ORC-932: Bump byte-buddy from 1.10.19 to 1.11.12

[dependabot]

Bumps byte-buddy from 1.10.19 to 1.11.12.

Release notes

Sourced from byte-buddy's releases.

Byte Buddy 1.11.12

• Always use reflection and not a JavaDispatcher when a method potentially checks the access context via a security manager.

Byte Buddy 1.11.11

• Do not pollute access context for security manager when defining classes via a method handle lookup.

Byte Buddy 1.11.10

• Added option for Gradle plugin to register adjustmentPostProcessor to manually add task dependencies.

Byte Buddy 1.11.9

• Include jdk.reflect package in default ignore matcher.
• Retain parameter names for constructor of Java record as it is done by javac.
• Throw NoSuchTypeException on non-resolved types rather then IllegalStateException.
• Weaken visibility checks for fields set by MethodCall.

Byte Buddy 1.11.8

• Fix package exposure for JavaDispatcher class when Byte Buddy is used as a module.

Byte Buddy 1.11.7

• Introduce a more complex error handler for Gradle builds in favor of strict mode.
• Include method for reading all loaded Class values of a loaded dynamic type.
• Include Byte Buddy version in module-info.
• Fix package list in module-info.

Byte Buddy 1.11.6

• Add fallback for JavaDispatcher that works on Android and other platforms that do not support dynamic class definitions.
• Make Gradle task dependency resolution more robust and configurable.
• Update ASM and support Java 18 without experimental configuration.

Byte Buddy 1.11.5

• Remove AccessController API to replace with weaved access control via AccessControllerPlugin.

Byte Buddy 1.11.4

• Add constant for Java 18
• Improve constructor resolution for Plugins.
• Add convenience method for translating TypeDescription.Generic to a builder.
• Add convenience method for resolving an annotation property from a property name.

Byte Buddy 1.11.3

• Introduce AccessControllerPlugin to weave use of AccessController only if available.
• Fix use of incorrect type when chaining InvokeDynamic.
• Better emulate visitation order of ASM when creating types.
• Avoid writing duplicate entries for submitted subtypes in sealed types.
• Better encapsulate JavaDispatcher utility.
• Add frame padding to initialization handler when redefining or rebasing a class.
• Do not assume that TypeVariables are AnnotatedElements to support Java 7 and earlier.

Byte Buddy 1.11.2

• Fixes resolution of array types for Java descriptors of JavaConstant.
• Properly process Android's version string and avoid relying on the version string where possible.

... (truncated)

Changelog

Sourced from byte-buddy's changelog.

6. August 2021: version 1.11.12

• Always use reflection and not a JavaDispatcher when a method potentially checks the access context via a security manager.

5. August 2021: version 1.11.11

• Do not pollute access context for security manager when defining classes via a method handle lookup.

4. August 2021: version 1.11.10

• Added option for Gradle plugin to register adjustmentPostProcessor to manually add task dependencies.

27. July 2021: version 1.11.9

• Include jdk.reflect package in default ignore matcher.
• Retain parameter names for constructor of Java record as it is done by javac.
• Throw NoSuchTypeException on non-resolved types rather then IllegalStateException.
• Weaken visibility checks for fields set by MethodCall.

15. July 2021: version 1.11.8

• Fix package exposure for JavaDispatcher class when Byte Buddy is used as a module.

14. July 2021: version 1.11.7

• Introduce a more complex error handler for Gradle builds in favor of strict mode.
• Include method for reading all loaded Class values of a loaded dynamic type.
• Include Byte Buddy version in module-info.
• Fix package list in module-info.

2. July 2021: version 1.11.6

• Add fallback for JavaDispatcher that works on Android and other platforms that do not support dynamic class definitions.
• Make Gradle task dependency resolution more robust and configurable.
• Update ASM and support Java 18 without experimental configuration.

19. June 2021: version 1.11.5

• Remove AccessController API to replace with weaved access control via AccessControllerPlugin.

19. June 2021: version 1.11.4

• Add constant for Java 18
• Improve constructor resolution for Plugins.
• Add convenience method for translating TypeDescription.Generic to a builder.
• Add convenience method for resolving an annotation property from a property name.

18. June 2021: version 1.11.3

• Introduce AccessControllerPlugin to weave use of AccessController only if available.

... (truncated)

Commits

• ec813ad [maven-release-plugin] prepare release byte-buddy-1.11.12
• 623719e [release] Rethrow unchecked exception from JavaModule.
• eb4874b Do not include custom exception messages when using reflection. Use reflectio...
• ca9d3ab Use reflection for security manager invocations and prefer getTargetException...
• 625d105 [maven-release-plugin] prepare for next development iteration
• 05cd0a9 [maven-release-plugin] prepare release byte-buddy-1.11.11
• 11e8100 [release] Fix unused import prior to release
• 180c376 [release] Add hint to findbugs to avoid build failure
• aaeb22e [release] Avoid escaping Byte Buddy's scope when defining a class via a metho...
• a16b532 Update release notes.
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dongjoon-hyun]

@dependabot rebase

[dongjoon-hyun]

+1, LGTM.

[dongjoon-hyun]

I landed this to branch-1.7.

cc @williamhyun since he is the release manager of Apache ORC 1.7.6.