Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

build(deps): bump the dependencies group with 15 updates

Merged
Number: #3758
Type: Pull Request
State: Merged
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 0
Created: August 11, 2025 at 01:06 AM UTC
(10 months ago)
Updated: August 11, 2025 at 12:30 PM UTC
(10 months ago)
Merged: August 11, 2025 at 12:30 PM UTC
(10 months ago)
by jknack
Time to Close: about 11 hours
Labels:
dependencies java
Description:

Bumps the dependencies group with 15 updates:

Package From To
com.github.spotbugs:spotbugs-annotations 4.9.3 4.9.4
org.eclipse.jetty:jetty-server 12.0.23 12.0.24
org.eclipse.jetty.websocket:jetty-websocket-core-server 12.0.23 12.0.24
org.eclipse.jetty.websocket:jetty-websocket-jetty-api 12.0.23 12.0.24
org.eclipse.jetty.websocket:jetty-websocket-jetty-server 12.0.23 12.0.24
org.eclipse.jetty.http2:jetty-http2-server 12.0.23 12.0.24
org.eclipse.jetty:jetty-alpn-java-server 12.0.23 12.0.24
org.eclipse.jetty.http2:jetty-http2-client 12.0.23 12.0.24
com.zaxxer:HikariCP 7.0.0 7.0.1
org.assertj:assertj-core 3.27.3 3.27.4
io.lettuce:lettuce-core 6.7.1.RELEASE 6.8.0.RELEASE
com.puppycrawl.tools:checkstyle 10.26.1 11.0.0
software.amazon.awssdk:bom 2.32.14 2.32.19
org.jline:jline 3.30.4 3.30.5
org.jline:jline-terminal-jna 3.30.4 3.30.5

Updates com.github.spotbugs:spotbugs-annotations from 4.9.3 to 4.9.4

Release notes

Sourced from com.github.spotbugs:spotbugs-annotations's releases.

SpotBugs 4.9.4

CHANGELOG

CHECKSUM

file checksum (sha256)
note: The checksums were not produced here due to change with gradle 9 when we published. This is subsequently fixed for next releases.
Changelog

Sourced from com.github.spotbugs:spotbugs-annotations's changelog.

4.9.4 - 2025-08-07

Changed

  • AnnotationMatcher can now ignore bugs if annotation is also applied on methods or fields. Previously only annotations on classes were considered.
  • Add relevant CWE ids to bugs and refer the CWEs in the bug messages (#3354).
  • Replace LOCAL_VARIABLE_UNKNOWN with exact method name for NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE (#3485)

Fixed

  • Widen main method recognition according to JEP 445. (#3371)
  • Do not report US_USELESS_SUPPRESSION_ON_* on methods, fields, parameters, packages or classes with an *.Generated annotation with retention >= class (#3350)(#3409)
  • Rewrite some member in ResourceValueFrame.java to Enum (#2061)
  • Ignore non-interpreted text when looking for FS_BAD_DATE_FORMAT_FLAG_COMBO (#3387)
  • Fix IllegalArgumentException thrown from FindNoSideEffectMethods detector (#3320)
  • Do not report RV_RETURN_VALUE_IGNORED_NO_SIDE_EFFECT when part of a Mockito doAnswer(), doCallRealMethod(), doNothing(), doThrow() or doReturn() call (#3334)
  • Fix CT_CONSTRUCTOR_THROW false positive with public and private constructors in specific order of methods (#3417)
  • Fix AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE, AT_NONATOMIC_64BIT_PRIMITIVE and AT_STALE_THREAD_WRITE_OF_PRIMITIVE FP when the relevant code is in private method, which is only called with proper synchronization (#3428)
  • Do not report RV_RETURN_VALUE_IGNORED_NO_SIDE_EFFECT when part of a BDDMockito call (#3441)
  • Fix AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE when field of a local variable is set. (#3459)
  • Fix AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE FP when there was no compound operation (#3363)
  • Fix NM_FIELD_NAMING_CONVENTION crash in the TestASM detector (#3489)
  • Do not report UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR for fields initialized in JUnit 3/4 setUp() method. (#3169)
  • Fix US_USELESS_SUPPRESSION_ON_FIELD/UUF_UNUSED_FIELD false positive (#3496)
  • Make the osgi manifest of the annotations jar Java 8 compatible (#3498) (#3500)
  • TextUICommandLine supports all options encoded in Eclipse preferences file (#3520)
  • Unnecessary suppressions fix for records headers (#3471)
  • Dead store fix when switch case contains loops (#3530) (#3449)
  • Consider PUTFIELD and PUTSTATIC when looking for assertions with side effects (#3463)
  • Detect cases when equals() unconditionally returns true or false (#3528)
  • Do not report that an Iterator does not throw NoSuchElementException when hasNext() returns true (#3501)
  • Detect random value cast to int when stored in temporary variable (#3461)
  • Look for interfaces default methods when searching uncalled private methods (#1988)
  • Fixed field self assignment false positive (#2258)
  • Fixed DMI_INVOKING_TOSTRING_ON_ARRAY on newer JDK (#1147)
  • Fix NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE false positive with Objects.requireNonNull (#2965) (#3573)
  • Track inner classes access methods to correctly report the bugs (#2029)
  • SF_SWITCH_NO_DEFAULT false positive fix (#1148) (#3572)

Added

  • Added the unnecessary annotation to the US_USELESS_SUPPRESSION_ON_* messages (#3395)
  • Multi-threaded code checks can be skipped with @NotThreadSafe (#3390)
  • New bug type CWO_CLOSED_WITHOUT_OPENED for locks that might be released without even being acquired. (See SEI CERT rule LCK08-J) (#2055)
    • Breaking change: changed values and new items in ResourceValueFrame.
  • Inline access method for method. (#3481)
  • Added DMI_MISLEADING_SUBSTRING for calling subString(0) on a StringBuffer/StringBuilder (#1928)

Signing

  • Signing for Eclipse plugin has been removed at the current time due to signing keys being expired. The expired key produced a warning during install, the same is true without signing.
Commits
  • 014b0ee release v4.9.4
  • 0c0f125 build: Adjustments to the tag checking
  • 788524b prepare for next release
  • 44656f0 release v4.9.4
  • da2f64d build: Make sure check is against origin/master not master
  • 0db0852 prepare for next release
  • 7ecaa15 release v4.9.4
  • a2845af build: Remove space in curl
  • b433c57 build: Disable parallel builds for now
  • a4e906f build: Cleanup release action to correctly work
  • Additional commits viewable in compare view

Updates org.eclipse.jetty:jetty-server from 12.0.23 to 12.0.24

Updates org.eclipse.jetty.websocket:jetty-websocket-core-server from 12.0.23 to 12.0.24

Updates org.eclipse.jetty.websocket:jetty-websocket-jetty-api from 12.0.23 to 12.0.24

Updates org.eclipse.jetty.websocket:jetty-websocket-jetty-server from 12.0.23 to 12.0.24

Updates org.eclipse.jetty.http2:jetty-http2-server from 12.0.23 to 12.0.24

Updates org.eclipse.jetty:jetty-alpn-java-server from 12.0.23 to 12.0.24

Updates org.eclipse.jetty.http2:jetty-http2-client from 12.0.23 to 12.0.24

Updates org.eclipse.jetty.websocket:jetty-websocket-core-server from 12.0.23 to 12.0.24

Updates com.zaxxer:HikariCP from 7.0.0 to 7.0.1

Changelog

Sourced from com.zaxxer:HikariCP's changelog.

HikariCP Changes

Changes in 7.0.1

  • merged #2346 fix regression with setSchema behavior

  • decrease thread yield frequency in ConcurrentBag.requite()

Changes in 7.0.0

  • merged #2340 NoSuchMethodException error that is thrown when setting a metric registry, fixes to UtilityElf reflection code to use the correct method signature.

  • fixed #1294 add support for HikariCredentialsProvider class

  • fixed #2265 bail out of the pool filling loop if the thread is interrupted

Changes in 6.3.2

  • fixed #2342 restore module-info.class to jar file, which was lost in 6.3.1

  • fixed #2256 add support for legacy override of getUsername()/getPassword() of HikariDataSource. See project page for documentation of system property com.zaxxer.hikari.legacy.supportUserPassDataSourceOverride.

  • fixed #2323 right or wrong (wrt driver behavior) return to previous Connection.get/setSchema behavior

  • fixed #2288 upgrade dependencies and fix build warnings

Changes in 6.3.1

  • fixed #2315 source jar contains also binary .class files and missing some .java files

  • fixed #2307 remove improper hardcoded timout, use validationTimeout

  • fixed #2305 keep properties key and values as is rather than forcing stringification. Also fixes #2286 and #2304

  • upgraded various maven plugin dependencies to latest versions

Changes in 6.3.0

  • increase keepaliveTime variance from 10% to 20%

  • merged #2266 support duration values for configuration from properties, such as 10ms, 20s, 30m, 40h or 50d

  • merged #2284 align logs from HikariPool.logPoolState()

  • merged #2285 set default value for maxIdle in HikariConfig constructor (no functional change)

  • merged #2294 Allow setting String[] and int[] properties (useful for pgjdbc HA configuration)

... (truncated)

Commits
  • 217bcc8 [maven-release-plugin] prepare release HikariCP-7.0.1
  • 29ad2f4 update changes log
  • b81bbc9 fixes #2323 always reset schema upon connection retrieval (#2346)
  • ee5328d decrease yield() frequency during direct hand-off attempts
  • 1da3a33 Update README.md
  • 17c4b33 Update README.md
  • 1053fdf Update README.md for v7.0.0
  • 65afe27 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates org.assertj:assertj-core from 3.27.3 to 3.27.4

Release notes

Sourced from org.assertj:assertj-core's releases.

v3.27.4

:no_entry_sign: Deprecated

Core

  • Deprecate org.assertj.core.annotations.Beta in favor of org.assertj.core.annotation.Beta
  • Deprecate org.assertj.core.util.CanIgnoreReturnValue in favor of org.assertj.core.annotation.CanIgnoreReturnValue
  • Deprecate org.assertj.core.util.CheckReturnValue in favor of org.assertj.core.annotation.CheckReturnValue

:bug: Bug Fixes

Core

  • Fix thread-safety in AbstractDateAssert #3874

:zap: Improvements

  • Migrate to the Central Publisher Portal, enable snapshot publishing #3881

Core

  • Annotate fail methods with custom @Contract #3882

:heart: Contributors

Thanks to all the contributors who worked on this release:

@​kelunik

Commits
  • 7a64cde [maven-release-plugin] prepare release assertj-build-3.27.4
  • feb5f6f Annotate fail methods with custom @Contract (#3882)
  • 43e8b65 Deprecate org.assertj.core.util.CheckReturnValue in favor of `org.assertj.c...
  • 1bf8cd6 Deprecate org.assertj.core.util.CanIgnoreReturnValue in favor of `org.asser...
  • 72d08b2 Deprecate org.assertj.core.annotations.Beta in favor of `org.assertj.core.a...
  • 475c2eb Polish
  • fdc9bc5 Skip tests during snapshot publishing
  • 8f4a1b5 Migrate to the Central Publisher Portal, enable snapshot publishing (#3881)
  • 7461b68 Fix thread-safety in AbstractDateAssert (#3874)
  • 015f095 Remove EOL Java 23
  • Additional commits viewable in compare view

Updates io.lettuce:lettuce-core from 6.7.1.RELEASE to 6.8.0.RELEASE

Release notes

Sourced from io.lettuce:lettuce-core's releases.

6.8.0.RELEASE

The Lettuce team is pleased to announce the Lettuce 6.8.0 minor release!

This release provides support for the newly introduced Redis Query Engine support which was is part of Redis 8.0 and previously - as part of RedisStack. The new operators (DIFF, DIFF1, ANDOR and ONE) for the BITOP command are also available. The team has worked on extending the contract of the XADD and XTRIM commands to support trimming policy, and also introduced the new XDELEX and XACKDEL commands.

Lettuce 6.8.0 supports Redis 2.6+ up to Redis 8.x. In terms of Java runtime, Lettuce requires at least Java 8 and works with Java 24. The driver is tested against Redis 8.2, Redis 8.0, Redis 7.4 and Redis 7.2.

Find the full changelog at the end of this document. Thanks to all contributors who made Lettuce 6.8.0.RELEASE possible.

📗 Links Reference documentation: https://lettuce.io/core/6.8.0.RELEASE/reference/ Javadoc: https://lettuce.io/core/6.8.0.RELEASE/api/

⭐ New Features Introduce RediSearch by @​tishun in redis/lettuce#3375 Add support for new operations of BITOP command in Redis Community Edition 8.2 by @​atakavci in redis/lettuce#3334 Add support for 8.2 stream commands by @​uglide in redis/lettuce#3374

🐞 Bug Fixes NoClassDefFoundError in Lettuce 6.7.0 #3317 by @​tishun in redis/lettuce#3318

💡 Other The instance of the ObjectMapper can now be reused in the DefaultJsonParser by @​thachlp in redis/lettuce#3372 Added basic connection interruption tests by @​uglide in redis/lettuce#3292 DOC-4758 async JSON doc examples by @​andy-stark-redis in redis/lettuce#3335 Fixed SocketOptions.Builder validation messages by @​hubertchylik in redis/lettuce#3366 Refactor tests for clarity and maintainability by @​Rian-Ismael in redis/lettuce#3363 Provide support for the SVS-VMANA index (#3385) by @​tishun in redis/lettuce#3386

❤️ New Contributors## New Contributors

Full Changelog: https://github.com/redis/lettuce/compare/6.7.0.RELEASE...6.8.0.RELEASE

Changelog

Sourced from io.lettuce:lettuce-core's changelog.

Lettuce 6.8.0 RELEASE NOTES

The Redis team is delighted to announce the release of Lettuce 6.8.0

Lettuce 6 supports Redis 2.6+ up to Redis 7.x. In terms of Java runtime, Lettuce requires at least Java 8 and works with Java 21.

Thanks to all contributors who made Lettuce 6.8.0 possible.

If you need any support, meet Lettuce at

Commands

Enhancements

  • N/A

Fixes

Other

Commits

Updates org.eclipse.jetty.websocket:jetty-websocket-jetty-api from 12.0.23 to 12.0.24

Updates org.eclipse.jetty.websocket:jetty-websocket-jetty-server from 12.0.23 to 12.0.24

Updates org.eclipse.jetty.http2:jetty-http2-server from 12.0.23 to 12.0.24

Updates org.eclipse.jetty:jetty-alpn-java-server from 12.0.23 to 12.0.24

Updates com.puppycrawl.tools:checkstyle from 10.26.1 to 11.0.0

Release notes

Sourced from com.puppycrawl.tools:checkstyle's releases.

checkstyle-11.0.0

Checkstyle 11.0.0 - https://checkstyle.org/releasenotes.html#Release_11.0.0

Breaking backward compatibility:

#13209 - Migrate project to JDK 17 #17321 - Use jdk17 as minimial required

New:

#17366 - FinalParameters - missing several tokens to check

Bug fixes:

#17332 - False positive from JavadocType: Unused @param tag #8205 - fix all false-negatives about there is no single space between a type annotation and [] or .... for Google Style #17158 - InvalidJavadocPosition false-positive for record compact constructor with package-private accessibility #14291 - Escape sequences in TextBlock, IllegalTokenText module should violate them for Google style #17193 - Google-style: Improper enforcement of horizontal whitespace for double slash //

... (truncated)

Commits
  • a0745b1 [maven-release-plugin] prepare release checkstyle-11.0.0
  • 7ea982e doc: release notes for 11.0.0
  • bf67bad Issue #17269: Changind Docker Script to latest groovy Image
  • 1931995 Issue #14769: Implemented modifier package structure for IT Regression area
  • cb690d0 Issue #14769: Implemented metrics package structure for IT Regression area
  • 4869fe5 Issue #14769: Implemented javadoc package structure for IT Regression area
  • 77bf83e Issue #14769: Implemented indentation package structure for IT Regression area
  • 0b012ba Issue #14769: Implemented imports package structure for IT Regression area
  • 6b0f638 Revert "minor: trim whitespaces after regression report comment"
  • ed7df15 minor: trim whitespaces after regression report comment
  • Additional commits viewable in compare view

Updates software.amazon.awssdk:bom from 2.32.14 to 2.32.19

Updates org.jline:jline from 3.30.4 to 3.30.5

Release notes

Sourced from org.jline:jline's releases.

3.30.5

🚀 New features and improvements

🐛 Bug Fixes

  • Fix macOS hang in pipe operations by removing PTY terminal usage (#1382) @​gnodet
  • enhancement: only compute suggestions in the Nano editor if something… (#1327) @​johnpoth
  • fix: refactor TerminalProvider methods to use inputEncoding/outputEncoding parameters (#1319) @​gnodet
  • Fix System.out not working after closing dumb terminal (#1337) @​gnodet

📦 Dependency updates

📝 Documentation updates

... (truncated)

Commits
  • b91a3b3 Zero-commit release process (#1335)
  • e2422d7 [maven-release-plugin] prepare for next development iteration
  • ae95742 [maven-release-plugin] prepare release jline-3.30.5
  • 87bf8b3 Fix macOS hang in pipe operations by removing PTY terminal usage (#1382)
  • 0ee349c provide smarter arg parsing #1370 (#1371)
  • 0088a70 ConsoleEngineImpl: change method and field visibilities (#1357)
  • 6152f8b Allow ConsoleEngineImpl subclasses access to VariableReferenceCompleter (#1362)
  • aafaf9c chore: Bump com.diffplug.spotless:spotless-maven-plugin (#1364)
  • ba9f347 chore: Bump groovy.version from 4.0.27 to 4.0.28 (#1365)
  • e085017 chore: Bump com.palantir.javaformat:palantir-java-format (#1369)
  • Additional commits viewable in compare view

Updates org.jline:jline-terminal-jna from 3.30.4 to 3.30.5

Release notes

Sourced from org.jline:jline-terminal-jna's releases.

3.30.5

🚀 New features and improvements

🐛 Bug Fixes

  • Fix macOS hang in pipe operations by removing PTY terminal usage (#1382) @​gnodet
  • enhancement: only compute suggestions in the Nano editor if something… (#1327) @​johnpoth
  • fix: refactor TerminalProvider methods to use inputEncoding/outputEncoding parameters (#1319) @​gnodet
  • Fix System.out not working after closing dumb terminal (#1337) @​gnodet

📦 Dependency updates

📝 Documentation updates

... (truncated)

Commits
  • b91a3b3 Zero-commit release process (#1335)
  • e2422d7 [maven-release-plugin] prepare for next development iteration
  • ae95742 [maven-release-plugin] prepare release jline-3.30.5
  • 87bf8b3 Fix macOS hang in pipe operations by removing PTY terminal usage (#1382)
  • 0ee349c provide smarter arg parsing #1370 (#1371)
  • 0088a70 ConsoleEngineImpl: change method and field visibilities (#1357)
  • 6152f8b Allow ConsoleEngineImpl subclasses access to VariableReferenceCompleter (#1362)
  • aafaf9c chore: Bump com.diffplug.spotless:spotless-maven-plugin (#1364)
  • ba9f347 chore: Bump groovy.version from 4.0.27 to 4.0.28 (#1365)
  • e085017 chore: Bump com.palantir.javaformat:palantir-java-format (#1369)
  • Additional commits viewable in compare view

Updates org.jline:jline-terminal-jna from 3.30.4 to 3.30.5

Release notes

Sourced from org.jline:jline-terminal-jna's releases.

3.30.5

🚀 New features and improvements

🐛 Bug Fixes

  • Fix macOS hang in pipe operations by removing PTY terminal usage (#1382) @​gnodet
  • enhancement: only compute suggestions in the Nano editor if something… (#1327) @​johnpoth
  • fix: refactor TerminalProvider methods to use inputEncoding/outputEncoding parameters (#1319) @​gnodet
  • Fix System.out not working after closing dumb terminal (#1337) @​gnodet

📦 Dependency updates

Package Dependencies
Package:
 software.amazon.awssdk:bom
Ecosystem:
maven
Version Change:
2.32.14 → 2.32.19
Update Type:
Patch
Package:
io.lettuce:lettuce-core
Ecosystem:
maven
Version Change:
6.7.1.RELEASE → 6.8.0.RELEASE
Update Type:
Minor
Package:
com.puppycrawl.tools:checkstyle
Ecosystem:
maven
Version Change:
10.26.1 → 11.0.0
Update Type:
Major
Package:
org.assertj:assertj-core
Ecosystem:
maven
Version Change:
3.27.3 → 3.27.4
Update Type:
Patch
Package:
com.zaxxer:HikariCP
Ecosystem:
maven
Version Change:
7.0.0 → 7.0.1
Update Type:
Patch
Package:
com.github.spotbugs:spotbugs-annotations
Ecosystem:
maven
Version Change:
4.9.3 → 4.9.4
Update Type:
Patch
Package:
org.eclipse.jetty:jetty-server
Ecosystem:
maven
Version Change:
12.0.23 → 12.0.24
Update Type:
Patch
Package:
org.jline:jline
Ecosystem:
maven
Version Change:
3.30.4 → 3.30.5
Update Type:
Patch
Package:
org.jline:jline-terminal-jna
Ecosystem:
maven
Version Change:
3.30.4 → 3.30.5
Update Type:
Patch
Package:
org.eclipse.jetty.http2:jetty-http2-server
Ecosystem:
maven
Version Change:
12.0.23 → 12.0.24
Update Type:
Patch
Package:
org.eclipse.jetty.websocket:jetty-websocket-core-server
Ecosystem:
maven
Version Change:
12.0.23 → 12.0.24
Update Type:
Patch
Package:
org.eclipse.jetty.websocket:jetty-websocket-jetty-api
Ecosystem:
maven
Version Change:
12.0.23 → 12.0.24
Update Type:
Patch
Package:
org.eclipse.jetty.websocket:jetty-websocket-jetty-server
Ecosystem:
maven
Version Change:
12.0.23 → 12.0.24
Update Type:
Patch
Package:
org.eclipse.jetty:jetty-alpn-java-server
Ecosystem:
maven
Version Change:
12.0.23 → 12.0.24
Update Type:
Patch
Package:
org.eclipse.jetty.http2:jetty-http2-client
Ecosystem:
maven
Version Change:
12.0.23 → 12.0.24
Update Type:
Patch
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 4882651
UUID: 2733923123
Node ID: PR_kwDOAYRJs86i9Fsz
Host: GitHub
Repository: jooby-project/jooby
Merge State: Unknown