dependabot[bot]
15bddc9140
Bump io.micrometer:micrometer-bom from 1.14.1 to 1.14.2
...
Bumps [io.micrometer:micrometer-bom](https://github.com/micrometer-metrics/micrometer ) from 1.14.1 to 1.14.2.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases )
- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.14.1...v1.14.2 )
---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-bom
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-12-11 14:06:11 -06:00
dependabot[bot]
186248cb11
Bump io.projectreactor:reactor-bom from 2024.0.0 to 2024.0.1
...
Bumps [io.projectreactor:reactor-bom](https://github.com/reactor/reactor ) from 2024.0.0 to 2024.0.1.
- [Release notes](https://github.com/reactor/reactor/releases )
- [Commits](https://github.com/reactor/reactor/compare/2024.0.0...2024.0.1 )
---
updated-dependencies:
- dependency-name: io.projectreactor:reactor-bom
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-12-11 14:05:53 -06:00
Chris Bono
6e1c3362e4
[CI] Fix scheduled param on ci.yml
...
This sets a default for the inputs.run-trivy-scan variable when
the ci.yml is run from a schedule. Otherwise the scan is not
running which then results in the updated libs not being
published.
2024-12-09 14:58:12 -06:00
Chris Bono
bb2f2814c9
Update Pulsar to 3.3.3 ( #955 )
2024-12-08 10:40:34 -06:00
dependabot[bot]
418e4c99c7
Bump com.fasterxml.jackson:jackson-bom from 2.18.1 to 2.18.2
...
Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom ) from 2.18.1 to 2.18.2.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.18.1...jackson-bom-2.18.2 )
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-12-08 09:19:21 -06:00
Chris Bono
c1f63ff844
Add Pulsar shaded classes to AOT hints ( #954 )
...
This commit adds a few classes from Pulsar shaded JCTools to
the AOT runtime hints.
2024-12-08 09:18:57 -06:00
Chris Bono
f248842332
[CI] Re-enable Trivy scan in ci-pr.yml
...
Also set scan by default in ci.yml
2024-11-22 12:52:52 -06:00
Chris Bono
9f9d2890ff
[Release 1.2.0] Update to next Boot snapshot
2024-11-22 12:30:43 -06:00
github-actions[bot]
b628bfad3d
[Release 1.2.0] Next development version
2024-11-19 04:09:54 +00:00
github-actions[bot]
239a1b835d
[Release 1.2.0] Update version
2024-11-18 21:00:39 -06:00
dependabot[bot]
85380fbdc9
Bump io.micrometer:micrometer-bom from 1.14.0 to 1.14.1
...
Bumps [io.micrometer:micrometer-bom](https://github.com/micrometer-metrics/micrometer ) from 1.14.0 to 1.14.1.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases )
- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.14.0...v1.14.1 )
---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-bom
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-18 08:40:26 -06:00
Chris Bono
51affaa84c
[CI] Update Trivy repositories
...
This commit is a workaround for the TOOMANYREQUESTS issue currently breaking Trivy scan workflow.
2024-11-17 19:45:16 -06:00
dependabot[bot]
c0692e1058
Bump org.projectlombok:lombok from 1.18.34 to 1.18.36
...
Bumps [org.projectlombok:lombok](https://github.com/projectlombok/lombok ) from 1.18.34 to 1.18.36.
- [Changelog](https://github.com/projectlombok/lombok/blob/master/doc/changelog.markdown )
- [Commits](https://github.com/projectlombok/lombok/compare/v1.18.34...v1.18.36 )
---
updated-dependencies:
- dependency-name: org.projectlombok:lombok
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-15 10:35:13 -06:00
dependabot[bot]
a9e8168fed
Bump org.springframework:spring-framework-bom from 6.2.0-RC3 to 6.2.0
...
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework ) from 6.2.0-RC3 to 6.2.0.
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.0-RC3...v6.2.0 )
---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-15 10:34:58 -06:00
dependabot[bot]
654260672a
Bump pulsar-reactive from 0.5.8 to 0.5.9
...
Bumps `pulsar-reactive` from 0.5.8 to 0.5.9.
Updates `org.apache.pulsar:pulsar-client-reactive-api` from 0.5.8 to 0.5.9
- [Release notes](https://github.com/apache/pulsar-client-reactive/releases )
- [Commits](https://github.com/apache/pulsar-client-reactive/compare/v0.5.8...v0.5.9 )
Updates `org.apache.pulsar:pulsar-client-reactive-adapter` from 0.5.8 to 0.5.9
- [Release notes](https://github.com/apache/pulsar-client-reactive/releases )
- [Commits](https://github.com/apache/pulsar-client-reactive/compare/v0.5.8...v0.5.9 )
Updates `org.apache.pulsar:pulsar-client-reactive-producer-cache-caffeine-shaded` from 0.5.8 to 0.5.9
- [Release notes](https://github.com/apache/pulsar-client-reactive/releases )
- [Commits](https://github.com/apache/pulsar-client-reactive/compare/v0.5.8...v0.5.9 )
---
updated-dependencies:
- dependency-name: org.apache.pulsar:pulsar-client-reactive-api
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.pulsar:pulsar-client-reactive-adapter
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.pulsar:pulsar-client-reactive-producer-cache-caffeine-shaded
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-15 10:34:41 -06:00
dependabot[bot]
0680666774
Bump io.micrometer:micrometer-tracing-bom from 1.4.0-RC1 to 1.4.0
...
Bumps [io.micrometer:micrometer-tracing-bom](https://github.com/micrometer-metrics/tracing ) from 1.4.0-RC1 to 1.4.0.
- [Release notes](https://github.com/micrometer-metrics/tracing/releases )
- [Commits](https://github.com/micrometer-metrics/tracing/compare/v1.4.0-RC1...v1.4.0 )
---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-tracing-bom
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-13 08:55:18 -06:00
dependabot[bot]
bd85e3c9c3
Bump io.micrometer:micrometer-bom from 1.14.0-RC1 to 1.14.0
...
Bumps [io.micrometer:micrometer-bom](https://github.com/micrometer-metrics/micrometer ) from 1.14.0-RC1 to 1.14.0.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases )
- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.14.0-RC1...v1.14.0 )
---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-bom
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-13 08:55:00 -06:00
dependabot[bot]
fe91c2fb99
Bump io.projectreactor:reactor-bom from 2024.0.0-RC1 to 2024.0.0
...
Bumps [io.projectreactor:reactor-bom](https://github.com/reactor/reactor ) from 2024.0.0-RC1 to 2024.0.0.
- [Release notes](https://github.com/reactor/reactor/releases )
- [Commits](https://github.com/reactor/reactor/compare/2024.0.0-RC1...2024.0.0 )
---
updated-dependencies:
- dependency-name: io.projectreactor:reactor-bom
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-13 08:54:42 -06:00
Chris Bono
b2fc438980
Remove version 0.2.x from docs ( #928 )
...
This commit removes version 0.2.x from the compatibility matrix
in an effort to curb the current use of version 0.2.x.
2024-11-12 14:27:31 -06:00
Chris Bono
8fcf15dcbb
[CI] Schedule Trivy scan for maintenance branches
2024-11-06 19:21:05 -06:00
Chris Bono
6854994ab4
[CI] Update desc on Trivy input on ci.yml
2024-11-06 19:06:28 -06:00
Chris Bono
4e1d7b08e5
[CI] Do not run Trivy scan by default
...
To get around recent TOOMANYREQUESTS from Trivy during DB download,
this commit does the following:
- removes the scan from ci-pr.yml altogether
- makes scan optional (default false) for ci.yml
- schedules scan to run every 3 days at 14:00 UTC
2024-11-06 19:04:29 -06:00
Chris Bono
168afb30f3
Update to spring-cloud-stream to 4.2.0-SNAPSHOT
...
This updates SCSt to 4.2.0-SNAPSHOT as there was something
broken w/ running the sample binder under 4.2.0-M1.
2024-11-06 18:46:40 -06:00
dependabot[bot]
62fff05db1
Bump ch.qos.logback:logback-classic from 1.5.11 to 1.5.12
...
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback ) from 1.5.11 to 1.5.12.
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.11...v_1.5.12 )
---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-10-30 09:55:52 -05:00
dependabot[bot]
81ea7eb63b
Bump com.fasterxml.jackson:jackson-bom from 2.18.0 to 2.18.1
...
Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom ) from 2.18.0 to 2.18.1.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.18.0...jackson-bom-2.18.1 )
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-10-30 09:24:39 -05:00
dependabot[bot]
125bfd5400
Bump org.springframework:spring-framework-bom
...
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework ) from 6.2.0-RC2 to 6.2.0-RC3.
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.0-RC2...v6.2.0-RC3 )
---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-10-25 15:56:20 -05:00
Chris Bono
4e154bef51
[Release 1.2.0-RC1] Update to next Boot snapshot ( #918 )
2024-10-25 14:24:50 -05:00
dependabot[bot]
8f61842cc6
Bump nl.littlerobots.version-catalog-update from 0.8.4 to 0.8.5
...
Bumps [nl.littlerobots.version-catalog-update](https://github.com/littlerobots/version-catalog-update-plugin ) from 0.8.4 to 0.8.5.
- [Release notes](https://github.com/littlerobots/version-catalog-update-plugin/releases )
- [Changelog](https://github.com/littlerobots/version-catalog-update-plugin/blob/main/CHANGELOG.md )
- [Commits](https://github.com/littlerobots/version-catalog-update-plugin/compare/v0.8.4...v0.8.5 )
---
updated-dependencies:
- dependency-name: nl.littlerobots.version-catalog-update
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-10-25 13:46:58 -05:00
github-actions[bot]
58c5beb20a
[Release 1.2.0-RC1] Next development version
2024-10-22 02:49:48 +00:00
Chris Bono
6ac9557c57
[Release 1.2.0-RC1] Update version ( #906 )
...
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2024-10-21 21:25:16 -05:00
dependabot[bot]
d2aa2f4717
Bump org.springframework.retry:spring-retry from 2.0.9 to 2.0.10
...
Bumps [org.springframework.retry:spring-retry](https://github.com/spring-projects/spring-retry ) from 2.0.9 to 2.0.10.
- [Release notes](https://github.com/spring-projects/spring-retry/releases )
- [Commits](https://github.com/spring-projects/spring-retry/compare/v2.0.9...v2.0.10 )
---
updated-dependencies:
- dependency-name: org.springframework.retry:spring-retry
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-10-21 11:19:51 -05:00
dependabot[bot]
f0fcb10ff3
Bump pulsar-reactive from 0.5.7 to 0.5.8
...
Bumps `pulsar-reactive` from 0.5.7 to 0.5.8.
Updates `org.apache.pulsar:pulsar-client-reactive-api` from 0.5.7 to 0.5.8
- [Release notes](https://github.com/apache/pulsar-client-reactive/releases )
- [Commits](https://github.com/apache/pulsar-client-reactive/compare/v0.5.7...v0.5.8 )
Updates `org.apache.pulsar:pulsar-client-reactive-adapter` from 0.5.7 to 0.5.8
- [Release notes](https://github.com/apache/pulsar-client-reactive/releases )
- [Commits](https://github.com/apache/pulsar-client-reactive/compare/v0.5.7...v0.5.8 )
Updates `org.apache.pulsar:pulsar-client-reactive-producer-cache-caffeine-shaded` from 0.5.7 to 0.5.8
- [Release notes](https://github.com/apache/pulsar-client-reactive/releases )
- [Commits](https://github.com/apache/pulsar-client-reactive/compare/v0.5.7...v0.5.8 )
---
updated-dependencies:
- dependency-name: org.apache.pulsar:pulsar-client-reactive-api
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.pulsar:pulsar-client-reactive-adapter
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.pulsar:pulsar-client-reactive-producer-cache-caffeine-shaded
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-10-21 11:19:20 -05:00
Chris Bono
0274632410
Exclude protobuf-java from pulsar-client-all ( #896 )
...
This commit excludes the `protobuf-java` unshaded transitive dependency
from the `pulsar-client-all` library. This allows the version of the
optional `protobuf-java` dependency to be controlled by `spring-pulsar`.
Resolves #876
2024-10-18 19:42:09 -05:00
dependabot[bot]
9baa562fb9
Bump org.springframework:spring-framework-bom
...
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework ) from 6.2.0-RC1 to 6.2.0-RC2.
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.0-RC1...v6.2.0-RC2 )
---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-10-18 01:26:07 -05:00
Chris Bono
123b17df0d
Specify locale in toLowerCase|toUpperCase ( #893 )
...
This commit makes sure that all usages of String toLowerCase and
toUpperCase specify a Locale (default of Locale.ROOT).
Also, a checkstyle rule is added to prevent usage of the no-arg variant
of String toLowerCase and toUpperCase.
2024-10-17 16:26:26 -05:00
dependabot[bot]
35c8b02604
Bump io.micrometer:micrometer-tracing-bom from 1.4.0-M3 to 1.4.0-RC1
...
Bumps [io.micrometer:micrometer-tracing-bom](https://github.com/micrometer-metrics/tracing ) from 1.4.0-M3 to 1.4.0-RC1.
- [Release notes](https://github.com/micrometer-metrics/tracing/releases )
- [Commits](https://github.com/micrometer-metrics/tracing/compare/v1.4.0-M3...v1.4.0-RC1 )
---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-tracing-bom
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-10-16 16:36:28 -05:00
dependabot[bot]
dbe6b093b0
Bump io.micrometer:micrometer-bom from 1.14.0-M3 to 1.14.0-RC1
...
Bumps [io.micrometer:micrometer-bom](https://github.com/micrometer-metrics/micrometer ) from 1.14.0-M3 to 1.14.0-RC1.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases )
- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.14.0-M3...v1.14.0-RC1 )
---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-bom
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-10-16 16:34:10 -05:00
dependabot[bot]
3a63ce33da
Bump ch.qos.logback:logback-classic from 1.5.9 to 1.5.11
...
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback ) from 1.5.9 to 1.5.11.
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.9...v_1.5.11 )
---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-10-16 15:43:08 -05:00
dependabot[bot]
46ec64ac1f
Bump io.projectreactor:reactor-bom from 2024.0.0-M6 to 2024.0.0-RC1
...
Bumps [io.projectreactor:reactor-bom](https://github.com/reactor/reactor ) from 2024.0.0-M6 to 2024.0.0-RC1.
- [Release notes](https://github.com/reactor/reactor/releases )
- [Commits](https://github.com/reactor/reactor/compare/2024.0.0-M6...2024.0.0-RC1 )
---
updated-dependencies:
- dependency-name: io.projectreactor:reactor-bom
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-10-16 15:42:31 -05:00
Chris Bono
ae05982286
Update to Pulsar 3.3.2 ( #875 )
...
This commit updates the version of Pulsar to 3.3.2.
Also, in Pulsar 3.3.2 the schema validation of an outgoing message value
happens later than it did previously. This requires the PulsarTemplate
to widen the try/catch net so that when this happens the producer is
closed properly. The backing change in Pulsar 3.3.2 can be seen here
f3c177e224 (diff-095bc2359e03726e031d8c2f210560c6a3218f48a969b0f75a2482e25cd54744R69)
2024-10-16 10:24:01 -05:00
Chris Bono
473642e5f4
Log a warning when Lambda customizer used ( #879 )
...
This adjusts the `PulsarTemplate` to log a warning when a user provides
a `ProducerBuilderCustomizer` that is implemented as a Java Lambda.
This is important as the customizer is used as part of the producer
cache key and if not implemented properly will effectively disable
producer caching and write performance will degrade.
See #809
2024-10-15 18:23:49 -05:00
Chris Bono
3ad7235a87
[CI] Add github-pat to trivy-scan.yml
...
Adds Github token to the trivy scan in an effort to prevent the
recent CI failures due to TOOMANYREQUESTS on downloading the Trivy
db.
2024-10-15 17:53:00 -05:00
dependabot[bot]
c469fc3b33
Bump ch.qos.logback:logback-classic from 1.5.8 to 1.5.9
...
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback ) from 1.5.8 to 1.5.9.
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.8...v_1.5.9 )
---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-10-10 17:51:25 -04:00
Chris Bono
b2668f3109
[CI] Update Trivy upload version back to v3
2024-10-10 17:42:27 -04:00
Chris Bono
56065b2b73
[CI] Do not upload Trivy results to Github
2024-10-10 17:41:50 -04:00
Chris Bono
c2cd73abb8
Removing codeQL
2024-10-10 17:40:32 -04:00
Chris Bono
de7397c53d
[CI] Downgrade upload-sarif action (attempt 2)
2024-10-10 17:18:53 -04:00
Chris Bono
4d907921f3
[CI] Downgrade upload-sarif action
...
Latest upload action seems to be failing the build.
2024-10-10 13:35:55 -04:00
dependabot[bot]
e137049fda
Bump org.junit:junit-bom from 5.10.4 to 5.10.5
...
Bumps [org.junit:junit-bom](https://github.com/junit-team/junit5 ) from 5.10.4 to 5.10.5.
- [Release notes](https://github.com/junit-team/junit5/releases )
- [Commits](https://github.com/junit-team/junit5/compare/r5.10.4...r5.10.5 )
---
updated-dependencies:
- dependency-name: org.junit:junit-bom
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-10-07 10:41:10 -05:00
Chris Bono
ecd56083f8
Update to Jackson 2.18.0 ( #869 )
2024-09-30 20:50:59 -05:00