Update all patch versions (master) (patch)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
tomcat	final	patch	9.0.85-jdk11-temurin-jammy -> 9.0.86-jdk11-temurin-jammy
com.amazonaws:aws-java-sdk-s3 (source)	dependencies	patch	1.12.649 -> 1.12.670
org.slf4j:jul-to-slf4j (source, changelog)	dependencies	patch	2.0.11 -> 2.0.12
org.slf4j:jcl-over-slf4j (source, changelog)	dependencies	patch	2.0.11 -> 2.0.12
org.slf4j:slf4j-api (source, changelog)	dependencies	patch	2.0.11 -> 2.0.12
joda-time:joda-time (source)	dependencies	patch	2.12.6 -> 2.12.7
net.sf.jasperreports:jasperreports-functions (source)	dependencies	patch	6.21.0 -> 6.21.2
net.sf.jasperreports:jasperreports-fonts (source)	dependencies	patch	6.21.0 -> 6.21.2
org.codehaus.groovy:groovy-all (source)	dependencies	patch	3.0.20 -> 3.0.21
net.sf.jasperreports:jasperreports (source)	dependencies	patch	6.21.0 -> 6.21.2
org.springframework:spring-test	dependencies	patch	5.3.31 -> 5.3.32
org.springframework:spring-tx	dependencies	patch	5.3.31 -> 5.3.32
org.springframework:spring-jdbc	dependencies	patch	5.3.31 -> 5.3.32
org.springframework:spring-orm	dependencies	patch	5.3.31 -> 5.3.32
org.springframework:spring-aspects	dependencies	patch	5.3.31 -> 5.3.32
org.postgresql:postgresql (source)	dependencies	patch	42.7.1 -> 42.7.2
org.springframework.security:spring-security-web (source)	dependencies	patch	5.8.9 -> 5.8.10
org.springframework.security:spring-security-config (source)	dependencies	patch	5.8.9 -> 5.8.10
org.springframework:spring-webmvc	dependencies	patch	5.3.31 -> 5.3.32
org.springframework:spring-web	dependencies	patch	5.3.31 -> 5.3.32
org.springframework:spring-context	dependencies	patch	5.3.31 -> 5.3.32
org.springframework:spring-beans	dependencies	patch	5.3.31 -> 5.3.32

---

Release Notes

aws/aws-sdk-java (com.amazonaws:aws-java-sdk-s3)

v1.12.670

Compare Source

AWS Migration Hub Orchestrator

• Features

  • Adds new CreateTemplate, UpdateTemplate and DeleteTemplate APIs.

Amazon DocumentDB Elastic Clusters

• Features

  • Launched Elastic Clusters Readable Secondaries, Start/Stop, Configurable Shard Instance count, Automatic Backups and Snapshot Copying

Amazon Elastic Kubernetes Service

• Features

  • Added support for new AL2023 AMIs to the supported AMITypes.

Amazon Lex Model Building V2

• Features

  • This release makes AMAZON.QnAIntent generally available in Amazon Lex. This generative AI feature leverages large language models available through Amazon Bedrock to automate frequently asked questions (FAQ) experience for end-users.

Amazon QuickSight

• Features

  • TooltipTarget for Combo chart visuals; ColumnConfiguration limit increase to 2000; Documentation Update

Amazon SageMaker Service

• Features

  • Adds support for ModelDataSource in Model Packages to support unzipped models. Adds support to specify SourceUri for models which allows registration of models without mandating a container for hosting. Using SourceUri, customers can decouple the model from hosting information during registration.

Amazon Security Lake

• Features

  • Add capability to update the Data Lake's MetaStoreManager Role in order to perform required data lake updates to use Iceberg table format in their data lake or update the role for any other reason.

v1.12.669

Compare Source

AWS Batch

• Features

  • This release adds Batch support for configuration of multicontainer jobs in ECS, Fargate, and EKS. This support is available for all types of jobs, including both array jobs and multi-node parallel jobs.

AWS Cost Explorer Service

• Features

  • This release introduces the new API 'GetApproximateUsageRecords', which retrieves estimated usage records for hourly granularity or resource-level data at daily granularity.

AWS IoT

• Features

  • This release reduces the maximum results returned per query invocation from 500 to 100 for the SearchIndex API. This change has no implications as long as the API is invoked until the nextToken is NULL.

AWS WAFV2

• Features

  • AWS WAF now supports configurable time windows for request aggregation with rate-based rules. Customers can now select time windows of 1 minute, 2 minutes or 10 minutes, in addition to the previously supported 5 minutes.

Agents for Amazon Bedrock Runtime

• Features

  • This release adds support to override search strategy performed by the Retrieve and RetrieveAndGenerate APIs for Amazon Bedrock Agents

Amazon Elastic Compute Cloud

• Features

  • This release increases the range of MaxResults for GetNetworkInsightsAccessScopeAnalysisFindings to 1,000.

v1.12.668

Compare Source

AWS Amplify UI Builder

• Features

  • We have added the ability to tag resources after they are created

v1.12.667

Compare Source

Amazon API Gateway

• Features

  • Documentation updates for Amazon API Gateway.

Amazon Relational Database Service

• Features

  • This release adds support for gp3 data volumes for Multi-AZ DB Clusters.

Elastic Disaster Recovery Service

• Features

  • Added volume status to DescribeSourceServer replicated volumes.

Managed Streaming for Kafka Connect

• Features

  • Adds support for tagging, with new TagResource, UntagResource and ListTagsForResource APIs to manage tags and updates to existing APIs to allow tag on create. This release also adds support for the new DeleteWorkerConfiguration API.

v1.12.666

Compare Source

AWS AppSync

• Features

  • Documentation only updates for AppSync

Amazon QLDB

• Features

  • Clarify possible values for KmsKeyArn and EncryptionDescription.

Amazon Relational Database Service

• Features

  • Add pattern and length based validations for DBShardGroupIdentifier

CloudWatch RUM

• Features

  • Doc-only update for new RUM metrics that were added

v1.12.665

Compare Source

Amazon CloudWatch Internet Monitor

• Features

  • This release adds IPv4 prefixes to health events

Amazon Kinesis Video Streams

• Features

  • Increasing NextToken parameter length restriction for List APIs from 512 to 1024.

v1.12.664

Compare Source

AWS Elemental MediaLive

• Features

  • MediaLive now supports the ability to restart pipelines in a running channel.

AWS IoT Events

• Features

  • Increase the maximum length of descriptions for Inputs, Detector Models, and Alarm Models

Amazon Lookout for Equipment

• Features

  • This release adds a field exposing model quality to read APIs for models. It also adds a model quality field to the API response when creating an inference scheduler.

Amazon Simple Systems Manager (SSM)

• Features

  • This release adds support for sharing Systems Manager parameters with other AWS accounts.

v1.12.663

Compare Source

AWS Lambda

• Features

  • Add .NET 8 (dotnet8) Runtime support to AWS Lambda.

Amazon DynamoDB

• Features

  • Publishing quick fix for doc only update.

Amazon Kinesis Firehose

• Features

  • This release updates a few Firehose related APIs.

v1.12.662

Compare Source

AWS Amplify

• Features

  • This release contains API changes that enable users to configure their Amplify domains with their own custom SSL/TLS certificate.

AWS Config

• Features

  • Documentation updates for the AWS Config CLI

AWS MediaTailor

• Features

  • MediaTailor: marking #AdBreak.OffsetMillis as required.

Amazon Interactive Video Service

• Features

  • Changed description for latencyMode in Create/UpdateChannel and Channel/ChannelSummary.

Amazon Keyspaces

• Features

  • Documentation updates for Amazon Keyspaces

chatbot

• Features

  • This release adds support for AWS Chatbot. You can now monitor, operate, and troubleshoot your AWS resources with interactive ChatOps using the AWS SDK.

v1.12.661

Compare Source

AWS Lambda

• Features

  • Documentation-only updates for Lambda to clarify a number of existing actions and properties.

Amazon Connect Participant Service

• Features

  • Doc only update to GetTranscript API reference guide to inform users about presence of events in the chat transcript.

Amazon EMR

• Features

  • adds fine grained control over Unhealthy Node Replacement to Amazon ElasticMapReduce

Amazon Kinesis Firehose

• Features

  • This release adds support for Data Message Extraction for decompressed CloudWatch logs, and to use a custom file extension or time zone for S3 destinations.

Amazon Relational Database Service

• Features

  • Doc only update for a valid option in DB parameter group

Amazon Simple Notification Service

• Features

  • This release marks phone numbers as sensitive inputs.

v1.12.660

Compare Source

AWS Artifact

• Features

  • This is the initial SDK release for AWS Artifact. AWS Artifact provides on-demand access to compliance and third-party compliance reports. This release includes access to List and Get reports, along with their metadata. This release also includes access to AWS Artifact notifications settings.

AWS CodePipeline

• Features

  • Add ability to override timeout on action level.

AWS Secrets Manager

• Features

  • Doc only update for Secrets Manager

Amazon Detective

• Features

  • Doc only updates for content enhancement

Amazon GuardDuty

• Features

  • Marked fields IpAddressV4, PrivateIpAddress, Email as Sensitive.

Amazon HealthLake

• Features

  • This release adds a new response parameter, JobProgressReport, to the DescribeFHIRImportJob and ListFHIRImportJobs API operation. JobProgressReport provides details on the progress of the import job on the server.

Amazon OpenSearch Service

• Features

  • Adds additional supported instance types.

Amazon Polly

• Features

  • Amazon Polly adds 1 new voice - Burcu (tr-TR)

Amazon SageMaker Service

• Features

  • This release adds a new API UpdateClusterSoftware for SageMaker HyperPod. This API allows users to patch HyperPod clusters with latest platform softwares.

v1.12.659

Compare Source

AWS Control Tower

• Features

  • Adds support for new Baseline and EnabledBaseline APIs for automating multi-account governance.

Amazon Lookout for Equipment

• Features

  • This feature allows customers to see pointwise model diagnostics results for their models.

QBusiness

• Features

  • This release adds the metadata-boosting feature, which allows customers to easily fine-tune the underlying ranking of retrieved RAG passages in order to optimize Q&A answer relevance. It also adds new feedback reasons for the PutFeedback API.

v1.12.658

Compare Source

AWS Marketplace Catalog Service

• Features

  • AWS Marketplace Catalog API now supports setting intent on requests

AWS Resource Explorer

• Features

  • Resource Explorer now uses newly supported IPv4 'amazonaws.com' endpoints by default.

Amazon Lightsail

• Features

  • This release adds support to upgrade the major version of a database.

Amazon Security Lake

• Features

  • Documentation updates for Security Lake

v1.12.657

Compare Source

AWS AppSync

• Features

  • Adds support for new options on GraphqlAPIs, Resolvers and Data Sources for emitting Amazon CloudWatch metrics for enhanced monitoring of AppSync APIs.

Amazon CloudWatch

• Features

  • This release enables PutMetricData API request payload compression by default.

Amazon Neptune Graph

• Features

  • Adding a new option "parameters" for data plane api ExecuteQuery to support running parameterized query via SDK.

Amazon Route 53 Domains

• Features

  • This release adds bill contact support for RegisterDomain, TransferDomain, UpdateDomainContact and GetDomainDetail API.

v1.12.656

Compare Source

AWS Batch

• Features

  • This feature allows Batch to support configuration of repository credentials for jobs running on ECS

AWS IoT

• Features

  • This release allows AWS IoT Core users to enable Online Certificate Status Protocol (OCSP) Stapling for TLS X.509 Server Certificates when creating and updating AWS IoT Domain Configurations with Custom Domain.

AWS Price List Service

• Features

  • Add Throttling Exception to all APIs.

Amazon EC2 Container Service

• Features

  • Documentation only update for Amazon ECS.

Amazon Prometheus Service

• Features

  • Overall documentation updates.

Braket

• Features

  • Creating a job will result in DeviceOfflineException when using an offline device, and DeviceRetiredException when using a retired device.

Cost Optimization Hub

• Features

  • Adding includeMemberAccounts field to the response of ListEnrollmentStatuses API.

v1.12.655

Compare Source

AWS CodePipeline

• Features

  • Add ability to execute pipelines with new parallel & queued execution modes and add support for triggers with filtering on branches and file paths.

Amazon QuickSight

• Features

  • General Interactions for Visuals; Waterfall Chart Color Configuration; Documentation Update

Amazon WorkSpaces

• Features

  • This release introduces User-Decoupling feature. This feature allows Workspaces Core customers to provision workspaces without providing users. CreateWorkspaces and DescribeWorkspaces APIs will now take a new optional parameter "WorkspaceName".

v1.12.654

Compare Source

AWS DataSync

• Features

  • AWS DataSync now supports manifests for specifying files or objects to transfer.

Amazon Lex Model Building V2

• Features

  • This release introduces a new bot replication feature as part of Lex Global Resiliency offering. This feature leverages a new set of APIs that allow customers to create bot replicas and replicate changes to bots across regions.

Amazon Redshift

• Features

  • LisRecommendations API to fetch Amazon Redshift Advisor recommendations.

v1.12.653

Compare Source

AWS AppSync

• Features

  • Support for environment variables in AppSync GraphQL APIs

AWS WAFV2

• Features

  • You can now delete an API key that you've created for use with your CAPTCHA JavaScript integration API.

Amazon CloudWatch Logs

• Features

  • This release adds a new field, logGroupArn, to the response of the logs:DescribeLogGroups action.

Amazon EC2 Container Service

• Features

  • This release is a documentation only update to address customer issues.

Amazon Elasticsearch Service

• Features

  • This release adds clear visibility to the customers on the changes that they make on the domain.

Amazon OpenSearch Service

• Features

  • This release adds clear visibility to the customers on the changes that they make on the domain.

v1.12.652

Compare Source

AWS Glue

• Features

  • Introduce Catalog Encryption Role within Glue Data Catalog Settings. Introduce SASL/PLAIN as an authentication method for Glue Kafka connections

Amazon WorkSpaces

• Features

  • Added definitions of various WorkSpace states

v1.12.651

Compare Source

Amazon DynamoDB

• Features

  • Any number of users can execute up to 50 concurrent restores (any type of restore) in a given account.

Amazon SageMaker Service

• Features

  • Amazon SageMaker Canvas adds GenerativeAiSettings support for CanvasAppSettings.

v1.12.650

Compare Source

AWS Elemental MediaConvert

• Features

  • This release includes support for broadcast-mixed audio description tracks.

Amazon Cognito Identity Provider

• Features

  • Added CreateIdentityProvider and UpdateIdentityProvider details for new SAML IdP features

Amazon Interactive Video Service

• Features

  • This release introduces a new resource Playback Restriction Policy which can be used to geo-restrict or domain-restrict channel stream playback when associated with a channel. New APIs to support this resource were introduced in the form of Create/Delete/Get/Update/List.

Amazon Managed Blockchain Query

• Features

  • This release adds support for transactions that have not reached finality. It also removes support for the status property from the response of the GetTransaction operation. You can use the confirmationStatus and executionStatus properties to determine the status of the transaction.

Amazon Neptune Graph

• Features

  • Adding new APIs in SDK for Amazon Neptune Analytics. These APIs include operations to execute, cancel, list queries and get the graph summary.

JodaOrg/joda-time (joda-time:joda-time)

v2.12.7

Compare Source

See the change notes for more information.

What's Changed

• Update time zone data to 2024agtz by @​github-actions in https://github.com/JodaOrg/joda-time/pull/768

Full Changelog: JodaOrg/joda-time@v2.12.6...v2.12.7

TIBCOSoftware/jasperreports (net.sf.jasperreports:jasperreports-functions)

v6.21.2: JasperReports 6.21.2

Compare Source

• minor bug fixes and improvements;

spring-projects/spring-framework (org.springframework:spring-test)

v5.3.32

Compare Source

⭐ New Features

• Add CORS support for Private Network Access #​31974
• Avoid early getMostSpecificMethod resolution in CommonAnnotationBeanPostProcessor #​31969

🐞 Bug Fixes

• Consistent parsing of user information in UriComponentsBuilder #​32247
• QualifierAnnotationAutowireCandidateResolver.checkQualifier does identity checks when comparing arrays used as qualifier fields #​32108
• Guard against multiple body subscriptions in Jetty and JDK reactive responses #​32101
• Static resources caching issues with ShallowEtagHeaderFilter and Jetty caching directives #​32051
• ChannelSendOperator.WriteBarrier race condition in request(long) method leads to response being dropped #​32021
• Spring AOP does not propagate arguments for dynamic prototype-scoped advice #​31964
• MergedAnnotation swallows IllegalAccessException for attribute method #​31961
• CronTrigger hard-codes default ZoneId instead of participating in scheduler-wide Clock setup #​31950
• MergedAnnotations finds duplicate annotations on method in multi-level interface hierarchy #​31825
• PathEditor cannot handle absolute Windows paths with forward slashes #​31728
• Include Hibernate's Query.scroll() in SharedEntityManagerCreator's queryTerminatingMethods set #​31684
• TypeDescriptor does not check generics in equals method (for ConversionService caching) #​31674
• Slow SpEL performance due to method sorting in ReflectiveMethodResolver #​31665
• Jackson encoder releases resources in wrong order #​31657
• WebSocketMessageBrokerStats has null stats for stompSubProtocolHandler since 5.3.2 #​31642

📔 Documentation

• Document cron-vs-quartz parsing convention for dayOfWeek part in CronExpression #​32131

🔨 Dependency Upgrades

• Upgrade to Reactor 2020.0.41 #​32276

pgjdbc/pgjdbc (org.postgresql:postgresql)

v42.7.2

Security

• security: SQL Injection via line comment generation, it is possible in SimpleQuery mode to generate a line comment by having a placeholder for a numeric with a -
  such as -?. There must be second placeholder for a string immediately after. Setting the parameter to a -ve value creates a line comment.
  This has been fixed in this version fixes CVE-2024-1597. Reported by Paul Gerste. See the security advisory for more details. This has been fixed in versions 42.7.2, 42.6.1 42.5.5, 42.4.4, 42.3.9, 42.2.28.jre7. See the security advisory for work arounds.

Changed

• fix: Use simple query for isValid. Using Extended query sends two messages checkConnectionQuery was never ever set or used, removed PR #​3101
• perf: Avoid autoboxing bind indexes by @​bokken in PR #​1244
• refactor: Document that encodePassword will zero out the password array, and remove driver's default encodePassword by @​vlsi in PR #​3084

Added

• feat: Add PasswordUtil for encrypting passwords client side PR #​3082

spring-projects/spring-security (org.springframework.security:spring-security-web)

v5.8.10

Compare Source

⭐ New Features

• Updated broken documentation link in javadocs #​14329

🪲 Bug Fixes

• Fix security filter sort in javadoc #​14552
• ReactiveMethodSecurityConfiguration is initialized prematurely when the context contains a BeanPostProcessor #​11596
• Saml2 LogoutFilter Should Come Before Common LogoutFilter #​14549

🔨 Dependency Upgrades

• Bump Gamesight/slack-workflow-status from 1.2.0 to 1.3.0 #​14584
• Bump gradle/gradle-build-action from 2 to 3 #​14505
• Bump io-spring-javaformat from 0.0.40 to 0.0.41 #​14438
• Bump io.projectreactor.netty:reactor-netty from 1.0.40 to 1.0.41 #​14432
• Bump io.projectreactor:reactor-bom from 2020.0.39 to 2020.0.40 #​14431
• Bump io.projectreactor:reactor-bom from 2020.0.40 to 2020.0.41 #​14614
• Bump io.spring.ge.conventions from 0.0.14 to 0.0.15 #​14464
• Bump org-aspectj from 1.9.20.1 to 1.9.21.1 #​14607
• Bump org-eclipse-jetty from 9.4.53.v20231009 to 9.4.54.v20240208 #​14608
• Bump org.springframework:spring-framework-bom from 5.3.31 to 5.3.32 #​14622
• Bump slackapi/slack-github-action from 1.24.0 to 1.25.0 #​14506
• Bump spring-io/spring-github-workflows from eaf17a1 to 1e8b058 #​14585

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

• @​kse-music
• @​geirhe
• @​aspan
• @​dependabot[bot]

---

Configuration

📅 Schedule: Branch creation - "after 5pm on the first day of the month" in timezone Europe/Zurich, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.