dependabot[bot] opened a new pull request, #57: URL: https://github.com/apache/logging-log4j-audit/pull/57
Bumps [nz.net.ultraq.thymeleaf:thymeleaf-layout-dialect](https://github.com/ultraq/thymeleaf-layout-dialect) from 2.2.2 to 3.3.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/ultraq/thymeleaf-layout-dialect/releases";>nz.net.ultraq.thymeleaf:thymeleaf-layout-dialect's releases</a>.</em></p> <blockquote> <h2>3.3.0</h2> <ul> <li>Upgrade Groovy to 4.0.14</li> <li>Upgrade Thymeleaf to 3.1.2.RELEASE</li> <li>Upgrade SLF4J to 2.0.9</li> </ul> <h2>3.2.1</h2> <ul> <li>Upgrade Groovy to 4.0.10</li> <li>Bundle native-image metadata for developers creating GraalVM native images (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/232";>#232</a>)</li> <li>Updated <a href="https://github.com/ultraq/thymeleaf-expression-processor";>thymeleaf-expression-processor</a>, which also contains GraalVM native-image metadata</li> </ul> <h2>3.2.0</h2> <ul> <li>Remove old log warning about <code>layout:fragment</code> in the <code><head></code> section (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/225";>#225</a>)</li> <li>Workaround for Groovy 4 + Zulu 8 on Apple Silicon issues (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/230";>#230</a>)</li> <li>Upgrade Groovy to 4.0.7</li> </ul> <h2>3.1.0</h2> <ul> <li>Upgrade Groovy to 4.0.0 (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/224";>#224</a>)</li> <li>The <code>javadoc</code> artifact in Maven downloads now includes this project's groovydocs, which have been missing in recent releases</li> </ul> <h2>3.0.0</h2> <ul> <li>Minimum supported version of Java is now Java 8 (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/213";>#213</a>)</li> <li>Upgrade Groovy to 3.0.8 (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/202";>#202</a>)</li> <li>Deprecated <code>layout:decorator</code> processor has been deleted (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/95";>#95</a>)</li> <li>Deprecated <code>$DECORATOR_TITLE</code> constant has been deleted (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/95";>#95</a>)</li> <li><code><head></code> merging strategies now respect the <code><title></code> position by default (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/177";>#177</a>)</li> <li>Deprecated <code>layout:collect</code></li> <li>Added an <code>Automatic-Module-Name</code> of <code>nz.net.ultraq.thymeleaf.layoutdialect</code> (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/171";>#171</a>)</li> </ul> <p>Version 3.0 of the layout dialect is largely an upgrade to use Groovy 3.0 which removes the 'reflective access warning' in Java (which is set to become an error in Java 17) and the deletion of code that has been deprecated in version 2.x. It's also a step towards becoming a full Java module, applying an automatic module name and doing some reorganizing of packages in the interim.</p> <p>I've written a migration guide to help make the assessment of what an upgrade to 3.0 would entail for you. Check it out on the documentation site: <a href="https://ultraq.github.io/thymeleaf-layout-dialect/migrating-to-3.0/";>https://ultraq.github.io/thymeleaf-layout-dialect/migrating-to-3.0/</a></p> <h2>2.5.3</h2> <ul> <li>Upgrade Groovy to 2.5.14 (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/214";>#214</a>)</li> </ul> <h2>2.5.2</h2> <ul> <li>Fix from <a href="https://github.com/silkentrance";><code>@​silkentrance</code></a> for re-declared layout fragments in deep hierarchies, where the layout dialect would return the wrong fragment from the template hierarchy (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/200";>#200</a>)</li> </ul> <h2>2.5.1</h2> <ul> <li>Fix POM generation issue that declared dependencies as <code>runtime</code> instead of <code>compile</code> (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/208";>#208</a>)</li> </ul> <h2>2.5.0</h2> <ul> <li>Upgrade Groovy dependency to 2.5.x, fixing bytecode compatibility issues with JDK11+ in certain situations (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/205";>#205</a>)</li> <li>Groovy metaprogramming enhancements to Thymeleaf objects is now done via <a href="http://groovy-lang.org/metaprogramming.html#_extension_modules";>extension modules</a>. This has led to a slight improvement in performance: ~10% faster to complete the included benchmark project on JDK8, memory footprint remains unchanged.</li> <li>Fixed the fragment cache not being cleared when dispatching/forwarding to the error page (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/189";>#189</a>)</li> <li>Revamped the documentation website on <a href="https://ultraq.github.io/thymeleaf-layout-dialect/";>https://ultraq.github.io/thymeleaf-layout-dialect/</a> (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/204";>#204</a>)</li> <li>Rolled the benchmark project into this repo so that performance testing can be done right next to the code (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/192";>#192</a>)</li> <li>Migrated unit tests from JUnit to Spock (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/193";>#193</a>)</li> </ul> <h2>Thymeleaf Layout Dialect 2.4.1</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/ultraq/thymeleaf-layout-dialect/blob/main/CHANGELOG.md";>nz.net.ultraq.thymeleaf:thymeleaf-layout-dialect's changelog</a>.</em></p> <blockquote> <h3>3.3.0</h3> <ul> <li>Upgrade Groovy to 4.0.14</li> <li>Upgrade Thymeleaf to 3.1.2.RELEASE</li> <li>Upgrade SLF4J to 2.0.9</li> </ul> <h3>3.2.1</h3> <ul> <li>Upgrade Groovy to 4.0.10</li> <li>Bundle native-image metadata for developers creating GraalVM native images (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/232";>#232</a>)</li> <li>Updated <a href="https://github.com/ultraq/thymeleaf-expression-processor";>thymeleaf-expression-processor</a>, which also contains GraalVM native-image metadata</li> </ul> <h3>3.2.0</h3> <ul> <li>Remove old log warning about <code>layout:fragment</code> in the <code><head></code> section (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/225";>#225</a>)</li> <li>Workaround for Groovy 4 + Zulu 8 on Apple Silicon issues (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/230";>#230</a>)</li> <li>Upgrade Groovy to 4.0.7</li> </ul> <h3>3.1.0</h3> <ul> <li>Upgrade Groovy to 4.0.0 (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/224";>#224</a>)</li> <li>The <code>javadoc</code> artifact in Maven downloads now includes this project's groovydocs, which have been missing in recent releases</li> </ul> <h3>3.0.0</h3> <ul> <li>Minimum supported version of Java is now Java 8 (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/213";>#213</a>)</li> <li>Upgrade Groovy to 3.0.8 (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/202";>#202</a>)</li> <li>Deprecated <code>layout:decorator</code> processor has been deleted (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/95";>#95</a>)</li> <li>Deprecated <code>$DECORATOR_TITLE</code> constant has been deleted (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/95";>#95</a>)</li> <li><code><head></code> merging strategies now respect the <code><title></code> position by default (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/177";>#177</a>)</li> <li>Deprecated <code>layout:collect</code></li> <li>Added an <code>Automatic-Module-Name</code> of <code>nz.net.ultraq.thymeleaf.layoutdialect</code> (<a href="https://redirect.github.com/ultraq/thymeleaf-layout-dialect/issues/171";>#171</a>)</li> </ul> <p>Version 3.0 of the layout dialect is largely an upgrade to use Groovy 3.0 which</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ultraq/thymeleaf-layout-dialect/commit/b986d7790c9d5f9657d111f470d32b724ea5b31a";><code>b986d77</code></a> Prep for 3.3.0</li> <li><a href="https://github.com/ultraq/thymeleaf-layout-dialect/commit/89af41b84f2036f47985a7dbd41e2ea30327ed9c";><code>89af41b</code></a> Use release versions</li> <li><a href="https://github.com/ultraq/thymeleaf-layout-dialect/commit/cf67c31c13fed208eecf170136520677b56178e9";><code>cf67c31</code></a> Include that SLF4J was updated</li> <li><a href="https://github.com/ultraq/thymeleaf-layout-dialect/commit/102581c6554bca4ff1b725892ea2b737bedbfb8a";><code>102581c</code></a> Downgrade Mockito since we're still supporting Java 8</li> <li><a href="https://github.com/ultraq/thymeleaf-layout-dialect/commit/b0c608c5929d1fef863260df03800fa379ff957d";><code>b0c608c</code></a> Update Thymeleaf and use dependencies that work with it</li> <li><a href="https://github.com/ultraq/thymeleaf-layout-dialect/commit/78e6c2cc69ecaad16b753fca55338610f19c0bb9";><code>78e6c2c</code></a> Only add these JVM args for Java 9+</li> <li><a href="https://github.com/ultraq/thymeleaf-layout-dialect/commit/a6d6a461d00cc34a338829c483e9f3739b001d70";><code>a6d6a46</code></a> Upgrade to Gradle 8.3, clear deprecation warnings</li> <li><a href="https://github.com/ultraq/thymeleaf-layout-dialect/commit/91fff589a7fd80d66bf1ff8143cddc8b4542c9fb";><code>91fff58</code></a> Update dependencies</li> <li><a href="https://github.com/ultraq/thymeleaf-layout-dialect/commit/1af5824e33f61923a7f5700f2c41ede885f35b62";><code>1af5824</code></a> Update version</li> <li><a href="https://github.com/ultraq/thymeleaf-layout-dialect/commit/9de3cf51bc7ea8ae9659da0878a59d927ade148e";><code>9de3cf5</code></a> Comment out native plugins - don't need for standard builds</li> <li>Additional commits viewable in <a href="https://github.com/ultraq/thymeleaf-layout-dialect/compare/2.2.2...3.3.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
