deps(deps): bump the other-deps group across 1 directory with 48 updates
Type: Pull Request
State: Open
Association: Unknown
Comments: 2
(15 days ago)
(15 days ago)
dependencies
Bumps the other-deps group with 48 updates in the / directory:
| Package | From | To |
|---|---|---|
| org.yaml:snakeyaml | 2.2 |
2.6 |
| org.slf4j:slf4j-api | 1.7.15 |
2.0.18 |
| org.apache.logging.log4j:log4j-api | 2.25.4 |
2.26.1 |
| org.apache.logging.log4j:log4j-core | 2.25.4 |
2.26.1 |
| org.apache.logging.log4j:log4j-1.2-api | 2.25.4 |
2.26.1 |
| org.apache.logging.log4j:log4j-slf4j-impl | 2.25.4 |
2.26.1 |
| com.mysql:mysql-connector-j | 8.4.0 |
9.7.0 |
| org.apache.hadoop:hadoop-client | 3.3.6 |
3.5.0 |
| org.apache.hadoop:hadoop-common | 3.3.6 |
3.5.0 |
| org.apache.hadoop:hadoop-hdfs | 3.3.6 |
3.5.0 |
| org.apache.hadoop:hadoop-mapreduce-client-core | 3.3.6 |
3.5.0 |
| com.alibaba.nacos:nacos-client | 2.1.2 |
3.2.2 |
| com.alibaba:fastjson | 2.0.52 |
2.0.62 |
| com.fasterxml.jackson.core:jackson-core | 2.21.4 |
2.22.0 |
| com.fasterxml.jackson.core:jackson-databind | 2.21.4 |
2.22.0 |
| com.jayway.jsonpath:json-path | 2.9.0 |
3.0.0 |
| com.google.protobuf:protobuf-java | 3.25.5 |
4.35.1 |
| net.minidev:json-smart | 2.5.2 |
2.6.0 |
| net.minidev:accessors-smart | 2.5.0 |
2.6.0 |
| commons-net:commons-net | 3.10.0 |
3.13.0 |
| com.squareup.okio:okio | 3.4.0 |
3.17.0 |
| commons-cli:commons-cli | 1.5.0 |
1.11.0 |
| dnsjava:dnsjava | 3.6.0 |
3.6.5 |
| org.codehaus.plexus:plexus-utils | 3.6.1 |
4.0.3 |
| at.yawk.lz4:lz4-java | 1.10.1 |
1.11.0 |
| commons-io:commons-io | 2.15.1 |
2.22.0 |
| com.google.errorprone:error_prone_core | 2.31.0 |
2.50.0 |
| org.codehaus.mojo:versions-maven-plugin | 2.14.2 |
2.21.0 |
| org.apache.maven.plugins:maven-enforcer-plugin | 3.5.0 |
3.6.3 |
| org.apache.maven.plugins:maven-pmd-plugin | 3.21.0 |
3.28.0 |
| org.jacoco:jacoco-maven-plugin | 0.8.12 |
0.8.15 |
| org.apache.maven.plugins:maven-compiler-plugin | 3.10.0 |
3.15.0 |
| org.apache.maven.plugins:maven-surefire-plugin | 3.0.0-M5 |
3.6.0-M1 |
| com.diffplug.spotless:spotless-maven-plugin | 2.23.0 |
3.8.0 |
| org.apache.maven.plugins:maven-checkstyle-plugin | 3.1.2 |
3.6.0 |
| com.github.spotbugs:spotbugs-maven-plugin | 4.8.6.6 |
4.10.2.0 |
| org.apache.maven.plugins:maven-shade-plugin | 3.5.1 |
3.6.2 |
| org.scala-lang:scala-library | 2.12.7 |
3.8.4 |
| org.apache.kafka:kafka-clients | 4.1.2 |
4.3.1 |
| com.fasterxml.jackson.core:jackson-annotations | 2.21 |
2.22 |
| com.h2database:h2 | 2.2.224 |
2.4.240 |
| com.nimbusds:nimbus-jose-jwt | 10.0.2 |
10.9.1 |
| org.apache.maven.plugins:maven-assembly-plugin | 3.6.0 |
3.8.0 |
| org.apache.maven.plugins:maven-jar-plugin | 3.3.0 |
3.5.0 |
| org.apache.paimon:paimon-flink-1.20 | 1.4.1 |
1.4.2 |
| org.apache.paimon:paimon-flink-cdc | 1.4.1 |
1.4.2 |
| org.mongodb:mongodb-driver-sync | 4.11.1 |
5.8.0 |
| org.apache.kafka:connect-api | 3.6.1 |
4.3.1 |
Updates org.yaml:snakeyaml from 2.2 to 2.6
Commits
015ab57[maven-release-plugin] prepare for next development iteration4795519Update info9c36c69Introduce devcontainer0c5b3e5fix: add debug level to internal loggera65b131Merge branch 'master' into devcontainers788a98bUpdate changes556b4bfAdd info for devcontainer0828c39ops: migrate deployment from OSSRH to Central Portal30d6a3aAdd a test for issue 11082da4c6dRemove unrelated code- Additional commits viewable in compare view
Updates org.slf4j:slf4j-api from 1.7.15 to 2.0.18
Updates org.apache.logging.log4j:log4j-api from 2.25.4 to 2.26.1
Updates org.apache.logging.log4j:log4j-core from 2.25.4 to 2.26.1
Updates org.apache.logging.log4j:log4j-1.2-api from 2.25.4 to 2.26.1
Updates org.apache.logging.log4j:log4j-slf4j-impl from 2.25.4 to 2.26.1
Updates org.apache.logging.log4j:log4j-core from 2.25.4 to 2.26.1
Updates org.apache.logging.log4j:log4j-1.2-api from 2.25.4 to 2.26.1
Updates org.apache.logging.log4j:log4j-slf4j-impl from 2.25.4 to 2.26.1
Updates com.mysql:mysql-connector-j from 8.4.0 to 9.7.0
Changelog
Sourced from com.mysql:mysql-connector-j's changelog.
Changelog
https://dev.mysql.com/doc/relnotes/connector-j/en/
Version 9.7.0
Fix for Bug#119863 (Bug#38951042), Inaccurate decoding of negative TIME durations in Binary Protocol (Cursor Mode).
WL#17215, Implement JDBC 4.3/4.5 Statement/Connection.enquote* methods.
Fix for Bug#119245 (Bug#38599240), Select into fix breaks queries with 'into' in them. (reopened)
Fix for Bug#119659 (Bug#38916595), BinaryResultsetReader fails to consume EOF packet after column definitions when EOF is not deprecated.
Version 9.6.0
Fix for Bug#118002 (Bug#37843004), The setFetchSize() method in the Statement class may have a potential bug.
Fix for Bug#113130 (Bug#36043125), getGeneratedKeys() returns a zero resultset with non-key-generating statements.
Fix for Bug#113336 (Bug#36080226), Inconsistent getUpdateCount() Behavior with allowMultiQueries.
Fix for Bug#118234 (Bug#37975837), A potential bugs in Mysql Connector/J.
Fix for Bug#113413 (Bug#36107426), Connection.changeUser cannot be done after DriverManager.loginTimeout elapses. Thanks to Kazuhisa Kawashima for his contribution.
Fix for Bug#119271 (Bug#38599496), Connector/J fails to accept legacy value zeroDateTimeBehavior=convertToNull on multi-host URLs (failover).
Fix for Bug#119245 (Bug#38599240), Select into fix breaks queries with 'into' in them.
Version 9.5.0
Fix for Bug#72036 (Bug#18403804), XA isSameRM() shouldn't take database into account.
Fix for Bug#62693 (Bug#16722068), XAConnection savepoint capability.
Fix for Bug#81128 (Bug#23146631), Master host list overwritten by slave list when loadBalanceConnectionGroup used.
Fix for Bug#19887224, RUNNING THE TEST SUITE WITH SOCKSPROXY* PROPERTIES HANGS IN TEST TESTBUG56429.
Fix for Bug#98699 (Bug#30932850), Allow empty keyStore file for keyStoreTypes that do not require files. Thanks to Kolbe Kegel for his contribution.
Fix for Bug#118938 (Bug#38396227), DatabaseMetaDataInformationSchema#getSchemas has a bug.
Fix for Bug#99292 (Bug#31195955), Contribution: Support Windows time zone 'Coordinated Universal Time'. Thanks to Frédéric Barrière for his contribution.
Fix for Bug#107094 (Bug#34104230), NullPointerException when calling equals with null on MultiHostConnectionProxy.
... (truncated)
Commits
0aade1fFix for Bug#119863 (Bug#38951042), Inaccurate decoding of negative TIME durat...b6d5baaUpdate for GPL license book.a7cc5a9Fix for DateTimeTest failures after some of the work done for WL#16669 in MyS...6a0c818WL#17215, Implement JDBC 4.3/4.5 Statement/Connection.enquote* methods.5f96e85Fix for Bug#119245 (Bug#38599240), Select into fix breaks queries with 'into'...8d779fcFix for Bug#119659 (Bug#38916595), BinaryResultsetReader fails to consume EOF...1391179Copyright header year bump.5c764b4Post-release version bump.fdef61fUpdate copyright year.43aced7Update for GPL license book.- Additional commits viewable in compare view
Updates org.apache.hadoop:hadoop-client from 3.3.6 to 3.5.0
Updates org.apache.hadoop:hadoop-common from 3.3.6 to 3.5.0
Updates org.apache.hadoop:hadoop-hdfs from 3.3.6 to 3.5.0
Updates org.apache.hadoop:hadoop-mapreduce-client-core from 3.3.6 to 3.5.0
Updates com.alibaba.nacos:nacos-client from 2.1.2 to 3.2.2
Release notes
Sourced from com.alibaba.nacos:nacos-client's releases.
3.2.2 (May 29th, 2026)
Nacos 3.2.2 is mainly a bugfix and experience-improvement release for the 3.2 series.
This release focuses on:
- Console experience improvements for Config, Naming, MCP, Skill, AI resources, and namespace workflows.
- Stability and compatibility fixes across Config, Naming, plugins, startup scripts, and AI resource handling.
- AI Registry import, discovery, publishing, subscription, and security improvements.
For AI Registry and Console users, this release adds or improves:
- Importing AI resources from operator-configured external registries.
- Skill well-known discovery, Skill subscription, and latest protocol adapter support.
- Config diff confirmation, Prompt Markdown download, and Skill upload lifecycle improvements.
It also fixes bugs across Config, Naming, Console, MCP, Skill, plugins, and client-side watch handling.
Detailed changes in this release:
Feature
#14695 Support label-based matching for Config gray rules. #14848 Add Prompt version download as Markdown. #14907 Support specifying a target version when uploading Skills. #14985 Add persistent instance deregistration support in Console v3. #15022 Support optional Skill auto-publish after review. #15031 Extend nacos.functionMode with microservice and ai modes. #15142 Support drag-and-drop ZIP upload and batch Skill upload. #15183 Support importing AI resources from operator-configured external registries, including MCP resources, Skill well-known resources, importer APIs, SPI models, built-in presets, and source-based import UI. #15234 Support commit messages when uploading AI skills. #15247 Support the latest Skill well-known protocol in the registry adapter. #15263 Add Skill subscription support and refactor AgentSpec subscription to HTTP polling with 304 handling.
Enhancement/Refactor
#14833#15221 Route AI resource version trace logging through trace events and the default plugin. #14911 Split LDAP authentication into an optional plugin and package the LDAP plugin JAR. #14983 Enforce non-frontmatter Markdown body content during Skill validation. #15059 Add the reviewed version status after pipeline approval for Skill versions. #15066 Harden AgentSpec ZIP parsing with Zip Slip, Zip Bomb, and entry-count defenses. #15138 Add Config publish diff confirmation in the new Console. #15145 Restrict forcePublish to valid Skill states and add pipeline stale flags for re-edit. #15164 Make Skill ZIP entry and size limits configurable. #15165 Parallelize AgentSpec storage writes to align with Skill behavior. #15258 Enable reviewed status by default for the AI publish pipeline.
BugFix
... (truncated)
Commits
cdf4e1b[ISSUE #14122] Skip unsupported skills.sh sources (#15271)fe962a6Stabilize auth and agent spec cache tests (#15270)9299084[ISSUE #15087] Upgrade safe dependencies and enable default AI importers (#15...4ac3b7dAdd since annotations for skill subscription APIs (#15267)2f290db[ISSUE #15258] Enable reviewed status by default (#15259)0a69ba2[ISSUE #15263] Refactor AgentSpec subscription to HTTP polling with 304, and ...9136e98Add@Sinceannotations for public APIs (#15266)27a14fb[ISSUE #14992] Add v3 naming APIs to DistroFilter (#15262)5932ad2[ISSUE #15138] Add config publish diff confirmation (#15261)6c996d1fix(logging): bind Logger to the declaring class in four places (#15257)- Additional commits viewable in compare view
Updates com.alibaba:fastjson from 2.0.52 to 2.0.62
Release notes
Sourced from com.alibaba:fastjson's releases.
fastjson 2.0.61版本发布
FASTJSON 2.0.61 Release Notes
Release Date: 07 Feb 2026 Tag: 2.0.61 (170f71f)
Overview
This is a regularly scheduled maintenance release with feature enhancements, performance improvements, and bug fixes. Users should upgrade as needed.
Changes & Bug Fixes
- Fixed issue where Jackson's
@JsonPropertyon methods was being ignored in record types #3893- Fixed multiple
ArrayIndexOutOfBoundsExceptionissues inJSONReaderUTF8,JSONReaderASCII, andJSONReader#3883- Improved performance when parsing JSON with numerous escape characters #3889
- Fixed conflict where global Date writer overrides
@JSONFieldformat #3864- Fixed
TypeUtils.castToTimestampcompatibility issues when upgrading from 1.2.83 #3906 #3907- Added support for serializing non-finite numbers (NaN, Infinity) as strings #3911
- Added default value support for
getStringand othergetXXXmethods #3880- Fixed double quotes issue in
TypeUtils.castwith Long global converter #3932- Added Java 8
TimeModulesupport including improvedYearMonthsupport #3934 #3935- Fixed scientific notation floating point deserialization errors #3917 #3939 #3955
- Added serialization support for
org.w3c.dom.Node#3960- Fixed exception when parsing object keys with emoji and escape characters #3928
- Fixed generic type inference for
Listsubclasses during deserialization #3926- Added support for custom error messages in JSON Schema validation #1559
- Added
parse(InputStream)overload with default context #3946- Fixed
DirectByteBufferUnsupportedOperationExceptionforjava.nio.ByteBuffer#array#3894- Added support for composing multiple filters (
PropertyFilter,PropertyPreFilter, etc.) #3877- Fixed incorrect overflow check when parsing
BigIntegerasDouble- Enhanced security checks in hex digit processing
- Improved
readStringperformance inJSONReaderUTF8/JSONReaderUTF16- Fixed various issues with
WriteNulls,ErrorOnNullForPrimitives,NotWriteDefaultValue, and other features- Added ProGuard rules for fields affected by reflection operations
- Fixed cast error when using
-Dfastjson2.creator=reflect#1563Maven Dependency Configuration
Standard Version
<dependency> <groupId>com.alibaba.fastjson2</groupId> <artifactId>fastjson2</artifactId> <version>2.0.61</version> </dependency>Android 5 Optimized Version
</tr></table>
... (truncated)
Commits
7ddfd762.0.62 release5a05075fix: JSONPath syntax error when 'in'/'rlike' filter follows other filters (#3...14ea6eafix: Map subclass loses@typewhen serialized with ValueFilter (#3984) (#4029)ede10a5Docs/comprehensive documentation overhaul (#4028)7bceed2fix: skip whitespace after non-comma in readLocalDate for UTF8 reader (#4005)05e8220fix: DateUtils multiple bugs — bitwise OR typo, bounds check off-by-one, wron...b3eb46cRefactor/improve object reader creator asm (#4021)bbb1d02fix: IOUtils.regionMatches off-by-one and parseInt error message corruption (...f15dc36fix: writeFloat(float[]) ArrayIndexOutOfBoundsException when WriteNonStringVa...f951947fix: JSONPath nested array filter returning incorrect results, for issue #400...- Additional commits viewable in compare view
Updates com.fasterxml.jackson.core:jackson-core from 2.21.4 to 2.22.0
Commits
d763562[maven-release-plugin] prepare release jackson-core-2.22.0e5c69feRe-do 2.22.0 release0ba6a36Bump version after releaseb106011[maven-release-plugin] prepare for next development iteration18a7fe4[maven-release-plugin] prepare release jackson-core-2.22.0503a14fRe-do 2.22.0 releaseab95bc0...0a4b8dePost-release dep version bump719a42f[maven-release-plugin] prepare for next development iteration9248848[maven-release-plugin] prepare release jackson-core-2.22.0- Additional commits viewable in compare view
Updates com.fasterxml.jackson.core:jackson-databind from 2.21.4 to 2.22.0
Commits
- See full diff in compare view
Updates com.jayway.jsonpath:json-path from 2.9.0 to 3.0.0
Release notes
Sourced from com.jayway.jsonpath:json-path's releases.
json-path-3.0.0
What's Changed
- adding jackson3 provider (#1066) by
@bsa01in json-path/JsonPath#1067- Prepare Version 3.0.0 - Java 17 baseline with Jackson 3 by
@kallestenfloin json-path/JsonPath#1072New Contributors
@bsa01made their first contribution in json-path/JsonPath#1067Full Changelog: https://github.com/json-path/JsonPath/compare/json-path-2.10.0...json-path-3.0.0
json-path-2.10.0
What's Changed
- Bumps dependency versions by
@kallestenfloin json-path/JsonPath#1057
- net.minidev:json-smart:2.6.0
- org.slf4j:slf4j-api:2.0.17
- com.google.code.gson:gson:2.13.2
- org.hamcrest:hamcrest:3.0
- com.fasterxml.jackson.core:jackson-databind:2.19.2
- org.json:json:20250517
- org.apache.tapestry:tapestry-json:5.9.0
- jakarta.json:jakarta.json-api:2.1.3
- jakarta.json.bind:jakarta.json.bind-api:2.0.0
Full Changelog: https://github.com/json-path/JsonPath/compare/json-path-2.9.0...json-path-2.10.0
Commits
62a4c9fPrepare Version 3.0.0 - Java 17 baseline with Jackson 3 (#1072)470b566Prepare version 3.0.05a7f29eadding jackson3 provider (#1066) (#1067)b6c60b3Prepare next version (#1059)a427387Release 2.10.0 (#1058)8e3b92fBumps dependency versions (#1057)45333e0[CI] Remove Java 18 from build matrix (#1005)3732a85Upgrade net.minidev:json-smart from 2.5.0 to 2.5.1 (#1004)2d4cc06Upgrade to gradle 8.5 and add java 21 build (#995)83ced52Remove web-test project (#994)- Additional commits viewable in compare view
Updates com.google.protobuf:protobuf-java from 3.25.5 to 4.35.1
Commits
- See full diff in compare view
Updates net.minidev:json-smart from 2.5.2 to 2.6.0
Release notes
Sourced from net.minidev:json-smart's releases.
v2.6.0
What's Changed
- fix JSONObject.merge blocks overwriting (#175) by
@caimoin netplex/json-smart-v2#238- build: prepare for next version by
@hezhangjianin netplex/json-smart-v2#241- chore: use standard charset object instead by
@hezhangjianin netplex/json-smart-v2#242- add Spotless + Maven wrapper by
@ccudennec-ottoin netplex/json-smart-v2#246- fix JSONArray merge(Object)(#51) by
@caimoin netplex/json-smart-v2#247- Bump junit.version from 5.11.4 to 5.12.0 in /json-smart by
@dependabot[bot] in netplex/json-smart-v2#253- Bump junit.version from 5.11.4 to 5.12.0 in /json-smart-action by
@dependabot[bot] in netplex/json-smart-v2#248- Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 in /json-smart by
@dependabot[bot] in netplex/json-smart-v2#252- Bump org.apache.maven.plugins:maven-compiler-plugin from 3.13.0 to 3.14.0 in /json-smart by
@dependabot[bot] in netplex/json-smart-v2#251- Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 in /json-smart-action by
@dependabot[bot] in netplex/json-smart-v2#250- Bump org.apache.maven.plugins:maven-compiler-plugin from 3.13.0 to 3.14.0 in /json-smart-action by
@dependabot[bot] in netplex/json-smart-v2#249- Bump junit.version from 5.12.0 to 5.12.1 in /json-smart by
@dependabot[bot] in netplex/json-smart-v2#256- Bump junit.version from 5.12.0 to 5.12.1 in /json-smart-action by
@dependabot[bot] in netplex/json-smart-v2#255- Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.3 to 2.44.4 in /json-smart-action by
@dependabot[bot] in netplex/json-smart-v2#263- Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.3 to 2.44.4 in /json-smart by
@dependabot[bot] in netplex/json-smart-v2#260- Bump junit.version from 5.12.1 to 5.12.2 in /json-smart-action by
@dependabot[bot] in netplex/json-smart-v2#262- Bump junit.version from 5.12.1 to 5.12.2 in /json-smart by
@dependabot[bot] in netplex/json-smart-v2#261- Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.4 to 2.44.5 in /json-smart by
@dependabot[bot] in netplex/json-smart-v2#268- Bump junit.version from 5.12.2 to 5.13.0 in /json-smart by
@dependabot[bot] in netplex/json-smart-v2#267- Bump junit.version from 5.12.2 to 5.13.0 in /json-smart-action by
@dependabot[bot] in netplex/json-smart-v2#266- Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.4 to 2.44.5 in /json-smart-action by
@dependabot[bot] in netplex/json-smart-v2#265- Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.7 to 3.2.8 in /json-smart-action by
@dependabot[bot] in netplex/json-smart-v2#276- Bump junit.version from 5.13.0 to 5.13.4 in /json-smart by
@dependabot[bot] in netplex/json-smart-v2#274- Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.7 to 3.2.8 in /json-smart by
@dependabot[bot] in netplex/json-smart-v2#273- Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.5 to 2.46.1 in /json-smart-action by
@dependabot[bot] in netplex/json-smart-v2#277- Bump junit.version from 5.13.0 to 5.13.4 in /json-smart-action by
@dependabot[bot] in netplex/json-smart-v2#278- Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.5 to 2.46.1 in /json-smart by
@dependabot[bot] in netplex/json-smart-v2#275- fix unpack dependencies failed (#176) by
@pcHwang2in netplex/json-smart-v2#257- fix Issue 177 (support incomplet json messages) by
@UrielChin netplex/json-smart-v2#254- improve github action by
@UrielChin netplex/json-smart-v2#279- mutiple updates, new github workflow, more coverage.... by
@UrielChin netplex/json-smart-v2#280- Upgrade by
@UrielChin netplex/json-smart-v2#281New Contributors
@pcHwang2made their first contribution in netplex/json-smart-v2#257Full Changelog: https://github.com/netplex/json-smart-v2/compare/2.5.2...v2.6.0
Commits
ebf7cf8try deploy95a9bc3try somthink else4aac0d7make it publishd3a86dfdeploy one by one13d282bpatch deployb4940f5patch deploy verbosityedc6e6ehange publishing plugin49e150fadd git tag29543a1replace snapshot by the release version5803602force release to central- Additional commits viewable in compare view
Updates net.minidev:accessors-smart from 2.5.0 to 2.6.0
Release notes
Sourced from net.minidev:accessors-smart's releases.
v2.6.0
What's Changed
- fix JSONObject.merge blocks overwriting (#175) by
@caimoin netplex/json-smart-v2#238- build: prepare for next version by
@hezhangjianin netplex/json-smart-v2#241- chore: use standard charset object instead by
@hezhangjianin netplex/json-smart-v2#242- add Spotless + Maven wrapper by
@ccudennec-ottoin netplex/json-smart-v2#246- fix JSONArray merge(Object)(#51) by
@caimoin netplex/json-smart-v2#247- Bump junit.version from 5.11.4 to 5.12.0 in /json-smart by
@dependabot[bot] in netplex/json-smart-v2#253- Bump junit.version from 5.11.4 to 5.12.0 in /json-smart-action by
@dependabot[bot] in netplex/json-smart-v2#248- Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 in /json-smart by
@dependabot[bot] in netplex/json-smart-v2#252- Bump org.apache.maven.plugins:maven-compiler-plugin from 3.13.0 to 3.14.0 in /json-smart by
@dependabot[bot] in netplex/json-smart-v2#251- Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 in /json-smart-action by
@dependabot[bot] in netplex/json-smart-v2#250- Bump org.apache.maven.plugins:maven-compiler-plugin from 3.13.0 to 3.14.0 in /json-smart-action by
@dependabot[bot] in netplex/json-smart-v2#249- Bump junit.version from 5.12.0 to 5.12.1 in /json-smart by
@dependabot[bot] in netplex/json-smart-v2#256- Bump junit.version from 5.12.0 to 5.12.1 in /json-smart-action by
@dependabot[bot] in netplex/json-smart-v2#255- Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.3 to 2.44.4 in /json-smart-action by
@dependabot[bot] in netplex/json-smart-v2#263- Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.3 to 2.44.4 in /json-smart by
@dependabot[bot] in netplex/json-smart-v2#260- Bump junit.version from 5.12.1 to 5.12.2 in /json-smart-action by
@dependabot[bot] in netplex/json-smart-v2#262- Bump junit.version from 5.12.1 to 5.12.2 in /json-smart by
@dependabot[bot] in netplex/json-smart-v2#261- Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.4 to 2.44.5 in /json-smart by
@dependabot[bot] in netplex/json-smart-v2#268- Bump junit.version from 5.12.2 to 5.13.0 in /json-smart by
@dependabot[bot] in netplex/json-smart-v2#267- Bump junit.version from 5.12.2 to 5.13.0 in /json-smart-action by
@dependabot[bot] in netplex/json-smart-v2#266- Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.4 to 2.44.5 in /json-smart-action by
@dependabot[bot] in netplex/json-smart-v2#265- Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.7 to 3.2.8 in /json-smart-action by
@dependabot[bot] in netplex/json-smart-v2#276- Bump junit.version from 5.13.0 to 5.13.4 in /json-smart by
@dependabot[bot] in netplex/json-smart-v2#274- Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.7 to 3.2.8 in /json-smart by
@dependabot[bot] in netplex/json-smart-v2#273- Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.5 to 2.46.1 in /json-smart-action by
@dependabot[bot] in netplex/json-smart-v2#277- Bump junit.version from 5.13.0 to 5.13.4 in /json-smart-action by
@dependabot[bot] in netplex/json-smart-v2#278- Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.5 to 2.46.1 in /json-smart by
@dependabot[bot] in netplex/json-smart-v2#275- fix unpack dependencies failed (#176) by
@pcHwang2in netplex/json-smart-v2#257- fix Issue 177 (support incomplet json messages) by
@UrielChin netplex/json-smart-v2#254- improve github action by
@UrielChin netplex/json-smart-v2#279- mutiple updates, new github workflow, more coverage.... by
@UrielChin netplex/json-smart-v2#280- Upgrade by
@UrielChin netplex/json-smart-v2#281New Contributors
@pcHwang2made their first contribution in netplex/json-smart-v2#257Full Changelog: https://github.com/netplex/json-smart-v2/compare/2.5.2...v2.6.0
2.5.2
About CVE-2024-57699
Thanks for
@ccudennec-ottoSome remarks on the CVE, more discussions in #236
- as mentioned here it is quite unlikely that the vulnerability is exploited if you come here because of Spring Security /
com.nimbusds:oauth2-oidc-sdk- the code changes for the upcoming release will "only" fix the default modes provided by JSONParser, e.g.
MODE_RFC4627- if you create the
JSONParsermanually / with custom options, make sure you set optionLIMIT_JSON_DEPTH
- since that's what "connect2id" is doing in their library, they were responsible for fixing it. They've already provided a new 11.x release that fixes the
JSONParsersetup on their side, i.e. you rather need their fixed version and not version 2.5.2 of json-smart- as stated here, they would also need to backport the fix to the versions that Spring Security needs IMHO
What's Changed
- fix CVE-2024-57699 for predefined parsers by
@ccudennec-ottoin netplex/json-smart-v2#233
... (truncated)
Commits
ebf7cf8try deploy95a9bc3try somthink else4aac0d7make it publishd3a86dfdeploy one by one13d282bpatch deployb4940f5patch deploy verbosityedc6e6ehange publishing plugin49e150fadd git tag29543a1replace snapshot by the release version5803602force release to central- Additional commits viewable in compare view
Updates commons-net:commons-net from 3.10.0 to 3.13.0
Changelog
Sourced from commons-net:commons-net's changelog.
Apache Commons Net 3.13.0 Release Notes
The Apache Commons Net team is pleased to announce the release of Apache Commons Net 3.13.0.
Apache Commons Net library contains a collection of network utilities and protocol implementations. Supported protocols include Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, and Whois.
This is a feature and maintenance release. Java 8 or later is required.
For complete information on Apache Commons Net, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Net website:
https://commons.apache.org/proper/commons-net/
Download page: https://commons.apache.org/proper/commons-net/download_net.cgi
New features
o Add DatagramSocketClient.getDefaultTimeoutDuration() and deprecate getDefaultTimeout(). Thanks to Gary Gregory. o NET-741: Add subnet IPv6 handling with SubnetUtils6 #391. Thanks to Maros Orsak, Gary Gregory.
Fixed Bugs
o DaytimeTCPClientTest now should now pass inside most VPNs. Thanks to Henri Biestro, Gary Gregory. o Migrate tests to JUnit5 #358, #359. Thanks to Jakub Kupczyk, Gary Gregory. o Fix malformed Javadoc comments. Thanks to Gary Gregory. o IMAPExportMbox now restores the current thread's interrupt flag when catching InterruptedException. Thanks to Gary Gregory. o IOUtil.readWrite() now restores the current thread's interrupt flag when catching InterruptedException. Thanks to Gary Gregory. o TelnetInputStream now restores the current thread's interrupt flag when catching InterruptedException. Thanks to Gary Gregory. o NET-740: FTP fails to parse listings for Linux vsftpd in Chinese or Japanese #393. Thanks to Jianwei Guo, Gary Gregory. o TelnetInputStream.read() doesn't preserve the original InterruptedException as the cause of its InterruptedIOException. Thanks to Gary Gregory. o FTPClient._storeFile(String, String, InputStream) doesn't always close it's internal socket when an exception is thrown early in processing. Thanks to Gary Gregory. o ListenerList.removeListener(T) now ignores null input to avoid a NullPointerException. Thanks to Gary Gregory. o ListenerList.addListener(T) now ignores null input. Thanks to Gary Gregory. o Fix typo in FTPConnectionClosedException message from FTP.getReply(boolean). Thanks to Gary Gregory. o Reimplement Util.copyReader() with IOUtils.copyLarge(). Thanks to Gary Gregory. o Reimplement Util.copyStream() with IOUtils.copyLarge(). Thanks to Gary Gregory. o Reimplement Util.copyStream() with IOUtils.copyLarge(). Thanks to Gary Gregory. o Deprecate Util.copyReader(Reader, Writer) in favor of IOUtils.copyLarge(Reader, Writer). Thanks to Gary Gregory.
Changes
o Bump org.apache.commons:commons-parent from 85 to 97 #371, #388, #389. Thanks to Gary Gregory, Dependabot. o Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0. Thanks to Gary Gregory, Dependabot.
... (truncated)
Commits
35fa0dfPrepare for the release candidate 3.13.0 RC11cc5b6ePrepare for the next release candidatea4b246eReuse IOUtils.copyLarge()e5ca262Javadoc3cb18ecDeprecate Util.copyReader(Reader, Writer) in favor of3373d77Reimplement Util.copyReader() with IOUtils.copyLarge()3be2077Reimplement Util.copyStream() with IOUtils.copyLarge()7b41144Javadoc1b584b4Fix typo in FTPConnectionClosedException message from3792023Javadoc- Additional commits viewable in compare view
Updates com.squareup.okio:okio from 3.4.0 to 3.17.0
Changelog
Sourced from com.squareup.okio:okio's changelog.
Version 3.17.0
2026-03-11
New: Adjust down the Kotlin stdlib dependency to [Kotlin 2.1.21][kotlin_2_1_21]. Okio is built with an up-to-date Kotlin compiler (2.2.21), but depends on an older kotlin-stdlib. We're doing this so you can update Okio and Kotlin independently.
Fix: Return the correct timestamp in
FileMetadata.createdAtMillison Kotlin/Native on UNIX platforms. We were incorrectly using the POSIXctime(change time) instead of thebirthtime. With this fix Okio now prefersstatx()overstat()on native platforms. This API first appeared in Linux in 4.11 (2017) and Android in API 30 (2020).Version 3.16.4
2025-11-17
- Fix: Don't delay triggering timeouts. In 3.16.0 we introduced a regression that caused timeouts to fi...
Description has been truncated
Package Dependencies
maven
3.0.0-M5 → 3.6.0-M1
Minor
org.mongodb:mongodb-driver-sync
maven
4.11.1 → 5.8.0
Major
org.codehaus.plexus:plexus-utils
maven
3.6.1 → 4.0.3
Major
maven
3.21.0 → 3.28.0
Minor
maven
3.10.0 → 3.15.0
Minor
maven
2.21.4 → 2.22.0
Minor
maven
3.1.2 → 3.6.0
Minor
maven
3.3.0 → 3.5.0
Minor
maven
3.5.0 → 3.6.3
Minor
org.jacoco:jacoco-maven-plugin
maven
0.8.12 → 0.8.15
Patch
maven
2.23.0 → 3.8.0
Major
org.apache.kafka:kafka-clients
maven
4.1.2 → 4.3.1
Minor
maven
4.8.6.6 → 4.10.2.0
Minor
com.google.protobuf:protobuf-java
maven
3.25.5 → 4.35.1
Major
com.nimbusds:nimbus-jose-jwt
maven
10.0.2 → 10.9.1
Minor
com.mysql:mysql-connector-j
maven
8.4.0 → 9.7.0
Major
maven
2.21.4 → 2.22.0
Minor
org.apache.logging.log4j:log4j-core
maven
2.25.4 → 2.26.1
Minor
org.apache.logging.log4j:log4j-api
maven
2.25.4 → 2.26.1
Minor
com.alibaba.nacos:nacos-client
maven
2.1.2 → 3.2.2
Major
maven
2.21 → 2.22
maven
2.31.0 → 2.50.0
Minor
maven
3.5.1 → 3.6.2
Minor
org.apache.hadoop:hadoop-common
maven
3.3.6 → 3.5.0
Minor
org.apache.hadoop:hadoop-client
maven
3.3.6 → 3.5.0
Minor
commons-net:commons-net
maven
3.10.0 → 3.13.0
Minor
org.scala-lang:scala-library
maven
2.12.7 → 3.8.4
Major
maven
2.14.2 → 2.21.0
Minor
com.jayway.jsonpath:json-path
maven
2.9.0 → 3.0.0
Major
maven
3.6.0 → 3.8.0
Minor
maven
3.3.6 → 3.5.0
Minor
org.apache.hadoop:hadoop-hdfs
maven
3.3.6 → 3.5.0
Minor
org.apache.kafka:connect-api
maven
3.6.1 → 4.3.1
Major
maven
2.25.4 → 2.26.1
Minor
maven
2.25.4 → 2.26.1
Minor
net.minidev:accessors-smart
maven
2.5.0 → 2.6.0
Minor
org.apache.paimon:paimon-flink-1.20
maven
1.4.1 → 1.4.2
Patch
org.apache.paimon:paimon-flink-cdc
maven
1.4.1 → 1.4.2
Patch
Technical Details
| ID: | 16118664 |
| UUID: | 4807809950 |
| Node ID: | PR_kwDOGl3uh87tzSkX |
| Host: | GitHub |
| Repository: | SophiaData/Bigdata_Code_Tutorial |