chore: Update all patch dependencies (v1.x.x)

[arxioly]

This PR contains the following updates:

Package	Type	Update	Change
@material-ui/core (source)	dependencies	patch	4.12.3 -> 4.12.4
@material-ui/icons (source)	dependencies	patch	4.11.2 -> 4.11.3
@testing-library/react	devDependencies	patch	12.1.2 -> 12.1.5
cross-env	devDependencies	patch	5.2.0 -> 5.2.1
enzyme-adapter-react-16 (source)	devDependencies	patch	1.15.6 -> 1.15.8
eslint-plugin-prettier	devDependencies	patch	3.4.0 -> 3.4.1
gradle (source)		patch	7.6 -> 7.6.4
htmr	dependencies	patch	1.0.1 -> 1.0.2
jest (source)	devDependencies	patch	26.6.0 -> 26.6.3
nodemon (source)	devDependencies	patch	2.0.18 -> 2.0.22
ramda (source)	dependencies	patch	0.30.0 -> 0.30.1
react-error-overlay (source)	overrides	patch	6.0.9 -> 6.0.11
react-redux	dependencies	patch	7.2.5 -> 7.2.9
react-redux	overrides	patch	^8 -> ^5.1.1
react-redux	dependencies	patch	5.1.1 -> 5.1.2
react-router-dom (source)	dependencies	patch	5.3.0 -> 5.3.4
tough-cookie	overrides	patch	4.1.3 -> 4.1.4
util	dependencies	patch	0.12.4 -> 0.12.5
org.codehaus.woodstox:stax2-api	dependencies	patch	4.2.1 -> 4.2.2
io.swagger:swagger-compat-spec-parser (source)	dependencies	patch	1.0.67 -> 1.0.71
io.swagger:swagger-parser (source)	dependencies	patch	1.0.67 -> 1.0.71
com.netflix.archaius:archaius-core	dependencies	patch	0.7.7 -> 0.7.12
org.apache.tomcat.embed:tomcat-embed-el	dependencies	patch	9.0.90 -> 9.0.95
org.apache.tomcat.embed:tomcat-embed-websocket	dependencies	patch	9.0.90 -> 9.0.95
org.apache.tomcat.embed:tomcat-embed-core	dependencies	patch	9.0.90 -> 9.0.95
org.apache.tomcat:tomcat-coyote	dependencies	patch	9.0.90 -> 9.0.95
org.apache.tomcat:tomcat-annotations-api	dependencies	patch	9.0.90 -> 9.0.95
io.swagger.core.v3:swagger-jaxrs2	dependencies	patch	2.2.22 -> 2.2.23
io.swagger.core.v3:swagger-integration	dependencies	patch	2.2.22 -> 2.2.23
io.swagger.core.v3:swagger-models	dependencies	patch	2.2.22 -> 2.2.23
io.swagger.core.v3:swagger-annotations	dependencies	patch	2.2.22 -> 2.2.23
io.swagger.core.v3:swagger-core	dependencies	patch	2.2.22 -> 2.2.23
io.netty:netty-transport-udt (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
io.netty:netty-transport-sctp (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
io.netty:netty-transport-rxtx (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
io.netty:netty-transport-native-unix-common (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
io.netty:netty-transport-native-kqueue (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
io.netty:netty-transport-native-epoll (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
io.netty:netty-transport (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
io.netty:netty-resolver-dns-native-macos (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
io.netty:netty-resolver-dns (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
io.netty:netty-resolver (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
io.netty:netty-handler-proxy (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
io.netty:netty-handler (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
io.netty:netty-common (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
io.netty:netty-codec-xml (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
io.netty:netty-codec-stomp (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
io.netty:netty-codec-smtp (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
io.netty:netty-codec-socks (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
io.netty:netty-codec-redis (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
io.netty:netty-codec-mqtt (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
io.netty:netty-codec-memcache (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
io.netty:netty-codec-http2 (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
io.netty:netty-codec-http (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
io.netty:netty-codec-haproxy (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
io.netty:netty-codec-dns (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
io.netty:netty-codec (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
io.netty:netty-buffer (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
io.netty:netty-all (source)	dependencies	patch	4.1.111.Final -> 4.1.113.Final
org.projectlombok:lombok (source)	dependencies	patch	1.18.32 -> 1.18.34
org.eclipse.jetty.websocket:websocket-common (source)	dependencies	patch	9.4.54.v20240208 -> 9.4.56.v20240826
org.eclipse.jetty.websocket:websocket-client (source)	dependencies	patch	9.4.54.v20240208 -> 9.4.56.v20240826
org.eclipse.jetty.websocket:websocket-api (source)	dependencies	patch	9.4.54.v20240208 -> 9.4.56.v20240826
org.eclipse.jetty:jetty-util (source)	dependencies	patch	9.4.54.v20240208 -> 9.4.56.v20240826
org.eclipse.jetty:jetty-io (source)	dependencies	patch	9.4.54.v20240208 -> 9.4.56.v20240826
org.eclipse.jetty:jetty-http (source)	dependencies	patch	9.4.54.v20240208 -> 9.4.56.v20240826
org.eclipse.jetty:jetty-client (source)	dependencies	patch	9.4.54.v20240208 -> 9.4.56.v20240826
org.apache.tomcat.embed:tomcat-embed-jasper	dependencies	patch	9.0.68 -> 9.0.95
org.apache.tomcat.embed:tomcat-embed-core	dependencies	patch	9.0.68 -> 9.0.95
com.fasterxml.jackson.dataformat:jackson-dataformat-yaml	dependencies	patch	2.17.1 -> 2.17.2
com.fasterxml.jackson.core:jackson-databind (source)	dependencies	patch	2.17.1 -> 2.17.2
com.fasterxml.jackson.datatype:jackson-datatype-jdk8	dependencies	patch	2.17.1 -> 2.17.2
com.fasterxml.jackson.core:jackson-core	dependencies	patch	2.17.1 -> 2.17.2
com.fasterxml.jackson.core:jackson-annotations (source)	dependencies	patch	2.17.1 -> 2.17.2
jacoco (source)	dependencies	patch	0.8.4 -> 0.8.12
commons-codec:commons-codec (source)	dependencies	patch	1.17.0 -> 1.17.1
com.amazonaws:aws-java-sdk-core (source)	dependencies	patch	1.12.750 -> 1.12.772
org.awaitility:awaitility (source)	dependencies	patch	4.2.1 -> 4.2.2
org.eclipse.jgit:org.eclipse.jgit	dependencies	patch	5.13.0.202109080827-r -> 5.13.3.202401111512-r
org.springframework:spring-websocket	dependencies	patch	5.3.37 -> 5.3.39
org.springframework:spring-webflux	dependencies	patch	5.3.37 -> 5.3.39
org.springframework:spring-webmvc	dependencies	patch	5.3.37 -> 5.3.39
org.springframework:spring-web	dependencies	patch	5.3.37 -> 5.3.39
org.springframework:spring-test	dependencies	patch	5.3.37 -> 5.3.39
org.springframework:spring-messaging	dependencies	patch	5.3.37 -> 5.3.39
org.springframework:spring-jcl	dependencies	patch	5.3.37 -> 5.3.39
org.springframework:spring-expression	dependencies	patch	5.3.37 -> 5.3.39
org.springframework:spring-core	dependencies	patch	5.3.37 -> 5.3.39
org.springframework:spring-context-support	dependencies	patch	5.3.37 -> 5.3.39
org.springframework:spring-context	dependencies	patch	5.3.37 -> 5.3.39
org.springframework:spring-beans	dependencies	patch	5.3.37 -> 5.3.39
org.springframework:spring-aop	dependencies	patch	5.3.37 -> 5.3.39
org.springframework:spring-framework-bom	dependencies	patch	5.3.37 -> 5.3.39
org.springframework.security:spring-security-web (source)	dependencies	patch	5.8.13 -> 5.8.14
org.springframework.security:spring-security-crypto (source)	dependencies	patch	5.8.13 -> 5.8.14
org.springframework.security:spring-security-core (source)	dependencies	patch	5.8.13 -> 5.8.14
org.springframework.security:spring-security-config (source)	dependencies	patch	5.8.13 -> 5.8.14
org.springframework.cloud:spring-cloud-starter-bootstrap (source)	dependencies	patch	3.1.8 -> 3.1.9
org.springframework.cloud:spring-cloud-context (source)	dependencies	patch	3.1.8 -> 3.1.9
io.micronaut.application	plugin	patch	3.7.9 -> 3.7.10
io.micronaut.library	plugin	patch	3.7.9 -> 3.7.10

---

Release Notes

mui-org/material-ui (@​material-ui/core)

v4.12.4: 4.12.4

Compare Source

Big thanks to the 6 contributors who made this release possible. Here are some highlights ✨:

This release was motivated by fixing compatibility issues with TypeScript 4.7 (#​32041).

@material-ui/core@4.12.4

• [core] Fix TS 4.7 compat issues (#​32041, #​32126) @​eps1lon
• [TextField] Use deprecatedPropType on the deprecated props (#​27503) @​mnajdova

Docs

• update all the links to the new domain @​oliviertassinari
• Update canonicals to point to the new domain @​oliviertassinari
• [Badge] Warn on default `overlap` value as well (#​27573) @​eps1lon
• [docs] Fix seo issues on v4 (#​28999) @​mnajdova
• [docs] Use branch deploy for v4 docs (#​28896) @​oliviertassinari
• [docs] Improve the banner that points to v5 @​oliviertassinari
• [docs] Fix various broken master links (#​28358) @​eps1lon
• [docs] Remove job ad on the website (#​28343) @​eps1lon
• [docs] Prepare for v4.material-ui.com deploy (#​28227) @​mnajdova
• [docs] Cancelled subscription @​oliviertassinari
• [docs] v5 is no longer a beta @​oliviertassinari
• [docs] Sync redirections from X into Core @​oliviertassinari
• [docs] Add GridExportCSVOptions page to documentation pages (#​27414) @​flaviendelangle
• [docs] Add job ad (#​27784) @​oliviertassinari
• [docs] Fix api generation for `deprecatedPropType` (#​27576) @​mnajdova
• [v4] Batch fixes (#​28684) @​mnajdova
• [website] Experiment without compensation @​oliviertassinari
• [website] Add spicefactory as gold sponsor @​oliviertassinari

Core

• [core] Consider v4.x as the base (#​28344) @​eps1lon

All contributors of this release in alphabetical order: @​eps1lon, @​flaviendelangle, @​mbrookes, @​mnajdova, @​oliviertassinari, @​spiftire

testing-library/react-testing-library (@​testing-library/react)

v12.1.5

Compare Source

Bug Fixes

• Only supports React < 18 (#​1041) (9e2b5db)

v12.1.4

Compare Source

Bug Fixes

• Match runtime type of baseElement in TypeScript types (#​1023) (96ed8da)

v12.1.3

Compare Source

Bug Fixes

• Add @types/react-dom as a direct dependency (#​1001) (149d9a9)

kentcdodds/cross-env (cross-env)

v5.2.1

Compare Source

Bug Fixes

• remove is-windows dependency (#​207) (a75fd0e)

enzymejs/enzyme (enzyme-adapter-react-16)

v1.15.8

Compare Source

v1.15.7

Compare Source

prettier/eslint-plugin-prettier (eslint-plugin-prettier)

v3.4.1

Compare Source

• build(deps): Bump glob-parent from 5.0.0 to 5.1.2 (#​420) (b6d075c)
• build(deps): Bump path-parse from 1.0.6 to 1.0.7 (#​425) (24f957e)
• feat: support @graphql-eslint/eslint-plugin out of box (#​413) (ec6fbb1)
• chore: add tests for Node 16 (#​410) (76bd45e)

gradle/gradle (gradle)

v7.6.4: 7.6.4

Compare Source

This is a patch release for 7.6. We recommend using 7.6.4 instead of 7.6.

Read the Release Notes

Upgrade instructions

Switch your build to use Gradle 7.6.4 by updating your wrapper:

./gradlew wrapper --gradle-version=7.6.4

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v7.6.3: 7.6.3

Compare Source

This is a patch release for 7.6. We recommend using 7.6.3 instead of 7.6.

This release addresses two security vulnerabilities:

• Incorrect permission assignment for symlinked files used in copy or archiving operations
• Possible local text file exfiltration by XML External entity injection

It also fixes the following issues:

• #​25781 Backport finalized task performance fix to 7.6.x
• #​25802 Backport cgroups fix to 7.6.x

Read the Release Notes

Upgrade Instructions

Switch your build to use Gradle 7.6.3 by updating your wrapper:

./gradlew wrapper --gradle-version=7.6.3

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.3.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

v7.6.2: 7.6.2

Compare Source

This is a patch release for 7.6. We recommend using 7.6.2 instead of 7.6.

This release addresses two security vulnerabilities:

• Dependency cache path traversal
• Path traversal vulnerabilities in handling of Tar archives

It also fixes the following issues:

• #​23201 Backport dependency upgrades to 7.x
• #​23202 Backport Scala incremental compilation fixes
• #​23325 Backport JSoup update to resolve CVE-2022-36033
• #​23458 Backport JUnit5 dynamic test logging bug fix
• #​23681 Dependency graph resolution: Equivalent excludes can cause un-necessary graph mutations [backport 7.x]
• #​23922 Backport "Use Compiler API data for incremental compilation after a failure" to 7.x
• #​23951 Exclude rule merging: missing optimization [Backport 7.x]
• #​24132 Extending an already resolved configuration no longer works correctly [backport 7.x]
• #​24234 7.6.1 breaks gradle-consistent-versions
• #​24390 Gradle 7.4 fails on multi release jar's with JDK 19 code
• #​24439 Gradle complains about invalid tool chain - picking up the source package location - it should just ignore them [Backport]
• #​24443 Maven artifact referenced only in dependency constraints raises IllegalStateException: Corrupt serialized resolution result [backport]
• #​24901 Backport fix for test exception that cannot be deserialized to 7.x

Read the Release Notes

Upgrade Instructions

Switch your build to use Gradle 7.6.2 by updating your wrapper:

./gradlew wrapper --gradle-version=7.6.2

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.2.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

v7.6.1: 7.6.1

Compare Source

This is a patch release for 7.6. We recommend using 7.6.1 instead of 7.6.

It fixes the following issues:

• #​19065 Platform dependencies not possible in dependency block of test suite plugin
• #​22688 Increased memory usage (with -p option)
• #​22796 Building gradle itself fails during toolchain download: permission denied copying a file within .gradle/jdks
• #​22875 Regression with 7.6: @​​pom artifact in JVM library project is no longer found
• #​22937 Remove safe credentials reference
• #​22973 Kotlin MPP plugin broken with Gradle 7.6 due to signature change in TestResultProcessor
• #​23016 toolchainManagement.jvm.javaRepositories should not expose the full surface of NamedDomainObjectList
• #​23025 Back-port toolchain related fixes to 7.6.1
• #​23053 Auto-provisioning/auto-detection of IBM Semeru toolchains is broken with Gradle 7.6
• #​23074 Docs: Build Lifecycle starts halfway through a point
• #​23096 Classifiers of version catalog are discarded while copied to anothor dependency
• #​23111 Ant closures are broken with Gradle 7.6
• #​23178 Mention the Foojay Toolchain Resolver plugin in the Gradle manual
• #​23215 Gradle 7.6: high memory usage (android project)
• #​23224 Backport to 7.6.1 "Fix for Incremental compilation with modules"
• #​23294 "Unable to make progress running work" together with --continue and failing tasks (Backport to 7.6.1)
• #​23555 Improve Toolchain related deprecation nagging in 7.6
• #​23894 Update EOL policy
• #​23910 Backport trusting only full GPG keys in dependency verification [Backport 7.6.1]
• #​23941 Typo in v7.6 docs about disabling_the_daemon
• #​23985 Resolving of manually created configuration creates a ResolveException

Read the Release Notes

Upgrade Instructions

Switch your build to use Gradle 7.6.1 by updating your wrapper:

./gradlew wrapper --gradle-version=7.6.1

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.1.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

pveyes/htmr (htmr)

v1.0.2

Compare Source

• Fix peer dependencies for react 18
• Fix react-native imports
• Fix item* attributes

jestjs/jest (jest)

v26.6.3

Compare Source

Fixes

• [jest-resolve-dependencies] Continue dependency resolution if mock dependency can't be found (#​10779)

v26.6.2

Compare Source

Features

• [jest-core] Add findRelatedTests and nonFlagArgs in allowed config options for updateConfigAndRun in watch plugins (#​10659)

Fixes

• [babel-plugin-jest-hoist] Preserve order of hoisted mock nodes within containing block (#​10536)
• [babel-plugin-jest-hoist] Hoist pure constants to support experimental JSX transform in hoisted mocks (#​10723)
• [babel-preset-jest] Update babel-preset-current-node-syntax to support top level await (#​10747)
• [expect] Revert "Fix objectContaining to work recursively into sub-objects (#​10508)" (#​10766)
• [jest-circus, jest-jasmine2] fix: don't assume stack is always a string (#​10697)
• [jest-config] Fix bug introduced in watch mode by PR #​10678 (#​10692)
• [jest-config] Throw correct error for missing preset modules (#​10737)
• [jest-resolve-dependencies] Resolve mocks as dependencies (#​10713)
• [jest-runtime] Handle file URLs in dynamic imports (#​10744)
• [jest-runtime, babel-jest] Pass more ESM options to @jest/transform (#​10752)
• [jest-runtime] Properly inject extraGlobals into the runtime (#​10758)
• [jest-transform] Link to ESM docs on syntax errors (#​10748)

Chore & Maintenance

• [docs] Add docs for using mocks in TypeScript (#​10415)
• [eslint-config-fb-strict] Move package from this repo to fbjs repo (#​10739)
• [examples] Update TypeScript example to show use of newer Jest types (#​10399)
• [jest-cli] chore: standardize files and folder names (#​10698)
• [jest-config] Switch ts-node Register type to Service due to deprecation (#​11210)

v26.6.1

Compare Source

Features

• [jest-runtime] Support named exports from CommonJS as named ES Module imports (#​10673)
• [jest-validate] Add support for recursiveDenylist option as an alternative to recursiveBlacklist (#​10236)

Fixes

• [expect] Fix objectContaining to work recursively into sub-objects (#​10508)
• [jest-cli, jest-core, jest-config, jest-types] Fix --onlyFailures flag to work in non-watch mode (#​10678)
• [jest-config] Fix for the jest.config.ts compiler to not interfere with tsconfig.json files (#​10675)
• [jest-message-util] Update to work properly with Node 15 (#​10660)
• [jest-mock] Allow to mock methods in getters (TypeScript 3.9 export) (#​10156)

remy/nodemon (nodemon)

v2.0.22

Compare Source

Bug Fixes

• remove ts mapping if loader present (f7816e4), closes #​2083

v2.0.21

Compare Source

Bug Fixes

• remove ts mapping if loader present (1468397), closes #​2083

v2.0.20

Compare Source

Bug Fixes

• remove postinstall script (e099e91)

v2.0.19

Compare Source

Bug Fixes

• Replace update notifier with simplified deps (#​2033) (176c4a6), closes #​1961 #​2028

ramda/ramda (ramda)

v0.30.1: v.0.30.1

Compare Source

upgrade guide: https://github.com/ramda/ramda/issues/3472

facebook/create-react-app (react-error-overlay)

v6.0.11

Compare Source

v6.0.10

Compare Source

reduxjs/react-redux (react-redux)

v7.2.9

Compare Source

This patch release updates the rarely-used areStatesEqual option for connect to now pass through ownProps for additional use in determining which pieces of state to compare if desired.

The new signature is:

{
  areStatesEqual?: (
    nextState: State,
    prevState: State,
    nextOwnProps: TOwnProps,
    prevOwnProps: TOwnProps
  ) => boolean
}

What's Changed

• connect: pass ownProps to areStatesEqual by @​jspurlin in https://github.com/reduxjs/react-redux/pull/1952

Full Changelog: reduxjs/react-redux@v7.2.8...v7.2.9

v7.2.8

Compare Source

This release fixes a bug in the 7.x branch that caused <Provider> to unsubscribe and stop updating completely when used inside of React 18's <StrictMode>. The new "strict effects" behavior double-mounts components, and the subscription needed to be set up inside of a useLayoutEffect instead of a useMemo. This was previously fixed as part of v8 development, and we've backported it.

Note: If you are now using React 18, we strongly recommend using the React-Redux v8 beta instead of v7.x!. v8 has been rewritten internally to work correctly with React 18's Concurrent Rendering capabilities. React-Redux v7 will run and generally work okay with existing code, but may have rendering issues if you start using Concurrent Rendering capabilities in your code.

Now that React 18 is out, we plan to finalize React-Redux v8 and release it live within the next couple weeks. Per an update yesterday in the "v8 roadmap" thread, React-Redux v8 will be updated in the next couple days to ensure support for React 16.8+ as part of the next beta release. We would really appreciate final feedback on using React-Redux v8 beta with React 18 before we publish the final version.

Full Changelog: reduxjs/react-redux@v7.2.7...v7.2.8

v7.2.7

Compare Source

This release updates React-Redux v7's peer dependencies to accept React 18 as a valid version, only to avoid installation errors caused by NPM's "install all the peer deps and error if they don't match" behavior.

Note: If you are now using React 18, we strongly recommend using the React-Redux v8 beta instead of v7.x!. v8 has been rewritten internally to work correctly with React 18's Concurrent Rendering capabilities. React-Redux v7 will run and generally work okay with existing code, but may have rendering issues if you start using Concurrent Rendering capabilities in your code.

Now that React 18 is out, we plan to finalize React-Redux v8 and release it live within the next couple weeks. We would really appreciate final feedback on using React-Redux v8 beta with React 18 before we publish the final version.

v7.2.6

Compare Source

Just a quick fix for a Yarn install warning. Sorry about the noise!

Changes

• Remove workspaces from our package.json to silence a Yarn warning (@​timdorr)

remix-run/react-router (react-router-dom)

v5.3.4

Compare Source

We removed the mini-create-react-context dependency, moving it into an internal module to eliminate peer dependency warnings for users on React 18 (#​9382).

Full Changelog: remix-run/react-router@v5.3.3...v5.3.4

v5.3.3

Compare Source

This release fixes a bad version selector in react-router-native.

v5.3.2

Compare Source

• Fix: make v5 Router compatible with v18 StrictMode by @​jgoz in https://github.com/remix-run/react-router/pull/8831

v5.3.1

Compare Source

This release adds missing LICENSE files to the published build.

salesforce/tough-cookie (tough-cookie)

v4.1.4

Compare Source

https://www.npmjs.com/package/tough-cookie/v/4.1.4

What's Changed

• Add local alias for toString by @​corvidism in https://github.com/salesforce/tough-cookie/pull/409
• Fix incorrect string validation for URL by @​coditva in https://github.com/salesforce/tough-cookie/pull/261

New Contributors

• @​corvidism made their first contribution in https://github.com/salesforce/tough-cookie/pull/409
• @​coditva made their first contribution in https://github.com/salesforce/tough-cookie/pull/261

Full Changelog: salesforce/tough-cookie@v4.1.3...v4.1.4

browserify/node-util (util)

v0.12.5

Compare Source

• Move safe-buffer dependency to a dev-only dependency. (@​goto-bus-stop in e84cfd5)
• Document usage with webpack 5+. (@​MatrixFrog in #​69)

swagger-api/swagger-parser (io.swagger:swagger-compat-spec-parser)

v1.0.71: Swagger-parser 1.0.71 released!

• Test and fix #​2083 properties in ComposedModel (#​2084)
• Fix #​750 by reusing ExternalRefProcessor (#​2082)

v1.0.70: Swagger-parser 1.0.70 released!

• update dependencies (#​2067)

v1.0.69: Swagger-parser 1.0.69 released!

• SWG-9288 utilizing safe url resolver for OAS 2.0 (#​2031)
• Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.2.1 to 3.4.1 (#​2011)
• Bump org.apache.maven.plugins:maven-compiler-plugin from 3.10.1 to 3.11.0 (#​2007)
• Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.5.0 to 3.6.2 (#​2006)
• Bump org.apache.maven.plugins:maven-source-plugin from 3.2.1 to 3.3.0 (#​2005)
• Bump commons-io:commons-io from 2.11.0 to 2.15.0 (#​2001)

v1.0.68: Swagger-parser 1.0.68 released!

• update dependencies (#​1984)

Netflix/archaius (com.netflix.archaius:archaius-core)

v0.7.12

What's Changed

• Add getPropertiesUninstrumented endpoint for ConfigurationUtils by @​akang31 in https://github.com/Netflix/archaius/pull/717

Full Changelog: Netflix/archaius@v0.7.11...v0.7.12

v0.7.11

What's Changed

• Improve Stack Trace tracking for Instrumentation by @​akang31 in https://github.com/Netflix/archaius/pull/701

Full Changelog: Netflix/archaius@v0.7.10...v0.7.11

v0.7.10

Minor updates to instrumentation

What's Changed

• Update instrumentation with more call sites and instrumentation clearing endpoint by @​akang31 in https://github.com/Netflix/archaius/pull/698

Full Changelog: Netflix/archaius@v0.7.9...v0.7.10

v0.7.9

Minor change to surface new method for better handling of instrumentation cases.

What's Changed

• Surface a recordUsage method for manual reporting of property usage by @​akang31 in https://github.com/Netflix/archaius/pull/696

Full Changelog: Netflix/archaius@v0.7.8...v0.7.9

v0.7.8

Minor maintenance updates.

What's Changed

• Basic instrumentation changes behind a flag by @​akang31 in https://github.com/Netflix/archaius/pull/663
  This is a minimal back port of the instrumentation changes from the 2.x branch. It is only meant to enable usage through the compatibility bridge. There are no plans to enable collecting instrumentation for pure 1.x-branch users.
• Updated dependencies to some less ancient versions by @​rgallardo-netflix in https://github.com/Netflix/archaius/pull/693
• Fixed and updated build system.

Full Changelog: Netflix/archaius@v0.7.7...v0.7.8

swagger-api/swagger-core (io.swagger.core.v3:swagger-jaxrs2)

v2.2.23: Swagger-core 2.2.23 released!

• refs #​4679 - fix @​Schema#implementation resolving for OAS 3.1 (#​4720)
• Missing array type when using @​ArraySchema (#​4700)
• fix #​4676 - fix schema serialization with sort=true (#​4677)

jacoco/jacoco (jacoco)

v0.8.12: 0.8.12

New Features

• JaCoCo now officially supports Java 22 (GitHub #​1596).
• Experimental support for Java 23 class files (GitHub #​1553).

Fixed bugs

• Branches added by the Kotlin compiler for functions with default arguments and having more than 32 parameters are filtered out during generation of report (GitHub #​1556).
• Branch added by the Kotlin compiler version 1.5.0 and above for reading from lateinit property is filtered out during generation of report (GitHub #​1568).

Non-functional Changes

• JaCoCo now depends on ASM 9.7 (GitHub #​1600).

v0.8.11: 0.8.11

New Features

• JaCoCo now officially supports Java 21 (GitHub #​1520).
• Experimental support for Java 22 class files (GitHub #​1479).
• Part of bytecode generated by the Java compilers for exhaustive switch expressions is filtered out during generation of report (GitHub #​1472).
• Part of bytecode generated by the Java compilers for record patterns is filtered out during generation of report (GitHub #​1473).

Fixed bugs

• Instrumentation should not cause VerifyError when the last local variable of method parameters is overridden in the method body to store a value of type long or double (GitHub #​893).
• Restore exec file compatibility with versions from 0.7.5 to 0.8.8 in case of class files with zero line numbers (GitHub #​1492).

Non-functional Changes

• jacoco-maven-plugin now requires at least Java 8 (GitHub #​1466, #​1468).
• JaCoCo build now requires at least Maven 3.5.4 (GitHub #​1467).
• Maven 3.9.2 should not produce warnings for jacoco-maven-plugin (GitHub #​1468).
• JaCoCo build now requires JDK 17 (GitHub #​1482).
• JaCoCo now depends on ASM 9.6 (GitHub #​1518).

v0.8.10: 0.8.10

Fixed bugs

• Agent should not require configuration of pe

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[pj892031]

It seems this version should covert all known security issues. Just brace is still lower version (but it is used just for testing purposing) and Spring Framework 5.3.40 was released only for support customers.