[dependabot]

Bumps io.github.classgraph:classgraph from 5.0.0 to 5.0.1.

Release notes

Sourced from io.github.classgraph:classgraph's releases.

ClassGraph 5.0.1

ClassGraph 5 is an interim release, only intended to support the use of ClassGraph on JDK 17 to 24. Upgrade to ClassGraph 6 as soon as you can run your code on JDK 25 or newer. ClassGraph 5.0.1 has the same changes as ClassGraph 6.0.1.

Changes since 5.0.0

• A WAR that bundles ClassGraph now deploys on WildFly (#952). Each jar's Dependencies manifest header named the other ClassGraph libraries. WildFly requires every module named there to be installed in the server, so a WAR with the jars in WEB-INF/lib failed to deploy with ModuleNotFoundException. The header now lists only the JDK modules that each library requires. Nothing changes when ClassGraph is installed as WildFly server modules, since WildFly then takes the links between modules from module.xml.
• New classgraph-bom bill of materials (#949). It pins the five ClassGraph artifacts to one version, for import into <dependencyManagement> or as a Gradle platform(). A project that depends on a single ClassGraph artifact already gets matching versions of the others, so the BOM is only needed by a project that depends directly on several ClassGraph artifacts, or whose other dependencies bring in a ClassGraph artifact at another version.
• Kotlin now warns when code tries to modify a returned list (#948). The lists that ClassGraph returns were always unmodifiable, but Kotlin sees them as MutableList. Every mutator of the result lists is now @Deprecated, which Kotlin reports as a warning, and collection return types are annotated with JetBrains @Unmodifiable. reversed() on a result list now returns an unmodifiable copy: the default List.reversed() view silently returned false for some no-op mutations instead of throwing UnsupportedOperationException.
• Faster direct annotation queries (#947, contributed by @​freya022). getDirectAnnotationInfo() and ClassInfo.getDirectAnnotations() no longer find all meta-annotations and inherited annotations first and then filter them out. The results and their order are unchanged.
• The Javadoc was revised throughout for clarity.

Getting it

<dependency>
    <groupId>io.github.classgraph</groupId>
    <artifactId>classgraph</artifactId>
    <version>5.0.1</version>
</dependency>

Commits

• 213499f [maven-release-plugin] prepare release classgraph-5.0.1
• 5ed7608 Let a WAR that bundles the jars deploy on WildFly (#952)
• b297569 Succinctness, clarity, and relevancy pass over all Javadoc
• dcba751 Reject no-op mutations through reversed(); annotate the views (#948)
• 7613d50 Deprecate the mutators of the result lists (#948)
• 1580dee Fix the CI exports check, broken since #948
• 016751b Add a classgraph-bom bill of materials (#949)
• 3c25bbf Annotate collection return types with @​Unmodifiable (#948)
• 4c6e62f Get direct annotations without finding meta-annotations (#947)
• 751646b Assert that the copied class file exists in Issue420Test
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
io.github.classgraph:classgraph	[>= 6.a, < 7]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)