Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Enhancement-3191] transport_enabled setting on an auth domain and authorizer may be unnecessary after transport client removal #3938

Closed

Conversation

prabhask5
Copy link
Contributor

Description

Remove the transport_enabled setting in config.yml and its related code in DynamicConfigModelV6/7, ConfigV6/7, associated tests. Additionally add handlers in Config files to handle when transport_enabled is still used within the config.yml file while alerting the user with a message in startup that this setting can be safely removed from the config.

Issues Resolved

#3191

Is this a backport? If so, please add backport PR # and/or commits #
No

Testing

No tests were made, all tests should run since the behavior should not change.

Check List

  • New functionality includes testing
  • New functionality has been documented
  • Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

prabhask5 and others added 30 commits January 11, 2024 11:53
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…t#3741)

Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
Makes sure that for response with a body they are returning the expected
content type

Signed-off-by: Peter Nied <petern@amazon.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…search-project#3760)

### Description

Fix flaky tests in TransportUserInjectorIntegTest by removing reliance
on a static variable that makes the test unpredictable. This instead
adds a setting in the UserInjectorPlugin and relies on each node that
has the plugin installed to supply this setting when instantiating the
node.

* Category (Enhancement, New feature, Bug fix, Test fix, Refactoring,
Maintenance, Documentation)

Test Fix

### Issues Resolved

- Fixes opensearch-project#3729

### Check List
- [ ] New functionality includes testing
- [ ] New functionality has been documented
- [ ] Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made
under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and
signing off your commits, please check
[here](https://github.com/opensearch-project/OpenSearch/blob/main/CONTRIBUTING.md#developer-certificate-of-origin).

Signed-off-by: Craig Perkins <cwperx@amazon.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
### Description
Bug fix. Shrink, or resize operations weren't properly evaluated. More
in the task: opensearch-project#2141

### Issues Resolved
opensearch-project#2141

Is this a backport? If so, please add backport PR # and/or commits #

### Testing
[Please provide details of testing done: unit testing, integration
testing and manual testing]

### Check List
- [x] New functionality includes testing
- [x] New functionality has been documented
- [x] Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made
under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and
signing off your commits, please check
[here](https://github.com/opensearch-project/OpenSearch/blob/main/CONTRIBUTING.md#developer-certificate-of-origin).

---------

Signed-off-by: Maciej Mierzwa <dev.maciej.mierzwa@gmail.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…3768)

Bumps com.diffplug.spotless from 6.22.0 to 6.23.0.

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.diffplug.spotless&package-manager=gradle&previous-version=6.22.0&new-version=6.23.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
Bumps com.github.spotbugs from 5.2.3 to 5.2.4.

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.github.spotbugs&package-manager=gradle&previous-version=5.2.3&new-version=5.2.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…WaitForMessages (opensearch-project#3733)

### Description

Refactors RestApiComplianceAuditlogTest to make this test suite more
stable and re-enable an ignored test.

The primary problem in this test suite is that messages that are auto
populated on startup get polluted with other audit log messages
generated when a user calls REST APIs. To make this more stable, a sleep
was added after `setup` to ignore the auto init messages and only
isolate messages generated on the API calls in each test.

`testAutoInit` is also updated to make it stable. There are 4 automatic
messages generated on cluster startup that have to do with the seeding
of the security index and audit log index.

* Category (Enhancement, New feature, Bug fix, Test fix, Refactoring,
Maintenance, Documentation)

Test Fix

### Issues Resolved

opensearch-project#3730

### Check List
- [ ] New functionality includes testing
- [ ] New functionality has been documented
- [ ] Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made
under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and
signing off your commits, please check
[here](https://github.com/opensearch-project/OpenSearch/blob/main/CONTRIBUTING.md#developer-certificate-of-origin).

---------

Signed-off-by: Craig Perkins <cwperx@amazon.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…InnerChannel to account for PA interceptor (opensearch-project#3769)

### Description

Ensure that channel.getVersion() is called after extraction of inner channel.

Signed-off-by: Craig Perkins <cwperx@amazon.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
)

### Description

Implement JsonFlattener helper class as written in opensearch-project#2926 to deprecate
the use of the unnecessary JsonFlattener third party module.

* Category (Enhancement, New feature, Bug fix, Test fix, Refactoring,
Maintenance, Documentation)

Maintenance

* Why these changes are required?

The JsonFlattener module was being utilized in only one place for one
specific purpose, so these functions can be implemented as part of the
OpenSearch codebase instead of importing an unnecessary third party
module.

* What is the old behavior before changes and new behavior after
changes?

Hopefully nothing.

### Issues Resolved
- opensearch-project#2930

Is this a backport? If so, please add backport PR # and/or commits #

No

### Testing
Tests checked to make sure functions are not broken.

### Check List
- [x] New functionality includes testing
- [x] New functionality has been documented
- [x] Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made
under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and
signing off your commits, please check
[here](https://github.com/opensearch-project/OpenSearch/blob/main/CONTRIBUTING.md#developer-certificate-of-origin).

---------

Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3
to 4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-java/releases">actions/setup-java's
releases</a>.</em></p>
<blockquote>
<h2>v4.0.0</h2>
<h2>What's Changed</h2>
<p>In the scope of this release, the version of the Node.js runtime was
updated to 20. The majority of dependencies were updated to the latest
versions. From now on, the code for the setup-java will run on Node.js
20 instead of Node.js 16.</p>
<h2>Breaking changes</h2>
<ul>
<li>Update Node.js runtime to version 20 by <a
href="https://github.com/aparnajyothi-y"><code>@​aparnajyothi-y</code></a>
in <a
href="https://redirect.github.com/actions/setup-java/pull/558">actions/setup-java#558</a></li>
</ul>
<h2>Non-breaking changes</h2>
<ul>
<li>Adding support for microsoft openjdk 21.0.0 by <a
href="https://github.com/ralfstuckert"><code>@​ralfstuckert</code></a>
in <a
href="https://redirect.github.com/actions/setup-java/pull/546">actions/setup-java#546</a></li>
<li>Update <code>@​actions/cache</code> dependency and documentation by
<a href="https://github.com/IvanZosimov"><code>@​IvanZosimov</code></a>
in <a
href="https://redirect.github.com/actions/setup-java/pull/549">actions/setup-java#549</a></li>
<li>Implementation of the cache-dependency-path option to control
caching dependency by <a
href="https://github.com/itchyny"><code>@​itchyny</code></a> in <a
href="https://redirect.github.com/actions/setup-java/pull/499">actions/setup-java#499</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/ralfstuckert"><code>@​ralfstuckert</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-java/pull/546">actions/setup-java#546</a></li>
<li><a href="https://github.com/itchyny"><code>@​itchyny</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-java/pull/499">actions/setup-java#499</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-java/compare/v3...v4.0.0">https://github.com/actions/setup-java/compare/v3...v4.0.0</a></p>
<h2>v3.13.0</h2>
<h2>What's changed</h2>
<p>In the scope of this release, support for Dragonwell JDK was added by
<a
href="https://github.com/Accelerator1996"><code>@​Accelerator1996</code></a>
in <a
href="https://redirect.github.com/actions/setup-java/pull/532">actions/setup-java#532</a></p>
<pre lang="yaml"><code>steps:
 - name: Checkout
   uses: actions/checkout@v3
 - name: Setup-java
   uses: actions/setup-java@v3
   with:
     distribution: 'dragonwell'
     java-version: '17'
</code></pre>
<p>Several inaccuracies were also fixed:</p>
<ul>
<li>Fix XML namespaces wrongly using https by <a
href="https://github.com/gnodet"><code>@​gnodet</code></a> in <a
href="https://redirect.github.com/actions/setup-java/pull/503">actions/setup-java#503</a></li>
<li>Fix typo and remove unintentional(?) word by <a
href="https://github.com/CyberFlameGO"><code>@​CyberFlameGO</code></a>
in <a
href="https://redirect.github.com/actions/setup-java/pull/518">actions/setup-java#518</a></li>
<li>Fix usage link within the README.md file by <a
href="https://github.com/dassiorleando"><code>@​dassiorleando</code></a>
in <a
href="https://redirect.github.com/actions/setup-java/pull/525">actions/setup-java#525</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/CyberFlameGO"><code>@​CyberFlameGO</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-java/pull/518">actions/setup-java#518</a></li>
<li><a
href="https://github.com/dassiorleando"><code>@​dassiorleando</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-java/pull/525">actions/setup-java#525</a></li>
<li><a href="https://github.com/gnodet"><code>@​gnodet</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-java/pull/503">actions/setup-java#503</a></li>
<li><a
href="https://github.com/Accelerator1996"><code>@​Accelerator1996</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-java/pull/532">actions/setup-java#532</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-java/compare/v3...v3.13.0">https://github.com/actions/setup-java/compare/v3...v3.13.0</a></p>
<h2>v3.12.0</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-java/commit/387ac29b308b003ca37ba93a6cab5eb57c8f5f93"><code>387ac29</code></a>
Upgrade Node to v20 (<a
href="https://redirect.github.com/actions/setup-java/issues/558">#558</a>)</li>
<li><a
href="https://github.com/actions/setup-java/commit/9eda6b51cc4f6ee99be3dd5537b85e389e47bda9"><code>9eda6b5</code></a>
feat: implement cache-dependency-path option to control caching
dependency (#...</li>
<li><a
href="https://github.com/actions/setup-java/commit/78078da0cd035d0d177cc2cb696e05d96fba7d11"><code>78078da</code></a>
Update <code>@​actions/cache</code> dependency and documentation (<a
href="https://redirect.github.com/actions/setup-java/issues/549">#549</a>)</li>
<li><a
href="https://github.com/actions/setup-java/commit/5caaba646e214abb5c4c808eb8fe13db519ab757"><code>5caaba6</code></a>
add support for microsoft openjdk 21.0.0 (<a
href="https://redirect.github.com/actions/setup-java/issues/546">#546</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/setup-java/compare/v3...v4">compare
view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-java&package-manager=github_actions&previous-version=3&new-version=4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…roject#3785)

Bumps
[com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt)
from 9.37.1 to 9.37.2.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt">com.nimbusds:nimbus-jose-jwt's
changelog</a>.</em></p>
<blockquote>
<p>version 1.0 (2012-03-01)</p>
<ul>
<li>First version based on the OpenInfoCard JWT, JWS and JWE code
base.</li>
</ul>
<p>version 1.1 (2012-03-06)</p>
<ul>
<li>Introduces type-safe enumeration of the JSON Web Algorithms
(JWA).</li>
<li>Refactors the JWT class.</li>
</ul>
<p>version 1.2 (2012-03-08)</p>
<ul>
<li>Moves JWS and JWE code into separate classes.</li>
</ul>
<p>version 1.3 (2012-03-09)</p>
<ul>
<li>Switches to Apache Commons Codec for Base64URL encoding and
decoding</li>
<li>Consolidates the crypto utilities within the package.</li>
<li>Introduces a JWT content serialiser class.</li>
</ul>
<p>version 1.4 (2012-03-09)</p>
<ul>
<li>Refactoring of JWT class and JUnit tests.</li>
</ul>
<p>version 1.5 (2012-03-18)</p>
<ul>
<li>Switches to JSON Smart for JSON serialisation and parsing.</li>
<li>Introduces claims set class with JSON objects, string, Base64URL and
byte array views.</li>
</ul>
<p>version 1.6 (2012-03-20)</p>
<ul>
<li>Creates class for representing, serialising and parsing JSON Web
Keys
(JWK).</li>
<li>Introduces separate class for representing JWT headers.</li>
</ul>
<p>version 1.7 (2012-04-01)</p>
<ul>
<li>Introduces separate classes for plain, JWS and JWE headers.</li>
<li>Introduces separate classes for plain, signed and encrypted
JWTs.</li>
<li>Removes the JWTContent class.</li>
<li>Removes password-based (PE820) encryption support.</li>
</ul>
<p>version 1.8 (2012-04-03)</p>
<ul>
<li>Adds support for the ZIP JWE header parameter.</li>
<li>Removes unsupported algorithms from the JWA enumeration.</li>
</ul>
<p>version 1.9 (2012-04-03)</p>
<ul>
<li>Renames JWEHeader.{get|set}EncryptionAlgorithm() to
JWEHeader.{get|set}EncryptionMethod().</li>
</ul>
<p>version 1.9.1 (2012-04-03)</p>
<ul>
<li>Upgrades JSON Smart JAR to 1.1.1.</li>
</ul>
<p>version 1.10 (2012-04-14)</p>
<ul>
<li>Introduces serialize() method to base abstract JWT class.</li>
</ul>
<p>version 1.11 (2012-05-13)</p>
<ul>
<li>JWT.serialize() throws checked JWTException instead of</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/8c8135890907c9b1c0a6ae1633598e91c1a9c726"><code>8c81358</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li><a
href="https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/3b3b77ec5ec4b16c3fe12d4977c683db845ffde3"><code>3b3b77e</code></a>
The PasswordBasedDecrypter (PBKDF2) must enforce a limit on the maximum
allow...</li>
<li><a
href="https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/e283ea02909e00645a622f16977659f8a7ba5b00"><code>e283ea0</code></a>
[maven-release-plugin] prepare release 9.37.2</li>
<li>See full diff in <a
href="https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/9.37.2..9.37.1">compare
view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.nimbusds:nimbus-jose-jwt&package-manager=gradle&previous-version=9.37.1&new-version=9.37.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…3784)

Bumps commons-io:commons-io from 2.15.0 to 2.15.1.

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=commons-io:commons-io&package-manager=gradle&previous-version=2.15.0&new-version=2.15.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
Bumps com.github.spotbugs from 5.2.4 to 5.2.5.

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.github.spotbugs&package-manager=gradle&previous-version=5.2.4&new-version=5.2.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
Bumps org.gradle.test-retry from 1.5.6 to 1.5.7.

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.gradle.test-retry&package-manager=gradle&previous-version=1.5.6&new-version=1.5.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…3786)

Bumps com.diffplug.spotless from 6.23.0 to 6.23.3.

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.diffplug.spotless&package-manager=gradle&previous-version=6.23.0&new-version=6.23.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…ect#3801)

### Description
Force resolve logback-classic to 1.3.12 to address
GHSA-vmq6-5m68-f53m

### Issues Resolved
[List any issues this PR will resolve]

Is this a backport? If so, please add backport PR # and/or commits #

### Testing
[Please provide details of testing done: unit testing, integration
testing and manual testing]

### Check List
- [ ] New functionality includes testing
- [ ] New functionality has been documented
- [ ] Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made
under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and
signing off your commits, please check
[here](https://github.com/opensearch-project/OpenSearch/blob/main/CONTRIBUTING.md#developer-certificate-of-origin).

Signed-off-by: Derek Ho <dxho@amazon.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…ct#3706)

Signed-off-by: Maciej Mierzwa <dev.maciej.mierzwa@gmail.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…ch-project#3792)

Signed-off-by: Pavlos Daoglou <pdaoglou@gmail.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…roject#3817)

Bumps
[com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt)
from 9.37.2 to 9.37.3.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt">com.nimbusds:nimbus-jose-jwt's
changelog</a>.</em></p>
<blockquote>
<p>version 1.0 (2012-03-01)</p>
<ul>
<li>First version based on the OpenInfoCard JWT, JWS and JWE code
base.</li>
</ul>
<p>version 1.1 (2012-03-06)</p>
<ul>
<li>Introduces type-safe enumeration of the JSON Web Algorithms
(JWA).</li>
<li>Refactors the JWT class.</li>
</ul>
<p>version 1.2 (2012-03-08)</p>
<ul>
<li>Moves JWS and JWE code into separate classes.</li>
</ul>
<p>version 1.3 (2012-03-09)</p>
<ul>
<li>Switches to Apache Commons Codec for Base64URL encoding and
decoding</li>
<li>Consolidates the crypto utilities within the package.</li>
<li>Introduces a JWT content serialiser class.</li>
</ul>
<p>version 1.4 (2012-03-09)</p>
<ul>
<li>Refactoring of JWT class and JUnit tests.</li>
</ul>
<p>version 1.5 (2012-03-18)</p>
<ul>
<li>Switches to JSON Smart for JSON serialisation and parsing.</li>
<li>Introduces claims set class with JSON objects, string, Base64URL and
byte array views.</li>
</ul>
<p>version 1.6 (2012-03-20)</p>
<ul>
<li>Creates class for representing, serialising and parsing JSON Web
Keys
(JWK).</li>
<li>Introduces separate class for representing JWT headers.</li>
</ul>
<p>version 1.7 (2012-04-01)</p>
<ul>
<li>Introduces separate classes for plain, JWS and JWE headers.</li>
<li>Introduces separate classes for plain, signed and encrypted
JWTs.</li>
<li>Removes the JWTContent class.</li>
<li>Removes password-based (PE820) encryption support.</li>
</ul>
<p>version 1.8 (2012-04-03)</p>
<ul>
<li>Adds support for the ZIP JWE header parameter.</li>
<li>Removes unsupported algorithms from the JWA enumeration.</li>
</ul>
<p>version 1.9 (2012-04-03)</p>
<ul>
<li>Renames JWEHeader.{get|set}EncryptionAlgorithm() to
JWEHeader.{get|set}EncryptionMethod().</li>
</ul>
<p>version 1.9.1 (2012-04-03)</p>
<ul>
<li>Upgrades JSON Smart JAR to 1.1.1.</li>
</ul>
<p>version 1.10 (2012-04-14)</p>
<ul>
<li>Introduces serialize() method to base abstract JWT class.</li>
</ul>
<p>version 1.11 (2012-05-13)</p>
<ul>
<li>JWT.serialize() throws checked JWTException instead of</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/2432c09121add9fe6b2db9173131dd777939bfee"><code>2432c09</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li><a
href="https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/fa9737c49f1ae706d8929abfcb6f346b04275e03"><code>fa9737c</code></a>
Bumps Tink and BC deps</li>
<li><a
href="https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/431f492225d8812cc6e57c6ebe1363e2fab2baba"><code>431f492</code></a>
[maven-release-plugin] prepare release 9.37.3</li>
<li>See full diff in <a
href="https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/9.37.3..9.37.2">compare
view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.nimbusds:nimbus-jose-jwt&package-manager=gradle&previous-version=9.37.2&new-version=9.37.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
Bumps org.gradle.test-retry from 1.5.7 to 1.5.8.

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.gradle.test-retry&package-manager=gradle&previous-version=1.5.7&new-version=1.5.8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
Bumps `kafka_version` from 3.6.0 to 3.6.1.
Updates `org.apache.kafka:kafka-clients` from 3.6.0 to 3.6.1

Updates `org.apache.kafka:kafka_2.13` from 3.6.0 to 3.6.1

Updates `org.apache.kafka:kafka-server-common` from 3.6.0 to 3.6.1

Updates `org.apache.kafka:kafka-group-coordinator` from 3.6.0 to 3.6.1

Updates `org.apache.kafka:kafka-metadata` from 3.6.0 to 3.6.1

Updates `org.apache.kafka:kafka-storage` from 3.6.0 to 3.6.1

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…h-project#3814)

Bumps commons-validator:commons-validator from 1.7 to 1.8.0.

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=commons-validator:commons-validator&package-manager=gradle&previous-version=1.7&new-version=1.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…0.0 (opensearch-project#3813)

Bumps
[org.eclipse.platform:org.eclipse.core.runtime](https://github.com/eclipse-platform/eclipse.platform)
from 3.29.0 to 3.30.0.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/eclipse-platform/eclipse.platform/commits">compare
view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.eclipse.platform:org.eclipse.core.runtime&package-manager=gradle&previous-version=3.29.0&new-version=3.30.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
### Description
Resolve logback-classic to 1.2.13 to resolve
GHSA-gm62-rw4g-vrc4

### Issues Resolved
Fix: opensearch-project#3821

Is this a backport? If so, please add backport PR # and/or commits #

### Testing
[Please provide details of testing done: unit testing, integration
testing and manual testing]

### Check List
- [ ] New functionality includes testing
- [ ] New functionality has been documented
- [ ] Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made
under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and
signing off your commits, please check
[here](https://github.com/opensearch-project/OpenSearch/blob/main/CONTRIBUTING.md#developer-certificate-of-origin).

Signed-off-by: Derek Ho <dxho@amazon.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
)

Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…rch-project#3825)

Signed-off-by: Peter Nied <petern@amazon.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
Signed-off-by: David Osorno <daosgu27@gmail.com>
Signed-off-by: David Osorno <48450162+davidosorno@users.noreply.github.com>
Co-authored-by: Craig Perkins <craig5008@gmail.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
)

Signed-off-by: Craig Perkins <cwperx@amazon.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
DarshitChanpura and others added 25 commits January 11, 2024 11:53
### Description
This PR adds tests associated with the demo-configuration tool.

## Issues Resolved:
 - Resolves opensearch-project#3636

### Testing
- Unit Testing
- Integration Testing

### Check List
- [x] New functionality includes testing
~- [ ] New functionality has been documented~
- [x] Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made
under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and
signing off your commits, please check
[here](https://github.com/opensearch-project/OpenSearch/blob/main/CONTRIBUTING.md#developer-certificate-of-origin).

---------

Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…be compliant with opensearch naming convention (opensearch-project#3843)

### Issues Resolved
- Resolves opensearch-project#3842

### Testing

- automated tests

### Check List
- [x] New functionality includes testing
~- [ ] New functionality has been documented~
- [x] Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made
under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and
signing off your commits, please check
[here](https://github.com/opensearch-project/OpenSearch/blob/main/CONTRIBUTING.md#developer-certificate-of-origin).

---------

Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
### Description
test PR
### Issues Resolved
- opensearch-project#3426
- opensearch-project#2141
- opensearch-project#2169

Similar to this task:
opensearch-project#1917
From what I've noticed some logs are duplicated on faster machines.
During test creation audit logging results were added based on actual
results produced by tests. Now if there are slower moments where logging
produces non-duplicated logs, those were marked as failed.

By submitting this pull request, I confirm that my contribution is made
under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and
signing off your commits, please check
[here](https://github.com/opensearch-project/OpenSearch/blob/main/CONTRIBUTING.md#developer-certificate-of-origin).

---------

Signed-off-by: Maciej Mierzwa <dev.maciej.mierzwa@gmail.com>
Signed-off-by: MaciejMierzwa <dev.maciej.mierzwa@gmail.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…ation (opensearch-project#3763)

Signed-off-by: Craig Perkins <cwperx@amazon.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…d prevents password from being printed in the logs (opensearch-project#3850)

Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…3844)

Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
Signed-off-by: Darshit Chanpura <35282393+DarshitChanpura@users.noreply.github.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
### Description
Adds 2 flow-framework related roles to the plugin: read only and fully
access.
Adds flow-framework system indices to demo scripts as well.

### Issues Resolved

### Testing
manual testing of roles

### Check List
- [x] Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made
under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and
signing off your commits, please check
[here](https://github.com/opensearch-project/OpenSearch/blob/main/CONTRIBUTING.md#developer-certificate-of-origin).

Signed-off-by: Amit Galitzky <amgalitz@amazon.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…roject#3855)

Bumps com.netflix.nebula.ospackage from 11.5.0 to 11.6.0.

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.netflix.nebula.ospackage&package-manager=gradle&previous-version=11.5.0&new-version=11.6.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…arch-project#3856)

Bumps org.apache.camel:camel-xmlsecurity from 3.21.2 to 3.21.3.

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.camel:camel-xmlsecurity&package-manager=gradle&previous-version=3.21.2&new-version=3.21.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…rch-project#3857)

Bumps
[org.checkerframework:checker-qual](https://github.com/typetools/checker-framework)
from 3.40.0 to 3.42.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typetools/checker-framework/releases">org.checkerframework:checker-qual's
releases</a>.</em></p>
<blockquote>
<h2>Checker Framework 3.42.0</h2>
<h2>Version 3.42.0 (December 15, 2023)</h2>
<p><strong>User-visible changes:</strong></p>
<p>Method annotation <code>@AssertMethod</code> indicates that a method
checks a value and possibly throws an assertion. Using it can make
flow-sensitive type refinement more effective.</p>
<p>In <code>org.checkerframework.common.util.debug</code>, renamed
<code>EmptyProcessor</code> to <code>DoNothingProcessor</code>.
Removed
<code>org.checkerframework.common.util.report.DoNothingChecker</code>.
Moved <code>ReportChecker</code> from
<code>org.checkerframework.common.util.report</code> to
<code>org.checkerframework.common.util.count.report</code>.</p>
<h2>Checker Framework 3.41.0</h2>
<h2>Version 3.41.0 (December 4, 2023)</h2>
<p><strong>User-visible changes:</strong></p>
<p>New command-line options:
-AassumePureGetters Unsoundly assume that every getter method is
pure</p>
<p><strong>Implementation details:</strong></p>
<p>Added method <code>isDeterministic()</code> to the
<code>AnnotationProvider</code> interface.</p>
<p><code>CFAbstractValue#leastUpperBound</code> and
<code>CFAbstractValue#widenUpperBound</code> are now final. Subclasses
should override method <code>CFAbstractValue#upperBound(V, TypeMirror,
boolean)</code> instead.</p>
<p><strong>Closed issues:</strong></p>
<p><a
href="https://redirect.github.com/typetools/checker-framework/issues/1497">#1497</a>,
<a
href="https://redirect.github.com/typetools/checker-framework/issues/3345">#3345</a>,
<a
href="https://redirect.github.com/typetools/checker-framework/issues/6037">#6037</a>,
<a
href="https://redirect.github.com/typetools/checker-framework/issues/6204">#6204</a>,
<a
href="https://redirect.github.com/typetools/checker-framework/issues/6276">#6276</a>,
<a
href="https://redirect.github.com/typetools/checker-framework/issues/6282">#6282</a>,
<a
href="https://redirect.github.com/typetools/checker-framework/issues/6290">#6290</a>,
<a
href="https://redirect.github.com/typetools/checker-framework/issues/6296">#6296</a>,
<a
href="https://redirect.github.com/typetools/checker-framework/issues/6319">#6319</a>,
<a
href="https://redirect.github.com/typetools/checker-framework/issues/6327">#6327</a>.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md">org.checkerframework:checker-qual's
changelog</a>.</em></p>
<blockquote>
<h2>Version 3.42.0 (December 15, 2023)</h2>
<p><strong>User-visible changes:</strong></p>
<p>Method annotation <code>@AssertMethod</code> indicates that a method
checks a value and
possibly throws an assertion. Using it can make flow-sensitive type
refinement
more effective.</p>
<p>In <code>org.checkerframework.common.util.debug</code>, renamed
<code>EmptyProcessor</code> to <code>DoNothingProcessor</code>.
Removed
<code>org.checkerframework.common.util.report.DoNothingChecker</code>.
Moved <code>ReportChecker</code> from
<code>org.checkerframework.common.util.report</code> to
<code>org.checkerframework.common.util.count.report</code>.</p>
<h2>Version 3.41.0 (December 4, 2023)</h2>
<p><strong>User-visible changes:</strong></p>
<p>New command-line options:
-AassumePureGetters Unsoundly assume that every getter method is
pure</p>
<p><strong>Implementation details:</strong></p>
<p>Added method <code>isDeterministic()</code> to the
<code>AnnotationProvider</code> interface.</p>
<p><code>CFAbstractValue#leastUpperBound</code> and
<code>CFAbstractValue#widenUpperBound</code> are now
final. Subclasses should override method
<code>CFAbstractValue#upperBound(V, TypeMirror, boolean)</code>
instead.</p>
<p><strong>Closed issues:</strong></p>
<p><a
href="https://redirect.github.com/typetools/checker-framework/issues/1497">#1497</a>,
<a
href="https://redirect.github.com/typetools/checker-framework/issues/3345">#3345</a>,
<a
href="https://redirect.github.com/typetools/checker-framework/issues/6037">#6037</a>,
<a
href="https://redirect.github.com/typetools/checker-framework/issues/6204">#6204</a>,
<a
href="https://redirect.github.com/typetools/checker-framework/issues/6276">#6276</a>,
<a
href="https://redirect.github.com/typetools/checker-framework/issues/6282">#6282</a>,
<a
href="https://redirect.github.com/typetools/checker-framework/issues/6290">#6290</a>,
<a
href="https://redirect.github.com/typetools/checker-framework/issues/6296">#6296</a>,
<a
href="https://redirect.github.com/typetools/checker-framework/issues/6319">#6319</a>,
<a
href="https://redirect.github.com/typetools/checker-framework/issues/6327">#6327</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typetools/checker-framework/commit/ed3a237e04037e85850d81ef2031e4015893e54f"><code>ed3a237</code></a>
new release 3.42.0</li>
<li><a
href="https://github.com/typetools/checker-framework/commit/9053af5f89c0c62608a26b241716d58bbe0af28b"><code>9053af5</code></a>
Prep for release.</li>
<li><a
href="https://github.com/typetools/checker-framework/commit/886d0b384c9e8099bd6e3c07839a834d6f6823f2"><code>886d0b3</code></a>
Add support for opt.map(type::method) pattern. (<a
href="https://redirect.github.com/typetools/checker-framework/issues/6370">#6370</a>)</li>
<li><a
href="https://github.com/typetools/checker-framework/commit/4b5e2c96a99eaa2171b740af5b53732b9d003d55"><code>4b5e2c9</code></a>
ReportChecker: Fix array access crash</li>
<li><a
href="https://github.com/typetools/checker-framework/commit/3eb26a972031694983cd351b88fd04624be62e0b"><code>3eb26a9</code></a>
Fix guava-assertions.astub</li>
<li><a
href="https://github.com/typetools/checker-framework/commit/7906a832ee24b8fa134d5883667f1d408a286502"><code>7906a83</code></a>
Add <code>-y</code>, a second command-line option for exclusion</li>
<li><a
href="https://github.com/typetools/checker-framework/commit/b38ed803cc4e07e98a2ce9d5d71d0c2f6063dfab"><code>b38ed80</code></a>
Fix Kotlin instructions</li>
<li><a
href="https://github.com/typetools/checker-framework/commit/ae8a6e1d1ec113b25667e9a1ac13ce020dc12fe8"><code>ae8a6e1</code></a>
Add support for OptionalDouble, OptionalInt, OptionalLong</li>
<li><a
href="https://github.com/typetools/checker-framework/commit/17226ff978da72f0acccfdf660d6d1d788e544d2"><code>17226ff</code></a>
Add Optional method annotations</li>
<li><a
href="https://github.com/typetools/checker-framework/commit/964d02799dc8642c3cf762fdac8ae91efea27983"><code>964d027</code></a>
Permit
<code>Stream.filter(Optional::isPresent).map(Optional::get)</code></li>
<li>Additional commits viewable in <a
href="https://github.com/typetools/checker-framework/compare/checker-framework-3.40.0...checker-framework-3.42.0">compare
view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.checkerframework:checker-qual&package-manager=gradle&previous-version=3.40.0&new-version=3.42.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…arch-project#3858)

Bumps
[com.flipkart.zjsonpatch:zjsonpatch](https://github.com/flipkart-incubator/zjsonpatch)
from 0.4.14 to 0.4.16.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/flipkart-incubator/zjsonpatch/releases">com.flipkart.zjsonpatch:zjsonpatch's
releases</a>.</em></p>
<blockquote>
<h2>Releasing 0.4.16</h2>
<p>Changes include the following -
<a
href="https://redirect.github.com/flipkart-incubator/zjsonpatch/issues/174">#174</a>
<a
href="https://redirect.github.com/flipkart-incubator/zjsonpatch/issues/172">#172</a>
<a
href="https://redirect.github.com/flipkart-incubator/zjsonpatch/issues/171">#171</a>
<a
href="https://redirect.github.com/flipkart-incubator/zjsonpatch/issues/165">#165</a></p>
<h2>Releasing 0.4.15</h2>
<p>No release notes provided.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/flipkart-incubator/zjsonpatch/commit/d3ea5b2ede7f0090eb441f96a06a3b535db62992"><code>d3ea5b2</code></a>
releasing 0.4.16</li>
<li><a
href="https://github.com/flipkart-incubator/zjsonpatch/commit/08a80529b4a407223ed7e53be47691c4e53b9fce"><code>08a8052</code></a>
commenting out maven-surefire-plugin configuration</li>
<li><a
href="https://github.com/flipkart-incubator/zjsonpatch/commit/3e4a920ca9ca1852559a272ef0da3a11e81e9d88"><code>3e4a920</code></a>
Bump maven-surefire-plugin from 2.22.2 to 3.0.0 (<a
href="https://redirect.github.com/flipkart-incubator/zjsonpatch/issues/174">#174</a>)</li>
<li><a
href="https://github.com/flipkart-incubator/zjsonpatch/commit/1e43697e432c5921a353469c7079d07c60b0ee33"><code>1e43697</code></a>
Bump maven-compiler-plugin from 3.10.1 to 3.11.0 (<a
href="https://redirect.github.com/flipkart-incubator/zjsonpatch/issues/172">#172</a>)</li>
<li><a
href="https://github.com/flipkart-incubator/zjsonpatch/commit/65d4a68aa2e13f286a0a422e1b5009b48646e721"><code>65d4a68</code></a>
Bump maven-javadoc-plugin from 3.4.1 to 3.5.0 (<a
href="https://redirect.github.com/flipkart-incubator/zjsonpatch/issues/171">#171</a>)</li>
<li><a
href="https://github.com/flipkart-incubator/zjsonpatch/commit/3d125e7ef563f794a291e13c7f5adad957ffcfd9"><code>3d125e7</code></a>
Bump junit.version from 5.9.1 to 5.9.2 (<a
href="https://redirect.github.com/flipkart-incubator/zjsonpatch/issues/165">#165</a>)</li>
<li><a
href="https://github.com/flipkart-incubator/zjsonpatch/commit/2df8d86e895bb056e6bc8bf157e42e119103e267"><code>2df8d86</code></a>
updating readme.md with 0.4.15</li>
<li><a
href="https://github.com/flipkart-incubator/zjsonpatch/commit/bd4ad763d4c872dfb8a7da322b1d6bdd7c346a6c"><code>bd4ad76</code></a>
releasing 0.4.15</li>
<li><a
href="https://github.com/flipkart-incubator/zjsonpatch/commit/cc0f0bffca97e02ad3d11abd97ccc8d357683b56"><code>cc0f0bf</code></a>
make JsonPointer and Operation public for visibility in
JsonPatchApplicationE...</li>
<li><a
href="https://github.com/flipkart-incubator/zjsonpatch/commit/49ab75c734cc38e2565e3734285026f3c5d26045"><code>49ab75c</code></a>
Upgrade to CodeQL v2 (<a
href="https://redirect.github.com/flipkart-incubator/zjsonpatch/issues/169">#169</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/flipkart-incubator/zjsonpatch/compare/0.4.14...0.4.16">compare
view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.flipkart.zjsonpatch:zjsonpatch&package-manager=gradle&previous-version=0.4.14&new-version=0.4.16)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 2 to 3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>CodeQL Bundle v2.15.4</h2>
<p>Bundles CodeQL CLI v2.15.4</p>
<ul>
<li>(<a
href="https://github.com/github/codeql-cli-binaries/blob/HEAD/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql-cli-binaries/releases/tag/v2.15.4">release</a>)</li>
</ul>
<p>Includes the following CodeQL language packs from <a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4"><code>github/codeql@codeql-cli/v2.15.4</code></a>:</p>
<ul>
<li><code>codeql/cpp-queries</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/cpp/ql/src/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/cpp/ql/src">source</a>)</li>
<li><code>codeql/cpp-all</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/cpp/ql/lib/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/cpp/ql/lib">source</a>)</li>
<li><code>codeql/csharp-queries</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/csharp/ql/src/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/csharp/ql/src">source</a>)</li>
<li><code>codeql/csharp-all</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/csharp/ql/lib/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/csharp/ql/lib">source</a>)</li>
<li><code>codeql/go-queries</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/go/ql/src/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/go/ql/src">source</a>)</li>
<li><code>codeql/go-all</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/go/ql/lib/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/go/ql/lib">source</a>)</li>
<li><code>codeql/java-queries</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/java/ql/src/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/java/ql/src">source</a>)</li>
<li><code>codeql/java-all</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/java/ql/lib/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/java/ql/lib">source</a>)</li>
<li><code>codeql/javascript-queries</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/javascript/ql/src/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/javascript/ql/src">source</a>)</li>
<li><code>codeql/javascript-all</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/javascript/ql/lib/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/javascript/ql/lib">source</a>)</li>
<li><code>codeql/python-queries</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/python/ql/src/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/python/ql/src">source</a>)</li>
<li><code>codeql/python-all</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/python/ql/lib/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/python/ql/lib">source</a>)</li>
<li><code>codeql/ruby-queries</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/ruby/ql/src/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/ruby/ql/src">source</a>)</li>
<li><code>codeql/ruby-all</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/ruby/ql/lib/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/ruby/ql/lib">source</a>)</li>
<li><code>codeql/swift-queries</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/swift/ql/src/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/swift/ql/src">source</a>)</li>
<li><code>codeql/swift-all</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/swift/ql/lib/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.4/swift/ql/lib">source</a>)</li>
</ul>
<h2>CodeQL Bundle</h2>
<p>Bundles CodeQL CLI v2.15.3</p>
<ul>
<li>(<a
href="https://github.com/github/codeql-cli-binaries/blob/HEAD/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql-cli-binaries/releases/tag/v2.15.3">release</a>)</li>
</ul>
<p>Includes the following CodeQL language packs from <a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3"><code>github/codeql@codeql-cli/v2.15.3</code></a>:</p>
<ul>
<li><code>codeql/cpp-queries</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/cpp/ql/src/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/cpp/ql/src">source</a>)</li>
<li><code>codeql/cpp-all</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/cpp/ql/lib/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/cpp/ql/lib">source</a>)</li>
<li><code>codeql/csharp-queries</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/csharp/ql/src/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/csharp/ql/src">source</a>)</li>
<li><code>codeql/csharp-all</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/csharp/ql/lib/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/csharp/ql/lib">source</a>)</li>
<li><code>codeql/go-queries</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/go/ql/src/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/go/ql/src">source</a>)</li>
<li><code>codeql/go-all</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/go/ql/lib/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/go/ql/lib">source</a>)</li>
<li><code>codeql/java-queries</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/java/ql/src/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/java/ql/src">source</a>)</li>
<li><code>codeql/java-all</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/java/ql/lib/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/java/ql/lib">source</a>)</li>
<li><code>codeql/javascript-queries</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/javascript/ql/src/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/javascript/ql/src">source</a>)</li>
<li><code>codeql/javascript-all</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/javascript/ql/lib/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/javascript/ql/lib">source</a>)</li>
<li><code>codeql/python-queries</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/python/ql/src/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/python/ql/src">source</a>)</li>
<li><code>codeql/python-all</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/python/ql/lib/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/python/ql/lib">source</a>)</li>
<li><code>codeql/ruby-queries</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/ruby/ql/src/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/ruby/ql/src">source</a>)</li>
<li><code>codeql/ruby-all</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/ruby/ql/lib/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/ruby/ql/lib">source</a>)</li>
<li><code>codeql/swift-queries</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/swift/ql/src/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/swift/ql/src">source</a>)</li>
<li><code>codeql/swift-all</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/swift/ql/lib/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.3/swift/ql/lib">source</a>)</li>
</ul>
<h2>CodeQL Bundle</h2>
<p>Bundles CodeQL CLI v2.15.2</p>
<ul>
<li>(<a
href="https://github.com/github/codeql-cli-binaries/blob/HEAD/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql-cli-binaries/releases/tag/v2.15.2">release</a>)</li>
</ul>
<p>Includes the following CodeQL language packs from <a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.2"><code>github/codeql@codeql-cli/v2.15.2</code></a>:</p>
<ul>
<li><code>codeql/cpp-queries</code> (<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.2/cpp/ql/src/CHANGELOG.md">changelog</a>,
<a
href="https://github.com/github/codeql/tree/codeql-cli/v2.15.2/cpp/ql/src">source</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/3a9f6a89e06fb331ce22481637d19617501a5b7f"><code>3a9f6a8</code></a>
update javascript files</li>
<li><a
href="https://github.com/github/codeql-action/commit/cc4fead714532424ab15b501a01d18c7f34d17e2"><code>cc4fead</code></a>
update version in various hardcoded locations</li>
<li><a
href="https://github.com/github/codeql-action/commit/183559cea87c163bb01e99e0a15fd5500b23307f"><code>183559c</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.15.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/5b52b36d41451ee775917788e3bf225d7c1ceab3"><code>5b52b36</code></a>
reintroduce PR check that confirm action can be still be compiled on
node16</li>
<li><a
href="https://github.com/github/codeql-action/commit/5b19bef41e08b00f3d8f48219f46b1866a4f940d"><code>5b19bef</code></a>
change to node20 for all actions</li>
<li><a
href="https://github.com/github/codeql-action/commit/f2d0c2e7ae58b70f81b81bf4c8b5c7a81fb2a5d6"><code>f2d0c2e</code></a>
upgrade node type definitions</li>
<li><a
href="https://github.com/github/codeql-action/commit/d651fbc494fab13836ab76ffcfc8ce08c7c98d78"><code>d651fbc</code></a>
change to node20 for all actions</li>
<li><a
href="https://github.com/github/codeql-action/commit/382a50a0284c0de445104889a9d6003acb4b3c1d"><code>382a50a</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2021">#2021</a>
from github/mergeback/v2.22.9-to-main-c0d1daa7</li>
<li><a
href="https://github.com/github/codeql-action/commit/458b4226ad8e38f90ff6a4ad1e18ab2593e7e3dc"><code>458b422</code></a>
Update checked-in dependencies</li>
<li><a
href="https://github.com/github/codeql-action/commit/5e0f9dbc48f564b68392e465dcdacd74eab63e25"><code>5e0f9db</code></a>
Update changelog and version after v2.22.9</li>
<li>See full diff in <a
href="https://github.com/github/codeql-action/compare/v2...v3">compare
view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=2&new-version=3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
Bumps
[actions/download-artifact](https://github.com/actions/download-artifact)
from 3 to 4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/download-artifact/releases">actions/download-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v4.0.0</h2>
<h2>What's Changed</h2>
<p>The release of upload-artifact@v4 and download-artifact@v4 are major
changes to the backend architecture of Artifacts. They have numerous
performance and behavioral improvements.</p>
<p>For more information, see the <a
href="https://github.com/actions/toolkit/tree/main/packages/artifact"><code>@​actions/artifact</code></a>
documentation.</p>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/bflad"><code>@​bflad</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/download-artifact/pull/194">actions/download-artifact#194</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/download-artifact/compare/v3...v4.0.0">https://github.com/actions/download-artifact/compare/v3...v4.0.0</a></p>
<h2>v3.0.2</h2>
<ul>
<li>Bump <code>@actions/artifact</code> to v1.1.1 - <a
href="https://redirect.github.com/actions/download-artifact/pull/195">actions/download-artifact#195</a></li>
<li>Fixed a bug in Node16 where if an HTTP download finished too quickly
(&lt;1ms, e.g. when it's mocked) we attempt to delete a temp file that
has not been created yet <a
href="hhttps://redirect.github.com/actions/toolkit/pull/1278">actions/toolkit#1278</a></li>
</ul>
<h2>v3.0.1</h2>
<ul>
<li><a
href="https://redirect.github.com/actions/download-artifact/pull/178">Bump
<code>@​actions/core</code> to 1.10.0</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/download-artifact/commit/7a1cd3216ca9260cd8022db641d960b1db4d1be4"><code>7a1cd32</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/download-artifact/issues/246">#246</a>
from actions/v4-beta</li>
<li><a
href="https://github.com/actions/download-artifact/commit/8f32874a49903ea488c5e7d476a9173e8706f409"><code>8f32874</code></a>
licensed cache</li>
<li><a
href="https://github.com/actions/download-artifact/commit/b5ff8444b1c4fcec8131f3cb1ddade813ddfacb1"><code>b5ff844</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/download-artifact/issues/245">#245</a>
from actions/robherley/v4-documentation</li>
<li><a
href="https://github.com/actions/download-artifact/commit/f07a0f73f51b3f1d41667c782c821b9667da9d19"><code>f07a0f7</code></a>
Update README.md</li>
<li><a
href="https://github.com/actions/download-artifact/commit/7226129829bb686fdff47bd63bbd0d1373993a84"><code>7226129</code></a>
update test workflow to use different artifact names for matrix</li>
<li><a
href="https://github.com/actions/download-artifact/commit/ada9446619b84dd8a557aaaec3b79b58c4986cdf"><code>ada9446</code></a>
update docs and bump <code>@​actions/artifact</code></li>
<li><a
href="https://github.com/actions/download-artifact/commit/7eafc8b729ba790ce8f2cee54be8ad6257af4c7c"><code>7eafc8b</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/download-artifact/issues/244">#244</a>
from actions/robherley/bump-toolkit</li>
<li><a
href="https://github.com/actions/download-artifact/commit/3132d12662b5915f20cdbf449465896962101abf"><code>3132d12</code></a>
consume latest toolkit</li>
<li><a
href="https://github.com/actions/download-artifact/commit/5be1d3867182a382bc59f2775e002595f487aa88"><code>5be1d38</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/download-artifact/issues/243">#243</a>
from actions/robherley/v4-beta-updates</li>
<li><a
href="https://github.com/actions/download-artifact/commit/465b526e63559575a64716cdbb755bc78dfb263b"><code>465b526</code></a>
consume latest <code>@​actions/toolkit</code></li>
<li>Additional commits viewable in <a
href="https://github.com/actions/download-artifact/compare/v3...v4">compare
view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/download-artifact&package-manager=github_actions&previous-version=3&new-version=4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…t#3689)

### Description

Companion PRs in core:

- opensearch-project/OpenSearch#11170
- opensearch-project/OpenSearch#11591

This PR adds render search template as a cluster perm so that its
separately permissioned from a SearchTemplateRequest which needs a set
of indices to authorize the request. The companion PR in core separates
the transport actions that handle search template request and render
search template request so that they can be authorized separately.

I am opening this in Draft until the core PR is merged because this PR
depends on the core PR.

* Category (Enhancement, New feature, Bug fix, Test fix, Refactoring,
Maintenance, Documentation)

Bug fix

### Issues Resolved

- opensearch-project#3672

### Check List
- [ ] New functionality includes testing
- [ ] New functionality has been documented
- [ ] Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made
under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and
signing off your commits, please check
[here](https://github.com/opensearch-project/OpenSearch/blob/main/CONTRIBUTING.md#developer-certificate-of-origin).

---------

Signed-off-by: Craig Perkins <cwperx@amazon.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…ons/upload-artifact@v4 (opensearch-project#3893)

Signed-off-by: Craig Perkins <cwperx@amazon.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
### Description
Add deprecation check for `jwt_header` setting

### Issues Resolved
- Related opensearch-project#3886

### Check List
- [ ] ~New functionality includes testing~
- [ ] New functionality has been documented
- [X] Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made
under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and
signing off your commits, please check
[here](https://github.com/opensearch-project/OpenSearch/blob/main/CONTRIBUTING.md#developer-certificate-of-origin).

---------

Signed-off-by: Peter Nied <petern@amazon.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…arch-project#3899)

Bumps
[io.dropwizard.metrics:metrics-core](https://github.com/dropwizard/metrics)
from 4.2.22 to 4.2.23.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/dropwizard/metrics/releases">io.dropwizard.metrics:metrics-core's
releases</a>.</em></p>
<blockquote>
<h2>v4.2.23</h2>
<h2>What's Changed</h2>
<ul>
<li>Update dependency org.apache.maven.plugins:maven-surefire-plugin to
v3.2.2 (release/4.2.x) by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3713">dropwizard/metrics#3713</a></li>
<li>Update dependency org.apache.maven.plugins:maven-javadoc-plugin to
v3.6.2 (release/4.2.x) by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3712">dropwizard/metrics#3712</a></li>
<li>Update github/codeql-action digest to 689fdc5 (release/4.2.x) by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3726">dropwizard/metrics#3726</a></li>
<li>Update github/codeql-action digest to 66b90a5 (release/4.2.x) by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3732">dropwizard/metrics#3732</a></li>
<li>Update dependency net.bytebuddy:byte-buddy to v1.14.10
(release/4.2.x) by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3739">dropwizard/metrics#3739</a></li>
<li>Update log4j2.version to v2.22.0 (release/4.2.x) (minor) by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3740">dropwizard/metrics#3740</a></li>
<li>Update dependency
org.apache.maven.plugins:maven-project-info-reports-plugin to v3.5.0
(release/4.2.x) by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3744">dropwizard/metrics#3744</a></li>
<li>Update dependency org.apache.commons:commons-lang3 to v3.14.0
(release/4.2.x) by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3743">dropwizard/metrics#3743</a></li>
<li>Update dependency org.apache.httpcomponents.client5:httpclient5 to
v5.2.2 (release/4.2.x) by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3745">dropwizard/metrics#3745</a></li>
<li>Update github/codeql-action digest to 407ffaf (release/4.2.x) by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3749">dropwizard/metrics#3749</a></li>
<li>Update dependency org.codehaus.mojo:build-helper-maven-plugin to
v3.5.0 (release/4.2.x) by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3753">dropwizard/metrics#3753</a></li>
<li>Update dependency org.apache.httpcomponents.core5:httpcore5 to
v5.2.4 (release/4.2.x) by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3758">dropwizard/metrics#3758</a></li>
<li>Update logback14.version to v1.4.12 (release/4.2.x) (patch) by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3760">dropwizard/metrics#3760</a></li>
<li>Update logback13.version to v1.3.12 (release/4.2.x) (patch) by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3759">dropwizard/metrics#3759</a></li>
<li>Update logback13.version to v1.3.13 (release/4.2.x) (patch) by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3767">dropwizard/metrics#3767</a></li>
<li>Update logback14.version to v1.4.13 (release/4.2.x) (patch) by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3768">dropwizard/metrics#3768</a></li>
<li>Update dependency org.jdbi:jdbi3-core to v3.42.0 (release/4.2.x) by
<a href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3770">dropwizard/metrics#3770</a></li>
<li>Update actions/setup-java action to v4 (release/4.2.x) by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3773">dropwizard/metrics#3773</a></li>
<li>Update dependency maven to v3.9.6 (release/4.2.x) by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3774">dropwizard/metrics#3774</a></li>
<li>Update dependency org.apache.httpcomponents.client5:httpclient5 to
v5.2.3 (release/4.2.x) by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3775">dropwizard/metrics#3775</a></li>
<li>Update dependency org.apache.maven.plugins:maven-javadoc-plugin to
v3.6.3 (release/4.2.x) by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3776">dropwizard/metrics#3776</a></li>
<li>Update dependency org.glassfish.jersey:jersey-bom to v3.1.4
(release/4.2.x) by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3777">dropwizard/metrics#3777</a></li>
<li>Update logback.version to v1.2.13 (release/4.2.x) (patch) by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3779">dropwizard/metrics#3779</a></li>
<li>Update logback13.version to v1.3.14 (release/4.2.x) (patch) by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3780">dropwizard/metrics#3780</a></li>
<li>Update jetty12.version to v12.0.4 (release/4.2.x) (patch) by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3778">dropwizard/metrics#3778</a></li>
<li>Update logback14.version to v1.4.14 (release/4.2.x) (patch) by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3781">dropwizard/metrics#3781</a></li>
<li>Update dependency org.checkerframework:checker-qual to v3.41.0
(release/4.2.x) by <a
href="https://github.com/renovate"><code>@​renovate</code></a> in <a
href="https://redirect.github.com/dropwizard/metrics/pull/3782">dropwizard/metrics#3782</a></li>
<li>Update dependency org.mockito:mockito-core to v5.8.0 (release/4.2.x)
by <a href="https://github.com/renovate"><code>@​renovate</code></a> in
<a
href="https://redirect.github.com/dropwizard/metrics/pull/3784">dropwizard/metrics#3784</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/dropwizard/metrics/compare/v4.2.22...v4.2.23">https://github.com/dropwizard/metrics/compare/v4.2.22...v4.2.23</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/dropwizard/metrics/commit/46cf51d8408a4a2d81aa84767d4f53b5257c4988"><code>46cf51d</code></a>
[maven-release-plugin] prepare release v4.2.23</li>
<li><a
href="https://github.com/dropwizard/metrics/commit/dde28a09a0faa9443b3e5f2357243ed28d965579"><code>dde28a0</code></a>
Update dependency org.mockito:mockito-core to v5.8.0 (<a
href="https://redirect.github.com/dropwizard/metrics/issues/3784">#3784</a>)</li>
<li><a
href="https://github.com/dropwizard/metrics/commit/03a15438682e1550df98a0f9c0ecb1e1f80fbe34"><code>03a1543</code></a>
Update dependency org.checkerframework:checker-qual to v3.41.0 (<a
href="https://redirect.github.com/dropwizard/metrics/issues/3782">#3782</a>)</li>
<li><a
href="https://github.com/dropwizard/metrics/commit/dae4a8cf30683968cee4c2cc61c6e9ac1346d50a"><code>dae4a8c</code></a>
Update logback14.version to v1.4.14 (<a
href="https://redirect.github.com/dropwizard/metrics/issues/3781">#3781</a>)</li>
<li><a
href="https://github.com/dropwizard/metrics/commit/38c43398b4c60d7b8d555676dc45840518412f2d"><code>38c4339</code></a>
Update jetty12.version to v12.0.4 (<a
href="https://redirect.github.com/dropwizard/metrics/issues/3778">#3778</a>)</li>
<li><a
href="https://github.com/dropwizard/metrics/commit/4c90ccdf3a4928837eba14c1b45db8fb53d12907"><code>4c90ccd</code></a>
Update logback13.version to v1.3.14 (<a
href="https://redirect.github.com/dropwizard/metrics/issues/3780">#3780</a>)</li>
<li><a
href="https://github.com/dropwizard/metrics/commit/6217e67579f80eb17da62100e63e5e48021af741"><code>6217e67</code></a>
Update logback.version to v1.2.13</li>
<li><a
href="https://github.com/dropwizard/metrics/commit/da71539d0956a36f3ccde7cc05c2e891e4dc76c9"><code>da71539</code></a>
Update dependency org.glassfish.jersey:jersey-bom to v3.1.4</li>
<li><a
href="https://github.com/dropwizard/metrics/commit/eb8e31d655aa450cd3152f5eac2e02b9df53948d"><code>eb8e31d</code></a>
Update dependency org.apache.maven.plugins:maven-javadoc-plugin to
v3.6.3</li>
<li><a
href="https://github.com/dropwizard/metrics/commit/40f1fadf77e11c76943de718777351a06c4224f2"><code>40f1fad</code></a>
Update dependency org.apache.httpcomponents.client5:httpclient5 to
v5.2.3</li>
<li>Additional commits viewable in <a
href="https://github.com/dropwizard/metrics/compare/v4.2.22...v4.2.23">compare
view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.dropwizard.metrics:metrics-core&package-manager=gradle&previous-version=4.2.22&new-version=4.2.23)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…19.1 (opensearch-project#3898)

Bumps
[com.google.googlejavaformat:google-java-format](https://github.com/google/google-java-format)
from 1.18.1 to 1.19.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/google-java-format/releases">com.google.googlejavaformat:google-java-format's
releases</a>.</em></p>
<blockquote>
<h2>v1.19.1</h2>
<h2>Changes</h2>
<ul>
<li>Fix support for Java 21 features by enabling JDK 21 for release
builds (<a
href="https://redirect.github.com/google/google-java-format/issues/1014">#1014</a>).</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/google-java-format/compare/v1.19.0...v1.19.1">https://github.com/google/google-java-format/compare/v1.19.0...v1.19.1</a></p>
<h2>v1.19.0</h2>
<h2>Changes</h2>
<p>This release adds initial support for more Java 21 features,
including:</p>
<ul>
<li>String templates (<a
href="https://redirect.github.com/google/google-java-format/issues/981">#981</a>)</li>
<li>Unnamed variables (<a
href="https://redirect.github.com/google/google-java-format/issues/978">#978</a>)</li>
<li>Pattern matching and guard clauses in switch expressions (<a
href="https://redirect.github.com/google/google-java-format/issues/937">#937</a>,
<a
href="https://redirect.github.com/google/google-java-format/issues/880">#880</a>,
<a
href="https://redirect.github.com/google/google-java-format/issues/983">#983</a>,
<a
href="https://redirect.github.com/google/google-java-format/issues/988">#988</a>)</li>
</ul>
<p>Other changes:</p>
<ul>
<li>Handle type annotations on method reference qualifiers
(53390d99b56edae23cfab5adcafd7df28d9984c8)</li>
<li>Avoid reflowing text blocks (<a
href="https://redirect.github.com/google/google-java-format/issues/976">#976</a>)</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/google-java-format/compare/v1.18.1...v1.19.0">https://github.com/google/google-java-format/compare/v1.18.1...v1.19.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/google/google-java-format/commit/8cafdb3772130ba92028b644bbe57dabec4ec839"><code>8cafdb3</code></a>
Release google-java-format 1.19.1</li>
<li><a
href="https://github.com/google/google-java-format/commit/8afdfcad56c41637fe946c80764355d6788099ba"><code>8afdfca</code></a>
chore: bump checkout/setup-java to v4 (use nodejs20 runtime)</li>
<li><a
href="https://github.com/google/google-java-format/commit/627c97e63c563ae04eca9aa1baeca99eac6c365a"><code>627c97e</code></a>
chore: fix <code>SyntaxWarning: invalid escape sequence +</code> for
py3.12</li>
<li><a
href="https://github.com/google/google-java-format/commit/0e7cc6ff3763621f3dd9d28fbac74b857bb73c19"><code>0e7cc6f</code></a>
Upgrade jdk used by release action to 21</li>
<li><a
href="https://github.com/google/google-java-format/commit/b5feefe4ab4dbdbba393d769eb1815f26896104b"><code>b5feefe</code></a>
Initial support for string templates</li>
<li><a
href="https://github.com/google/google-java-format/commit/dc8b461b8599df1f043d6a1efaadfc44dfa6b823"><code>dc8b461</code></a>
Make g-j-f native image more compatible</li>
<li><a
href="https://github.com/google/google-java-format/commit/b92435acb86e549300bf74bb75ff674db70682e7"><code>b92435a</code></a>
Support unnamed variables</li>
<li><a
href="https://github.com/google/google-java-format/commit/430ba3b0e237b746157a3392663da4b4bb7c733d"><code>430ba3b</code></a>
Initial support for pattern matching in switches</li>
<li><a
href="https://github.com/google/google-java-format/commit/b86c508be5f42e7ed0d55cd1abe2c04d2db66676"><code>b86c508</code></a>
Add support for guard clauses in Java 21 switch expressions</li>
<li><a
href="https://github.com/google/google-java-format/commit/ad771541474eebceb2c6666cb61d4836bf6d8560"><code>ad77154</code></a>
Bump Guava to 32.1.3</li>
<li>Additional commits viewable in <a
href="https://github.com/google/google-java-format/compare/v1.18.1...v1.19.1">compare
view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.google.googlejavaformat:google-java-format&package-manager=gradle&previous-version=1.18.1&new-version=1.19.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…4.0 (opensearch-project#3897)

Bumps
[com.google.errorprone:error_prone_annotations](https://github.com/google/error-prone)
from 2.23.0 to 2.24.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/error-prone/releases">com.google.errorprone:error_prone_annotations's
releases</a>.</em></p>
<blockquote>
<h2>Error Prone 2.24.0</h2>
<p>New checks:</p>
<ul>
<li><a
href="https://errorprone.info/bugpattern/MultipleNullnessAnnotations"><code>MultipleNullnessAnnotations</code></a>:
Discourage multiple nullness annotations</li>
<li><a
href="https://errorprone.info/bugpattern/NullableTypeParameter"><code>NullableTypeParameter</code></a>:
Discourage nullness annotations on type parameters</li>
<li><a
href="https://errorprone.info/bugpattern/NullableWildcard"><code>NullableWildcard</code></a>:
Discourage nullness annotations on wildcards</li>
<li><a
href="https://errorprone.info/bugpattern/SuperCallToObjectMethod"><code>SuperCallToObjectMethod</code></a>:
Generalization of <code>SuperEqualsIsObjectEquals</code>, now covers
<code>hashCode</code></li>
</ul>
<p>Full Changelog: <a
href="https://github.com/google/error-prone/compare/v2.23.0...v2.24.0">https://github.com/google/error-prone/compare/v2.23.0...v2.24.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/google/error-prone/commit/2cc850485e861ab415a75223bb722284de39fd8c"><code>2cc8504</code></a>
Release Error Prone 2.24.0</li>
<li><a
href="https://github.com/google/error-prone/commit/21c190a6fc76f3ad3c895639dc66b7a3f570c55d"><code>21c190a</code></a>
Document that javadoc shouldn't appear between annotations and the
documented...</li>
<li><a
href="https://github.com/google/error-prone/commit/d272dfa8da5f6ed09bb97acc153f9a7169185ab7"><code>d272dfa</code></a>
Automated rollback of commit
654d1dbf1e6dd652cd6e8ca003643ddf02266ec2.</li>
<li><a
href="https://github.com/google/error-prone/commit/654d1dbf1e6dd652cd6e8ca003643ddf02266ec2"><code>654d1db</code></a>
Handle Joiner.on(...) in AbstractToString.</li>
<li><a
href="https://github.com/google/error-prone/commit/da7be27b3c4a9f7d232072fdf3dc95e553156b6d"><code>da7be27</code></a>
Descend into VariableTrees when looking for variables to check.</li>
<li><a
href="https://github.com/google/error-prone/commit/affa37ac76a9bd726e46ad6108a707436fdfeded"><code>affa37a</code></a>
Do not flag unused parameters on <em>abstract</em> methods.</li>
<li><a
href="https://github.com/google/error-prone/commit/d78dd6d355db050d1420b2b88068566f515cfd1e"><code>d78dd6d</code></a>
Don't report NonFinalStaticField findings for fields modified in
`@BeforeClas...</li>
<li><a
href="https://github.com/google/error-prone/commit/aadfdc3094310639c5e2b5ebe0119dc672910f84"><code>aadfdc3</code></a>
WellKnownThreadSafety: Add common PKIX types to known thread-safe
list.</li>
<li><a
href="https://github.com/google/error-prone/commit/ac52ca90fe3b84ed64026cdda243fb0c44afecbd"><code>ac52ca9</code></a>
AutoValueFinalMethods: support method-level suppression.</li>
<li><a
href="https://github.com/google/error-prone/commit/336323ab42c947ed71e395ba4c85956d36db3a0a"><code>336323a</code></a>
Import eisop/checker-framework from GitHub.</li>
<li>Additional commits viewable in <a
href="https://github.com/google/error-prone/compare/v2.23.0...v2.24.0">compare
view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.google.errorprone:error_prone_annotations&package-manager=gradle&previous-version=2.23.0&new-version=2.24.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
…arch-project#3904)

Bumps org.apache.camel:camel-xmlsecurity from 3.21.3 to 3.22.0.

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.camel:camel-xmlsecurity&package-manager=gradle&previous-version=3.21.3&new-version=3.22.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
Signed-off-by: Prabhas Kurapati <prabhask@berkeley.edu>
@prabhask5 prabhask5 force-pushed the pk-remove-transport-config branch from 81c05bd to 503bf68 Compare January 11, 2024 06:23
Signed-off-by: Prabhas Kurapati <66924475+prabhask5@users.noreply.github.com>
@prabhask5 prabhask5 closed this Jan 11, 2024
@prabhask5 prabhask5 deleted the pk-remove-transport-config branch July 10, 2024 17:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

9 participants