Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump com.google.zxing:javase from 3.5.0 to 3.5.2 in /dhis-2 #15379

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 12, 2023

Bumps com.google.zxing:javase from 3.5.0 to 3.5.2.

Release notes

Sourced from com.google.zxing:javase's releases.

ZXing 3.5.2

ZXing 3.5.1

  • Various minor bug fixes, including more from oss-fuzz
  • Avoid very long detection of QR codes in two types of pathological cases
  • Don't fail QR code decoding if GB2312 not supported by JDK

See https://github.com/zxing/zxing/milestone/14?closed=1

Commits
  • e86cde8 [maven-release-plugin] prepare release zxing-3.5.2
  • 02e6be5 Also manually update version for appspot
  • 41ab68f [maven-release-plugin] rollback the release of zxing-3.5.2
  • 8efbbcd [maven-release-plugin] prepare for next development iteration
  • 0e8eb0d [maven-release-plugin] prepare release zxing-3.5.2
  • 8e51613 Manually update android-* to 3.5.2 for release
  • a35ae17 [maven-release-plugin] rollback the release of zxing-3.5.2
  • 72628af [maven-release-plugin] prepare for next development iteration
  • f63d602 [maven-release-plugin] prepare release zxing-3.5.2
  • 48b5e59 Remove old Elastic config
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.google.zxing:javase](https://github.com/zxing/zxing) from 3.5.0 to 3.5.2.
- [Release notes](https://github.com/zxing/zxing/releases)
- [Changelog](https://github.com/zxing/zxing/blob/master/CHANGES)
- [Commits](zxing/zxing@zxing-3.5.0...zxing-3.5.2)

---
updated-dependencies:
- dependency-name: com.google.zxing:javase
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 12, 2023
@github-actions github-actions bot enabled auto-merge (squash) October 12, 2023 00:10
@sonarqubecloud
Copy link

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication

warning The version of Java (11.0.20.1) you have used to run this analysis is deprecated and we will stop accepting it soon. Please update to at least Java 17.
Read more here

@codecov
Copy link

codecov bot commented Oct 12, 2023

Codecov Report

Merging #15379 (80022f9) into 2.39 (886690f) will increase coverage by 6.18%.
Report is 80 commits behind head on 2.39.
The diff coverage is 68.15%.

@@             Coverage Diff              @@
##               2.39   #15379      +/-   ##
============================================
+ Coverage     58.58%   64.77%   +6.18%     
- Complexity    25817    28648    +2831     
============================================
  Files          3207     3212       +5     
  Lines        121397   121743     +346     
  Branches      14158    14202      +44     
============================================
+ Hits          71118    78854    +7736     
+ Misses        44340    36400    -7940     
- Partials       5939     6489     +550     
Flag Coverage Δ
integration 48.55% <29.61%> (-0.04%) ⬇️
integration-h2 34.30% <26.76%> (?)
unit 29.55% <41.26%> (+0.16%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files Coverage Δ
...main/java/org/hisp/dhis/appmanager/AppManager.java 100.00% <ø> (ø)
...src/main/java/org/hisp/dhis/category/Category.java 65.21% <100.00%> (ø)
...ava/org/hisp/dhis/common/BaseAnalyticalObject.java 70.95% <100.00%> (+5.81%) ⬆️
...a/org/hisp/dhis/common/BaseIdentifiableObject.java 80.20% <100.00%> (+1.37%) ⬆️
...s-api/src/main/java/org/hisp/dhis/common/Grid.java 0.00% <ø> (ø)
.../src/main/java/org/hisp/dhis/common/QueryItem.java 68.66% <100.00%> (ø)
...isp/dhis/dataapproval/DataApprovalPermissions.java 91.66% <ø> (+22.43%) ⬆️
...rc/main/java/org/hisp/dhis/feedback/ErrorCode.java 100.00% <100.00%> (ø)
...src/main/java/org/hisp/dhis/period/PeriodType.java 85.45% <100.00%> (+1.91%) ⬆️
...rg/hisp/dhis/resourcetable/ResourceTableStore.java 100.00% <ø> (+100.00%) ⬆️
... and 90 more

... and 555 files with indirect coverage changes


Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 4c56ecf...80022f9. Read the comment docs.

@enricocolasante enricocolasante added run-api-tests This label will trigger an api-test job for the PR. and removed run-api-tests This label will trigger an api-test job for the PR. labels Oct 12, 2023
@github-actions github-actions bot merged commit fc9fe29 into 2.39 Oct 12, 2023
13 checks passed
@github-actions github-actions bot deleted the dependabot-maven-dhis-2-2.39-com.google.zxing-javase-3.5.2 branch October 12, 2023 07:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant