Skip to content

Releases: NHSDigital/validation-service-fhir-r4

v1.0.164-alpha

06 May 13:13
fa6f27a
Compare
Choose a tag to compare

Commit message

Bump fasterxml.version from 2.17.0 to 2.17.1 (#148)

Bumps fasterxml.version from 2.17.0 to 2.17.1.
Updates com.fasterxml.jackson.core:jackson-core from 2.17.0 to 2.17.1

Commits
  • cba40f1 [maven-release-plugin] prepare release jackson-core-2.17.1
  • d33c4b5 Prepare for 2.17.1 release
  • 2a4a6dc Fix #1256: revert #1117, default recycler pool again threadLocalPool() (for...
  • 7e57e5b Update branch designation for CI
  • 4b8d399 Part of #1260: write a manually run concurrency test to tease out problem wit...
  • 33c4260 Fixes #1262: Add diagnostic method pooledCount() in RecyclerPool (#1263)
  • c73bde2 Fix NumberInput.looksLikeValidNumber() implementation (#1241)
  • 1c656ae ...
  • 11e3bd7 update(tests): migrate remaining JUnit 4 code in core to JUnit 5 (#1248)
  • fff79ea update(tests): migrate JUnit 4 code to JUnit 5 in core.base64 to core.sym (#1...
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.17.0 to
2.17.1

Commits

Updates com.fasterxml.jackson.core:jackson-annotations from 2.17.0 to
2.17.1

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits
    that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after
    your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge
    and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating
    it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all
    of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)

Signed-off-by: dependabot[bot] [email protected]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Info

See code diff
Release workflow run

It was initialized by eps-autoapprove-dependabot[bot]

v1.0.163-alpha

24 Apr 10:34
3395a7c
Compare
Choose a tag to compare

Commit message

get tag when doing a release (#147)

Summary

  • Routine Change

Details

  • get the tag properly when doing a release

Info

See code diff
Release workflow run

It was initialized by anthony-nhs

v1.0.160-alpha

22 Apr 16:19
741ecc1
Compare
Choose a tag to compare

Commit message

Bump org.springframework.boot:spring-boot-starter-parent from 2.3.1.RELEASE to 3.2.5 (#142)

Bumps
org.springframework.boot:spring-boot-starter-parent
from 2.3.1.RELEASE to 3.2.5.

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v3.2.5

🐞 Bug Fixes

  • BindValidationFailureAnalyzer uses wrong target #40364
  • Log4j2LoggingSystem pollutes Log4j2's environment with a SpringEnvironmentPropertySource that is never removed #40326
  • When using Maven, configuring the spring-boot.excludes or spring-boot-includes user properties causes the build to fail with "Cannot find default setter" #40323
  • @ServletComponentScan does not register servlet components in a mock web environment #40321
  • Loading of custom deny-all filter can cause a StackOverflowError when deploying to Tomcat with Log4j2 configured to use a single JVM-wide logger context #40312
  • Jetty support doesn't set virtual thread name #40152
  • Executable JAR application startup is slower after 3.2.0 when Hibernate scanner is not disabled #40125
  • NoClassDefFoundError can be thrown from LaunchedClassLoader when threads are interrupted #40096

📔 Documentation

  • Producible's javadoc has the wrong link text for @WriteOperation and @DeleteOperation #40386
  • Clarify requirements for -parameters and constructor binding #40157

🔨 Dependency Upgrades

  • Upgrade to ActiveMQ 5.18.4 #40394
  • Upgrade to AspectJ 1.9.22 #40293
  • Upgrade to Awaitility 4.2.1 #40294
  • Upgrade to Byte Buddy 1.14.13 #40295
  • Upgrade to Groovy 4.0.21 #40296
  • Upgrade to Hazelcast 5.3.7 #40297
  • Upgrade to Jakarta Json Bind 3.0.1 #40298
  • Upgrade to Jersey 3.1.6 #40299
  • Upgrade to Jetty 12.0.8 #40300
  • Upgrade to jOOQ 3.18.14 #40301
  • Upgrade to Json-smart 2.5.1 #40302
  • Upgrade to Kafka 3.6.2 #40303
  • Upgrade to Lombok 1.18.32 #40304
  • Upgrade to Maven Invoker Plugin 3.6.1 #40305
  • Upgrade to Maven Source Plugin 3.3.1 #40306
  • Upgrade to Micrometer 1.12.5 #40207
  • Upgrade to Micrometer Tracing 1.2.5 #40208
  • Upgrade to MongoDB 4.11.2 #40307
  • Upgrade to Neo4j Java Driver 5.19.0 #40218
  • Upgrade to Netty 4.1.109.Final #40395
  • Upgrade to Pulsar Reactive 0.5.4 #40396
  • Upgrade to R2DBC Postgresql 1.0.5.RELEASE #40309
  • Upgrade to Reactor Bom 2023.0.5 #40209
  • Upgrade to SLF4J 2.0.13 #40397
  • Upgrade to Spring AMQP 3.1.4 #40210
  • Upgrade to Spring Authorization Server 1.2.4 #40211
  • Upgrade to Spring Data Bom 2023.1.5 #40212
  • Upgrade to Spring Framework 6.1.6 #40213
  • Upgrade to Spring GraphQL 1.2.6 #40310
  • Upgrade to Spring HATEOAS 2.2.2 #40376
  • Upgrade to Spring Integration 6.2.4 #40214

... (truncated)

Commits
  • b3a160d Release v3.2.5
  • f5b51ab Merge branch '3.1.x' into 3.2.x
  • 6b44072 Remove dependency on the git ref when creating releases
  • b13d006 Fix action that publishes to SDKman
  • f84a263 Merge branch '3.1.x' into 3.2.x
  • 56b59cd Fix action that publishes the Gradle plugin
  • 9a28ae1 Merge branch '3.1.x' into 3.2.x
  • 18ada7c Next development version (v3.1.12-SNAPSHOT)
  • 816b9b9 Merge branch '3.1.x' into 3.2.x
  • 8a22108 Use the version not the tag when creating the build name
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits
    that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after
    your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge
    and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating
    it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all
    o...
Read more

v1.0.159-alpha

22 Apr 16:11
c7a9dde
Compare
Choose a tag to compare

Commit message

Upgrade java, upgrade spring-boot, add more tests (#143)

Summary

  • Routine Change

Details

  • upgrade java to eclipse-temurin:21.0.2_13-jdk
  • use new tool to check for licenses to allow libraries with no license
    information
  • in the docker container use jlink to create a jre rather than a full
    java image
  • add Makefile targets and docker-compose file to run docker container
  • increase memory size used by java in the container
  • Updates spring boot to version 3.2.4
  • adds examples for testing validator

Signed-off-by: dependabot[bot] [email protected]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Info

See code diff
Release workflow run

It was initialized by anthony-nhs

v1.0.158-alpha

15 Apr 12:18
a113b11
Compare
Choose a tag to compare

Commit message

Bump io.github.oshai:kotlin-logging-jvm from 6.0.4 to 6.0.9 (#141)

Bumps
io.github.oshai:kotlin-logging-jvm
from 6.0.4 to 6.0.9.

Release notes

Sourced from io.github.oshai:kotlin-logging-jvm's releases.

6.0.9

What's Changed

Full Changelog: oshai/kotlin-logging@6.0.8...6.0.9

6.0.8

What's Changed

Full Changelog: oshai/kotlin-logging@6.0.7...6.0.8

6.0.7

Full Changelog: oshai/kotlin-logging@6.0.5...6.0.7

6.0.5

What's Changed

Full Changelog: oshai/kotlin-logging@6.0.4...6.0.5

Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits
    that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after
    your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge
    and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating
    it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all
    of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)

Signed-off-by: dependabot[bot] [email protected]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Info

See code diff
Release workflow run

It was initialized by eps-autoapprove-dependabot[bot]

v1.0.157-alpha

12 Apr 03:06
d1caf82
Compare
Choose a tag to compare

Commit message

Bump idna from 3.4 to 3.7 (#140)

Bumps idna from 3.4 to 3.7.

Release notes

Sourced from idna's releases.

v3.7

What's Changed

  • Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]

Thanks to Guido Vranken for reporting the issue.

Full Changelog: kjd/idna@v3.6...v3.7

Changelog

Sourced from idna's changelog.

3.7 (2024-04-11) ++++++++++++++++

  • Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]

Thanks to Guido Vranken for reporting the issue.

3.6 (2023-11-25) ++++++++++++++++

  • Fix regression to include tests in source distribution.

3.5 (2023-11-24) ++++++++++++++++

  • Update to Unicode 15.1.0
  • String codec name is now "idna2008" as overriding the system codec "idna" was not working.
  • Fix typing error for codec encoding
  • "setup.cfg" has been added for this release due to some downstream lack of adherence to PEP 517. Should be removed in a future release so please prepare accordingly.
  • Removed reliance on a symlink for the "idna-data" tool to comport with PEP 517 and the Python Packaging User Guide for sdist archives.
  • Added security reporting protocol for project

Thanks Jon Ribbens, Diogo Teles Sant'Anna, Wu Tingfeng for contributions to this release.

Commits
  • 1d365e1 Release v3.7
  • c1b3154 Merge pull request #172 from kjd/optimize-contextj
  • 0394ec7 Merge branch 'master' into optimize-contextj
  • cd58a23 Merge pull request #152 from elliotwutingfeng/dev
  • 5beb28b More efficient resolution of joiner contexts
  • 1b12148 Update ossf/scorecard-action to v2.3.1
  • d516b87 Update Github actions/checkout to v4
  • c095c75 Merge branch 'master' into dev
  • 60a0a4c Fix typo in GitHub Actions workflow key
  • 5918a0e Merge branch 'master' into dev
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits
    that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after
    your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge
    and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating
    it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all
    of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the
    Security Alerts
    page
    .

Signed-off-by: dependabot[bot] [email protected]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Info

See code diff
Release workflow run

It was initialized by eps-autoapprove-dependabot[bot]

v1.0.156-alpha

09 Apr 14:16
d0268a4
Compare
Choose a tag to compare

Commit message

Bump io.github.microutils:kotlin-logging from 1.12.0 to 2.0.5 (#139)

Bumps io.github.microutils:kotlin-logging from 1.12.0 to 6.0.4.

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits
    that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after
    your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge
    and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating
    it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all
    of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)

Signed-off-by: dependabot[bot] [email protected]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Anthony Brown [email protected]

Info

See code diff
Release workflow run

It was initialized by anthony-nhs

v-java-upgrade

10 Apr 07:51
c20e4fc
Compare
Choose a tag to compare
v-java-upgrade Pre-release
Pre-release

testing java upgrade

v1.0.155-alpha

03 Apr 12:34
7789def
Compare
Choose a tag to compare

Commit message

Bump org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.12 (#138)

Bumps org.jacoco:jacoco-maven-plugin
from 0.8.11 to 0.8.12.

Release notes

Sourced from org.jacoco:jacoco-maven-plugin's releases.

0.8.12

New Features

  • JaCoCo now officially supports Java 22 (GitHub #1596).
  • Experimental support for Java 23 class files (GitHub #1553).

Fixed bugs

  • Branches added by the Kotlin compiler for functions with default arguments and having more than 32 parameters are filtered out during generation of report (GitHub #1556).
  • Branch added by the Kotlin compiler version 1.5.0 and above for reading from lateinit property is filtered out during generation of report (GitHub #1568).

Non-functional Changes

  • JaCoCo now depends on ASM 9.7 (GitHub #1600).
Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits
    that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after
    your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge
    and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating
    it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all
    of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)

Signed-off-by: dependabot[bot] [email protected]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Info

See code diff
Release workflow run

It was initialized by eps-autoapprove-dependabot[bot]

v1.0.154-alpha

01 Apr 12:30
2246d1e
Compare
Choose a tag to compare

Commit message

Bump gitpython from 3.1.42 to 3.1.43 (#137)

Bumps gitpython
from 3.1.42 to 3.1.43.

Release notes

Sourced from gitpython's releases.

3.1.43

Particularly Important Changes

These are likely to affect you, please do take a careful look.

Other Changes

New Contributors

Full Changelog: gitpython-developers/GitPython@3.1.42...3.1.43

Commits
  • 5364053 bump version to 3.1.43
  • 4e626bd Merge pull request #1886 from EliahKagan/deprecation-warnings
  • f6060df Add GitMeta alias
  • 8327b45 Test GitMeta alias
  • f92f4c3 Clarify security risk in USE_SHELL doc and warnings
  • c7675d2 update security policy, to use GitHub instead of email
  • cf2576e Make/use test.deprecation.lib; abandon idea to filter by module
  • 7cd3aa9
Read more