Skip to content

Commit

Permalink
merge: #700 #701
Browse files Browse the repository at this point in the history
700: build(deps): Bump revapi-java from 0.28.0 to 0.28.1 r=remcowesterhoud a=dependabot[bot]

Bumps [revapi-java](https://github.com/revapi/revapi) from 0.28.0 to 0.28.1.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/revapi/revapi/commits">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.revapi:revapi-java&package-manager=maven&previous-version=0.28.0&new-version=0.28.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting ``@dependabot` rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>

701: build(deps): Bump classgraph from 4.8.154 to 4.8.157 r=remcowesterhoud a=dependabot[bot]

Bumps [classgraph](https://github.com/classgraph/classgraph) from 4.8.154 to 4.8.157.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/classgraph/classgraph/releases">classgraph's releases</a>.</em></p>
<blockquote>
<h2>classgraph-4.8.157</h2>
<p>More robustly handles incorrectly compiled classfiles, specifically where type annotations try to annotate type bounds on a type parameter, and the bounds don't actually exist (<a href="https://github.com/classgraph/classgraph/issues/157">#157</a>, thanks to <a href="https://github.com/ronshemerws"><code>`@​ronshemerws</code></a>` for the bug report and complete reproducer testcase).</p>
<h2>classgraph-4.8.156</h2>
<p>Fix a regression in previous release, triggered when running multiple scans in parallel (<a href="https://github.com/classgraph/classgraph/issues/757">#757</a>).</p>
<h2>classgraph-4.8.155</h2>
<p>Fix for GraalVM build-time scanning: release static references when <code>ScanResult</code> is closed (<a href="https://github.com/classgraph/classgraph/issues/756">#756</a>). Thanks to <a href="https://github.com/justin-tay"><code>`@​justin-tay</code></a>` for the report.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/classgraph/classgraph/commit/83f55db0d2dc1d73817b2d56629988e59457a7d7"><code>83f55db</code></a> [maven-release-plugin] prepare release classgraph-4.8.157</li>
<li><a href="https://github.com/classgraph/classgraph/commit/153a2c8018b499cbb5eb5acf59ff1c8d4c055d0b"><code>153a2c8</code></a> Handle corrupt classfiles more robustly (<a href="https://github.com/classgraph/classgraph/issues/758">#758</a>)</li>
<li><a href="https://github.com/classgraph/classgraph/commit/cb7370e69dc62b69944a669243d87a0e88fe20aa"><code>cb7370e</code></a> Add comments</li>
<li><a href="https://github.com/classgraph/classgraph/commit/a2075e398073122e1ffa8652b1db3737455e7a31"><code>a2075e3</code></a> Add comments</li>
<li><a href="https://github.com/classgraph/classgraph/commit/b5d2a9ff77f755c382e945b4503cdbd288b197f8"><code>b5d2a9f</code></a> Merge pull request <a href="https://github.com/classgraph/classgraph/issues/755">#755</a> from classgraph/dependabot/maven/org.apache.maven.plu...</li>
<li><a href="https://github.com/classgraph/classgraph/commit/a0b569ebec7b31fab9ab575764296d10363e3668"><code>a0b569e</code></a> Merge pull request <a href="https://github.com/classgraph/classgraph/issues/754">#754</a> from classgraph/dependabot/maven/org.apache.maven.plu...</li>
<li><a href="https://github.com/classgraph/classgraph/commit/75b97f7a61d8d9dcf51ae87ee0e62d3730747d46"><code>75b97f7</code></a> Merge pull request <a href="https://github.com/classgraph/classgraph/issues/753">#753</a> from classgraph/dependabot/maven/org.apache.maven.plu...</li>
<li><a href="https://github.com/classgraph/classgraph/commit/bc37c531a4aa19afb945ae8fac3d86afba14aca2"><code>bc37c53</code></a> Merge pull request <a href="https://github.com/classgraph/classgraph/issues/749">#749</a> from classgraph/dependabot/maven/org.assertj-assertj-...</li>
<li><a href="https://github.com/classgraph/classgraph/commit/2c30071914c55471ed300cf2ad5a25fa6a349f2d"><code>2c30071</code></a> Merge pull request <a href="https://github.com/classgraph/classgraph/issues/747">#747</a> from classgraph/dependabot/maven/org.junit.jupiter-ju...</li>
<li><a href="https://github.com/classgraph/classgraph/commit/26c26ad3c82e86ad8c54d3ddb5c6d77a6e04ba0e"><code>26c26ad</code></a> [maven-release-plugin] prepare for next development iteration</li>
<li>Additional commits viewable in <a href="https://github.com/classgraph/classgraph/compare/classgraph-4.8.154...classgraph-4.8.157">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.github.classgraph:classgraph&package-manager=maven&previous-version=4.8.154&new-version=4.8.157)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting ``@dependabot` rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  • Loading branch information
zeebe-bors-camunda[bot] and dependabot[bot] authored Mar 23, 2023
3 parents 4ce3055 + 0135420 + 649ca82 commit fb2b3b8
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -51,7 +51,7 @@
<dependency.awaitility.version>4.2.0</dependency.awaitility.version>
<dependency.bytebuddy.version>1.14.2</dependency.bytebuddy.version>
<dependency.camundamodel.version>7.18.0</dependency.camundamodel.version>
<dependency.classgraph.version>4.8.154</dependency.classgraph.version>
<dependency.classgraph.version>4.8.157</dependency.classgraph.version>
<dependency.commons.version>3.12.0</dependency.commons.version>
<dependency.errorprone.version>2.18.0</dependency.errorprone.version>
<dependency.feel.version>1.16.0</dependency.feel.version>
Expand All @@ -68,7 +68,7 @@
<dependency.osgi.version>6.0.0</dependency.osgi.version>
<dependency.proto.version>2.14.0</dependency.proto.version>
<dependency.protobuf.version>3.22.2</dependency.protobuf.version>
<dependency.revapi.version>0.28.0</dependency.revapi.version>
<dependency.revapi.version>0.28.1</dependency.revapi.version>
<dependency.scala.version>2.13.10</dependency.scala.version>
<dependency.slf4j.version>2.0.7</dependency.slf4j.version>
<dependency.snakeyaml.version>1.33</dependency.snakeyaml.version>
Expand Down

0 comments on commit fb2b3b8

Please sign in to comment.