Bump classgraph from 4.8.137 to 4.8.138

[dependabot]

Bumps classgraph from 4.8.137 to 4.8.138.

Release notes

Sourced from classgraph's releases.

classgraph-4.8.138

• Added two methods (thanks to @​FranGomezVenegas for requesting these, #608):

  • FieldInfoList ClassInfo#getEnumConstants(): returns all the enum constants of an enum class as FieldInfo objects (without loading the enum class).
  • List<Object> ClassInfo#getEnumConstantObjects(): returns all the enum constants of an enum class as objects of the same type as the enum (after loading the enum class and initializing enum constants).

• Mitigate log4j2 vulnerability CVE-2021-44228: ClassGraph does not use log4j2, but does use the built-in Java logging framework, which may be redirected to the log4j2 framework by the calling environment. To be safe, ClassGraph now builds in a protection against this critical vulnerability.

Commits

• ace4dfe [maven-release-plugin] prepare release classgraph-4.8.138
• 752c3fb Merge branch 'latest' of https://github.com/classgraph/classgraph into latest
• 1c8adca Improve test
• 04223e8 Add getEnumConstantObjects() (#608)
• 1028925 Source > Format
• e84c7df Merge pull request #611 from classgraph/dependabot/maven/io.github.toolfactor...
• 1fbc68f Fix comments and names
• 0ee47aa Fix prev checkin
• c0ea4f1 Merge branch 'latest' of https://github.com/classgraph/classgraph into latest
• f9eaae7 Mitigate log4j2 vulnerability CVE-2021-44228, if log4j is the logger
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

Merging #440 (56a2ea4) into master (5275d26) will increase coverage by 0.31%.
The diff coverage is n/a.

@@             Coverage Diff              @@
##             master     #440      +/-   ##
============================================
+ Coverage     35.10%   35.42%   +0.31%     
  Complexity      179      179              
============================================
  Files            84       84              
  Lines          2199     2199              
  Branches        205      205              
============================================
+ Hits            772      779       +7     
+ Misses         1360     1350      -10     
- Partials         67       70       +3     

Impacted Files	Coverage Δ
.../freefair/gradle/plugins/git/GitVersionPlugin.java	30.00% <0.00%> (+10.00%)	⬆️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 5275d26...56a2ea4. Read the comment docs.