[PATCH] Update dependencies in ivy.xml and tools/ivy.xml

[taylor.smock]

ivy.xml​

commons-compress

• Update ​commons-compress to v1.21 from v1.20

• A new class TarFile provides random access to TAR archives.
• Commons Compress now ships with a copy of the Pack200 code of the retired Apache Harmony project. The pack200 support in Commons Compress no longer uses the implementation of the Java class library - and thus also works for Java 14 and later.
• Added new methods supporting java.nio.Path as an alternative to java.io.File to many classes.

OpeningHoursParser

• Update ​OpeningHoursParser from v0.24.0 to v0.26.0

• v0.26.0
  • This release adds a flag to indicate more lenient handling of time ranges with earlier end than start times in strict mode. It does not change the behaviour in non-strict mode. Note: the one parameter variant of OpeningHoursParser.rules maintains the same behaviour as prior releases, you will need to use the two parameter call if you want to set the flag.
• v0.25.0
  • adds missing setOpenEnded method for year ranges
  • throws a parse error on invalid data ranges combining open ended with end date

spotbugs-annotations

• Update ​spotbugs-annotations from v4.3.0 to v4.5.0

wiremock

• Update WireMock from 2.27.2 to 2.31.0. This required a rename, as wiremock is Java 7 compatible, but wiremock-jre8 is not. wiremock-jre8 at v2.31.0 also has support for JUnit 5.
  • ​WireMock 2.28.0
    • Plaintext HTTP/2
    • Drops support for JUnit <= 4.7
    • Drops support for JRE 7-, use wiremock-jre8 instead of wiremock
  • ​WireMock 2.29.0
    • New template helpers
    • Date/time matching
    • Logical AND/OR matching
  • ​WireMock 2.30.0
    • Webhooks extension now in Wiremock core
    • Improved first-run time
  • ​WireMock 2.31.0
    • JUnit 5 support
    • Better support for multi-domain mocking

classgraph

• Update ​classgraph from 4.8.110 to 4.8.135
  • Added Resource#readCloseable which returns a CloseableByteBuffer
  • Better support for running with a SecurityManager
  • Find resources by path glob (ScanResult#getResourcesMatchingWildcard)
  • Allow circumvention of encapsulation in JDK 16+ via jvm-driver (​4.8.124)
  • Java 16+ comptability. This adds ​narcissus as a dependency. Either we have to load it explicitly or we can set ClassGraph.CIRCUMVENT_ENCAPSULTION = true at start.
  • Ability to find class references (i.e., find subclasses of a class)

JUnit

• Update junit-platform from 1.7.2 to 1.8.1 and junit-jupiter to 5.8.1 from 5.7.2.
  • @Suite support
  • JRE now has Java 18 (enum)
  • JFR support in Java 8 Update 262+
  • @ParameterizedTest can now auto close arguments (i.e., AutoClosable, note: this breaks anything that reuses that parameter...)
  • assertThrowsExactly if we don't want any exception subclasses to be thrown
  • @MethodSource/@ArgumentSource can now have optional names

tools/ivy.xml​

spotbugs

• Update ​spotbugs and spotbugs-ant from 4.2.3 to 4.5.0 (see also spotbugs-annotations above)

• DCN_NULLPOINTER_EXCEPTION now follows SEI Cert rule ERR08-J
• REFL_REFLECTION_INCREASES_ACCESSIBILITY_OF_CLASS was added for SEI Cert rule SEC05-J: Don't use reflection to increase accessibility of classes, methods or fields. Note: This is ignored for ReflectionUtils in pmd rules, but is not ignored with ant spotbugs.
• MC_OVERRIDABLE_METHOD_CALL_IN_CONSTRUCTOR/MC_OVERRIDABLE_METHOD_CALL_IN_CLONE for SEI cert rules MET05-J and MET06-J: avoid overridable methods in constructors and clone.
• EOS_BAD_END_OF_STREAM_CHECK from SEI CERT rule FIO08-J: avoid converting Stream#read to byte or int, and then checking against -1.

NOTE: I'll try highlighting changes in the dependencies here

[skyper]

Replying to taylor.smock:

• Update ​OpeningHoursParser from v0.24.0 to v0.26.0

v0.26.0

This release adds a flag to indicate more lenient handling of time ranges with earlier end than start times in strict mode. It does not change the behaviour in non-strict mode.

Note: the one parameter variant of OpeningHoursParser.rules maintains the same behaviour as prior releases, you will need to use the two parameter call if you want to set the flag.

The parameter description needs to be updated in the wiki, I guess.