Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update all non-major dependencies #159

Merged
merged 1 commit into from
Jul 1, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jul 1, 2024

Mend Renovate

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
docker.io/curlimages/curl minor 8.7.1 -> 8.8.0 age adoption passing confidence
docker.io/hapiproject/hapi minor v7.0.3 -> v7.2.0 age adoption passing confidence
docker.io/library/gradle stage minor 8.7.0-jdk21 -> 8.8.0-jdk21 age adoption passing confidence
docker.io/library/postgres minor 16.2 -> 16.3 age adoption passing confidence
ghcr.io/miracum/fhir-pseudonymizer patch v2.21.9 -> v2.21.10 age adoption passing confidence
gradle (source) minor 8.7 -> 8.8 age adoption passing confidence
tchiotludo/akhq minor 0.24.0 -> 0.25.0 age adoption passing confidence
io.micrometer:micrometer-core dependencies minor 1.12.5 -> 1.13.1 age adoption passing confidence
io.micrometer:micrometer-registry-prometheus dependencies minor 1.12.5 -> 1.13.1 age adoption passing confidence
org.miracum:kafka-fhir-serializer dependencies patch 1.0.5 -> 1.0.6 age adoption passing confidence
ca.uhn.hapi.fhir:hapi-fhir-client-okhttp (source) dependencies minor 7.0.2 -> 7.2.1 age adoption passing confidence
ca.uhn.hapi.fhir:hapi-fhir-structures-r4 (source) dependencies minor 7.0.2 -> 7.2.1 age adoption passing confidence
ca.uhn.hapi.fhir:hapi-fhir-client (source) dependencies minor 7.0.2 -> 7.2.1 age adoption passing confidence
ca.uhn.hapi.fhir:hapi-fhir-base (source) dependencies minor 7.0.2 -> 7.2.1 age adoption passing confidence
org.springframework.cloud:spring-cloud-dependencies (source) dependencies patch 2023.0.1 -> 2023.0.2 age adoption passing confidence
io.spring.dependency-management plugin patch 1.1.4 -> 1.1.5 age adoption passing confidence
org.springframework.boot plugin minor 3.2.5 -> 3.3.1 age adoption passing confidence

Release Notes

curl/curl-container (docker.io/curlimages/curl)

v8.8.0

Compare Source

Changed
  • bump to curl 8.8.0
miracum/fhir-pseudonymizer (ghcr.io/miracum/fhir-pseudonymizer)

v2.21.10

Compare Source

Miscellaneous Chores
gradle/gradle (gradle)

v8.8: 8.8

Compare Source

The Gradle team is excited to announce Gradle 8.8.

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Björn Kautler,
Denes Daniel,
Fabian Windheuser,
Hélio Fernandes Sebastião,
Jay Wei,
jhrom,
jwp345,
Jörgen Andersson,
Kirill Gavrilov,
MajesticMagikarpKing,
Maksim Lazeba,
Philip Wedemann,
Robert Elliot,
Róbert Papp,
Stefan M.,
Tibor Vyletel,
Tony Robalik,
Valentin Kulesh,
Yanming Zhou,
김용후

Upgrade instructions

Switch your build to use Gradle 8.8 by updating your wrapper:

./gradlew wrapper --gradle-version=8.8

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

tchiotludo/akhq (tchiotludo/akhq)

v0.25.0

Compare Source

⚠️ This release bring breaking changes since the whole ACL system was rewritten to support multiple clusters RBAC ⚠️

Features

Bug Fixes

Documentation

Chores

Commits

micrometer-metrics/micrometer (io.micrometer:micrometer-core)

v1.13.1: 1.13.1

Compare Source

🔨 Dependency Upgrades

  • Bump me.champeau.gradle:japicmp-gradle-plugin from 0.4.2 to 0.4.3 #​5219
  • Bump spring-javaformat from 0.0.41 to 0.0.42 #​5218
  • Bump dropwizard-metrics from 4.2.25 to 4.2.26 #​5215
  • Bump org.apache.felix:org.apache.felix.scr from 2.2.10 to 2.2.12 #​5208
  • Bump software.amazon.awssdk:cloudwatch from 2.25.64 to 2.25.69 #​5202
  • Bump org.hdrhistogram:HdrHistogram from 2.2.1 to 2.2.2 #​5190
  • Bump spring from 5.3.35 to 5.3.36 #​5189
  • Bump org.hsqldb:hsqldb from 2.7.2 to 2.7.3 #​5188
  • Bump com.netflix.spectator:spectator-reg-atlas from 1.7.12 to 1.7.13 #​5186
  • Bump io.netty:netty-bom from 4.1.109.Final to 4.1.110.Final #​5185
  • Bump org.apache.maven:maven-resolver-provider from 3.9.6 to 3.9.7 #​5183
  • Bump com.signalfx.public:signalfx-java from 1.0.41 to 1.0.42 #​5182
  • Bump io.projectreactor:reactor-bom from 2022.0.18 to 2022.0.19 #​5121
  • Bump com.gradle.develocity from 3.17.3 to 3.17.4 #​5119
  • Bump spring from 5.3.34 to 5.3.35 #​5118

📝 Tasks

  • Update japicmp compatibleVersion to 1.12.0 for 1.13.x #​5143
  • Add 1.13.x and remove 1.11.x from dependabot config #​5094

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​izeye

v1.13.0

Compare Source

v1.12.7: 1.12.7

Compare Source

🔨 Dependency Upgrades
  • Bump org.apache.felix:org.apache.felix.scr from 2.2.10 to 2.2.12 #​5214
  • Bump me.champeau.gradle:japicmp-gradle-plugin from 0.4.2 to 0.4.3 #​5213
  • Bump spring-javaformat from 0.0.41 to 0.0.42 #​5206
  • Bump dropwizard-metrics from 4.2.25 to 4.2.26 #​5204
  • Bump com.amazonaws:aws-java-sdk-cloudwatch from 1.12.734 to 1.12.739 #​5198
  • Bump org.apache.maven:maven-resolver-provider from 3.9.6 to 3.9.7 #​5180
  • Bump io.netty:netty-bom from 4.1.109.Final to 4.1.110.Final #​5178
  • Bump org.hsqldb:hsqldb from 2.7.2 to 2.7.3 #​5177
  • Bump spring from 5.3.35 to 5.3.36 #​5176
  • Bump com.signalfx.public:signalfx-java from 1.0.41 to 1.0.42 #​5175
  • Bump com.netflix.spectator:spectator-reg-atlas from 1.7.12 to 1.7.13 #​5174
  • Bump com.gradle.develocity from 3.17.3 to 3.17.4 #​5129
  • Bump io.projectreactor:reactor-bom from 2022.0.18 to 2022.0.19 #​5124
  • Bump spring from 5.3.34 to 5.3.35 #​5122

v1.12.6: 1.12.6

Compare Source

⚠️ Noteworthy

🐞 Bug Fixes

  • NullPointerException in DefaultJmsProcessObservationConvention #​4966
  • OTLP Gauge datapoint timestamp should be time at sampling #​5044
  • AnnotationHandler can't see methods from parent class #​4983

🔨 Dependency Upgrades

  • Bump com.amazonaws:aws-java-sdk-cloudwatch from 1.12.696 to 1.12.720 #​5042 #​5086
  • Bump com.dynatrace.metric.util:dynatrace-metric-utils-java from 2.2.0 to 2.2.1 #​5005
  • Bump com.signalfx.public:signalfx-java from 1.0.40 to 1.0.41 #​5000
  • Bump com.netflix.spectator:spectator-reg-atlas from 1.7.11 to 1.7.12 #​4994

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​izeye, @​tdinev, @​lenin-jaganathan and @​MartinUhlen

miracum/kafka-fhir-serializer (org.miracum:kafka-fhir-serializer)

v1.0.6

What's Changed

Full Changelog: miracum/kafka-fhir-serializer@v1.0.5...v1.0.6

hapifhir/hapi-fhir (ca.uhn.hapi.fhir:hapi-fhir-client-okhttp)

v7.2.1

7.2.1

v7.2.0

7.2.0

spring-cloud/spring-cloud-release (org.springframework.cloud:spring-cloud-dependencies)

v2023.0.2


Configuration

📅 Schedule: Branch creation - "every 3 months on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

Copy link

github-actions bot commented Jul 1, 2024

🦙 MegaLinter status: ❌ ERROR

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 4 0 0.08s
✅ DOCKERFILE hadolint 2 0 0.16s
✅ EDITORCONFIG editorconfig-checker 66 0 0.44s
✅ GROOVY npm-groovy-lint 2 0 9.08s
✅ JAVA checkstyle 18 0 5.19s
✅ JSON jsonlint 5 0 0.21s
✅ JSON prettier 5 0 1.88s
✅ JSON v8r 5 0 4.47s
✅ MARKDOWN markdownlint 2 0 0.63s
✅ PYTHON bandit 1 0 1.3s
✅ PYTHON black 1 0 0.89s
✅ PYTHON flake8 1 0 0.65s
✅ PYTHON isort 1 0 0.34s
✅ PYTHON mypy 1 0 6.91s
✅ PYTHON ruff 1 0 0.04s
✅ REPOSITORY checkov yes no 15.54s
✅ REPOSITORY gitleaks yes no 0.96s
✅ REPOSITORY git_diff yes no 0.04s
✅ REPOSITORY grype yes no 14.12s
✅ REPOSITORY kics yes no 4.2s
✅ REPOSITORY secretlint yes no 0.97s
✅ REPOSITORY syft yes no 2.74s
❌ REPOSITORY trivy yes 1 9.23s
✅ REPOSITORY trivy-sbom yes no 6.91s
✅ REPOSITORY trufflehog yes no 4.22s
✅ SQL sql-lint 1 0 0.36s
✅ XML xmllint 1 0 0.01s
✅ YAML prettier 17 0 1.05s
✅ YAML yamllint 17 0 0.51s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

MegaLinter is graciously provided by OX Security

Copy link

github-actions bot commented Jul 1, 2024

Trivy image scan report

ghcr.io/miracum/fhir-gateway:pr-159 (debian 12.5)

21 known vulnerabilities found (CRITICAL: 1 HIGH: 2 MEDIUM: 5 LOW: 13)

Show detailed table of vulnerabilities
Package ID Severity Installed Version Fixed Version
libc6 CVE-2024-33599 HIGH 2.36-9+deb12u6 2.36-9+deb12u7
libc6 CVE-2024-33600 MEDIUM 2.36-9+deb12u6 2.36-9+deb12u7
libc6 CVE-2024-33601 MEDIUM 2.36-9+deb12u6 2.36-9+deb12u7
libc6 CVE-2024-33602 MEDIUM 2.36-9+deb12u6 2.36-9+deb12u7
libc6 CVE-2010-4756 LOW 2.36-9+deb12u6
libc6 CVE-2018-20796 LOW 2.36-9+deb12u6
libc6 CVE-2019-1010022 LOW 2.36-9+deb12u6
libc6 CVE-2019-1010023 LOW 2.36-9+deb12u6
libc6 CVE-2019-1010024 LOW 2.36-9+deb12u6
libc6 CVE-2019-1010025 LOW 2.36-9+deb12u6
libc6 CVE-2019-9192 LOW 2.36-9+deb12u6
libexpat1 CVE-2023-52425 HIGH 2.5.0-1
libexpat1 CVE-2023-52426 LOW 2.5.0-1
libexpat1 CVE-2024-28757 LOW 2.5.0-1
libgcc-s1 CVE-2023-4039 MEDIUM 12.2.0-14
libgcc-s1 CVE-2022-27943 LOW 12.2.0-14
libpng16-16 CVE-2021-4214 LOW 1.6.39-2
libstdc++6 CVE-2023-4039 MEDIUM 12.2.0-14
libstdc++6 CVE-2022-27943 LOW 12.2.0-14
libuuid1 CVE-2022-0563 LOW 2.38.1-5+deb12u1
zlib1g CVE-2023-45853 CRITICAL 1:1.2.13.dfsg-1

No Misconfigurations found

Copy link

github-actions bot commented Jul 1, 2024

Code Coverage Report

Overall Project 28.96%

There is no coverage information present for the Files changed

@chgl chgl merged commit 243047b into master Jul 1, 2024
14 of 15 checks passed
@renovate renovate bot deleted the renovate/all-minor-patch branch July 1, 2024 10:42
miracum-bot pushed a commit that referenced this pull request Jul 10, 2024
## [3.13.2](v3.13.1...v3.13.2) (2024-07-10)

### Build

* **deps:** bump certifi from 2023.7.22 to 2024.7.4 in /tests/e2e ([#161](#161)) ([03fd8ec](03fd8ec))
* **deps:** bump urllib3 from 1.26.18 to 1.26.19 in /tests/e2e ([#151](#151)) ([74fbc11](74fbc11))

### Miscellaneous Chores

* **deps:** update all non-major dependencies ([#159](#159)) ([243047b](243047b))
* **deps:** update all non-major dependencies ([#160](#160)) ([5cc50eb](5cc50eb))
* **deps:** update gcr.io/distroless/java21-debian12:nonroot docker digest to 5723ccd ([#157](#157)) ([e1e7b23](e1e7b23))
* **deps:** update github-actions ([#158](#158)) ([d3ab09f](d3ab09f))
* **deps:** update github-actions ([#162](#162)) ([1c81304](1c81304))
@miracum-bot
Copy link

🎉 This issue has been resolved in version 3.13.2 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants