chore: bump the maven-low-risk group across 1 directory with 9 updates#461

dependabot · 2024-05-10T13:50:27Z

Bumps the maven-low-risk group with 9 updates in the / directory:

Package	From	To
org.apache.maven.plugins:maven-gpg-plugin	`3.2.2`	`3.2.4`
commons-io:commons-io	`2.16.0`	`2.16.1`
io.github.bonigarcia:webdrivermanager	`5.7.0`	`5.8.0`
com.fasterxml.jackson.core:jackson-databind	`2.17.0`	`2.17.1`
org.apache.maven.plugins:maven-source-plugin	`3.3.0`	`3.3.1`
com.microsoft.playwright:playwright	`1.42.0`	`1.43.0`
commons-codec:commons-codec	`1.16.1`	`1.17.0`
com.fasterxml.jackson.core:jackson-annotations	`2.17.0`	`2.17.1`
org.jacoco:jacoco-maven-plugin	`0.8.11`	`0.8.12`

Updates org.apache.maven.plugins:maven-gpg-plugin from 3.2.2 to 3.2.4

Release notes

Sourced from org.apache.maven.plugins:maven-gpg-plugin's releases.

3.2.4

Release Notes - Maven GPG Plugin - Version 3.2.4

[MGPG-125] - Fix "bestPractices" (#95) @cstamas

📦 Dependency updates

Bump commons-io:commons-io from 2.16.0 to 2.16.1 (#94) @dependabot

3.2.3

Release Notes - Maven GPG Plugin - Version 3.2.3

... (truncated)

Commits

789149e [maven-release-plugin] prepare release maven-gpg-plugin-3.2.4
893aedc [MGPG-125] Fix "bestPractices" (#95)
b6f0324 [MGPG-126] Bump commons-io:commons-io from 2.16.0 to 2.16.1 (#94)
3c5878b [maven-release-plugin] prepare for next development iteration
89b91a4 [maven-release-plugin] prepare release maven-gpg-plugin-3.2.3
fc2efa3 [MGPG-123][MGPG-124] Dependency upgrades (#93)
50222d3 [MGPG-120] New mojo sign-deployed (#88)
a6c3a09 [MGPG-122] Bump org.apache.maven.plugins:maven-invoker-plugin from 3.6.0 to 3...
78f5e37 [MGPG-121] Return the workaround for pseudo security (#90)
582df74 [MGPG-117] Improve passphrase handling (#86)
Additional commits viewable in compare view

Updates commons-io:commons-io from 2.16.0 to 2.16.1

Updates io.github.bonigarcia:webdrivermanager from 5.7.0 to 5.8.0

Changelog

Sourced from io.github.bonigarcia:webdrivermanager's changelog.

[5.8.0] - 2024-04-04

Fixed

Check resolved browser version in Firefox manager (#1240)

Changed

Updated how we check if Docker is running to work with the new cgroup v2 system (#1259)

Added

Support for chromedriver 115+ (CfT endpoints) for NPM mirror (#1264)

Commits

d5bc6c8 [maven-release-plugin] prepare release webdrivermanager-5.8.0
0c034d9 Update doc for version 5.8.0
ff656a7 Change Java version condition in workflow
fb0c96f Remove Java version condition in several steps in build workflow
530e923 Fix condition to check CfT mirror in URL handler
9193a3b Support for chromedriver 115+ (CfT endpoints) for NPM mirror (#1264)
55fb8f3 Bump codecov/codecov-action from 4.1.1 to 4.2.0 (#1271)
d5deec3 Bump org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.12 (#1270)
70108fb Update mirror info (Tue Apr 2 12:03:02 UTC 2024)
a08a645 Update mirror info (Mon Apr 1 12:03:21 UTC 2024)
Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.17.0 to 2.17.1

Commits

See full diff in compare view

Updates org.apache.maven.plugins:maven-source-plugin from 3.3.0 to 3.3.1

Commits

f80596e [maven-release-plugin] prepare release maven-source-plugin-3.3.1
7626998 Bump apache/maven-gh-actions-shared from 3 to 4
83c963c Bump org.apache.maven.plugins:maven-plugins from 39 to 41 (#18)
40ae495 Bump org.codehaus.plexus:plexus-archiver from 4.8.0 to 4.9.1 (#20)
073462b Bump org.apache.maven:maven-archiver from 3.6.0 to 3.6.1 (#21)
0b1c823 Fix typos in AbstractSourceJarMojo exception
099c65a [MSOURCES-142] Bump org.codehaus.plexus:plexus-archiver from 4.7.1 to 4.8.0 (...
1edeea4 [MSOURCES-139] Fix typo in AbstractSourceJarMojo exception
436966e [maven-release-plugin] prepare for next development iteration
See full diff in compare view

Updates com.microsoft.playwright:playwright from 1.42.0 to 1.43.0

Release notes

Sourced from com.microsoft.playwright:playwright's releases.

v1.43.0

New APIs
Method browserContext.clearCookies([options]) now supports filters to remove only some cookies.
// Clear all cookies.
context.clearCookies();
// New: clear cookies with a particular name.
context.clearCookies(new BrowserContext.ClearCookiesOptions().setName("session-id"));
// New: clear cookies for a particular domain.
context.clearCookies(new BrowserContext.ClearCookiesOptions().setDomain("my-origin.com"));
New method locator.contentFrame() converts a Locator object to a FrameLocator. This can be useful when you have a Locator object obtained somewhere, and later on would like to interact with the content inside the frame.
Locator locator = page.locator("iframe[name='embedded']");
// ...
FrameLocator frameLocator = locator.contentFrame();
frameLocator.getByRole(AriaRole.BUTTON).click();
New method frameLocator.owner() converts a FrameLocator object to a Locator. This can be useful when you have a FrameLocator object obtained somewhere, and later on would like to interact with the iframe element.
FrameLocator frameLocator = page.frameLocator("iframe[name='embedded']");
// ...
Locator locator = frameLocator.owner();
assertThat(locator).isVisible();
Browser Versions

Chromium 124.0.6367.8

Mozilla Firefox 124.0

WebKit 17.4

This version was also tested against the following stable channels:

Google Chrome 123

Microsoft Edge 123

Commits

26861a2 chore: roll 1.43.0 (#1545)
04e77b9 chore: set release version to 1.43.0 (#1540)
ccf4575 chore(1.43): roll 1.43-beta driver (#1539)
90aa457 chore: move junit impl to com.microsoft.playwright.impl.junit (#1538)
1a8f5f7 docs: fix broken class links, format details and usage (#1536)
a917f2e fix(docs): generate javadocs (#1534)
452effb chore: implement context.backgroundPages (#1532)
f497bcc chore(deps): bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.1 to 3.2...
240f8d0 feat(junit): make getOrCreate fixture methods public (#1527)
e7653dd chore: roll driver to 1.43.0-beta, implement clearCookie(filter) (#1525)
Additional commits viewable in compare view

Updates commons-codec:commons-codec from 1.16.1 to 1.17.0

Changelog

Sourced from commons-codec:commons-codec's changelog.

Apache Commons Codec 1.17.0 RELEASE NOTES

The Apache Commons Codec component contains encoders and decoders for various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.

Feature and fix release. Requires a minimum of Java 8.

New features

        Add override org.apache.commons.codec.language.bm.Rule.PhonemeExpr.size(). Thanks to Gary Gregory.

        Add support for Base64 custom alphabets [#266](https://github.com/apache/commons-codec/issues/266). Thanks to Chris Kocel, Gary Gregory.

        Add Base64.Builder (allows custom alphabets). Thanks to Gary Gregory.

        Add Base32.Builder (allows custom alphabets). Thanks to Gary Gregory.

        Add Base64 support for a custom padding byte (like Base32). Thanks to Gary Gregory.

Fixed Bugs

CODEC-320: Wrong output of DoubleMetaphone in 1.16.1. Thanks to Martin Frydl, Gary Gregory.

        Optimize memory allocation in PhoneticEngine. Thanks to Gary Gregory.

        BCodec and QCodec encode() methods throw UnsupportedCharsetException instead of EncoderException. Thanks to Gary Gregory.

        Set Javadoc link to latest Java API LTS version. Thanks to Gary Gregory.

        Base32 constructor fails-fast with a NullPointerException if the custom alphabet array is null. Thanks to Gary Gregory.

        Base32 constructor makes a defensive copy of the line separator array. Thanks to Gary Gregory.

        Base64 constructor makes a defensive copy of the line separator array. Thanks to Gary Gregory.

        Base64 constructor makes a defensive copy of a custom alphabet array. Thanks to Gary Gregory.

Changes

        Bump org.apache.commons:commons-parent from 66 to 69 [#250](https://github.com/apache/commons-codec/issues/250), [#261](https://github.com/apache/commons-codec/issues/261). Thanks to Dependabot, Gary Gregory.

        Bump commons-io:commons-io from 2.15.1 to 2.16.1 [#258](https://github.com/apache/commons-codec/issues/258), [#265](https://github.com/apache/commons-codec/issues/265). Thanks to Dependabot, Gary Gregory.

For complete information on Apache Commons Codec, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Codec website:

https://commons.apache.org/proper/commons-codec/

Download page: https://commons.apache.org/proper/commons-codec/download_codec.cgi

Commits

5d809fe Prepare for the next release candidate
9a59c1c Prepare for the next release candidate
5f0cfd4 Longer lines
8714b5f Remove dead comment
c56b956 Bullet-proof internals
d2215d5 Base32 constructor fails-fast with a NullPointerException if the custom
fcc70e6 Base32 constructor makes a defensive copy of the line separator
ebe805a Base64 constructor makes a defensive copy of a custom alphabet array
5504333 Better exception message
c6c5f11 Base64 constructor makes a better defensive copy of the line separator
Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-annotations from 2.17.0 to 2.17.1

Commits

See full diff in compare view

Updates org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.12

Release notes

Sourced from org.jacoco:jacoco-maven-plugin's releases.

0.8.12

New Features

JaCoCo now officially supports Java 22 (GitHub #1596).

Experimental support for Java 23 class files (GitHub #1553).

Fixed bugs

Branches added by the Kotlin compiler for functions with default arguments and having more than 32 parameters are filtered out during generation of report (GitHub #1556).

Branch added by the Kotlin compiler version 1.5.0 and above for reading from lateinit property is filtered out during generation of report (GitHub #1568).

Non-functional Changes

JaCoCo now depends on ASM 9.7 (GitHub #1600).

Commits

dbfb6f2 Prepare release 0.8.12
a50585b Upgrade maven-plugin-plugin to 3.6.4 (#1604)
fd63cc5 Configure labels that Dependabot assigns to PRs (#1603)
03a5333 Add configuration for Dependabot to simplify updates of ASM (#1601)
40ff9fb Upgrade ASM to 9.7 (#1600)
9077178 Happy birthday Java 22! (#1596)
7edd1b5 Bump actions/setup-java from 4.1.0 to 4.2.1 (#1594)
e50b547 Upgrade ECJ to 3.37.0 (#1590)
a1144d0 Upgrade maven-site-plugin to 3.12.1 (#1586)
04b0141 Bump actions/setup-java from 4.0.0 to 4.1.0 (#1587)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven-low-risk group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [org.apache.maven.plugins:maven-gpg-plugin](https://github.com/apache/maven-gpg-plugin) | `3.2.2` | `3.2.4` | | commons-io:commons-io | `2.16.0` | `2.16.1` | | [io.github.bonigarcia:webdrivermanager](https://github.com/bonigarcia/webdrivermanager) | `5.7.0` | `5.8.0` | | [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.17.0` | `2.17.1` | | [org.apache.maven.plugins:maven-source-plugin](https://github.com/apache/maven-source-plugin) | `3.3.0` | `3.3.1` | | [com.microsoft.playwright:playwright](https://github.com/microsoft/playwright-java) | `1.42.0` | `1.43.0` | | [commons-codec:commons-codec](https://github.com/apache/commons-codec) | `1.16.1` | `1.17.0` | | [com.fasterxml.jackson.core:jackson-annotations](https://github.com/FasterXML/jackson) | `2.17.0` | `2.17.1` | | [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.11` | `0.8.12` | Updates `org.apache.maven.plugins:maven-gpg-plugin` from 3.2.2 to 3.2.4 - [Release notes](https://github.com/apache/maven-gpg-plugin/releases) - [Commits](apache/maven-gpg-plugin@maven-gpg-plugin-3.2.2...maven-gpg-plugin-3.2.4) Updates `commons-io:commons-io` from 2.16.0 to 2.16.1 Updates `io.github.bonigarcia:webdrivermanager` from 5.7.0 to 5.8.0 - [Release notes](https://github.com/bonigarcia/webdrivermanager/releases) - [Changelog](https://github.com/bonigarcia/webdrivermanager/blob/master/CHANGELOG.md) - [Commits](bonigarcia/webdrivermanager@webdrivermanager-5.7.0...webdrivermanager-5.8.0) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.17.0 to 2.17.1 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `org.apache.maven.plugins:maven-source-plugin` from 3.3.0 to 3.3.1 - [Commits](apache/maven-source-plugin@maven-source-plugin-3.3.0...maven-source-plugin-3.3.1) Updates `com.microsoft.playwright:playwright` from 1.42.0 to 1.43.0 - [Release notes](https://github.com/microsoft/playwright-java/releases) - [Commits](microsoft/playwright-java@v1.42.0...v1.43.0) Updates `commons-codec:commons-codec` from 1.16.1 to 1.17.0 - [Changelog](https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt) - [Commits](apache/commons-codec@rel/commons-codec-1.16.1...rel/commons-codec-1.17.0) Updates `com.fasterxml.jackson.core:jackson-annotations` from 2.17.0 to 2.17.1 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `org.jacoco:jacoco-maven-plugin` from 0.8.11 to 0.8.12 - [Release notes](https://github.com/jacoco/jacoco/releases) - [Commits](jacoco/jacoco@v0.8.11...v0.8.12) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-gpg-plugin dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-low-risk - dependency-name: commons-io:commons-io dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-low-risk - dependency-name: io.github.bonigarcia:webdrivermanager dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-low-risk - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-low-risk - dependency-name: org.apache.maven.plugins:maven-source-plugin dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-low-risk - dependency-name: com.microsoft.playwright:playwright dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-low-risk - dependency-name: commons-codec:commons-codec dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-low-risk - dependency-name: com.fasterxml.jackson.core:jackson-annotations dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-low-risk - dependency-name: org.jacoco:jacoco-maven-plugin dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-low-risk ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels May 10, 2024

dependabot bot requested a review from a team as a code owner May 10, 2024 13:50

Zidious approved these changes May 10, 2024

View reviewed changes

Zidious merged commit 1566d90 into develop May 10, 2024

Zidious deleted the dependabot/maven/maven-low-risk-2b1b0e6b92 branch May 10, 2024 15:02

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: bump the maven-low-risk group across 1 directory with 9 updates#461