chore(deps): bump org.http4k:http4k-core from 5.14.0.0 to 5.44.2.0 in /run/http4k-hello-world

[dependabot]

Bumps org.http4k:http4k-core from 5.14.0.0 to 5.44.2.0.

Release notes

Sourced from org.http4k:http4k-core's releases.

5.44.2.0

Changelog:

• http4k-* : Upgrade some dependency versions.
• http4k-serverless-tencent : Tweaks to support new version of Tencent SDK.

5.44.1.0

Changelog:

• http4k-* : Upgrade some dependency versions.
• http4k-template-thymeleaf : Support template fragments. H/T @​mikaelstaldal

5.44.0.0

Changelog:

• http4k-* : Upgrade some dependency versions.
• http4k-testing-approval : [Possible Break] HtmlApprovalTest formatter improved handling of HTML attributes which may require re-approving files.
• http4k-connect-amazon-iamidentitycenter* : Read AWS profile configuration both from credentials and config files. H/T @​aharin
• http4k-core : Deprecate lens' regex() in favour of regexGroup. In v6 regex() will match fully, changing its current behaviour.

5.43.0.0

Changelog:

• http4k-* : Upgrade some dependency versions.
• http4k-connect-amazon-iamidentitycenter* : Files containing tokens should only be readable by owner. H/T @​aharin
• http4k-connect-slack : [New module!] Minimal support for Slack and Slack Webhooks.

5.42.0.0

Changelog:

• http4k-* : Upgrade some dependency versions.
• http4k-template : Fix line separators for templates to allow working across platform with templates.
• http4k-connect-amazon-iamidentitycenter* :[Fix 1239] CredentialsProvider.SSO - Credentials caching issue.
• http4k-connect-amazon-iamidentitycenter* : [Unlikely break] PKCE-based Authorization for AWS SSO. Tweaks should be easy to remedy in previous SSO implementation. H/T @​aharin

5.41.0.0

Changelog:

• http4k-format-xml : [Fix CVE-2024-55875: Possible Break] Fixed XML processing by disabling entity expansion in DocumentBuilderFactory configuration. Note: This change affects how XML entity references are handled. If your code relies on XML entity expansion (like replacing &entity; references with their defined content), it will need to be updated to provide the correct configuration when deserialising the XML body. Entity references will now remain as unexpanded text in the document.

Full details at: https://www.http4k.org/security/cve-2024-12345/ H/T to @@​JAckLosingHeart for the report

5.40.0.0

Changelog:

• http4k-core : Allow invalidation of cookie with a path. H/T @​ollieabbey
• http4k-core : Allow setting cookie value without quotes. H/T @​ollieabbey
• http4k-core : Fix cookie format for cookie with no attributes. H/T @​ollieabbey
• http4k-testing-webdriver : Remove usages of deprecated getAttribute API. Now use getDomAttribute instead.
• http4k-cloudnative : Deprecation of various functions and re-homing into http4k-platform-k8s module.
• http4k-* : [PRE RELEASE PREPARATION] As a part of the upcoming V6, several modules are being rehoused to new Maven coordinates. In preparation, we have introduced these modules to give users the time to migrate without taking on-board other breaking changes from v6 - essentially allowing the upgrade cycle to be:

1. Upgrade to latest v5 release. Deal with deprecations and module changes.

... (truncated)

Changelog

Sourced from org.http4k:http4k-core's changelog.

v5.44.2.0 (uncut)

• http4k-server-servlet : [PRE RELEASE PREPARATION] This will be the ultimate destination of the Servlet integrations in http4k v6. We are providing this new module as a migration step before the upgrade to v6, so module changes can be dealt with separately.
• http4k-tools-traffic-capture : [PRE RELEASE PREPARATION] This will be the ultimate destination of the Traffic Capture functionality from http4k-core in http4k v6. We are providing this new module as a migration step before the upgrade to v6, so module changes can be dealt with separately.

v5.44.2.0

• http4k-template-thymeleaf : Support template fragments. H/T @​mikaelstaldal

v5.44.1.0

• http4k-* : Upgrade some dependency versions.
• http4k-template-thymeleaf : Support template fragments. H/T @​mikaelstaldal

v5.44.0.0

• http4k-* : Upgrade some dependency versions.
• http4k-testing-approval : [Possible Break] HtmlApprovalTest formatter improved handling of HTML attributes which may require re-approving files.
• http4k-connect-amazon-iamidentitycenter* : Read AWS profile configuration both from credentials and config files. H/T @​aharin
• http4k-core : Deprecate lens' regex() in favour of regexGroup. In v6 regex() will match fully, changing its current behaviour.

v5.43.0.0

• http4k-* : Upgrade some dependency versions.
• http4k-connect-amazon-iamidentitycenter* : Files containing tokens should only be readable by owner. H/T @​aharin
• http4k-connect-slack : [New module!] Minimal support for Slack and Slack Webhooks.

v5.42.0.0

• http4k-* : Upgrade some dependency versions.
• http4k-template : Fix line separators for templates to allow working across platform with templates.
• http4k-connect-amazon-iamidentitycenter* :[Fix 1239] CredentialsProvider.SSO - Credentials caching issue.
• http4k-connect-amazon-iamidentitycenter* : [Unlikely break] PKCE-based Authorization for AWS SSO. Tweaks should be easy to remedy in previous SSO implementation. H/T @​aharin

v5.41.0.0

• http4k-format-xml : [Fix CVE-2024-55875: Possible Break] Fixed XML processing by disabling entity expansion in DocumentBuilderFactory configuration. Note: This change affects how XML entity references are handled. If your code relies on XML entity expansion (like replacing &entity; references with their defined content), it will need to be updated to provide the correct configuration when deserialising the XML body. Entity references will now remain as unexpanded text in the document.

Full details at: https://www.http4k.org/security/cve-2024-12345/

H/T to @@​JAckLosingHeart for the report.

v5.40.0.0

• http4k-core : Allow invalidation of cookie with a path. H/T @​ollieabbey
• http4k-core : Allow setting cookie value without quotes. H/T @​ollieabbey
• http4k-core : Fix cookie format for cookie with no attributes. H/T @​ollieabbey
• http4k-testing-webdriver : Remove usages of deprecated getAttribute API. Now use getDomAttribute instead.
• http4k-cloudnative : [Breaking] Deprecation of various functions and re-homing into http4k-platform-k8s module. Some classes and functions have been repackaged.
• http4k-* : [PRE RELEASE PREPARATION] As a part of the upcoming V6, several modules are being rehoused to new Maven coordinates within http4k Community edition (and retaining the Apache2 license). In preparation, we have introduced these modules to give users the time to migrate without taking on-board other breaking changes from v6 - essentially allowing the upgrade cycle to be:

1. Upgrade to latest v5 release. Deal with deprecations and module changes.
2. Upgrade to v6 when it is released. Deal with other breaking changes. We expect these to be mainly imports and will be detailed in the v6 release note when we have the chance. In the meantime, this is the list of modules that are being rehoused:

| SOURCE MODULE - v5.X.X.X | DESTINATION MODULE(S) - v6.X.X.X |

... (truncated)

Commits

• fd3cc20 Release 5.44.2.0
• 2f935bf Upgrade Tencent & remove non-working incubator code
• a18ba8d Adding tooling module for HTTP traffic capture
• 53b41d6 Release 5.44.1.0
• 915b508 CHANGELOG
• aeae8ef Add test for Insert Hot Reload script
• 233da8e Upgrade versions
• 0b29aae Simplifying and fixing up types for HotReload.
• e7d7316 Renaming of various components in HotReloading
• f02bc2b Collapse HotReload actions
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #1611.