Bump com.helger.commons:ph-commons-parent-pom from 12.3.5 to 12.4.0

[dependabot]

Bumps com.helger.commons:ph-commons-parent-pom from 12.3.5 to 12.4.0.

Release notes

Sourced from com.helger.commons:ph-commons-parent-pom's releases.

v12.4.0

• ph-security no longer requires BouncyCastle at runtime - the ph-bc dependency was changed from optional to test scope (thanks to @​gregjotau for phax/ph-commons#57). The two remaining linkages were replaced: the "CRL Distribution Points" certificate extension is now decoded by the new package private CRLDistributionPointParser, a deliberately strict DER parser for exactly that extension (RFC 5280, section 4.2.1.13), and EOCSPResponseStatus uses the numerical values of RFC 6960, section 4.2.1 directly instead of importing them from BouncyCastle. The public API, the returned CRL URLs, the CRL caching and the revocation check implementation are all unchanged, and applications are of course still free to register the BouncyCastle provider via ph-bc.
• Incompatible change: CRLHelper.getAllDistributionPoints (X509Certificate) now throws an UncheckedIOException for a "CRL Distribution Points" extension that is not valid DER. BouncyCastle additionally accepted a few BER encodings - e.g. the indefinite length form or trailing data after the extension - and reported structural problems as IllegalArgumentException. RFC 5280 requires certificate extensions to be DER encoded, so such certificates are now rejected instead of guessed.
• The revocation check no longer lets a failure to decode the "CRL Distribution Points" extension escape from RevocationCheckBuilder.build (). It is now handled like a failed CRL download, so the result is ERevoked.UNKNOWN ("the revocation status cannot be determined") instead of an exception.
• Added the constant CHttpHeader.REPORTING_ENDPOINTS for the Reporting-Endpoints HTTP response header of the Reporting API. It declares the named endpoints that the CSP report-to directive (see CSPDirective.createReportTo (String)) refers to.
• Added a builder for the Permissions-Policy HTTP response header in the new package com.helger.http.permissionspolicy, modelled after the existing CSP builder. PermissionsPolicy collects an arbitrary number of PermissionsPolicyDirective objects and PermissionsPolicy.getAsString () emits them comma separated, ready to be used as the value of CHttpHeader.PERMISSIONS_POLICY. PermissionsPolicyAllowList builds the allow list of a single directive - the wildcard * via setAll (), the empty list () that disables a feature everywhere, self, src and quoted origins via addOrigin (String); the shorthands createNone (), createAll () and createSelf () cover the most common cases. PermissionsPolicyDirective offers a static factory method for each of the 50 directives currently listed on https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Permissions-Policy (e.g. createGeolocation (...) or createPictureInPicture (...)), and additionally supports the optional per-directive reporting endpoint via getWithReportTo (String). Note that - contrary to CSP - an empty allow list is meaningful and is therefore emitted as geolocation=(), whereas a directive without any value at all is silently skipped.
• Added the new package com.helger.collection.paging in ph-collection, containing a data store independent parameter object for paged and sorted queries. SortField is a single logical field name plus an ESortOrder, IPagingSpec/PagingSpec combine a 0-based start index, a maximum count (both of type long; all count values < 0 mean "no limit") and an ordered list of SortField objects. The intention is that a query API takes a single IPagingSpec parameter, so that it does not need to be extended whenever another paging or sorting aspect is needed. Deliberately no assumption is made about the underlying data store - the mapping of a field name onto a database column, a document field or a Comparator is up to the caller. PagingHelper.getPage (...) applies a specification onto an in-memory collection, as the fallback for all data stores that cannot do it natively. It never modifies the source collection.
• Added the new method AbstractMapBasedWALDAO.getAllPaged (Predicate, boolean, IPagingSpec, Comparator) that applies a paging specification onto the contained items, as the in-memory implementation of a paged query.

What's Changed

• Remove ph-security runtime dependency on ph-bc by @​gregjotau in phax/ph-commons#57
• Added header by @​phax in phax/ph-commons#58

New Contributors

• @​gregjotau made their first contribution in phax/ph-commons#57

Full Changelog: phax/ph-commons@ph-commons-parent-pom-12.3.5...ph-commons-parent-pom-12.4.0

Commits

• ad005f3 [maven-release-plugin] [skip ci] prepare release ph-commons-parent-pom-12.4.0
• 2d97bc3 Copy on demand only
• 8048cdc Extended API
• fe73139 Formatted
• 1a34f1c Added paging utility classes
• 4db9c32 Added header (#58)
• cfa2abf Next is 12.4.0
• 9361f9b Cleansing
• 8acb17e Some #57 post-processing
• c87e2f3 Remove ph-security runtime dependency on ph-bc (#57)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)