Automatically discover and tag PII data across BigQuery tables and apply column-level access controls based on confidentiality level.

Overview

BigQuery PII Classifier

Overview

BigQuery PII Classifier is an OSS solution to automate the process of discovering and tagging PII data across BigQuery tables and applying column-level access controls to restrict specific PII data types to certain users/groups in certain domains (e.g. business units) based on the confidentiality level of that PII.

alt text

Main Steps:

  1. Data Classification Taxonomy and User Access Configuration:
    Declare a taxonomy/hierarchy for PII types, and their confidentiality levels which can be modified and extended by customers to allow for custom PII types.
  2. BigQuery Tables Inspection:
    Scan & automatically discover PII data based on the defined data classification taxonomy
  3. Columns Tagging:
    Applying access-control tags to columns in accordance with data classification
  4. Enforcing Column-level Access Control:
    Limit PII data access to specific groups based on domains and data classification (e.g. Marketing High Confidentiality PII Readers, Finance Low Confidentiality PII Readers)

Solution Modes

The solution comes with two modes, standard-mode and auto-dlp-mode.

Standard Mode

In standard-mode, the solution scope is:

  • Automation of DLP inspection for tables (given an array of configurations)
  • Applying policy tags to columns based on the PII types detected by the DLP inspection jobs
  • Restricting access to the tagged columns based on the confidentiality level
  • Possibility to trigger a "re-tagging" run that uses the last inspection results to overwrite the column policy tags.

For more details and on how to use the solution in standard mode follow the Standard-mode guide.

Auto-DLP Mode

In auto-dlp mode, the solution scope is:

  • Not managing tables inspection, instead it will build on top of Auto-DLP data profiles (Auto-DLP is managed outside of the solution).
  • Apply policy tags to columns based on the PII types detected by Auto-DLP data profiles.
  • Restricting access to the tagged columns based on the confidentiality level

For more details and on how to use the solution in auto-dlp mode follow the Auto-dlp mode guide.

Which mode to use?

Using Standard-mode offers the following benefits:

  • Granular BigQuery scan scope. Standard-mode could be configured to include/exclude projects, datasets and tables. Where in Auto-DLP, configurations are on Organization, folder and project levels.
  • Control over DLP sampling size. Standard-mode let you configure the DLP scan sample size as a function of the table size. For example, full scans of smaller tables and sampling a lower percentage/number of records for bigger tables. This feature let you estimate and control DLP inspection cost to a higher degree.
  • Control over scan schedules. Standard-mode enables you to call an entry-point service (i.e. Inspection Dispatcher) with different scan scopes on different schedules. For example, historical dump tables could be scanned once every x month vs daily-refreshed tables could be scanned every x days.
  • On demand scans. Standard-mode enables you to invoke an entry-point service on-demand. For example, after a data pipeline finishes you could trigger a call to scan only the table(s) affected by that pipeline.

Using Auto-dlp mode offers the following benefits:

  • Relying on scalable, native GCP product for inspection/profiling.
  • Relying on Auto-DLP heuristics to determine when to trigger a table scan.
  • visualizing data profiles (i.e. tables, columns, PII types, metrics, etc) from the GCP console (UI).
  • Accessing GCP Cloud Support for the product (Auto-DLP only, not this custom solution).

Data Access Model Example

Check out this document for an example on a data access model across domains and IAM group structure.

Solution Limits

Check out this document for solution limits.

GCP Quotas

Check out this document for related GCP Quotas.

Comments
  • Bump mockito-core from 4.5.1 to 4.10.0 in /services

    Bump mockito-core from 4.5.1 to 4.10.0 in /services

    Bumps mockito-core from 4.5.1 to 4.10.0.

    Release notes

    Sourced from mockito-core's releases.

    v4.10.0

    Changelog generated by Shipkit Changelog Gradle Plugin

    4.10.0

    v4.9.0

    Changelog generated by Shipkit Changelog Gradle Plugin

    4.9.0

    v4.8.1

    Changelog generated by Shipkit Changelog Gradle Plugin

    4.8.1

    v4.8.0

    Changelog generated by Shipkit Changelog Gradle Plugin

    4.8.0

    • 2022-09-07 - 10 commit(s) by Alex, James Baker, Johannes Spangenberg, Kurt Alfred Kluever, Rafael Winterhalter, Thibault Helsmoortel, dependabot[bot]

    ... (truncated)

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 1
  • Bump spring-boot-dependencies from 2.6.7 to 3.0.0 in /services

    Bump spring-boot-dependencies from 2.6.7 to 3.0.0 in /services

    Bumps spring-boot-dependencies from 2.6.7 to 3.0.0.

    Release notes

    Sourced from spring-boot-dependencies's releases.

    v3.0.0

    :star: New Features

    • Provide a configuration property for the observation patterns of Spring Integration components #33099

    :lady_beetle: Bug Fixes

    • io.micrometer.tracing.Tracer on the classpath breaks AOT processing for tests #33298
    • Tracer library HTTP instrumentation is auto-configured unnecessarily #33287
    • Auto-configuration ignores user-provided ObservationConventions #33285
    • ScheduledBeanLazyInitializationExcludeFilter is auto-configured even when annotation-based scheduled has not been enabled #33284
    • SpringBootContextLoader prints banner twice when using a @ContextHierarchy #33263
    • Properties migrator causes an application to fail to start if it tries to map a property whose metadata data entry contains an invalid configuration property name #33250
    • Wavefront MeterRegistryCustomizer is not applying application tags from application.properties #33244
    • Actuator responses no longer format timestamps as ISO-8601 #33236
    • Configuration property is not bound in a native image when property has get, set, and is methods #33232
    • Configuration property binding does not deal with bridge methods #33212
    • Contribute missing resource hints for GraphQL schema files and GraphiQL HTML page #33208
    • Hints for ClientHttpRequestFactory should only be generated for matching methods #33203
    • Native profile should configure execution in pluginManagement #33184
    • Configuring management.server.port via a config tree results in a ConverterNotFoundException when the management context is refreshed #33169
    • JBoss logging does not route directly to SLF4J when using Logback #33155
    • Test with UseMainMethod.Always do not work with Kotlin main functions #33114
    • Maven process-aot does not specify source and target release when compiling generated sources #33112
    • Some Actuator beans are ineligible for post-processing #33110
    • AOT-generated source fails to compile when Actuator is enabled on a WebFlux project #33106
    • @ContextHierarchy should never be used with main method #33078
    • Maven process-aot fails when compiler plugin has been configured with --enable-preview #33012
    • Wavefront application tags differ from those used in a Spring Boot 2.x application #32844
    • Maven goal spring-boot:build-image runs package phase twice #26455

    :notebook_with_decorative_cover: Documentation

    • Document observation for R2DBC #33335
    • Align Tomcat multiple connectors example with recommendation to configure SSL declaratively #33333
    • Actuator document is misleading about k8s startup probe #33327
    • Update documented for @Timed to reflect narrower support #33282
    • Update reference documentation to replace mentions of tags providers and contributors with their Observation-based equivalents #33281
    • Link to Micrometer's @Timed documentation #33266
    • Clarify use of the spring.cache.type property with Hazelcast #33258
    • Example git.commit.time in the Actuator API documentation is thousands of years in the future #33256
    • Update Spring Security filter dispatcher types docs to reflect change in default value #33252
    • Documentation for nested configuration properties in a native image uses @NestedConfigurationProperty too widely #33239
    • Document that the jar task should not be disabled when building a native image #33238
    • Document nesting configuration properties using records or Kotlin data classes and how and when to use @NestedConfigurationProperty #33235
    • Links to Features describes sections that have moved elsewhere #33214
    • Fix broken links in docs #33209
    • Document the need for compilation with -parameters when targeting a native image #33182
    • Remove outdated native image documentation #33109
    • Mention @RegisterReflectionForBinding in the docs #32903

    ... (truncated)

    Commits
    • c9c359f Release v3.0.0
    • fb2cc73 Work around Thymeleaf's dependency on spring-security-bom:6.0.0-RC2
    • 355b428 Merge branch '2.7.x'
    • 7ea5881 Update LATEST_GA to false to prepare for 3.0.0's release
    • 1de09f4 Merge branch '2.6.x' into 2.7.x
    • e922650 Upgrade to Spring Framework 6.0.2
    • 4b8a28a Next development version (v2.7.7-SNAPSHOT)
    • 14ba9b1 Start building against Spring Framework 6.0.2 snapshots
    • d4a9100 Next development version (v2.6.15-SNAPSHOT)
    • 28cb225 Merge branch '2.7.x'
    • Additional commits viewable in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 1
  • Bump mockito-core from 4.5.1 to 4.9.0 in /services

    Bump mockito-core from 4.5.1 to 4.9.0 in /services

    Bumps mockito-core from 4.5.1 to 4.9.0.

    Release notes

    Sourced from mockito-core's releases.

    v4.9.0

    Changelog generated by Shipkit Changelog Gradle Plugin

    4.9.0

    v4.8.1

    Changelog generated by Shipkit Changelog Gradle Plugin

    4.8.1

    v4.8.0

    Changelog generated by Shipkit Changelog Gradle Plugin

    4.8.0

    v4.7.0

    Changelog generated by Shipkit Changelog Gradle Plugin

    4.7.0

    • 2022-08-13 - 33 commit(s) by 198812345678, Andy Coates, Chen Ni, Marius Lichtblau, Nikita Koselev. Developer Advocate, Open Source Ally, Rafael Winterhalter, dependabot[bot], dstango, fishautumn, heqiang
    • Bump com.diffplug.spotless from 6.9.0 to 6.9.1 [(#2725)](mockito/mockito#2725)
    • Bump versions.bytebuddy from 1.12.12 to 1.12.13 [(#2719)](mockito/mockito#2719)

    ... (truncated)

    Commits
    • 0052e2f Avoid clearing stale weak entries from critical code segments (#2780)
    • 47045cb Upgrade objenesis 3.2 -> 3.3 (#2784)
    • eb85518 Update gradle to 7.5.1 (#2776)
    • fcb4cf7 Bump gradle/wrapper-validation-action from 1.0.4 to 1.0.5 (#2775)
    • f512a76 Bump gradle-errorprone-plugin from 2.0.2 to 3.0.1 (#2770)
    • fe7dca2 Bump junit-platform-launcher from 1.9.0 to 1.9.1 (#2768)
    • 4d14d97 Bump versions.junitJupiter from 5.9.0 to 5.9.1 (#2758)
    • 3507ce3 Use downloaded package-list file from Oracle for JavaDoc generation (#2766)
    • 0a9aa26 Bump groovy from 3.0.12 to 3.0.13 (#2756)
    • ee3679b Bump com.diffplug.spotless from 6.10.0 to 6.11.0 (#2753)
    • Additional commits viewable in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 1
  • Bump mockito-core from 4.5.1 to 4.8.1 in /services

    Bump mockito-core from 4.5.1 to 4.8.1 in /services

    Bumps mockito-core from 4.5.1 to 4.8.1.

    Release notes

    Sourced from mockito-core's releases.

    v4.8.1

    Changelog generated by Shipkit Changelog Gradle Plugin

    4.8.1

    v4.8.0

    Changelog generated by Shipkit Changelog Gradle Plugin

    4.8.0

    v4.7.0

    Changelog generated by Shipkit Changelog Gradle Plugin

    4.7.0

    ... (truncated)

    Commits
    • 4d14d97 Bump versions.junitJupiter from 5.9.0 to 5.9.1 (#2758)
    • 3507ce3 Use downloaded package-list file from Oracle for JavaDoc generation (#2766)
    • 0a9aa26 Bump groovy from 3.0.12 to 3.0.13 (#2756)
    • ee3679b Bump com.diffplug.spotless from 6.10.0 to 6.11.0 (#2753)
    • 185ea11 Bump org.eclipse.osgi from 3.18.0 to 3.18.100 (#2751)
    • 488d4b1 Bump versions.bytebuddy from 1.12.14 to 1.12.16 (#2747)
    • 3e910ea Fixes #2626 : Introduce MockSettings.mockMaker (#2701)
    • 0753d48 Explicitly add permissions to GitHub actions (#2744)
    • 530558a Assign GlobalConfiguration initializer to unused variable (#2742)
    • 4b8042e Bump com.diffplug.spotless from 6.9.1 to 6.10.0 (#2738)
    • Additional commits viewable in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 1
  • Bump spring-boot-dependencies from 2.6.7 to 2.7.5 in /services

    Bump spring-boot-dependencies from 2.6.7 to 2.7.5 in /services

    Bumps spring-boot-dependencies from 2.6.7 to 2.7.5.

    Release notes

    Sourced from spring-boot-dependencies's releases.

    v2.7.5

    :lady_beetle: Bug Fixes

    • Multi-Document-Separators "#---" comment checks do not account for '!' prefixed comments #32777
    • Actuator configprops endpoint does not display DataSize properties correctly #32775
    • @Bean methods in KafkaAutoConfiguration provide less type information than they could #32773
    • PEM formatted elliptic-curve TLS keys are an unrecognized private key format #32681
    • Assertion calls on CapturedOutput with Kotlin are very slow #32575
    • Empty @DefaultValue cannot be used on collections, maps, arrays or optional values #32563
    • CouchbaseReactiveHealthIndicator uses blocking API to retrieve the cluster diagnostics #32513
    • BootBuildImage's archiveFile property is annotated as an @Input but should be annotated as an @InputFile #32499

    :notebook_with_decorative_cover: Documentation

    • Remove redundant @ExtendWith(SpringExtension.class) from MyJmxTests example #32515

    :hammer: Dependency Upgrades

    • Upgrade to Byte Buddy 1.12.18 #32697
    • Upgrade to Dependency Management Plugin 1.0.15.RELEASE #32786
    • Upgrade to Ehcache3 3.10.2 #32663
    • Upgrade to Embedded Mongo 3.4.11 #32664
    • Upgrade to Glassfish JAXB 2.3.7 #32787
    • Upgrade to Hazelcast 5.1.4 #32698
    • Upgrade to Hibernate 5.6.12.Final #32665
    • Upgrade to Infinispan 13.0.12.Final #32788
    • Upgrade to Jackson Bom 2.13.4.20221013 #32724
    • Upgrade to Jetty Reactive HTTPClient 1.1.13 #32699
    • Upgrade to Lettuce 6.1.10.RELEASE #32666
    • Upgrade to Micrometer 1.9.5 #32591
    • Upgrade to MySQL 8.0.31 and extend dependency management to new Maven identifiers #32781
    • Upgrade to Netty 4.1.84.Final #32700
    • Upgrade to Reactor 2020.0.24 #32592
    • Upgrade to Spring Data 2021.2.5 #32595
    • Upgrade to Spring Kafka 2.8.10 #32596
    • Upgrade to Spring Retry 1.3.4 #32594
    • Upgrade to Spring Security 5.7.4 #32597
    • Upgrade to Tomcat 9.0.68 #32667
    • Upgrade to Undertow 2.2.20.Final #32668

    :heart: Contributors

    We'd like to thank all the contributors who worked on this release!

    ... (truncated)

    Commits
    • a0e0cd7 Release v2.7.5
    • d3750c4 Merge branch '2.6.x' into 2.7.x
    • c416c17 Polish documentation title case
    • 6f787c4 Upgrade to Infinispan 13.0.12.Final
    • 3aa8358 Upgrade to Glassfish JAXB 2.3.7
    • ba02a64 Upgrade to Dependency Management Plugin 1.0.15.RELEASE
    • e4822f6 Merge branch '2.6.x' into 2.7.x
    • 65bdcdb Upgrade to Glassfish JAXB 2.3.7
    • 02760ff Upgrade to Dependency Management Plugin 1.0.15.RELEASE
    • a19e394 Merge branch '2.6.x' into 2.7.x
    • Additional commits viewable in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 1
  • Bump logback-classic from 1.2.11 to 1.4.4 in /services

    Bump logback-classic from 1.2.11 to 1.4.4 in /services

    Bumps logback-classic from 1.2.11 to 1.4.4.

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 1
  • Bump gson from 2.9.0 to 2.9.1 in /services

    Bump gson from 2.9.0 to 2.9.1 in /services

    Bumps gson from 2.9.0 to 2.9.1.

    Release notes

    Sourced from gson's releases.

    Gson 2.9.1

    • Make Object and JsonElement deserialization iterative rather than recursive (#1912)
    • Added parsing support for enum that has overridden toString() method (#1950)
    • Removed support for building Gson with Gradle (#2081)
    • Removed obsolete codegen hierarchy (#2099)
    • Add support for reflection access filter (#1905)
    • Improve TypeToken creation validation (#2072)
    • Add explicit support for float in JsonWriter (#2130, #2132)
    • Fail when parsing invalid local date (#2134)

    Also many small improvements to javadoc.

    Changelog

    Sourced from gson's changelog.

    Version 2.9.1

    • Make Object and JsonElement deserialization iterative rather than recursive (#1912)
    • Added parsing support for enum that has overridden toString() method (#1950)
    • Removed support for building Gson with Gradle (#2081)
    • Removed obsolete codegen hierarchy (#2099)
    • Add support for reflection access filter (#1905)
    • Improve TypeToken creation validation (#2072)
    • Add explicit support for float in JsonWriter (#2130, #2132)
    • Fail when parsing invalid local date (#2134)

    Also many small improvements to javadoc.

    Commits
    • bb9a1f2 [maven-release-plugin] prepare release gson-parent-2.9.1
    • 893a7e1 Fix malformed JsonElement.getAsBigDecimal() javadoc (#1772)
    • 6d2557d Remove unused package-private FieldAttributes methods (#2162)
    • 2deb209 Make RuntimeTypeAdapterFactory recognize subclasses only conditionally. (#2...
    • 924c496 Bump maven-resources-plugin from 3.2.0 to 3.3.0 (#2157)
    • 503c20b Rename ReflectiveTypeAdapterFactory field inclusion check method (#2121)
    • 0106247 Bump maven-deploy-plugin from 3.0.0-M2 to 3.0.0 (#2148)
    • eeba71c Upgrade to oss-parent 9 (#2149)
    • 2eb3758 Fix RuntimeTypeAdapterFactory (#2139)
    • cbc0af8 Improve lenient mode documentation (#2122)
    • Additional commits viewable in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 1
  • Bump jib-maven-plugin from 3.2.1 to 3.3.0 in /services

    Bump jib-maven-plugin from 3.2.1 to 3.3.0 in /services

    Bumps jib-maven-plugin from 3.2.1 to 3.3.0.

    Release notes

    Sourced from jib-maven-plugin's releases.

    jib-maven-plugin v3.3.0

    Major Changes

    • Included imagePushed field to image metadata json output file which provides information on whether an image was pushed by Jib. Note that the output file is build/jib-image.json by default or configurable with jib.outputPaths.imageJson. (#3641)
    • Added better error messaging when environment map in container.environment contains null values (#3672).
    • Added support for OCI image index manifests (#3715).
    • Added support for base image layer compressed with zstd (#3717)
    • Upgraded slf4j-simple and slf4j-api to 2.0.0 (#3734, #3735).
    • Upgraded nullaway to 0.9.9. (#3720)
    • Jib now only checks for file existence instead of running the executable passed into dockerClient.executable for the purpose of verifying if docker is installed correctly. Users are responsible for ensuring that the docker executable specified through this property is valid and has the correct permissions (#3744).
    • Jib now throws an exception when the base image doesn't support target platforms during multi-platform build (#3707).

    See CHANGELOG.md for more details.

    jib-gradle-plugin v3.3.0

    Major Changes

    • Included imagePushed field to image metadata json output file which provides information on whether an image was pushed by Jib. Note that the output file is build/jib-image.json by default or configurable with jib.outputPaths.imageJson. (#3641)
    • Added lazy evaluation for jib.extraDirectories parameters using Gradle Property and Provider. (#3737)
    • Added better error messaging when environment map in container.environment contains null values (#3672).
    • Added support for OCI image index manifests (#3715).
    • Added support for base image layer compressed with zstd (#3717).
    • Upgraded slf4j-api to 2.0.0 (#3735).
    • Upgraded nullaway to 0.9.9 (#3720)
    • Jib now only checks for file existence instead of running the executable passed into dockerClient.executable for the purpose of verifying if docker is installed correctly. Users are responsible for ensuring that the docker executable specified through this property is valid and has the correct permissions (#3744).
    • Jib now throws an exception when the base image doesn't support target platforms during multi-platform build (#3707).

    See CHANGELOG.md for more details.

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 1
  • Bump mockito-core from 4.5.1 to 4.8.0 in /services

    Bump mockito-core from 4.5.1 to 4.8.0 in /services

    Bumps mockito-core from 4.5.1 to 4.8.0.

    Release notes

    Sourced from mockito-core's releases.

    v4.8.0

    Changelog generated by Shipkit Changelog Gradle Plugin

    4.8.0

    v4.7.0

    Changelog generated by Shipkit Changelog Gradle Plugin

    4.7.0

    ... (truncated)

    Commits
    • 3e910ea Fixes #2626 : Introduce MockSettings.mockMaker (#2701)
    • 0753d48 Explicitly add permissions to GitHub actions (#2744)
    • 530558a Assign GlobalConfiguration initializer to unused variable (#2742)
    • 4b8042e Bump com.diffplug.spotless from 6.9.1 to 6.10.0 (#2738)
    • 9b93df7 Merge pull request #2736 from mockito/static-varargs-call
    • 160e3da Drop varargs collector before invoking a user method.
    • e123c2c Bump versions.bytebuddy from 1.12.13 to 1.12.14 (#2734)
    • 2ded10e Remove useless thrown exception from constructor (#2732)
    • 73a861f Fixes #2720: Use StackWalker on Java 9+ to create Locations (#2723)
    • 89698ba Optimize TypeSafeMatching iteration over class methods (#2729)
    • Additional commits viewable in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 1
  • Bump spring-boot-dependencies from 2.6.7 to 2.7.4 in /services

    Bump spring-boot-dependencies from 2.6.7 to 2.7.4 in /services

    Bumps spring-boot-dependencies from 2.6.7 to 2.7.4.

    Release notes

    Sourced from spring-boot-dependencies's releases.

    v2.7.4

    :star: New Features

    • Add NINETEEN to JavaVersion enum #32260

    :lady_beetle: Bug Fixes

    • DataSource logging in H2 console auto-configuration causes Hikari's threads to have the wrong thread context class loader #32406
    • Hazelcast auto-configuration recognizes hazelcast.xml and hazelcast.yaml files but not hazelcast.yml #32247
    • Detection of PeriodStyle.ISO8601 does not support lower-case input #32244
    • Detection of DurationStyle.ISO8601 does not support lower-case input #32231
    • YAML timestamps not handled properly with SnakeYaml 1.31 #32229
    • Hazelcast shutdown logs are not available out-of-the-box #32184
    • Netty 'spring.netty leak detection' default property value is always applied to resource leak detector #32145
    • Error "/var/run/docker.sock: connect: permission denied" occurs when building an image using podman on Fedora with SELinux enabled #32000

    :notebook_with_decorative_cover: Documentation

    • Document support for JDK 19 #32402
    • Clarify documentation of config sub-directory from which external application properties are read #32291
    • Clarify documentation on disabling web client request metrics #32198
    • Kotlin sample is missing for constructor binding #32177
    • Remove out-of-date link from auto-configuration documentation #32174
    • Improve @ConditionalOnClass javadoc regarding use on @Bean methods #32167
    • Document classpath* location for looking up GraphQL schemas across modules #31772

    :hammer: Dependency Upgrades

    • Upgrade to Byte Buddy 1.12.17 #32454
    • Upgrade to Couchbase Client 3.3.4 #32315
    • Upgrade to Dependency Management Plugin 1.0.14.RELEASE #32459
    • Upgrade to Dropwizard Metrics 4.2.12 #32316
    • Upgrade to Ehcache3 3.10.1 #32317
    • Upgrade to Elasticsearch 7.17.6 #32318
    • Upgrade to Embedded Mongo 3.4.9 #32319
    • Upgrade to Groovy 3.0.13 #32443
    • Upgrade to Hibernate 5.6.11.Final #32320
    • Upgrade to Hibernate Validator 6.2.5.Final #32321
    • Upgrade to Infinispan 13.0.11.Final #32322
    • Upgrade to Jackson Bom 2.13.4 #32323
    • Upgrade to Janino 3.1.8 #32324
    • Upgrade to Jetty 9.4.49.v20220914 #32444
    • Upgrade to Johnzon 1.2.19 #32325
    • Upgrade to Kafka 3.1.2 #32326
    • Upgrade to MariaDB 3.0.8 #32445
    • Upgrade to Micrometer 1.9.4 #32272
    • Upgrade to Netty 4.1.82.Final #32327
    • Upgrade to Postgresql 42.3.7 #32243
    • Upgrade to R2DBC Bom Borca-SR2 #32328
    • Upgrade to Reactor 2020.0.23 #32273

    ... (truncated)

    Commits
    • e1a8b1a Release v2.7.4
    • 88723b7 Merge branch '2.6.x' into 2.7.x
    • ca83024 Upgrade to Spring Batch 4.3.7
    • 82763de Upgrade to Spring Batch 4.3.7
    • 8f9323d Document "classpath:*" location for GraphQL Schemas
    • c5a4b1f Merge branch '2.6.x' into 2.7.x
    • 856bd84 Remove JDK 18 CI
    • 7566666 Merge branch '2.6.x' into 2.7.x
    • 5affcec Update Java 19 CI to use Bellsoft Liberica
    • 3620959 Upgrade to Dependency Management Plugin 1.0.14.RELEASE
    • Additional commits viewable in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 1
  • Bump google-cloud-dlp from 2.3.4 to 3.7.6 in /services

    Bump google-cloud-dlp from 2.3.4 to 3.7.6 in /services

    ⚠️ Dependabot is rebasing this PR ⚠️

    Rebasing might not happen immediately, so don't worry if this takes some time.

    Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


    Bumps google-cloud-dlp from 2.3.4 to 3.7.6.

    Release notes

    Sourced from google-cloud-dlp's releases.

    v3.7.6

    3.7.6 (2022-10-07)

    Dependencies

    • Update dependency com.google.cloud:google-cloud-pubsub to v1.120.20 (#1026) (ee817bd)

    v3.7.5

    3.7.5 (2022-10-03)

    Bug Fixes

    • deprecate extra field to avoid confusion (f5ee046)

    v3.7.4

    3.7.4 (2022-10-03)

    Dependencies

    • Update dependency com.google.cloud:google-cloud-shared-dependencies to v3.0.4 (#1021) (dc6c270)

    v3.7.3

    3.7.3 (2022-09-22)

    Dependencies

    • Update dependency com.google.cloud:google-cloud-pubsub to v1.120.18 (#995) (0b3796d)

    v3.7.2

    3.7.2 (2022-09-20)

    Dependencies

    • Update dependency com.google.cloud:google-cloud-pubsub to v1.120.17 (#991) (cda3399)

    v3.7.1

    3.7.1 (2022-09-20)

    Dependencies

    • Update dependency com.google.cloud:google-cloud-pubsub to v1.120.16 (#983) (692695d)

    v3.7.0

    3.7.0 (2022-09-15)

    ... (truncated)

    Changelog

    Sourced from google-cloud-dlp's changelog.

    3.7.6 (2022-10-07)

    Dependencies

    • Update dependency com.google.cloud:google-cloud-pubsub to v1.120.20 (#1026) (ee817bd)

    3.7.5 (2022-10-03)

    Bug Fixes

    • deprecate extra field to avoid confusion (f5ee046)

    3.7.4 (2022-10-03)

    Dependencies

    • Update dependency com.google.cloud:google-cloud-shared-dependencies to v3.0.4 (#1021) (dc6c270)

    3.7.3 (2022-09-22)

    Dependencies

    • Update dependency com.google.cloud:google-cloud-pubsub to v1.120.18 (#995) (0b3796d)

    3.7.2 (2022-09-20)

    Dependencies

    • Update dependency com.google.cloud:google-cloud-pubsub to v1.120.17 (#991) (cda3399)

    3.7.1 (2022-09-20)

    Dependencies

    • Update dependency com.google.cloud:google-cloud-pubsub to v1.120.16 (#983) (692695d)

    3.7.0 (2022-09-15)

    Features

    ... (truncated)

    Commits
    • 9f20f57 chore(main): release 3.7.6 (#1029)
    • ad87a65 chore(deps): update dependency com.google.cloud:libraries-bom to v26.1.3 (#1030)
    • 11cf762 chore(deps): update dependency com.google.cloud:google-cloud-dlp to v3.7.5 (#...
    • ee817bd deps: update dependency com.google.cloud:google-cloud-pubsub to v1.120.20 (#1...
    • 5aecdf1 chore(deps): update dependency com.google.cloud:google-cloud-dlp to v3.7.4 (#...
    • 7910963 chore(main): release 3.7.6-SNAPSHOT (#1027)
    • 27d838c chore(main): release 3.7.5 (#1025)
    • f5ee046 chore(bazel): update protobuf to v3.21.7 (#1020)
    • fb1f074 chore(main): release 3.7.5-SNAPSHOT (#1023)
    • 89da9ff chore(main): release 3.7.4 (#1022)
    • Additional commits viewable in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 1
  • Bump mockito-core from 4.5.1 to 4.11.0 in /services

    Bump mockito-core from 4.5.1 to 4.11.0 in /services

    Bumps mockito-core from 4.5.1 to 4.11.0.

    Release notes

    Sourced from mockito-core's releases.

    v4.11.0

    Changelog generated by Shipkit Changelog Gradle Plugin

    4.11.0

    v4.10.0

    Changelog generated by Shipkit Changelog Gradle Plugin

    4.10.0

    v4.9.0

    Changelog generated by Shipkit Changelog Gradle Plugin

    4.9.0

    v4.8.1

    Changelog generated by Shipkit Changelog Gradle Plugin

    4.8.1

    ... (truncated)

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 0
  • Bump spring-boot-dependencies from 2.6.7 to 3.0.1 in /services

    Bump spring-boot-dependencies from 2.6.7 to 3.0.1 in /services

    Bumps spring-boot-dependencies from 2.6.7 to 3.0.1.

    Release notes

    Sourced from spring-boot-dependencies's releases.

    v3.0.1

    :lady_beetle: Bug Fixes

    • Fix typo in LocalDevToolsAutoConfiguration logging #33615
    • No warning is given when <springProfile> is used in a Logback <root> block #33610
    • Auto-configure PropagationWebGraphQlInterceptor for tracing propagation #33542
    • WebClient instrumentation fails with IllegalArgumentException when adapting to WebClientExchangeTagsProvider #33483
    • Reactive observation auto-configuration does not declare order for WebFilter #33444
    • Web server fails to start due to "Resource location must not be null" when attempting to use a PKCS 11 KeyStore #33433
    • Actuator health endpoint for neo4j throws NoSuchElementException and always returns Status.DOWN #33428
    • Anchors in YAML configuration files throw UnsupportedOperationException #33404
    • ZipkinRestTemplateSender is not customizable #33399
    • AOT doesn't work with Logstash Logback Encoder #33387
    • Maven process-aot goal fails when release version is set in Maven compiler plugin #33382
    • DependsOnDatabaseInitializationPostProcessor re-declares bean dependencies at native image runtime #33374
    • @SpringBootTest now throws a NullPointerException rather than a helpful IllegalStateException when @SpringBootConfiguration is not found #33371
    • bootBuildImage always trys to create a native image due to bootJar always adding a META-INF/native-image/argfile to the jar #33363

    :notebook_with_decorative_cover: Documentation

    • Improve gradle plugin tags documentation #33617
    • Improve maven plugin tags documentation #33616
    • Fix typo in tomcat accesslog checkExists doc #33512
    • Documented Java compiler level is wrong #33505
    • Fix typo in documentation #33453
    • Update instead of replace environment in bootBuildImage documentation #33424
    • Update the reference docs to document the need to declare the native-maven-plugin when using buildpacks to create a native image #33422
    • Document that the shutdown endpoint is not intended for use when deploying a war to a servlet container #33410
    • Reinstate GraphQL testing documentaion #33407
    • Description of NEVER in Sanitize Sensitive Values isn't formatted correctly #33398

    :hammer: Dependency Upgrades

    • Upgrade to AspectJ 1.9.19 #33586
    • Upgrade to Byte Buddy 1.12.20 #33587
    • Upgrade to Couchbase Client 3.4.1 #33588
    • Upgrade to Dropwizard Metrics 4.2.14 #33589
    • Upgrade to Elasticsearch Client 8.5.3 #33590
    • Upgrade to Hibernate 6.1.6.Final #33591
    • Upgrade to HttpClient 4.5.14 #33592
    • Upgrade to HttpCore 4.4.16 #33593
    • Upgrade to Infinispan 14.0.4.Final #33594
    • Upgrade to Jaybird 4.0.8.java11 #33595
    • Upgrade to Jetty 11.0.13 #33596
    • Upgrade to jOOQ 3.17.6 #33597
    • Upgrade to Kotlin 1.7.22 #33598
    • Upgrade to Lettuce 6.2.2.RELEASE #33599
    • Upgrade to MongoDB 4.8.1 #33600
    • Upgrade to MSSQL JDBC 11.2.2.jre17 #33601
    • Upgrade to Native Build Tools Plugin 0.9.19 #33602

    ... (truncated)

    Commits
    • 837947c Release v3.0.1
    • 5929d95 Merge branch '2.7.x'
    • b10b788 Next development version (v2.7.8-SNAPSHOT)
    • f588793 Update copyright year of changed files
    • 0254619 Merge branch '2.7.x'
    • e4772cf Update copyright year of changed files
    • 2e7ca6f Warning if <springProfile> is used in phase 2 model elements
    • 2ed512d Use model.deepMarkAsSkipped in SpringProfileModelHandler
    • 532fed3 Increase couchbase connection timeout for tests
    • 9562a2c Merge branch '2.7.x'
    • Additional commits viewable in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 0
  • Add partition filtering in the InfoType mapping views

    Add partition filtering in the InfoType mapping views

    opened by kwadie 0
  • Bump logback-classic from 1.2.11 to 1.4.5 in /services

    Bump logback-classic from 1.2.11 to 1.4.5 in /services

    Bumps logback-classic from 1.2.11 to 1.4.5.

    Commits
    • 34a6efc preparfe release 1.4.5
    • 0d3ac63 fix LOGBACK-1698, [Nested appenders are not allowed] warning using SiftingApp...
    • a64b8d4 make jakarta.servlet-api as both provided and optional
    • 114b3de bump slf4j version
    • 1df6662 fix LOGBACK-1706
    • ea165fb fix LOGBACK-1703
    • 9e07bd0 fix LOGBACK-1703
    • a871e9f minor edits in README.md
    • 7dc0ce5 Merge pull request #605 from Zardoz89/patch-1
    • 7130dfe README.md MUST inform about Java & Jackarta EE support
    • Additional commits viewable in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 0
  • Bump jib-maven-plugin from 3.2.1 to 3.3.1 in /services

    Bump jib-maven-plugin from 3.2.1 to 3.3.1 in /services

    Bumps jib-maven-plugin from 3.2.1 to 3.3.1.

    Release notes

    Sourced from jib-maven-plugin's releases.

    jib-maven-plugin v3.3.1

    Major Changes

    • Upgraded Google HTTP libraries to 1.42.2 (#3745)

    See CHANGELOG.md for more details.

    jib-gradle-plugin v3.3.1

    Major Changes

    • Added lazy evaluation for jib.container.creationTime and jib.container.filesModificationTime parameters using Gradle Property and Provider. (#3709)
    • Upgraded Google HTTP libraries to 1.42.2 (#3745)

    See CHANGELOG.md for more details.

    jib-maven-plugin v3.3.0

    Major Changes

    • Included imagePushed field to image metadata json output file which provides information on whether an image was pushed by Jib. Note that the output file is build/jib-image.json by default or configurable with jib.outputPaths.imageJson. (#3641)
    • Added better error messaging when environment map in container.environment contains null values (#3672).
    • Added support for OCI image index manifests (#3715).
    • Added support for base image layer compressed with zstd (#3717)
    • Upgraded slf4j-simple and slf4j-api to 2.0.0 (#3734, #3735).
    • Upgraded nullaway to 0.9.9. (#3720)
    • Jib now only checks for file existence instead of running the executable passed into dockerClient.executable for the purpose of verifying if docker is installed correctly. Users are responsible for ensuring that the docker executable specified through this property is valid and has the correct permissions (#3744).
    • Jib now throws an exception when the base image doesn't support target platforms during multi-platform build (#3707).

    See CHANGELOG.md for more details.

    jib-gradle-plugin v3.3.0

    Major Changes

    • Included imagePushed field to image metadata json output file which provides information on whether an image was pushed by Jib. Note that the output file is build/jib-image.json by default or configurable with jib.outputPaths.imageJson. (#3641)
    • Added lazy evaluation for jib.extraDirectories parameters using Gradle Property and Provider. (#3737)
    • Added better error messaging when environment map in container.environment contains null values (#3672).
    • Added support for OCI image index manifests (#3715).
    • Added support for base image layer compressed with zstd (#3717).
    • Upgraded slf4j-api to 2.0.0 (#3735).
    • Upgraded nullaway to 0.9.9 (#3720)
    • Jib now only checks for file existence instead of running the executable passed into dockerClient.executable for the purpose of verifying if docker is installed correctly. Users are responsible for ensuring that the docker executable specified through this property is valid and has the correct permissions (#3744).
    • Jib now throws an exception when the base image doesn't support target platforms during multi-platform build (#3707).

    See CHANGELOG.md for more details.

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 0
  • Bump gson from 2.9.0 to 2.10 in /services

    Bump gson from 2.9.0 to 2.10 in /services

    Bumps gson from 2.9.0 to 2.10.

    Release notes

    Sourced from gson's releases.

    Gson 2.10

    Most important changes

    • Support for serializing and deserializing Java records, on Java ≥ 16. (#2201)

    • Add JsonArray.asList and JsonObject.asMap view methods (#2225)

    • Fix TypeAdapterRuntimeTypeWrapper not detecting reflective TreeTypeAdapter and FutureTypeAdapter (#1787)

    • Improve JsonReader.skipValue() (#2062)

    • Perform numeric conversion for primitive numeric type adapters (#2158)

    • Add Gson.fromJson(..., TypeToken) overloads (#1700)

    • Fix changes to GsonBuilder affecting existing Gson instances (#1815)

    • Make JsonElement conversion methods more consistent and fix javadoc (#2178)

    • Throw UnsupportedOperationException when JsonWriter.jsonValue is not supported (#1651)

    • Disallow JsonObject Entry.setValue(null) (#2167)

    • Fix TypeAdapter.toJson throwing AssertionError for custom IOException (#2172)

    • Convert null to JsonNull for JsonArray.set (#2170)

    • Fixed nullSafe usage. (#1555)

    • Validate TypeToken.getParameterized arguments (#2166)

    • Fix #1702: Gson.toJson creates CharSequence which does not implement toString (#1703)

    • Prefer existing adapter for concurrent Gson.getAdapter calls (#2153)

    • Improve ArrayTypeAdapter for Object[] (#1716)

    • Improve AppendableWriter performance (#1706)

    List of all changes

    ... (truncated)

    Changelog

    Sourced from gson's changelog.

    Change Log

    Version 2.9.1

    • Make Object and JsonElement deserialization iterative rather than recursive (#1912)
    • Added parsing support for enum that has overridden toString() method (#1950)
    • Removed support for building Gson with Gradle (#2081)
    • Removed obsolete codegen hierarchy (#2099)
    • Add support for reflection access filter (#1905)
    • Improve TypeToken creation validation (#2072)
    • Add explicit support for float in JsonWriter (#2130, #2132)
    • Fail when parsing invalid local date (#2134)

    Also many small improvements to javadoc.

    Commits
    • dd92e49 [maven-release-plugin] prepare release gson-parent-2.10
    • 7ca36c5 Add a \<developers> section to the main pom.xml.
    • 79c27dd [maven-release-plugin] prepare for next development iteration
    • 87e9ee5 [maven-release-plugin] prepare release gson-parent-2.10
    • 4705518 Revise the version regex in GsonVersionDiagnosticsTest. (#2228)
    • 7bca5c4 [maven-release-plugin] rollback the release of gson-parent-2.10
    • c7544a0 [maven-release-plugin] prepare for next development iteration
    • 9efdfad [maven-release-plugin] prepare release gson-parent-2.10
    • 4f948dd Automatically replace version references on release:prepare (#2212)
    • 9578583 Small tweaks to fix Error Prone warnings. (#2227)
    • Additional commits viewable in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    dependencies java 
    opened by dependabot[bot] 0
Releases(v1.0.2)
Owner
Google Cloud Platform
Google Cloud Platform
Live Access Serever 9 (repository: las9)

Live Access Serever 9 (repository: las9) This version of LAS has the following technical features. All configuration and management done using an Admi

Pacific Marine Environmental Laboratory 1 Mar 14, 2022
Tripoli imports raw mass spectrometer data files and supports interactive review and archiving of isotopic data.

Tripoli imports raw mass spectrometer data files and supports interactive review and archiving of isotopic data. Tripoli facilitates visualization of temporal trends and scatter during measurement, statistically rigorous filtering of data, and calculation of statistical parameters.

CIRDLES 7 Dec 15, 2022
A high level API to express vectorized operations in Java

vector-handle A high level API to express vectorized operations on primitive arrays in Java allowing to specify the vectorized operations as a simple

Rémi Forax 25 Oct 5, 2022
Program Java untuk melakukan proses CRUD data Matakuliah

Aplikasi Data Matakuliah Program Java untuk melakukan proses CRUD data Matakuliah. Compile javac -d build/classes src/**/*.java or using Apache NetBea

サシ 2 Mar 1, 2022
BitBase is a Client-Server based Crypto trading platform which offers live pricing, dynamic charts, user portfolio, account settings... and much more!

BitBase-Crypto-Trading-Platform BitBase is a Client-Server based Crypto trading platform which offers live pricing, dynamic charts, user portfolio, ac

null 4 Feb 11, 2022
Apache OpenNLP library is a machine learning based toolkit for the processing of natural language text

Welcome to Apache OpenNLP! The Apache OpenNLP library is a machine learning based toolkit for the processing of natural language text. This toolkit is

The Apache Software Foundation 1.2k Dec 29, 2022
Prism (Refracted) is a change-tracking plugin for Bukkit-based servers

Prism (Refracted) is a change-tracking plugin for Bukkit-based servers. Supports rollbacks, restores, previews, wands, and so much more. Tracking so good, the NSA stole our name.

Darkhelmet 29 Dec 30, 2022
Spigot plugin featuring a wide variety of features for a server based on modules.

CTSNC, standing for Custom Chat, Tablist, Scoreboard, NameTag & Chat, is a all-round solution based on multiple modules each featuring a dedicated function while CTSNC acts as the core. Here all configuration files are housed for easy management and customization.

null 2 Dec 30, 2022
Sauron, the all seeing eye! It is a service to generate automated reports and track migrations, changes and dependency versions for backend services also report on known CVE and security issues.

SAURON - VERSION AND DEPLOYMENT TRACKER DESCRIPTION Sauron, the all seeing eye! It is a service to generate automated reports and track migrations, ch

FREENOWTech 20 Oct 31, 2022
A calculator that performs various operations such as addition, subtraction, multiplication and division of positive and negative values

A calculator that performs various operations such as addition, subtraction, multiplication and division of positive and negative values The calculator also does percentages, square roots and squares

Andrey Fabricio 1 Jan 31, 2022
A Local implementation of a java library functions to create a serverside and clientside application which will communicate over TCP using given port and ip address.

A Local implementation of java library functions to create a serverside and clientside application which will communicate over TCP using given port and ip address.

Isaac Barry 1 Feb 12, 2022
Java Notes & Codes for better understanding and it contains all the funtions with examples and also added Cheat Sheet for Revision

Java Notes & Codes for better understanding and it contains all the funtions with examples and also added Cheat Sheet for Revision...

Ujjawal Singh 1 Nov 30, 2022
A Java to iOS Objective-C translation tool and runtime.

J2ObjC: Java to Objective-C Translator and Runtime Project site: https://j2objc.org J2ObjC blog: https://j2objc.blogspot.com Questions and discussion:

Google 5.9k Dec 29, 2022
Make Slack and Facebook Bots in Java.

JBot Make bots in Java. JBot is a java framework (inspired by Howdyai's Botkit) to make Slack and Facebook bots in minutes. It provides all the boiler

Ram 1.2k Dec 18, 2022
API gateway for REST and SOAP written in Java.

Membrane Service Proxy Reverse HTTP proxy (framework) written in Java, that can be used as an API gateway as a security proxy for HTTP based integrati

predic8 GmbH 389 Dec 31, 2022
An extensible Java framework for building XML and non-XML streaming applications

Smooks Framework This is the Git source code repository for the Smooks Project. Build Status Building Pre-requisites JDK 8 Apache Maven 3.2.x Maven gi

Smooks Framework 353 Dec 1, 2022
The open-source Java obfuscation tool working with Ant and Gradle by yWorks - the diagramming experts

yGuard yGuard is an open-source Java obfuscation tool. With yGuard it is easy as pie ( ?? ) to configure obfuscation through an extensive ant task. yG

yWorks GmbH 265 Jan 2, 2023
TChart Simple and fast charts

TChart Simple and fast charts. Current version Beta 0.9.1 Preview Import jitpack.io gradle allprojects

null 30 Sep 20, 2022
ThirdEye is an integrated tool for realtime monitoring of time series and interactive root-cause analysis.

ThirdEye is an integrated tool for realtime monitoring of time series and interactive root-cause analysis. It enables anyone inside an organization to collaborate on effective identification and analysis of deviations in business and system metrics. ThirdEye supports the entire workflow from anomaly detection, over root-cause analysis, to issue resolution and post-mortem reporting.

null 87 Oct 17, 2022