chore(deps): update all non-major dependencies (except core kotlin)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
org.slf4j:slf4j-api (source, changelog)	2.0.12 -> 2.0.13
com.gradle.enterprise	3.16.2 -> 3.17.6
org.assertj:assertj-core (source)	3.25.3 -> 3.26.3
org.gradle.test-retry	1.5.8 -> 1.5.10
org.jetbrains.kotlinx:kotlinx-coroutines-core	1.8.0 -> 1.8.1
io.github.detekt.sarif4k:sarif4k-jvm (source)	0.5.0 -> 0.6.0
io.github.detekt.sarif4k:sarif4k (source)	0.5.0 -> 0.6.0
com.charleskorn.kaml:kaml	0.57.0 -> 0.61.0
io.github.oshai:kotlin-logging	6.0.3 -> 6.0.9
org.apache.maven:maven-compat	3.9.6 -> 3.9.8
org.apache.maven:maven-core	3.9.6 -> 3.9.8
io.gitlab.arturbosch.detekt (source)	1.23.5 -> 1.23.6
io.gitlab.arturbosch.detekt:detekt-gradle-plugin (source)	1.23.5 -> 1.23.6
commons-io:commons-io (source)	2.15.1 -> 2.16.1
commons-cli:commons-cli (source)	1.6.0 -> 1.8.0
com.google.guava:guava	33.0.0-jre -> 33.2.1-jre
org.junit.platform:junit-platform-suite-engine (source)	1.10.2 -> 1.10.3
org.junit.vintage:junit-vintage-engine (source)	5.10.2 -> 5.10.3
org.junit.jupiter:junit-jupiter-api (source)	5.10.2 -> 5.10.3
org.junit.jupiter:junit-jupiter-engine (source)	5.10.2 -> 5.10.3
org.junit.jupiter:junit-jupiter (source)	5.10.2 -> 5.10.3
org.jetbrains.kotlinx:kotlinx-serialization-json-jvm	1.6.3 -> 1.7.1
org.jetbrains.kotlinx:kotlinx-serialization-json	1.6.3 -> 1.7.1
org.jetbrains.kotlinx:kotlinx-serialization-core	1.6.3 -> 1.7.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

qos-ch/slf4j (org.slf4j:slf4j-api)

v2.0.13

Kotlin/kotlinx.coroutines (org.jetbrains.kotlinx:kotlinx-coroutines-core)

v1.8.1

Compare Source

• Remove the @ExperimentalTime annotation from usages of TimeSource (#​4046). Thanks, @​hfhbd!
• Introduce a workaround for an Android bug that caused an occasional NullPointerException when setting the StateFlow value on old Android devices (#​3820).
• No longer use kotlin.random.Random as part of Dispatchers.Default and Dispatchers.IO initialization (#​4051).
• Flow.timeout throws the exception with which the channel was closed (#​4071).
• Small tweaks and documentation fixes.

Changelog relative to version 1.8.1-Beta

• Flow.timeout throws the exception with which the channel was closed (#​4071).
• Small documentation fixes.

detekt/sarif4k (io.github.detekt.sarif4k:sarif4k-jvm)

v0.6.0

Compare Source

Critical changes

• Create a sarif merger (https://github.com/detekt/sarif4k/issues/82)
• Properly implement PropertyBag to allow arbitrary key/value pairs (https://github.com/detekt/sarif4k/issues/78)
• Add a breakline at the end of the file when encoding no minified sarif (https://github.com/detekt/sarif4k/issues/99)
• Update kdoc (https://github.com/detekt/sarif4k/issues/98)

What's Changed

• Update plugin org.jetbrains.kotlin.multiplatform to v1.9.22 by @​renovate in https://github.com/detekt/sarif4k/pull/66
• Update junit5 monorepo to v5.10.1 by @​renovate in https://github.com/detekt/sarif4k/pull/71
• Update actions/checkout digest to f43a0e5 by @​renovate in https://github.com/detekt/sarif4k/pull/68
• Update actions/cache digest to e12d46a by @​renovate in https://github.com/detekt/sarif4k/pull/77
• Update actions/upload-artifact digest to a8a3f3a by @​renovate in https://github.com/detekt/sarif4k/pull/75
• Update plugin org.jetbrains.kotlin.plugin.serialization to v1.9.22 by @​renovate in https://github.com/detekt/sarif4k/pull/67
• Update actions/setup-java digest to 0ab4596 by @​renovate in https://github.com/detekt/sarif4k/pull/79
• Update actions/checkout action to v4 by @​renovate in https://github.com/detekt/sarif4k/pull/74
• Update plugin org.owasp.dependencycheck to v8.4.3 by @​renovate in https://github.com/detekt/sarif4k/pull/80
• Update plugin org.jetbrains.dokka to v1.9.10 by @​renovate in https://github.com/detekt/sarif4k/pull/65
• Update dependency gradle to v8.5 by @​renovate in https://github.com/detekt/sarif4k/pull/73
• Update actions/cache action to v4 by @​renovate in https://github.com/detekt/sarif4k/pull/83
• Update actions/setup-java action to v4 by @​renovate in https://github.com/detekt/sarif4k/pull/84
• Update actions/upload-artifact action to v4 by @​renovate in https://github.com/detekt/sarif4k/pull/85
• Review Java usage on CI by @​TWiStErRob in https://github.com/detekt/sarif4k/pull/88
• Add default workflow for Gradle's dependency-submission action by @​BraisGabin in https://github.com/detekt/sarif4k/pull/89
• Remove org.owasp.dependencycheck by @​BraisGabin in https://github.com/detekt/sarif4k/pull/90
• Use gradle/actions/setup-gradle instead of custom cache by @​BraisGabin in https://github.com/detekt/sarif4k/pull/81
• Pin gradle/actions action to ec92e82 by @​renovate in https://github.com/detekt/sarif4k/pull/91
• Allow running dependencies manually by @​TWiStErRob in https://github.com/detekt/sarif4k/pull/93
• Holistic review of GitHub Actions by @​TWiStErRob in https://github.com/detekt/sarif4k/pull/92
• Update junit5 monorepo to v5.10.2 by @​renovate in https://github.com/detekt/sarif4k/pull/95
• Update actions/upload-artifact digest to 5d5d22a by @​renovate in https://github.com/detekt/sarif4k/pull/96
• Update dependency gradle to v8.6 by @​renovate in https://github.com/detekt/sarif4k/pull/94
• Add merging utilities by @​matejdro in https://github.com/detekt/sarif4k/pull/87
• Update gradle/actions digest to 417ae3c by @​renovate in https://github.com/detekt/sarif4k/pull/102
• Test tags by @​BraisGabin in https://github.com/detekt/sarif4k/pull/97
• Fix documentation by @​BraisGabin in https://github.com/detekt/sarif4k/pull/98
• Breakline at the end of the SARIF file. by @​BraisGabin in https://github.com/detekt/sarif4k/pull/100
• Allow to add arbitrary values to PropertyBag by @​BraisGabin in https://github.com/detekt/sarif4k/pull/101
• Update releasing by @​BraisGabin in https://github.com/detekt/sarif4k/pull/103
• Update actions/setup-java digest to 9704b39 by @​renovate in https://github.com/detekt/sarif4k/pull/104
• Update plugin org.jetbrains.kotlin.plugin.serialization to v1.9.23 by @​renovate in https://github.com/detekt/sarif4k/pull/107
• Update plugin org.jetbrains.kotlin.multiplatform to v1.9.23 by @​renovate in https://github.com/detekt/sarif4k/pull/106
• Update plugin org.jetbrains.dokka to v1.9.20 by @​renovate in https://github.com/detekt/sarif4k/pull/105

New Contributors

• @​BraisGabin made their first contribution in https://github.com/detekt/sarif4k/pull/89
• @​matejdro made their first contribution in https://github.com/detekt/sarif4k/pull/87

Full Changelog: detekt/sarif4k@0.5.0...0.6.0

charleskorn/kaml (com.charleskorn.kaml:kaml)

v0.61.0

Compare Source

v0.60.0

Compare Source

• Updated: build with Kotlin 2.0.0
• Updated: use snakeyaml-engine-kmp 3.0.0
• Updated: use kotlinx-serialization 1.7.0

v0.59.0

Compare Source

• New: it is now possible to change the default 3 MB input document size limit by setting YamlConfiguration.codePointLimit (#​543 - thanks to @​sschuberth for the PR)
• Updated: use Okio 3.9.0
• Updated: use snakeyaml-engine-kmp 2.7.5

v0.58.0

Compare Source

• Changed: kaml now uses snakeyaml-engine-kmp for all targets, rather than using SnakeYAML for the JVM and snakeyaml-engine-kmp for JS. (#​507 - thanks to @​krzema12 and @​aSemy for the PR)

  As snakeyaml-engine-kmp is a port of SnakeYAML to multiplatform Kotlin, there should be no major behaviour differences.

  ⚠️ Breaking change: Yaml.decodeFromStream() no longer supports anything other than UTF-8 streams, as this is not supported by Okio. If this is a problem for you, please open an issue to discuss your use case.

• Updated: use Okio 3.8.0

• Updated: use kotlinx.serialization 1.6.3

• Updated: use Kotlin 1.9.23

• Updated: use snakeyaml-engine-kmp 2.7.3

oshai/kotlin-logging (io.github.oshai:kotlin-logging)

v6.0.9

Compare Source

What's Changed

• Bump gradle/wrapper-validation-action from 1 to 3 by @​dependabot in https://github.com/oshai/kotlin-logging/pull/422

Full Changelog: oshai/kotlin-logging@6.0.8...6.0.9

v6.0.8

Compare Source

What's Changed

• Bump com.android.library from 8.2.2 to 8.3.2 by @​dependabot in https://github.com/oshai/kotlin-logging/pull/421
• Bump io.github.gradle-nexus.publish-plugin from 1.3.0 to 2.0.0 by @​dependabot in https://github.com/oshai/kotlin-logging/pull/417

Full Changelog: oshai/kotlin-logging@6.0.7...6.0.8

v6.0.7

Compare Source

Full Changelog: oshai/kotlin-logging@6.0.5...6.0.7

v6.0.4

Compare Source

What's Changed

• Bump actions/cache from 3.3.3 to 4.0.0 by @​dependabot in https://github.com/oshai/kotlin-logging/pull/395
• Fluent Logging: Allow nullable values by @​Zack-Freedman-Thoughtworks in https://github.com/oshai/kotlin-logging/pull/402
• Bump multiplatform from 1.9.22 to 1.9.23 by @​dependabot in https://github.com/oshai/kotlin-logging/pull/405
• Bump org.jetbrains.dokka from 1.9.10 to 1.9.20 by @​dependabot in https://github.com/oshai/kotlin-logging/pull/406
• Bump actions/cache from 4.0.0 to 4.0.1 by @​dependabot in https://github.com/oshai/kotlin-logging/pull/403
• Bump com.diffplug.spotless from 6.24.0 to 6.25.0 by @​dependabot in https://github.com/oshai/kotlin-logging/pull/397
• allow only markers being supplied by @​ewoelfel in https://github.com/oshai/kotlin-logging/pull/408
• Upgrade ktfmt to version 0.47 by @​mlewe in https://github.com/oshai/kotlin-logging/pull/415
• Allow supplying org.slf4j.Marker by @​mlewe in https://github.com/oshai/kotlin-logging/pull/414

New Contributors

• @​Zack-Freedman-Thoughtworks made their first contribution in https://github.com/oshai/kotlin-logging/pull/402
• @​ewoelfel made their first contribution in https://github.com/oshai/kotlin-logging/pull/408
• @​mlewe made their first contribution in https://github.com/oshai/kotlin-logging/pull/415

Full Changelog: oshai/kotlin-logging@6.0.3...6.0.4

detekt/detekt (io.gitlab.arturbosch.detekt)

v1.23.6

1.23.6 - 2024-03-23

This is a point release for Detekt 1.23.0, where we added support for Kotlin 1.9.23 and fixed several bugs that got reported by the community.

Changelog

• UselessPostfixExpression - Fix #​7037 false positive postfix - #​7084
• Don't allow invalid Source Locations - #​7030
• UnusedPrivateClass: don't report if private classes are used for type conversion - #​6995
• RedundantSuspendModifier: do not report when the function has 'actual' modifier - #​6951
• Update dependency gradle to v8.7 - #​7080
• Update kotlin monorepo to v1.9.23 - #​7027
• Update dependency gradle to v8.6 - #​6939
• Update dependency com.android.tools.build:gradle to v8.3.1 - #​7070

Contributors

We would like to thank the following contributors that made this release possible: @​BraisGabin, @​psuzn, @​t-kameyama.

Kotlin/kotlinx.serialization (org.jetbrains.kotlinx:kotlinx-serialization-json-jvm)

v1.7.1

==================

This is a bugfix release that aims to fix missing kotlinx-serialization-hocon artifact.
It also contains experimental integration with kotlinx-io library.
Kotlin 2.0.0 is used by default.

Fixed HOCON publication

Sadly, 1.7.0 release was published incomplete: kotlinx-serialization-hocon artifact is missing from 1.7.0 and 1.7.0-RC releases.
This release fixes this problem and now kotlinx-serialization-hocon is available again with 1.7.1 version.
No other changes were made to this artifact. Related ticket: #​2717.

Add integration with a kotlinx-io library

kotlinx-io is an official multiplatform library that provides basic IO primitives, similar to Okio.
kotlinx.serialization integration is now available in a separate artifact, located at the kotlinx-serialization-json-io coordinates.
Integration artifact provides functions similar to existing Okio integration: encodeToSink, decodeFromSource, and decodeSourceToSequence.
Check out the PR for more details.

Other bugfixes

• Prohibited use of elements other than JsonObject in JsonTransformingSerializer with polymorphic serialization (#​2715)

v1.7.0

==================

This release contains all of the changes from 1.7.0-RC and is compatible with Kotlin 2.0.
Please note that for reasons explained in the 1.7.0-RC changelog, it may not be possible to use it with the Kotlin 1.9.x
compiler plugin. Yet, it is still fully backwards compatible with previous versions.

The only difference with 1.7.0-RC is that classDiscriminatorMode property in JsonBuilder is marked as experimental,
as it should have been when it was introduced (#​2680).

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 76.67%. Comparing base (f63b045) to head (f1b8147).

❗ Current head f1b8147 differs from pull request most recent head 33cf690

Please upload reports for the commit 33cf690 to get more accurate results.

Additional details and impacted files

@@             Coverage Diff              @@
##             master    #1922      +/-   ##
============================================
- Coverage     76.79%   76.67%   -0.12%     
  Complexity     2492     2492              
============================================
  Files           134      134              
  Lines          7898     7914      +16     
  Branches       2240     2240              
============================================
+ Hits           6065     6068       +3     
- Misses          828      841      +13     
  Partials       1005     1005              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[github-actions]

JUnit Tests (macOS, EnricoMi/publish-unit-test-result-action@v2)

 8 files   -   159   8 suites   - 159   49s ⏱️ - 4m 4s
78 tests  - 1 368  20 ✅  - 1 387  24 💤  - 15  34 ❌ +34 
78 runs   - 2 748  20 ✅  - 2 767  24 💤  - 15  34 ❌ +34 

For more details on these failures, see this check.

Results for commit ebf4ae3. ± Comparison against base commit fe4a01d.

This pull request removes 1368 tests.

com.saveourtool.diktat.ruleset.chapter1.EnumValueCaseTest ‑ incorrect enum pascal case value fix()
com.saveourtool.diktat.ruleset.chapter1.EnumValueCaseTest ‑ incorrect enum snake case value fix()
com.saveourtool.diktat.ruleset.chapter1.EnumValueCaseTest ‑ incorrect enum unknown style()
com.saveourtool.diktat.ruleset.chapter1.IdentifierNamingFixTest ‑ incorrect class name fix()
com.saveourtool.diktat.ruleset.chapter1.IdentifierNamingFixTest ‑ incorrect constant name case fix()
com.saveourtool.diktat.ruleset.chapter1.IdentifierNamingFixTest ‑ incorrect enum values case fix()
com.saveourtool.diktat.ruleset.chapter1.IdentifierNamingFixTest ‑ incorrect lambda argument case fix()
com.saveourtool.diktat.ruleset.chapter1.IdentifierNamingFixTest ‑ incorrect object name fix()
com.saveourtool.diktat.ruleset.chapter1.IdentifierNamingFixTest ‑ incorrect variable name case fix()
com.saveourtool.diktat.ruleset.chapter1.IdentifierNamingFixTest ‑ incorrect variable prefix fix()
…

♻️ This comment has been updated with latest results.

[github-actions]

JUnit Tests (Windows, EnricoMi/publish-unit-test-result-action@v2)

  163 files   -  4    163 suites   - 4   3m 5s ⏱️ - 4m 43s
1 389 tests  - 57    402 ✅  - 1 027  17 💤 ±0  970 ❌ +970 
2 769 runs   - 57  1 757 ✅  - 1 052  17 💤 ±0  995 ❌ +995 

For more details on these failures, see this check.

Results for commit ebf4ae3. ± Comparison against base commit fe4a01d.

This pull request removes 57 tests.

com.saveourtool.diktat.smoke.DiktatCliTest ‑ Run diKTat from cli (absolute paths)()
com.saveourtool.diktat.smoke.DiktatCliTest ‑ Run diKTat from cli (glob paths, 1 of 4)()
com.saveourtool.diktat.smoke.DiktatCliTest ‑ Run diKTat from cli (glob paths, 2 of 4)()
com.saveourtool.diktat.smoke.DiktatCliTest ‑ Run diKTat from cli (glob paths, 3 of 4)()
com.saveourtool.diktat.smoke.DiktatCliTest ‑ Run diKTat from cli (glob paths, 4 of 4)()
com.saveourtool.diktat.smoke.DiktatCliTest ‑ Run diKTat from cli()
com.saveourtool.diktat.smoke.DiktatSaveSmokeTest ‑ disable chapters()
com.saveourtool.diktat.smoke.DiktatSaveSmokeTest ‑ fix can cause long line()
com.saveourtool.diktat.smoke.DiktatSaveSmokeTest ‑ regression - FP of local variables rule()
com.saveourtool.diktat.smoke.DiktatSaveSmokeTest ‑ regression - should correctly handle tags with empty lines()
…

♻️ This comment has been updated with latest results.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[0x6675636b796f75676974687562]

DiktatJavaExecTaskTest > check command line in githubActions mode() FAILED
    java.lang.UnsupportedClassVersionError at DiktatJavaExecTaskTest.kt:151

The same failures at multiple other tests when run under Java 11.