Skip to content

Bump the dependencies group across 1 directory with 10 updates #60

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
dependabot wants to merge 1 commit into from
Closed

Bump the dependencies group across 1 directory with 10 updates #60

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 22, 2025 •
edited
Loading

Bumps the dependencies group with 10 updates in the / directory:

Package From To
io.jooby:jooby-bom 4.0.6 4.0.7
software.amazon.awssdk:bom 2.32.29 2.34.0
org.apache.logging.log4j:log4j-core 2.25.1 2.25.2
org.apache.logging.log4j:log4j-slf4j2-impl 2.25.1 2.25.2
org.apache.logging.log4j:log4j-iostreams 2.25.1 2.25.2
com.google.guava:guava 33.4.8-jre 33.5.0-jre
com.google.code.gson:gson 2.13.1 2.13.2
org.apache.maven.plugins:maven-compiler-plugin 3.14.0 3.14.1
io.jooby:jooby-maven-plugin 4.0.6 4.0.7
org.apache.maven.plugins:maven-shade-plugin 3.6.0 3.6.1

Updates io.jooby:jooby-bom from 4.0.6 to 4.0.7

Release notes

Sourced from io.jooby:jooby-bom's releases.

jooby 4.0.7

Happy to announce a new release! 🚀 🎉

  • OpenAPI plugin throws Cannot invoke "String.hashCode()" because "" is null #3772
  • Context is not available through dependency injection #3764
  • netty: allow "single" event loop configuration #3771
  • mvc: default value on @QueryParam/@CookieParam/@​HeaderParam annotation #3761
  • mvc: add a new name method on @​XXXParam annotation #3762

Changes

Support my work

Sponsors

Thank you.

Commits
  • ceec4f7 v4.0.7
  • 3e6cd7b Merge pull request #3774 from jooby-project/dependabot/maven/dependencies-522...
  • aebae90 Merge pull request #3773 from jooby-project/dependabot/npm_and_yarn/modules/j...
  • 5a2e3f4 build(deps): bump the dependencies group with 21 updates
  • 696427e build(deps): bump swagger-ui-dist in /modules/jooby-swagger-ui
  • 3231c0f 4.0.6 - OpenAPI plugin throws Cannot invoke "String.hashCode()" because "<loc...
  • 786fece performance: netty
  • 0de8aeb route: pipeline: remove inner class for route pipeline
  • 812815f build: fix intellij classpath for running tests
  • 7eb682a add some notes on TODO
  • Additional commits viewable in compare view

Updates software.amazon.awssdk:bom from 2.32.29 to 2.34.0

Updates org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

Updates org.apache.logging.log4j:log4j-slf4j2-impl from 2.25.1 to 2.25.2

Updates org.apache.logging.log4j:log4j-iostreams from 2.25.1 to 2.25.2

Updates com.google.guava:guava from 33.4.8-jre to 33.5.0-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.5.0

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.5.0-jre</version>
  <!-- or, for Android: -->
  <version>33.5.0-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

  • Restored the Automatic-Module-Name to guava-android. (It, unlike, guava-jre, is not a proper module.) (7a04a8a955)
  • For users of guava-gwt: Google has moved off GWT internally. We plan to continue to release guava-gwt for users of GWT and J2CL, but the artifact is no longer tested for GWT-specific issues, and we have limited resources to fix any unexpected issues that might arise. While we do not anticipate any specific problems, we can't guarantee how long support will continue.
  • Increased our Android minSdkVersion to 23 (Marshmallow). This follows the minimum of Google's foundational Android libraries, and we expect it to have no practical impact on users. (5c23347cc1)
  • Listed the JSpecify annotations as an optional dependency in our OSGi metadata. (2dfd572981)
  • cache: Improved the handling of exceptions from compute functions in Cache.asMap(). (We do still recommend using Caffeine rather than com.google.common.cache.) (087f2c4a80)
  • collect: Improved Iterators.mergeSorted() to preserve stability for equal elements. (4dc93be9a8)
  • math: Added saturatedAbs methods to IntMath and LongMath. (ed0e518f20)
  • net: Added image/avif to MediaType. (53344caba6)
  • testing: Made CollectorTester available to Android users. (294c251079)
  • util.concurrent: Added Striped.custom. (1586eb271d)
Commits

Updates com.google.code.gson:gson from 2.13.1 to 2.13.2

Release notes

Sourced from com.google.code.gson:gson's releases.

Gson 2.13.2

The main changes in this release are just newer dependencies.

What's Changed

New Contributors

Full Changelog: google/gson@gson-parent-2.13.1...gson-parent-2.13.2

Commits
  • 686fad7 [maven-release-plugin] prepare release gson-parent-2.13.2
  • c2d252a Switch to using central-publishing-maven-plugin. (#2900)
  • 69cb755 Bump the github-actions group with 5 updates (#2894)
  • ea552c2 Bump the maven group across 1 directory with 3 updates (#2898)
  • fdc616d Set top-level permissions for CodeQL workflow (#2889)
  • 9334715 Create scorecard.yml (#2888)
  • f7de5c2 Bump the maven group with 8 updates (#2885)
  • 8c23cd3 Update sources to satisfy a new Error Prone check. (#2887)
  • 5eab3ed Bump the github-actions group with 2 updates (#2886)
  • 5f5c200 Bump the maven group across 1 directory with 10 updates (#2872)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.14.0 to 3.14.1

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.14.1

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

Commits
  • 0df6940 [maven-release-plugin] prepare release maven-compiler-plugin-3.14.1
  • 1bf9e5a Enforce asm version used here, to not depend on brittle transitive (#964)
  • f5161c4 Bump mavenVersion from 3.9.10 to 3.9.11 (#952)
  • 63846f1 Improve DeltaList behavior for large projects (#335)
  • ab3f845 Bump org.apache.maven.plugins:maven-plugins from 44 to 45
  • 164bad4 Allow to not use --module-version for the Java compiler
  • 0b76ccd Bump mavenVersion from 3.9.9 to 3.9.10
  • 5dbc9c3 Bump org.codehaus.plexus:plexus-java from 1.4.0 to 1.5.0
  • 17949d1 Bump org.apache.maven.plugins:maven-plugins from 43 to 44 (#316)
  • d44d1be Add generatedSourcesPath back to the maven project
  • Additional commits viewable in compare view

Updates io.jooby:jooby-maven-plugin from 4.0.6 to 4.0.7

Updates org.apache.maven.plugins:maven-shade-plugin from 3.6.0 to 3.6.1

Release notes

Sourced from org.apache.maven.plugins:maven-shade-plugin's releases.

3.6.1

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • 06902bd [maven-release-plugin] prepare release maven-shade-plugin-3.6.1
  • 29e9a9d add .git
  • 844e61a use github
  • 43101f9 [maven-release-plugin] prepare release maven-shade-plugin-3.6.1
  • 2ffb28d use release drafter v4 and dependabot to updade gha as well (#750)
  • f5b590e Bump org.codehaus.mojo:mrm-maven-plugin from 1.6.0 to 1.7.0
  • eee0319 Bump org.hamcrest:hamcrest-core from 2.2 to 3.0
  • 0d5a7a4 fix upgrade, remove those useless final
  • 6e5f0f3 Bump org.apache.maven.plugins:maven-plugins from 42 to 45
  • 35febed Bump org.apache.commons:commons-compress from 1.26.2 to 1.28.0
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dependencies group across 1 directory with 10 updates
25f0a81 
Bumps the dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [io.jooby:jooby-bom](https://github.com/jooby-project/jooby) | `4.0.6` | `4.0.7` |
| software.amazon.awssdk:bom | `2.32.29` | `2.34.0` |
| org.apache.logging.log4j:log4j-core | `2.25.1` | `2.25.2` |
| org.apache.logging.log4j:log4j-slf4j2-impl | `2.25.1` | `2.25.2` |
| org.apache.logging.log4j:log4j-iostreams | `2.25.1` | `2.25.2` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.4.8-jre` | `33.5.0-jre` |
| [com.google.code.gson:gson](https://github.com/google/gson) | `2.13.1` | `2.13.2` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.14.0` | `3.14.1` |
| io.jooby:jooby-maven-plugin | `4.0.6` | `4.0.7` |
| [org.apache.maven.plugins:maven-shade-plugin](https://github.com/apache/maven-shade-plugin) | `3.6.0` | `3.6.1` |



Updates `io.jooby:jooby-bom` from 4.0.6 to 4.0.7
- [Release notes](https://github.com/jooby-project/jooby/releases)
- [Commits](jooby-project/jooby@v4.0.6...v4.0.7)

Updates `software.amazon.awssdk:bom` from 2.32.29 to 2.34.0

Updates `org.apache.logging.log4j:log4j-core` from 2.25.1 to 2.25.2

Updates `org.apache.logging.log4j:log4j-slf4j2-impl` from 2.25.1 to 2.25.2

Updates `org.apache.logging.log4j:log4j-iostreams` from 2.25.1 to 2.25.2

Updates `com.google.guava:guava` from 33.4.8-jre to 33.5.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.google.code.gson:gson` from 2.13.1 to 2.13.2
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-parent-2.13.1...gson-parent-2.13.2)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.14.0 to 3.14.1
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.14.0...maven-compiler-plugin-3.14.1)

Updates `io.jooby:jooby-maven-plugin` from 4.0.6 to 4.0.7

Updates `org.apache.maven.plugins:maven-shade-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-shade-plugin/releases)
- [Commits](apache/maven-shade-plugin@maven-shade-plugin-3.6.0...maven-shade-plugin-3.6.1)

---
updated-dependencies:
- dependency-name: io.jooby:jooby-bom
  dependency-version: 4.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: software.amazon.awssdk:bom
  dependency-version: 2.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.logging.log4j:log4j-slf4j2-impl
  dependency-version: 2.25.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.logging.log4j:log4j-iostreams
  dependency-version: 2.25.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: com.google.guava:guava
  dependency-version: 33.5.0-jre
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.jooby:jooby-maven-plugin
  dependency-version: 4.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-shade-plugin
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 22, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 3, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Nov 3, 2025
@dependabot dependabot bot deleted the dependabot/maven/dependencies-458661681f branch November 3, 2025 23:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant