build(deps): bump the patches group with 4 updates

[dependabot]

Bumps the patches group with 4 updates: com.fasterxml.jackson:jackson-bom, org.apache.httpcomponents.client5:httpclient5, io.projectreactor.netty:reactor-netty-http and commons-codec:commons-codec.

Updates com.fasterxml.jackson:jackson-bom from 2.22.1 to 2.22.2

Commits

• 062d76d [maven-release-plugin] prepare release jackson-bom-2.22.2
• dcf18f7 Prep for 2.22.2 release
• 9688c7b Merge branch '2.21' into 2.22
• 7796a7d Merge branch '2.20' into 2.21
• d3cd7fc Merge branch '2.19' into 2.20
• 7a28068 Merge branch '2.18' into 2.19
• 51eb465 Post-release dep version bump
• 34ff5e8 [maven-release-plugin] prepare for next development iteration
• 0b44a45 [maven-release-plugin] prepare release jackson-bom-2.18.10
• 691ec93 Prep for 2.18.10 release
• Additional commits viewable in compare view

Updates org.apache.httpcomponents.client5:httpclient5 from 5.6.2 to 5.6.4

Changelog

Sourced from org.apache.httpcomponents.client5:httpclient5's changelog.

Release 5.6.4

This maintenance release fixes SSL parameter application in the async TLS upgrade strategy.

Change Log

• BearerScheme to reject control characters in bearer token. Contributed by Javid Khan

• Corrects application of SSL parameters in the async TLS upgrade method. Contributed by Oleg Kalnichevski

Release 5.6.3

This maintenance release fixes a resource management defect in the content decompression protocol handler of the classic transport.

Change Log

• ContentCompressionExec fails to close the underlying response stream in case of an unexpected runtime or protocol exception. Contributed by Oleg Kalnichevski

• Do not call the backend when an only-if-cached request cannot be served from cache (RFC 9111 5.2.1.7). Contributed by hunghh.dev <hunghh.dev at gmail.com>

• Include the request scheme in redirect same-authority check. Contributed by Javid Khan

• Escape quotes and strip line breaks in RFC 7578 multipart parameters. Contributed by Javid Khan

• HTTPCLIENT-2426: Do not wrap a discarded (null) response body in a content decoder. Contributed by Arturo Bernal

Commits

• 36508ce HttpClient 5.6.4 release
• 59b3d2e Updated release notes for HttpClient 5.6.4 release
• c0af759 reject control characters in bearer token in BearerScheme
• 2422b6c Corrects application of SSL parameters in the async TLS upgrade method
• 66452ea Upgraded HttpClient version to 5.6.4-SNAPSHOT
• 58728b1 Updated release notes for HttpClient 5.6.3 release
• 55733f4 ContentCompressionExec fails to close the underlying response stream in case ...
• 2485ddf Do not call the backend when an only-if-cached request cannot be served from ...
• 26ece37 compare scheme in redirect same-authority check
• 8cdf6fa escape quotes and strip line breaks in rfc7578 multipart parameters
• Additional commits viewable in compare view

Updates io.projectreactor.netty:reactor-netty-http from 1.3.6 to 1.3.7

Release notes

Sourced from io.projectreactor.netty:reactor-netty-http's releases.

v1.3.7

Reactor Netty 1.3.7 is part of 2025.0.7 Release Train.

What's Changed

✨ New features and improvements

• Depend on Reactor Core v3.8.7 by @​violetagg in b0395bec56155b3c6ed9c2a4b2b81ccb857bdcf5, see release notes
• Depend on Netty v4.2.17.Final by @​violetagg in #4324
• Add WebSocket client metrics by @​LivingLikeKrillin in #4118
• Expose pending acquire latencies to custom MeterRegistrar by @​ejhnsn in #4250
• Reduce per-request CPU in the HTTP/2 connection pool by @​samueldlightfoot in #4297
• Evaluate the address supplier once in AddressUtils.updatePort by @​samueldlightfoot in #4298
• Require choice between Forwarded and X-Forwarded headers by @​violetagg in #4312
• Reuse per-connection address and byte meters in the Micrometer client metrics path by @​samueldlightfoot in #4318
• Override isH2cUpgrade in Http3Pool to always return false by @​violetagg in #4325
• Drop the redundant address parameter from the HttpClient recordRead/recordWrite/startWrite by @​violetagg in #4327
• HttpClient: Add API for configuring max decompression buffer size by @​violetagg in f4ca645c635c392d602c3cae12a4ca74697ae5fd
• Ensure NonSslRedirectHandler always does a redirect based on HOST header by @​violetagg in 626a6e742d0314c26b2fda5e943382e94afefa31
• WebSocket: Add API for configuring max decompression buffer size by @​violetagg in 6908378d586989ffceaa4c2f50f407d969016dd9

🐞 Bug fixes

• Exclude HTTP/2 connections from the pool during the PING liveness check by @​LivingLikeKrillin in #4255
• Add the liveness check to Http11EvictionPredicate by @​LivingLikeKrillin in #4256
• Skip SNI lookup completion when the channel is already closed by @​violetagg in #4266
• Do not capture caller context into pool maintenance tasks by @​hocaron in #4300
• Fix WebSocket-over-HTTP/2 server metrics gauge accounting on close by @​LivingLikeKrillin in #4302
• Fix NameResolverProvider#equals/hashCode by @​violetagg in 717381b7054376657753eaee27c6d48a19c7fe68
• Refactor TracingMapHandle to handle exceptions correctly by @​violetagg in 68561f4889a881a5e72f45e8f20c814adfa05b5f
• Update proxy handling by @​violetagg in fc98328cf0d4268c22ba17f8cad144e1408ff91f
• Refine header handling during redirects by @​violetagg in 88adf0cb35e648aa695c22d53efc8ff19c69600f
• Add back-pressure on pipelined HTTP requests by @​violetagg in dc07b9259bd1f3fb089b1658e62e9be21356e0b6
• Proxy protocol is not supported for HTTP/3 protocol by @​violetagg in 8d37581255ba2cc3cd2a0c6c5a2ece4af7040115

📖 Documentation

• Update javadoc for http-to-https redirect by @​violetagg in 74a5524c2f589faa28802790643f5b674025cdb6

New Contributors

• @​LivingLikeKrillin made their first contribution in #4118
• @​ejhnsn made their first contribution in #4250
• @​hocaron made their first contribution in #4300

Full Changelog: reactor/reactor-netty@v1.3.6...v1.3.7

Commits

• b0395be [release] Prepare and release 1.3.7
• c6c86c5 Prepare release/1.3.7 branch
• 8d37581 Proxy protocol is not supported for HTTP/3 protocol
• 6908378 Add API for configuring max decompression buffer size
• 626a6e7 Ensure NonSslRedirectHandler always does a redirect based on HOST header
• f4ca645 Add API for configuring max decompression buffer size
• dc07b92 Add back-pressure on pipelined HTTP requests
• 88adf0c Refine header handling during redirects
• 74a5524 Update javadoc for http-to-https redirect
• fc98328 Update proxy handling
• Additional commits viewable in compare view

Updates commons-codec:commons-codec from 1.22.0 to 1.22.1

Changelog

Sourced from commons-codec:commons-codec's changelog.

Apache Commons Codec 1.22.1 Release Notes

The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.22.1.

The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.

This is a feature and maintenance release. Java 8 or later is required.

Fixed Bugs

• CODEC-344: Base64.Builder.setEncodeTable(byte...) accepts invalid custom alphabets. Thanks to Ruiqi Dong, Gary Gregory.
• CODEC-340: Base58.Builder.setEncodeTable(byte...) is ignored when encoding and decoding. Thanks to Ruiqi Dong, Gary Gregory.
• CODEC-342: Base32.Builder.setEncodeTable(byte...) can create a codec that cannot decode its own output. Thanks to Ruiqi Dong, Gary Gregory.
• CODEC-343: Base32.Builder.setHexDecodeTable(boolean) sets the encode table to a decode lookup table. Thanks to Ruiqi Dong, Gary Gregory.
• CODEC-341: Base16.Builder.setEncodeTable(byte...) can create a codec that cannot decode its own output. Thanks to Ruiqi Dong, Gary Gregory.
• CODEC-339: URLCodec.encodeUrl(BitSet, byte[]) allows custom safe sets to emit URL encoding control characters. Thanks to Ruiqi Dong, Gary Gregory.
• CODEC-338: PercentCodec loses literal '+' when plusForSpace is enabled. Thanks to Ruiqi Dong, Gary Gregory.
• CODEC-337: Digest ALL reuses System.in, so only the first algorithm sees the real input (#431). Thanks to Ruiqi Dong, Gary Gregory.

•         Fix Base64.toIntegerBytes(BigInteger) for zero edge case ([#441](https://github.com/apache/commons-codec/issues/441)). Thanks to Gary Gregory.
  

•         Add messages when throwing NullPointerException. Thanks to Gary Gregory.
  

•         Add messages when throwing NullPointerException. Thanks to Gary Gregory.
  

•         StringEncoderComparator.StringEncoderComparator(StringEncoder) now fails fast on null input. Thanks to Gary Gregory.
  

Changes

•         Bump org.apache.commons:commons-parent from 98 to 103. Thanks to Gary Gregory.
  

•         Bump commons-io:commons-io from 2.21.0 to 2.22.0. Thanks to Gary Gregory.
  

For complete information on Apache Commons Codec, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Codec website:

https://commons.apache.org/proper/commons-codec/

Download page: https://commons.apache.org/proper/commons-codec/download_codec.cgi

---

Commits

• dc8f6c8 Prepare for the release candidate 1.22.1 RC1
• 8203c1c Prepare for the next release candidate
• 5647fe2 StringEncoderComparator.StringEncoderComparator(StringEncoder) now fails
• 00c27a9 Reduce vertical whitespace
• 568f2d7 Remove unused method
• 316fb15 Remove unused method
• bf6b543 Bump actions/checkout from 7.0.0 to 7.0.1
• e14cdfe Extract redundant code.
• 3351e63 Add messages when throwing NullPointerException.
• f22dab7 Update SCM tag
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions