dependabot[bot] opened a new pull request, #3487: URL: https://github.com/apache/cxf/pull/3487
Bumps [jakarta.enterprise:jakarta.enterprise.cdi-api](https://github.com/eclipse-ee4j/cdi) from 4.1.0 to 5.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eclipse-ee4j/cdi/releases">jakarta.enterprise:jakarta.enterprise.cdi-api's releases</a>.</em></p> <blockquote> <h2>5.0.0.CR1</h2> <p>A candidate release for CDI 5 which contains all the code changes intended for the Final version.</p> <h2>What's Changed</h2> <ul> <li>improve injection points specification by <a href="https://github.com/Ladicek"><code>@Ladicek</code></a> in <a href="https://redirect.github.com/jakartaee/cdi/pull/978">jakartaee/cdi#978</a></li> <li>improve wording in "Built-in qualifier types" by <a href="https://github.com/Ladicek"><code>@Ladicek</code></a> in <a href="https://redirect.github.com/jakartaee/cdi/pull/979">jakartaee/cdi#979</a></li> <li>Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jakartaee/cdi/pull/981">jakartaee/cdi#981</a></li> <li>Bump actions/checkout from 6.0.2 to 6.0.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jakartaee/cdi/pull/983">jakartaee/cdi#983</a></li> <li>add CDI 5.0 'What's new' blog article by <a href="https://github.com/manovotn"><code>@manovotn</code></a> in <a href="https://redirect.github.com/jakartaee/cdi/pull/984">jakartaee/cdi#984</a></li> <li>Bump actions/setup-java from 5.2.0 to 5.3.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jakartaee/cdi/pull/988">jakartaee/cdi#988</a></li> <li>Bump actions/checkout from 6.0.3 to 7.0.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jakartaee/cdi/pull/989">jakartaee/cdi#989</a></li> <li>Bump nokogiri from 1.19.3 to 1.19.4 in /docs by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jakartaee/cdi/pull/990">jakartaee/cdi#990</a></li> <li>Bump concurrent-ruby from 1.3.6 to 1.3.7 in /docs by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jakartaee/cdi/pull/992">jakartaee/cdi#992</a></li> <li>Bump faraday from 2.14.2 to 2.14.3 in /docs by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jakartaee/cdi/pull/991">jakartaee/cdi#991</a></li> <li>Bump actions/setup-java from 5.3.0 to 5.4.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jakartaee/cdi/pull/993">jakartaee/cdi#993</a></li> <li>fix race condition in <code>CDI</code> (and <code>BuildServicesResolver</code>) by <a href="https://github.com/Ladicek"><code>@Ladicek</code></a> in <a href="https://redirect.github.com/jakartaee/cdi/pull/996">jakartaee/cdi#996</a></li> <li>Bump actions/setup-java from 5.4.0 to 5.6.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jakartaee/cdi/pull/998">jakartaee/cdi#998</a></li> <li>Bump actions/checkout from 7.0.0 to 7.0.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jakartaee/cdi/pull/999">jakartaee/cdi#999</a></li> <li>Bump org.eclipse.ee4j:project from 2.0.4 to 2.0.5 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jakartaee/cdi/pull/1000">jakartaee/cdi#1000</a></li> <li>respecify wildcard type arguments for <code>Event</code> and <code>Instance</code> by <a href="https://github.com/Ladicek"><code>@Ladicek</code></a> in <a href="https://redirect.github.com/jakartaee/cdi/pull/982">jakartaee/cdi#982</a></li> <li>clarify wildcards in the bean assignability rules by <a href="https://github.com/Ladicek"><code>@Ladicek</code></a> in <a href="https://redirect.github.com/jakartaee/cdi/pull/1001">jakartaee/cdi#1001</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/jakartaee/cdi/compare/5.0.0.Beta1...5.0.0.CR1">https://github.com/jakartaee/cdi/compare/5.0.0.Beta1...5.0.0.CR1</a></p> <h2>5.0.0.Beta1</h2> <h2>What's Changed</h2> <ul> <li>Bump nokogiri from 1.18.3 to 1.18.4 in /docs by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jakartaee/cdi/pull/862">jakartaee/cdi#862</a></li> <li>Bump org.asciidoctor:asciidoctor-maven-plugin from 3.1.1 to 3.2.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jakartaee/cdi/pull/864">jakartaee/cdi#864</a></li> <li>Bump net.revelc.code.formatter:formatter-maven-plugin from 2.25.0 to 2.26.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jakartaee/cdi/pull/863">jakartaee/cdi#863</a></li> <li>Bump actions/setup-java from 4.7.0 to 4.7.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jakartaee/cdi/pull/866">jakartaee/cdi#866</a></li> <li>Bump nokogiri from 1.18.4 to 1.18.8 in /docs by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jakartaee/cdi/pull/868">jakartaee/cdi#868</a></li> <li>Bump net.revelc.code.formatter:formatter-maven-plugin from 2.26.0 to 2.27.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jakartaee/cdi/pull/870">jakartaee/cdi#870</a></li> <li>use the term "bean name" instead of "EL name" in the API by <a href="https://github.com/Ladicek"><code>@Ladicek</code></a> in <a href="https://redirect.github.com/jakartaee/cdi/pull/875">jakartaee/cdi#875</a></li> <li>Fix typo in ProcessInjectionPoint javadoc by <a href="https://github.com/Azquelt"><code>@Azquelt</code></a> in <a href="https://redirect.github.com/jakartaee/cdi/pull/878">jakartaee/cdi#878</a></li> <li>Bump nokogiri from 1.18.8 to 1.18.9 in /docs by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jakartaee/cdi/pull/879">jakartaee/cdi#879</a></li> <li>bump to 5.0.0.Alpha2-SNAPSHOT by <a href="https://github.com/Ladicek"><code>@Ladicek</code></a> in <a href="https://redirect.github.com/jakartaee/cdi/pull/880">jakartaee/cdi#880</a></li> <li>Bump actions/checkout from 4.2.2 to 5.0.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jakartaee/cdi/pull/881">jakartaee/cdi#881</a></li> <li>Bump actions/setup-java from 4.7.1 to 5.0.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jakartaee/cdi/pull/883">jakartaee/cdi#883</a></li> <li>Bump net.revelc.code.formatter:formatter-maven-plugin from 2.27.0 to 2.28.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jakartaee/cdi/pull/885">jakartaee/cdi#885</a></li> <li>Bump net.revelc.code.formatter:formatter-maven-plugin from 2.28.0 to 2.29.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jakartaee/cdi/pull/887">jakartaee/cdi#887</a></li> <li>Bump rexml from 3.4.0 to 3.4.2 in /docs by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jakartaee/cdi/pull/891">jakartaee/cdi#891</a></li> <li>Bump org.apache.maven.plugins:maven-compiler-plugin from 3.14.0 to 3.14.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jakartaee/cdi/pull/894">jakartaee/cdi#894</a></li> <li>Forbid injecting Event/Instance with a wildcard type by <a href="https://github.com/manovotn"><code>@manovotn</code></a> in <a href="https://redirect.github.com/jakartaee/cdi/pull/892">jakartaee/cdi#892</a></li> <li>Add Java 25 to the CI setup by <a href="https://github.com/manovotn"><code>@manovotn</code></a> in <a href="https://redirect.github.com/jakartaee/cdi/pull/897">jakartaee/cdi#897</a></li> <li>Add beans XSD file for 5.0 by <a href="https://github.com/manovotn"><code>@manovotn</code></a> in <a href="https://redirect.github.com/jakartaee/cdi/pull/899">jakartaee/cdi#899</a></li> <li>Bump org.asciidoctor:asciidoctorj-pdf from 2.3.19 to 2.3.20 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jakartaee/cdi/pull/900">jakartaee/cdi#900</a></li> <li>Provide a BeanContainer method to unwrap proxies by <a href="https://github.com/manovotn"><code>@manovotn</code></a> in <a href="https://redirect.github.com/jakartaee/cdi/pull/898">jakartaee/cdi#898</a></li> <li>State that vetoing an already specialized bean results in non-portable behavior by <a href="https://github.com/manovotn"><code>@manovotn</code></a> in <a href="https://redirect.github.com/jakartaee/cdi/pull/901">jakartaee/cdi#901</a></li> <li>fix the specification of alternatives by <a href="https://github.com/Ladicek"><code>@Ladicek</code></a> in <a href="https://redirect.github.com/jakartaee/cdi/pull/902">jakartaee/cdi#902</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jakartaee/cdi/commit/bb2b53b19b205806eb9de166cca3b8e27b125f99"><code>bb2b53b</code></a> Release 5.0.0</li> <li><a href="https://github.com/jakartaee/cdi/commit/42495669b0eae726726682ab6b5b1c85e2cd2a92"><code>4249566</code></a> Remove reference to external copy of the EFSL license</li> <li><a href="https://github.com/jakartaee/cdi/commit/9c0bee137fe34a340424d4541458c1f51bcc3a24"><code>9c0bee1</code></a> Update spec and javadoc license to EFSL 2.0</li> <li><a href="https://github.com/jakartaee/cdi/commit/0bd65e6d77dd5f7c620dfbb6a908a305775b595e"><code>0bd65e6</code></a> Add 5.0 changes summary to the spec preface</li> <li><a href="https://github.com/jakartaee/cdi/commit/47a27e165f22b6c31e6d09bf7bc7f159c50efc04"><code>47a27e1</code></a> Update copyright year to 2026 in javadoc footers and spec license</li> <li><a href="https://github.com/jakartaee/cdi/commit/63655f86c3a08e98201a56f3439351b866435185"><code>63655f8</code></a> Prepare for next development iteration 5.0.1-SNAPSHOT</li> <li><a href="https://github.com/jakartaee/cdi/commit/bdeb7313713dc7fe3dbd6d94d0516bf952b88ef0"><code>bdeb731</code></a> Release 5.0.0</li> <li><a href="https://github.com/jakartaee/cdi/commit/d03f8dcab119089c08f138f0cf04012dc15f43f2"><code>d03f8dc</code></a> Prepare for next development iteration 5.0.0.CR2-SNAPSHOT</li> <li><a href="https://github.com/jakartaee/cdi/commit/d9e49aa60890b153dbc72592cf66a669cf4afba2"><code>d9e49aa</code></a> Release 5.0.0.CR1</li> <li><a href="https://github.com/jakartaee/cdi/commit/f36baa2333abcec176f5338ad6c89904bf39bee0"><code>f36baa2</code></a> clarify wildcards in the bean assignability rules</li> <li>Additional commits viewable in <a href="https://github.com/eclipse-ee4j/cdi/compare/4.1.0...5.0.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
