chore(deps): update all non-major dependencies #265

renovate-bot · 2024-03-01T02:23:39Z

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	`v4.1.1` -> `v4.1.7`
actions/setup-go	action	patch	`v5.0.0` -> `v5.0.1`
actions/setup-java	action	minor	`v4.0.0` -> `v4.2.1`
github/codeql-action	action	minor	`v3.24.0` -> `v3.25.10`
ossf/scorecard-action	action	patch	`v2.3.1` -> `v2.3.3`
step-security/harden-runner	action	minor	`v2.7.0` -> `v2.8.1`
org.sonatype.plugins:nexus-staging-maven-plugin (source)	build	minor	`1.6.13` -> `1.7.0`
org.apache.maven.plugins:maven-gpg-plugin	build	minor	`3.1.0` -> `3.2.4`
org.apache.maven.plugins:maven-shade-plugin	build	minor	`3.5.1` -> `3.6.0`
org.apache.maven.plugins:maven-jar-plugin	build	minor	`3.3.0` -> `3.4.2`
org.eclipse.jetty:jetty-client (source)	test	patch	`9.4.53.v20231009` -> `9.4.54.v20240208`
com.google.truth.extensions:truth-java8-extension	test	patch	`1.4.0` -> `1.4.2`
com.google.truth:truth	test	patch	`1.4.0` -> `1.4.2`
org.mockito:mockito-core	test	minor	`5.10.0` -> `5.12.0`
org.apache.maven.plugins:maven-javadoc-plugin	build	minor	`3.6.3` -> `3.7.0`
org.apache.maven.plugins:maven-source-plugin	build	patch	`3.3.0` -> `3.3.1`
org.eclipse.jetty:jetty-server (source)	compile	patch	`9.4.53.v20231009` -> `9.4.54.v20240208`
org.eclipse.jetty:jetty-servlet (source)	compile	patch	`9.4.53.v20231009` -> `9.4.54.v20240208`
com.google.auto.value:auto-value-annotations (source)	provided	minor	`1.10.4` -> `1.11.0`
com.google.auto.value:auto-value (source)	provided	minor	`1.10.4` -> `1.11.0`
org.apache.maven.plugins:maven-release-plugin	build	minor	`3.0.1` -> `3.1.0`
org.apache.maven.plugins:maven-deploy-plugin	build	patch	`3.1.1` -> `3.1.2`
org.apache.maven.plugins:maven-plugin-plugin	build	minor	`3.11.0` -> `3.13.1`
com.google.code.gson:gson	compile	minor	`2.10.1` -> `2.11.0`
org.apache.maven.plugin-tools:maven-plugin-annotations	provided	minor	`3.11.0` -> `3.13.1`
org.apache.maven:maven-core	compile	patch	`3.9.6` -> `3.9.8`
org.apache.maven:maven-plugin-api	compile	patch	`3.9.6` -> `3.9.8`
org.apache.maven.plugins:maven-compiler-plugin	build	minor	`3.12.1` -> `3.13.0`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

actions/checkout (actions/checkout)

`v4.1.7`

Compare Source

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in https://github.com/actions/checkout/pull/1739
Bump actions/checkout from 3 to 4 by @dependabot in https://github.com/actions/checkout/pull/1697
Check out other refs/* by commit by @orhantoy in https://github.com/actions/checkout/pull/1774
Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in https://github.com/actions/checkout/pull/1776

What's Changed

Update actions/checkout version in update-main-version.yml by @jww3 in https://github.com/actions/checkout/pull/1650
Check git version before attempting to disable sparse-checkout by @jww3 in https://github.com/actions/checkout/pull/1656
Add SSH user parameter by @cory-miller in https://github.com/actions/checkout/pull/1685

Full Changelog: actions/checkout@v4.1.2...v4.1.3

`v4.1.2`

Compare Source

Fix: Disable sparse checkout whenever sparse-checkout option is not present @dscho in https://github.com/actions/checkout/pull/1598

actions/setup-go (actions/setup-go)

`v5.0.1`

Compare Source

What's Changed

Bump undici from 5.28.2 to 5.28.3 and dependencies upgrade by @dependabot , @HarithaVattikuti in https://github.com/actions/setup-go/pull/465
Update documentation with latest V5 release notes by @ab in https://github.com/actions/setup-go/pull/459
Update version documentation by @178inaba in https://github.com/actions/setup-go/pull/458
Documentation update of actions/setup-go to v5 by @chenrui333 in https://github.com/actions/setup-go/pull/449

New Contributors

@ab made their first contribution in https://github.com/actions/setup-go/pull/459

Full Changelog: actions/setup-go@v5.0.0...v5.0.1

actions/setup-java (actions/setup-java)

`v4.2.1`

Compare Source

What's Changed

Patch for java version file to accept it from any path by @mahabaleshwars in https://github.com/actions/setup-java/pull/610

Full Changelog: actions/setup-java@v4...v4.2.1

`v4.2.0`

Compare Source

What's Changed

Updated actions/httpclient version to 2.2.1 and other dependencies by @HarithaVattikuti in https://github.com/actions/setup-java/pull/607
Added .tool-versions file support along with .java-version file by @mahabaleshwars in https://github.com/actions/setup-java/pull/606

New Contributors

@HarithaVattikuti made their first contribution in https://github.com/actions/setup-java/pull/607
Full Changelog: actions/setup-java@v4...v4.2.0

`v4.1.0`

Compare Source

What's Changed

Added Windows Arm64 Support for Windows Arm64 Runners by @mahabaleshwars in https://github.com/actions/setup-java/pull/595
feat: bump actions/checkout and actions/setup-java to v4 by @kbdharun in https://github.com/actions/setup-java/pull/533
Handle authorization when the token is undefined by @peter-murray in https://github.com/actions/setup-java/pull/556
Documentation update of Java 21 by @Okeanos in https://github.com/actions/setup-java/pull/566
Documentation update about maven-gpg-plugin version note by @IvanZosimov in https://github.com/actions/setup-java/pull/570
Oracle JDK 21 support by @jdubois in https://github.com/actions/setup-java/pull/538
Fix typo in configuration example by @Bananeweizen in https://github.com/actions/setup-java/pull/572

New Contributors

@kbdharun made their first contribution in https://github.com/actions/setup-java/pull/533
@peter-murray made their first contribution in https://github.com/actions/setup-java/pull/556
@jdubois made their first contribution in https://github.com/actions/setup-java/pull/538
@Bananeweizen made their first contribution in https://github.com/actions/setup-java/pull/572
@mahabaleshwars made their first contribution in https://github.com/actions/setup-java/pull/595

Full Changelog: actions/setup-java@v4...v4.1.0

github/codeql-action (github/codeql-action)

`v3.25.10`

Compare Source

`v3.25.9`

Compare Source

`v3.25.8`

Compare Source

`v3.25.7`

Compare Source

`v3.25.6`

Compare Source

`v3.25.5`

Compare Source

`v3.25.4`

Compare Source

`v3.25.3`

Compare Source

`v3.25.2`

Compare Source

`v3.25.1`

Compare Source

`v3.25.0`

Compare Source

`v3.24.11`

Compare Source

`v3.24.10`

Compare Source

`v3.24.9`

Compare Source

`v3.24.8`

Compare Source

`v3.24.7`

Compare Source

`v3.24.6`

Compare Source

`v3.24.5`

Compare Source

`v3.24.4`

Compare Source

`v3.24.3`

Compare Source

`v3.24.2`

Compare Source

`v3.24.1`

Compare Source

ossf/scorecard-action (ossf/scorecard-action)

`v2.3.3`

Compare Source

[!NOTE]
There is no v2.3.2 release as a step was skipped in the release process. This was fixed and re-released under the v2.3.3 tag

What's Changed

🌱 Bump github.com/ossf/scorecard/v4 (v4.13.1) to github.com/ossf/scorecard/v5 (v5.0.0-rc1) by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1366
🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc1 to v5.0.0-rc2 by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1374
🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to v5.0.0-rc2.0.20240509182734-7ce860946928 by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1377

For a full changelist of what these include, see the v5.0.0-rc1 and v5.0.0-rc2 release notes.

Documentation

📖 Move token discussion out of main README. by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1279
📖 link to ossf/scorecard workflow instead of maintaining an example by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1352
📖 update api links to new scorecard.dev site by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1376

Full Changelog: ossf/scorecard-action@v2.3.1...v2.3.3

`v2.3.2`

Compare Source

step-security/harden-runner (step-security/harden-runner)

`v2.8.1`

Compare Source

What's Changed

Bug fix: Update isGitHubHosted implementation by @varunsh-coder in https://github.com/step-security/harden-runner/pull/425
The previous implementation incorrectly identified large GitHub-hosted runners as self-hosted runners. As a result, harden-runner was not executing on these large GitHub-hosted runners.

Full Changelog: step-security/harden-runner@v2...v2.8.1

`v2.8.0`

Compare Source

What's Changed

Release v2.8.0 by @h0x0er and @varunsh-coder in https://github.com/step-security/harden-runner/pull/416
This release includes:

File Monitoring Enhancements: Adds the capability to view the name and path of every file written during the build process.
Process Tracking Enhancements: Adds the capability to view process names and arguments of processes run during the build process.

These enhancements are based on insights from the XZ Utils incident, aimed at improving observability and detections during the build process.

Full Changelog: step-security/harden-runner@v2...v2.8.0

`v2.7.1`

Compare Source

What's Changed

Release v2.7.1 by @varunsh-coder, @h0x0er, @ashishkurmi in https://github.com/step-security/harden-runner/pull/397
This release:

Improves the capability to inspect outbound HTTPS traffic on GitHub-hosted and self-hosted VM runners
Updates README to add link to case study video on how Harden-Runner detected a supply chain attack on a Google open-source project
Addresses minor bugs

Full Changelog: step-security/harden-runner@v2.7.0...v2.7.1

sonatype/nexus-maven-plugins (org.sonatype.plugins:nexus-staging-maven-plugin)

`v1.7.0`

Compare Source

`v1.6.14`

Compare Source

google/truth (com.google.truth.extensions:truth-java8-extension)

`v1.4.2`: 1.4.2

Compare Source

This release is the final step of copying all our methods from Truth8 to Truth. If you have not already migrated your usages from Truth8 to Truth, you may see build errors:

OptionalSubjectTest.java:39: error: reference to assertThat is ambiguous
    assertThat(Optional.of("foo")).isPresent();
    ^
  both method assertThat(@&#8203;org.checkerframework.checker.nullness.qual.Nullable Optional<?>) in Truth8 and method assertThat(@&#8203;org.checkerframework.checker.nullness.qual.Nullable Optional<?>) in Truth match

In most cases, you can migrate your whole project mechanically: git grep -l Truth8 | xargs perl -pi -e 's/\bTruth8\b/Truth/g;'. (You can make that change before upgrading to Truth 1.4.2 or as part of the same commit.)

If you instead need to migrate your project incrementally (for example, because it is very large), you may want to upgrade your version of Truth incrementally, too, following our instructions for 1.3.0 and 1.4.0.

For help

Please feel welcome to open an issue to report problems or request help.

Changelog

Removed temporary type parameters from Truth.assertThat(Stream) and Truth.assertThat(Optional). This can create build errors, which you can fix by replacing all your references to Truth8 with references to Truth. (45782bd)

`v1.4.1`: 1.4.1

Compare Source

This release deprecates Truth8.

All its methods have become available on the main Truth class. In most cases, you can migrate your whole project mechanically: git grep -l Truth8 | xargs perl -pi -e 's/\bTruth8\b/Truth/g;'

While we do not plan to delete Truth8, we recommend migrating off it, at least if you static import assertThat: If you do not migrate, such static imports will become ambiguous in Truth 1.4.2, breaking your build.

mockito/mockito (org.mockito:mockito-core)

`v5.12.0`

Compare Source

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

5.12.0

2024-05-11 - 25 commit(s) by Piotr Przybylak, Stefano Cordio, Tim van der Lippe, dependabot[bot], jonghoonpark
Bump com.gradle.enterprise from 3.17.2 to 3.17.3 (#3341)
Bump org.jetbrains.kotlin:kotlin-stdlib from 1.9.23 to 1.9.24 (#3339)
Bump versions.bytebuddy from 1.14.14 to 1.14.15 (#3338)
Bump org.shipkit:shipkit-auto-version from 2.0.6 to 2.0.7 (#3337)
Bump org.jetbrains.kotlin:kotlin-gradle-plugin from 1.9.23 to 1.9.24 (#3336)
Fixes #3331 : Fix AdditionalMatchers.and() and AdditionalMatchers.or() not to swap the order of matchers (#3335)
AdditionalMatchers.and() and or() swap matcher order (#3331)
Bump gradle/wrapper-validation-action from 3.3.1 to 3.3.2 (#3327)
Bump versions.bytebuddy from 1.14.13 to 1.14.14 (#3324)
Bump org.shipkit:shipkit-auto-version from 2.0.5 to 2.0.6 (#3322)
Bump gradle/wrapper-validation-action from 3.3.0 to 3.3.1 (#3320)
Bump com.gradle.enterprise from 3.17 to 3.17.2 (#3318)
Bump gradle/wrapper-validation-action from 2.1.2 to 3.3.0 (#3317)
Update codecov-action version (#3316)
Bump com.google.googlejavaformat:google-java-format from 1.21.0 to 1.22.0 (#3312)
Bump com.gradle.enterprise from 3.16.2 to 3.17 (#3311)
Bump versions.bytebuddy from 1.14.12 to 1.14.13 (#3308)
Fix README logo (#3305)
Bump gradle/wrapper-validation-action from 2.1.1 to 2.1.2 (#3303)
Bump org.shipkit:shipkit-auto-version from 2.0.4 to 2.0.5 (#3298)
Bump org.jetbrains.kotlin:kotlin-gradle-plugin from 1.9.22 to 1.9.23 (#3296)
Bump org.eclipse.platform:org.eclipse.osgi from 3.18.600 to 3.19.0 (#3295)
Bump org.jetbrains.kotlin:kotlin-stdlib from 1.9.22 to 1.9.23 (#3292)
Bump com.google.googlejavaformat:google-java-format from 1.20.0 to 1.21.0 (#3291)
Fixes #3286 : Mockito.only() points to the wanted call as unwanted if it is the first being calledIssue3286 (#3287)
Mockito.only() points to the wanted call as unwanted if it is the first being called. (#3286)
Bump org.codehaus.groovy:groovy from 3.0.20 to 3.0.21 (#3284)

`v5.11.0`

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

5.11.0

2024-03-01 - 17 commit(s) by Aouichaoui Youssef, Franz Wong, Pranoti Durugkar, Róbert Papp, dependabot[bot]
Fixes #3281 : Add native method to exception message of MissingMethodI… (#3283)
MissingMethodInvocationException is thrown when mocking native method in 5.x (#3281)
Bump com.google.googlejavaformat:google-java-format from 1.19.2 to 1.20.0 (#3277)
Bump versions.bytebuddy from 1.14.11 to 1.14.12 (#3272)
Bump gradle/wrapper-validation-action from 2.1.0 to 2.1.1 (#3268)
Bump org.shipkit:shipkit-auto-version from 2.0.3 to 2.0.4 (#3267)
Bump gradle/wrapper-validation-action from 2.0.1 to 2.1.0 (#3266)
Bump org.junit.platform:junit-platform-launcher from 1.10.1 to 1.10.2 (#3265)
Bump gradle/wrapper-validation-action from 2.0.0 to 2.0.1 (#3264)
Bump org.assertj:assertj-core from 3.25.2 to 3.25.3 (#3261)
Bump versions.junitJupiter from 5.10.1 to 5.10.2 (#3260)
Bump gradle/wrapper-validation-action from 1.1.0 to 2.0.0 (#3258)
Fixes #3229: Resolve test generic arguments (#3257)
Bump org.shipkit:shipkit-auto-version from 2.0.2 to 2.0.3 (#3256)
Use kvm on ubuntu instead of macos to run Android tests (#3252)
Fixes #3240 : Renamed mockito bom artifact (#3251)
Remove shipkit workaround for generateChangelog (#3250)
Bump com.gradle.enterprise from 3.16.1 to 3.16.2 (#3249)
Mockito bom missing artifact in maven central for java21 (#3240)
@Captor test parameters don't work with primitive type arguments (#3229)
Gradle 8.2: work around fix for release publishing (#3053)

Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

forking-renovate · 2024-06-20T23:26:33Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

blunderbuss-gcf bot assigned kenneth-rosario Mar 1, 2024

renovate-bot force-pushed the renovate/all-minor-patch branch from f968d47 to 32bc51f Compare March 1, 2024 10:58

renovate-bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 215aeb6 to a724142 Compare March 14, 2024 17:31

renovate-bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 87e2d5f to 742c59c Compare March 22, 2024 13:14

renovate-bot force-pushed the renovate/all-minor-patch branch from 742c59c to 8264de3 Compare March 26, 2024 11:09

renovate-bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from e998574 to ded85e2 Compare April 11, 2024 08:05

renovate-bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from aa27341 to 747ba1b Compare April 19, 2024 10:10

renovate-bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 2c43a9a to e45d0d3 Compare April 26, 2024 00:15

renovate-bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 00d1c5a to f5e4881 Compare May 5, 2024 19:40

renovate-bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from a11c080 to 46a27f4 Compare May 16, 2024 23:34

renovate-bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 91b8dc6 to df2f7b4 Compare May 25, 2024 12:10

renovate-bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 73a084d to 05b6b5c Compare May 31, 2024 20:01

renovate-bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 93f9370 to 2159b43 Compare June 7, 2024 15:57

renovate-bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from ff6b0e4 to 0950f22 Compare June 17, 2024 10:40

chore(deps): update all non-major dependencies

e52f9e3

renovate-bot force-pushed the renovate/all-minor-patch branch from 0950f22 to e52f9e3 Compare June 19, 2024 19:26

Merge branch 'main' into renovate/all-minor-patch

b8975d2

jrmfg and others added 3 commits June 20, 2024 17:21

Merge branch 'main' into renovate/all-minor-patch

f147ae1

Merge branch 'main' into renovate/all-minor-patch

b442f97

remove all references to truth8

ebbfdc7

jrmfg assigned jrmfg and unassigned kenneth-rosario Jun 21, 2024

jrmfg self-requested a review June 21, 2024 00:57

jrmfg approved these changes Jun 21, 2024

View reviewed changes

jrmfg merged commit 8d44947 into GoogleCloudPlatform:main Jun 21, 2024
20 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update all non-major dependencies #265

chore(deps): update all non-major dependencies #265

Uh oh!

renovate-bot commented Mar 1, 2024 •

edited

Loading

Uh oh!

forking-renovate bot commented Jun 20, 2024

Uh oh!

Uh oh!

Uh oh!

chore(deps): update all non-major dependencies #265

chore(deps): update all non-major dependencies #265

Uh oh!

Conversation

renovate-bot commented Mar 1, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Documentation

What's Changed

What's Changed

What's Changed

v1.4.2: 1.4.2

For help

Changelog

v1.4.1: 1.4.1

5.12.0

5.11.0

Configuration

Uh oh!

forking-renovate bot commented Jun 20, 2024

Edited/Blocked Notification

Uh oh!

Uh oh!

Uh oh!

renovate-bot commented Mar 1, 2024 •

edited

Loading

`v1.4.2`: 1.4.2

`v1.4.1`: 1.4.1