[PF-2983]: Bump the minor-patch-dependencies group with 25 updates

[dependabot]

Bumps the minor-patch-dependencies group with 25 updates:

Package	From	To
com.google.cloud:libraries-bom	26.0.0	26.33.0
org.springframework:spring-aop	6.0.11	6.1.4
org.springframework:spring-aspects	6.0.11	6.1.4
org.springframework.boot:spring-boot-starter-test	3.1.2	3.2.3
org.scala-lang:scala-library	2.13.10	2.13.13
org.bitbucket.b_c:jose4j	0.9.3	0.9.5
io.grpc:grpc-xds	1.53.0	1.61.1
org.apache.commons:commons-dbcp2	2.9.0	2.11.0
org.apache.commons:commons-lang3	3.12.0	3.14.0
org.apache.commons:commons-pool2	2.11.1	2.12.0
com.jayway.jsonpath:json-path	2.7.0	2.9.0
org.springframework:spring-context	6.0.11	6.1.4
org.springframework:spring-core	6.0.11	6.1.4
org.springframework.boot:spring-boot-starter-data-jdbc	3.1.2	3.2.3
org.springframework.boot:spring-boot-starter-web	3.1.2	3.2.3
org.springframework.boot:spring-boot-configuration-processor	3.1.2	3.2.3
jakarta.ws.rs:jakarta.ws.rs-api	3.0.0	3.1.0
com.google.protobuf:protobuf-java	3.21.10	3.25.3
org.liquibase:liquibase-core	4.16.0	4.26.0
org.postgresql:postgresql	42.5.0	42.7.2
ch.qos.logback:logback-core	1.4.14	1.5.0
ch.qos.logback:logback-classic	1.4.14	1.5.0
com.github.ben-manes.versions	0.42.0	0.51.0
com.jfrog.artifactory	5.1.14	5.2.0
org.springframework.boot	3.1.2	3.2.3

Updates com.google.cloud:libraries-bom from 26.0.0 to 26.33.0

Release notes

Sourced from com.google.cloud:libraries-bom's releases.

v26.33.0

GCP Libraries BOM 26.33.0

Here are the differences from the previous version (26.32.0)

New Addition

• com.google.cloud:google-cloud-securityposture:0.1.0

The group ID of the following artifacts is com.google.cloud.

Notable Changes

google-cloud-bigquerystorage 3.2.0 (prev: 3.1.0)

• Introduce MaximumRequestCallbackWaitTimeExceededException (#2401) (0dbbfb8)

• Add client id and update trace id population for StreamWriter and JsonWriter (#2389) (4258af4)

google-cloud-bigtable 2.34.0 (prev: 2.33.0)

• Add the export logic for per-connection error rate metric (#2121) (d053f2d)
• Create the backbone of counting errors per connection each minute. (#2094) (7d27816)

google-cloud-firestore 3.17.0 (prev: 3.16.3)

• Add an API method for reordering firewall policies (#1572) (60d8ab1)

• Transactions with readTime will omit begin and commit transaction requests, and instead pass readTime on individual read requests. (#1565) (d5fb01a)

google-cloud-logging 3.16.0 (prev: 3.15.17)

• Add an API method for reordering firewall policies (#1538) (9cd6b96)

google-cloud-pubsublite 1.13.0 (prev: 1.12.22)

• Add an API method for reordering firewall policies (#1587) (f920e08)

google-cloud-spanner 6.60.0 (prev: 6.58.0)

• Support public methods to use autogenerated admin clients. (#2878) (53bcb3e)

• Add an API method for reordering firewall policies (62319f0)

• spanner: Add field for multiplexed session in spanner.proto (62319f0)

• Update TransactionOptions to include new option exclude_txn_from_change_streams (#2853) (62319f0)

• Add ensureDecoded to proto type (#2897) (e99b78c)

• spanner: Fix write replace used by dataflow template and import export (#2901) (64b9042)

google-cloud-storage 2.34.0 (prev: 2.33.0)

• Enable automatic retries for create RenameFolder LRO in Storage Control API (#2410) (b0450b8)

Other libraries

• [aiplatform] Add Grounding feature to PredictionService.GenerateContent (#10358) (0ee1383)
• [documentai] A new field schema_override is added to message ProcessOptions (#10386) (728f841)

... (truncated)

Commits

• 7f54231 chore: release main (#6441)
• 9ab47cf deps: update dependency com.google.cloud:google-cloud-spanner-jdbc to v2.15.5...
• 33b7b5a deps: update dependency com.google.googlejavaformat:google-java-format to v1....
• 6c8eaf2 deps: update dependency com.google.cloud:google-cloud-spanner-bom to v6.60.0 ...
• a5a4258 deps: update dependency com.google.cloud:google-cloud-pubsublite-bom to v1.13...
• 6fe6069 deps: update dependency com.google.cloud:google-cloud-logging-bom to v3.16.0 ...
• 90fda7d deps: update dependency com.google.cloud:google-cloud-firestore-bom to v3.17....
• d40b4f9 deps: update dependency com.google.cloud:google-cloud-bigtable-bom to v2.34.0...
• 31cdb19 deps: update dependency com.google.cloud:google-cloud-bigquerystorage-bom to ...
• a453127 deps: update actions/setup-node action to v4 (#6456)
• Additional commits viewable in compare view

Updates org.springframework:spring-aop from 6.0.11 to 6.1.4

Release notes

Sourced from org.springframework:spring-aop's releases.

v6.1.4

⭐ New Features

• Add missing RequestPredicate variants in coRouter #32256
• Adapt ConcurrencyThrottleSupport to use ReentrantLock for better virtual thread support #32251
• Create optimized versions of request predicates #32244
• Include function name in SpelMessage.INCORRECT\_NUMBER\_OF\_ARGUMENTS\_TO\_FUNCTION #32239
• Add Coroutines support to NonReactiveHandlerMethodPredicate #32227
• RouterFunctionMapping does not implement MatchableHandlerMapping #32221
• Initialize (another) Map with correct size in RequestPredicates #32215
• Make SmartLifecycle phase value configurable in STOMP message handling components #32205
• Initialize Map with correct size in RequestPredicates #32201
• Let BeanPropertyRowMapper subclasses customize mapped names #32199
• Improve client and server handling of STOMP heartbeat failures #32195
• Optimize Map methods in ServletAttributesMap #32189
• Support binary streams with JdbcClient #32161
• Annotate core functional SPIs in SpEL with @FunctionalInterface #32135
• Cannot use SimpleJdbcInsert with catalog name #32124
• Refactor ReloadableResourceBundleMessageSource #32118
• Reuse MapPropertySource for DynamicValuesPropertySource implementation (as a template for custom variants) #32110
• Improve Spring AOP performance for methods without specific advice #32104
• Make it possible to configure any TaskExecutor through ChannelRegistration #32081
• Add support for JSON streams to Kotlin Serialization #32074
• Avoid reflecting to obtain validationGroups every time the call is made #32068
• Reject @RequestMapping and @HttpExchange declarations on the same element #32065
• Missing toString for ExponentialBackOff #32061
• Reject multiple @HttpExchange declarations on the same element #32049
• ClientAbortException from StreamingResponseBody can cause infinite loop of dispatches #32042
• Log warning if multiple @PostMapping, @GetMapping, etc. annotations are declared #31962
• Using types in @SessionAttributes is sometimes not reflected in the model #30463
• Improve read publisher cancel handling to avoid connections in CLOSE_WAIT state with WebSocket on Tomcat #30393
• Provide more control over JPA entities scanning #27892
• Provide and document a way to handle single-page application redirects #27257
• MockMvcClientHttpRequestFactory swallows ServletResponse.errorMessage #26720

🐞 Bug Fixes

• Cannot send Server-Sent Events without data using WebMvc.fn SseBuilder #32270
• Fix pathExtension null-safety in Kotlin DSLs #32254
• SimpleEvaluationContext.Builder is not final and has a public constructor #32253
• @JsonDeserialize(builder = ...) does not work in GraalVM native image #32238
• RestClientAdapter claims it supports request attributes when it does not #32232
• ThreadPoolTaskExecutor rejecting tasks as soon as the context has been closed can lead to exceptions during web app shutdown #32226
• Consistent parsing of user information in UriComponentsBuilder #32211
• "IllegalStateException: Cannot call sendError() after the response has been committed" when IOException is thrown during resolving method argument values on Tomcat >= 10.1.16 #32206
• No longer able to override the toString() in HandlerMethod from 6.1.3 #32184
• 6.1.3 regression: aspect not called with multiple inheritance #32181
• Unable to use baseUrl on builders created from RestTemplate #32180
• MessageDeliveryException on shutdown with open WebSocket connections #32171
• With XML configuration, setter selection can be random in case of overloaded setter methods (e.g. on SimpleClientHttpRequestFactory in 6.1.3 from convertForProperty method) #32159

... (truncated)

Commits

• 9bd6aef Release v6.1.4
• f41c7ce Upgrade to Undertow 2.3.11
• 9a06886 Upgrade to Reactor 2023.0.3, Micrometer 1.12.3, Context Propagation 1.1.1
• d147609 Update a reference to the build pipeline
• e9a359f Fix pipeline reference
• 78f0688 Fix javadoc error
• 504b761 WebSocketMessageBrokerConfigurer allows to configure Lifecycle phase
• f9ae54d Allow sending SSE events without data
• 2284254 Fix Kotlin syntax errors in RestClient builder example
• 6e9607c Use double dot in META-INF/aop.xml documentation
• Additional commits viewable in compare view

Updates org.springframework:spring-aspects from 6.0.11 to 6.1.4

Release notes

Sourced from org.springframework:spring-aspects's releases.

v6.1.4

⭐ New Features

• Add missing RequestPredicate variants in coRouter #32256
• Adapt ConcurrencyThrottleSupport to use ReentrantLock for better virtual thread support #32251
• Create optimized versions of request predicates #32244
• Include function name in SpelMessage.INCORRECT\_NUMBER\_OF\_ARGUMENTS\_TO\_FUNCTION #32239
• Add Coroutines support to NonReactiveHandlerMethodPredicate #32227
• RouterFunctionMapping does not implement MatchableHandlerMapping #32221
• Initialize (another) Map with correct size in RequestPredicates #32215
• Make SmartLifecycle phase value configurable in STOMP message handling components #32205
• Initialize Map with correct size in RequestPredicates #32201
• Let BeanPropertyRowMapper subclasses customize mapped names #32199
• Improve client and server handling of STOMP heartbeat failures #32195
• Optimize Map methods in ServletAttributesMap #32189
• Support binary streams with JdbcClient #32161
• Annotate core functional SPIs in SpEL with @FunctionalInterface #32135
• Cannot use SimpleJdbcInsert with catalog name #32124
• Refactor ReloadableResourceBundleMessageSource #32118
• Reuse MapPropertySource for DynamicValuesPropertySource implementation (as a template for custom variants) #32110
• Improve Spring AOP performance for methods without specific advice #32104
• Make it possible to configure any TaskExecutor through ChannelRegistration #32081
• Add support for JSON streams to Kotlin Serialization #32074
• Avoid reflecting to obtain validationGroups every time the call is made #32068
• Reject @RequestMapping and @HttpExchange declarations on the same element #32065
• Missing toString for ExponentialBackOff #32061
• Reject multiple @HttpExchange declarations on the same element #32049
• ClientAbortException from StreamingResponseBody can cause infinite loop of dispatches #32042
• Log warning if multiple @PostMapping, @GetMapping, etc. annotations are declared #31962
• Using types in @SessionAttributes is sometimes not reflected in the model #30463
• Improve read publisher cancel handling to avoid connections in CLOSE_WAIT state with WebSocket on Tomcat #30393
• Provide more control over JPA entities scanning #27892
• Provide and document a way to handle single-page application redirects #27257
• MockMvcClientHttpRequestFactory swallows ServletResponse.errorMessage #26720

🐞 Bug Fixes

• Cannot send Server-Sent Events without data using WebMvc.fn SseBuilder #32270
• Fix pathExtension null-safety in Kotlin DSLs #32254
• SimpleEvaluationContext.Builder is not final and has a public constructor #32253
• @JsonDeserialize(builder = ...) does not work in GraalVM native image #32238
• RestClientAdapter claims it supports request attributes when it does not #32232
• ThreadPoolTaskExecutor rejecting tasks as soon as the context has been closed can lead to exceptions during web app shutdown #32226
• Consistent parsing of user information in UriComponentsBuilder #32211
• "IllegalStateException: Cannot call sendError() after the response has been committed" when IOException is thrown during resolving method argument values on Tomcat >= 10.1.16 #32206
• No longer able to override the toString() in HandlerMethod from 6.1.3 #32184
• 6.1.3 regression: aspect not called with multiple inheritance #32181
• Unable to use baseUrl on builders created from RestTemplate #32180
• MessageDeliveryException on shutdown with open WebSocket connections #32171
• With XML configuration, setter selection can be random in case of overloaded setter methods (e.g. on SimpleClientHttpRequestFactory in 6.1.3 from convertForProperty method) #32159

... (truncated)

Commits

• 9bd6aef Release v6.1.4
• f41c7ce Upgrade to Undertow 2.3.11
• 9a06886 Upgrade to Reactor 2023.0.3, Micrometer 1.12.3, Context Propagation 1.1.1
• d147609 Update a reference to the build pipeline
• e9a359f Fix pipeline reference
• 78f0688 Fix javadoc error
• 504b761 WebSocketMessageBrokerConfigurer allows to configure Lifecycle phase
• f9ae54d Allow sending SSE events without data
• 2284254 Fix Kotlin syntax errors in RestClient builder example
• 6e9607c Use double dot in META-INF/aop.xml documentation
• Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-test from 3.1.2 to 3.2.3

Release notes

Sourced from org.springframework.boot:spring-boot-starter-test's releases.

v3.2.3

⚠️ Noteworthy

• This release upgrades to Hibernate 6.4.4.Final. While it contains a number of valuable bug fixes, it does not work correctly in a native image. If you are using GraalVM, Hibernate should be temporarily downgraded to 6.4.2.Final using the hibernate.version property.

🐞 Bug Fixes

• Nested jar URLs can not be resolved if the path contains spaces #39675
• Image building runs for a long time when a long image name is used and the tag contains an illegal character #39638
• Banner printing doesn't respect set charset #39621
• "micrometer.observations.*" configuration properties should be "management.observations.*" #39600
• Metadata reading during configuration class parsing uses the default resource loader rather than the application's resource loader #39598
• Several gson properties, including spring.gson.disable-html-escaping, do not behave correctly when set to false #39524
• Property placeholders aren't resolved when configuration property binding creates a Map from a property value using a converter #39515
• Gradle plugin allows the use of Gradle 7.4 but the documented and tested minimum is 7.5 #39513
• WebFlux auto-configuration should only configure the blocking executor when virtual threads are enabled #39469
• TestcontainersPropertySource assertion has typo #39449
• Webflux actuator endpoints respond with 500 when a parameter is missing #39444
• NoSuchMethod error when using the non-shaded Pulsar client and configuring authentications parameters #39389
• Jetty GracefulShutdown writes to System.out #39360
• Building images fails with Docker 25.0 when custom buildpacks are configured #39347
• Creating a RestClient from a RestTemplateBuilder-created RestTemplate requires double configuration of the baseUrl/rootUri #39317
• Auto-configured ConcurrentPulsarListenerContainerFactory and PulsarConsumerFactory cannot be injected into injection points with specific generic type information #39308
• Startup failure when you have multiple @DynamicPropertySources in Spring Boot 3.2.2 #39297
• Mockito's MockedStatic isn't closed in all cases #39272
• TracingProperties exposes package-private PropagationType from public methods #39268

📔 Documentation

• Add note regarding mixing of bundle-based and direct SSL configuration #39641
• Add link to Pulsar workaround when using environment variables for authentication #39630
• Document that task executor pool size properties are ignored when using virtual threads #39629
• Document default value for show-value configuration properties #39596
• Clarify that configuration properties only apply to the auto-configured OpenTelemetry Resource bean #39509
• Update the Debugging Documentation of the Spring Boot Maven Plugin #39422
• Awaitility link in Test Scoped Dependencies is incorrect #39415
• Fixed NestedJarFile constructor javadoc #39285
• Endpoint documentation contains the typo 'Unuthorized' #39280
• Update Revved up by Develocity badge #39263

🔨 Dependency Upgrades

• Upgrade to Byte Buddy 1.14.12 #39665
• Upgrade to Commons Codec 1.16.1 #39566
• Upgrade to Dropwizard Metrics 4.2.25 #39567
• Upgrade to Groovy 4.0.18 #39568
• Upgrade to Hibernate 6.4.4.Final #39569
• Upgrade to Infinispan 14.0.24.Final #39570
• Upgrade to Jackson Bom 2.15.4 #39666
• Upgrade to Janino 3.1.12 #39571
• Upgrade to Jetty 12.0.6 #39573

... (truncated)

Commits

• c24afef Release v3.2.3
• 5d88ada Merge branch '3.1.x' into 3.2.x
• 8dff249 Next development version (v3.1.10-SNAPSHOT)
• d13c006 Merge pull request #39675' from slovi
• a457638 Polish 'Decode URL content before passing it to NestedLocation.parse'
• 06569e7 Decode URL content before passing it to NestedLocation.parse
• 428ddb7 Merge branch '3.1.x' into 3.2.x
• 3930414 Upgrade CI images to ubuntu:jammy-20240212
• 12de6aa Merge branch '3.1.x' into 3.2.x
• 2c4909a Update copyright year of changed files
• Additional commits viewable in compare view

Updates org.scala-lang:scala-library from 2.13.10 to 2.13.13

Release notes

Sourced from org.scala-lang:scala-library's releases.

Scala 2.13.12

The Scala team at Lightbend is pleased to announce Scala 2.13.12.

The following changes are highlights of this release:

Feature: Quickfixes

For some errors and warnings, the compiler now suggests an edit that could fix the issue. Tooling such as IDEs can then offer the edits, or the compiler itself will make the change if run again with -quickfix.

• Implement quickfixes, aka actionable diagnostics (via CodeAction) (#10406 by @​eed3si9n)
• Add -quickfix compiler option to apply quickfixes to source files (#10482 by @​lrytz)
• Add quickfixes to some warnings and errors (#10484 by @​lrytz)

Align with Scala 3

• Emit migration warnings under -Xsource:3 as fatal warnings, not errors (#10439 by @​som-snytt, #10511)
  • -Xmigration will demote the errors to warnings
  • -Wconf:cat=scala3-migration:s will silence these errors/warnings altogether
• Warn about @elidable under -Xsource:3 (#10377 by @​som-snytt)

Collections

• IndexedSeq#head now throws NoSuchElementException (not IndexOutOfBoundsException) (#10392 by @​som-snytt)

Regression fixes

• Deduplicate JavaDeprecatedAttr in ClassfileParser (#10422 by @​som-snytt)
• Avoid brittle flags encoding for Java enums (#10424 by @​som-snytt)

Scaladoc tool changes

Library authors should be aware that the behavior of -doc-source-url has changed, as follows:

• scala/bug#12867

You may need to adjust your build accordingly, to avoid generating broken source links.

Tooling

The following change is mainly of concern to tooling maintainers.

• In-source sbt compiler bridge (#10472 by @​lrytz)

Other notable changes

For the complete 2.13.12 change lists, see all merged PRs and all closed bugs.

Compatibility

As usual for our minor releases, Scala 2.13.12 is binary-compatible with the whole Scala 2.13 series.

... (truncated)

Commits

• fcc67cd Merge pull request #10695 from SethTisue/scala-dev-755
• 842d69d fix scala task in our sbt build so REPL has JLine features again
• ec6078f Merge pull request #10694 from scala/tasty/test-classpath-standalone-obj
• 5936c32 Use stripSuffix over dropRight for clarity
• d9d1307 Align tasty file lookup with dotty, add test case
• 232521f Merge pull request #10689 from scalacenter/tasty/switch-3.4.0-stable
• 515883b Merge pull request #10688 from scalacenter/tasty/temp-patch-windows
• da72476 upgrade to 3.4.0 stable
• baadd95 Disable tasty pipelining tests on windows
• 17c0c74 Merge pull request #10686 from som-snytt/tweak/12944-hashset-issubset
• Additional commits viewable in compare view

Updates org.bitbucket.b_c:jose4j from 0.9.3 to 0.9.5

Commits

• 1ec20f8 [maven-release-plugin] prepare for next development iteration
• e4da603 Update slf4j-api to 1.7.36 to avoid CVE-2018-8088
• b5720a2 Merged in master (pull request #25)
• 72739ae fix spelling
• 1afaa1e Add the PBES2 algorithms to JWE's default blocked AlgorithmConstraints and pu...
• 055225e [maven-release-plugin] prepare release jose4j-0.9.4
• e2bdbdf [maven-release-plugin] prepare for next development iteration
• 3e97f62 Attempt to provide somewhat better error messages for invalid JWTs (especiall...
• 8b2316f JsonWebKey.Factory.newJwk(Key key) to throw an exception when given a private...
• fa33e98 Fix JWKS key resolution for ECDH-ES* decryption with OKP keys (issue #218)
• Additional commits viewable in compare view

Updates io.grpc:grpc-xds from 1.53.0 to 1.61.1

Release notes

Sourced from io.grpc:grpc-xds's releases.

v1.61.1

Bug Fixes

xds: Fix a bug in WeightedRoundRobinLoadBalancer policy that could raise NullPointerException and further cause channel panic when picking a subchannel. This bug can only be triggered when connection can not be established and the channel reports TRANSIENT_FAILURE state. (#10868)

v1.61.0

API Changes

• Remove unused experimental API ManagedChannelBuilder.enableFullStreamDecompression (#10744)
• api: Deprecate LoadBalancer.EMPTY_PICKER added in 1.58.0 in favor of FixedResultPicker (860b5cb1f)

New Features

• binder: Experimental support for asynchronous security policies (#10566)

Improvements

• core: reduce CompositeReadableBuffer allocation (#3279)
• core: Improve error message clarity when a channel leak is detected (201893f5e)
• util: use shared index across round_robin pickers (dca89b25b). This makes its implementation more similar to weighted_round_robin.
• xds: Implement ADS stream flow control mechanism (#10674). This limits the maximum memory consumed if the control plane sends updates more rapidly than they can be processed.

Bug Fixes

• core: Check outbound maximum message size for the compressed size in addition to the already-checked uncompressed size (#10739). Fixed the status code to be RESOURCE_EXHAUSTED instead of UNKNOWN.
• util: Fix NPE when multiple addresses are in an address group for petiole load balancer policies (#10769)
• util: Disable publishing of fixtures (8ac43dd81). The Gradle test fixtures are for use by grpc-java's internal tests.
• okhttp: Ignore known conscrypt socket close issue (#10812). This stops an exception from being thrown when a known Conscrypt synchronization issue happens.

Dependencies

• Drop support for Bazel 5 (55a9c012c). Bazel 7 is available, and Protobuf has already dropped support for Bazel 5.
• Change many compile deps to runtime deps (d6830d7f9). This reduces the transitive classes "leaked" into the compile classpath. In particular, grpc-core (io.grpc.internal) will be less frequently included transitively at compile time.
• Upgrade dependencies (c985797d9)
  • Protobuf to 3.25.1
  • auto-value-annotations to 1.10.4
  • error_prone_annotations to 2.23.0
  • proto-google-common-protos to 2.29.0
  • google-cloud-logging to 3.15.14
  • guava to 32.1.3-android
  • okio to 3.4.0

Acknowledgements

• @​Gordiychuk
• @​jroper
• @​jyane
• @​ulfjack

v1.60.2

Bug Fixes

xds: Fix a bug in WeightedRoundRobinLoadBalancer policy that could raise NullPointerException and further cause channel panic when picking a subchannel. This bug can only be triggered when connection can not be established and the channel reports TRANSIENT_FAILURE state. (#10868)

v1.60.1

Bug Fixes

• util: Fix NPE when multiple addresses in an address group for petiole load balancer policies (#10770)

... (truncated)

Commits

• dfff9a9 Bump version to 1.61.1
• df1bb36 Update README etc to reference 1.61.1
• 1abdaf3 xds: fix NPE in wrr in TF state (#10875)
• 529d0ab Bump version to 1.61.1-SNAPSHOT
• f06abeb Bump version to 1.61.0
• 7700510 Update README protoc references to 3.25.1
• c639b81 Update README etc to reference 1.61.0
• 5606081 fix flaky xds test due to verification race (#10798) (#10808)
• 2531563 okhttp: Ignore known conscrypt socket close issue (#10811) (#10812)
• 5b082ca Do not cache failed futures for async security policies indefinitely. (#10743)
• Additional commits viewable in compare view

Updates org.apache.commons:commons-dbcp2 from 2.9.0 to 2.11.0

Updates org.apache.commons:commons-lang3 from 3.12.0 to 3.14.0

Updates org.apache.commons:commons-pool2 from 2.11.1 to 2.12.0

Updates com.jayway.jsonpath:json-path from 2.7.0 to 2.9.0

Release notes

Sourced from com.jayway.jsonpath:json-path's releases.

json-path-2.9.0

What's Changed

• Fix for CVE-2023-51074.
• update dependencies by @​SingingBush in json-path/JsonPath#965
• JPMS: define Automatic-Module-Name as json.path by @​SingingBush in json-path/JsonPath#966
• Bump json-smart version from 2.4.10 to 2.5.0 by @​shoothzj in json-path/JsonPath#945
• Fixed rendering error on $..book[?(@.price <= $['expensive'])] in README.md by @​lulunac27a in json-path/JsonPath#967
• [build] Remove deprecated gradle convetion usage by @​shoothzj in json-path/JsonPath#946
• Check for the existence of the next significant bracket by @​twobiers in json-path/JsonPath#985
• Update versions by @​kallestenflo in json-path/JsonPath#987

New Contributors

• @​lulunac27a made their first contribution in json-path/JsonPath#967
• @​twobiers made their first contribution in json-path/JsonPath#985

Full Changelog: json-path/JsonPath@json-path-2.8.0...json-path-2.9.0

json-path-2.8.0

Upgrade json-smart to fix https://www.cve.org/CVERecord?id=CVE-2023-1370

Commits

• af7e516 Release 2.9.0
• af4dfcc Make PropertyPathToken public, closes #955
• 49b1151 Update versions (#987)
• 71a09c1 Check for the existence of the next significant bracket (#985)
• 900ebfe Remove deprecated gradle usage (#946)
• 946274d Fixed rendering error on $..book[?(@.price <= $['expensive'])] in README.md...
• 425bcb1 Bump json-smart version from 2.4.10 to 2.5.0 (#945)
• 2d57ab3 JPMS: define Automatic-Module-Name as json.path (#966)
• 1a57f78 update dependencies (#965)
• 21de620 Prepare next version
• Additional commits viewable in compare view

Updates org.springframework:spring-context from 6.0.11 to 6.1.4

Release notes

Sourced from org.springframework:spring-context's releases.

v6.1.4

⭐ New Features

• Add missing RequestPredicate variants in coRouter #32256
• Adapt ConcurrencyThrottleSupport to use ReentrantLock for better virtual thread support #32251
• Create optimized versions of request predicates #32244
• Include function name in SpelMessage.INCORRECT\_NUMBER\_OF\_ARGUMENTS\_TO\_FUNCTION #32239
• Add Coroutines support to NonReactiveHandlerMethodPredicate #32227
• RouterFunctionMapping does not implement MatchableHandlerMapping #32221
• Initialize (another) Map with correct size in RequestPredicates #32215
• Make SmartLifecycle phase value configurable in STOMP message handling components #32205
• Initialize Map with correct size in RequestPredicates #32201
• Let BeanPropertyRowMapper subclasses customize mapped names #32199
• Improve client and server handling of STOMP heartbeat failures #32195
• Optimize Map methods in ServletAttributesMap #32189
• Support binary streams with JdbcClient #32161
• Annotate core functional SPIs in SpEL with @FunctionalInterface #32135
• Cannot use SimpleJdbcInsert with catalog name #32124
• Refactor ReloadableResourceBundleMessageSource #32118
• Reuse MapPropertySource for DynamicValuesPropertySource implementation (as a template for custom variants)

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

[cahrens]

This was a recreation of #134 (comment) because I noticed that one of the "easy" library upgrades I was considering pulling out had yet a newer version.

It appears that upgrading to Spring boot 3.2.3 requires upgrading gradle:

An exception occurred applying plugin request [id: 'org.springframework.boot', version: '3.2.3']
> Failed to apply plugin 'org.springframework.boot'.
   > Spring Boot plugin requires Gradle 7.x (7.5 or later). The current version is Gradle 7.4.1

[cahrens]

@dependabot recreate

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.