Bump com.unboundid.product.scim2:scim2-sdk-client from 2.3.5 to 3.2.0

[dependabot]

Bumps com.unboundid.product.scim2:scim2-sdk-client from 2.3.5 to 3.2.0.

Changelog

Sourced from com.unboundid.product.scim2:scim2-sdk-client's changelog.

v3.2.0 - 2024-Dec-04

Fixed an issue where AndFilter.equals() and OrFilter.equals() could incorrectly evaluate to true.

Updated Jackson dependencies to 2.17.2.

Added better customization of the MapperFactory. The MapperFactory class can be used to customize the behavior of the SDK when it converts JSON strings to Java Objects, and vice versa. This release now supports overriding the JsonUtils.createObjectMapper() method to allow for the addition of custom serializers and deserializers. See the class-level Javadoc of MapperFactory for more information on how to accomplish this.

Added a property that allows ADD patch operations with value filters to target an existing value. For example, consider the following patch request. This request aims to add a display field on a user's work email.

{
  "schemas": [ "urn:ietf:params:scim:api:messages:2.0:PatchOp" ],
  "Operations": [
    {
      "op": "add",
      "path": "emails[type eq \"work\"].display",
      "value": "[email protected]"
    }
  ]
}

When the new behavior is configured, this operation will search the resource for an existing "work" email and add a "display": "[email protected]" field to that email. This behavior allows for better integration with SCIM provisioners that send individual requests such as emails[type eq "work"].display followed by emails[type eq "work"].value, which are intended to target the same email. To use this behavior, toggle the property by adding the following Java code in your application:

PatchOperation.APPEND_NEW_PATCH_VALUES_PROPERTY = false;

The default value of APPEND_NEW_PATCH_VALUES_PROPERTY is true, which will always add a new value (i.e., email) on the multi-valued attribute instead of updating an existing value/email. This matches the behavior of the SDK since the 3.0.0 release.

 

Refreshed the documentation of the GenericScimResource class to provide better insight on how it can be used to define resource types for objects that don't have a strongly defined schema. The class-level Javadoc describes how to interface with the object effectively, and the methods now provide clearer examples of how they can be used.

Updated the class-level documentation of ListResponse to provide more background about the resource type and how to interface with the object.

... (truncated)

Commits

• ef46317 Setting release version 3.2.0
• dcd867a Update CHANGELOG for the next release.
• dc8144f Allow deserializing null Resources in ListResponse
• 67986bf Overhaul GenericScimResource documentation.
• 5553f17 Apply whitespace formatting changes.
• b536175 Support ADD patch ops targeting existing values
• b0d2e2b Add a missing release note.
• a78cbf2 Update equals() for combining filters
• 1b4c1dd Fix pipeline test failure
• c5a828d Support customization of the MapperFactory
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[Ludy87]

@dependabot rebase