Skip to content

Bump the maven-dependencies group with 6 updates #938

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
dependabot wants to merge 1 commit into from
Closed

Bump the maven-dependencies group with 6 updates #938

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 1, 2025 •
edited
Loading

Bumps the maven-dependencies group with 6 updates:

Package From To
io.grpc:grpc-bom 1.75.0 1.76.0
org.junit:junit-bom 5.14.0 6.0.1
com.github.javaparser:javaparser-core 3.27.0 3.27.1
com.google.protobuf:protobuf-java 4.32.1 4.33.0
com.puppycrawl.tools:checkstyle 10.26.1 12.1.1
org.apache.maven.plugins:maven-dependency-plugin 3.8.1 3.9.0

Updates io.grpc:grpc-bom from 1.75.0 to 1.76.0

Release notes

Sourced from io.grpc:grpc-bom's releases.

v1.76.0

Bug Fixes

  • xds: ClusterResolverLb has been converted to use XdsDepManager, which finishes the changes for gRFC A74 xDS Config Tears. This change should resolve some unnecessary reconnections introduced in v1.75.0 when using weighted_round_robin and maybe other policies.
  • netty: Remove Netty version detection since grpc-netty-shaded can't reliably determine its Netty version when multiple copies of Netty are present (even when shaded). This fixes the resurfacing of the Netty 4.1.111 corruption fixed in 1.65.0. That version fixed grpc-netty, but v1.75.0 upgraded grpc-netty-shaded to Netty 4.1.111 and exposed the Netty version detection problem. This fixes corruption, so the error messages range wildly, but one of them is "RESOURCE_EXHAUSTED: gRPC message exceeds maximum size"
  • compiler: A fix has been implemented for the blockingV2 stub to mangle generated method names that conflict with java.lang.Object methods.
  • servlet: A race condition in AsyncServletOutputStreamWriter has been fixed to prevent threads from getting stuck.
  • servlet: An issue where AsyncContext.complete() was called multiple times, causing an IllegalStateException, has been resolved.
  • binder: The REMOTE_UID is now required to hold the exact UID passed to the SecurityPolicy.
  • binder: The server will now only accept post-setup transactions from the authorized server UID.
  • util: AdvancedTlsX509TrustManager now errors with a message to say that files don’t exist instead of the previous “Files were unmodified before their initial update. Probably a bug.”
  • android: A fix has been implemented for network change handling on API levels below 24.

Improvements

  • api: Allocations of Attributes.Builder have been reduced. This mostly benefits attributes.toBuilder(), but that’s not expected to be visible in regular workloads.
  • api: An empty array allocation in LoadBalancer.CreateSubchannelArgs.Builder has been avoided. It is a small optimization and is not expected to have any performance impact.
  • servlet: A configurable methodNameResolver has been added to configure the mapping from servlet request paths to gRPC method name
  • servlet: Avoid a race by increasing the AsyncContext timeout by 5 seconds. The gRPC Context timeout should trigger first
  • xds: Pretty-print envoy.service.discovery.v3.Resource in debug logs
  • bazel: The java/proto rules from rules_java/rules_proto are now used instead of native rules.
  • bazel: Unnecessary direct build dependencies were removed from some targets
  • netty: Support for the BCJSSE provider has been added in GrpcSslContexts.
  • netty: Huffman coding in server response headers has been disabled; it was already disabled for client request headers
  • netty: Include allow header for HTTP response code 405
  • okhttp: Include allow header for HTTP response code 405
  • binder: Error descriptions for ServiceConnection callbacks have been improved
  • binder: Apps can now call SecurityPolicy.checkAuthorization() by PeerUid.

New Features

  • stub: Trailers are now propagated in StatusException when thrown by BlockingClientCall.
  • compiler: Support for macOS aarch64 with a universal binary has been added.
  • opentelemetry: grpc.subchannel.* metrics as described in gRFC A94 OTel metrics for Subchannels have been added. grpc.disconnect_error will show as “unknown” until transports implement support
  • binder: A NameResolver for Android's intent: URIs has been introduced.
  • binder: A basic SocketStats with just the local and remote addresses has been added for channelz.

Documentation

  • SECURITY.md: The documentation now describes how to use gcompat with LD_PRELOAD for Alpine.
  • examples: The documentation now explains Bazel BCR releases and the git_override option.

Dependencies

  • Upgraded Guava version to 33.4.8.
  • The org.apache.tomcat:annotations-api dependency has been removed from the examples.

Thanks to

@JoeCqupt

... (truncated)

Commits
  • d0db129 Bump version to 1.76.0
  • aa672ca Update README etc to reference 1.76.0
  • 70b7249 netty: Unconditionally disable adaptive cumulator (#12390)
  • f89d1d8 api: remove nullable from StatusOr value methods (#12338)
  • 040665f examples: Explain Bazel BCR releases and git_override option
  • 4995700 xds: Remove verify TODO for onResult2 error status
  • afe7222 SECURITY.md: Mention gcompat for Alpine (#12365)
  • 1a7042a android: fix network change handling on API levels < 24
  • 8f0db07 api: Avoid allocating empty array in LoadBalancer (#12337)
  • 0c179e3 xds: Convert ClusterResolverLb to XdsDepManager
  • Additional commits viewable in compare view

Updates org.junit:junit-bom from 5.14.0 to 6.0.1

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 6.0.1 = Platform 6.0.1 + Jupiter 6.0.1 + Vintage 6.0.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0...r6.0.1

JUnit 6.0.0 = Platform 6.0.0 + Jupiter 6.0.0 + Vintage 6.0.0

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r5.14.0...r6.0.0

JUnit 6.0.0-RC3 = Platform 6.0.0-RC3 + Jupiter 6.0.0-RC3 + Vintage 6.0.0-RC3

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r6.0.0-RC2...r6.0.0-RC3

JUnit 6.0.0-RC2 = Platform 6.0.0-RC2 + Jupiter 6.0.0-RC2 + Vintage 6.0.0-RC2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0-RC1...r6.0.0-RC2

JUnit 6.0.0-RC1 = Platform 6.0.0-RC1 + Jupiter 6.0.0-RC1 + Vintage 6.0.0-RC1

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r6.0.0-M2...r6.0.0-RC1

JUnit 6.0.0-M2 = Platform 6.0.0-M2 + Jupiter 6.0.0-M2 + Vintage 6.0.0-M2

See Release Notes.

... (truncated)

Commits

Updates com.github.javaparser:javaparser-core from 3.27.0 to 3.27.1

Release notes

Sourced from com.github.javaparser:javaparser-core's releases.

javaparser-parent-3.27.1

Changed

Fixed

Developer Changes

Uncategorised

❤️ Contributors

Thank You to all contributors who worked on this release!

Changelog

Sourced from com.github.javaparser:javaparser-core's changelog.

Version 3.27.1

issues resolved

Changed

Fixed

Developer Changes

Uncategorised

❤️ Contributors

Thank You to all contributors who worked on this release!

Commits
  • b87bb5d Migration to Central Publisher Portal 3 - Adding required properties
  • 9897582 Migration to Central Publisher Portal 3 - Plugin declaration issue
  • 0ab2944 Migration to Central Publisher Portal 3 - Artifact exclusion issues (try anot...
  • f83857f Migration to Central Publisher Portal 3 - Artifact exclusion issues
  • 92b44d3 Migration to Central Publisher Portal 3 - Configuration issues
  • 532ac86 Migration to Central Publisher Portal 3 - excludes artifacts and resolves mav...
  • 26f063a Migration to Central Publisher Portal 2
  • 60c8cd4 Migration to Central Publisher Portal
  • 0bcf677 [maven-release-plugin] prepare release javaparser-parent-3.27.1
  • 387ad84 update readme
  • Additional commits viewable in compare view

Updates com.google.protobuf:protobuf-java from 4.32.1 to 4.33.0

Commits

Updates com.puppycrawl.tools:checkstyle from 10.26.1 to 12.1.1

Release notes

Sourced from com.puppycrawl.tools:checkstyle's releases.

checkstyle-12.1.1

Checkstyle 12.1.1 - https://checkstyle.org/releasenotes.html#Release_12.1.1

Bug fixes:

#17975 - Incorrect encoding in non-English properties files causing garbled characters in localized messages #17681 - Google style config and formatter differ on blank line separation #3110 - some messages are still hardcoded in english

checkstyle-12.1.0

Checkstyle 12.1.0 - https://checkstyle.org/releasenotes.html#Release_12.1.0

New:

#16836 - New check: HexLiteralCase, Hexadecimal literals should use upper case letters A-F

... (truncated)

Commits
  • d902be8 [maven-release-plugin] prepare release checkstyle-12.1.1
  • b2ff396 doc: release notes for 12.1.1
  • 8c87a5c Issue #17975: Standardize the properties files to UTF-8
  • bbf23fc Issue #17882: add Javadoc for CUSTOM_BLOCK_TAG of JavadocCommentsTokenTypes t...
  • d13e710 Issue #17882: Update SEE_BLOCK_TAG to new format of AST print
  • a65b39c Issue #17487: Add importOrder
  • 37d1206 Issue #17939: Wrap AtclauseOrder properties table to prevent horizontal scrol...
  • c2fe3c4 Issue #17681: Fix multiple blank line separation
  • e23179b Issue #10086: Add profile to pitest-misc
  • a673b83 dependency: bump actions/upload-artifact from 4 to 5
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-dependency-plugin from 3.8.1 to 3.9.0

Release notes

Sourced from org.apache.maven.plugins:maven-dependency-plugin's releases.

3.9.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

... (truncated)

Commits
  • 826e5f0 [maven-release-plugin] prepare release maven-dependency-plugin-3.9.0
  • 0db1acc Use Resolver API in go-offline for dependencies resolving (#1533)
  • e50031a Use Resolver API in go-offline for plugins resolving
  • 6ed4b1a Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0
  • 8776c61 Bump org.assertj:assertj-core from 3.27.5 to 3.27.6
  • d2af78e Ignore Mockito 5.x and SLF4j 2.x by dependabot
  • dcd4b7d Bump org.assertj:assertj-core from 3.27.4 to 3.27.5
  • 7523948 Strict check of dependencies usage
  • 23186d4 Fixes #1522, add render-dependencies mojo (#1523)
  • bc1893f Use Resolver API in resolve-plugin
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
com.puppycrawl.tools:checkstyle [>= 11.a0, < 12]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 1, 2025
@haroon-sheikh haroon-sheikh marked this pull request as draft November 2, 2025 23:22
@haroon-sheikh
Copy link
Contributor

haroon-sheikh commented Nov 2, 2025

Bundled into #936

@haroon-sheikh
Copy link
Contributor

haroon-sheikh commented Nov 2, 2025

@dependabot rebase

@dependabot
Bump the maven-dependencies group with 6 updates
7d14c9d 
Bumps the maven-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [io.grpc:grpc-bom](https://github.com/grpc/grpc-java) | `1.75.0` | `1.76.0` |
| [org.junit:junit-bom](https://github.com/junit-team/junit-framework) | `5.14.0` | `6.0.1` |
| [com.github.javaparser:javaparser-core](https://github.com/javaparser/javaparser) | `3.27.0` | `3.27.1` |
| [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `4.32.1` | `4.33.0` |
| [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) | `10.26.1` | `12.1.1` |
| [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) | `3.8.1` | `3.9.0` |


Updates `io.grpc:grpc-bom` from 1.75.0 to 1.76.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.75.0...v1.76.0)

Updates `org.junit:junit-bom` from 5.14.0 to 6.0.1
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.14.0...r6.0.1)

Updates `com.github.javaparser:javaparser-core` from 3.27.0 to 3.27.1
- [Release notes](https://github.com/javaparser/javaparser/releases)
- [Changelog](https://github.com/javaparser/javaparser/blob/master/changelog.md)
- [Commits](javaparser/javaparser@javaparser-parent-3.27.0...javaparser-parent-3.27.1)

Updates `com.google.protobuf:protobuf-java` from 4.32.1 to 4.33.0
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `com.puppycrawl.tools:checkstyle` from 10.26.1 to 12.1.1
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](checkstyle/checkstyle@checkstyle-10.26.1...checkstyle-12.1.1)

Updates `org.apache.maven.plugins:maven-dependency-plugin` from 3.8.1 to 3.9.0
- [Release notes](https://github.com/apache/maven-dependency-plugin/releases)
- [Commits](apache/maven-dependency-plugin@maven-dependency-plugin-3.8.1...maven-dependency-plugin-3.9.0)

---
updated-dependencies:
- dependency-name: io.grpc:grpc-bom
  dependency-version: 1.76.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.junit:junit-bom
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: com.github.javaparser:javaparser-core
  dependency-version: 3.27.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 4.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: 12.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-dependency-plugin
  dependency-version: 3.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/maven/maven-dependencies-3a39429696 branch from ffbbfc4 to 7d14c9d Compare November 2, 2025 23:37
@chadlwilson chadlwilson self-assigned this Nov 3, 2025
@chadlwilson chadlwilson marked this pull request as ready for review November 3, 2025 09:34
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 3, 2025

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot bot closed this Nov 3, 2025
@dependabot dependabot bot deleted the dependabot/maven/maven-dependencies-3a39429696 branch November 3, 2025 09:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@chadlwilson chadlwilson

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@haroon-sheikh @chadlwilson