Skip to content

build(deps-dev): bump mockito-core from 4.11.0 to 5.1.0#815

Merged
lvca merged 7 commits intomainfrom
dependabot/maven/org.mockito-mockito-core-5.1.0
Mar 15, 2023
Merged

build(deps-dev): bump mockito-core from 4.11.0 to 5.1.0#815
lvca merged 7 commits intomainfrom
dependabot/maven/org.mockito-mockito-core-5.1.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 30, 2023

Bumps mockito-core from 4.11.0 to 5.1.0.

Release notes

Sourced from mockito-core's releases.

v5.1.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.1.0

v5.0.0

Mockito 5: prepare for future JDK versions

For a while now, we have seen an increase in problems/incompatibilities with recent versions of the JDK due to our usage of JVM-internal API. Most notably, JDK 17 made some changes which are incompatible with the current subclass mockmaker. Therefore, to prepare for the future of JDK, we are making some core changes to ensure Mockito keeps on working.

Switch the default mockmaker to mockito-inline

Back in Mockito 2.7.6, we published a new mockmaker based on the "inline bytecode" principle. This mockmaker creates mocks manipulating bytecode equivalent within the original class such that its method implementations hook into the normal Mockito machinery. As a comparison, the subclass mockmaker generates "real" subclasses for mocks, to mimic the same behavior. While the approaches are similar, the inline mockmaker avoids certain restrictions that the JDK imposes. For example, it does not violate module boundaries (introduced in JDK 9, but more heavily used in JDK 17) and avoids the leaking of the creation of the subclass.

Massive thanks to community member @​reta who implemented this change.

Note: this does not affect mockito-android nor testing on Android.

When should I still be using the subclass mockmaker?

There are legitimate remaining use cases for the subclass mockmaker. For example, on the Graal VM's native image, the inline mockmaker will not work and the subclass mockmaker is the appropriate choice. Additionally, if you would like to avoid mocking final classes, using the subclass mockmaker is a possibibility. Note however that if you solely want to use the subclass mockmaker to avoid mocking final, you will run into the above mentioned issues on JDK 17+. We want to leave this choice up to our users, which is why we will keep on supporting the subclass mockmaker.

If you want to use the subclass mockmaker instead, you can use the new mockito-subclass artifact (published on Maven Central along with all our other artifacts).

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java labels Jan 30, 2023
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 6, 2023

A newer version of org.mockito:mockito-core exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

@arcade-player arcade-player force-pushed the dependabot/maven/org.mockito-mockito-core-5.1.0 branch from 9ba418f to c2d8e67 Compare February 9, 2023 22:24
dependabot bot and others added 2 commits February 18, 2023 18:19
Bumps [mockito-core](https://github.com/mockito/mockito) from 4.11.0 to 5.1.0.
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v4.11.0...v5.1.0)

---
updated-dependencies:
- dependency-name: org.mockito:mockito-core
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@arcade-player arcade-player force-pushed the dependabot/maven/org.mockito-mockito-core-5.1.0 branch from c2d8e67 to 4ddce0b Compare February 18, 2023 17:19
@lvca lvca merged commit 2763fe4 into main Mar 15, 2023
@lvca lvca self-assigned this Mar 15, 2023
@lvca lvca added this to the 23.3.1 milestone Mar 15, 2023
@dependabot dependabot bot deleted the dependabot/maven/org.mockito-mockito-core-5.1.0 branch March 15, 2023 18:53
mergify bot added a commit that referenced this pull request Sep 29, 2025
…to 3.10.0 [skip ci]

Bumps [io.github.ascopes:protobuf-maven-plugin](https://github.com/ascopes/protobuf-maven-plugin) from 3.9.1 to 3.10.0.
Release notes

*Sourced from [io.github.ascopes:protobuf-maven-plugin's releases](https://github.com/ascopes/protobuf-maven-plugin/releases).*

> v3.10.0
> -------
>
> New features
> ------------
>
> * URL parsing has been reimplemented to work with Apache Commons Compress. This allows users to extract plugins implicitly from tarballls and other archive types that are listed in the documentation. This includes:
>   + `jar:https://somewebsite.lan/archive.jar!/path/to/exe`
>   + `zip:file://some/local/path/archive.zip!/path/to/exe`
>   + `ear:https://somewebsite.lan/archive.ear!/path/to/exe`
>   + `war:https://somewebsite.lan/archive.war!/path/to/exe`
>   + `kar:https://somewebsite.lan/archive.kar!/path/to/exe`
>   + `tar:https://somewebsite.lan/archive.tar!/path/to/exe`
>   + `tar:gz:https://somewebsite.lan/archive.tgz!/path/to/exe`
>   + `tar:bz2:https://somewebsite.lan/archive.tar.bz2!/path/to/exe`
>   + Further support for LZMA, CPIO archives, 7z archives, XZ, Z, etc is possible, please raise an issue to discuss.
> * Deeply nested URL protocols are now valid. If you need to extract a tarball from a zip and then extract a file from that tarball, this should work as expected.
>
> What's Changed
> --------------
>
> * Build on Java 25 in CI by [`@​ascopes`](https://github.com/ascopes) in [ascopes/protobuf-maven-plugin#805](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/805)
> * Include GH contributing guide and security notes in generated site by [`@​ascopes`](https://github.com/ascopes) in [ascopes/protobuf-maven-plugin#807](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/807)
> * Use v5 codecov action by [`@​ascopes`](https://github.com/ascopes) in [ascopes/protobuf-maven-plugin#806](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/806)
> * Bump com.google.api.grpc:proto-google-common-protos from 2.61.1 to 2.61.2 in /protobuf-maven-plugin/src/it/setup by [`@​dependabot`](https://github.com/dependabot)[bot] in [ascopes/protobuf-maven-plugin#811](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/811)
> * Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.11.3 to 3.12.0 by [`@​dependabot`](https://github.com/dependabot)[bot] in [ascopes/protobuf-maven-plugin#809](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/809)
> * Bump org.apache.maven.plugins:maven-compiler-plugin from 3.14.0 to 3.14.1 by [`@​dependabot`](https://github.com/dependabot)[bot] in [ascopes/protobuf-maven-plugin#808](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/808)
> * Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 by [`@​dependabot`](https://github.com/dependabot)[bot] in [ascopes/protobuf-maven-plugin#810](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/810)
> * [GH-804](https://redirect.github.com/ascopes/protobuf-maven-plugin/issues/804): Document usage of ZIP/JAR archives for sourceDirectories by [`@​ascopes`](https://github.com/ascopes) in [ascopes/protobuf-maven-plugin#812](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/812)
> * [GH-802](https://redirect.github.com/ascopes/protobuf-maven-plugin/issues/802): Reimplement URL handling by decorating input streams with commons-compress by [`@​ascopes`](https://github.com/ascopes) in [ascopes/protobuf-maven-plugin#803](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/803)
> * Bump org.sonatype.central:central-publishing-maven-plugin from 0.8.0 to 0.9.0 by [`@​dependabot`](https://github.com/dependabot)[bot] in [ascopes/protobuf-maven-plugin#813](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/813)
> * Bump org.assertj:assertj-core from 3.27.5 to 3.27.6 by [`@​dependabot`](https://github.com/dependabot)[bot] in [ascopes/protobuf-maven-plugin#814](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/814)
> * Bump org.immutables:bom from 2.11.3 to 2.11.4 by [`@​dependabot`](https://github.com/dependabot)[bot] in [ascopes/protobuf-maven-plugin#815](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/815)
>
> **Full Changelog**: <ascopes/protobuf-maven-plugin@v3.9.1...v3.10.0>


Commits

* [`a3827ea`](ascopes/protobuf-maven-plugin@a3827ea) [maven-release-plugin] prepare release v3.10.0
* [`c4f9a58`](ascopes/protobuf-maven-plugin@c4f9a58) Fix deploy.yml
* [`524f637`](ascopes/protobuf-maven-plugin@524f637) Update deploy.yml
* [`0d402b3`](ascopes/protobuf-maven-plugin@0d402b3) [maven-release-plugin] rollback the release of v3.10.0
* [`588944a`](ascopes/protobuf-maven-plugin@588944a) [maven-release-plugin] prepare release v3.10.0
* [`909183c`](ascopes/protobuf-maven-plugin@909183c) Fix mistake in JDK25 config for deploy.yml
* [`eb739b0`](ascopes/protobuf-maven-plugin@eb739b0) Merge pull request [#815](https://redirect.github.com/ascopes/protobuf-maven-plugin/issues/815) from ascopes/dependabot/maven/main/org.immutables-bom...
* [`027fa3e`](ascopes/protobuf-maven-plugin@027fa3e) Merge pull request [#814](https://redirect.github.com/ascopes/protobuf-maven-plugin/issues/814) from ascopes/dependabot/maven/main/org.assertj-assert...
* [`ae5d8de`](ascopes/protobuf-maven-plugin@ae5d8de) Merge pull request [#813](https://redirect.github.com/ascopes/protobuf-maven-plugin/issues/813) from ascopes/dependabot/maven/main/org.sonatype.centr...
* [`69ed3c2`](ascopes/protobuf-maven-plugin@69ed3c2) Bump org.immutables:bom from 2.11.3 to 2.11.4
* Additional commits viewable in [compare view](ascopes/protobuf-maven-plugin@v3.9.1...v3.10.0)
  
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=io.github.ascopes:protobuf-maven-plugin&package-manager=maven&previous-version=3.9.1&new-version=3.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
mergify bot added a commit that referenced this pull request Mar 3, 2026
…r-webpack-plugin in /studio [skip ci]

Removes [serialize-javascript](https://github.com/yahoo/serialize-javascript). It's no longer used after updating ancestor dependencies [serialize-javascript](https://github.com/yahoo/serialize-javascript), [copy-webpack-plugin](https://github.com/webpack/copy-webpack-plugin) and [terser-webpack-plugin](https://github.com/webpack/terser-webpack-plugin). These dependencies need to be updated together.
Removes `serialize-javascript`
Updates `copy-webpack-plugin` from 13.0.1 to 14.0.0
Release notes

*Sourced from [copy-webpack-plugin's releases](https://github.com/webpack/copy-webpack-plugin/releases).*

> v14.0.0
> -------
>
> [14.0.0](webpack/copy-webpack-plugin@v13.0.1...v14.0.0) (2026-03-02)
> -----------------------------------------------------------------------------------------------
>
> ### ⚠ BREAKING CHANGES
>
> * minimum supported `Node.js` version is `20.9.0` ([#819](https://redirect.github.com/webpack/copy-webpack-plugin/issues/819)) ([2881203](webpack/copy-webpack-plugin@2881203))
>
> ### Bug Fixes
>
> * update `serialize-javascript` to fix security problems


Changelog

*Sourced from [copy-webpack-plugin's changelog](https://github.com/webpack/copy-webpack-plugin/blob/main/CHANGELOG.md).*

> [14.0.0](webpack/copy-webpack-plugin@v13.0.1...v14.0.0) (2026-03-02)
> -----------------------------------------------------------------------------------------------
>
> ### ⚠ BREAKING CHANGES
>
> * minimum supported `Node.js` version is `20.9.0` ([#819](https://redirect.github.com/webpack/copy-webpack-plugin/issues/819)) ([2881203](webpack/copy-webpack-plugin@2881203))
>
> ### Bug Fixes
>
> * update `serialize-javascript` to fix security problems


Commits

* [`18eb9d9`](webpack/copy-webpack-plugin@18eb9d9) chore(release): 14.0.0
* [`2881203`](webpack/copy-webpack-plugin@2881203) refactor!: minimum supported `Node.js` version is `20.9.0` ([#819](https://redirect.github.com/webpack/copy-webpack-plugin/issues/819))
* [`9dc3d31`](webpack/copy-webpack-plugin@9dc3d31) chore(deps-dev): bump ajv from 6.12.6 to 6.14.0 ([#815](https://redirect.github.com/webpack/copy-webpack-plugin/issues/815))
* [`5cf5a1d`](webpack/copy-webpack-plugin@5cf5a1d) chore(deps): update ([#814](https://redirect.github.com/webpack/copy-webpack-plugin/issues/814))
* [`3dd5b6e`](webpack/copy-webpack-plugin@3dd5b6e) chore(deps): bump js-yaml ([#813](https://redirect.github.com/webpack/copy-webpack-plugin/issues/813))
* [`9ac38bb`](webpack/copy-webpack-plugin@9ac38bb) chore(deps-dev): bump lodash from 4.17.21 to 4.17.23 ([#812](https://redirect.github.com/webpack/copy-webpack-plugin/issues/812))
* [`6a16bac`](webpack/copy-webpack-plugin@6a16bac) Update link to contributing guidelines in README
* [`a1625f9`](webpack/copy-webpack-plugin@a1625f9) chore: migrate from contrib ([#810](https://redirect.github.com/webpack/copy-webpack-plugin/issues/810))
* [`9f6f204`](webpack/copy-webpack-plugin@9f6f204) chore: update github actions/checkout from v4 to v5 ([#809](https://redirect.github.com/webpack/copy-webpack-plugin/issues/809))
* See full diff in [compare view](webpack/copy-webpack-plugin@v13.0.1...v14.0.0)
  
Updates `terser-webpack-plugin` from 5.3.16 to 5.3.17
Release notes

*Sourced from [terser-webpack-plugin's releases](https://github.com/webpack/terser-webpack-plugin/releases).*

> v5.3.17
> -------
>
> ### [5.3.17](webpack/terser-webpack-plugin@v5.3.16...v5.3.17) (2026-03-03)
>
> ### Bug Fixes
>
> * update `serialize-javascript` ([37c490c](webpack/terser-webpack-plugin@37c490c))


Changelog

*Sourced from [terser-webpack-plugin's changelog](https://github.com/webpack/terser-webpack-plugin/blob/main/CHANGELOG.md).*

> ### [5.3.17](webpack/terser-webpack-plugin@v5.3.16...v5.3.17) (2026-03-03)
>
> ### Bug Fixes
>
> * update `serialize-javascript` ([37c490c](webpack/terser-webpack-plugin@37c490c))


Commits

* [`6f911ff`](webpack/terser-webpack-plugin@6f911ff) chore(release): 5.3.17
* [`37c490c`](webpack/terser-webpack-plugin@37c490c) fix: update `serialize-javascript`
* [`207764f`](webpack/terser-webpack-plugin@207764f) chore: deps update ([#652](https://redirect.github.com/webpack/terser-webpack-plugin/issues/652))
* [`a85ab47`](webpack/terser-webpack-plugin@a85ab47) chore(deps-dev): bump ajv from 6.12.6 to 6.14.0 ([#648](https://redirect.github.com/webpack/terser-webpack-plugin/issues/648))
* See full diff in [compare view](webpack/terser-webpack-plugin@v5.3.16...v5.3.17)
  
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/ArcadeData/arcadedb/network/alerts).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants