Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump org.http4k:http4k-core from 5.14.0.0 to 5.45.1.0 in /run/http4k-hello-world #1611

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 13, 2025

Bumps org.http4k:http4k-core from 5.14.0.0 to 5.45.1.0.

Release notes

Sourced from org.http4k:http4k-core's releases.

5.45.1.0

Changelog:

  • http4k-* : Upgrade some dependency versions.
  • http4k-server-undertow* : [Fix #1259] POST requests have empty body with Undertow if an SSE handler is registered

5.45.0.0

Changelog:

  • http4k-* : Upgrade some dependency versions.
  • http4k-bridge-servlet : [PRE RELEASE PREPARATION] This will be the ultimate destination of the Servlet integrations in http4k v6. We are providing this new module as a migration step before the upgrade to v6, so module changes can be dealt with separately.
  • http4k-server-servlet : [Breaking] Renamed as above.

5.44.3.0

Changelog:

  • http4k-server-servlet : [PRE RELEASE PREPARATION] This will be the ultimate destination of the Servlet integrations in http4k v6. We are providing this new module as a migration step before the upgrade to v6, so module changes can be dealt with separately.
  • http4k-tools-traffic-capture : [PRE RELEASE PREPARATION] This will be the ultimate destination of the Traffic Capture functionality from http4k-core in http4k v6. We are providing this new module as a migration step before the upgrade to v6, so module changes can be dealt with separately.

5.44.2.0

Changelog:

  • http4k-* : Upgrade some dependency versions.
  • http4k-serverless-tencent : Tweaks to support new version of Tencent SDK.

5.44.1.0

Changelog:

  • http4k-* : Upgrade some dependency versions.
  • http4k-template-thymeleaf : Support template fragments. H/T @​mikaelstaldal

5.44.0.0

Changelog:

  • http4k-* : Upgrade some dependency versions.
  • http4k-testing-approval : [Possible Break] HtmlApprovalTest formatter improved handling of HTML attributes which may require re-approving files.
  • http4k-connect-amazon-iamidentitycenter* : Read AWS profile configuration both from credentials and config files. H/T @​aharin
  • http4k-core : Deprecate lens' regex() in favour of regexGroup. In v6 regex() will match fully, changing its current behaviour.

5.43.0.0

Changelog:

  • http4k-* : Upgrade some dependency versions.
  • http4k-connect-amazon-iamidentitycenter* : Files containing tokens should only be readable by owner. H/T @​aharin
  • http4k-connect-slack : [New module!] Minimal support for Slack and Slack Webhooks.

5.42.0.0

Changelog:

  • http4k-* : Upgrade some dependency versions.
  • http4k-template : Fix line separators for templates to allow working across platform with templates.
  • http4k-connect-amazon-iamidentitycenter* :[Fix 1239] CredentialsProvider.SSO - Credentials caching issue.
  • http4k-connect-amazon-iamidentitycenter* : [Unlikely break] PKCE-based Authorization for AWS SSO. Tweaks should be easy to remedy in previous SSO implementation. H/T @​aharin

5.41.0.0

Changelog:

  • http4k-format-xml : [Fix CVE-2024-55875: Possible Break] Fixed XML processing by disabling entity expansion in DocumentBuilderFactory configuration. Note: This change affects how XML entity references are handled. If your code relies on XML entity expansion (like

... (truncated)

Changelog

Sourced from org.http4k:http4k-core's changelog.

v5.45.1.0

  • http4k-* : Upgrade some dependency versions.
  • http4k-server-undertow* : [Fix #1259] POST requests have empty body with Undertow if an SSE handler is registered

v5.45.0.0

  • http4k-* : Upgrade some dependency versions.
  • http4k-bridge-servlet : [PRE RELEASE PREPARATION] This will be the ultimate destination of the Servlet integrations in http4k v6. We are providing this new module as a migration step before the upgrade to v6, so module changes can be dealt with separately.
  • http4k-server-servlet : [Breaking] Renamed as above.

v5.44.3.0

  • http4k-server-servlet : [PRE RELEASE PREPARATION] This will be the ultimate destination of the Servlet integrations in http4k v6. We are providing this new module as a migration step before the upgrade to v6, so module changes can be dealt with separately.
  • http4k-tools-traffic-capture : [PRE RELEASE PREPARATION] This will be the ultimate destination of the Traffic Capture functionality from http4k-core in http4k v6. We are providing this new module as a migration step before the upgrade to v6, so module changes can be dealt with separately.

v5.44.2.0

v5.44.1.0

  • http4k-* : Upgrade some dependency versions.
  • http4k-template-thymeleaf : Support template fragments. H/T @​mikaelstaldal

v5.44.0.0

  • http4k-* : Upgrade some dependency versions.
  • http4k-testing-approval : [Possible Break] HtmlApprovalTest formatter improved handling of HTML attributes which may require re-approving files.
  • http4k-connect-amazon-iamidentitycenter* : Read AWS profile configuration both from credentials and config files. H/T @​aharin
  • http4k-core : Deprecate lens' regex() in favour of regexGroup. In v6 regex() will match fully, changing its current behaviour.

v5.43.0.0

  • http4k-* : Upgrade some dependency versions.
  • http4k-connect-amazon-iamidentitycenter* : Files containing tokens should only be readable by owner. H/T @​aharin
  • http4k-connect-slack : [New module!] Minimal support for Slack and Slack Webhooks.

v5.42.0.0

  • http4k-* : Upgrade some dependency versions.
  • http4k-template : Fix line separators for templates to allow working across platform with templates.
  • http4k-connect-amazon-iamidentitycenter* :[Fix 1239] CredentialsProvider.SSO - Credentials caching issue.
  • http4k-connect-amazon-iamidentitycenter* : [Unlikely break] PKCE-based Authorization for AWS SSO. Tweaks should be easy to remedy in previous SSO implementation. H/T @​aharin

v5.41.0.0

  • http4k-format-xml : [Fix CVE-2024-55875: Possible Break] Fixed XML processing by disabling entity expansion in DocumentBuilderFactory configuration. Note: This change affects how XML entity references are handled. If your code relies on XML entity expansion (like replacing &entity; references with their defined content), it will need to be updated to provide the correct configuration when deserialising the XML body. Entity references will now remain as unexpanded text in the document.

Full details at: https://www.http4k.org/security/cve-2024-12345/

H/T to @@​JAckLosingHeart for the report.

v5.40.0.0

  • http4k-core : Allow invalidation of cookie with a path. H/T @​ollieabbey
  • http4k-core : Allow setting cookie value without quotes. H/T @​ollieabbey

... (truncated)

Commits
  • c6d3578 Release 5.45.1.0
  • 6ff7c60 Disable test for apache server
  • e7b5dd4 [Fix #1216] Add fallback from SSE to HTTP if event stream request cannot be m...
  • 15cf574 [Fix #1216] Add fallback from SSE to HTTP if event stream request cannot be m...
  • f54d2bd Move Html5ApprovalTest to main
  • 7617be0 Release 5.45.0.0
  • c657df0 Release 5.45.0.0
  • 529b07d Move module to http4k-bridge-servlet
  • 7edcb94 Release 5.44.3.0
  • 69823b0 Changelog [skip-ci]
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.http4k:http4k-core](https://github.com/http4k/http4k) from 5.14.0.0 to 5.45.1.0.
- [Release notes](https://github.com/http4k/http4k/releases)
- [Changelog](https://github.com/http4k/http4k/blob/master/CHANGELOG.md)
- [Commits](http4k/http4k@5.14.0.0...5.45.1.0)

---
updated-dependencies:
- dependency-name: org.http4k:http4k-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jan 13, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants