Bump org.opensearch:opensearch-core from current to 2.9.0 in /buildSrc/src/testKit/thirdPartyAudit

[dependabot]

Bumps org.opensearch:opensearch-core from current to 2.9.0.

Release notes

Sourced from org.opensearch:opensearch-core's releases.

2.9.0

2023-07-13 Version 2.9.0 Release Notes

[2.9]

Added

• [SearchPipeline] Add new search pipeline processor type, SearchPhaseResultsProcessor, that can modify the result of one search phase before starting the next phase.(#7283)
• Add task cancellation monitoring service (#7642)
• Add TokenManager Interface (#7452)
• Add Remote store as a segment replication source (#7653)
• Implement concurrent aggregations support without profile option (#7514)
• Add dynamic index and cluster setting for concurrent segment search (#7956)
• Add descending order search optimization through reverse segment read. (#7967)
• [Search pipelines] Added search pipelines output to node stats (#8053)
• Update components of segrep backpressure to support remote store. (#8020)
• Make remote cluster connection setup in async (#8038)
• Add API to initialize extensions (#8029opensearch-project/OpenSearch#8029)
• Add distributed tracing framework (#7543)
• Enable Point based optimization for custom comparators (#8168)
• [Extensions] Support extension additional settings with extension REST initialization (#8414)
• Adds mock implementation for TelemetryPlugin (#7545)
• Support transport action names when registering NamedRoutes (#7957)
• Create concept of persistent ThreadContext headers that are unstashable (#8291opensearch-project/OpenSearch#8291)
• [Search pipelines] Add Global Ignore_failure options for Processors (#8373)
• Enable Partial Flat Object (#7997)
• Add jdk.incubator.vector module support for JDK 20+ (#8601)
• Introduce full support for Search Pipeline (#8613)
• Add partial results support for concurrent segment search (#8306)

Dependencies

• Bump com.azure:azure-storage-common from 12.21.0 to 12.21.1 (#7566, #7814)
• Bump com.google.guava:guava from 30.1.1-jre to 32.1.1-jre (#7565, #7811, #7807, #7808, #8402, #8400, #8401, #8581)
• Bump net.minidev:json-smart from 2.4.10 to 2.4.11 (#7660, #7812)
• Bump org.gradle.test-retry from 1.5.2 to 1.5.3 (#7810)
• Bump com.diffplug.spotless from 6.17.0 to 6.18.0 (#7896)
• Bump jackson from 2.15.1 to 2.15.2 (#7897)
• Add com.github.luben:zstd-jni version 1.5.5-3 (#2996)
• Bump netty from 4.1.91.Final to 4.1.93.Final (#7901)
• Bump com.amazonaws 1.12.270 to software.amazon.awssdk 2.20.55 (7372)
• Add org.reactivestreams 1.0.4 (7372)
• Bump com.networknt:json-schema-validator from 1.0.81 to 1.0.85 ([7968], #8255)
• Bump com.netflix.nebula:gradle-extra-configurations-plugin from 9.0.0 to 10.0.0 in /buildSrc (#7068)
• Bump com.google.guava:guava from 32.0.0-jre to 32.0.1-jre (#8009)
• Bump commons-io:commons-io from 2.12.0 to 2.13.0 (#8014, #8013, #8010)
• Bump com.diffplug.spotless from 6.18.0 to 6.19.0 (#8007)
• Bump 'com.azure:azure-storage-blob to 12.22.2 from 12.21.1 (#8043)
• Bump org.jruby.joni:joni from 2.1.48 to 2.2.1 (#8015, #8254)
• Bump com.google.guava:guava from 32.0.0-jre to 32.0.1-jre (#8011, #8012, #8107)
• Bump io.projectreactor:reactor-core from 3.4.18 to 3.5.6 in /plugins/repository-azure (#8016)
• Bump spock-core from 2.1-groovy-3.0 to 2.3-groovy-3.0 (#8122)

... (truncated)

Changelog

Sourced from org.opensearch:opensearch-core's changelog.

CHANGELOG

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning. See the CONTRIBUTING guide for instructions on how to add changelog entries.

[Unreleased 3.0]

Added

• Support for HTTP/2 (server-side) (#3847)
• Add getter for path field in NestedQueryBuilder (#4636)
• Allow mmap to use new JDK-19 preview APIs in Apache Lucene 9.4+ (#5151)
• Add events correlation engine plugin (#6854)
• Introduce new dynamic cluster setting to control slice computation for concurrent segment search (#9107)
• Implement on behalf of token passing for extensions (#8679)

Dependencies

• Bump log4j-core from 2.18.0 to 2.19.0
• Bump forbiddenapis from 3.3 to 3.4
• Bump avro from 1.11.1 to 1.11.2
• Bump woodstox-core from 6.3.0 to 6.3.1
• Bump xmlbeans from 5.1.0 to 5.1.1 (#4354)
• Bump reactor-netty-core from 1.0.19 to 1.0.22 (#4447)
• Bump reactive-streams from 1.0.3 to 1.0.4 (#4488)
• Bump jempbox from 1.8.16 to 1.8.17 (#4550)
• Update to Gradle 7.6 and JDK-19 (#4973)
• Update Apache Lucene to 9.5.0-snapshot-d5cef1c (#5570)
• Bump maven-model from 3.6.2 to 3.8.6 (#5599)
• Bump maxmind-db from 2.1.0 to 3.0.0 (#5601)
• Bump wiremock-jre8-standalone from 2.33.2 to 2.35.0
• Bump gson from 2.10 to 2.10.1
• Bump com.google.code.gson:gson from 2.10 to 2.10.1
• Bump com.maxmind.geoip2:geoip2 from 4.0.0 to 4.0.1
• Bump com.avast.gradle:gradle-docker-compose-plugin from 0.16.11 to 0.16.12
• Bump org.apache.commons:commons-compress from 1.22 to 1.23.0
• Bump org.apache.commons:commons-configuration2 from 2.8.0 to 2.9.0
• Bump com.netflix.nebula:nebula-publishing-plugin from 19.2.0 to 20.3.0
• Bump io.opencensus:opencensus-api from 0.18.0 to 0.31.1 (#7291)
• OpenJDK Update (April 2023 Patch releases) (#7344
• Bump com.google.http-client:google-http-client:1.43.2 from 1.42.0 to 1.43.2 (7928))
• Add Opentelemetry dependencies (#7543)
• Bump org.bouncycastle:bcprov-jdk15on to org.bouncycastle:bcprov-jdk15to18 version 1.75 (#8247)
• Bump org.bouncycastle:bcmail-jdk15on to org.bouncycastle:bcmail-jdk15to18 version 1.75 (#8247)
• Bump org.bouncycastle:bcpkix-jdk15on to org.bouncycastle:bcpkix-jdk15to18 version 1.75 (#8247)

Changed

• [CCR] Add getHistoryOperationsFromTranslog method to fetch the history snapshot from translogs (#3948)
• Relax visibility of the HTTP_CHANNEL_KEY and HTTP_SERVER_CHANNEL_KEY to make it possible for the plugins to access associated Netty4HttpChannel / Netty4HttpServerChannel instance (#4638)
• Migrate client transports to Apache HttpClient / Core 5.x (#4459)
• Change http code on create index API with bad input raising NotXContentException from 500 to 400 (#4773)
• Improve summary error message for invalid setting updates (#4792)
• [Remote Store] Add Segment download stats to remotestore stats API (#8718)

... (truncated)

Commits

• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[dependabot]

The following labels could not be found: dependabot, dependencies.

[dependabot]

Superseded by #120.