dependabot[bot] opened a new pull request, #5701: URL: https://github.com/apache/iceberg/pull/5701
Bumps [gradle-baseline-java](https://github.com/palantir/gradle-baseline) from 4.0.0 to 4.161.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/palantir/gradle-baseline/releases">gradle-baseline-java's releases</a>.</em></p> <blockquote> <h2>4.161.0</h2> <table> <thead> <tr> <th>Type</th> <th>Description</th> <th>Link</th> </tr> </thead> <tbody> <tr> <td>Fix</td> <td>Reverts a change introduced to baseline-java-version 4.160.0, which was causing failures on multi-project builds.</td> <td><a href="https://github-redirect.dependabot.com/palantir/gradle-baseline/pull/2369">palantir/gradle-baseline#2369</a></td> </tr> </tbody> </table> <h2>4.160.0</h2> <table> <thead> <tr> <th>Type</th> <th>Description</th> <th>Link</th> </tr> </thead> <tbody> <tr> <td>Fix</td> <td>Workaround to IDEA-301084</td> <td><a href="https://github-redirect.dependabot.com/palantir/gradle-baseline/pull/2368">palantir/gradle-baseline#2368</a></td> </tr> </tbody> </table> <h2>4.159.0</h2> <table> <thead> <tr> <th>Type</th> <th>Description</th> <th>Link</th> </tr> </thead> <tbody> <tr> <td>Improvement</td> <td>Add an errorprone check and typed annotation for Javax -> Jakarta<!-- raw HTML omitted --><!-- raw HTML omitted -->There is a certain class of very problematic cases whereby if you have<!-- raw HTML omitted -->a method such as the following:<!-- raw HTML omitted --><!-- raw HTML omitted --><code><br>myJerseyResource.register(/* this is of type Object */ object);<br></code><!-- raw HTML omitted --><!-- raw HTML omitted -->Then if you supply a resource which includes any <code>javax.ws.rs</code><!-- raw HTML omitted -->annotations on it, then those will not be registered if your Jersey<!-- raw HTML omitted -->version is 3.x or later (and you'll only find this out at runtime).<!-- raw HTML omitted --><!-- raw HTML omitted -->The opposite is also true if you try to supply resources annotated<!-- raw HTML omitted -->with <code>jakarta.ws.rs</code> to Jersey 2.x.<!-- raw HTML omitted --><!-- raw HTML omitted -->To address this, this commit attempts to add an errorpron e check<!-- raw HTML omitted -->which lets implementors add an annotation <code>@ForbidJavax</code> to methods<!-- raw HTML omitted -->which have been knowingly migrated to Jakarta EE9 and cannot<!-- raw HTML omitted -->accept legacy javax types.</td> <td><a href="https://github-redirect.dependabot.com/palantir/gradle-baseline/pull/2366">palantir/gradle-baseline#2366</a></td> </tr> </tbody> </table> <h2>4.158.0</h2> <table> <thead> <tr> <th>Type</th> <th>Description</th> <th>Link</th> </tr> </thead> <tbody> <tr> <td>Fix</td> <td>Make the <code>checkUnusedDependencies</code> tasks added by <code>baseline-exact-dependencies</code> compatible with Gradle's configure-on-demand feature.</td> <td><a href="https://github-redirect.dependabot.com/palantir/gradle-baseline/pull/2363">palantir/gradle-baseline#2363</a></td> </tr> </tbody> </table> <h2>4.157.0</h2> <table> <thead> <tr> <th>Type</th> <th>Description</th> <th>Link</th> </tr> </thead> <tbody> <tr> <td>Improvement</td> <td>Make task initialization lazier in the <code>junit-reports</code> plugin.</td> <td><a href="https://github-redirect.dependabot.com/palantir/gradle-baseline/pull/2364">palantir/gradle-baseline#2364</a></td> </tr> </tbody> </table> <h2>4.156.0</h2> <table> <thead> <tr> <th>Type</th> <th>Description</th> <th>Link</th> </tr> </thead> <tbody> <tr> <td>Fix</td> <td>Fix BaselineJavaVersion checkstyle configuration on gradle < 7.5</td> <td><a href="https://github-redirect.dependabot.com/palantir/gradle-baseline/pull/2360">palantir/gradle-baseline#2360</a></td> </tr> </tbody> </table> <h2>4.155.0</h2> <p><em>Automated release, no documented user facing changes</em></p> <h2>4.154.0</h2> <table> <thead> <tr> <th>Type</th> <th>Description</th> <th>Link</th> </tr> </thead> <tbody> <tr> <td>Improvement</td> <td>The JUnits reports plugin is no longer applied by default. Test reports now use the standard output locations from Gradle conventions.</td> <td><a href="https://github-redirect.dependabot.com/palantir/gradle-baseline/pull/2355">palantir/gradle-baseline#2355</a></td> </tr> </tbody> </table> <h2>4.153.0</h2> <table> <thead> <tr> <th>Type</th> <th>Description</th> <th>Link</th> </tr> </thead> <tbody> <tr> <td>Fix</td> <td>Set the java launcher for Checkstyle tasks, too</td> <td><a href="https://github-redirect.dependabot.com/palantir/gradle-baseline/pull/2351">palantir/gradle-baseline#2351</a></td> </tr> </tbody> </table> <h2>4.152.0</h2> <table> <thead> <tr> <th>Type</th> <th>Description</th> <th>Link</th> </tr> </thead> <tbody> <tr> <td>Feature</td> <td>Add DefaultLocale check<!-- raw HTML omitted --><!-- raw HTML omitted -->Related to google/error-prone issues 632<!-- raw HTML omitted --><!-- raw HTML omitted -->Adds a <code>DefaultLocale</code> check that replaces uses of <code>String.toLowerCase()</code> and <code>String.toUpperCase()</code> with the overloads that take a <code>Locale</code>, using <code>Locale.ROOT</code>.</td> <td><a href="https://github-redirect.dependabot.com/palantir/gradle-baseline/pull/2343">palantir/gradle-baseline#2343</a></td> </tr> </tbody> </table> <h2>4.151.0</h2> <p>| Type | Description | Link |</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/palantir/gradle-baseline/commit/08b14b94d4ba8b15f102ed5f8a0e1909449577ba"><code>08b14b9</code></a> Autorelease 4.161.0</li> <li><a href="https://github.com/palantir/gradle-baseline/commit/59a87719899c94c41bbcc2c9d0d1a77af6fc04c0"><code>59a8771</code></a> Revert <a href="https://github-redirect.dependabot.com/palantir/gradle-baseline/issues/2368">#2368</a> (Workaround to IDEA-301084) (<a href="https://github-redirect.dependabot.com/palantir/gradle-baseline/issues/2369">#2369</a>)</li> <li><a href="https://github.com/palantir/gradle-baseline/commit/828111050da72901a66a676ae517719a9e9d9849"><code>8281110</code></a> Autorelease 4.160.0</li> <li><a href="https://github.com/palantir/gradle-baseline/commit/4ebd7ca691148f565905f219a2c029d49a98bed8"><code>4ebd7ca</code></a> Workaround to IDEA-301084 (<a href="https://github-redirect.dependabot.com/palantir/gradle-baseline/issues/2368">#2368</a>)</li> <li><a href="https://github.com/palantir/gradle-baseline/commit/030833b3d10121e58968f4229e16cb1900630f0a"><code>030833b</code></a> Autorelease 4.159.0</li> <li><a href="https://github.com/palantir/gradle-baseline/commit/f0cd225235e264dfe0133390203cf83ade8112d4"><code>f0cd225</code></a> Add an errorprone check and typed annotation for Javax -> Jakarta (<a href="https://github-redirect.dependabot.com/palantir/gradle-baseline/issues/2366">#2366</a>)</li> <li><a href="https://github.com/palantir/gradle-baseline/commit/62dbb9e6f7e2bc5016d818e157e847c574e2fe69"><code>62dbb9e</code></a> Update baseline-circleci README and tests (<a href="https://github-redirect.dependabot.com/palantir/gradle-baseline/issues/2358">#2358</a>)</li> <li><a href="https://github.com/palantir/gradle-baseline/commit/7254f236278c8ffeb73132974eeca444ad44b37e"><code>7254f23</code></a> Autorelease 4.158.0</li> <li><a href="https://github.com/palantir/gradle-baseline/commit/d9b5b843ebb611fe8aa4a2761c9358af4d36d36d"><code>d9b5b84</code></a> Make baseline-exact-dependencies compatible with configure-on-demand (<a href="https://github-redirect.dependabot.com/palantir/gradle-baseline/issues/2363">#2363</a>)</li> <li><a href="https://github.com/palantir/gradle-baseline/commit/1f3a560a13881de060a955bca8e828e68aedecd6"><code>1f3a560</code></a> Autorelease 4.157.0</li> <li>Additional commits viewable in <a href="https://github.com/palantir/gradle-baseline/compare/4.0.0...4.161.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
