dependabot[bot] opened a new pull request #47: URL: https://github.com/apache/axis-axis2-java-core/pull/47
Bumps [plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) from 3.4 to 4.2.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/codehaus-plexus/plexus-archiver/releases";>plexus-archiver's releases</a>.</em></p> <blockquote> <h2>4.2.3</h2> <!-- raw HTML omitted --> <ul> <li>File#lastModified on Linux JDK8 loses milliseconds precision (JDK-8177809) (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/149";>#149</a>) <a href="https://github.com/MartinKanters";>@MartinKanters</a></li> <li>remove incorrect JavaDoc comments (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/134";>#134</a>) <a href="https://github.com/elharo";>@elharo</a></li> </ul> <h2>🚀 New features and improvements</h2> <ul> <li>[MDEP-651] Warn on duplicate archive entries (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/128";>#128</a>) <a href="https://github.com/mthmulders";>@mthmulders</a></li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li>fix symlink test issue (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/145";>#145</a>) <a href="https://github.com/olamy";>@olamy</a></li> </ul> <h2>📦 Dependency updates</h2> <ul> <li>Bump junit from 4.13 to 4.13.1 (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/151";>#151</a>) <a href="https://github.com/dependabot";>@dependabot</a></li> <li>Bump actions/cache from v2.1.1 to v2.1.2 (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/152";>#152</a>) <a href="https://github.com/dependabot";>@dependabot</a></li> <li>Bump actions/cache from v2.1.0 to v2.1.1 (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/147";>#147</a>) <a href="https://github.com/dependabot";>@dependabot</a></li> <li>Bump plexus from 6.1 to 6.4 (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/142";>#142</a>) <a href="https://github.com/dependabot";>@dependabot</a></li> <li>Bump junit from 4.12 to 4.13 (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/143";>#143</a>) <a href="https://github.com/dependabot";>@dependabot</a></li> </ul> <h2>Plexus Archiver 4.2.2</h2> <p>In this version the reproducible build is enabled (thanks to <a href="https://github.com/hboutemy";>@hboutemy</a>) so the resulting jar should be reproducible. For more info check the <a href="https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=74682318";>wiki page</a>.</p> <h2>:bug: Bug Fixes</h2> <ul> <li>DirectoryArchiver fails for symlinks if a parent directory doesn't exist (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/131";>#131</a>) <a href="https://github.com/jameshans";>@jameshans</a></li> </ul> <h2>:package: Dependency updates</h2> <ul> <li>Bump commons-compress from 1.19 to 1.20 (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/133";>#133</a>) <a href="https://github.com/plamentotev";>@plamentotev</a></li> </ul> <h2>Plexus Archiver 4.2.1</h2> <h2>:bug: Bug Fixes</h2> <ul> <li><a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/126";>#126</a> - Fixed broken javadoc for <code>Archiver#configureReproducible</code>.</li> <li><a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/127";>#127</a> - Fixed reproducible zip entry time depends on local daylight saving time.</li> </ul> <h2>Plexus Archiver 4.2.0</h2> <h2>:rocket: New features and improvements</h2> <ul> <li><a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/121";>#121</a> - Add API to configure reproducible archives - <code>Archiver#configureReproducible</code>.</li> <li>Add option to force the user and group for all archive entries.</li> <li>Add option to force the last modified date for all archive entries.</li> <li><a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/114";>#114</a> - Add option to provide <code>Comparator</code> for <code>Archiver</code>. The archive entries will be added in the order specified by the provided comparator.</li> <li><a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/117";>#117</a> - Add option to limit the output size for <code>AbstractZipUnArchiver</code> as a way of protection against ZIP bombs. Thanks to Sergey Patrikeev and Semyon Atamas.</li> <li>Various code improvements. Thanks to Semyon Atamas and Sergey Patrikeev.</li> </ul> <h2>:bug: Bug Fixes</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/codehaus-plexus/plexus-archiver/blob/master/ReleaseNotes.md";>plexus-archiver's changelog</a>.</em></p> <blockquote> <h1>Plexus Archiver Release Notes</h1> <h2>Plexus Archiver 4.2.1</h2> <h3>Bugs</h3> <ul> <li>[Issue <a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/126";>#126</a>][issue-126] - Fixed broken javadoc for <code>Archiver#configureReproducible</code>.</li> <li>[Issue <a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/127";>#127</a>][issue-127] - Fixed reproducible zip entry time depends on local daylight saving time.</li> </ul> <h2>Plexus Archiver 4.2.0</h2> <h3>Improvements</h3> <ul> <li>[Pull Request <a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/121";>#121</a>][pr-121] - Add API to configure reproducible archives - <code>Archiver#configureReproducible</code>.</li> <li>Add option to force the user and group for all archive entries.</li> <li>Add option to force the last modified date for all archive entries.</li> <li>[Issue <a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/114";>#114</a>][issue-114] - Add option to provide <code>Comparator</code> for <code>Archiver</code>. The archive entries will be added in the order specified by the provided comparator.</li> <li>[Pull Request <a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/117";>#117</a>][pr-117] - Add option to limit the output size for <code>AbstractZipUnArchiver</code> as a way of protection against ZIP bombs. Thanks to Sergey Patrikeev and Semyon Atamas.</li> <li>Various code improvements. Thanks to Semyon Atamas and Sergey Patrikeev.</li> </ul> <h3>Bugs</h3> <ul> <li>[Issue <a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/94";>#94</a>][issue-94] - Fixed setting archiver destination to the working directory causes <code>NullPointerException</code>.</li> </ul> <h3>Tasks</h3> <ul> <li>[Issue <a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/119";>#119</a>][issue-119] - Updated dependencies: <code>commons-compress</code> to 1.18, <code>plexus-io</code> to 3.2.0 and <code>plexus-utils</code> to 3.3.0.</li> </ul> <h2>Plexus Archiver 4.1.0</h2> <h3>Improvements</h3> <ul> <li>[Issue <a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/110";>#110</a>][issue-110] - Add option to omit "Created-By" manifest entry.</li> </ul> <h2>Plexus Archiver 4.0.0</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/78e890e3f297a7f812c46617bb3da4e6a5eb886c";><code>78e890e</code></a> Merge branch 'master' of <a href="https://github.com/codehaus-plexus/plexus-archiver";>https://github.com/codehaus-plexus/plexus-archiver</a></li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/6ee0828d510dbebfa121bca9bf95ca1afad802e8";><code>6ee0828</code></a> [maven-release-plugin] prepare release plexus-archiver-4.2.3</li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/efd980ddaf3d98ebb19e06805258f9f978c9ebc1";><code>efd980d</code></a> [MDEP-651] Warn on duplicate archive entries (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/128";>#128</a>)</li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/36bf6bcb7d741b7a05e0470364e2e707e61dc578";><code>36bf6bc</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/151";>#151</a> from codehaus-plexus/dependabot/maven/junit-junit-4.13.1</li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/0435a9cf1df0f20255e04454d2165b474bf50955";><code>0435a9c</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/152";>#152</a> from codehaus-plexus/dependabot/github_actions/action...</li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/87b7d7ef06214ed25e2aa0ba1cf36668b0095ef0";><code>87b7d7e</code></a> Bump actions/cache from v2.1.1 to v2.1.2</li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/5b0c74873d7660d9266bf1bd655d58d4f5e70187";><code>5b0c748</code></a> Bump junit from 4.13 to 4.13.1</li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/73ee0482c5d99ac10fb8fa6cd81548528472f699";><code>73ee048</code></a> File#lastModified on Linux JDK8 loses milliseconds precision (JDK-8177809)</li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/e55f320f190bc5fe2b1029c4fd8bb3e294a299bc";><code>e55f320</code></a> File#lastModified on Linux JDK8 loses milliseconds precision (JDK-8177809).</li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/b579cb12284379a881f0560e235a393ad378dabb";><code>b579cb1</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/147";>#147</a> from codehaus-plexus/dependabot/github_actions/action...</li> <li>Additional commits viewable in <a href="https://github.com/codehaus-plexus/plexus-archiver/compare/plexus-archiver-3.4...plexus-archiver-4.2.3";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually </details> ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
