An open index of dependabot pull requests across open source projects.

chore: [DevOps] bump the test group with 3 updates

Open
Number: #939
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 0
Created: September 22, 2025 at 10:06 PM UTC
(8 months ago)
Updated: September 23, 2025 at 10:19 AM UTC
(8 months ago)
Labels:
dependencies java
Description:

Bumps the test group with 3 updates: com.google.guava:guava, org.apache.httpcomponents.core5:httpcore5 and org.mockito:mockito-junit-jupiter.

Updates com.google.guava:guava from 33.4.8-jre to 33.5.0-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.5.0

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.5.0-jre</version>
  <!-- or, for Android: -->
  <version>33.5.0-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

  • Restored the Automatic-Module-Name to guava-android. (It, unlike, guava-jre, is not a proper module.) (7a04a8a955)
  • For users of guava-gwt: Google has moved off GWT internally. We plan to continue to release guava-gwt for users of GWT and J2CL, but the artifact is no longer tested for GWT-specific issues, and we have limited resources to fix any unexpected issues that might arise. While we do not anticipate any specific problems, we can't guarantee how long support will continue.
  • Increased our Android minSdkVersion to 23 (Marshmallow). This follows the minimum of Google's foundational Android libraries, and we expect it to have no practical impact on users. (5c23347cc1)
  • Listed the JSpecify annotations as an optional dependency in our OSGi metadata. (2dfd572981)
  • cache: Improved the handling of exceptions from compute functions in Cache.asMap(). (We do still recommend using Caffeine rather than com.google.common.cache.) (087f2c4a80)
  • collect: Improved Iterators.mergeSorted() to preserve stability for equal elements. (4dc93be9a8)
  • math: Added saturatedAbs methods to IntMath and LongMath. (ed0e518f20)
  • net: Added image/avif to MediaType. (53344caba6)
  • testing: Made CollectorTester available to Android users. (294c251079)
  • util.concurrent: Added Striped.custom. (1586eb271d)
Commits

Updates org.apache.httpcomponents.core5:httpcore5 from 5.3.5 to 5.3.6

Changelog

Sourced from org.apache.httpcomponents.core5:httpcore5's changelog.

Release 5.3.6

This maintenance release fixes a regression introduced by the previous release that can cause a temporary I/O spin during HTTP/2 connection shutdown in case the opposite endpoint fails to send a GOAWAY frame, and also fixes several bugs related to abnormal termination of HTTP/2 connections found since the last release.

Change Log

  • Bug fix: #disconnected method of protocol handlers is to be called only once the underlying I/O session has been fully closed out. Contributed by Oleg Kalnichevski

  • Bug fix: Fixed a race between async I/O session termination and command submission. Contributed by Oleg Kalnichevski

  • Bug fix: Async I/O sessions to explicitly close the I/O channel for output in GRACEFUL close mode. Contributed by Oleg Kalnichevski

  • Bug fix: Classic HTTP server to keep RequestListener thread running when an exception occurs during initialization of the incoming connection. Contributed by Christian de Waal

  • Regression: Improved HTTP/2 connection termination in case of the opposite endpoint failing to send a GOAWAY frame (correction). Contributed by Oleg Kalnichevski

Commits
  • 1c15f3c HttpCore 5.3.6 release
  • ff96eca Updated release notes for HttpCore 3.5.6 release
  • 5de2967 Bug fix: #disconnected method of protocol handlers is to be called only once ...
  • ac42dec Bug fix: race between async i/o session termination and command submission
  • 553b894 Bug fix: async i/o session to explicitly close the channel for output in GRAC...
  • b296ae9 keep RequestListener thread running when an exception occurs during connectio...
  • 9e93795 Regression: Improved H2 connection termination in case of the opposite endpoi...
  • 29010ea Upgraded HttpCore version to 5.3.6-SNAPSHOT
  • See full diff in compare view

Updates org.mockito:mockito-junit-jupiter from 5.19.0 to 5.20.0

Release notes

Sourced from org.mockito:mockito-junit-jupiter's releases.

v5.20.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.20.0

Commits
  • 3a1a19e Add support for generic types in MockedConstruction and MockedStatic (#3729)
  • f3c957a Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 (#3730)
  • 3cfbd42 Bump graalvm/setup-graalvm from 1.3.6 to 1.3.7 (#3725)
  • 6f9a04b Bump com.gradle.develocity from 4.1.1 to 4.2 (#3726)
  • c75dfb8 Bump org.eclipse.platform:org.eclipse.osgi from 3.23.100 to 3.23.200 (#3720)
  • 54474fa Bump graalvm/setup-graalvm from 1.3.5 to 1.3.6 (#3719)
  • bc06f21 Use Assume.assumeThat for SequencedCollection tests (#3711)
  • a10aed0 Bump actions/setup-java from 4 to 5 (#3715)
  • 37bb3e5 Fix metadata generation on GraalVM (#3710)
  • ef2fd6f Bump com.gradle.develocity from 4.1 to 4.1.1 (#3713)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
Commits:
1
Files Changed:
2
Additions:
+3
Deletions:
-3
Package Dependencies
Ecosystem:
maven
Version Change:
33.4.8-jre → 33.5.0-jre
Update Type:
Minor
Ecosystem:
maven
Version Change:
5.19.0 → 5.20.0
Update Type:
Minor
Ecosystem:
maven
Version Change:
5.3.5 → 5.3.6
Update Type:
Patch
Technical Details
ID: 8253824
UUID: 2851265939
Node ID: PR_kwDOJWVxms6p8t2T
Host: GitHub
Repository: SAP/cloud-sdk-java
Merge State: Unknown