sergehuber opened a new pull request, #893: URL: https://github.com/apache/unomi/pull/893
## Plain-language summary This change updates several third-party libraries and frontend packages in one pull request. The goal is to clear most open Dependabot updates without waiting for many long CI runs, while avoiding large platform upgrades that need their own work. ## What changed * Bump Apache CXF from 3.6.8 to 3.6.12 (stay on the 3.6 line; no CXF 4). * Bump the IP address library from 4.3.0 to 5.6.2. * Bump the Salesforce connector CometD client from 5.0.13 to 5.0.21 (stay on 5.x; no CometD 8). * Bump `maven-scm-publish-plugin` to 3.3.0 and sample jsoup to 1.23.1. * Update graphql-ui and web-tracker yarn locks (`postcss`, `browserslist`, `baseline-browser-mapping`). * Teach Dependabot to ignore CXF majors, CometD majors, and graphql-java-annotations majors for now. ## Out of scope * CXF 4.x (Dependabot #835) * CometD 8.x (closed; see UNOMI-989) * Full GraphQL Java / annotations stack (Dependabot #836) ## Test plan - [x] `mvn -pl services-common -Dtest=IPValidationUtilsTest test` (11 tests passed) - [x] `mvn -pl extensions/salesforce-connector/services,rest,services-common -am -DskipTests compile` - [ ] Full GitHub CI ## Supersedes #839 #837 #847 #848 #863 #859 #860 (and replaces the intent of #835 with a 3.6.x bump) ## References https://issues.apache.org/jira/browse/UNOMI-990 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
