dependabot[bot] opened a new pull request, #16841: URL: https://github.com/apache/lucene/pull/16841
Bumps the java group with 2 updates: io.github.ben-manes.versions.settings and [gradle-wrapper](https://github.com/gradle/gradle). Updates `io.github.ben-manes.versions.settings` from 0.64.0 to 0.65.0 Updates `gradle-wrapper` from 9.8.0 to 9.8.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/gradle/gradle/releases";>gradle-wrapper's releases</a>.</em></p> <blockquote> <h2>9.8.1</h2> <p>This is a patch release for Gradle 9.8.0. We recommend using 9.8.1 instead of 9.8.0.</p> <p>This release addresses three high rated vulnerabilities:</p> <ul> <li><a href="https://github.com/gradle/gradle/security/advisories/GHSA-mvvg-497x-hmj8";>Unauthenticated worker-to-daemon channel deserializes untrusted Java objects</a></li> <li><a href="https://github.com/gradle/gradle/security/advisories/GHSA-xwqc-3h47-hg64";>Deserialization of untrusted Java objects before authentication in the client - daemon communication</a></li> <li><a href="https://github.com/gradle/gradle/security/advisories/GHSA-j5m7-59rp-24f5";>Failure to disable repositories failing to establish an SSL connection can expose builds to malicious artifacts</a></li> </ul> <p>The following issues were resolved:</p> <ul> <li>[Gradle 9.8.0 complains again about invalid Toolchains on Debian / Ubuntu packaged systems]- (<a href="https://redirect.github.com/gradle/gradle/issues/39358";>gradle/gradle#39358</a>)</li> <li><a href="https://redirect.github.com/gradle/gradle/issues/39359";>Gradle 9.8.0 removes root java.util.logging handlers installed by a custom LogManager (breaks Quarkus test log capture)</a></li> <li><a href="https://redirect.github.com/gradle/gradle/issues/39365";>Dependency resolution regression</a></li> </ul> <p><a href="https://docs.gradle.org/9.8.1/release-notes.html";>Read the Release Notes</a></p> <p>We would like to thank the following community members for their contributions to this release of Gradle: <a href="https://github.com/Gautam-aman";>Aman Gautam</a>, <a href="https://github.com/Vampire";>Björn Kautler</a>, <a href="https://github.com/Juneezee";>Eng Zer Jun</a>, <a href="https://github.com/Hashim1999164";>Hashim Khan</a>, <a href="https://github.com/jkrannich";>Julian Krannich</a>, <a href="https://github.com/youdie006";>KBS</a>, <a href="https://github.com/itsCodeTide";>Labh R Jethe</a>, <a href="https://github.com/doddi";>Mark Dodgson</a>, <a href="https://github.com/kroune";>Maxim</a>, <a href="https://github.com/Develop-KIM";>monkey</a>, <a href="https://github.com/nataphon-ktsystems";>nataphon-ktsystems</a>, <a href="https://github.com/paulk-asert";>Paul King</a>, <a href="https://github.com/qiu-tiandev";>Qiu Tian</a>, <a href="https://github.com/sandeshgorde";>rg_sandesh</a>, <a href="https://github.com/rpalcolea";>Roberto Perez Alcolea</a>, <a href="https://github.com/seanxuu";>Sean</a>, <a href="https://github.com/Goooler";>Zongle Wang</a>.</p> <h2>Upgrade instructions</h2> <p>Switch your build to use Gradle 9.8.1 by updating your wrapper:</p> <pre><code>./gradlew :wrapper --gradle-version=9.8.1 && ./gradlew :wrapper </code></pre> <p>See the Gradle <a href="https://docs.gradle.org/9.8.1/userguide/upgrading_version_9.html";>9.x upgrade guide</a> to learn about deprecations, breaking changes and other considerations when upgrading.</p> <p>For Java, Groovy, Kotlin and Android compatibility, see the <a href="https://docs.gradle.org/9.8.1/userguide/compatibility.html";>full compatibility notes</a>.</p> <h2>Reporting problems</h2> <p>If you find a problem with this release, please file a bug on <a href="https://github.com/gradle/gradle/issues";>GitHub Issues</a> adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the <a href="https://discuss.gradle.org/c/help-discuss";>forum</a>.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/gradle/gradle/commit/39daf39feb60a18b1b6ddccde53366522fef516f";><code>39daf39</code></a> Release notes for Gradle 9.8.1 (<a href="https://redirect.github.com/gradle/gradle/issues/39409";>#39409</a>)</li> <li><a href="https://github.com/gradle/gradle/commit/4fc92e52f54010b0c973476e01ace071b3ecd7ba";><code>4fc92e5</code></a> Release notes for Gradle 9.8.1</li> <li><a href="https://github.com/gradle/gradle/commit/bfbd14a7daf19978f8028765b78e2d53f398d9ad";><code>bfbd14a</code></a> Make repository disabling stricter (<a href="https://redirect.github.com/gradle/gradle/issues/39403";>#39403</a>)</li> <li><a href="https://github.com/gradle/gradle/commit/95e0bf95c8837ea91f150460f6ea97746f71c640";><code>95e0bf9</code></a> Check daemon & worker preamble earlier (<a href="https://redirect.github.com/gradle/gradle/issues/39402";>#39402</a>)</li> <li><a href="https://github.com/gradle/gradle/commit/7aa9a5b469771202833e354bb91becdde27dcd70";><code>7aa9a5b</code></a> Improve display for distribution url in wrapper (<a href="https://redirect.github.com/gradle/gradle/issues/39401";>#39401</a>)</li> <li><a href="https://github.com/gradle/gradle/commit/74a77206ec954fa9725e8d27fb62744afaf4a228";><code>74a7720</code></a> Wrap GCP & S3 resolution errors into HTTP to reuse repository disabling mecha...</li> <li><a href="https://github.com/gradle/gradle/commit/651110a5cbf1b1ee9777e0c8f90f160d5d91fcba";><code>651110a</code></a> Check worker token before any serialization similarly to daemon</li> <li><a href="https://github.com/gradle/gradle/commit/8a6b9d9f9c59aefadb91369c90bd00aa4f1a323f";><code>8a6b9d9</code></a> Harden repository disabling: disable them by default on failure unless there'...</li> <li><a href="https://github.com/gradle/gradle/commit/f28e51437beb6c61f4cd83eefe86d1070b129054";><code>f28e514</code></a> Check the daemon token before any serialization</li> <li><a href="https://github.com/gradle/gradle/commit/86ab2732c8d83fc23b2fd0aca9de548e4a260937";><code>86ab273</code></a> Replace credentials for distribution url with *** and avoid showing the plain...</li> <li>Additional commits viewable in <a href="https://github.com/gradle/gradle/compare/v9.8.0...v9.8.1";>compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
