Skip to content

Bump com.azure:azure-sdk-bom from 1.2.38 to 1.3.0 in /services/hanke-service#1129

Closed
dependabot[bot] wants to merge 1155 commits intodevfrom
dependabot/gradle/services/hanke-service/dev/com.azure-azure-sdk-bom-1.3.0
Closed

Bump com.azure:azure-sdk-bom from 1.2.38 to 1.3.0 in /services/hanke-service#1129
dependabot[bot] wants to merge 1155 commits intodevfrom
dependabot/gradle/services/hanke-service/dev/com.azure-azure-sdk-bom-1.3.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Oct 6, 2025

Bumps com.azure:azure-sdk-bom from 1.2.38 to 1.3.0.

Commits
  • a0f8333 [maven-release-plugin] prepare release v1.3.0
  • fc7ca52 Update VerifyNetworkPeeringWithNetworkWatcher.java
  • 5e38f06 Rename authorization -> locks
  • aceddc3 Expose refreshInstanceViewAsync in VirtualMachineScaleSetVM (#1901)
  • 9f30395 Virtual Network Gateway samples (#1923)
  • 2cdc188 Add locks manager stub (#1922)
  • 254c4e4 Merge pull request #1915 from jianghaolu/prwork
  • d46907e Resolve merge conflict
  • 2100d2a Merge branch 'master' of github.com:Azure/azure-sdk-for-java into prwork
  • 1de40d8 Initial check in for FunctionApp deployment slots. (#1130)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

corvidian and others added 30 commits September 5, 2024 09:14
Use `TransactionalEventListener` in all emails to send them after the
database transaction has been closed. Sending the emails seems to be
taking a while in production, so keeping the transaction active while
the email is being sent can lead to problems.

There were cases in production where two application updates were sent
back-to-back - probably because the user skipped the attachments page
instinctively - which caused errors because the second update didn't see
the database changes the first one had made, so it tried to create a
second version of the same user.

This isn't a perfect solution for that problem, but keeping the
transaction short should mitigate the problem.

One of the side-effects of the problem was that the notification email
for being added to an application was sent twice. This should be
completely solved, since the second update failed inside the
transaction, so the email event will not be processed.

Also, add some extra logging to sending the emails, so we know how long
it takes.
…service (#805)

Bump org.springframework.boot in /services/hanke-service to 3.3.3

Logback access needs to be upgraded to 2.0 to work with Spring Boot 3.3.
logstash-logback-encoder needs to be upgraded to 8.0 to work with
logback-access 2.0.

Fix dependency conflict between logback-access 2.0 and Spring Boot 3.3
by excluding tomcat dependencies from logback-access.

Disable GDPR API when running with `./gradlew bootRun`. Otherwise, it
wouldn't run unless the gdpr-api-tester was also running.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Topias Heinonen <topias.heinonen@gofore.com>
Create a new table and entity for storing past report events for
operational condition and work finished dates.

Save a new event in the DB when the user reports an operational
condition date.

Return the events in the API with excavation notifications but not with
cable reports.

Add hakemustunnus to the saved valmistumisilmoitus. We don't need the
hakemustunnus at this time, but it feels like something we might need
and it's something that's hard or impossible to deduce afterwards.
#814)

When creating a new johtoselvitys without existing hanke, the phase of generated hanke is set to RAKENTAMINEN. Also, when creating new johtoselvityshakemus or kaivuilmoitus for an existing hanke, the phase of the hanke is set to RAKENTAMINEN if not already set.
Send a notification email to all contacts when kaivuilmoitus is approved in operational condition.
Send an email notification to all contacts when a kaivuilmoitus enters 'finished' state
In applications, the registry key can be either a company key (y-tunnus)
or a personal identification code (henkilötunnus). Rename the internal
values to registry key to reflect this.

The API already uses registry key, so it doesn't need to be changed.

Also, reduce duplication in PDF tests.
Make HakemusService return domain objects instead DTOs. Returning DTOs
from services violates the separation of concerns between services and
controllers.
Add the `registryKeyHidden` field to all hakemus responses where
customer information is available. The value is true when the customer
is of type person or other and has a non-null `registryKey`. When
registryKeyHidden is true, overwrite the registry key with a null value.
Add the `registryKeyHidden` field to `CustomerRequest`. The value is
read as false if it's null or missing from the request JSON. The value
and the registry key are validated to be acceptable.

The logic for updating the registry key or keeping the old value will be
added later in a separate PR. Anything related to invoicing customers
will be added later as well.

Also, make validation return only unique error paths.
Also, refactor hakemus tests to use `HakemusBuilder.save()` instead of
`.saveEntity()` and a separate load.
When receiving a valid GDPR request to delete a user, clear the
`kutsujaId` column of any users the deleted user so the foreign key
reference doesn't stop the deletion.

Do this separately for the two cases:
- There are only unidentified users in a hanke besides the deleted
  user, so the whole hanke is deleted.
- There are identified and/or unidentified users in the hanke, so only
  the requested user is removed.

When a user requests their information should be deleted from Haitaton,
being an inviter to another user is not a valid reason to stop the
information from getting deleted.
Add an API for reporting the date the work on an excavation is finished.
The date is passed on to Allu. The report event is also stored in the
local database.

Since the functionalities of reporting the work being in operational
condition and reporting work finished are so similar, the new API uses a
lot of the same implementation, refactored to take the type of
completion (operational condition or work finished) as a parameter.
Send an email whenever the status of an application goes to
WAITING_INFORMATION, meaning that a new information request
(täydennyspyyntö) has been made in Allu. The email is sent to the
contacts on the application that have permission to edit the
application, i.e. respond to the request.
Add an optional body for the application send API. The body can contain
the receiver of a paper copy of the decision for the application.

The receiver is saved to the application data and returned from the
application APIs. Adding the receiver is written as an update to audit
logs.

The receiver can be set only with the send API, it can't be modified
with a regular PUT update.
When the orderer asks for a paper of the decision to be sent to an
address, send that address to Allu. The address is added to the form
data PDF that's sent to Allu after every application.

To make the information easy to notice, add a system comment saying that
a paper copy has been requested and that the address can be found in the
PDF.

Also,
- Change the customer headers in johtoselvityshakemus PDF to singular,
  since there can be only one customer for each role.
- Fix the `as` keyword in the Dockerfiles. It should be capitalized.
There are a lot of potential cycle paths in parks. We don't know if all
of them are really cycle paths, but many of them are. We add them at
index value 1 so the users know there might be a cycle path within the
project area.
dependabot Bot and others added 15 commits September 18, 2025 06:31
…ke-service (#1102)

* Bump com.github.librepdf:openpdf in /services/hanke-service

Bumps com.github.librepdf:openpdf from 2.0.3 to 3.0.0.

---
updated-dependencies:
- dependency-name: com.github.librepdf:openpdf
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* Java 17 -> Java 21 (#1114)

* Renamed package com.lowagie to org.openpdf

* Java 17 --> Java 21

* New email generated email templates

* Changed deprecated Locale construction

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Teemu Hiltunen <teemu.hiltunen@gofore.com>
…service (#1117)

* Bump org.springframework.boot in /services/hanke-service

Bumps [org.springframework.boot](https://github.com/spring-projects/spring-boot) from 3.5.5 to 3.5.6.
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.5...v3.5.6)

---
updated-dependencies:
- dependency-name: org.springframework.boot
  dependency-version: 3.5.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Fixed deleteBy returning entity instead of int

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Teemu Hiltunen <teemu.hiltunen@gofore.com>
…ices/hanke-service (#1119)

* Bump com.squareup.okhttp3:mockwebserver in /services/hanke-service

Bumps [com.squareup.okhttp3:mockwebserver](https://github.com/square/okhttp) from 4.12.0 to 5.1.0.
- [Changelog](https://github.com/square/okhttp/blob/master/CHANGELOG.md)
- [Commits](square/okhttp@parent-4.12.0...parent-5.1.0)

---
updated-dependencies:
- dependency-name: com.squareup.okhttp3:mockwebserver
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* Use mockwebserver3

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Teemu Hiltunen <teemu.hiltunen@gofore.com>
HAI-3601 Added new ApplicationStatus
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 6, 2025
umeetiusbaar and others added 3 commits October 7, 2025 12:27
* Return an error HAI0006 when the session is terminated due to backchannel-logout. In this case UI will know about it and can log out also.
# Description

Set CI workflow

### Jira Issue: 


[PLATTA-6702](https://helsinkisolutionoffice.atlassian.net/browse/PLATTA-6702)

## Type of change

- [ ] Bug fix 
- [ ] New feature 
- [ ] Other

# Instructions for testing
Please describe tests how this change or new feature can be tested.

# Checklist:

- [ ] I have written new tests (if applicable)
- [ ] I have ran the tests myself (if applicable)
- [ ] I have made necessary changes to the documentation, link to
confluence
 or other location: 

# Other relevant info
Please describe here if there is e.g. some requirements for this change
or
 other info that the tester/user needs to know.

[PLATTA-6702]:
https://helsinkisolutionoffice.atlassian.net/browse/PLATTA-6702?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ
@umeetiusbaar
Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps [com.azure:azure-sdk-bom](https://github.com/azure/azure-sdk-for-java) from 1.2.38 to 1.3.0.
- [Release notes](https://github.com/azure/azure-sdk-for-java/releases)
- [Commits](Azure/azure-sdk-for-java@azure-sdk-bom_1.2.38...v1.3.0)

---
updated-dependencies:
- dependency-name: com.azure:azure-sdk-bom
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/gradle/services/hanke-service/dev/com.azure-azure-sdk-bom-1.3.0 branch from 92344e8 to f274f96 Compare October 8, 2025 12:05
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud Bot commented Oct 8, 2025

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Oct 9, 2025

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/gradle/services/hanke-service/dev/com.azure-azure-sdk-bom-1.3.0 branch October 9, 2025 09:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants