fix(deps): update all dependencies #526
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #526 +/- ##
===========================================
- Coverage 10.24% 8.66% -1.58%
+ Complexity 1682 1257 -425
===========================================
Files 5941 5941
Lines 56127 56127
Branches 261 261
===========================================
- Hits 5752 4866 -886
- Misses 50210 51127 +917
+ Partials 165 134 -31 ☔ View full report in Codecov by Sentry. |
renovate
bot
force-pushed
the
renovate/all
branch
10 times, most recently
from
f51ca10 to
9f9ef68
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/all
branch
from
9f9ef68 to
5134ad4
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/all
branch
7 times, most recently
from
d5bc452 to
3996144
Compare
renovate
bot
force-pushed
the
renovate/all
branch
from
3996144 to
0c80248
Compare
renovate
bot
force-pushed
the
renovate/all
branch
7 times, most recently
from
02dc900 to
2ac03b6
Compare
renovate
bot
force-pushed
the
renovate/all
branch
7 times, most recently
from
eaad6bd to
f7e8082
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/all
branch
from
f7e8082 to
66f070c
Compare
renovate
bot
force-pushed
the
renovate/all
branch
from
66f070c to
cfe3268
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
0.3.5->0.3.63.24.2->3.25.11.2023.12->1.2023.132.16.0->2.16.12.16.0->2.16.12.16.0->2.16.12.16.0->2.16.13.25.7->3.25.83.6.0->3.7.01.1.13->1.1.158.7.0->8.8.01.32.0->1.34.05.2.3->5.31.1.13->1.1.151.9.21->1.9.22Release Notes
spotify/completable-futures (com.spotify:completable-futures)
v0.3.6What's Changed
New Contributors
Full Changelog: spotify/completable-futures@v0.3.5...v0.3.6
javaparser/javaparser (com.github.javaparser:javaparser-symbol-solver-core)
v3.25.8issues resolved
Added
Changed
Fixed
Developer Changes
Uncategorised
❤️ Contributors
Thank You to all contributors who worked on this release!
square/okio (com.squareup.okio:okio)
v3.7.02023-12-16
Timeout.cancel()prevents a timeout from firing.watchosX86Kotlin/Native target. From [the Kotlin blog][watchosX86],‘This is an obsolete simulator for Intel Macs. Use the watchosX64 target instead.’
watchosDeviceArm64Kotlin/Native target.TimeoutAPIs that acceptkotlin.time.Duration.reactor/reactor-netty (io.projectreactor.netty:reactor-netty-core)
v1.1.15Reactor Netty1.1.15is part of2022.0.15Release Train and2023.0.2Release Train.This is a recommended update for all
Reactor Netty 1.1.xusers.What's Changed
✨ New features and improvements
Reactor Corev3.5.14by @chemicL in0716665, see release notesNettyv4.1.104.Finalby @violetagg in #2998Netty QUIC Codecv0.0.55.Finalby @violetagg in #3001🐞 Bug fixes
NullPointerExceptioninTlsMetricsHandlerwhen used together withSniHandlerby @violetagg in #3023📖 Documentation, Tests and Build
dependabotconfiguration by @violetagg in #3020,cfea140,24b1c9a,300bf66🆙 Build/Test Dependency Upgrades
tomcat-embed-coreto version9.0.84by @dependabot in #2997github/codeql-actionto version3by @dependabot in #2999jackson-databindto version2.16.1by @dependabot in #3007build-info-extractor-gradleto version4.33.10by @dependabot in #3008brotli4jto version1.15.0by @dependabot in #3010assertj-coreto version3.25.1by @dependabot in #3012hoverfly-java-junit5to version0.16.0by @dependabot in #3018braveVersionto version5.18.1by @dependabot in #3021Full Changelog: reactor/reactor-netty@v1.1.14...v1.1.15
v1.1.14Reactor Netty1.1.14is part of2022.0.14Release Train and2023.0.1Release Train.This is a recommended update for all
Reactor Netty 1.1.xusers.What's Changed
✨ New features and improvements
Reactor Corev3.5.13by @violetagg in5f09da8, see release notesnetty-incubator-transport-native-io_uringv0.0.24.Finalby @dependabot in #2977Netty QUIC Codecv0.0.54.Finalby @violetagg in #2991client_no_context_takeoverandserver_no_context_takeoverextension parameters by @violetagg in #2979pending acquireoperation latency by @violetagg in #2980🐞 Bug fixes
RFC 6265compliance when sending multiple cookies by @violetagg in #2994📖 Documentation, Tests and Build
Reactor Coreversion incheck_reactor_core_3.6_snapshots.ymlby @violetagg in #2971🆙 Build/Test Dependency Upgrades
tomcat-embed-coreto version9.0.83by @dependabot in #2974jackson-databindto version2.16.0by @dependabot in #2975actions/setup-javato version4by @dependabot in #2989logback-classicto version1.2.13by @dependabot in #2990org.gradle.test-retryto version1.5.8by @dependabot in #2993Full Changelog: reactor/reactor-netty@v1.1.13...v1.1.14
newrelic/newrelic-java-agent (com.newrelic.agent.java:newrelic-api)
v8.8.0: Version 8.8.0New features and improvements
Add support for Jetty 12, including Jetty’s implementation of the Jakarta EE 8, 9, and 10 specs. 1621
Add support for Vert.x versions 4.0.0 through 4.4.x 1588
Add instrumentation for graphql-java 21 1454
Instrument r2dbc-postgresql 0.9.2 till latest 1413
Reintroduce the legacy HTTP Attributes that were removed in v8.0.0 to support customers with alerts and dashboards that require them 1671
The attributes are:
httpResponseCodehttpResponseMessageresponse.statusresponse.statusMessageAttribute reporting is configurable via the following means.
YAML:
System property:
-Dnewrelic.config.attributes.http_attribute_mode=bothEnvironment variable:
NEW_RELIC_ATTRIBUTES_HTTP_ATTRIBUTE=bothThe configuration options are:
standard: The agent will send new standard attributes. This configuration is recommended but requires that any alerts or dashboards using attributes be updated to use these new attributes. This setting will reduce the amount of ingest used for attribute reporting.legacy: The agent will send the legacy attributes referenced above. Customers with alerts or dashboard requiring these attributes can continue to be used as-is. This setting will reduce the amount of ingest used for attribute reporting.both: This is the default configuration, the agent will send BOTH legacy AND standard HTTP attributes. This configuration was intended to support customers that are unable to modify their alerts or dashboards but this configuration will increase data ingest.Add an interface for our error API. Our error API can now be called via the code
NewRelic.getAgent().getErrorApi()1577Add log4j2 JsonLayout support and support log4j2 till latest. 1545
Add httpstatus in the external segment for Spring Webclient 1610
Enable slow transaction detection by default and bump the threshold to 10 minutes 1629
Add support for string formatting with JBoss Logging. 1650
Add logic to remove specific classes from being excluded from being weaved if the IAST security feature is enabled. 1453
The affected classes belong in the following formats:
^java/security/.*^javax/crypto/.*These are crypto classes which can cause class circularity errors if they get too far along in the class transformer.^net/sf/saxon.*If you wish to re-include these excluded rules, you can do so via the following means.
YAML:
System property:
-Dnewrelic.config.class_transformer.excludes=^javax/crypto/.*,^java/security/.*,^net/sf/saxon.*Environment variable:
NEW_RELIC_CLASS_TRANSFORMER_EXCLUDES=^javax/crypto/.*,^java/security/.*,^net/sf/saxon.*Prevent license_key value from being written to the agent logs when using debug and/or audit_mode logging 1653
IAST
Fixes
Fix transaction naming in Spring controllers with a CGLIB proxy. Transactions now use the actual class name as opposed to the proxied class name. 1574
Fix a
NullPointerExceptioncaused by ServletContext in servlet instrumentation modules. 1636Fix a memory leak caused by Lettuce instrumentation. Duplicate code for transaction linking has been removed from the Lettuce instrumentation and is handled by netty-reactor instead. 1608
Fix a bug where invalidating a license key causes a memory leak. Reconnection tasks are now capped in the event of a
LicenseException. 1606Fix a
NullPointerExceptioncaused by RPMServiceManager 1604Add a workaround for a memory leak that may occur in rare scenarios with instrumentation using the legacy async API in the Java Agent (which async servlets and Jetty Continuations use). 1555
The option can be configured via the following means:
Agent config file (this will update dynamically if the config file is changed)
System Property
-Dnewrelic.config.legacy_async_api_skip_suspend=trueEnvironment Variable
NEW_RELIC_LEGACY_ASYNC_API_SKIP_SUSPEND=trueIAST
DynamoDB v2 issue: missing attribute values for conditionCheck method in case of transactWriteItems operation on DynamoDB 142
Fixed an Insecure cookie attack vulnerability. 142
Never print LicenseKey 142
Deprecations
The following instrumentation modules are deprecated and will be removed in the next major release:
aws-wrap-0.7.0java.completable-future-jdk8play-2.3spring-3.0.0netty-3.4Struts v1Full Changelog: newrelic/newrelic-java-agent@v8.7.0...v8.8.0
open-telemetry/opentelemetry-java (io.opentelemetry:opentelemetry-api)
v1.34.0API
(#6095)
SDK
Traces
(#6112)
(#6057)
Metrics
(#5998)
(#6093)
(#6024)
Exporters
(#5990)
(#6045)
io.prometheus:prometheus-metrics-exporter-httpserver, addexponential Histogram support
(#6015)
(#6110)
(#6082)
Extensions
(#6105)
v1.33.0API
(#6044)
Incubator
(#6017)
(#6003)
SDK
Exporters
(#5941)
(#5938)
TlsUtil#decodePem
(#6034)
(#6004)
Extensions
(#5986)
(#5923)
Testing
(#6048)
Project Tooling
(#5973)
(#5910)
(#5983)
Configuration
📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate. View repository job log here.