Update Maven dependencies#5599
Open
renovate[bot] wants to merge 1 commit intomasterfrom
Open
Conversation
Contributor
|
Renovate Jira issue ID: SONARJAVA-6350 |
Contributor
Summary
Routine Maven dependency updates across the project. This PR updates 20+ dependencies including build plugins and runtime libraries: Key updates:
Most updates are patch-level or minor version increments. JUnit jumps from 5.11.x to 5.14.x, a larger gap that warrants verification. What reviewers should knowFor reviewers:
|
![sonar-review-alpha[bot]](https://avatars.githubusercontent.com/in/3025063?s=60&v=4){kind=small}
Comment on lines
132
to
143
| <artifactItem> | ||
| <groupId>commons-collections</groupId> | ||
| <artifactId>commons-collections</artifactId> | ||
| <version>3.2.1</version> | ||
| <version>3.2.2</version> | ||
| <classifier>sources</classifier> | ||
| <outputDirectory>${project.build.directory}/test-projects/commons-collections-3.2.1/src</outputDirectory> | ||
| </artifactItem> | ||
| <artifactItem> | ||
| <groupId>commons-collections</groupId> | ||
| <artifactId>commons-collections</artifactId> | ||
| <version>3.2.1</version> | ||
| <version>3.2.2</version> | ||
| <outputDirectory>${project.build.directory}/test-projects/commons-collections-3.2.1/bin</outputDirectory> |
Contributor
There was a problem hiding this comment.
The artifact version was bumped from 3.2.1 to 3.2.2, but both outputDirectory paths still embed commons-collections-3.2.1. The test class CommonsCollectionsTest.java:27 resolves target/test-projects/commons-collections-3.2.1 as its PROJECT_DIR and asserts hard-coded metric counts (412 classes, 26 323 ncloc, …) that were calibrated against 3.2.1 sources.
At runtime, Maven will download the 3.2.2 sources/jar into the old directory name, so the test runs, but it analyses 3.2.2 code while expecting 3.2.1 numbers. If the source changed between those patch releases (commons-collections 3.2.2 was a security patch that did touch source files), the assertions will fail. At minimum, the directory name misrepresents what version is actually being tested.
Fix:
- Update the output directory names here to
commons-collections-3.2.2(suggestion below). - Update
CommonsCollectionsTest.java:27to referencecommons-collections-3.2.2. - Run the test locally and update the hard-coded metric counts if they differ.
Suggested change
| <artifactItem> | |
| <groupId>commons-collections</groupId> | |
| <artifactId>commons-collections</artifactId> | |
| <version>3.2.1</version> | |
| <version>3.2.2</version> | |
| <classifier>sources</classifier> | |
| <outputDirectory>${project.build.directory}/test-projects/commons-collections-3.2.1/src</outputDirectory> | |
| </artifactItem> | |
| <artifactItem> | |
| <groupId>commons-collections</groupId> | |
| <artifactId>commons-collections</artifactId> | |
| <version>3.2.1</version> | |
| <version>3.2.2</version> | |
| <outputDirectory>${project.build.directory}/test-projects/commons-collections-3.2.1/bin</outputDirectory> | |
| <artifactItem> | |
| <groupId>commons-collections</groupId> | |
| <artifactId>commons-collections</artifactId> | |
| <version>3.2.2</version> | |
| <classifier>sources</classifier> | |
| <outputDirectory>${project.build.directory}/test-projects/commons-collections-3.2.2/src</outputDirectory> | |
| </artifactItem> | |
| <artifactItem> | |
| <groupId>commons-collections</groupId> | |
| <artifactId>commons-collections</artifactId> | |
| <version>3.2.2</version> | |
| <outputDirectory>${project.build.directory}/test-projects/commons-collections-3.2.2/bin</outputDirectory> | |
| </artifactItem> |
- Mark as noise
Comment on lines
146
to
158
| <artifactItem> | ||
| <groupId>org.apache.struts</groupId> | ||
| <artifactId>struts-core</artifactId> | ||
| <version>1.3.9</version> | ||
| <version>1.3.10</version> | ||
| <classifier>sources</classifier> | ||
| <outputDirectory>${project.build.directory}/test-projects/struts-core-1.3.9/src</outputDirectory> | ||
| </artifactItem> | ||
| <artifactItem> | ||
| <groupId>org.apache.struts</groupId> | ||
| <artifactId>struts-core</artifactId> | ||
| <version>1.3.9</version> | ||
| <version>1.3.10</version> | ||
| <outputDirectory>${project.build.directory}/test-projects/struts-core-1.3.9/bin</outputDirectory> | ||
| </artifactItem> |
Contributor
There was a problem hiding this comment.
Same issue as the commons-collections block above: the artifact version was bumped to 1.3.10 but both outputDirectory paths still say struts-core-1.3.9. StrutsTest.java:27 resolves target/test-projects/struts-core-1.3.9 and asserts metric counts (146 classes, 14 007 ncloc, …) that were calibrated against 1.3.9 source.
Fix:
- Update the output directory names here to
struts-core-1.3.10(suggestion below). - Update
StrutsTest.java:27to referencestruts-core-1.3.10. - Run the test and update the hard-coded metric assertions if the source changed.
Suggested change
| <artifactItem> | |
| <groupId>org.apache.struts</groupId> | |
| <artifactId>struts-core</artifactId> | |
| <version>1.3.9</version> | |
| <version>1.3.10</version> | |
| <classifier>sources</classifier> | |
| <outputDirectory>${project.build.directory}/test-projects/struts-core-1.3.9/src</outputDirectory> | |
| </artifactItem> | |
| <artifactItem> | |
| <groupId>org.apache.struts</groupId> | |
| <artifactId>struts-core</artifactId> | |
| <version>1.3.9</version> | |
| <version>1.3.10</version> | |
| <outputDirectory>${project.build.directory}/test-projects/struts-core-1.3.9/bin</outputDirectory> | |
| </artifactItem> | |
| <artifactItem> | |
| <groupId>org.apache.struts</groupId> | |
| <artifactId>struts-core</artifactId> | |
| <version>1.3.10</version> | |
| <classifier>sources</classifier> | |
| <outputDirectory>${project.build.directory}/test-projects/struts-core-1.3.10/src</outputDirectory> | |
| </artifactItem> | |
| <artifactItem> | |
| <groupId>org.apache.struts</groupId> | |
| <artifactId>struts-core</artifactId> | |
| <version>1.3.10</version> | |
| <outputDirectory>${project.build.directory}/test-projects/struts-core-1.3.10/bin</outputDirectory> | |
| </artifactItem> |
- Mark as noise
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
3.4.0→3.5.02.13.1→2.14.02.19.0→2.22.06.2.11→6.2.185.11.2→5.14.433.4.8-jre→33.6.0-jre3.5.1→3.6.21.7.30→1.7.361.7.30→1.7.365.18.0→5.23.05.18.0→5.23.00.8.13→0.8.141.3.9→1.3.103.2.1→3.2.21.6.3→1.13.03.5.0→3.6.13.2.0→3.6.39.0.112→9.0.1173.13.0→3.15.0Release Notes
spring-projects/spring-framework (org.springframework:spring-expression)
v6.2.18Compare Source
⭐ New Features
SpringValidatorAdapterandMethodValidationAdapterperformance #36624@Deprecated(forRemoval = true) for deleted in 7.0 #36591methodIdentification()inCacheAspectSupportfor removal #36576🐞 Bug Fixes
CoroutineUtils#36643@Sqlfails ifDataSourceis wrapped in aTransactionAwareDataSourceProxy#36630MergedAnnotationdoes not useClassLoaderfor method or field #36614AnnotationBeanNameGeneratorfails when an annotation references a non-existent class #36588FileSystemResourcedoes not strictly follow theResource#isReadable()contract #36585DefaultJmsListenerContainermay hang in an endless loop indoShutdown#36511📔 Documentation
spring.profiles.activeis ignored by@ActiveProfiles#36636MergedAnnotation.asAnnotationAttributes()Javadoc incorrectly states that it creates an immutable map #36568@MockitoBean, etc.) #36542🔨 Dependency Upgrades
v6.2.17Compare Source
⭐ New Features
ResourceHandlerUtilsinScriptTemplateView#36459ScriptTemplateViewTests#36457ConfigurationClassBeanDefinitionReader#36454AbstractTestContextBootstrapper#36431@javax.validation.Constraintfrom convention-based annotation attribute override check #36412MediaType(MediaType, Charset)constructor #36351🐞 Bug Fixes
📔 Documentation
@FallbackalongsidePrimaryin the reference manual and@BeanJavadoc #36441BeanPostProcessorandBeanFactoryPostProcessor#36436UriComponentsBuilderand polish examples #36406@Configurationclasses over XML and Groovy in testing chapter #36394🔨 Dependency Upgrades
v6.2.16Compare Source
⭐ New Features
DataBufferUtils.write()with NettyDataBuffer on JDK 25 hangs indefinitely #36189🐞 Bug Fixes
LocalEntityManagerFactoryBean#setDataSourcework on Hibernate as well as EclipseLink #36272System.exiton startup (against multiple shutdown hooks) #36268Netty4HeadersAdapter.removereturns empty list instead ofnullfor non-existing key #36227EclipseLinkConnectionHandlecan fail against transaction isolation race condition #36166SimpleBeanInfoFactoryfails to reliably resolve read/write methods in type hierarchies with unresolved generics #36026📔 Documentation
LocalContainerEntityManagerFactoryBean#setPersistenceUnitNamejavadoc #36206@GetMapping("/base") is combined with method level@GetMapping("/") #36200getErrors()withgetBindingResult()in examples #36172🔨 Dependency Upgrades
v6.2.15Compare Source
⭐ New Features
TransactionSynchronizationManager#registerSynchronization#35922🐞 Bug Fixes
ConcurrentReferenceHashMap#computeIfAbsentmay cause context initialisation deadlock #35945@Lazyinjection point #35918@Bean-level qualifier annotation #35909📔 Documentation
sessionTransactedflag for local versus global transaction #35898🔨 Dependency Upgrades
v6.2.14Compare Source
⭐ New Features
resetCaches()method to Caffeine/ConcurrentMapCacheManager #35841UnmodifiableMultiValueMap#35831Spliteratorcharacteristics inConcurrentReferenceHashMap#35828🐞 Bug Fixes
getCacheNames()concurrent access in NoOpCacheManager #35844BeanNameAwareand co. #35838📔 Documentation
@seeJavadoc references to deprecated PropertiesBeanDefinitionReader #35854v6.2.13Compare Source
⭐ New Features
selectandoptionsJSP form tags #35783🐞 Bug Fixes
ConcurrentReferenceHashMapmisses dedicatedcomputeIfAbsent,computeIfPresent,compute,mergeimplementations #35794HttpServiceMethodsupport for Kotlin suspending functions returningFlow#35718BatchUpdateExceptionanymore #35717jibx-marshallerelement fromspring-oxm.xsd#35699Mapinjection fails against targetMapwith incomplete generics despite bean name or qualifier match #35690TEST_METHODExtensionContextScopeis not fully supported #35680isAutowirableConstructor(Executable, PropertyProvider)inTestConstructorUtilsand deprecate existing variants #35676getPubliclyAccessibleMethodIfPossible()returns hidden static method #35667📔 Documentation
Monotype #35786@NumberFormatJavadoc #35742TestContextsemantics #35716🔨 Dependency Upgrades
❤️ Contributors
Thank you to all the contributors who worked on this release:
@Anxton, @Artur-, @HJC96, @MoadElfatihi, @NYgomets, @cbsingh1, @dmitrysulman, @ekcom, and @scordio
v6.2.12Compare Source
⭐ New Features
ConfigurationClassBeanDefinitionReader#35631TransientDataAccessExceptionbySQLStateSQLExceptionTranslatorforBatchUpdateException#35547CandidateComponentsIndexandCandidateComponentsIndexLoader#35472🐞 Bug Fixes
producesmedia types in@ExceptionHandler#35587AbstractTestNGSpringContextTestsis not thread-safe regarding tracked exceptions #35528JvmDefault(default in Kotlin 2.2.20+) #35487📔 Documentation
WebSocketHandler#35572idrefexample in reference manual #35560🔨 Dependency Upgrades
❤️ Contributors
Thank you to all the contributors who worked on this release:
@Entea, @IMurzich, @hosea, @maziyarbahramian, @mlichtblau, @nstdio, @reckart, and @reda-alaoui
mockito/mockito (org.mockito:mockito-core)
v5.23.0Compare Source
Changelog generated by Shipkit Changelog Gradle Plugin
5.23.0
Mockito.when@Nullable(#3503)v5.22.0Compare Source
Changelog generated by Shipkit Changelog Gradle Plugin
5.22.0
objectsingletons (#3652)v5.21.0Changelog generated by Shipkit Changelog Gradle Plugin
5.21.0
v5.20.0Compare Source
Changelog generated by Shipkit Changelog Gradle Plugin
5.20.0
v5.19.0Compare Source
Changelog generated by Shipkit Changelog Gradle Plugin
5.19.0
(#3681)
Configuration
📅 Schedule: (in timezone Europe/Berlin)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Never, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.