Bump the prod-deps group with 5 updates

[dependabot]

Bumps the prod-deps group with 5 updates:

Package	From	To
org.eclipse.jetty.ee10:jetty-ee10-bom	12.0.7	12.0.8
com.graphql-java:graphql-java	21.4	21.5
net.bytebuddy:byte-buddy	1.14.12	1.14.13
org.apache.maven.plugins:maven-source-plugin	3.3.0	3.3.1
org.jacoco:jacoco-maven-plugin	0.8.11	0.8.12

Updates org.eclipse.jetty.ee10:jetty-ee10-bom from 12.0.7 to 12.0.8

Release notes

Sourced from org.eclipse.jetty.ee10:jetty-ee10-bom's releases.

12.0.8

Special Thanks to the following Eclipse Jetty community members

• @​dhs3000 (Dennis Hoersch)

Changelog

• #11587 - Allow configuring showCause in ErrorHandler
• #11583 - Broken HTTP/3 tests
• #11577 - Remove usages of URIUtil.toURI and URIUtil.split
• #11574 - shibboleth idp webapp under jetty 12.0.7
• #11572 - Deploy behaves differently when both WAR and XML exist in ${jetty.base}/webapps/ and you update the XML vs updating the WAR.
• #11558 - New tmp directory should be created on every WebAppContext start, if not explicitly configured
• #11556 - Improvements and cleanups to ErrorHandler.
• #11553 - Restore startWebapp() to WebAppContext
• #11548 - java.nio.file.ClosedFileSystemException on hot redeploy
• #11539 - Resource.copyTo(Resource) has different behavior from Jetty 9/10/11
• #11522 - Allows to change the default ErrorHandler response type (@​dhs3000)
• #11518 - Ensure request is set for ContextScopeListener in EE10
• #11513 - Perf regression in the HTTP parser caused by long look-ahead
• #11510 - Occasional NPE in ClassMatcher.match() from WebAppClassLoader.loadClass() usage
• #11509 - Removing constructor in CookieCache on minor version Change of artifact
• #11498 - Optimized ReservedThreadExecutor with ThreadIdPool
• #11495 - Add UriCompliance rules that follow the HTTP / URI / Servlet specs for illegal & suspicious characters
• #11486 - Improve HTTP parsing long look-ahead
• #11482 - The StatisticsHandler doesn't count 2xx codes
• #11451 - Reintroduce Cross Context Dispatch in Jetty 12
• #11411 - Allow non existant resources to be obtained from Resource.resolve()
• #11364 - Cleanup Resource IO
• #11319 - Implemented addBeanFromConstructor
• #10870 - How to set HttpConfiguration.securePort when the HTTPS port is dynamic?
• #10387 - Fix or suppress javadoc warnings
• #7647 - Document org.eclipse.jetty.client.Socks4Proxy "secure" parameter
• #5857 - Deprecate AbstractConnectionPool "callback" methods

Commits

• ffffdcc Updating to version 12.0.8
• 58293ad Update Dependencies [12.0.x] - March 2024 (#11591)
• 1b05d49 Allow configuring showCause in ErrorHandler (#11587)
• 0451bd4 Disable Conscrypt tests on aarch64 (#11590)
• 9b6944e Remove usages of URIUtil.toURI and URIUtil.split (#11577)
• 89c41b2 Cleanup Resource IO (#11364)
• 48f6ab7 remove unknown maven plugin parameter (#11571)
• e00a71a Fixes #11583 - Broken HTTP/3 tests (#11584)
• ee82c2b Issue #10387 configure doclint to not generate verbose useless warning, remov...
• 5743193 Disable flaky test - see jetty/jetty.project#11581
• Additional commits viewable in compare view

Updates com.graphql-java:graphql-java from 21.4 to 21.5

Release notes

Sourced from com.graphql-java:graphql-java's releases.

21.5

This is a special release to add further limits to introspection queries.

This release contains a backport of PR #3539.

What's Changed

• 21.x backport of #3539 ENF restriction for introspection by @​dondonz in graphql-java/graphql-java#3540

Full Changelog: graphql-java/graphql-java@v21.4...v21.5

Commits

• 25667a1 Merge pull request #3540 from graphql-java/21.x-backport-enf-introspection
• aadb3a4 Fix typo (backport PR #3544)
• b440729 Making tests consistent with approach in v19 and v20 backports
• 7efac41 Remove references to defer
• fc6f304 Cherry pick ENF introspection and make ExecutableNormalizedOperationFactory c...
• See full diff in compare view

Updates net.bytebuddy:byte-buddy from 1.14.12 to 1.14.13

Release notes

Sourced from net.bytebuddy:byte-buddy's releases.

Byte Buddy 1.14.13

• Avoid resolving type variables when generic type processing is disabled.
• Improve error message for Byte Buddy agent external attach.
• Fix build for modular jars when using later version than Java 8.

Commits

• 93cee8f [maven-release-plugin] prepare release byte-buddy-1.14.13
• 8236fae [release] Release new version
• 5ce6352 Remove test that cannot run in context.
• 53ce259 Legger inn type vitness.
• 09dc1a9 Don't resolve parameterized types for RAW_TYPES mode (#1604)
• ddc7698 Improve error message.
• 3b4ed21 Increment internal Byte Buddy.
• db91698 Bump org.apache.commons:commons-compress in /byte-buddy-maven-plugin (#1597)
• 7841ebc Avoid broken modular jars when using the shade plugin where the jar tool is r...
• 76987df Add main class.
• Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-source-plugin from 3.3.0 to 3.3.1

Commits

• f80596e [maven-release-plugin] prepare release maven-source-plugin-3.3.1
• 7626998 Bump apache/maven-gh-actions-shared from 3 to 4
• 83c963c Bump org.apache.maven.plugins:maven-plugins from 39 to 41 (#18)
• 40ae495 Bump org.codehaus.plexus:plexus-archiver from 4.8.0 to 4.9.1 (#20)
• 073462b Bump org.apache.maven:maven-archiver from 3.6.0 to 3.6.1 (#21)
• 0b1c823 Fix typos in AbstractSourceJarMojo exception
• 099c65a [MSOURCES-142] Bump org.codehaus.plexus:plexus-archiver from 4.7.1 to 4.8.0 (...
• 1edeea4 [MSOURCES-139] Fix typo in AbstractSourceJarMojo exception
• 436966e [maven-release-plugin] prepare for next development iteration
• See full diff in compare view

Updates org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.12

Release notes

Sourced from org.jacoco:jacoco-maven-plugin's releases.

0.8.12

New Features

• JaCoCo now officially supports Java 22 (GitHub #1596).
• Experimental support for Java 23 class files (GitHub #1553).

Fixed bugs

• Branches added by the Kotlin compiler for functions with default arguments and having more than 32 parameters are filtered out during generation of report (GitHub #1556).
• Branch added by the Kotlin compiler version 1.5.0 and above for reading from lateinit property is filtered out during generation of report (GitHub #1568).

Non-functional Changes

• JaCoCo now depends on ASM 9.7 (GitHub #1600).

Commits

• dbfb6f2 Prepare release 0.8.12
• a50585b Upgrade maven-plugin-plugin to 3.6.4 (#1604)
• fd63cc5 Configure labels that Dependabot assigns to PRs (#1603)
• 03a5333 Add configuration for Dependabot to simplify updates of ASM (#1601)
• 40ff9fb Upgrade ASM to 9.7 (#1600)
• 9077178 Happy birthday Java 22! (#1596)
• 7edd1b5 Bump actions/setup-java from 4.1.0 to 4.2.1 (#1594)
• e50b547 Upgrade ECJ to 3.37.0 (#1590)
• a1144d0 Upgrade maven-site-plugin to 3.12.1 (#1586)
• 04b0141 Bump actions/setup-java from 4.0.0 to 4.1.0 (#1587)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions