Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 22, 2025

Bumps io.vertx:vertx-web from 4.5.10 to 4.5.22.

Commits
  • 188938c Releasing 4.5.22
  • 284cf73 StaticHandler should not serve files under hidden directories
  • b3edd39 Fix failing test due to Java 11 syntax usage
  • 83fb341 Update StaticDirectoryListHandlerTest
  • 78e61fc Make sure test dir is cleaned up
  • f2dbc2a StaticHandler should encode file names in directory listing
  • 6c6aab0 Upgrade CI to Java 25
  • 2c18f46 fix #2765: CookieSessionStore requires twice auth on first login (#2802)
  • 2417a02 feature #2800 CORS: support moz-extension (#2804)
  • a02afbb This test fails repeatedly on Windows (gets 400 BAD Request). (#2791)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.
  • doc
  • doc-required
  • doc-not-needed
  • doc-complete

Bumps [io.vertx:vertx-web](https://github.com/vert-x3/vertx-web) from 4.5.10 to 4.5.22.
- [Commits](vert-x3/vertx-web@4.5.10...4.5.22)

---
updated-dependencies:
- dependency-name: io.vertx:vertx-web
  dependency-version: 4.5.22
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 22, 2025
@github-actions
Copy link

@dependabot[bot] Please add the following content to your PR description and select a checkbox:

- [ ] `doc` <!-- Your PR contains doc changes -->
- [ ] `doc-required` <!-- Your PR changes impact docs and you will update later -->
- [ ] `doc-not-needed` <!-- Your PR changes do not impact docs -->
- [ ] `doc-complete` <!-- Docs have been already added -->

@lhotari lhotari changed the title Bump io.vertx:vertx-web from 4.5.10 to 4.5.22 [fix][sec] Bump io.vertx:vertx-web from 4.5.10 to 4.5.22 Oct 27, 2025
@github-actions github-actions bot added doc-not-needed Your PR changes do not impact docs and removed doc-label-missing labels Oct 27, 2025
Copy link
Member

@lhotari lhotari left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@codecov-commenter
Copy link

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 74.25%. Comparing base (8828734) to head (e0a8355).
⚠️ Report is 8 commits behind head on master.

Additional details and impacted files

Impacted file tree graph

@@             Coverage Diff              @@
##             master   #24889      +/-   ##
============================================
- Coverage     74.38%   74.25%   -0.14%     
+ Complexity    33513    33477      -36     
============================================
  Files          1913     1913              
  Lines        149317   149323       +6     
  Branches      17331    17332       +1     
============================================
- Hits         111064   110874     -190     
- Misses        29422    29608     +186     
- Partials       8831     8841      +10     
Flag Coverage Δ
inttests 26.40% <ø> (-0.41%) ⬇️
systests 22.77% <ø> (-0.24%) ⬇️
unittests 73.79% <ø> (-0.11%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.
see 90 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@lhotari lhotari merged commit f8cea0f into master Oct 27, 2025
180 of 191 checks passed
@dependabot dependabot bot deleted the dependabot/maven/io.vertx-vertx-web-4.5.22 branch October 27, 2025 19:01
merlimat pushed a commit that referenced this pull request Oct 27, 2025
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lari Hotari <lhotari@apache.org>
merlimat pushed a commit that referenced this pull request Oct 27, 2025
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lari Hotari <lhotari@apache.org>
merlimat pushed a commit that referenced this pull request Oct 27, 2025
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lari Hotari <lhotari@apache.org>
manas-ctds pushed a commit to datastax/pulsar that referenced this pull request Oct 28, 2025
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lari Hotari <lhotari@apache.org>
(cherry picked from commit a59c490)
manas-ctds pushed a commit to datastax/pulsar that referenced this pull request Oct 28, 2025
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lari Hotari <lhotari@apache.org>
(cherry picked from commit 685ee5e)
lhotari added a commit that referenced this pull request Oct 28, 2025
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lari Hotari <lhotari@apache.org>
(cherry picked from commit f8cea0f)
srinath-ctds pushed a commit to datastax/pulsar that referenced this pull request Oct 30, 2025
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lari Hotari <lhotari@apache.org>
(cherry picked from commit 685ee5e)
nodece pushed a commit to ascentstream/pulsar that referenced this pull request Oct 30, 2025
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lari Hotari <lhotari@apache.org>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants