Update all non-major dependencies

[libops-renovate]

This PR contains the following updates:

Package	Update	Change
apache-tomcat11	patch	11.0.23 → 11.0.24
apache-tomcat9	patch	9.0.119 → 9.0.120
archivesspace	patch	4.2.0 → 4.2.1
fcrepo6	patch	6.5.1 → 6.5.2
moby/buildkit	patch	v0.31.0 → v0.31.2
solr-ocrhighlighting	minor	0.9.5 → 0.10.0

---

Release Notes

archivesspace/archivesspace (archivesspace)

v4.2.1

Compare Source

Release notes for v4.2.1

This patch release contains a small number of bug fixes and improvements. It addresses several issues introduced in 4.2.0, mainly failures when trying to load records that have many linked records of specific types and the inability to start ArchivesSpace when using the embedded Derby database.

Please note that, while resolved for this release, version 4.2.1 will be the last to support this embedded database. The embedded database has always been intended only for testing purposes and not for production. Running with docker is now the supported way to get ArchivesSpace up and running with minimal requirements

Additionally, there are some very small locale file updates, a bug fix to a button color, replacements for two keyboard shortcuts that clashed with common shortcuts on Windows machines, and the addition of log rotation for Docker installs.

There are two community contributions in this release. Though MySQL is our only officially supported database, thanks to a community contribution by Will Martin, this release also restores full functionality for the bulk spreadsheet importers when using MariaDB. A community contribution from Mark Cooper updates the initialize plugin script to fix an issue that was preventing dependencies from installing upgraded versions of ArchivesSpace’s bundled gems.

Configurations and Migrations

This release includes no modifications to the configuration defaults file.

This release includes 0 new database migrations. The schema number for this release is UNCHANGED.

Other considerations (plugins etc.):

Derby based embedded Demo database deprecation

Version 4.2.1 will be the last to support the embedded derby database. The embedded database has always been intended only for testing purposes and not for production. Running with docker is now the supported way to get ArchivesSpace up and running with minimal requirements.

Plugin initializer updates

The plugin initializer has been updated to address the issue of plugins dragging newer copies of shared gems than those bundled in the core application. The updated mechanism discovers each installed plugin's transitive dependencies and bundle installs within constraints determined by versions embedded in the application war packages. The process fails if a dependency lands that isn't aligned with what core and the wars support. See [#​4054] for more details.

Community Contributions

Our thanks go out to these members of the community for their code contributions:

• Will Martin:
  • MariaDB bulk import [#​4044]
• Mark Cooper:
  • New jruby initialize plugin script [#​4054]

Total community contributions accepted: 2

JIRA Tickets and Pull Requests Completed

• PR: 4097, 4158 - ANW-2759: ANW-2759 release notes generation improvements.
• PR: 4148 - ANW-2717: ANW-2717 fix linking agents to resources on derby embedded demo db
• PR: 4155 - ANW-2816: downloading Bulk AO updater spreadsheet times out for large resources
• PR: 4127 - ANW-2706: ANW-2706 Fix Softserv-related button color bug when reorder mode auto-expand all is enabled
• PR: 4126 - ANW-2740: don't override Windows & Linux browser keyboard commands for "cut text" and "save page"
• PR: 4117: agent contact typo
• PR: 4115, 4076 - ANW-2717: fix errors on embedded demo db (derby)
• PR: 4113 - ANW-652: ANW-652 fix performance of classification show action on SUI
• PR: 4110 - ANW-2762: Classification with 400+ Linked Records Can Cause Errors "total query size exceeds limit"
• PR: 4071 - ANW-2727: ANW-2727 add docker log rotation for all services in docker
• PR: 4054: Add new jruby initialize plugin script
• PR: 4048: Update to repository processing note tool tip
• PR: 4044 - ANW-2647: ANW-2647 maria db bulk import

Total Pull Requests accepted: 11
Total Jira Tickets closed: 9

fcrepo/fcrepo (fcrepo6)

v6.5.2

Compare Source

What's Changed

• Prepare 6.5.2 on new 6.5-maintenance line (S3 backports + search perf + SDK bump) by @​Surfrdan in #​2319

Full Changelog: fcrepo/fcrepo@fcrepo-6.5.1...fcrepo-6.5.2

moby/buildkit (moby/buildkit)

v0.31.2

Compare Source

Welcome to the v0.31.2 release of buildkit!

This is a security patch release with four moderate and one low severity security fixes.

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Dawei Wei

Notable Changes

• Git source checkout from a bundle file could lead to command injection. GHSA-hw3h-2gp9-cxpv
• Possible panic when incorrect parameters sent from frontend. GHSA-qx3x-mv6r-52p6
• LLB file operation can be tricked to remove /tmp directory contents. GHSA-32pv-7hq5-qhwq
• Malicious client can bypass destination directory validation on local sources upload. GHSA-g2h8-426c-7976
• WCOW cache mount source selector resolves NTFS junctions outside of cache root. GHSA-388v-wmr2-g2v2
• Fix possible buildctl failures after successful builds over slow connhelper transports. #​6940
• Fix possible daemon crash during concurrent builds. #​6916

Dependency Changes

• github.com/tonistiigi/fsutil 0257b33 -> 30cd4fc

Previous release can be found at v0.31.1

v0.31.1

Compare Source

buildkit 0.31.1

Welcome to the v0.31.1 release of buildkit!

This is a security patch release with two low severity security fixes.

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi

Notable Changes

• Custom frontend could bypass Seccomp/AppArmor restrictions GHSA-7236-3392-c5c6
• Possible runtime DoS via unbounded group parsing GHSA-72x6-4j93-7w86

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.31.0

dbmdz/solr-ocrhighlighting (solr-ocrhighlighting)

v0.10.0: : Solr 10 compatibility, Hyphenation Fixes

Compare Source

Changed

• Added compatibility with Solr 10
• Automated tagged releases: CI now validates release metadata, publishes
  GitHub releases from the changelog, deploys versioned documentation and
  updates the Solr plugin repository metadata

Dependencies

• Updated Solr to 10.0.0 and Lucene to 10.3.2
• Updated Commons Text to 1.15.0, Commons IO to 2.22.0 and Guava to
  33.6.0-jre

Deprecated

• WIP/pre-release builds from main are no longer published to GitHub
  Releases, the documentation site or the Solr plugin repository; use tagged
  releases instead

Fixed

• Highlighting of hyphenated words when context was set to 0 lines, in this
  case we now include the line with the second part of the hyphenation on the
  next line.
• Sometimes the second part of a hyphenated word in a fragment would get
  skipped

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Only on Wednesday (* * * * 3)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[libops-renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.