Bump plexus-archiver from 4.2.5 to 4.5.0 #62

Closed
dependabot[bot] wants to merge 1 commit from dependabot/maven/org.codehaus.plexus-plexus-archiver-4.5.0 into main
dependabot[bot] commented 2022-09-15 14:33:37 -04:00 (Migrated from github.com)

Bumps plexus-archiver from 4.2.5 to 4.5.0.

Release notes

Sourced from plexus-archiver's releases.

Plexus Archiver 4.5.0

🚀 New features and improvements

🐛 Bug Fixes

  • Fix UnArchiver#isOverwrite not working as expected (#229) @​plamentotev Existing files were overridden only if UnArchiver#isOverwrite was set and the existing files were older than the archive entry. Now it works as documented: older files are always overridden; when UnArchiver#isOverwrite is true, existing files are always overridden regardless if they are older or not.

Plexus Archiver 4.4.0

🚀 New features and improvements

Plexus Archiver 4.3.0

🚀 New features and improvements

📦 Dependency updates

Plexus Archiver 4.2.7

🚀 New features and improvements

  • Respect order of META-INF/ and META-INF/MANIFEST.MF entries in a JAR file (#189) @​michael-o

Plexus Archiver 4.2.6

This release updates commons-compress to 1.21 which contains security fixed for CVE-2021-35517 CVE-2021-35516 CVE-2021-35515 CVE-2021-36090

This version requires Java 8 as minimum (commons-compress 1.21 requires Java 8).

🚀 New features and improvements

  • FileInputStream, FileOutputStream, FileReader and FileWriter are no longer used (#183) @​jorsol

... (truncated)

Commits
  • 61aa536 [maven-release-plugin] prepare release plexus-archiver-4.5.0
  • 69d9efb Bump zstd-jni from 1.5.2-3 to 1.5.2-4
  • b5aae67 Bump to 4.5.0
  • 5ba0d19 Add zstd (un)archiver support
  • 8656ee0 Fix UnArchiver#isOverwrite not working as expected
  • 57d924b Bump junitVersion from 5.8.2 to 5.9.0
  • 0a5115c Use @Enabled/@​Disabled to run tests only on specific OS/JDK
  • 5363cf9 Migrate to JUnit 5
  • bf33d58 Update release-drafter.yml
  • f558d87 Use shared workflow for the Maven build
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps [plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) from 4.2.5 to 4.5.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/codehaus-plexus/plexus-archiver/releases">plexus-archiver's releases</a>.</em></p> <blockquote> <h2>Plexus Archiver 4.5.0</h2> <h2>🚀 New features and improvements</h2> <ul> <li>Add zstd (un)archiver support (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/226">#226</a>) <a href="https://github.com/pleeplop"><code>@​pleeplop</code></a></li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li>Fix <code>UnArchiver#isOverwrite</code> not working as expected (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/229">#229</a>) <a href="https://github.com/plamentotev"><code>@​plamentotev</code></a> Existing files were overridden only if <code>UnArchiver#isOverwrite</code> was set and the existing files were older than the archive entry. Now it works as documented: older files are always overridden; when <code>UnArchiver#isOverwrite</code> is <code>true</code>, existing files are always overridden regardless if they are older or not.</li> </ul> <h2>Plexus Archiver 4.4.0</h2> <!-- raw HTML omitted --> <h2>🚀 New features and improvements</h2> <ul> <li>Drop legacy plexus API and use only JSR330 components (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/220">#220</a>) <a href="https://github.com/cstamas"><code>@​cstamas</code></a></li> </ul> <h2>Plexus Archiver 4.3.0</h2> <!-- raw HTML omitted --> <h2>🚀 New features and improvements</h2> <ul> <li>Require Java 8 (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/206">#206</a>) <a href="https://github.com/plamentotev"><code>@​plamentotev</code></a></li> <li>Refactor to use FileTime API (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/199">#199</a>) <a href="https://github.com/jorsol"><code>@​jorsol</code></a></li> <li>Rename setTime method to setZipEntryTime (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/209">#209</a>) <a href="https://github.com/jorsol"><code>@​jorsol</code></a></li> <li>Convert InputStreamSupplier to lambdas (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/212">#212</a>) <a href="https://github.com/jorsol"><code>@​jorsol</code></a></li> <li>Update plexus-container-default to 2.1.1, commons-io 2.11.0 (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/211">#211</a>) <a href="https://github.com/jorsol"><code>@​jorsol</code></a></li> <li>FIX: Reproducible Builds not working when using modular jar (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/205">#205</a>) <a href="https://github.com/jorsol"><code>@​jorsol</code></a></li> </ul> <h2>📦 Dependency updates</h2> <ul> <li>Bump plexus-parent from 8 to 10 (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/219">#219</a>) <a href="https://github.com/dependabot"><code>@​dependabot</code></a></li> <li>Bump plexus-io from 3.2.0 to 3.3.1 (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/214">#214</a>) <a href="https://github.com/dependabot"><code>@​dependabot</code></a></li> <li>Bump plexus-utils from 3.4.1 to 3.4.2 (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/218">#218</a>) <a href="https://github.com/dependabot"><code>@​dependabot</code></a></li> </ul> <h2>Plexus Archiver 4.2.7</h2> <h2>🚀 New features and improvements</h2> <ul> <li>Respect order of META-INF/ and META-INF/MANIFEST.MF entries in a JAR file (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/189">#189</a>) <a href="https://github.com/michael-o"><code>@​michael-o</code></a></li> </ul> <h2>Plexus Archiver 4.2.6</h2> <p>This release updates commons-compress to 1.21 which contains security fixed for <a href="https://github.com/advisories/GHSA-xqfj-vm6h-2x34">CVE-2021-35517</a> <a href="https://github.com/advisories/GHSA-crv7-7245-f45f">CVE-2021-35516</a> <a href="https://github.com/advisories/GHSA-7hfm-57qf-j43q">CVE-2021-35515</a> <a href="https://github.com/advisories/GHSA-mc84-pj99-q6hh">CVE-2021-36090</a></p> <p><strong>This version requires Java 8 as minimum (commons-compress 1.21 requires Java 8).</strong></p> <h2>🚀 New features and improvements</h2> <ul> <li>FileInputStream, FileOutputStream, FileReader and FileWriter are no longer used (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/183">#183</a>) <a href="https://github.com/jorsol"><code>@​jorsol</code></a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/61aa536b08b1ddb71308660d35ac9277a3b2113b"><code>61aa536</code></a> [maven-release-plugin] prepare release plexus-archiver-4.5.0</li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/69d9efbe4a22625a3dea024811d19ba1267d98b8"><code>69d9efb</code></a> Bump zstd-jni from 1.5.2-3 to 1.5.2-4</li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/b5aae67e84b4f2c307ef7be83fe6624c634d1e5d"><code>b5aae67</code></a> Bump to 4.5.0</li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/5ba0d19755d396e28ef925cbda98ec1fe3aa9c7d"><code>5ba0d19</code></a> Add zstd (un)archiver support</li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/8656ee0eaa1e10ad1c49891cab7cd4ab54854b68"><code>8656ee0</code></a> Fix UnArchiver#isOverwrite not working as expected</li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/57d924bae86fc1cc5f18a42c3efeb43b8e1c63ce"><code>57d924b</code></a> Bump junitVersion from 5.8.2 to 5.9.0</li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/0a5115cc1fdc39b201f49b0763d449593d2d770a"><code>0a5115c</code></a> Use @Enabled/<a href="https://github.com/Disabled"><code>@​Disabled</code></a> to run tests only on specific OS/JDK</li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/5363cf902f17979fcab2b5bf8593a28513b3c20a"><code>5363cf9</code></a> Migrate to JUnit 5</li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/bf33d5877efc07086652fb3754140c1d1d580a26"><code>bf33d58</code></a> Update release-drafter.yml</li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/f558d87ce8b7fbdc74bdd4f512188e97a70ac3e8"><code>f558d87</code></a> Use shared workflow for the Maven build</li> <li>Additional commits viewable in <a href="https://github.com/codehaus-plexus/plexus-archiver/compare/plexus-archiver-4.2.5...plexus-archiver-4.5.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-archiver&package-manager=maven&previous-version=4.2.5&new-version=4.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
dependabot[bot] commented 2022-11-11 13:06:24 -05:00 (Migrated from github.com)

Superseded by #69.

Superseded by #69.

Pull request closed

Sign in to join this conversation.
No description provided.