Bump classgraph from 4.8.94 to 4.8.107

[dependabot]

Bumps classgraph from 4.8.94 to 4.8.107.

Release notes

Sourced from classgraph's releases.

classgraph-4.8.107

Fix classloader detection for TomEE JAX-RS endpoints (#515, thanks to @​Restage for detailed assistance in debugging this weird issue!).

classgraph-4.8.106

• Support TomEE classloaders for JAX-RS endpoints (#515, thanks to @​Restage for the request)
• Don't try reading user.dir (the current directory) unless it's on the classpath, since some security environments can't read the current directory (#520, thanks to @​elkman for the bug report).

classgraph-4.8.105

• Fix potential NPE in verbose logging
• Fix for zipfiles between 2GB and 4GB in size, when a zip entry's start position was past the 2GB point in the file (#514, thanks to @​cwmccann for the bug report)

classgraph-4.8.104

Improved verbose logging to include types of methods and fields.

Added a couple of missing methods to ClassInfoList for GraphViz visualization of inter-class dependency graphs.

classgraph-4.8.103

Fixed issue with duplication of automatic package roots (e.g. myjar.jar!/BOOT-INF/classes/BOOT-INF/classes/path/to/resource). (#505, thanks to @​michael-simons for the bug report and reproducer code.)

Also fixed an issue where closing the InputStream returned by Resource#open() wasn't marking the Resource as closed (which meant the resource couldn't be opened a second time).

classgraph-4.8.102

Further improvements in robustness to invalid type signatures that may be generated by the Scala compiler. (#495, thanks to @​jbracker.)

classgraph-4.8.101

Made type signature parsing more robust to errors -- the Scala compiler can generate illegal type signatures. (#495, thanks to @​jbracker for the report.)

classgraph-4.8.99

• Fixed parsing of type parameters and type variables in Scala (these can contain a $ character in Scala, but you don't see that in Java). (#495, thanks to @​jbracker for the report and for submitting a minimal testcase.)
• Fixed a couple of possible exceptions that could be thrown when parsing type annotations for type descriptors.

classgraph-4.8.98

Fix NPE in hashCode() and equals() methods of TypeArgument (#491, thanks to @​Tagakov for the fix!).

classgraph-4.8.97

Small adjustment to previous release -- remove ClassTypeSignature#getTypeAnnotationInfo() and MethodTypeSignature#getTypeAnnotationInfo() (but leave TypeSignature#getTypeAnnotationInfo() in place), since classes and methods never have type annotations -- any type annotations are attached to their type signature components (e.g. the return type of a method or the type parameters of a generic class).

classgraph-4.8.96

• Added support for type annotations (#402), e.g. Outer.Middle<@A Foo.@B Bar>.Inner<@D String @C []> field (#402, thanks to @​jbrower for the feature request). This is a major new capability, which was complicated to implement -- please report any issues you find with this.
  • To read type annotations for FieldInfo, MethodInfo or ClassInfo, call .getTypeSignatureOrTypeDescriptor() to get a TypeSignature object, then call getTypeAnnotationInfo() on the TypeSignature or one of its components to get an AnnotationInfoList of any type annotations on the type.
• Made several changes to the behavior of toString() methods. (Do not depend upon toString() output never changing.)
  • Class name nesting separators for inner classes are now '.' rather than '$', i.e. Java program syntax x.y.z.X.Y.Z is used, rather than filename syntax x.y.z.X$Y$Z. Using a dot makes more sense with type annotations: x.y.z.X.@A Y.@B Z. (There is an exception to this for anonymous inner classes, e.g. x.y.z.X$1.)
  • ClassInfo#toString now prefixes classes with any class annotations that are present.
• Most objects now have a toStringWithSimpleNames() variant of toString() that renders the object to a string using the simple name of any classes rather than the fully-qualified name (i.e. excluding package prefixes and outer classes).

classgraph-4.8.95

• Expose package-private method MethodTypeSignature#getTypeParameters for getting method type parameters, e.g. T in void <T> doSomething() (#490, thanks to @​lastrix for the request)

Commits

• 5f78024 [maven-release-plugin] prepare release classgraph-4.8.107
• 4744411 Improve logging
• e8728ac Use IdentityHashMap for all maps and sets (#515)
• 6628929 Use IdentityHashMap for all maps and sets (#515)
• abe57d4 Add comment
• c351949 Code > Cleanup
• d3ffcb8 Source > Format
• 5028f45 Add entry to ClassLoaderHandlerRegistry (#515)
• 56c96cf Update comments
• c7d4e14 Remove (probably) unnecessary code
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #47.