Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Platform/david navapbc/21nov24/dependabot #16625

Merged
merged 23 commits into from
Nov 22, 2024

Conversation

dependabot bot and others added 22 commits November 3, 2024 08:58
Bumps `jacksonVersion` from 2.18.0 to 2.18.1.

Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-yaml` from 2.18.0 to 2.18.1
- [Commits](FasterXML/jackson-dataformats-text@jackson-dataformats-text-2.18.0...jackson-dataformats-text-2.18.1)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.0 to 2.18.1
- [Commits](https://github.com/FasterXML/jackson/commits)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-yaml
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [com.microsoft.azure:applicationinsights-web](https://github.com/Microsoft/ApplicationInsights-Java) from 3.5.4 to 3.6.2.
- [Release notes](https://github.com/Microsoft/ApplicationInsights-Java/releases)
- [Changelog](https://github.com/microsoft/ApplicationInsights-Java/blob/main/CHANGELOG.md)
- [Commits](microsoft/ApplicationInsights-Java@3.5.4...3.6.2)

---
updated-dependencies:
- dependency-name: com.microsoft.azure:applicationinsights-web
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [com.microsoft.azure:applicationinsights-runtime-attach](https://github.com/Microsoft/ApplicationInsights-Java) from 3.5.4 to 3.6.2.
- [Release notes](https://github.com/Microsoft/ApplicationInsights-Java/releases)
- [Changelog](https://github.com/microsoft/ApplicationInsights-Java/blob/main/CHANGELOG.md)
- [Commits](microsoft/ApplicationInsights-Java@3.5.4...3.6.2)

---
updated-dependencies:
- dependency-name: com.microsoft.azure:applicationinsights-runtime-attach
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [com.azure.spring:spring-cloud-azure-dependencies](https://github.com/Azure/azure-sdk-for-java) from 5.16.0 to 5.18.0.
- [Release notes](https://github.com/Azure/azure-sdk-for-java/releases)
- [Commits](Azure/azure-sdk-for-java@spring-cloud-azure_5.16.0...spring-messaging-azure_5.18.0)

---
updated-dependencies:
- dependency-name: com.azure.spring:spring-cloud-azure-dependencies
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps the hapifhir group with 3 updates in the /prime-router directory: ca.uhn.hapi.fhir:hapi-fhir-structures-r4, ca.uhn.hapi.fhir:hapi-fhir-caching-caffeine and ca.uhn.hapi.fhir:hapi-fhir-client.


Updates `ca.uhn.hapi.fhir:hapi-fhir-structures-r4` from 7.4.2 to 7.4.5

Updates `ca.uhn.hapi.fhir:hapi-fhir-caching-caffeine` from 7.4.2 to 7.4.5

Updates `ca.uhn.hapi.fhir:hapi-fhir-client` from 7.4.2 to 7.4.5

---
updated-dependencies:
- dependency-name: ca.uhn.hapi.fhir:hapi-fhir-structures-r4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: hapifhir
- dependency-name: ca.uhn.hapi.fhir:hapi-fhir-caching-caffeine
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: hapifhir
- dependency-name: ca.uhn.hapi.fhir:hapi-fhir-client
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: hapifhir
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps the bouncycastle group in /prime-router with 3 updates: [org.bouncycastle:bcprov-jdk15to18](https://github.com/bcgit/bc-java), [org.bouncycastle:bcprov-jdk18on](https://github.com/bcgit/bc-java) and [org.bouncycastle:bcmail-jdk15to18](https://github.com/bcgit/bc-java).


Updates `org.bouncycastle:bcprov-jdk15to18` from 1.78.1 to 1.79
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.bouncycastle:bcprov-jdk18on` from 1.78.1 to 1.79
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.bouncycastle:bcmail-jdk15to18` from 1.78.1 to 1.79
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

---
updated-dependencies:
- dependency-name: org.bouncycastle:bcprov-jdk15to18
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bouncycastle
- dependency-name: org.bouncycastle:bcprov-jdk18on
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bouncycastle
- dependency-name: org.bouncycastle:bcmail-jdk15to18
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bouncycastle
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps the flyway group with 3 updates in the /prime-router directory: org.flywaydb:flyway-database-postgresql, [org.flywaydb:flyway-core](https://github.com/flyway/flyway) and org.flywaydb.flyway.


Updates `org.flywaydb:flyway-database-postgresql` from 10.18.2 to 10.21.0

Updates `org.flywaydb:flyway-core` from 10.18.2 to 10.21.0
- [Release notes](https://github.com/flyway/flyway/releases)
- [Commits](flyway/flyway@flyway-10.18.2...flyway-10.21.0)

Updates `org.flywaydb.flyway` from 10.18.2 to 10.21.0

---
updated-dependencies:
- dependency-name: org.flywaydb:flyway-database-postgresql
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: flyway
- dependency-name: org.flywaydb:flyway-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: flyway
- dependency-name: org.flywaydb.flyway
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: flyway
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [com.googlecode.libphonenumber:libphonenumber](https://github.com/google/libphonenumber) from 8.13.46 to 8.13.50.
- [Release notes](https://github.com/google/libphonenumber/releases)
- [Changelog](https://github.com/google/libphonenumber/blob/master/making-metadata-changes.md)
- [Commits](google/libphonenumber@v8.13.46...v8.13.50)

---
updated-dependencies:
- dependency-name: com.googlecode.libphonenumber:libphonenumber
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) from 9.41.1 to 9.47.
- [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt)
- [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/9.47..9.41.1)

---
updated-dependencies:
- dependency-name: com.nimbusds:nimbus-jose-jwt
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [com.azure:azure-identity](https://github.com/Azure/azure-sdk-for-java) from 1.14.0 to 1.14.2.
- [Release notes](https://github.com/Azure/azure-sdk-for-java/releases)
- [Commits](Azure/azure-sdk-for-java@azure-core_1.14.0...azure-identity_1.14.2)

---
updated-dependencies:
- dependency-name: com.azure:azure-identity
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [com.zaxxer:HikariCP](https://github.com/brettwooldridge/HikariCP) from 6.0.0 to 6.2.0.
- [Changelog](https://github.com/brettwooldridge/HikariCP/blob/dev/CHANGES)
- [Commits](brettwooldridge/HikariCP@HikariCP-6.0.0...HikariCP-6.2.0)

---
updated-dependencies:
- dependency-name: com.zaxxer:HikariCP
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
…om.zaxxer-HikariCP-6.2.0' into platform/david-navapbc/21nov24/dependabot
…om.azure-azure-identity-1.14.2' into platform/david-navapbc/21nov24/dependabot
…om.nimbusds-nimbus-jose-jwt-9.47' into platform/david-navapbc/21nov24/dependabot
…om.googlecode.libphonenumber-libphonenumber-8.13.50' into platform/david-navapbc/21nov24/dependabot
…m.microsoft.azure-applicationinsights-runtime-attach-3.6.2' into platform/david-navapbc/21nov24/dependabot
…acksonVersion-2.18.1' into platform/david-navapbc/21nov24/dependabot
…ouncycastle-879a3e852a' into platform/david-navapbc/21nov24/dependabot
…apifhir-59897a1735' into platform/david-navapbc/21nov24/dependabot
@david-navapbc david-navapbc requested a review from a team as a code owner November 21, 2024 20:49
Copy link

github-actions bot commented Nov 21, 2024

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails

Scanned Manifest Files

Copy link

github-actions bot commented Nov 21, 2024

Test Results

1 248 tests  ±0   1 244 ✅ ±0   8m 5s ⏱️ +34s
  162 suites ±0       4 💤 ±0 
  162 files   ±0       0 ❌ ±0 

Results for commit ed63fd1. ± Comparison against base commit ad28996.

♻️ This comment has been updated with latest results.

Copy link

github-actions bot commented Nov 21, 2024

Integration Test Results

 54 files  ±0   54 suites  ±0   29m 5s ⏱️ + 1m 2s
414 tests ±0  404 ✅ ±0  10 💤 ±0  0 ❌ ±0 
417 runs  ±0  407 ✅ ±0  10 💤 ±0  0 ❌ ±0 

Results for commit ed63fd1. ± Comparison against base commit ad28996.

♻️ This comment has been updated with latest results.

@jack-h-wang jack-h-wang self-assigned this Nov 22, 2024
@jack-h-wang jack-h-wang added the platform Platform Team label Nov 22, 2024
Copy link

sonarcloud bot commented Nov 22, 2024

@jack-h-wang jack-h-wang merged commit 5b0d24a into main Nov 22, 2024
24 checks passed
@jack-h-wang jack-h-wang deleted the platform/david-navapbc/21nov24/dependabot branch November 22, 2024 19:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
platform Platform Team
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants