build(deps): bump the dependencies group with 13 updates

[dependabot]

Bumps the dependencies group with 13 updates:

Package	From	To
io.avaje:avaje-inject	10.5	11.0
io.avaje:avaje-inject-generator	10.5	11.0
org.apache.logging.log4j:log4j-core	2.24.1	2.24.2
org.apache.logging.log4j:log4j-slf4j-impl	2.24.1	2.24.2
commons-io:commons-io	2.17.0	2.18.0
io.swagger.core.v3:swagger-annotations	2.2.25	2.2.26
io.swagger.core.v3:swagger-models	2.2.25	2.2.26
io.swagger.parser.v3:swagger-parser	2.1.23	2.1.24
org.hibernate.orm:hibernate-core	6.6.2.Final	6.6.3.Final
com.zaxxer:HikariCP	6.2.0	6.2.1
org.jboss.modules:jboss-modules	2.1.5.Final	2.1.6.Final
gg.jte:jte	3.1.14	3.1.15
software.amazon.awssdk:bom	2.29.15	2.29.20

Updates io.avaje:avaje-inject from 10.5 to 11.0

Release notes

Sourced from io.avaje:avaje-inject's releases.

11.0

What's Changed

• Fix Repeatable Annotation Name Collision by @​SentryMan in avaje/avaje-inject#739
• Breaking change - Remove support for Deprecated Interfaces (please upgrade dependencies) by @​SentryMan in avaje/avaje-inject#670

Full Changelog: avaje/avaje-inject@10.6.0...11.0

10.6

What's New

• Merging META-INF/services/io.avaje.inject.spi.InjectExtension entries via the shade/assembly maven plugin or the shadowJar gradle tasks is no longer required for multi-module projects.

Changes

• Fix odd null pointer in module detection by @​SentryMan in avaje/avaje-inject#732
• Merge Detected Services into META-INF by @​SentryMan in avaje/avaje-inject#733
• Fix Lazy Checked Exceptions by @​SentryMan in avaje/avaje-inject#737
• Mark Generated Avaje HttpClient implementations as Closeable by @​SentryMan in avaje/avaje-inject#734
• Rename isAddBeanFor to isBeanAbsent by @​SentryMan in avaje/avaje-inject#727

Full Changelog: avaje/avaje-inject@10.5...10.6

Commits

• 547ecac Version 11.0
• 396cb19 Merge pull request #670 from SentryMan/tidy-deprecations
• 05f0a32 Merge branch 'master' into tidy-deprecations
• d8cc06d fix module import clash (#739)
• 3729348 Bump to next snapshot
• b51a2c2 Version 10.6
• 9d682ee remove more deprecated methods
• 065a071 Merge remote-tracking branch 'upstream/master' into tidy-deprecations
• d1e1e40 Merge pull request #727 from SentryMan/isbeanAbsent
• 9a26490 javadoc only, for the deprecated methods remove the "duplicate" docs
• Additional commits viewable in compare view

Updates io.avaje:avaje-inject-generator from 10.5 to 11.0

Updates io.avaje:avaje-inject-generator from 10.5 to 11.0

Updates org.apache.logging.log4j:log4j-core from 2.24.1 to 2.24.2

Updates org.apache.logging.log4j:log4j-slf4j-impl from 2.24.1 to 2.24.2

Updates org.apache.logging.log4j:log4j-slf4j-impl from 2.24.1 to 2.24.2

Updates commons-io:commons-io from 2.17.0 to 2.18.0

Updates io.swagger.core.v3:swagger-annotations from 2.2.25 to 2.2.26

Updates io.swagger.core.v3:swagger-models from 2.2.25 to 2.2.26

Updates io.swagger.core.v3:swagger-models from 2.2.25 to 2.2.26

Updates io.swagger.parser.v3:swagger-parser from 2.1.23 to 2.1.24

Release notes

Sourced from io.swagger.parser.v3:swagger-parser's releases.

Swagger-parser 2.1.24 released!

• refs #2126 - update swagger parser v1 to 1.0.72 (#2140)
• remove leftover (#2133)
• fixes OAS 3.1 dereferencing (#2132)
• Add logic to process responses with resolvFully parsing option (#2131)

Commits

• 4016cf0 prepare release 2.1.24
• 65e9f97 refs #2126 - update swagger parser v1 to 1.0.72
• bb8e066 remove leftover
• 47e9f66 fixes OAS 3.1 dereferencing
• 3f51a62 Merge pull request #2131 from swagger-api/enhancement/ResolverFully-Responses
• 0e945bd Add logic to process responses with resolvFully parsing option
• 6bdd4be bump snapshot 2.1.24-SNAPSHOT
• See full diff in compare view

Updates org.hibernate.orm:hibernate-core from 6.6.2.Final to 6.6.3.Final

Release notes

Sourced from org.hibernate.orm:hibernate-core's releases.

Hibernate ORM 6.6.3.Final released

Today, we published a new maintenance release of Hibernate ORM 6.6: 6.6.3.Final.

What's new

This release introduces a few minor improvements as well as bug fixes.

You can find the full list of 6.6.3.Final changes here.

Conclusion

For additional details, see:

• the release page
• the Migration Guide
• the Introduction Guide
• the User Guide

See also the following resources related to supported APIs:

• the compatibility policy
• the incubating API report (@Incubating)
• the deprecated API report (@Deprecated + @Remove)
• the internal API report (internal packages, @Internal)

Visit the website for details on getting in touch with us.

Changelog

Sourced from org.hibernate.orm:hibernate-core's changelog.

Changes in 6.6.3.Final (November 21, 2024)

https://hibernate.atlassian.net/projects/HHH/versions/32365

** Bug * [HHH-18862] - Group by error due to subselect using foreign key reference instead of primary key in HQL query * [HHH-18851] - ArrayContainsArgumentTypeResolver wrongly infers array type for needle argument * [HHH-18842] - Regression: CollectionType.replace() breaks if target is PersistentCollection, but not instance of Collection (e.g. PersistentMap) * [HHH-18832] - Bytecode enhancement skipped for entities with "compute-only" @​Transient properties * [HHH-18816] - Error when rendering the fk-side of an association in an exists subquery * [HHH-18703] - JoinedSubclassEntityPersister#getTableNameForColumn KO * [HHH-18647] - SemanticException when using createCriteriaInsertValues to insert into foreign key column

** Improvement * [HHH-18841] - Make _identifierMapper property added for a IdClass synthetic * [HHH-18833] - Configuration to fail bytecode enhancement instead of skipping it on unsupported models

** Task * [HHH-18846] - Enable release automation for ORM 6.6

Commits

• 74f0839 Pre-steps for release : 6.6.3.Final
• 3dfb973 HHH-18842 CollectionType.replace() breaks if target is PersistentCollection, ...
• e094b3c HHH-18842 Add test for issue
• 2036ef1 Add a warning for future upgrades of bytebuddy
• ff64185 Don't use net.bytebuddy.experimental=true for Java 23 testing
• b91d9ec HHH-18846 Enable release automation for ORM 6.6
• b5178d0 HHH-18851 Fix parameter type inference issue when IN predicate is uses array_...
• a26e505 HHH-18841 Create _identifierMapper as a synthetic attribute
• 1ffde48 HHH-18832 Don't skip bytecode enhancement just because an entity has a `@Tran...
• abfe6b9 HHH-18833 Introduce EnhancementContext#getUnsupportedEnhancementStrategy
• Additional commits viewable in compare view

Updates com.zaxxer:HikariCP from 6.2.0 to 6.2.1

Changelog

Sourced from com.zaxxer:HikariCP's changelog.

HikariCP Changes

Changes in 6.2.2

• increase keepaliveTime variance from 10% to 20%

Changes in 6.2.1

• change default keepaliveTime to 2 minutes

• fix commons-compress dependency, make test scope

Changes in 6.2.0

• merged #2238 handle SQLTimeoutException without eviction. Users looking to preserve previous behavior should provide an implementation of com.zaxxer.hikari.SQLExceptionOverride to the pool configuration.

• added new enum value, Override.MUST_EVICT, available to implementations of com.zaxxer.hikari.SQLExceptionOverride

• enhanced debug logging in circumstances where the pool falls to zero size and new coonections to the database continue to fail.

• update test dependencies that were flagged as having vulnerabilities

Changes in 6.1.0

• fixed #1960 allow SQLExceptionOverride to adjudicate all exceptions for eviction

• merged #1962 dropwizard 5 metrics are now supported via the setMetricRegistry() method in HikariConfig and in HikariDataSource

• merged #2244 improve JavassistProxyFactory

• merged #2243 fix inconsistency between isWrapperFor and unwrap

• merged #1827 support loading properties file in unnamed resources module

• merged #1842 don't clear isCommitStateDirty flag in setReadOnly

• change default maxLifetime variance from 2.5% to 25% to further avoid mass connection die-off dips

Changes in 6.0.0

• fixed #2152 duplicate connection in try with resources clause caused close() being called twice on each connection

• merged #2226 consistent handling of errorCode and sqlState in timeout exception

• merged #2199 eliminate network call if state get is called after set

• merged #2189 add support to get and set db credentials in an atomic operation

... (truncated)

Commits

• 1d517a9 [maven-release-plugin] prepare release HikariCP-6.2.1
• be6594a assign default keepaliveTime of 2 minutes
• 1836e3f add test scope to commons-compress dependency
• c166946 Update README.md
• 7de262f [maven-release-plugin] prepare for next development iteration
• See full diff in compare view

Updates org.jboss.modules:jboss-modules from 2.1.5.Final to 2.1.6.Final

Updates gg.jte:jte from 3.1.14 to 3.1.15

Release notes

Sourced from gg.jte:jte's releases.

3.1.15

• #401 spring-boot-starter: temporarily revert #398 (Add template change watcher for livereload), since the devtools dependency causes issues with production builds. This will get re-introduced, when we find a proper solution for it

Commits

• 0b4d997 Bump version to 3.1.15
• 1ea5060 Revert "Add template change watcher for livereload (#398)"
• 1513abf Bump version to 3.1.15-SNAPSHOT for further development
• See full diff in compare view

Updates software.amazon.awssdk:bom from 2.29.15 to 2.29.20

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions