chore(deps): update all non-major dependencies
This PR contains the following updates:
| Package | Type | Update | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|---|---|
| mariadb | service | minor | 10.8 -> 10.9 |
||||
| mariadb | minor | 10.8 -> 10.9 |
|||||
| org.apache.avro:avro (source) | devDependencies | patch | 1.11.0 -> 1.11.1 |
||||
| org.liquibase:liquibase-core (source) | devDependencies | minor | 4.15.0 -> 4.16.0 |
||||
| org.apache.activemq:activemq-broker (source) | devDependencies | patch | 5.17.1 -> 5.17.2 |
||||
| org.tmatesoft.svnkit:svnkit (source) | devDependencies | patch | 1.10.7 -> 1.10.8 |
||||
| org.eclipse.jgit:org.eclipse.jgit.ssh.apache | devDependencies | minor | 6.2.0.202206071550-r -> 6.3.0.202209071007-r |
||||
| org.eclipse.jgit:org.eclipse.jgit | devDependencies | minor | 6.2.0.202206071550-r -> 6.3.0.202209071007-r |
||||
| org.mock-server:mockserver-junit-jupiter (source) | devDependencies | minor | 5.13.2 -> 5.14.0 |
||||
| com.github.spotbugs:spotbugs-annotations (source) | devDependencies | patch | 4.7.1 -> 4.7.2 |
||||
| joda-time:joda-time (source) | devDependencies | patch | 2.11.0 -> 2.11.1 |
||||
| com.github.davidmc24.gradle.plugin.avro-base | plugin | minor | 1.3.0 -> 1.4.0 |
||||
| com.github.spotbugs | plugin | patch | 5.0.10 -> 5.0.12 |
||||
| com.google.cloud.tools.jib | plugin | minor | 3.2.1 -> 3.3.0 |
||||
| org.ehcache:ehcache (source) | devDependencies | patch | 3.10.0 -> 3.10.1 |
||||
| com.amazonaws:aws-java-sdk-s3 (source) | devDependencies | patch | 1.12.286 -> 1.12.300 |
||||
| org.openapi.generator | plugin | minor | 6.0.1 -> 6.1.0 |
||||
| ch.qos.logback:logback-classic (source) | devDependencies | minor | 1.2.11 -> 1.4.0 |
||||
| com.diffplug.spotless | plugin | minor | 6.9.1 -> 6.10.0 |
||||
| ch.qos.logback:logback-core (source) | devDependencies | minor | 1.2.11 -> 1.4.0 |
||||
| org.mockito:mockito-bom | devDependencies | minor | 4.7.0 -> 4.8.0 |
||||
| io.netty:netty-bom (source) | devDependencies | patch | 4.1.79.Final -> 4.1.81.Final |
||||
| io.cucumber:cucumber-bom (source) | devDependencies | minor | 7.6.0 -> 7.7.0 |
||||
| com.fasterxml.jackson:jackson-bom | devDependencies | patch | 2.13.3 -> 2.13.4 |
Release Notes
liquibase/liquibase
v4.16.0
New and Notable Capability
- [LABS] The
liquibase flowcommand and flow files are still available under the Liquibase Labs license.- Documentation on
flowis here: https://docs.liquibase.com/flow - If you want to provide feedback on this capability, please email [email protected].
- Documentation on
- [PRO] The Quality Checks for Databases are now available to all Pro license users. These checks inspect your active database, or a liquibase-generated snapshot for compliance with your rules. Learn more here: https://docs.liquibase.com/quality-checks
- Introduces "contextFilter" and "labelFilter" replacement settings by @nvoxland in https://github.com/liquibase/liquibase/pull/2971
- Liquibase has always had a way to use "labels" and "contexts" and then filter on those attributes in order to control which changesets are considered for execution. The new "contextFilter" and "labelFilter" attributes help simplify workflows and prevent confusion.
Enhancements
- Added support for changeset references in rollback for Formatted SQL changelogs by @atzawada in https://github.com/liquibase/liquibase/pull/1386
- Add schemas and includeSchema parameters to maven generateChangeLog by @MalloD12 in https://github.com/liquibase/liquibase/pull/3210
- [PRO] Two new Pro commands
update-one-changesetandupdate-one-changeset-sqlserving as complements torollback-one-changesetandroll-back-one-changeset-sql
Fixes
- Fix addColumn on mysql when including a "value" attribute by @nvoxland in https://github.com/liquibase/liquibase/pull/3070
- Add support for
AS <dataType>clause for H2 since version 2.0 by @marcus-nl in https://github.com/liquibase/liquibase/pull/3047 - Fixed NUMBER not compatible with H2 by @nick318 in https://github.com/liquibase/liquibase/pull/3098
- SpringResourceAccessor: fix issue with incorrect match pattern for files from classPath root by @danilmalkin in https://github.com/liquibase/liquibase/pull/3095
- Made liquibase.snapshot.ResultSetCache an extensible class. by @breglerj in https://github.com/liquibase/liquibase/pull/2087
- Added support for \u2116 symbol win1251 cyrillic symbol of number by @Stuchalin in https://github.com/liquibase/liquibase/pull/1324
- Tidy ExecutorService code, remove superfluous map access (Issue 1841) by @jamey-clari in https://github.com/liquibase/liquibase/pull/1842
- Fixed order of enum values on MySQL 8 by @Tantalon in https://github.com/liquibase/liquibase/pull/3150
- Removed invalid warning in Maven by @nvoxland in https://github.com/liquibase/liquibase/pull/3189
- [PRO] DAT-10810 QC: checks show changes (--show-cols flag, drop some, etc) by @dyadyushko in https://github.com/liquibase/liquibase/pull/3187
Updates
Security Updates
- Updates the snakeyaml dependency shipped in the liquibase-maven-plugin pom to address CVE-2022-25857
JDBC Driver and Third-Party Library Updates
- Upgraded postgresql from 42.4.0 to 42.4.1 by @dependabot in https://github.com/liquibase/liquibase/pull/3145
- Upgraded mariadb-java-client from 3.0.6 to 3.0.7 by @dependabot in https://github.com/liquibase/liquibase/pull/3149
- Upgraded sqlite-jdbc from 3.36.0.3 to 3.39.2.0 by @dependabot in https://github.com/liquibase/liquibase/pull/3148
- Upgraded mssql-jdbc from 10.2.1.jre8 to 11.2.0.jre8 by @dependabot in https://github.com/liquibase/liquibase/pull/3162
- Upgraded postgresql from 42.4.1 to 42.5.0 by @dependabot in https://github.com/liquibase/liquibase/pull/3199
- Upgraded sqlite-jdbc from 3.39.2.0 to 3.39.2.1 by @dependabot in https://github.com/liquibase/liquibase/pull/3198
- Upgraded snakeyaml from 1.30 to 1.31 by @dependabot in https://github.com/liquibase/liquibase/pull/3224
- Upgraded snakeyaml in liquibase-maven-plugin from 1.27 to 1.31 by @dependabot in https://github.com/liquibase/liquibase/pull/3263
OWASP Dependency Check: Reported Vulnerabilities
- snakeyaml.jar - This is a "medium" vulnerability reported against the snakeyaml library. We are currently on the newest version of snakeyaml and there is no fix for the issue as of yet.
New Contributors
- @marcus-nl made their first contribution in https://github.com/liquibase/liquibase/pull/3047
- @nick318 made their first contribution in https://github.com/liquibase/liquibase/pull/3098
- @danilmalkin made their first contribution in https://github.com/liquibase/liquibase/pull/3095
- @breglerj made their first contribution in https://github.com/liquibase/liquibase/pull/2087
- @Stuchalin made their first contribution in https://github.com/liquibase/liquibase/pull/1324
- @jamey-clari made their first contribution in https://github.com/liquibase/liquibase/pull/1842
- @Tantalon made their first contribution in https://github.com/liquibase/liquibase/pull/3150
- @atzawada made their first contribution in https://github.com/liquibase/liquibase/pull/1386
- @MalloD12 made their first contribution in https://github.com/liquibase/liquibase/pull/3210
- @dyadyushko made their first contribution in https://github.com/liquibase/liquibase/pull/3187
Full Changelog: https://github.com/liquibase/liquibase/compare/v4.15.0...v4.16.0
Get Certified
Learn all the Liquibase fundamentals from free online courses by Liquibase experts and see how to apply them in the real world at https://learn.liquibase.com/.
Read the Documentation
Please check out and contribute to the continually improving docs, now at https://docs.liquibase.com/.
Meet the Community
Our community has built a lot. From extensions to integrations, you’ve helped make Liquibase the amazing open source project that it is today. Keep contributing to making it stronger:
Contribute code Make doc updates Help by asking and answering questions Set up a chat with the Product team
Thanks to everyone who helps make the Liquibase community strong!
File Descriptions
- Liquibase CLI -- Includes open source + commercial functionality
- liquibase-x.y.z.tar.gz -- Archive in tar.gz format
- liquibase-x.y.z.zip -- Archive in zip format
- liquibase-windows-x64-installer-x.y.z.exe -- Installer for Windows
- liquibase-macos-installer-x.y.z.dmg -- Installer for MacOS
-
Primary Libraries - For embedding in other software
- liquibase-core-x.y.z.jar – Base Liquibase library (open source)
- liquibase-commerical-x.y.z.jar – Additional commercial functionality
-
liquibase-additional-x.y.z.zip – Contains additional, less commonly used files
- Additional libraries such as liquibase-maven-plugin.jar and liquibase-cdi.jar
- Javadocs for all the libraries
- Source archives for all the open source libraries
- ASC/MD5/SHA1 verification hashes for all files
jamesdbloom/mockservice
v5.14.0
Added
- added support for json serialisation and de-serialisation java date time
- support for server urls in OpenAPI specification, by adding server url path as path prefix to operations
- improved documentation of clear functionality and type parameter and added examples
- local ip and port exposed to callbacks and log, useful when bound on multiple ports
- ability to match on content-encoding header
- added support for custom HTTP methods (via assumeAllRequestsAreHttp)
Changed
- used helm release name in K8s resources to avoid conflicts for multiple deployments in same namespace (without extra values being set)
- tlsMutualAuthenticationCertificateChain is used if configured, even if tlsMutualAuthenticationRequired is false, so clients can choose correct certificate for optional client auth
Fixed
- error matching header or parameters using array schema
- updated Ingress apiVersion in helm chart to non deprecated value
- removed the jdk14 slf4j bindings from the shaded and no-dependencies jars
- fixed NullPointerException and added more context information for match failures
- fixed NullPointerException during matcher logging
- fixed override logic for query and path parameters
- fixed verification of path parameters with multiple path parameter expectations
- fixed matching for array parameters using OpenAPI or a schema based parameter matcher
- resolved errors matching path by regex against expectations with path parameters
- resolved error with some deleted logs still appearing in the dashboard
- Content-Length is not added if a mock response set Transfer-Encoding
spotbugs/spotbugs
v4.7.2
Fixed
- Bumped gson from 2.9.0 to 2.9.1 (#2136)
- Bump up SLF4J API to
2.0.0 - Bump up logback to
1.4.0 - Bump up log4j2 binding to
2.18.0 - Bump up Saxon-HE to
11.4(#2160) - Fixed InvalidInputException in Eclipse while bug reporting (#2134)
- Bug
SA_FIELD_SELF_ASSIGNMENTis now reported from nested classes as well (#2142) - Avoid warning on use of security manager on Java 17 and newer. (#1579)
- Fixed false positives
EI_EXPOSE_REPthrown in case of fields initialized by theoforcopyOfmethod of aList,MaporSet(#1771) - Fixed CFGBuilderException thrown when
dup_x2is used to swap the reference and wide-value (double, long) in the stack (#2146)
aws/aws-sdk-java
v1.12.300
AWS CloudTrail
-
Features
- This release adds CloudTrail getChannel and listChannels APIs to allow customer to view the ServiceLinkedChannel configurations.
AWS Performance Insights
-
Features
- Increases the maximum values of two RDS Performance Insights APIs. The maximum value of the Limit parameter of DimensionGroup is 25. The MaxResult maximum is now 25 for the following APIs: DescribeDimensionKeys, GetResourceMetrics, ListAvailableResourceDimensions, and ListAvailableResourceMetrics.
Amazon Lex Model Building V2
-
Features
- This release is for supporting Composite Slot Type feature in AWS Lex V2. Composite Slot Type will help developer to logically group coherent slots and maintain their inter-relationships in runtime conversation.
Amazon Lex Runtime V2
-
Features
- This release is for supporting Composite Slot Type feature in AWS Lex V2. Composite Slot Type will help developer to logically group coherent slots and maintain their inter-relationships in runtime conversation.
Amazon Redshift
-
Features
- This release updates documentation for AQUA features and other description updates.
v1.12.299
AWS Elemental MediaLive
-
Features
- This change exposes API settings which allow Dolby Atmos and Dolby Vision to be used when running a channel using Elemental Media Live
AWS SDK for Java
-
Features
- Adding support for me-central-1 region
Amazon EMR Containers
-
Features
- EMR on EKS now allows running Spark SQL using the newly introduced Spark SQL Job Driver in the Start Job Run API
Amazon Elastic Compute Cloud
-
Features
- This release adds support to send VPC Flow Logs to kinesis-data-firehose as new destination type
Amazon Lookout for Metrics
-
Features
- Release dimension value filtering feature to allow customers to define dimension filters for including only a subset of their dataset to be used by LookoutMetrics.
Amazon Route 53
-
Features
- Amazon Route 53 now supports the Middle East (UAE) Region (me-central-1) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region.
Amazon SageMaker Service
-
Features
- This release adds Mode to AutoMLJobConfig.
Amazon Simple Systems Manager (SSM)
-
Features
- This release adds support for Systems Manager State Manager Association tagging.
v1.12.298
AWS Data Exchange
-
Features
- Documentation updates for AWS Data Exchange.
AWS IoT SiteWise
-
Features
- Allow specifying units in Asset Properties
Amazon Elastic Compute Cloud
-
Features
- Documentation updates for Amazon EC2.
Amazon Elastic Kubernetes Service
-
Features
- Adds support for EKS Addons ResolveConflicts "preserve" flag. Also adds new update failed status for EKS Addons.
Amazon FSx
-
Features
- Documentation update for Amazon FSx.
Amazon SageMaker Service
-
Features
- SageMaker Hosting now allows customization on ML instance storage volume size, model data download timeout and inference container startup ping health check timeout for each ProductionVariant in CreateEndpointConfig API.
Amazon Simple Notification Service
-
Features
- Amazon SNS introduces the Data Protection Policy APIs, which enable customers to attach a data protection policy to an SNS topic. This allows topic owners to enable the new message data protection feature to audit and block sensitive data that is exchanged through their topics.
Inspector2
-
Features
- This release adds new fields like fixAvailable, fixedInVersion and remediation to the finding model. The requirement to have vulnerablePackages in the finding model has also been removed. The documentation has been updated to reflect these changes.
v1.12.297
AWS SSO Identity Store
-
Features
- Documentation updates for the Identity Store CLI Reference.
Amazon SageMaker Service
-
Features
- This release adds HyperParameterTuningJob type in Search API.
v1.12.296
AWS Elemental MediaPackage
-
Features
- Added support for AES_CTR encryption to CMAF origin endpoints
Amazon Cognito Identity Provider
-
Features
- This release adds a new "AuthSessionValidity" field to the UserPoolClient in Cognito. Application admins can configure this value for their users' authentication duration, which is currently fixed at 3 minutes, up to 15 minutes. Setting this field will also apply to the SMS MFA authentication flow.
Amazon Connect Service
-
Features
- This release adds search APIs for Routing Profiles and Queues, which can be used to search for those resources within a Connect Instance.
Amazon SageMaker Service
-
Features
- This release enables administrators to attribute user activity and API calls from Studio notebooks, Data Wrangler and Canvas to specific users even when users share the same execution IAM role. ExecutionRoleIdentityConfig at Sagemaker domain level enables this feature.
v1.12.295
AWS Control Tower
-
Features
- This release contains the first SDK for AWS Control Tower. It introduces a new set of APIs: EnableControl, DisableControl, GetControlOperation, and ListEnabledControls.
Amazon CodeGuru Reviewer
-
Features
- Documentation updates to fix formatting issues in CLI and SDK documentation.
Amazon Route 53
-
Features
- Documentation updates for Amazon Route 53.
v1.12.294
AWS IoT Things Graph
-
Features
- This release deprecates all APIs of the ThingsGraph service
AWS RDS DataService
-
Features
- Documentation updates for RDS Data API
AWS SSO Identity Store
-
Features
- Expand IdentityStore API to support Create, Read, Update, Delete and Get operations for User, Group and GroupMembership resources.
Amazon CloudFront
-
Features
- Update API documentation for CloudFront origin access control (OAC)
Amazon Interactive Video Service
-
Features
- IVS Merge Fragmented Streams. This release adds support for recordingReconnectWindow field in IVS recordingConfigurations. For more information see https://docs.aws.amazon.com/ivs/latest/APIReference/Welcome.html
Amazon SageMaker Service
-
Features
- SageMaker Inference Recommender now accepts Inference Recommender fields: Domain, Task, Framework, SamplePayloadUrl, SupportedContentTypes, SupportedInstanceTypes, directly in our CreateInferenceRecommendationsJob API through ContainerConfig
v1.12.293
AWS IoT Greengrass V2
-
Features
- Adds topologyFilter to ListInstalledComponentsRequest which allows filtration of components by ROOT or ALL (including root and dependency components). Adds lastStatusChangeTimestamp to ListInstalledComponents response to show the last time a component changed state on a device.
AWS SSO Identity Store
-
Features
- Documentation updates for the Identity Store CLI Reference.
AWS Single Sign-On
-
Features
- Documentation updates for the AWS IAM Identity Center Portal CLI Reference.
AWS Single Sign-On Admin
-
Features
- Documentation updates for the AWS IAM Identity Center CLI Reference.
Amazon Lookout for Equipment
-
Features
- This release adds new apis for providing labels.
Amazon Macie 2
-
Features
- This release of the Amazon Macie API adds support for using allow lists to define specific text and text patterns to ignore when inspecting data sources for sensitive data.
v1.12.292
Amazon FSx
-
Features
- Documentation updates for Amazon FSx for NetApp ONTAP.
Amazon Voice ID
-
Features
- Amazon Connect Voice ID now detects voice spoofing. When a prospective fraudster tries to spoof caller audio using audio playback or synthesized speech, Voice ID will return a risk score and outcome to indicate the how likely it is that the voice is spoofed.
v1.12.291
AWS Elemental MediaPackage
-
Features
- This release adds Ads AdTriggers and AdsOnDeliveryRestrictions to describe calls for CMAF endpoints on MediaPackage.
Amazon Relational Database Service
-
Features
- Removes support for RDS Custom from DBInstanceClass in ModifyDBInstance
v1.12.290
AWS IoT Wireless
-
Features
- This release includes a new feature for the customers to enable the LoRa gateways to send out beacons for Class B devices and an option to select one or more gateways for Class C devices when sending the LoRaWAN downlink messages.
AWS Panorama
-
Features
- Support sorting and filtering in ListDevices API, and add more fields to device listings and single device detail
AWS SSO OIDC
-
Features
- Updated required request parameters on IAM Identity Center's OIDC CreateToken action.
Amazon GameLift
-
Features
- This release adds support for eight EC2 local zones as fleet locations; Atlanta, Chicago, Dallas, Denver, Houston, Kansas City (us-east-1-mci-1a), Los Angeles, and Phoenix. It also adds support for C5d, C6a, C6i, and R5d EC2 instance families.
Amazon Interactive Video Service Chat
-
Features
- Documentation change for IVS Chat API Reference. Doc-only update to add a paragraph on ARNs to the Welcome section.
Elastic Load Balancing
-
Features
- Documentation updates for ELBv2. Gateway Load Balancer now supports Configurable Flow Stickiness, enabling you to configure the hashing used to maintain stickiness of flows to a specific target appliance.
v1.12.289
AWS Config
-
Features
- AWS Config now supports ConformancePackTemplate documents in SSM Docs for the deployment and update of conformance packs.
AWS Identity and Access Management
-
Features
- Documentation updates for AWS Identity and Access Management (IAM).
AWS Transfer Family
-
Features
- Documentation updates for AWS Transfer Family
Amazon CloudFront
-
Features
- Adds support for CloudFront origin access control (OAC), making it possible to restrict public access to S3 bucket origins in all AWS Regions, those with SSE-KMS, and more.
Amazon Interactive Video Service
-
Features
- Documentation Change for IVS API Reference - Doc-only update to type field description for CreateChannel and UpdateChannel actions and for Channel data type. Also added Amazon Resource Names (ARNs) paragraph to Welcome section.
Amazon QuickSight
-
Features
- Added a new optional property DashboardVisual under ExperienceConfiguration parameter of GenerateEmbedUrlForAnonymousUser and GenerateEmbedUrlForRegisteredUser API operations. This supports embedding of specific visuals in QuickSight dashboards.
v1.12.288
AWS Single Sign-On Admin
-
Features
- Documentation updates to reflect service rename - AWS IAM Identity Center (successor to AWS Single Sign-On)
Amazon Relational Database Service
-
Features
- RDS for Oracle supports Oracle Data Guard switchover and read replica backups.
v1.12.287
AWS IoT SiteWise
-
Features
- Enable non-unique asset names under different hierarchies
AWS SecurityHub
-
Features
- Added new resource details objects to ASFF, including resources for AwsBackupBackupVault, AwsBackupBackupPlan and AwsBackupRecoveryPoint. Added FixAvailable, FixedInVersion and Remediation to Vulnerability.
AWS Support App
-
Features
- This is the initial SDK release for the AWS Support App in Slack.
Amazon DocumentDB with MongoDB compatibility
-
Features
- Update document for volume clone
Amazon Elastic Compute Cloud
-
Features
- R6a instances are powered by 3rd generation AMD EPYC (Milan) processors delivering all-core turbo frequency of 3.6 GHz. C6id, M6id, and R6id instances are powered by 3rd generation Intel Xeon Scalable processor (Ice Lake) delivering all-core turbo frequency of 3.5 GHz.
Amazon Forecast Query Service
-
Features
- releasing What-If Analysis APIs
Amazon Forecast Service
-
Features
- releasing What-If Analysis APIs and update ARN regex pattern to be more strict in accordance with security recommendation
Amazon Lex Model Building V2
-
Features
- This release introduces a new feature to stop a running BotRecommendation Job for Automated Chatbot Designer.
mockito/mockito
v4.8.0
Changelog generated by Shipkit Changelog Gradle Plugin
4.8.0
- 2022-09-07 - 10 commit(s) by Alex, James Baker, Johannes Spangenberg, Kurt Alfred Kluever, Rafael Winterhalter, Thibault Helsmoortel, dependabot[bot]
- GitHub Workflows security hardening (#2744)
- Assign GlobalConfiguration initializer to unused variable (#2742)
- Bump com.diffplug.spotless from 6.9.1 to 6.10.0 (#2738)
- Drop varargs collector before invoking a user method. (#2736)
- Bump versions.bytebuddy from 1.12.13 to 1.12.14 (#2734)
- Remove useless thrown exception from constructor (#2732)
- TypeSafeMatching no longer iterates over class methods inefficiently (#2729)
- Fixes #2720: Use StackWalker on Java 9+ to create Locations (#2723)
- LocationImpl adds performance overheads due to instantiating a stack trace (#2720)
- Fixes #2626 : Introduce MockSettings.mockMaker (#2701)
- Introduce option to disable inline-mock-maker for a specific instance (#2626)
cucumber/cucumber-jvm
v7.7.0
Added
- [JUnit Platform] Enable parallel execution of features (#2604 Sambathkumar Sekar)
Configuration
📅 Schedule: Branch creation - "before 3am on Monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
- [ ] If you want to rebase/retry this PR, click this checkbox.
This PR has been generated by Mend Renovate. View repository job log here.