Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the maven group across 2 directories with 3 updates #50

Open
wants to merge 1 commit into
base: wildfirechat
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Sep 30, 2024

Bumps the maven group with 3 updates in the /broker directory: com.google.protobuf:protobuf-java, com.hazelcast:hazelcast and com.h2database:h2.
Bumps the maven group with 1 update in the /common directory: com.google.protobuf:protobuf-java.

Updates com.google.protobuf:protobuf-java from 3.25.3 to 3.25.5

Commits
  • 9d0ec0f Updating version.json and repo version numbers to: 25.5
  • 4a197e7 Merge pull request #18387 from protocolbuffers/cp-lp-25
  • b5a7cf7 Remove RecursiveGroup test case which doesn't exist in 25.x pre-Editions
  • f000b7e Fix merge conflict by adding optional label to proto2 unittest_lite.proto
  • 4728531 Add recursion check when parsing unknown fields in Java.
  • 850fcce Internal change
  • b704498 Internal change
  • e673479 Fix cord handling in DynamicMessage and oneofs. (#18375)
  • 8a60b65 Merge pull request #17704 from protocolbuffers/cp-segv
  • 94a2663 Fixed a SEGV when deep copying a non-reified sub-message.
  • Additional commits viewable in compare view

Updates com.hazelcast:hazelcast from 3.11.5 to 5.3.5

Release notes

Sourced from com.hazelcast:hazelcast's releases.

v5.3.5

This document lists the enhancements, fixed issues, and removed or deprecated features for Hazelcast Platform 5.3.5 release. The numbers in the square brackets refer to the issues and pull requests in Hazelcast's GitHub repository.

NOTE: Due to an error in the tooling, the Platform releases 5.3.3 and 5.3.4 needed to be skipped numerically.

Enhancements

  • Improved the permission checks by fixing the CVE-2023-45859 and CVE-2023-45860 vulnerabilities.
  • Changed the exception type from CancellationException to CancellationByUserException in case the user cancels a job before it is initialized. #25452
  • Updated the versions of the following dependencies
    • gRPC to 1.57.0, #25430
    • Netty to 4.1.100, #25670
    • Avro to 1.1.13, #25659
    • Snappy Java to 1.1.10.5
    • Elasticsearch to 7.17.13, #25660
  • Renamed the service port for Hazelcast clusters deployed in Kubernetes environments as hazelcast. Previously, the name was hazelcast-service-port causing the member auto-discovery (for embedded deployments) to fail. #24834

Fixes

  • Fixed an issue where the map entries' metadata, such as time-to-live and expiration, was not replicated correctly over WAN after updating existing entries. #25505
  • Fixed an issue where the member list was not updated after a cluster failover scenario. #25504
  • Fixed a memory leak issue happening in Hazelcast members and clients while destroying fenced locks. #25421

Removed/Deprecated Features

  • Removed the evaluation tool (to try out Platform 5.x features for IMDG 3.x users) and the relevant IMDG 3.x JAR libraries from Hazelcast Platform distributions. #25663

v5.3.2

This document lists the enhancements and fixed issues for Hazelcast Platform 5.3.2 release. The numbers in the square brackets refer to the issues and pull requests in Hazelcast's GitHub repository.

Enhancements

  • Updated the Janino dependency version to 3.1.10. #25094

Fixes

  • Renamed the service port for Hazelcast clusters deployed in Kubernetes environments as hazelcast. Previously, the name was hazelcast-service-port causing the member auto-discovery (for embedded deployments) to fail. #25228
  • Fixed an issue where the getDistributedObjects() was returning inconsistent results when multiple members are simultaneously joining to the cluster. #25153
  • Fixed an issue where the Hot Restart procedure was failing on Hazelcast Viridian, when the cluster is in the FROZEN state. #25081
  • Fixed an issue where the retry mechanism for the communications between CP leader and followers was generating too many retries, due to incorrect backoff timeout reset behavior. #25074

v5.3.1

This document lists the new features, enhancements, fixed issues and, removed or deprecated features for Hazelcast Platform 5.3.1 release. The numbers in the square brackets refer to the issues and pull requests in Hazelcast's GitHub repository.

Enhancements

  • Updated the version of jackson-core dependency to 2.15.2. #24727

... (truncated)

Commits

Updates com.h2database:h2 from 1.4.197 to 2.2.220

Release notes

Sourced from com.h2database:h2's releases.

Version 2.2.220

Changes since 2.1.214 release:

... (truncated)

Commits

Updates com.google.protobuf:protobuf-java from 2.5.0 to 3.25.5

Commits
  • 9d0ec0f Updating version.json and repo version numbers to: 25.5
  • 4a197e7 Merge pull request #18387 from protocolbuffers/cp-lp-25
  • b5a7cf7 Remove RecursiveGroup test case which doesn't exist in 25.x pre-Editions
  • f000b7e Fix merge conflict by adding optional label to proto2 unittest_lite.proto
  • 4728531 Add recursion check when parsing unknown fields in Java.
  • 850fcce Internal change
  • b704498 Internal change
  • e673479 Fix cord handling in DynamicMessage and oneofs. (#18375)
  • 8a60b65 Merge pull request #17704 from protocolbuffers/cp-segv
  • 94a2663 Fixed a SEGV when deep copying a non-reified sub-message.
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the maven group with 3 updates in the /broker directory: [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf), [com.hazelcast:hazelcast](https://github.com/hazelcast/hazelcast) and [com.h2database:h2](https://github.com/h2database/h2database).
Bumps the maven group with 1 update in the /common directory: [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf).


Updates `com.google.protobuf:protobuf-java` from 3.25.3 to 3.25.5
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](protocolbuffers/protobuf@v3.25.3...v3.25.5)

Updates `com.hazelcast:hazelcast` from 3.11.5 to 5.3.5
- [Release notes](https://github.com/hazelcast/hazelcast/releases)
- [Commits](hazelcast/hazelcast@v3.11.5...v5.3.5)

Updates `com.h2database:h2` from 1.4.197 to 2.2.220
- [Release notes](https://github.com/h2database/h2database/releases)
- [Commits](h2database/h2database@version-1.4.197...version-2.2.220)

Updates `com.google.protobuf:protobuf-java` from 2.5.0 to 3.25.5
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](protocolbuffers/protobuf@v3.25.3...v3.25.5)

---
updated-dependencies:
- dependency-name: com.google.protobuf:protobuf-java
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.hazelcast:hazelcast
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.h2database:h2
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.protobuf:protobuf-java
  dependency-type: direct:production
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Sep 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants