Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 11, 2023

This PR contains the following updates:

Package Change Age Confidence
org.bouncycastle:bcpkix-jdk18on (source) 1.791.83 age confidence
org.wiremock.integrations:wiremock-spring-boot 3.8.23.10.6 age confidence
io.jsonwebtoken:jjwt-jackson 0.12.60.13.0 age confidence
io.jsonwebtoken:jjwt-impl 0.12.60.13.0 age confidence
io.jsonwebtoken:jjwt-api 0.12.60.13.0 age confidence

Release Notes

wiremock/wiremock-spring-boot (org.wiremock.integrations:wiremock-spring-boot)

v3.10.6

Compare Source

🚀 New features and improvements

📦 Dependency updates

✍ Other changes

v3.10.0

Compare Source

🚀 New features and improvements

v3.9.0

Compare Source

jwtk/jjwt (io.jsonwebtoken:jjwt-jackson)

v0.13.0

Compare Source

This is the last minor JJWT release branch that will support Java 7. Any necessary emergency bug fixes will be fixed in subsequent 0.13.x patch releases, but all new development, including Java 8 compatible changes, will be in the next minor (0.14.0) release.

All future JJWT major and minor versions ( 0.14.0 and later) will require Java 8 or later.

This 0.13.0 minor release has only one change:

  • The previously private JacksonDeserializer(ObjectMapper objectMapper, Map<String, Class<?>> claimTypeMap) constructor is now public for those that want register a claims
    type converter on their own specified ObjectMapper instance. See Issue 914.

v0.12.7

Compare Source

This patch release:

  • Adds a new Maven BOM, useful for multi-module projects. See Issue 967.

  • Allows the JwtParserBuilder to have empty nested algorithm collections, effectively disabling the parser's associated feature:

    • Emptying the zip() nested collection disables JWT decompression.
    • Emptying the sig() nested collection disables JWS mac/signature verification (i.e. all JWSs will be unsupported/rejected).
    • Emptying either the enc() or key() nested collections disables JWE decryption (i.e. all JWEs will be unsupported/rejected)

    See Issue 996.

  • Fixes bug 961 where JwtParserBuilder nested collection builders were not correctly replacing algorithms with the same id.

  • Ensures a JwkSet's keys collection is no longer entirely secret/redacted by default. This was an overzealous default that was unnecessarily restrictive; the keys collection itself should always be public, and each individual key within should determine which fields should be redacted when printed. See Issue 976.

  • Improves performance slightly by ensuring all jjwt-api utility methods that create *Builder instances (Jwts.builder(), Jwts.parserBuilder(), Jwks.builder(), etc) no longer use reflection.

    Instead,static factories are created via reflection only once during initial jjwt-api classloading, and then *Builders are created via standard instantiation using the new operator thereafter. This also benefits certain environments that may not have ideal ClassLoader implementations (e.g. Tomcat in some cases).

    NOTE: because this changes which classes are loaded via reflection, any environments that must explicitly reference reflective class names (e.g. GraalVM applications) will need to be updated to reflect the new factory class names.

    See Issue 988.

  • Upgrades the Gson dependency to 2.11.0

  • Upgrades the BouncyCastle dependency to 1.78.1


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner October 11, 2023 16:57
@codecov
Copy link

codecov bot commented Oct 11, 2023

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 61.64%. Comparing base (2b57433) to head (01a318a).
Report is 5 commits behind head on master.

Additional details and impacted files
@@             Coverage Diff              @@
##             master      #67      +/-   ##
============================================
+ Coverage     61.57%   61.64%   +0.06%     
- Complexity      270      282      +12     
============================================
  Files            34       36       +2     
  Lines          1559     1572      +13     
  Branches        102      107       +5     
============================================
+ Hits            960      969       +9     
  Misses          556      556              
- Partials         43       47       +4     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@renovate renovate bot force-pushed the renovate/all-maven-test-deps branch from 9873cc0 to 1337e98 Compare October 15, 2023 04:58
@renovate renovate bot force-pushed the renovate/all-maven-test-deps branch from 1337e98 to 8f409b0 Compare December 19, 2023 07:51
@renovate renovate bot force-pushed the renovate/all-maven-test-deps branch 2 times, most recently from b98f257 to d6ee0ae Compare January 29, 2024 04:03
@renovate renovate bot force-pushed the renovate/all-maven-test-deps branch from d6ee0ae to 412898c Compare February 2, 2024 20:52
@renovate renovate bot force-pushed the renovate/all-maven-test-deps branch 3 times, most recently from 122db97 to 01a318a Compare June 21, 2024 22:42
@renovate renovate bot force-pushed the renovate/all-maven-test-deps branch from 01a318a to efe8e48 Compare July 7, 2025 08:27
@renovate renovate bot changed the title Update all maven test dependencies Update dependency org.bouncycastle:bcpkix-jdk18on to v1.81 Jul 7, 2025
@renovate renovate bot force-pushed the renovate/all-maven-test-deps branch from efe8e48 to 4ef4c46 Compare July 7, 2025 11:57
@renovate renovate bot force-pushed the renovate/all-maven-test-deps branch from 4ef4c46 to 175d917 Compare August 14, 2025 21:43
@renovate renovate bot changed the title Update dependency org.bouncycastle:bcpkix-jdk18on to v1.81 Update all maven test dependencies Aug 14, 2025
@renovate renovate bot force-pushed the renovate/all-maven-test-deps branch 2 times, most recently from f25f3e3 to d1f6996 Compare August 26, 2025 09:47
@renovate renovate bot force-pushed the renovate/all-maven-test-deps branch from d1f6996 to 7de3ce6 Compare September 8, 2025 11:37
@renovate renovate bot force-pushed the renovate/all-maven-test-deps branch from 7de3ce6 to c4a721f Compare September 17, 2025 10:32
@renovate renovate bot force-pushed the renovate/all-maven-test-deps branch from c4a721f to 43b2b12 Compare November 26, 2025 09:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant