An open index of dependabot pull requests across open source projects.

Bump the "java" group with 1 updates across multiple ecosystems

Open
Number: #445
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 20
Created: August 11, 2025 at 01:38 PM UTC
(10 months ago)
Updated: September 12, 2025 at 07:40 AM UTC
(9 months ago)
Labels:
dependencies java
Description:

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps the java group with 1 update in the / directory: io.opentelemetry:opentelemetry-bom.
Bumps the java group with 1 update in the /examples/fabric-contract-example-as-service directory: com.gradleup.shadow.
Bumps the java group with 1 update in the /examples/fabric-contract-example-gradle directory: com.gradleup.shadow.
Bumps the java group with 1 update in the /examples/fabric-contract-example-gradle-kotlin directory: com.gradleup.shadow.
Bumps the java group with 1 update in the /examples/ledger-api directory: com.gradleup.shadow.
Bumps the java group with 1 update in the /fabric-chaincode-integration-test/src/contracts/bare-gradle directory: com.gradleup.shadow.
Bumps the java group with 1 update in the /fabric-chaincode-integration-test/src/contracts/fabric-ledger-api directory: com.gradleup.shadow.
Bumps the java group with 1 update in the /fabric-chaincode-integration-test/src/contracts/fabric-shim-api directory: com.gradleup.shadow.
Bumps the java group with 1 update in the /fabric-chaincode-shim directory: io.opentelemetry:opentelemetry-bom.

Updates io.opentelemetry:opentelemetry-bom from 1.52.0 to 1.53.0

Release notes

Sourced from io.opentelemetry:opentelemetry-bom's releases.

Version 1.53.0

SDK

  • File based config will log the wrong file format, when applicable. (#7498)

Exporters

  • Change okhttp dependency to okhttp-jvm, which fixes missing class failures in transitive dependencies. (#7517)

🙇 Thank you

This release was possible thanks to the following contributors who shared their brilliant ideas and awesome pull requests:

@​breedx-splk @​jack-berg @​jaydeluca @​jkwatson @​laurit @​steffan-westcott @​the-clam @​trask @​zeitlinger

Changelog

Sourced from io.opentelemetry:opentelemetry-bom's changelog.

Version 1.53.0 (2025-08-08)

SDK

  • File based config will log the wrong file format, when applicable. (#7498)

Exporters

  • Change okhttp dependency to okhttp-jvm, which fixes missing class failures in transitive dependencies. (#7517)
Commits
  • b15d4d1 [release/v1.53.x] Prepare release 1.53.0 (#7548)
  • 9f71936 Fix collector integration test (#7545) (#7546)
  • 6df4baf Prepare changelog for 1.53.0 (#7533)
  • acf27af fix(deps): update dependency com.squareup.wire:wire-bom to v5.3.8 (#7535)
  • 2404acb fix(deps): update dependency org.assertj:assertj-core to v3.27.4 (#7539)
  • cb2cdd7 fix(deps): update dependency checkstyle to v11 (#7536)
  • 893decf chore(deps): update plugin com.gradleup.shadow to v9 (#7534)
  • 1cb6427 fix(deps): update dependency com.uber.nullaway:nullaway to v0.12.8 (#7531)
  • 613e5d6 fix(deps): update dependency com.google.api.grpc:proto-google-common-protos t...
  • 985533f fix(deps): update dependency com.squareup.wire:wire-bom to v5.3.6 (#7528)
  • Additional commits viewable in compare view

Updates com.gradleup.shadow from 9.0.0 to 9.0.1

Release notes

Sourced from com.gradleup.shadow's releases.

9.0.1

[!NOTE] If you are upgrading from 8.x versions, please read 9.0.0 release notes first.

Changed

  • Improve the error message for empty mainClassName. (#1601)
  • Default duplicatesStrategy back to EXCLUDE. (#1617)
    • This strategy is consistent with 8.x series behavior, which is more compatible for most users upgrading.
    • For most ResourceTransformer users, you need to override the strategy to INCLUDE to make them work.
    • Strongly suggest declaring the duplicatesStrategy explicitly in your ShadowJar configuration to avoid confusion.
    • See more details about the strategies at Handling Duplicates Strategy.

Fixed

  • Fix the regression of can't shadow directory inputs. (#1606)
  • Fix the regression of MinimizeDependencyFilter. (#1611)
Commits
  • 9b51f5f Prepare version 9.0.1
  • bbc693a Fix the header link for version 9.0.0
  • 0686a8f Prepare changelog for 9.0.1 and polish the items of 9.0.0 (#1621)
  • 75a8688 Cleanups of resolve (#1620)
  • ed11c00 Fix the regression of resolving circular dependencies in MinimizeDependencyFi...
  • c3c109b Default duplicatesStrategy back to EXCLUDE
  • 46d7be1 Pin the handling DuplicatesStrategy section (#1619)
  • 67dd06f Update docs about DuplicatesStrategy.INCLUDE
  • 936c82a Fix typo
  • a28ab97 Improve readability of DefaultDependencyFilter (#1616)
  • Additional commits viewable in compare view

Updates com.gradleup.shadow from 9.0.0 to 9.0.1

Release notes

Sourced from com.gradleup.shadow's releases.

9.0.1

[!NOTE] If you are upgrading from 8.x versions, please read 9.0.0 release notes first.

Changed

  • Improve the error message for empty mainClassName. (#1601)
  • Default duplicatesStrategy back to EXCLUDE. (#1617)
    • This strategy is consistent with 8.x series behavior, which is more compatible for most users upgrading.
    • For most ResourceTransformer users, you need to override the strategy to INCLUDE to make them work.
    • Strongly suggest declaring the duplicatesStrategy explicitly in your ShadowJar configuration to avoid confusion.
    • See more details about the strategies at Handling Duplicates Strategy.

Fixed

  • Fix the regression of can't shadow directory inputs. (#1606)
  • Fix the regression of MinimizeDependencyFilter. (#1611)
Commits
  • 9b51f5f Prepare version 9.0.1
  • bbc693a Fix the header link for version 9.0.0
  • 0686a8f Prepare changelog for 9.0.1 and polish the items of 9.0.0 (#1621)
  • 75a8688 Cleanups of resolve (#1620)
  • ed11c00 Fix the regression of resolving circular dependencies in MinimizeDependencyFi...
  • c3c109b Default duplicatesStrategy back to EXCLUDE
  • 46d7be1 Pin the handling DuplicatesStrategy section (#1619)
  • 67dd06f Update docs about DuplicatesStrategy.INCLUDE
  • 936c82a Fix typo
  • a28ab97 Improve readability of DefaultDependencyFilter (#1616)
  • Additional commits viewable in compare view

Updates com.gradleup.shadow from 9.0.0 to 9.0.1

Release notes

Sourced from com.gradleup.shadow's releases.

9.0.1

[!NOTE] If you are upgrading from 8.x versions, please read 9.0.0 release notes first.

Changed

  • Improve the error message for empty mainClassName. (#1601)
  • Default duplicatesStrategy back to EXCLUDE. (#1617)
    • This strategy is consistent with 8.x series behavior, which is more compatible for most users upgrading.
    • For most ResourceTransformer users, you need to override the strategy to INCLUDE to make them work.
    • Strongly suggest declaring the duplicatesStrategy explicitly in your ShadowJar configuration to avoid confusion.
    • See more details about the strategies at Handling Duplicates Strategy.

Fixed

  • Fix the regression of can't shadow directory inputs. (#1606)
  • Fix the regression of MinimizeDependencyFilter. (#1611)
Commits
  • 9b51f5f Prepare version 9.0.1
  • bbc693a Fix the header link for version 9.0.0
  • 0686a8f Prepare changelog for 9.0.1 and polish the items of 9.0.0 (#1621)
  • 75a8688 Cleanups of resolve (#1620)
  • ed11c00 Fix the regression of resolving circular dependencies in MinimizeDependencyFi...
  • c3c109b Default duplicatesStrategy back to EXCLUDE
  • 46d7be1 Pin the handling DuplicatesStrategy section (#1619)
  • 67dd06f Update docs about DuplicatesStrategy.INCLUDE
  • 936c82a Fix typo
  • a28ab97 Improve readability of DefaultDependencyFilter (#1616)
  • Additional commits viewable in compare view

Updates com.gradleup.shadow from 9.0.0 to 9.0.1

Release notes

Sourced from com.gradleup.shadow's releases.

9.0.1

[!NOTE] If you are upgrading from 8.x versions, please read 9.0.0 release notes first.

Changed

  • Improve the error message for empty mainClassName. (#1601)
  • Default duplicatesStrategy back to EXCLUDE. (#1617)
    • This strategy is consistent with 8.x series behavior, which is more compatible for most users upgrading.
    • For most ResourceTransformer users, you need to override the strategy to INCLUDE to make them work.
    • Strongly suggest declaring the duplicatesStrategy explicitly in your ShadowJar configuration to avoid confusion.
    • See more details about the strategies at Handling Duplicates Strategy.

Fixed

  • Fix the regression of can't shadow directory inputs. (#1606)
  • Fix the regression of MinimizeDependencyFilter. (#1611)
Commits
  • 9b51f5f Prepare version 9.0.1
  • bbc693a Fix the header link for version 9.0.0
  • 0686a8f Prepare changelog for 9.0.1 and polish the items of 9.0.0 (#1621)
  • 75a8688 Cleanups of resolve (#1620)
  • ed11c00 Fix the regression of resolving circular dependencies in MinimizeDependencyFi...
  • c3c109b Default duplicatesStrategy back to EXCLUDE
  • 46d7be1 Pin the handling DuplicatesStrategy section (#1619)
  • 67dd06f Update docs about DuplicatesStrategy.INCLUDE
  • 936c82a Fix typo
  • a28ab97 Improve readability of DefaultDependencyFilter (#1616)
  • Additional commits viewable in compare view

Updates com.gradleup.shadow from 9.0.0 to 9.0.1

Release notes

Sourced from com.gradleup.shadow's releases.

9.0.1

[!NOTE] If you are upgrading from 8.x versions, please read 9.0.0 release notes first.

Changed

  • Improve the error message for empty mainClassName. (#1601)
  • Default duplicatesStrategy back to EXCLUDE. (#1617)
    • This strategy is consistent with 8.x series behavior, which is more compatible for most users upgrading.
    • For most ResourceTransformer users, you need to override the strategy to INCLUDE to make them work.
    • Strongly suggest declaring the duplicatesStrategy explicitly in your ShadowJar configuration to avoid confusion.
    • See more details about the strategies at Handling Duplicates Strategy.

Fixed

  • Fix the regression of can't shadow directory inputs. (#1606)
  • Fix the regression of MinimizeDependencyFilter. (#1611)
Commits
  • 9b51f5f Prepare version 9.0.1
  • bbc693a Fix the header link for version 9.0.0
  • 0686a8f Prepare changelog for 9.0.1 and polish the items of 9.0.0 (#1621)
  • 75a8688 Cleanups of resolve (#1620)
  • ed11c00 Fix the regression of resolving circular dependencies in MinimizeDependencyFi...
  • c3c109b Default duplicatesStrategy back to EXCLUDE
  • 46d7be1 Pin the handling DuplicatesStrategy section (#1619)
  • 67dd06f Update docs about DuplicatesStrategy.INCLUDE
  • 936c82a Fix typo
  • a28ab97 Improve readability of DefaultDependencyFilter (#1616)
  • Additional commits viewable in compare view

Updates com.gradleup.shadow from 9.0.0 to 9.0.1

Release notes

Sourced from com.gradleup.shadow's releases.

9.0.1

[!NOTE] If you are upgrading from 8.x versions, please read 9.0.0 release notes first.

Changed

  • Improve the error message for empty mainClassName. (#1601)
  • Default duplicatesStrategy back to EXCLUDE. (#1617)
    • This strategy is consistent with 8.x series behavior, which is more compatible for most users upgrading.
    • For most ResourceTransformer users, you need to override the strategy to INCLUDE to make them work.
    • Strongly suggest declaring the duplicatesStrategy explicitly in your ShadowJar configuration to avoid confusion.
    • See more details about the strategies at Handling Duplicates Strategy.

Fixed

  • Fix the regression of can't shadow directory inputs. (#1606)
  • Fix the regression of MinimizeDependencyFilter. (#1611)
Commits
  • 9b51f5f Prepare version 9.0.1
  • bbc693a Fix the header link for version 9.0.0
  • 0686a8f Prepare changelog for 9.0.1 and polish the items of 9.0.0 (#1621)
  • 75a8688 Cleanups of resolve (#1620)
  • ed11c00 Fix the regression of resolving circular dependencies in MinimizeDependencyFi...
  • c3c109b Default duplicatesStrategy back to EXCLUDE
  • 46d7be1 Pin the handling DuplicatesStrategy section (#1619)
  • 67dd06f Update docs about DuplicatesStrategy.INCLUDE
  • 936c82a Fix typo
  • a28ab97 Improve readability of DefaultDependencyFilter (#1616)
  • Additional commits viewable in compare view

Updates com.gradleup.shadow from 9.0.0 to 9.0.1

Release notes

Sourced from com.gradleup.shadow's releases.

9.0.1

[!NOTE] If you are upgrading from 8.x versions, please read 9.0.0 release notes first.

Changed

  • Improve the error message for empty mainClassName. (#1601)
  • Default duplicatesStrategy back to EXCLUDE. (#1617)
    • This strategy is consistent with 8.x series behavior, which is more compatible for most users upgrading.
    • For most ResourceTransformer users, you need to override the strategy to INCLUDE to make them work.
    • Strongly suggest declaring the duplicatesStrategy explicitly in your ShadowJar configuration to avoid confusion.
    • See more details about the strategies at Handling Duplicates Strategy.

Fixed

  • Fix the regression of can't shadow directory inputs. (#1606)
  • Fix the regression of MinimizeDependencyFilter. (#1611)
Commits
  • 9b51f5f Prepare version 9.0.1
  • bbc693a Fix the header link for version 9.0.0
  • 0686a8f Prepare changelog for 9.0.1 and polish the items of 9.0.0 (#1621)
  • 75a8688 Cleanups of resolve (#1620)
  • ed11c00 Fix the regression of resolving circular dependencies in MinimizeDependencyFi...
  • c3c109b Default duplicatesStrategy back to EXCLUDE
  • 46d7be1 Pin the handling DuplicatesStrategy section (#1619)
  • 67dd06f Update docs about DuplicatesStrategy.INCLUDE
  • 936c82a Fix typo
  • a28ab97 Improve readability of DefaultDependencyFilter (#1616)
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-bom from 1.52.0 to 1.53.0

Release notes

Sourced from io.opentelemetry:opentelemetry-bom's releases.

Version 1.53.0

SDK

  • File based config will log the wrong file format, when applicable. (#7498)

Exporters

  • Change okhttp dependency to okhttp-jvm, which fixes missing class failures in transitive dependencies. (#7517)

🙇 Thank you

This release was possible thanks to the following contributors who shared their brilliant ideas and awesome pull requests:

@​breedx-splk @​jack-berg @​jaydeluca @​jkwatson @​laurit @​steffan-westcott @​the-clam @​trask @​zeitlinger

Changelog

Sourced from io.opentelemetry:opentelemetry-bom's changelog.

Version 1.53.0 (2025-08-08)

SDK

  • File based config will log the wrong file format, when applicable. (#7498)

Exporters

  • Change okhttp dependency to okhttp-jvm, which fixes missing class failures in transitive dependencies. (#7517)
Commits
  • b15d4d1 [release/v1.53.x] Prepare release 1.53.0 (#7548)
  • 9f71936 Fix collector integration test (#7545) (#7546)
  • 6df4baf Prepare changelog for 1.53.0 (#7533)
  • acf27af fix(deps): update dependency com.squareup.wire:wire-bom to v5.3.8 (#7535)
  • 2404acb fix(deps): update dependency org.assertj:assertj-core to v3.27.4 (#7539)
  • cb2cdd7 fix(deps): update dependency checkstyle to v11 (#7536)
  • 893decf chore(deps): update plugin com.gradleup.shadow to v9 (#7534)
  • 1cb6427 fix(deps): update dependency com.uber.nullaway:nullaway to v0.12.8 (#7531)
  • 613e5d6 fix(deps): update dependency com.google.api.grpc:proto-google-common-protos t...
  • 985533f fix(deps): update dependency com.squareup.wire:wire-bom to v5.3.6 (#7528)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
Commits:
1
Files Changed:
8
Additions:
+8
Deletions:
-8
Technical Details
ID: 4912764
UUID: 2735567055
Node ID: PR_kwDOBecmdc6jDXDP
Host: GitHub
Repository: hyperledger/fabric-chaincode-java
Merge State: Unknown