Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 31, 2023

Bumps org.cryptacular:cryptacular from 1.2.4 to 1.2.5.

Release notes

Sourced from org.cryptacular:cryptacular's releases.

v1.2.5 release

See https://www.cryptacular.org/download.html for change log and binaries.

Commits
  • 39eead7 Update version for 1.2.5 release.
  • 75b6c39 Remove travis config.
  • ae821d2 Update plugin and library dependencies.
  • f7dbd7a Improve release script.
  • 5b28d50 Update plugin versions.
  • 3419f66 Use variable for computing buffer length. (#60)
  • bef8a9f Add publish snapshot script.
  • 5285b5e Update plugin and library dependencies.
  • 04e243c Formatting fix.
  • 99d4d90 Update copyright year.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jul 31, 2023
@dependabot dependabot bot requested a review from willyborankin as a code owner July 31, 2023 06:22
@cwperks
Copy link
Member

cwperks commented Jul 31, 2023

@dependabot rebase

Bumps [org.cryptacular:cryptacular](https://github.com/vt-middleware/cryptacular) from 1.2.4 to 1.2.5.
- [Release notes](https://github.com/vt-middleware/cryptacular/releases)
- [Changelog](https://github.com/vt-middleware/cryptacular/blob/main/release)
- [Commits](vt-middleware/cryptacular@v1.2.4...v1.2.5)

---
updated-dependencies:
- dependency-name: org.cryptacular:cryptacular
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/gradle/org.cryptacular-cryptacular-1.2.5 branch from dde110b to 8ec96a0 Compare July 31, 2023 13:33
@codecov
Copy link

codecov bot commented Jul 31, 2023

Codecov Report

Merging #3071 (8ec96a0) into main (08d1734) will decrease coverage by 4.82%.
The diff coverage is n/a.

@@             Coverage Diff              @@
##               main    #3071      +/-   ##
============================================
- Coverage     62.54%   57.73%   -4.82%     
+ Complexity     3361     3105     -256     
============================================
  Files           254      254              
  Lines         19744    19744              
  Branches       3334     3334              
============================================
- Hits          12349    11399     -950     
- Misses         5768     6761     +993     
+ Partials       1627     1584      -43     

see 48 files with indirect coverage changes

@cwperks cwperks merged commit c0e50da into main Jul 31, 2023
@cwperks cwperks deleted the dependabot/gradle/org.cryptacular-cryptacular-1.2.5 branch July 31, 2023 20:02
@opensearch-trigger-bot
Copy link
Contributor

The backport to 2.x failed:

The process '/usr/bin/git' failed with exit code 1

To backport manually, run these commands in your terminal:

# Fetch latest updates from GitHub
git fetch
# Create a new working tree
git worktree add .worktrees/backport-2.x 2.x
# Navigate to the new working tree
cd .worktrees/backport-2.x
# Create a new branch
git switch --create backport/backport-3071-to-2.x
# Cherry-pick the merged commit of this pull request and resolve the conflicts
git cherry-pick -x --mainline 1 c0e50da8a13161c3996aab6d20904ebd40b7b837
# Push it to GitHub
git push --set-upstream origin backport/backport-3071-to-2.x
# Go back to the original working tree
cd ../..
# Delete the working tree
git worktree remove .worktrees/backport-2.x

Then, create a pull request where the base branch is 2.x and the compare/head branch is backport/backport-3071-to-2.x.

peternied added a commit to peternied/security that referenced this pull request Aug 3, 2023
This change combines the many updates from the following commits:
* 5f62e8a dependabot: bump commons-io:commons-io from 2.11.0 to 2.13.0 (opensearch-project#3074)
* 2f69a10 bump com.github.wnameless.json:json-base from 2.4.0 to 2.4.1 (opensearch-project#3062)
* c0e50da dependabot: bump org.cryptacular:cryptacular from 1.2.4 to 1.2.5 (opensearch-project#3071)
* d3488e8 dependabot: bump kafka_version from 3.5.0 to 3.5.1 (opensearch-project#3041)
* ab6778d Update ospackage, checker-qual, zcxvbn and error_prone_annotations, camel-xmlsecurity (opensearch-project#3023)
* 0e6608d Bump JSON libs (opensearch-project#2926)
* df07bea SAML 4.3.0 addition persmission (opensearch-project#2987)
* e5348eb Change maven repo location for compatibility check (opensearch-project#2980)
* 4a1ec53 Bump jaxb to 2.3.8 (opensearch-project#2977)
* 9599155 Bump guava to 32.1.1-jre (opensearch-project#2976)
* 06eed60 dependabot: bump org.glassfish.jaxb:jaxb-runtime from 2.3.4 to 4.0.3 (opensearch-project#2970)
* 1113244 Bump eventbus to 3.3.1 (opensearch-project#2965)
* 99ff7b3 dependabot: bump org.apache.bcel:bcel from 6.6.0 to 6.7.0 (opensearch-project#2969)
* 0794c3f dependabot: bump jakarta.xml.bind:jakarta.xml.bind-api (opensearch-project#2968)
* 9e6aab3 dependabot: bump com.google.j2objc:j2objc-annotations from 1.3 to 2.8 (opensearch-project#2963)
* 8227f64 dependabot: bump com.sun.istack:istack-commons-runtime (opensearch-project#2960)
* 8e044a6 dependabot: bump org.apiguardian:apiguardian-api from 1.0.0 to 1.1.2 (opensearch-project#2964)
* 49cbf52 Remove commons-collections 3.2.2 (opensearch-project#2924)
* 092e8f5 Bump SAML libs (opensearch-project#2927)
* 8ab7cb4 Resolve CVE-2023-2976 by forcing use of Guava 32.0.1 (opensearch-project#2937)
* 4eef662 Clean up and bump Apache libs (opensearch-project#2925)
* 9a72355 Bump BouncyCastle from jdk15on to jdk15to18 (opensearch-project#2901)
* e4f4817 [Enhancement] Parallel test jobs for CI (opensearch-project#2861)
* d871af3 Update snappy to 1.1.10.1 and guava to 32.0.1-jre (opensearch-project#2886)
* c808692 Format everything (opensearch-project#2866)

Signed-off-by: Peter Nied <petern@amazon.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants