-core` from 6.6.11.Final to 6.6.12.Final
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.12/changelog.txt)
- [Commits](hibernate/hibernate-orm@6.6.11...6.6.12)

Updates `org.jdbi:jdbi3-core` from 3.48.0 to 3.49.0
- [Release notes](https://github.com/jdbi/jdbi/releases)
- [Changelog](https://github.com/jdbi/jdbi/blob/master/RELEASE_NOTES.md)
- [Commits](jdbi/jdbi@v3.48.0...v3.49.0)

Updates `com.zaxxer:HikariCP` from 6.2.1 to 6.3.0
- [Changelog](https://github.com/brettwooldridge/HikariCP/blob/dev/CHANGES)
- [Commits](brettwooldridge/HikariCP@HikariCP-6.2.1...HikariCP-6.3.0)

Updates `com.google.guava:guava` from 33.4.5-jre to 33.4.6-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.2 to 3.5.3
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.2...surefire-3.5.3)

Updates `gg.jte:jte` from 3.1.16 to 3.2.0
- [Release notes](https://github.com/casid/jte/releases)
- [Commits](casid/jte@3.1.16...3.2.0)

Updates `gg.jte:jte-models` from 3.1.16 to 3.2.0
- [Release notes](https://github.com/casid/jte/releases)
- [Commits](casid/jte@3.1.16...3.2.0)

Updates `gg.jte:jte-models` from 3.1.16 to 3.2.0
- [Release notes](https://github.com/casid/jte/releases)
- [Commits](casid/jte@3.1.16...3.2.0)

Updates `software.amazon.awssdk:bom` from 2.31.6 to 2.31.11

---
updated-dependencies:
- dependency-name: org.ow2.asm:asm
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.ow2.asm:asm-util
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.ow2.asm:asm-util
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-inject
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-inject-generator
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-inject-generator
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.swagger.parser.v3:swagger-parser
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.hibernate.orm:hibernate-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.jdbi:jdbi3-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.zaxxer:HikariCP
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.google.guava:guava
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: gg.jte:jte
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: gg.jte:jte-models
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: gg.jte:jte-models
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: software.amazon.awssdk:bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Mar 31, 2025
@jknack jknack added this to the 3.6.2 milestone Mar 31, 2025
@jknack jknack merged commit 3be4344 into 3.x Mar 31, 2025
0 of 5 checks passed
@dependabot dependabot bot deleted the dependabot/maven/dependencies-b4de8077ff branch March 31, 2025 13:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants