Commit Graph

909 Commits

Author SHA1 Message Date
dependabot[bot]
15bddc9140 Bump io.micrometer:micrometer-bom from 1.14.1 to 1.14.2
Bumps [io.micrometer:micrometer-bom](https://github.com/micrometer-metrics/micrometer) from 1.14.1 to 1.14.2.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.14.1...v1.14.2)

---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-11 14:06:11 -06:00
dependabot[bot]
186248cb11 Bump io.projectreactor:reactor-bom from 2024.0.0 to 2024.0.1
Bumps [io.projectreactor:reactor-bom](https://github.com/reactor/reactor) from 2024.0.0 to 2024.0.1.
- [Release notes](https://github.com/reactor/reactor/releases)
- [Commits](https://github.com/reactor/reactor/compare/2024.0.0...2024.0.1)

---
updated-dependencies:
- dependency-name: io.projectreactor:reactor-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-11 14:05:53 -06:00
Chris Bono
6e1c3362e4 [CI] Fix scheduled param on ci.yml
This sets a default for the inputs.run-trivy-scan variable when
the ci.yml is run from a schedule. Otherwise the scan is not
running which then results in the updated libs not being
published.
2024-12-09 14:58:12 -06:00
Chris Bono
bb2f2814c9 Update Pulsar to 3.3.3 (#955) 2024-12-08 10:40:34 -06:00
dependabot[bot]
418e4c99c7 Bump com.fasterxml.jackson:jackson-bom from 2.18.1 to 2.18.2
Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) from 2.18.1 to 2.18.2.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.18.1...jackson-bom-2.18.2)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-08 09:19:21 -06:00
Chris Bono
c1f63ff844 Add Pulsar shaded classes to AOT hints (#954)
This commit adds a few classes from Pulsar shaded JCTools to
the AOT runtime hints.
2024-12-08 09:18:57 -06:00
Chris Bono
f248842332 [CI] Re-enable Trivy scan in ci-pr.yml
Also set scan by default in ci.yml
2024-11-22 12:52:52 -06:00
Chris Bono
9f9d2890ff [Release 1.2.0] Update to next Boot snapshot 2024-11-22 12:30:43 -06:00
github-actions[bot]
b628bfad3d [Release 1.2.0] Next development version 2024-11-19 04:09:54 +00:00
github-actions[bot]
239a1b835d [Release 1.2.0] Update version 2024-11-18 21:00:39 -06:00
dependabot[bot]
85380fbdc9 Bump io.micrometer:micrometer-bom from 1.14.0 to 1.14.1
Bumps [io.micrometer:micrometer-bom](https://github.com/micrometer-metrics/micrometer) from 1.14.0 to 1.14.1.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.14.0...v1.14.1)

---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-18 08:40:26 -06:00
Chris Bono
51affaa84c [CI] Update Trivy repositories
This commit is a workaround for the TOOMANYREQUESTS issue currently  breaking Trivy scan workflow.
2024-11-17 19:45:16 -06:00
dependabot[bot]
c0692e1058 Bump org.projectlombok:lombok from 1.18.34 to 1.18.36
Bumps [org.projectlombok:lombok](https://github.com/projectlombok/lombok) from 1.18.34 to 1.18.36.
- [Changelog](https://github.com/projectlombok/lombok/blob/master/doc/changelog.markdown)
- [Commits](https://github.com/projectlombok/lombok/compare/v1.18.34...v1.18.36)

---
updated-dependencies:
- dependency-name: org.projectlombok:lombok
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-15 10:35:13 -06:00
dependabot[bot]
a9e8168fed Bump org.springframework:spring-framework-bom from 6.2.0-RC3 to 6.2.0
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework) from 6.2.0-RC3 to 6.2.0.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.0-RC3...v6.2.0)

---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-15 10:34:58 -06:00
dependabot[bot]
654260672a Bump pulsar-reactive from 0.5.8 to 0.5.9
Bumps `pulsar-reactive` from 0.5.8 to 0.5.9.

Updates `org.apache.pulsar:pulsar-client-reactive-api` from 0.5.8 to 0.5.9
- [Release notes](https://github.com/apache/pulsar-client-reactive/releases)
- [Commits](https://github.com/apache/pulsar-client-reactive/compare/v0.5.8...v0.5.9)

Updates `org.apache.pulsar:pulsar-client-reactive-adapter` from 0.5.8 to 0.5.9
- [Release notes](https://github.com/apache/pulsar-client-reactive/releases)
- [Commits](https://github.com/apache/pulsar-client-reactive/compare/v0.5.8...v0.5.9)

Updates `org.apache.pulsar:pulsar-client-reactive-producer-cache-caffeine-shaded` from 0.5.8 to 0.5.9
- [Release notes](https://github.com/apache/pulsar-client-reactive/releases)
- [Commits](https://github.com/apache/pulsar-client-reactive/compare/v0.5.8...v0.5.9)

---
updated-dependencies:
- dependency-name: org.apache.pulsar:pulsar-client-reactive-api
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.pulsar:pulsar-client-reactive-adapter
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.pulsar:pulsar-client-reactive-producer-cache-caffeine-shaded
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-15 10:34:41 -06:00
dependabot[bot]
0680666774 Bump io.micrometer:micrometer-tracing-bom from 1.4.0-RC1 to 1.4.0
Bumps [io.micrometer:micrometer-tracing-bom](https://github.com/micrometer-metrics/tracing) from 1.4.0-RC1 to 1.4.0.
- [Release notes](https://github.com/micrometer-metrics/tracing/releases)
- [Commits](https://github.com/micrometer-metrics/tracing/compare/v1.4.0-RC1...v1.4.0)

---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-tracing-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-13 08:55:18 -06:00
dependabot[bot]
bd85e3c9c3 Bump io.micrometer:micrometer-bom from 1.14.0-RC1 to 1.14.0
Bumps [io.micrometer:micrometer-bom](https://github.com/micrometer-metrics/micrometer) from 1.14.0-RC1 to 1.14.0.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.14.0-RC1...v1.14.0)

---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-13 08:55:00 -06:00
dependabot[bot]
fe91c2fb99 Bump io.projectreactor:reactor-bom from 2024.0.0-RC1 to 2024.0.0
Bumps [io.projectreactor:reactor-bom](https://github.com/reactor/reactor) from 2024.0.0-RC1 to 2024.0.0.
- [Release notes](https://github.com/reactor/reactor/releases)
- [Commits](https://github.com/reactor/reactor/compare/2024.0.0-RC1...2024.0.0)

---
updated-dependencies:
- dependency-name: io.projectreactor:reactor-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-13 08:54:42 -06:00
Chris Bono
b2fc438980 Remove version 0.2.x from docs (#928)
This commit removes version 0.2.x from the compatibility matrix
in an effort to curb the current use of version 0.2.x.
2024-11-12 14:27:31 -06:00
Chris Bono
8fcf15dcbb [CI] Schedule Trivy scan for maintenance branches 2024-11-06 19:21:05 -06:00
Chris Bono
6854994ab4 [CI] Update desc on Trivy input on ci.yml 2024-11-06 19:06:28 -06:00
Chris Bono
4e1d7b08e5 [CI] Do not run Trivy scan by default
To get around recent TOOMANYREQUESTS from Trivy during DB download,
this commit does the following:

- removes the scan from ci-pr.yml altogether
- makes scan optional (default false) for ci.yml
- schedules scan to run every 3 days at 14:00 UTC
2024-11-06 19:04:29 -06:00
Chris Bono
168afb30f3 Update to spring-cloud-stream to 4.2.0-SNAPSHOT
This updates SCSt to 4.2.0-SNAPSHOT as there was something
broken w/ running the sample binder under 4.2.0-M1.
2024-11-06 18:46:40 -06:00
dependabot[bot]
62fff05db1 Bump ch.qos.logback:logback-classic from 1.5.11 to 1.5.12
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.11 to 1.5.12.
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.11...v_1.5.12)

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-30 09:55:52 -05:00
dependabot[bot]
81ea7eb63b Bump com.fasterxml.jackson:jackson-bom from 2.18.0 to 2.18.1
Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) from 2.18.0 to 2.18.1.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.18.0...jackson-bom-2.18.1)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-30 09:24:39 -05:00
dependabot[bot]
125bfd5400 Bump org.springframework:spring-framework-bom
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework) from 6.2.0-RC2 to 6.2.0-RC3.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.0-RC2...v6.2.0-RC3)

---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-25 15:56:20 -05:00
Chris Bono
4e154bef51 [Release 1.2.0-RC1] Update to next Boot snapshot (#918) 2024-10-25 14:24:50 -05:00
dependabot[bot]
8f61842cc6 Bump nl.littlerobots.version-catalog-update from 0.8.4 to 0.8.5
Bumps [nl.littlerobots.version-catalog-update](https://github.com/littlerobots/version-catalog-update-plugin) from 0.8.4 to 0.8.5.
- [Release notes](https://github.com/littlerobots/version-catalog-update-plugin/releases)
- [Changelog](https://github.com/littlerobots/version-catalog-update-plugin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/littlerobots/version-catalog-update-plugin/compare/v0.8.4...v0.8.5)

---
updated-dependencies:
- dependency-name: nl.littlerobots.version-catalog-update
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-25 13:46:58 -05:00
github-actions[bot]
58c5beb20a [Release 1.2.0-RC1] Next development version 2024-10-22 02:49:48 +00:00
Chris Bono
6ac9557c57 [Release 1.2.0-RC1] Update version (#906)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2024-10-21 21:25:16 -05:00
dependabot[bot]
d2aa2f4717 Bump org.springframework.retry:spring-retry from 2.0.9 to 2.0.10
Bumps [org.springframework.retry:spring-retry](https://github.com/spring-projects/spring-retry) from 2.0.9 to 2.0.10.
- [Release notes](https://github.com/spring-projects/spring-retry/releases)
- [Commits](https://github.com/spring-projects/spring-retry/compare/v2.0.9...v2.0.10)

---
updated-dependencies:
- dependency-name: org.springframework.retry:spring-retry
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-21 11:19:51 -05:00
dependabot[bot]
f0fcb10ff3 Bump pulsar-reactive from 0.5.7 to 0.5.8
Bumps `pulsar-reactive` from 0.5.7 to 0.5.8.

Updates `org.apache.pulsar:pulsar-client-reactive-api` from 0.5.7 to 0.5.8
- [Release notes](https://github.com/apache/pulsar-client-reactive/releases)
- [Commits](https://github.com/apache/pulsar-client-reactive/compare/v0.5.7...v0.5.8)

Updates `org.apache.pulsar:pulsar-client-reactive-adapter` from 0.5.7 to 0.5.8
- [Release notes](https://github.com/apache/pulsar-client-reactive/releases)
- [Commits](https://github.com/apache/pulsar-client-reactive/compare/v0.5.7...v0.5.8)

Updates `org.apache.pulsar:pulsar-client-reactive-producer-cache-caffeine-shaded` from 0.5.7 to 0.5.8
- [Release notes](https://github.com/apache/pulsar-client-reactive/releases)
- [Commits](https://github.com/apache/pulsar-client-reactive/compare/v0.5.7...v0.5.8)

---
updated-dependencies:
- dependency-name: org.apache.pulsar:pulsar-client-reactive-api
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.pulsar:pulsar-client-reactive-adapter
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.pulsar:pulsar-client-reactive-producer-cache-caffeine-shaded
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-21 11:19:20 -05:00
Chris Bono
0274632410 Exclude protobuf-java from pulsar-client-all (#896)
This commit excludes the `protobuf-java` unshaded transitive dependency
from the `pulsar-client-all` library. This allows the version of the
optional `protobuf-java` dependency to be controlled by `spring-pulsar`.

Resolves #876
2024-10-18 19:42:09 -05:00
dependabot[bot]
9baa562fb9 Bump org.springframework:spring-framework-bom
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework) from 6.2.0-RC1 to 6.2.0-RC2.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.0-RC1...v6.2.0-RC2)

---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-18 01:26:07 -05:00
Chris Bono
123b17df0d Specify locale in toLowerCase|toUpperCase (#893)
This commit makes sure that all usages of String toLowerCase and
toUpperCase specify a Locale (default of Locale.ROOT).

Also, a checkstyle rule is added to prevent usage of the no-arg variant
of String toLowerCase and toUpperCase.
2024-10-17 16:26:26 -05:00
dependabot[bot]
35c8b02604 Bump io.micrometer:micrometer-tracing-bom from 1.4.0-M3 to 1.4.0-RC1
Bumps [io.micrometer:micrometer-tracing-bom](https://github.com/micrometer-metrics/tracing) from 1.4.0-M3 to 1.4.0-RC1.
- [Release notes](https://github.com/micrometer-metrics/tracing/releases)
- [Commits](https://github.com/micrometer-metrics/tracing/compare/v1.4.0-M3...v1.4.0-RC1)

---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-tracing-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-16 16:36:28 -05:00
dependabot[bot]
dbe6b093b0 Bump io.micrometer:micrometer-bom from 1.14.0-M3 to 1.14.0-RC1
Bumps [io.micrometer:micrometer-bom](https://github.com/micrometer-metrics/micrometer) from 1.14.0-M3 to 1.14.0-RC1.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.14.0-M3...v1.14.0-RC1)

---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-16 16:34:10 -05:00
dependabot[bot]
3a63ce33da Bump ch.qos.logback:logback-classic from 1.5.9 to 1.5.11
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.9 to 1.5.11.
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.9...v_1.5.11)

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-16 15:43:08 -05:00
dependabot[bot]
46ec64ac1f Bump io.projectreactor:reactor-bom from 2024.0.0-M6 to 2024.0.0-RC1
Bumps [io.projectreactor:reactor-bom](https://github.com/reactor/reactor) from 2024.0.0-M6 to 2024.0.0-RC1.
- [Release notes](https://github.com/reactor/reactor/releases)
- [Commits](https://github.com/reactor/reactor/compare/2024.0.0-M6...2024.0.0-RC1)

---
updated-dependencies:
- dependency-name: io.projectreactor:reactor-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-16 15:42:31 -05:00
Chris Bono
ae05982286 Update to Pulsar 3.3.2 (#875)
This commit updates the version of Pulsar to 3.3.2.

Also, in Pulsar 3.3.2 the schema validation of an outgoing message value
happens later than it did previously. This requires the PulsarTemplate
to widen the try/catch net so that when this happens the producer is
closed properly. The backing change in Pulsar 3.3.2 can be seen here
f3c177e224 (diff-095bc2359e03726e031d8c2f210560c6a3218f48a969b0f75a2482e25cd54744R69)
2024-10-16 10:24:01 -05:00
Chris Bono
473642e5f4 Log a warning when Lambda customizer used (#879)
This adjusts the `PulsarTemplate` to log a warning when a user provides
a `ProducerBuilderCustomizer` that is implemented as a Java Lambda.
This is important as the customizer is used as part of the producer
cache key and if not implemented properly will effectively disable
producer caching and write performance will degrade.

See #809
2024-10-15 18:23:49 -05:00
Chris Bono
3ad7235a87 [CI] Add github-pat to trivy-scan.yml
Adds Github token to the trivy scan in an effort to prevent the
recent CI failures due to TOOMANYREQUESTS on downloading the Trivy
db.
2024-10-15 17:53:00 -05:00
dependabot[bot]
c469fc3b33 Bump ch.qos.logback:logback-classic from 1.5.8 to 1.5.9
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.8 to 1.5.9.
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.8...v_1.5.9)

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-10 17:51:25 -04:00
Chris Bono
b2668f3109 [CI] Update Trivy upload version back to v3 2024-10-10 17:42:27 -04:00
Chris Bono
56065b2b73 [CI] Do not upload Trivy results to Github 2024-10-10 17:41:50 -04:00
Chris Bono
c2cd73abb8 Removing codeQL 2024-10-10 17:40:32 -04:00
Chris Bono
de7397c53d [CI] Downgrade upload-sarif action (attempt 2) 2024-10-10 17:18:53 -04:00
Chris Bono
4d907921f3 [CI] Downgrade upload-sarif action
Latest upload action seems to be failing the build.
2024-10-10 13:35:55 -04:00
dependabot[bot]
e137049fda Bump org.junit:junit-bom from 5.10.4 to 5.10.5
Bumps [org.junit:junit-bom](https://github.com/junit-team/junit5) from 5.10.4 to 5.10.5.
- [Release notes](https://github.com/junit-team/junit5/releases)
- [Commits](https://github.com/junit-team/junit5/compare/r5.10.4...r5.10.5)

---
updated-dependencies:
- dependency-name: org.junit:junit-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-07 10:41:10 -05:00
Chris Bono
ecd56083f8 Update to Jackson 2.18.0 (#869) 2024-09-30 20:50:59 -05:00