fix(deps): update all dependencies #858

renovate · 2025-03-24T03:43:27Z

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	`v4.1.1` -> `v4.2.2`
codecov/codecov-action	action	patch	`v5.4.0` -> `v5.4.2`
github/codeql-action	action	patch	`v3.28.12` -> `v3.28.16`
gradle (source)		minor	`8.13` -> `8.14`
gradle/actions	action	patch	`v4.3.0` -> `v4.3.1`
lint-staged	dependencies	patch	`15.5.0` -> `15.5.1`
stefanzweifel/git-auto-commit-action	action	minor	`v5.1.0` -> `v5.2.0`
yarn (source)	packageManager	minor	`4.7.0` -> `4.9.1`
org.mockito:mockito-junit-jupiter	dependencies	minor	`5.16.1` -> `5.17.0`
com.google.guava:guava	dependencies	patch	`33.4.5-jre` -> `33.4.8-jre`
org.junit.jupiter:junit-jupiter (source)	dependencies	minor	`5.11.4` -> `5.12.2`
com.google.code.gson:gson	dependencies	minor	`2.12.1` -> `2.13.1`
com.fasterxml.jackson.datatype:jackson-datatype-jsr310	dependencies	minor	`2.18.3` -> `2.19.0`
com.fasterxml.jackson.core:jackson-core	dependencies	minor	`2.18.3` -> `2.19.0`
com.fasterxml.jackson.core:jackson-databind (source)	dependencies	minor	`2.18.3` -> `2.19.0`
com.fasterxml.jackson.core:jackson-annotations (source)	dependencies	minor	`2.18.3` -> `2.19.0`
io.netty:netty-codec-http (source)	dependencies	minor	`4.1.119.Final` -> `4.2.0.Final`
io.netty:netty-codec (source)	dependencies	minor	`4.1.119.Final` -> `4.2.0.Final`
commons-io:commons-io (source)	dependencies	minor	`2.18.0` -> `2.19.0`
org.apache.commons:commons-text (source)	dependencies	patch	`1.13.0` -> `1.13.1`
io.netty:netty-handler (source)	dependencies	minor	`4.1.119.Final` -> `4.2.0.Final`
com.squareup.okio:okio	dependencies	minor	`3.10.2` -> `3.11.0`
io.netty:netty-handler-proxy (source)	dependencies	minor	`4.1.119.Final` -> `4.2.0.Final`
com.github.javaparser:javaparser-core (source)	dependencies	patch	`3.26.3` -> `3.26.4`
io.netty:netty-codec-socks (source)	dependencies	minor	`4.1.119.Final` -> `4.2.0.Final`
com.datadoghq:datadog-api-client	dependencies	minor	`2.33.1` -> `2.34.1`
io.projectreactor.netty:reactor-netty-core	dependencies	patch	`1.2.4` -> `1.2.5`
com.newrelic.agent.java:newrelic-api	dependencies	minor	`8.19.0` -> `8.20.0`
io.opentelemetry:opentelemetry-api	dependencies	minor	`1.48.0` -> `1.49.0`
com.datadoghq:java-dogstatsd-client	dependencies	patch	`4.4.3` -> `4.4.4`
org.apache.httpcomponents.client5:httpclient5	dependencies	patch	`5.4.2` -> `5.4.4`
io.projectreactor.netty:reactor-netty-http	dependencies	patch	`1.2.4` -> `1.2.5`
org.javamoney.moneta:moneta-core (source)	dependencies	patch	`1.4.4` -> `1.4.5`

Release Notes

actions/checkout (actions/checkout)

`v4.2.2`

Compare Source

url-helper.ts now leverages well-known environment variables by @jww3 in https://github.com/actions/checkout/pull/1941
Expand unit test coverage for isGhes by @jww3 in https://github.com/actions/checkout/pull/1946

`v4.2.1`

Compare Source

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in https://github.com/actions/checkout/pull/1924

Fix: Disable sparse checkout whenever sparse-checkout option is not present @dscho in https://github.com/actions/checkout/pull/1598

codecov/codecov-action (codecov/codecov-action)

`v5.4.2`

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.1..v5.4.2

`v5.4.1`

Compare Source

What's Changed

fix: use the github core methods by @thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1807
build(deps): bump github/codeql-action from 3.28.12 to 3.28.13 by @app/dependabot in https://github.com/codecov/codecov-action/pull/1803
build(deps): bump github/codeql-action from 3.28.11 to 3.28.12 by @app/dependabot in https://github.com/codecov/codecov-action/pull/1797
build(deps): bump actions/upload-artifact from 4.6.1 to 4.6.2 by @app/dependabot in https://github.com/codecov/codecov-action/pull/1798
chore(release): wrapper -0.2.1 by @app/codecov-releaser-app in https://github.com/codecov/codecov-action/pull/1788
build(deps): bump github/codeql-action from 3.28.10 to 3.28.11 by @app/dependabot in https://github.com/codecov/codecov-action/pull/1786

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.0..v5.4.1

github/codeql-action (github/codeql-action)

`v3.28.16`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.16 - 23 Apr 2025

Update default CodeQL bundle version to 2.21.1. #2863

See the full CHANGELOG.md for more information.

`v3.28.15`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.15 - 07 Apr 2025

Fix bug where the action would fail if it tried to produce a debug artifact with more than 65535 files. #2842

See the full CHANGELOG.md for more information.

`v3.28.14`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.14 - 07 Apr 2025

Update default CodeQL bundle version to 2.21.0. #2838

See the full CHANGELOG.md for more information.

`v3.28.13`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.13 - 24 Mar 2025

No user facing changes.

See the full CHANGELOG.md for more information.

gradle/gradle (gradle)

`v8.14`

Compare Source

gradle/actions (gradle/actions)

`v4.3.1`

Compare Source

This release fixes a couple of minor issues, as well as keeping dependencies up to date.

Fixed issues

The develocity-allow-untrusted-server parameter should be honoured when fetching short-lived access tokens #583
Build summary may incorrectly report build success #415

What's Changed

Update develocity-injection init script to v1.1.1 by @bot-githubaction in https://github.com/gradle/actions/pull/545
Bump the github-actions group across 2 directories with 3 updates by @dependabot in https://github.com/gradle/actions/pull/547
Bump the npm-dependencies group in /sources with 2 updates by @dependabot in https://github.com/gradle/actions/pull/548
Update develocity-injection init script to v1.2 by @bot-githubaction in https://github.com/gradle/actions/pull/550
Bump the github-actions group across 1 directory with 2 updates by @dependabot in https://github.com/gradle/actions/pull/552
Bump the npm-dependencies group across 1 directory with 5 updates by @dependabot in https://github.com/gradle/actions/pull/558
Update known wrapper checksums by @github-actions in https://github.com/gradle/actions/pull/560
Bump references to Develocity Gradle plugin from 3.19.1 to 3.19.2 by @bot-githubaction in https://github.com/gradle/actions/pull/561
Catch more build failures in job summary by @bigdaz in https://github.com/gradle/actions/pull/571
Scope captured build failures by @erichaagdev in https://github.com/gradle/actions/pull/574
Ignore SSL certificate validation when fetching Develocity short-lived access token if develocity-allow-untrusted-server is enabled by @remcomokveld in https://github.com/gradle/actions/pull/575
Dependency updates by @bigdaz in https://github.com/gradle/actions/pull/579
Bump com.google.guava:guava from 33.4.5-jre to 33.4.6-jre in /.github/workflow-samples/kotlin-dsl in the gradle group across 1 directory by @dependabot in https://github.com/gradle/actions/pull/580
Bump the github-actions group across 2 directories with 2 updates by @dependabot in https://github.com/gradle/actions/pull/582

New Contributors

@erichaagdev made their first contribution in https://github.com/gradle/actions/pull/574
@remcomokveld made their first contribution in https://github.com/gradle/actions/pull/575

Full Changelog: gradle/actions@v4.3.0...v4.3.1

lint-staged/lint-staged (lint-staged)

`v15.5.1`

Compare Source

Patch Changes

#1533 5d53534 Thanks @iiroj! - Improve listing of staged files so that lint-staged doesn't crash when encountering an uninitialized submodule. This should result in less errors like:
```
✖ Failed to get staged files!
```

stefanzweifel/git-auto-commit-action (stefanzweifel/git-auto-commit-action)

`v5.2.0`

Compare Source

Added

Add create_git_tag_only option to skip commiting and always create a git-tag. (#364) @zMynxx
Add Test for create_git_tag_only feature (#367) @stefanzweifel

Fixed

docs: Update README.md per #354 (#361) @rasa

yarnpkg/berry (yarn)

`v4.9.1`

Compare Source

`v4.9.0`

Compare Source

`v4.8.1`

Compare Source

`v4.8.0`

Compare Source

mockito/mockito (org.mockito:mockito-junit-jupiter)

`v5.17.0`

Compare Source

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

5.17.0

2025-04-04 - 7 commit(s) by Adrian Roos, Andre Kurait, Jan Ouwens, Rafael Winterhalter, Taeik Lim, Thach Le, Tim van der Lippe
Fixes #3631: Fix broken banner image link (#3632)
Banner image is broken (#3631)
Update exception message with mockito-inline (#3628)
Clarify structure of commit messages (#3626)
Fixes #3622: MockitoExtension fails cleanup when aborted before setup (#3623)
MockitoExtension fails cleanup when aborted before setup (#3622)
Since mockito-inline has been removed, the exception messages with mockito-inline should be modified. (#3621)
Fixes #3171: Fall back to Throwable Location strategy on Android (#3619)
Fixes #3615 : broken links to javadoc.io (#3616)
Broken links to javadoc.io (#3615)
Mocks are not working on particular devices after update Android SDK from 33 to 34 (#3171)

junit-team/junit5 (org.junit.jupiter:junit-jupiter)

`v5.12.2`

square/okio (com.squareup.okio:okio)

`v3.11.0`

2025-04-09

Fix: Clear the deflater's byte array reference
New: Faster implementation of String.decodeHex() on Kotlin/JS.
New: Declare EXACTLY_ONCE execution for blocks like Closeable.use {} and FileSystem.read {}.
Upgrade: [Kotlin 2.1.20][kotlin_2_1_20].

javaparser/javaparser (com.github.javaparser:javaparser-core)

`v3.26.4`

issues resolved

Developer Changes

fix(deps): update byte-buddy.version to v1.17.5 (PR #4702 by @renovate[bot])
chore(deps): update dependency com.puppycrawl.tools:checkstyle to v10.22.0 (PR #4700 by @renovate[bot])
chore(deps): update dependency org.apache.maven.plugins:maven-install-plugin to v3.1.4 (PR #4689 by @renovate[bot])
chore(deps): update codecov/codecov-action action to v5.4.0 (PR #4688 by @renovate[bot])
chore(deps): update dependency org.apache.maven.plugins:maven-deploy-plugin to v3.1.4 (PR #4687 by @renovate[bot])
chore(deps): update dependency com.diffplug.spotless:spotless-maven-plugin to v2.44.3 (PR #4682 by @renovate[bot])
chore(deps): update dependency org.apache.maven.plugins:maven-clean-plugin to v3.4.1 (PR #4681 by @renovate[bot])
chore(deps): update dependency org.assertj:assertj-core to v3.27.2 (PR #4644 by @renovate[bot])
fix(deps): update dependency com.google.guava:guava to v33.4.0-jre (PR #4637 by @renovate[bot])

Uncategorised

Fix: issue 4554 Import added through CompilationUnit.addImport should not have a range (PR #4693 by @jlerbsc)
Improving documentation on SwithEntry (PR #4685 by @jlerbsc)
Fix issue 4670 LexicalPreservingPrinter removed incorect token when removing modifier of a Parameter with annotations (PR #4674 by @jlerbsc)
Fix: issue 4668 Issue with FieldAccessExpr resolving for custom class (PR #4671 by @jlerbsc)
#4664 remove misleading javadoc (PR #4666 by @verhasi)
#4653 use report-aggregate of jacoco instead of report to use the dep… (PR #4658 by @verhasi)

❤️ Contributors

Thank You to all contributors who worked on this release!

DataDog/datadog-api-client-java (com.datadoghq:datadog-api-client)

`v2.34.1`

Fixed

Change type to enum to discriminate included items in the response of ListCatalogEntity by @api-clients-generation-pipeline in https://github.com/DataDog/datadog-api-client-java/pull/2768
Deprecate options from logs aggregate API public spec by @api-clients-generation-pipeline in https://github.com/DataDog/datadog-api-client-java/pull/2776
change a category in enum for datadog_appsec_waf_custom_rule by @api-clients-generation-pipeline in https://github.com/DataDog/datadog-api-client-java/pull/2770

Added

Add datasource to job definition for security monitoring by @api-clients-generation-pipeline in https://github.com/DataDog/datadog-api-client-java/pull/2763
Include new rum types in Usage_metering Yaml by @api-clients-generation-pipeline in https://github.com/DataDog/datadog-api-client-java/pull/2766
Adding new UT apm_error_events keys in summary endpoint by @api-clients-generation-pipeline in https://github.com/DataDog/datadog-api-client-java/pull/2760
Add more triggers for workflow automation by @api-clients-generation-pipeline in https://github.com/DataDog/datadog-api-client-java/pull/2771
Add specs for Cloud Network Monitoring API by @api-clients-generation-pipeline in https://github.com/DataDog/datadog-api-client-java/pull/2780
Add more Security Monitoring Data Source enum values by @api-clients-generation-pipeline in https://github.com/DataDog/datadog-api-client-java/pull/2775
Add componentOf field to Service, Queue, and Datastore V3 Software Catalog definitions by @api-clients-generation-pipeline in https://github.com/DataDog/datadog-api-client-java/pull/2778
Add 'mute_buttons' argument to slack channel definition by @api-clients-generation-pipeline in https://github.com/DataDog/datadog-api-client-java/pull/2782
Add Observability Pipelines API by @api-clients-generation-pipeline in https://github.com/DataDog/datadog-api-client-java/pull/2781
add rum slo bugfix by @api-clients-generation-pipeline in https://github.com/DataDog/datadog-api-client-java/pull/2789
Add trace_rate support to APM retention filter APIs by @api-clients-generation-pipeline in https://github.com/DataDog/datadog-api-client-java/pull/2793

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2025-05-02T05:38:51Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

renovate bot added the Type: Maintenance label Mar 24, 2025

renovate bot requested a review from a team as a code owner March 24, 2025 03:43

renovate bot force-pushed the renovate/all branch 6 times, most recently from 3ff3f83 to 80fa35e Compare March 30, 2025 09:51

renovate bot force-pushed the renovate/all branch 6 times, most recently from 8a7c1a1 to 2d0cd4d Compare April 7, 2025 22:25

renovate bot force-pushed the renovate/all branch 10 times, most recently from 34d57d5 to 0c55a19 Compare April 15, 2025 11:57

renovate bot force-pushed the renovate/all branch 2 times, most recently from a127961 to b1561c1 Compare April 19, 2025 10:10

renovate bot force-pushed the renovate/all branch 4 times, most recently from aab2a93 to e7ab995 Compare April 25, 2025 00:27

renovate bot force-pushed the renovate/all branch from e7ab995 to ebc5f63 Compare April 25, 2025 07:17

fix(deps): update all dependencies

45510ba

renovate bot force-pushed the renovate/all branch from ebc5f63 to 45510ba Compare April 25, 2025 10:35

jenschude enabled auto-merge May 2, 2025 05:30

update apache http client

e6575d0

jenschude disabled auto-merge May 2, 2025 05:38

jenschude merged commit 4ac0966 into main May 2, 2025
7 of 9 checks passed

jenschude deleted the renovate/all branch May 2, 2025 05:39

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update all dependencies #858

fix(deps): update all dependencies #858

Uh oh!

renovate bot commented Mar 24, 2025 •

edited

Loading

Uh oh!

renovate bot commented May 2, 2025

Uh oh!

Uh oh!

Uh oh!

fix(deps): update all dependencies #858

fix(deps): update all dependencies #858

Uh oh!

Conversation

renovate bot commented Mar 24, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

CodeQL Action Changelog

3.28.16 - 23 Apr 2025

CodeQL Action Changelog

3.28.15 - 07 Apr 2025

CodeQL Action Changelog

3.28.14 - 07 Apr 2025

CodeQL Action Changelog

3.28.13 - 24 Mar 2025

Fixed issues

What's Changed

New Contributors

Patch Changes

Added

Fixed

5.17.0

Developer Changes

Uncategorised

❤️ Contributors

Fixed

Added

Configuration

Uh oh!

renovate bot commented May 2, 2025

Edited/Blocked Notification

Uh oh!

Uh oh!

Uh oh!

renovate bot commented Mar 24, 2025 •

edited

Loading