fix(deps): update all dependencies j:cdx-227

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
commons-codec:commons-codec (source)	1.9 -> 1.15
org.mockito:mockito-core	4.7.0 -> 4.11.0
joda-time:joda-time (source)	2.10.10 -> 2.12.5
io.github.cdimascio:dotenv-java	2.2.0 -> 2.3.2
com.google.code.gson:gson	2.8.9 -> 2.10.1
org.apache.maven.plugins:maven-source-plugin	3.0.0 -> 3.3.0

---

Release Notes

apache/commons-codec

v1.10

Compare Source

mockito/mockito

v4.11.0

Compare Source

^{Changelog generated by Shipkit Changelog Gradle Plugin}

4.11.0

• 2022-12-28 - 1 commit(s) by Andy Coates
• Improve vararg handling: approach 2 (#​2807)
• Mocking varargs method with any(String[].class) doesn't work as expected (#​2796)
• (Argument)Matchers regression from 1.10.19 to 2.18.3 for varargs (#​1498)
• Cannot verify varargs parameter as an array (#​1222)
• ArgumentCaptor can't capture varargs-arrays (#​584)
• Verification of an empty varargs call fails when isNotNull() is used (#​567)

v4.10.0

Compare Source

^{Changelog generated by Shipkit Changelog Gradle Plugin}

4.10.0

• 2022-12-14 - 13 commit(s) by Andrei Solntsev, Andriy Redko, Andy Coates, Christopher Lambert, Marcono1234, Vladimir Glinskikh, dependabot[bot]
• Add new artifact mockito-subclass (to use mock-maker-subclass MockMaker) (#​2821)
• Bump gradle from 7.5.1 to 7.6 (#​2817)
• Fix incorrect Javadoc inline tag for MockitoJUnitRunner (#​2816)
• Bump shipkit-auto-version from 1.2.1 to 1.2.2 (#​2811)
• Bump com.github.ben-manes.versions from 0.42.0 to 0.44.0 (#​2810)
• Bump kotlinVersion from 1.7.21 to 1.7.22 (#​2809)
• Bump junit from 1.1.3 to 1.1.4 (#​2806)
• Simplify MatcherApplicationStrategy (#​2803)
• Bump kotlinVersion from 1.7.10 to 1.7.21 (#​2801)
• Bump espresso-core from 3.4.0 to 3.5.0 (#​2800)
• Bump versions.bytebuddy from 1.12.16 to 1.12.19 (#​2799)
• Upgrade errorprone from 2.14.0 to 2.16 (#​2794)
• automatically detect class to mock (#​2779)

v4.9.0

Compare Source

^{Changelog generated by Shipkit Changelog Gradle Plugin}

4.9.0

• 2022-11-14 - 6 commit(s) by Andrei Solntsev, Rafael Winterhalter, Rick Ossendrijver, dependabot[bot]
• Upgrade objenesis 3.2 -> 3.3 (#​2784)
• Upgrade objenesis 3.2 -> 3.3 (#​2783)
• Avoids clearing stale weak entries from critical code segments. (#​2780)
• bump gradle from 7.3.1 to 7.5.1 (#​2776)
• Bump gradle/wrapper-validation-action from 1.0.4 to 1.0.5 (#​2775)
• Bump gradle-errorprone-plugin from 2.0.2 to 3.0.1 (#​2770)
• Bump junit-platform-launcher from 1.9.0 to 1.9.1 (#​2768)

v4.8.1

Compare Source

^{Changelog generated by Shipkit Changelog Gradle Plugin}

4.8.1

• 2022-10-17 - 6 commit(s) by andrepaschoal, dependabot[bot]
• Possible fix #​2765: Add task to download package-list file from java as element-list (#​2766)
• JavaDoc warning is blocking all pull requests (#​2765)
• Bump versions.junitJupiter from 5.9.0 to 5.9.1 (#​2758)
• Bump groovy from 3.0.12 to 3.0.13 (#​2756)
• Bump com.diffplug.spotless from 6.10.0 to 6.11.0 (#​2753)
• Bump org.eclipse.osgi from 3.18.0 to 3.18.100 (#​2751)
• Bump versions.bytebuddy from 1.12.14 to 1.12.16 (#​2747)

v4.8.0

Compare Source

^{Changelog generated by Shipkit Changelog Gradle Plugin}

4.8.0

• 2022-09-07 - 10 commit(s) by Alex, James Baker, Johannes Spangenberg, Kurt Alfred Kluever, Rafael Winterhalter, Thibault Helsmoortel, dependabot[bot]
• GitHub Workflows security hardening (#​2744)
• Assign GlobalConfiguration initializer to unused variable (#​2742)
• Bump com.diffplug.spotless from 6.9.1 to 6.10.0 (#​2738)
• Drop varargs collector before invoking a user method. (#​2736)
• Bump versions.bytebuddy from 1.12.13 to 1.12.14 (#​2734)
• Remove useless thrown exception from constructor (#​2732)
• TypeSafeMatching no longer iterates over class methods inefficiently (#​2729)
• Fixes #​2720: Use StackWalker on Java 9+ to create Locations (#​2723)
• LocationImpl adds performance overheads due to instantiating a stack trace (#​2720)
• Fixes #​2626 : Introduce MockSettings.mockMaker (#​2701)
• Introduce option to disable inline-mock-maker for a specific instance (#​2626)

JodaOrg/joda-time

v2.12.5

Compare Source

See the change notes for more information.

v2.12.4

Compare Source

See the change notes for more information.

v2.12.3

Compare Source

See the change notes for more information.

v2.12.2

Compare Source

See the change notes for more information.

v2.12.1

Compare Source

See the change notes for more information.

v2.12.0

Compare Source

See the change notes for more information.

v2.11.2

Compare Source

See the change notes for more information.

v2.11.1

Compare Source

See the change notes for more information.

v2.11.0

Compare Source

See the change notes for more information.

v2.10.14

Compare Source

See the change notes for more information.

v2.10.13

Compare Source

See the change notes for more information.

v2.10.12

Compare Source

See the change notes for more information.

v2.10.11

Compare Source

See the change notes for more information.

cdimascio/dotenv-java

v2.3.2

Compare Source

• Implements support for quoted values (#​46) (bbfbcfa), closes #​46
• update dependency (c016121)
• Update README.md (006fc25)
• use v2.3.0 in example (1261b9e)
• v2.3.2 (fbc6186)
• v2.3.2 (d318ce4)
• v2.3.2 (6cb8616)

v2.3.1

Compare Source

• Support trailing comments (#​38) (45f25e2), closes #​38 /github.com/bkeepers/dotenv/blob/master/lib/dotenv/parser.rb#L14-L30
• Update README.md (74bbe2c)
• Update README.md (7166200)
• v2.3.1 (abe4108)
• docs: add c00ler as a contributor for code (#​39) (e52b498), closes #​39
• docs: add dizney as a contributor for code, and doc (#​41) (6d1c1cf), closes #​41
• docs: add yassenb as a contributor for code (#​40) (4430c0f), closes #​40

v2.3.0

• add change log (1817cd8)
• Ensure java 11 using enforcer plugin (#​35) (c2c69fc), closes #​35
• Fix classpath relative-to-absolute conversion in DotenvReader (#​27) (6dc4c52), closes #​27
• Fix license in the header (#​34) (d253407), closes #​34
• Fixed dangling kotlin-dotenv link at the README.md (#​23) (d5d886f), closes #​23
• Link Maven Central badge to the artifact page (#​19) (80c5cd6), closes #​19
• Precompile and reuse regular expressions (#​33) (82cf585), closes #​33
• Update CONTRIBUTING.md (3b44b8a)
• Update CONTRIBUTING.md (cf7605a)
• Update CONTRIBUTING.md (61488e0)
• Update CONTRIBUTING.md (ed5e545)
• update dep (8793318)
• update doc (5c607d7)
• Update Dotenv.java (bd79cdd)
• update gitignore (02bcb73)
• update pom (74945a5)
• update poms (2f57af8)
• update README (4a04796)
• update README (5ffffe3)
• Update README (#​30) (be31abb), closes #​30
• Update README.md (7c0e6f0)
• Update README.md (428bc3c)
• Update README.md (be128e9)
• Update README.md (3dab9c0)
• Update README.md (bdb3a55)
• Update README.md (51b5f2e)
• Update README.md (fc4e98a)
• Update README.md (393755c)
• Update README.md (2c1eef7)
• Update README.md (505d39e)
• Update README.md (902c7b4)
• v2.2.2 (4352c6a)
• v2.2.2 (8103047)
• v2.2.4 (5d60f3c)
• v2.3.0 (7398ee6)
• v2.3.0 change log (b96165c)
• v2.3.0 README update (fb48486)
• v3.0.1 (dbf540c)
• feat: add module info (#​37) (f69a9b3), closes #​37
• docs: add alexbraga as a contributor for doc (#​31) (a279af3), closes #​31
• docs: add Mooninaut as a contributor for code, test (#​28) (dd2999c), closes #​28
• docs: fix android code example (#​36) (7fc7794), closes #​36
• fix: remove unnecessary public modifier (ec42ff5)

v2.2.2

Compare Source

google/gson

v2.10

• Support for serializing and deserializing Java records, on Java ≥ 16. (https://github.com/google/gson/pull/2201)
• Add JsonArray.asList and JsonObject.asMap view methods (https://github.com/google/gson/pull/2225)
• Fix TypeAdapterRuntimeTypeWrapper not detecting reflective TreeTypeAdapter and FutureTypeAdapter (https://github.com/google/gson/pull/1787)
• Improve JsonReader.skipValue() (https://github.com/google/gson/pull/2062)
• Perform numeric conversion for primitive numeric type adapters (https://github.com/google/gson/pull/2158)
• Add Gson.fromJson(..., TypeToken) overloads (https://github.com/google/gson/pull/1700)
• Fix changes to GsonBuilder affecting existing Gson instances (https://github.com/google/gson/pull/1815)
• Make JsonElement conversion methods more consistent and fix javadoc (https://github.com/google/gson/pull/2178)
• Throw UnsupportedOperationException when JsonWriter.jsonValue is not supported (https://github.com/google/gson/pull/1651)
• Disallow JsonObject Entry.setValue(null) (https://github.com/google/gson/pull/2167)
• Fix TypeAdapter.toJson throwing AssertionError for custom IOException (https://github.com/google/gson/pull/2172)
• Convert null to JsonNull for JsonArray.set (https://github.com/google/gson/pull/2170)
• Fixed nullSafe usage. (https://github.com/google/gson/pull/1555)
• Validate TypeToken.getParameterized arguments (https://github.com/google/gson/pull/2166)
• Fix #​1702: Gson.toJson creates CharSequence which does not implement toString (https://github.com/google/gson/pull/1703)
• Prefer existing adapter for concurrent Gson.getAdapter calls (https://github.com/google/gson/pull/2153)
• Improve ArrayTypeAdapter for Object[] (https://github.com/google/gson/pull/1716)
• Improve AppendableWriter performance (https://github.com/google/gson/pull/1706)

v2.9.1

• Make Object and JsonElement deserialization iterative rather than
  recursihttps://github.com/google/gson/pull/19121912)
• Added parsing support for enum that has overridden toString() method (https://github.com/google/gson/pull/1950)
• Removed support for building Gson with Gradle (https://github.com/google/gson/pull/2081)
• Removed obsolete codegen hierarchy (https://github.com/google/gson/pull/2099)
• Add support for reflection access filter (https://github.com/google/gson/pull/1905)
• Improve TypeToken creation validation (https://github.com/google/gson/pull/2072)
• Add explicit support for float in JsonWriter (https://github.com/google/gson/pull/2130, https://github.com/google/gson/pull/2132)
• Fail when parsing invalid local date (https://github.com/google/gson/pull/2134)

Also many small improvements to javadoc.

v2.9.0

The minimum supported Java version changes from 6 to 7.

• Change target Java version to 7 (https://github.com/google/gson/pull/2043)
• Put module-info.class into Multi-Release JAR folder (https://github.com/google/gson/pull/2013)
• Improve error message when abstract class cannot be constructed (https://github.com/google/gson/pull/1814)
• Support EnumMap deserialization (https://github.com/google/gson/pull/2071)
• Add LazilyParsedNumber default adapter (https://github.com/google/gson/pull/2060)
• Fix JsonReader.hasNext() returning true at end of document (https://github.com/google/gson/pull/2061)
• Remove Gradle build support. Build script was outdated and not actively
  maintained anymohttps://github.com/google/gson/pull/20632063)
• Add GsonBuilder.disableJdkUnsafe() (https://github.com/google/gson/pull/1904)
• Add UPPER_CASE_WITH_UNDERSCORES in FieldNamingPolicy (https://github.com/google/gson/pull/2024)
• Fix failing to serialize Collection or Map with inaccessible constructor (https://github.com/google/gson/pull/1902)
• Improve TreeTypeAdapter thread-safety (https://github.com/google/gson/pull/1976)
• Fix Gson.newJsonWriter ignoring lenient and HTML-safe setting (https://github.com/google/gson/pull/1989)
• Delete unused LinkedHashTreeMap (https://github.com/google/gson/pull/1992)
• Make default adapters stricter; improve exception messages (https://github.com/google/gson/pull/2000)
• Fix FieldNamingPolicy.upperCaseFirstLetter uppercasing non-letter (https://github.com/google/gson/pull/2004)

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues found.

Scanned Manifest Files

pom.xml

• com.google.code.gson:[email protected]
• commons-codec:[email protected]
• io.github.cdimascio:[email protected]
• joda-time:[email protected]
• org.apache.maven.plugins:[email protected]
• org.mockito:[email protected]
• com.google.code.gson:[email protected]
• commons-codec:[email protected]
• io.github.cdimascio:[email protected]
• joda-time:[email protected]
• org.apache.maven.plugins:[email protected]
• org.mockito:[email protected]