Skip to content

Bump the dependencies group across 1 directory with 12 updates - #80

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/dependencies-8a32e9886a
Closed

Bump the dependencies group across 1 directory with 12 updates#80
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/dependencies-8a32e9886a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 12 updates in the / directory:

Package From To
io.jooby:jooby-bom 4.0.11 4.6.0
software.amazon.awssdk:bom 2.40.13 2.57.8
org.apache.logging.log4j:log4j-core 2.25.4 2.26.1
org.apache.logging.log4j:log4j-slf4j2-impl 2.25.3 2.26.1
org.apache.logging.log4j:log4j-iostreams 2.25.3 2.26.1
com.google.guava:guava 33.5.0-jre 33.7.2-jre
com.google.code.gson:gson 2.13.2 2.15.0
com.github.ben-manes.caffeine:caffeine 3.2.3 3.3.1
org.xerial:sqlite-jdbc 3.51.1.0 3.54.1.0
org.apache.maven.plugins:maven-compiler-plugin 3.14.1 3.16.0
io.jooby:jooby-maven-plugin 4.0.11 4.6.0
org.apache.maven.plugins:maven-shade-plugin 3.6.1 3.6.2

Updates io.jooby:jooby-bom from 4.0.11 to 4.6.0

Release notes

Sourced from io.jooby:jooby-bom's releases.

jooby 4.6.0

🛠️ Changes

  • server: don't allow to set wrong maxRequestSize #4035
  • jetty: form method incorrectly merges query string and form urlencoded/multipart body parameters #4033
  • server: allow app to set serverOptions (add it back) #4029
  • pac4j: Add defense-in-depth escaping and startup warning to DevLoginForm #4022
  • pac4j: UrlResolverImpl rewrites absolute URLs of external servers (CAS login URL) with the local host #4010
  • OtelHttpTracing is not using the same trace as Jetty or Undertow #4001
  • Request for a private security advisory #3996
  • server: call server.init after setting the server options (not before) #3995
  • camel: automatically discover org.apache.camel.spi.EventNotifier instances from service registry #3988
  • camel: dump application.conf properties into main bootstrap #3987
  • fix: Reading body() before or after form() is not consistent across a… #4034
  • context: handle IPv6 addresses in getHost() and getPort() #4030
  • assets: match If-None-Match lists and "*", and skip If-Modified-Since when If-None-Match is present #4027
  • range: a suffix range longer than the content selects all of it #4026
  • Add SSE annotation support for MVC controllers #4019
  • Fix deprecation message for JacksonModule #4016
  • Fix documentation for removed 3.x ValueConverter class #4015
  • doc: replace type names that no longer exist #4009

📊 Component Updates

Component Count Issues
pac4j 3 #4022, #4010, #3996
web-server 3 #4035, #4029, #3995
camel 2 #3988, #3987

🔗 Links & Resources

jooby 4.5.4

🛠️ Changes

  • logback 1.6.x #3985
  • persistent openapi specification #3977

🔗 Links & Resources

... (truncated)

Commits
  • 597fd85 v4.6.0
  • f2c35d0 build: upgrade handlebars-java to latest
  • 8629e31 build: version bump
  • 89edc0d server: don't allow to set wrong maxRequestSize
  • 2bccf70 Merge pull request #4034 from jooby-project/4031
  • 1ac3d88 apply review comment's:
  • 7fac361 fix: Reading body() before or after form() is not consistent across all servers
  • 28cc2d7 server: allow app to set serverOptions (add it back)
  • 8779484 context: handle IPv6 addresses in getHost() and getPort()- #4030
  • 94d2244 Merge pull request #4030 from wleeaf/host-ipv6-literal
  • Additional commits viewable in compare view

Updates software.amazon.awssdk:bom from 2.40.13 to 2.57.8

Updates org.apache.logging.log4j:log4j-core from 2.25.4 to 2.26.1

Updates org.apache.logging.log4j:log4j-slf4j2-impl from 2.25.3 to 2.26.1

Updates org.apache.logging.log4j:log4j-iostreams from 2.25.3 to 2.26.1

Updates com.google.guava:guava from 33.5.0-jre to 33.7.2-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.7.2

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.2-jre</version>
  <!-- or, for Android: -->
  <version>33.7.2-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

33.7.1

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.1-jre</version>
  <!-- or, for Android: -->
  <version>33.7.1-android</version>
</dependency>

... (truncated)

Commits

Updates com.google.code.gson:gson from 2.13.2 to 2.15.0

Release notes

Sourced from com.google.code.gson:gson's releases.

Gson 2.15.0

What's Changed

These are some of the more important changes

API addition:

Behaviour changes and bugfixes:

New Contributors

Full Changelog: google/gson@gson-parent-2.14.0...gson-parent-2.15.0

... (truncated)

Commits
  • fcd4169 [maven-release-plugin] prepare release gson-parent-2.15.0
  • 828cbe0 Update protobuf-maven-plugin dependency. (#3153)
  • 66dd98a Disable Spotless plugin before Java 21. (#3152)
  • 094f500 Fix typo in comment (#3148)
  • 881d2b5 Consistently use "Gson" instead of "GSON" as project name (#3150)
  • e2292f9 Address a few static analysis findings. (#3141)
  • 67427c4 Bump the github-actions group across 1 directory with 5 updates (#3133)
  • 845664b Correct logic for BOM detection. (#3137)
  • 216c41b Bump com.fasterxml.jackson.core:jackson-databind (#3136)
  • 854c825 Simplify key removal in LegacyProtoTypeAdapterFactoryTest (#3124)
  • Additional commits viewable in compare view

Updates com.github.ben-manes.caffeine:caffeine from 3.2.3 to 3.3.1

Release notes

Sourced from com.github.ben-manes.caffeine:caffeine's releases.

3.3.1

  • Added a workaround for ForkJoinPool queue corruption caused by resubmitting a reusable ForkJoinTask (#2021)
  • Improved JCache read performance when using access expiration
  • Fixed various minor issues found using AI audits

3.3.0

  • Improved read performance by avoiding false sharing in the fast-path check
  • Improved adaptive climber for small caches and shifting workloads
  • Fixed various minor issues found using AI audits
  • Fixed over-aggressive refresh discard (#1970)

3.2.4

  • Improved access expiration's read performance by avoiding false sharing effects caused by the timestamp update
  • Fixed head-of-line blocking of expiration queues caused by in-flight async entries (#1954)
  • Fixed various minor issues found using AI audits
  • Added ObjectInputFilter support to JCache
Commits
  • aabb242 record the prefix-cache and warm-up findings
  • 0117302 stop JCache access expiry from writing every hit
  • 27fc6b8 skip rewriting an unchanged deadline on a read
  • 7f87a7e restore coverage lost to recent fixes
  • 75e2dc0 minor polish
  • 5155a5a use nullRef() for null futures rejected by NullAway's generic inference (#2023)
  • 998978c Avoid reusing a ForkJoinTask for maintenance (fixes #2021)
  • 6999bfd add the Qwen Bailian prefix-cache traces
  • 76dcbb5 fix canary test races and misc cleanups
  • 7f46a43 pad the eviction sizes off the hit path's lines
  • Additional commits viewable in compare view

Updates org.xerial:sqlite-jdbc from 3.51.1.0 to 3.54.1.0

Release notes

Sourced from org.xerial:sqlite-jdbc's releases.

Release 3.54.1.0

Changelog

🚀 Features

sqlite

  • upgrade to sqlite 3.54.1 (1dee4e5)
  • support automatic_index and cache_spill pragmas (559581a)

🐛 Fixes

jdbc

  • quote savepoint name before interpolating into sql (140c04d)

native

  • keep the live handle when open is called on an open db (920136d)
  • bound strfilter output to the searched string bytes (87444ae)
  • release the correct critical array pointer in serialize (49e5c18)

unscoped

  • create extracted library and db copy readable by owner only (a315b4b)
  • preserve SQL null bindings for null streams (201218f)

🏎 Perf

jdbc

  • avoid cubic regex backtracking when finding primary keys (03582c2)

🔄️ Changes

jdbc

  • share sql quote escaping between metadata and savepoints (6e26d10)

🛠 Build

deps

  • bump org.graalvm.sdk:nativeimage (d9ff142)
  • bump org.graalvm.buildtools:native-maven-plugin (44d8081)
  • bump org.graalvm.buildtools:native-maven-plugin (0748a6a)
  • bump org.graalvm.sdk:nativeimage from 25.2.4 to 25.3.4.1 (04adaab)
  • bump org.graalvm.buildtools:native-maven-plugin (13a3976)
  • bump actions/setup-java from 5 to 6 (9af0d95)

deps-dev

  • bump org.mockito:mockito-core from 5.23.0 to 5.24.0 (ec7ddcd)
  • bump com.tngtech.archunit:archunit-junit5 (d5bfa71)
  • bump surefire.version from 3.6.0 to 3.6.1 (df7dbf7)
  • bump org.sonatype.central:central-publishing-maven-plugin (3ee4140)
  • bump org.codehaus.mojo:animal-sniffer-maven-plugin (c5992df)
  • bump org.codehaus.mojo:versions-maven-plugin (e54786b)
  • bump surefire.version from 3.5.6 to 3.6.0 (0062a19)
  • bump org.apache.maven.plugins:maven-compiler-plugin (29f9aff)
  • bump org.jreleaser:jreleaser-maven-plugin (3ecd1ee)

unscoped

... (truncated)

Commits
  • 2b39e1f chore(release): 3.54.1.0 [skip ci]
  • 033f6c3 chore: update native libraries
  • 1dee4e5 feat(sqlite): upgrade to sqlite 3.54.1
  • 920136d fix(native): keep the live handle when open is called on an open db
  • 87444ae fix(native): bound strfilter output to the searched string bytes
  • a315b4b fix: create extracted library and db copy readable by owner only
  • ec7ddcd build(deps-dev): bump org.mockito:mockito-core from 5.23.0 to 5.24.0
  • 201218f fix: preserve SQL null bindings for null streams
  • 77ea1b1 ci: fix maven publishing
  • 6e26d10 refactor(jdbc): share sql quote escaping between metadata and savepoints
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.14.1 to 3.16.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.16.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

3.15.0

... (truncated)

Commits
  • e7bba6e [maven-release-plugin] prepare release maven-compiler-plugin-3.16.0
  • c906809 Avoid using deprecated method CompilerConfiguration.setCompilerVersion
  • ad74fee Replace adopt-openj9 by semeru JDK distribution on GH
  • beb0eda Recompile when dependencies change (#1102)
  • a0b689e [MCOMPILER-578] Track outputs across compiler executions (#1091)
  • 2e81228 Fix incremental detection of empty sources, 3.x (#1075)
  • 2132f5b configure ATR project
  • 5992b77 Build fails when annotation processor list is empty (but present) (#1077)
  • acccef7 Bump plexusCompilerVersion from 2.16.2 to 2.17.0
  • 72bc445 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0
  • Additional commits viewable in compare view

Updates io.jooby:jooby-maven-plugin from 4.0.11 to 4.6.0

Updates org.apache.maven.plugins:maven-shade-plugin from 3.6.1 to 3.6.2

Release notes

Sourced from org.apache.maven.plugins:maven-shade-plugin's releases.

3.6.2

🐛 Bug Fixes

  • Bug: Extra JARs and Artifacts were not subjected to filtering (#785) @​cstamas

👻 Maintenance

📦 Dependency updates

Commits
  • ad8de59 [maven-release-plugin] prepare release maven-shade-plugin-3.6.2
  • 8eb19dc Drop unneeded dependencies (#788)
  • 397b2cd Drop excessive dependencies (#786)
  • eca6398 Bug: Extra JARs and Artifacts were not subjected to filtering (#785)
  • 7edce17 Update to parent POM v 47 (#781)
  • 3171a34 Mockito improvements (#783)
  • 678844b Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness (#782)
  • 73ec909 Bump org.codehaus.mojo:mrm-maven-plugin from 1.7.0 to 1.7.1 (#780)
  • 5f7a877 Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness (#778)
  • 73c5247 chore: remove junit3 reference (#762)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 19, 2026
@dependabot
Bump the dependencies group across 1 directory with 12 updates
41a6a78 
Bumps the dependencies group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [io.jooby:jooby-bom](https://github.com/jooby-project/jooby) | `4.0.11` | `4.6.0` |
| software.amazon.awssdk:bom | `2.40.13` | `2.57.8` |
| org.apache.logging.log4j:log4j-core | `2.25.4` | `2.26.1` |
| org.apache.logging.log4j:log4j-slf4j2-impl | `2.25.3` | `2.26.1` |
| org.apache.logging.log4j:log4j-iostreams | `2.25.3` | `2.26.1` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.5.0-jre` | `33.7.2-jre` |
| [com.google.code.gson:gson](https://github.com/google/gson) | `2.13.2` | `2.15.0` |
| [com.github.ben-manes.caffeine:caffeine](https://github.com/ben-manes/caffeine) | `3.2.3` | `3.3.1` |
| [org.xerial:sqlite-jdbc](https://github.com/xerial/sqlite-jdbc) | `3.51.1.0` | `3.54.1.0` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.14.1` | `3.16.0` |
| io.jooby:jooby-maven-plugin | `4.0.11` | `4.6.0` |
| [org.apache.maven.plugins:maven-shade-plugin](https://github.com/apache/maven-shade-plugin) | `3.6.1` | `3.6.2` |



Updates `io.jooby:jooby-bom` from 4.0.11 to 4.6.0
- [Release notes](https://github.com/jooby-project/jooby/releases)
- [Commits](jooby-project/jooby@v4.0.11...v4.6.0)

Updates `software.amazon.awssdk:bom` from 2.40.13 to 2.57.8

Updates `org.apache.logging.log4j:log4j-core` from 2.25.4 to 2.26.1

Updates `org.apache.logging.log4j:log4j-slf4j2-impl` from 2.25.3 to 2.26.1

Updates `org.apache.logging.log4j:log4j-iostreams` from 2.25.3 to 2.26.1

Updates `com.google.guava:guava` from 33.5.0-jre to 33.7.2-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.google.code.gson:gson` from 2.13.2 to 2.15.0
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-parent-2.13.2...gson-parent-2.15.0)

Updates `com.github.ben-manes.caffeine:caffeine` from 3.2.3 to 3.3.1
- [Release notes](https://github.com/ben-manes/caffeine/releases)
- [Commits](ben-manes/caffeine@v3.2.3...v3.3.1)

Updates `org.xerial:sqlite-jdbc` from 3.51.1.0 to 3.54.1.0
- [Release notes](https://github.com/xerial/sqlite-jdbc/releases)
- [Changelog](https://github.com/xerial/sqlite-jdbc/blob/master/CHANGELOG)
- [Commits](xerial/sqlite-jdbc@3.51.1.0...3.54.1.0)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.14.1 to 3.16.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.14.1...maven-compiler-plugin-3.16.0)

Updates `io.jooby:jooby-maven-plugin` from 4.0.11 to 4.6.0

Updates `org.apache.maven.plugins:maven-shade-plugin` from 3.6.1 to 3.6.2
- [Release notes](https://github.com/apache/maven-shade-plugin/releases)
- [Commits](apache/maven-shade-plugin@maven-shade-plugin-3.6.1...maven-shade-plugin-3.6.2)

---
updated-dependencies:
- dependency-name: com.github.ben-manes.caffeine:caffeine
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.google.guava:guava
  dependency-version: 33.7.2-jre
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.jooby:jooby-bom
  dependency-version: 4.5.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.jooby:jooby-maven-plugin
  dependency-version: 4.5.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.logging.log4j:log4j-iostreams
  dependency-version: 2.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.logging.log4j:log4j-slf4j2-impl
  dependency-version: 2.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-shade-plugin
  dependency-version: 3.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.xerial:sqlite-jdbc
  dependency-version: 3.53.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: software.amazon.awssdk:bom
  dependency-version: 2.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/dependencies-8a32e9886a branch from e63cc91 to 41a6a78 Compare November 2, 2026 23:12
@lucko

lucko commented Nov 3, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Nov 3, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 3, 2026
@dependabot
dependabot Bot deleted the dependabot/maven/dependencies-8a32e9886a branch November 3, 2026 21:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@lucko