Bump io.github.classgraph:classgraph from 4.8.154 to 4.8.184

[dependabot]

Bumps io.github.classgraph:classgraph from 4.8.154 to 4.8.184.

Release notes

Sourced from io.github.classgraph:classgraph's releases.

classgraph-4.8.184

• Fix #919 -- thanks to @​aurimasniekis
• Fix #920 via #921 -- thanks to @​chubert-ch

classgraph-4.8.183

• Fixed some build issues.

classgraph-4.8.182

• Dropped support for JDK 7 (since JDK 7 is no longer supported by javac as of JDK 20).
• Dropped support for JVM-Driver for overcoming strong encapsulation in problematic classloaders (Narcissus is still supported).
• Fix broken module declaration (#923, #922, #911).

classgraph-4.8.181

Fixes:

• #906 (classloader delegation order issue)
• #896/#907 (JBoss/WildFly -- exploded jars not being found -- regression)

classgraph-4.8.180

Stops showing this warning on JDK 24+ (#899):

WARNING: A terminally deprecated method in sun.misc.Unsafe has been called
WARNING: sun.misc.Unsafe::invokeCleaner has been called by nonapi.io.github.classgraph.utils.FileUtils (file:/home/zakkak/.m2/repository/io/github/classgraph/classgraph/4.8.179/classgraph-4.8.179.jar)
WARNING: Please consider reporting this to the maintainers of class nonapi.io.github.classgraph.utils.FileUtils
WARNING: sun.misc.Unsafe::invokeCleaner will be removed in a future release

Downside: ClassGraph#enableMemoryMapping() is disabled for now on JDK 24+ (this was not enabled by default).

Memory mapping wasn't that much faster than the default of standard NIO file access, so this should not impact performance much, and the impact should be limited to a small number of users.

ClassGraph version 5 should support memory management again (but there is no timeline for when that will be released).

classgraph-4.8.179

Fixes URL generation on Windows (uses file:/// rather than file:/) -- #888. Thanks to @​cowwoc for the fix, #889.

classgraph-4.8.178

Fixes classpath finding on Quarkus 3.16 (which changed how the classloader works, #891). Thanks to @​michael-simons for the fix!

classgraph-4.8.177

Throw IllegalStateException rather than NPE if the user tries to access a resource after the ScanResult has been closed (#885, thanks to @​sebthom for reporting).

classgraph-4.8.176

Add synchronized block around API methods that have side effects, to make them threadsafe (#883, thanks to @​inphonetic).

classgraph-4.8.175

Merged two PRs from @​freya022 (thanks!):

• #878 (Store annotation getters of ClassInfo and MethodInfo)
• #879 (Catch NoClassDefFoundError when loading methods)

... (truncated)

Commits

• 49a64e7 Bump version number
• ef5c888 Merge branch 'latest' of https://github.com/classgraph/classgraph into latest
• 11cd1aa Probably fix #916
• b42e9b8 Merge pull request #919 from aurimasniekis/latest
• 4024fbf Build fix
• 6f60747 Bump minimum JDK version to 8
• 1534463 Remove EOL JVM-Driver support (Narcissus is still supported)
• f329d65 Remove EOL JVM-Driver support (Narcissus is still supported)
• f1b1a4f Update version number
• 4d94192 feat(scan): propagate ScanResult to module and package annotations
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, java. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.