Skip to content

Bump org.assertj:assertj-core from 3.27.4 to 3.27.5#810

Merged
ascopes merged 2 commits into
mainfrom
dependabot/maven/main/org.assertj-assertj-core-3.27.5
Sep 22, 2025
Merged

Bump org.assertj:assertj-core from 3.27.4 to 3.27.5#810
ascopes merged 2 commits into
mainfrom
dependabot/maven/main/org.assertj-assertj-core-3.27.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 22, 2025

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps org.assertj:assertj-core from 3.27.4 to 3.27.5.

Release notes

Sourced from org.assertj:assertj-core's releases.

v3.27.5

⚡ Improvements

Core

  • ByteBuddy in AssertJ 3.27.4 not compatible with Java 25 #3946

🔨 Dependency Upgrades

Core

  • Upgrade to Byte Buddy 1.17.7 #3947
  • Upgrade to JUnit BOM 5.13.4 #3947

Guava

  • Upgrade to Guava 33.4.8-jre #3947
Commits
  • dd4cc1d [maven-release-plugin] prepare release assertj-build-3.27.5
  • 1d0defc Add missing permission to release workflow
  • 844d5d0 Add missing GitHub Actions pinning to CodeQL workflow
  • bdd7106 Add CodeQL custom workflow
  • a93d7e6 Remove EOL Java 24
  • 26ea866 Update production dependencies (#3947)
  • c294435 Pin GitHub Actions dependencies, switch to weekly update schedule (#3932)
  • 1b4ac27 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once it's up-to-date and CI passes on it, as requested by @ascopes.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.27.4 to 3.27.5.
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-build-3.27.4...assertj-build-3.27.5)

---
updated-dependencies:
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Issues and changes related to dependencies label Sep 22, 2025
@ascopes

ascopes commented Sep 22, 2025

Copy link
Copy Markdown
Owner

@dependabot recreate

@ascopes

ascopes commented Sep 22, 2025

Copy link
Copy Markdown
Owner

@dependabot merge

@ascopes

ascopes commented Sep 22, 2025

Copy link
Copy Markdown
Owner

Failures are due to GitHub Actions outage with their egress NAT.

@ascopes ascopes merged commit 29edb21 into main Sep 22, 2025
14 of 15 checks passed
@ascopes ascopes deleted the dependabot/maven/main/org.assertj-assertj-core-3.27.5 branch September 22, 2025 06:42
@codecov

codecov Bot commented Sep 22, 2025

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.78%. Comparing base (25e8012) to head (90b4bcc).
⚠️ Report is 7 commits behind head on main.

Additional details and impacted files

Impacted file tree graph

@@           Coverage Diff           @@
##             main     #810   +/-   ##
=======================================
  Coverage   90.78%   90.78%           
=======================================
  Files          60       60           
  Lines        1811     1811           
  Branches      121      121           
=======================================
  Hits         1644     1644           
  Misses        129      129           
  Partials       38       38           
🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

mergify Bot added a commit to ArcadeData/arcadedb that referenced this pull request Sep 29, 2025
…to 3.10.0 [skip ci]

Bumps [io.github.ascopes:protobuf-maven-plugin](https://github.com/ascopes/protobuf-maven-plugin) from 3.9.1 to 3.10.0.
Release notes

*Sourced from [io.github.ascopes:protobuf-maven-plugin's releases](https://github.com/ascopes/protobuf-maven-plugin/releases).*

> v3.10.0
> -------
>
> New features
> ------------
>
> * URL parsing has been reimplemented to work with Apache Commons Compress. This allows users to extract plugins implicitly from tarballls and other archive types that are listed in the documentation. This includes:
>   + `jar:https://somewebsite.lan/archive.jar!/path/to/exe`
>   + `zip:file://some/local/path/archive.zip!/path/to/exe`
>   + `ear:https://somewebsite.lan/archive.ear!/path/to/exe`
>   + `war:https://somewebsite.lan/archive.war!/path/to/exe`
>   + `kar:https://somewebsite.lan/archive.kar!/path/to/exe`
>   + `tar:https://somewebsite.lan/archive.tar!/path/to/exe`
>   + `tar:gz:https://somewebsite.lan/archive.tgz!/path/to/exe`
>   + `tar:bz2:https://somewebsite.lan/archive.tar.bz2!/path/to/exe`
>   + Further support for LZMA, CPIO archives, 7z archives, XZ, Z, etc is possible, please raise an issue to discuss.
> * Deeply nested URL protocols are now valid. If you need to extract a tarball from a zip and then extract a file from that tarball, this should work as expected.
>
> What's Changed
> --------------
>
> * Build on Java 25 in CI by [`@​ascopes`](https://github.com/ascopes) in [ascopes/protobuf-maven-plugin#805](https://github.com/ascopes/protobuf-maven-plugin/pull/805)
> * Include GH contributing guide and security notes in generated site by [`@​ascopes`](https://github.com/ascopes) in [ascopes/protobuf-maven-plugin#807](https://github.com/ascopes/protobuf-maven-plugin/pull/807)
> * Use v5 codecov action by [`@​ascopes`](https://github.com/ascopes) in [ascopes/protobuf-maven-plugin#806](https://github.com/ascopes/protobuf-maven-plugin/pull/806)
> * Bump com.google.api.grpc:proto-google-common-protos from 2.61.1 to 2.61.2 in /protobuf-maven-plugin/src/it/setup by [`@​dependabot`](https://github.com/dependabot)[bot] in [ascopes/protobuf-maven-plugin#811](https://github.com/ascopes/protobuf-maven-plugin/pull/811)
> * Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.11.3 to 3.12.0 by [`@​dependabot`](https://github.com/dependabot)[bot] in [ascopes/protobuf-maven-plugin#809](https://github.com/ascopes/protobuf-maven-plugin/pull/809)
> * Bump org.apache.maven.plugins:maven-compiler-plugin from 3.14.0 to 3.14.1 by [`@​dependabot`](https://github.com/dependabot)[bot] in [ascopes/protobuf-maven-plugin#808](https://github.com/ascopes/protobuf-maven-plugin/pull/808)
> * Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 by [`@​dependabot`](https://github.com/dependabot)[bot] in [ascopes/protobuf-maven-plugin#810](https://github.com/ascopes/protobuf-maven-plugin/pull/810)
> * [GH-804](https://github.com/ascopes/protobuf-maven-plugin/issues/804): Document usage of ZIP/JAR archives for sourceDirectories by [`@​ascopes`](https://github.com/ascopes) in [ascopes/protobuf-maven-plugin#812](https://github.com/ascopes/protobuf-maven-plugin/pull/812)
> * [GH-802](https://github.com/ascopes/protobuf-maven-plugin/issues/802): Reimplement URL handling by decorating input streams with commons-compress by [`@​ascopes`](https://github.com/ascopes) in [ascopes/protobuf-maven-plugin#803](https://github.com/ascopes/protobuf-maven-plugin/pull/803)
> * Bump org.sonatype.central:central-publishing-maven-plugin from 0.8.0 to 0.9.0 by [`@​dependabot`](https://github.com/dependabot)[bot] in [ascopes/protobuf-maven-plugin#813](https://github.com/ascopes/protobuf-maven-plugin/pull/813)
> * Bump org.assertj:assertj-core from 3.27.5 to 3.27.6 by [`@​dependabot`](https://github.com/dependabot)[bot] in [ascopes/protobuf-maven-plugin#814](https://github.com/ascopes/protobuf-maven-plugin/pull/814)
> * Bump org.immutables:bom from 2.11.3 to 2.11.4 by [`@​dependabot`](https://github.com/dependabot)[bot] in [ascopes/protobuf-maven-plugin#815](https://github.com/ascopes/protobuf-maven-plugin/pull/815)
>
> **Full Changelog**: <ascopes/protobuf-maven-plugin@v3.9.1...v3.10.0>


Commits

* [`a3827ea`](ascopes/protobuf-maven-plugin@a3827ea) [maven-release-plugin] prepare release v3.10.0
* [`c4f9a58`](ascopes/protobuf-maven-plugin@c4f9a58) Fix deploy.yml
* [`524f637`](ascopes/protobuf-maven-plugin@524f637) Update deploy.yml
* [`0d402b3`](ascopes/protobuf-maven-plugin@0d402b3) [maven-release-plugin] rollback the release of v3.10.0
* [`588944a`](ascopes/protobuf-maven-plugin@588944a) [maven-release-plugin] prepare release v3.10.0
* [`909183c`](ascopes/protobuf-maven-plugin@909183c) Fix mistake in JDK25 config for deploy.yml
* [`eb739b0`](ascopes/protobuf-maven-plugin@eb739b0) Merge pull request [#815](https://github.com/ascopes/protobuf-maven-plugin/issues/815) from ascopes/dependabot/maven/main/org.immutables-bom...
* [`027fa3e`](ascopes/protobuf-maven-plugin@027fa3e) Merge pull request [#814](https://github.com/ascopes/protobuf-maven-plugin/issues/814) from ascopes/dependabot/maven/main/org.assertj-assert...
* [`ae5d8de`](ascopes/protobuf-maven-plugin@ae5d8de) Merge pull request [#813](https://github.com/ascopes/protobuf-maven-plugin/issues/813) from ascopes/dependabot/maven/main/org.sonatype.centr...
* [`69ed3c2`](ascopes/protobuf-maven-plugin@69ed3c2) Bump org.immutables:bom from 2.11.3 to 2.11.4
* Additional commits viewable in [compare view](ascopes/protobuf-maven-plugin@v3.9.1...v3.10.0)
  
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=io.github.ascopes:protobuf-maven-plugin&package-manager=maven&previous-version=3.9.1&new-version=3.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Issues and changes related to dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant