chore(deps): Update Deps

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@auto-it/conventional-commits	11.1.6 -> 11.3.0					devDependencies	minor
@auto-it/exec	11.1.6 -> 11.3.0					devDependencies	minor
@auto-it/first-time-contributor	11.1.6 -> 11.3.0					devDependencies	minor
@auto-it/gradle	11.1.6 -> 11.3.0					devDependencies	minor
@auto-it/released	11.1.6 -> 11.3.0					devDependencies	minor
@auto-it/upload-assets	11.1.6 -> 11.3.0					devDependencies	minor
auto	11.1.6 -> 11.3.0					devDependencies	minor
gradle (source)	7.6.1 -> 7.6.4						patch
yarn (source)	4.3.1 -> 4.5.1					packageManager	minor
com.sk89q.worldedit:worldedit-bukkit	7.2.14 -> 7.3.7					dependencies	minor
io.netty:netty-all (source)	4.1.91.Final -> 4.1.115.Final					dependencies	patch
net.md-5:bungeecord-api	1.16-R0.4 -> 1.20-R0.2					dependencies	minor
com.google.code.gson:gson	2.10.1 -> 2.11.0					dependencies	minor

---

Release Notes

intuit/auto (@​auto-it/conventional-commits)

v11.3.0

Compare Source

🚀 Enhancement

• @auto-it/core
  • private packages should be included in changelogs #​2478 (@​hipstersmoothie)

Authors: 1

• Andrew Lisowski (@​hipstersmoothie)

---

v11.2.1

Compare Source

🐛 Bug Fix

• @auto-it/version-file
  • Respect noVersionPrefix option in the Version File plugin #​2472 (@​KetanReddy)

Authors: 1

• Ketan Reddy (@​KetanReddy)

---

v11.2.0

Compare Source

🎉 This release contains work from a new contributor! 🎉

Thank you, Martin Elias (@​LittleGreenYoda42), for all your work!

🚀 Enhancement

• @auto-it/version-file
  • [Version File] Remove assumption that canary and next should be snapshots #​2467 (@​sugarmanz)

🐛 Bug Fix

• @auto-it/slack
  • fix: handling of long strings in slack plugin #​2464 (@​LittleGreenYoda42)

Authors: 2

• Jeremiah Zucker (@​sugarmanz)
• Martin Elias (@​LittleGreenYoda42)

---

gradle/gradle (gradle)

v7.6.4: 7.6.4

Compare Source

This is a patch release for 7.6. We recommend using 7.6.4 instead of 7.6.

Read the Release Notes

Upgrade instructions

Switch your build to use Gradle 7.6.4 by updating your wrapper:

./gradlew wrapper --gradle-version=7.6.4

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v7.6.3: 7.6.3

Compare Source

This is a patch release for 7.6. We recommend using 7.6.3 instead of 7.6.

This release addresses two security vulnerabilities:

• Incorrect permission assignment for symlinked files used in copy or archiving operations
• Possible local text file exfiltration by XML External entity injection

It also fixes the following issues:

• #​25781 Backport finalized task performance fix to 7.6.x
• #​25802 Backport cgroups fix to 7.6.x

Read the Release Notes

Upgrade Instructions

Switch your build to use Gradle 7.6.3 by updating your wrapper:

./gradlew wrapper --gradle-version=7.6.3

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.3.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

v7.6.2: 7.6.2

Compare Source

This is a patch release for 7.6. We recommend using 7.6.2 instead of 7.6.

This release addresses two security vulnerabilities:

• Dependency cache path traversal
• Path traversal vulnerabilities in handling of Tar archives

It also fixes the following issues:

• #​23201 Backport dependency upgrades to 7.x
• #​23202 Backport Scala incremental compilation fixes
• #​23325 Backport JSoup update to resolve CVE-2022-36033
• #​23458 Backport JUnit5 dynamic test logging bug fix
• #​23681 Dependency graph resolution: Equivalent excludes can cause un-necessary graph mutations [backport 7.x]
• #​23922 Backport "Use Compiler API data for incremental compilation after a failure" to 7.x
• #​23951 Exclude rule merging: missing optimization [Backport 7.x]
• #​24132 Extending an already resolved configuration no longer works correctly [backport 7.x]
• #​24234 7.6.1 breaks gradle-consistent-versions
• #​24390 Gradle 7.4 fails on multi release jar's with JDK 19 code
• #​24439 Gradle complains about invalid tool chain - picking up the source package location - it should just ignore them [Backport]
• #​24443 Maven artifact referenced only in dependency constraints raises IllegalStateException: Corrupt serialized resolution result [backport]
• #​24901 Backport fix for test exception that cannot be deserialized to 7.x

Read the Release Notes

Upgrade Instructions

Switch your build to use Gradle 7.6.2 by updating your wrapper:

./gradlew wrapper --gradle-version=7.6.2

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.2.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

yarnpkg/berry (yarn)

v4.5.1

Compare Source

v4.5.0

Compare Source

v4.4.1

Compare Source

v4.4.0

Compare Source

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.