Bump org.opensearch:opensearch-core from current to 2.9.0 in /buildSrc/src/testKit/thirdPartyAudit

[dependabot]

Bumps org.opensearch:opensearch-core from current to 2.9.0.

Release notes

Sourced from org.opensearch:opensearch-core's releases.

2.9.0

2023-07-13 Version 2.9.0 Release Notes

[2.9]

Added

• [SearchPipeline] Add new search pipeline processor type, SearchPhaseResultsProcessor, that can modify the result of one search phase before starting the next phase.(#7283)
• Add task cancellation monitoring service (#7642)
• Add TokenManager Interface (#7452)
• Add Remote store as a segment replication source (#7653)
• Implement concurrent aggregations support without profile option (#7514)
• Add dynamic index and cluster setting for concurrent segment search (#7956)
• Add descending order search optimization through reverse segment read. (#7967)
• [Search pipelines] Added search pipelines output to node stats (#8053)
• Update components of segrep backpressure to support remote store. (#8020)
• Make remote cluster connection setup in async (#8038)
• Add API to initialize extensions (#8029opensearch-project/OpenSearch#8029)
• Add distributed tracing framework (#7543)
• Enable Point based optimization for custom comparators (#8168)
• [Extensions] Support extension additional settings with extension REST initialization (#8414)
• Adds mock implementation for TelemetryPlugin (#7545)
• Support transport action names when registering NamedRoutes (#7957)
• Create concept of persistent ThreadContext headers that are unstashable (#8291opensearch-project/OpenSearch#8291)
• [Search pipelines] Add Global Ignore_failure options for Processors (#8373)
• Enable Partial Flat Object (#7997)
• Add jdk.incubator.vector module support for JDK 20+ (#8601)
• Introduce full support for Search Pipeline (#8613)
• Add partial results support for concurrent segment search (#8306)

Dependencies

• Bump com.azure:azure-storage-common from 12.21.0 to 12.21.1 (#7566, #7814)
• Bump com.google.guava:guava from 30.1.1-jre to 32.1.1-jre (#7565, #7811, #7807, #7808, #8402, #8400, #8401, #8581)
• Bump net.minidev:json-smart from 2.4.10 to 2.4.11 (#7660, #7812)
• Bump org.gradle.test-retry from 1.5.2 to 1.5.3 (#7810)
• Bump com.diffplug.spotless from 6.17.0 to 6.18.0 (#7896)
• Bump jackson from 2.15.1 to 2.15.2 (#7897)
• Add com.github.luben:zstd-jni version 1.5.5-3 (#2996)
• Bump netty from 4.1.91.Final to 4.1.93.Final (#7901)
• Bump com.amazonaws 1.12.270 to software.amazon.awssdk 2.20.55 (7372)
• Add org.reactivestreams 1.0.4 (7372)
• Bump com.networknt:json-schema-validator from 1.0.81 to 1.0.85 ([7968], #8255)
• Bump com.netflix.nebula:gradle-extra-configurations-plugin from 9.0.0 to 10.0.0 in /buildSrc (#7068)
• Bump com.google.guava:guava from 32.0.0-jre to 32.0.1-jre (#8009)
• Bump commons-io:commons-io from 2.12.0 to 2.13.0 (#8014, #8013, #8010)
• Bump com.diffplug.spotless from 6.18.0 to 6.19.0 (#8007)
• Bump 'com.azure:azure-storage-blob to 12.22.2 from 12.21.1 (#8043)
• Bump org.jruby.joni:joni from 2.1.48 to 2.2.1 (#8015, #8254)
• Bump com.google.guava:guava from 32.0.0-jre to 32.0.1-jre (#8011, #8012, #8107)
• Bump io.projectreactor:reactor-core from 3.4.18 to 3.5.6 in /plugins/repository-azure (#8016)
• Bump spock-core from 2.1-groovy-3.0 to 2.3-groovy-3.0 (#8122)

... (truncated)

Changelog

Sourced from org.opensearch:opensearch-core's changelog.

CHANGELOG

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning. See the CONTRIBUTING guide for instructions on how to add changelog entries.

[Unreleased 3.0]

Added

• Support for HTTP/2 (server-side) (#3847)
• Add getter for path field in NestedQueryBuilder (#4636)
• Allow mmap to use new JDK-19 preview APIs in Apache Lucene 9.4+ (#5151)
• Add events correlation engine plugin (#6854)
• Introduce new dynamic cluster setting to control slice computation for concurrent segment search (#9107)
• Implement on behalf of token passing for extensions (#8679)

Dependencies

• Bump log4j-core from 2.18.0 to 2.19.0
• Bump forbiddenapis from 3.3 to 3.4
• Bump avro from 1.11.1 to 1.11.2
• Bump woodstox-core from 6.3.0 to 6.3.1
• Bump xmlbeans from 5.1.0 to 5.1.1 (#4354)
• Bump reactor-netty-core from 1.0.19 to 1.0.22 (#4447)
• Bump reactive-streams from 1.0.3 to 1.0.4 (#4488)
• Bump jempbox from 1.8.16 to 1.8.17 (#4550)
• Update to Gradle 7.6 and JDK-19 (#4973)
• Update Apache Lucene to 9.5.0-snapshot-d5cef1c (#5570)
• Bump maven-model from 3.6.2 to 3.8.6 (#5599)
• Bump maxmind-db from 2.1.0 to 3.0.0 (#5601)
• Bump wiremock-jre8-standalone from 2.33.2 to 2.35.0
• Bump gson from 2.10 to 2.10.1
• Bump com.google.code.gson:gson from 2.10 to 2.10.1
• Bump com.maxmind.geoip2:geoip2 from 4.0.0 to 4.0.1
• Bump com.avast.gradle:gradle-docker-compose-plugin from 0.16.11 to 0.16.12
• Bump org.apache.commons:commons-compress from 1.22 to 1.23.0
• Bump org.apache.commons:commons-configuration2 from 2.8.0 to 2.9.0
• Bump com.netflix.nebula:nebula-publishing-plugin from 19.2.0 to 20.3.0
• Bump io.opencensus:opencensus-api from 0.18.0 to 0.31.1 (#7291)
• OpenJDK Update (April 2023 Patch releases) (#7344
• Bump com.google.http-client:google-http-client:1.43.2 from 1.42.0 to 1.43.2 (7928))
• Add Opentelemetry dependencies (#7543)
• Bump org.bouncycastle:bcprov-jdk15on to org.bouncycastle:bcprov-jdk15to18 version 1.75 (#8247)
• Bump org.bouncycastle:bcmail-jdk15on to org.bouncycastle:bcmail-jdk15to18 version 1.75 (#8247)
• Bump org.bouncycastle:bcpkix-jdk15on to org.bouncycastle:bcpkix-jdk15to18 version 1.75 (#8247)

Changed

• [CCR] Add getHistoryOperationsFromTranslog method to fetch the history snapshot from translogs (#3948)
• Relax visibility of the HTTP_CHANNEL_KEY and HTTP_SERVER_CHANNEL_KEY to make it possible for the plugins to access associated Netty4HttpChannel / Netty4HttpServerChannel instance (#4638)
• Migrate client transports to Apache HttpClient / Core 5.x (#4459)
• Change http code on create index API with bad input raising NotXContentException from 500 to 400 (#4773)
• Improve summary error message for invalid setting updates (#4792)
• [Remote Store] Add Segment download stats to remotestore stats API (#8718)

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

The following labels could not be found: dependabot.

[dependabot]

Superseded by #248.