)]}'
{
  "log": [
    {
      "commit": "fa20039f39a7deacf5624ba8a6ee10e9d31e98ce",
      "tree": "a9180cb8442d29f7cc4fd19af558655b3bdd14a7",
      "parents": [
        "85d7ef30ee5f623cf3442dd989df09c3c5754ad2"
      ],
      "author": {
        "name": "David Li",
        "email": "li.davidm96@gmail.com",
        "time": "Fri Aug 14 10:57:43 2026 +0900"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Aug 14 10:57:43 2026 +0900"
      },
      "message": "GH-1241: Bump vcpkg version to stay in sync with apache/arrow (#1260)\n\nThis fixes the CI for Linux.\n\nCloses #1241."
    },
    {
      "commit": "85d7ef30ee5f623cf3442dd989df09c3c5754ad2",
      "tree": "6bc52d6d14c1618a5f7257241d58a85c02bea47a",
      "parents": [
        "06170242bde2f492e068235efdd2183a3cbd87d7"
      ],
      "author": {
        "name": "Sandesh Kumar",
        "email": "sandeshkr419@gmail.com",
        "time": "Thu Aug 06 17:29:51 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Aug 07 09:29:51 2026 +0900"
      },
      "message": "GH-1239: Fix memory leak when C Data import hits allocator limit mid-array (#1240)\n\n`ReferenceCountedArrowArray.unsafeAssociateAllocation` calls `retain()`\nbefore `wrapForeignAllocation`. If `wrapForeignAllocation` throws\n(allocator over its limit), the retain is never balanced, the reference\ncount stays elevated, and the C Data release callback never fires —\nleaking the producer\u0027s native memory.\n\n**Fix:** call `retain()` after `wrapForeignAllocation` returns. Same\nbehavior on the success path; on failure the existing `finally` in\n`ArrayImporter.importArray` drives the count to zero and fires the\nrelease callback.\n\n**Test:** `ImportOutOfMemoryTest` — exports a batch from a \"producer\"\nallocator, tries to import it into a too-small consumer, and asserts the\nproducer drains to zero after the OOM. Fails on the original code,\npasses with the fix.\n\nFixes: https://github.com/apache/arrow-java/issues/1239\n\n---------\n\nSigned-off-by: Sandesh Kumar \u003ckusandes@amazon.com\u003e\nCo-authored-by: Sandesh Kumar \u003ckusandes@amazon.com\u003e"
    },
    {
      "commit": "06170242bde2f492e068235efdd2183a3cbd87d7",
      "tree": "de1ddf07d8121651fab9f40f4ab9f903ba29484c",
      "parents": [
        "21b6a05154b7713b12ace4c0ba3572ba5cc8fe66"
      ],
      "author": {
        "name": "Hélder Gregório",
        "email": "helder.gregorio@dremio.com",
        "time": "Sat Jul 25 14:35:09 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat Jul 25 22:35:09 2026 +0900"
      },
      "message": "GH-1244: Move integration tests to separate workflow (#1245)\n\n## What\u0027s Changed\n\nMove the `integration` job from `test.yml` into its own\n`integration.yml` workflow.\n\nThe new workflow uses top-level `paths` filters, so integration tests\nrun only when changes affect relevant code or build inputs.\nThis should also help to reduce the amount of runner time. Topic\ninitially triggered in the [mailing\nlist](https://lists.apache.org/thread/drf0o5kzg1zfmok7gc09k8qz8hh9ymvh)\n\nCloses #1244"
    },
    {
      "commit": "21b6a05154b7713b12ace4c0ba3572ba5cc8fe66",
      "tree": "0ecf4517d4fee870a9196f94049cff3d4857905c",
      "parents": [
        "7f1f9f588af610b842ee1c3bccf6afbd528ae4db"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jul 21 10:19:32 2026 +0900"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jul 21 10:19:32 2026 +0900"
      },
      "message": "MINOR: [CI] Bump actions/setup-python from 6 to 7 (#1235)\n\nBumps [actions/setup-python](https://github.com/actions/setup-python)\nfrom 6 to 7.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/setup-python/releases\"\u003eactions/setup-python\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.0.0\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMigrate to ESM and upgrade dependencies by \u003ca\nhref\u003d\"https://github.com/priyagupta108\"\u003e\u003ccode\u003e@​priyagupta108\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1330\"\u003eactions/setup-python#1330\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePin SHA commits and update docs with latest versions by \u003ca\nhref\u003d\"https://github.com/HarithaVattikuti\"\u003e\u003ccode\u003e@​HarithaVattikuti\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1338\"\u003eactions/setup-python#1338\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove the pip-install input by \u003ca\nhref\u003d\"https://github.com/gowridurgad\"\u003e\u003ccode\u003e@​gowridurgad\u003c/code\u003e\u003c/a\u003e in\n\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1336\"\u003eactions/setup-python#1336\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fix\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix to Classify stderr warning messages as warnings instead of\nerrors in annotations by \u003ca\nhref\u003d\"https://github.com/lmvysakh\"\u003e\u003ccode\u003e@​lmvysakh\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1335\"\u003eactions/setup-python#1335\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eValidate and retry manifest fetch to prevent silent failures by \u003ca\nhref\u003d\"https://github.com/priyagupta108\"\u003e\u003ccode\u003e@​priyagupta108\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1332\"\u003eactions/setup-python#1332\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Upgrade\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump certifi from 2020.6.20 to 2024.7.4 in\n/\u003cstrong\u003etests\u003c/strong\u003e/data by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1328\"\u003eactions/setup-python#1328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove EOL Python versions and Bumps numpy text fixture by \u003ca\nhref\u003d\"https://github.com/priya-kinthali\"\u003e\u003ccode\u003e@​priya-kinthali\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1333\"\u003eactions/setup-python#1333\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade \u003ccode\u003e@​actions/cache\u003c/code\u003e to 6.2.0 by \u003ca\nhref\u003d\"https://github.com/philip-gai\"\u003e\u003ccode\u003e@​philip-gai\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1337\"\u003eactions/setup-python#1337\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/lmvysakh\"\u003e\u003ccode\u003e@​lmvysakh\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1335\"\u003eactions/setup-python#1335\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/philip-gai\"\u003e\u003ccode\u003e@​philip-gai\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1337\"\u003eactions/setup-python#1337\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/setup-python/compare/v6...v7.0.0\"\u003ehttps://github.com/actions/setup-python/compare/v6...v7.0.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev6.3.0\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003ch3\u003eEnhancement\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd RHEL support and include Linux distro in cache keys by \u003ca\nhref\u003d\"https://github.com/priyagupta108\"\u003e\u003ccode\u003e@​priyagupta108\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1323\"\u003eactions/setup-python#1323\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix pip cache error handling on Windows by \u003ca\nhref\u003d\"https://github.com/priyagupta108\"\u003e\u003ccode\u003e@​priyagupta108\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1040\"\u003eactions/setup-python#1040\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency update\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade minimatch from 3.1.2 to 3.1.5 by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1281\"\u003eactions/setup-python#1281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade actions dependencies by \u003ca\nhref\u003d\"https://github.com/gowridurgad\"\u003e\u003ccode\u003e@​gowridurgad\u003c/code\u003e\u003c/a\u003e\nwith \u003ca href\u003d\"https://github.com/Copilot\"\u003e\u003ccode\u003e@​Copilot\u003c/code\u003e\u003c/a\u003e in\n\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1303\"\u003eactions/setup-python#1303\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade \u003ccode\u003e@​actions/cache\u003c/code\u003e to 5.1.0, log cache write\ndenied by \u003ca\nhref\u003d\"https://github.com/jasongin\"\u003e\u003ccode\u003e@​jasongin\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1324\"\u003eactions/setup-python#1324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade dependency versions and test workflow configuration by \u003ca\nhref\u003d\"https://github.com/HarithaVattikuti\"\u003e\u003ccode\u003e@​HarithaVattikuti\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1322\"\u003eactions/setup-python#1322\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate advanced-usage.md by \u003ca\nhref\u003d\"https://github.com/Dunky-Z\"\u003e\u003ccode\u003e@​Dunky-Z\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/811\"\u003eactions/setup-python#811\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gowridurgad\"\u003e\u003ccode\u003e@​gowridurgad\u003c/code\u003e\u003c/a\u003e\nwith \u003ca href\u003d\"https://github.com/Copilot\"\u003e\u003ccode\u003e@​Copilot\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1303\"\u003eactions/setup-python#1303\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/jasongin\"\u003e\u003ccode\u003e@​jasongin\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1324\"\u003eactions/setup-python#1324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/Dunky-Z\"\u003e\u003ccode\u003e@​Dunky-Z\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/811\"\u003eactions/setup-python#811\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/setup-python/compare/v6.2.0...v6.3.0\"\u003ehttps://github.com/actions/setup-python/compare/v6.2.0...v6.3.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev6.2.0\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003ch3\u003eDependency Upgrades\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade dependencies to Node 24 compatible versions by \u003ca\nhref\u003d\"https://github.com/salmanmkc\"\u003e\u003ccode\u003e@​salmanmkc\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1259\"\u003eactions/setup-python#1259\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/5fda3b95a4ea91299a34e894583c3862153e4b97\"\u003e\u003ccode\u003e5fda3b9\u003c/code\u003e\u003c/a\u003e\nPin SHA commits and update docs with latest versions (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/issues/1338\"\u003e#1338\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/4ab7e95f05e168b4356aebde89dd84f59c283d8e\"\u003e\u003ccode\u003e4ab7e95\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/issues/1337\"\u003e#1337\u003c/a\u003e\nfrom actions/philip-gai/bump-actions-cache-6-2-0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/0f3a009f475dbea83c0371cd85d099690fee8c5c\"\u003e\u003ccode\u003e0f3a009\u003c/code\u003e\u003c/a\u003e\nRemove the pip-install input (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/issues/1336\"\u003e#1336\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/f8cf4291c8b8e273ddd26e569454615c7315d932\"\u003e\u003ccode\u003ef8cf429\u003c/code\u003e\u003c/a\u003e\nMigrate to ESM and upgrade dependencies (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/issues/1330\"\u003e#1330\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/54baeea5b34417d10a7479663a23cca53ea209b5\"\u003e\u003ccode\u003e54baeea\u003c/code\u003e\u003c/a\u003e\nValidate and retry manifest fetch to prevent silent failures (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/issues/1332\"\u003e#1332\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/c7092773a316760f4ecfe498e4af668a4dafeac5\"\u003e\u003ccode\u003ec709277\u003c/code\u003e\u003c/a\u003e\nAnnotation code fix (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/issues/1335\"\u003e#1335\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/6849080452e69b330395e8a6d23cf90f56d76a1a\"\u003e\u003ccode\u003e6849080\u003c/code\u003e\u003c/a\u003e\nremove EOL Python versions and Bumps numpy text fixture (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/issues/1333\"\u003e#1333\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/0903b469fbf4441aadfe4f4b249dc5b1fba3a73e\"\u003e\u003ccode\u003e0903b46\u003c/code\u003e\u003c/a\u003e\nBump certifi from 2020.6.20 to 2024.7.4 in /\u003cstrong\u003etests\u003c/strong\u003e/data\n(\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/issues/1328\"\u003e#1328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/actions/setup-python/compare/v6...v7\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/setup-python\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d6\u0026new-version\u003d7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "7f1f9f588af610b842ee1c3bccf6afbd528ae4db",
      "tree": "79062682f370af205e6f19fce81b691284bfd173",
      "parents": [
        "a9f0086090e649b83c89ea864c82ed7fcc84ab2f"
      ],
      "author": {
        "name": "Hélder Gregório",
        "email": "helder.gregorio@dremio.com",
        "time": "Thu Jul 09 14:42:25 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jul 09 15:42:25 2026 +0200"
      },
      "message": "GH-1188: Reduce test workflow waste (#1189)\n\n## Summary\n\nThis PR reduces wasted GitHub Actions time in the `Test` workflow by\nremoving redundant rebuilds, improving caching, and skipping integration\nwork when it is not relevant.\n\n## What changed\n\n- Removed `clean` from `ci/scripts/test.sh` so the test phase reuses the\nclasses compiled earlier in the job instead of deleting and recompiling\nthem.\n- Narrowed the Maven/Docker cache key to POM changes, so source-only\nedits do not invalidate the dependency cache.\n- Enabled Maven dependency caching on the macOS and Windows test jobs.\n- Added `pull-requests: read` so the integration job can inspect changed\nfiles.\n\nCloses #1188 \n\nNote: The changes on this PR were highlighted and addressed with AI\nassistance"
    },
    {
      "commit": "a9f0086090e649b83c89ea864c82ed7fcc84ab2f",
      "tree": "18627eff3fa8271dbc17bc61d29529153eab9cc5",
      "parents": [
        "915428751b8871406268aeb27bd2f055dcfba6bf"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 06 22:19:02 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 06 22:19:02 2026 +0200"
      },
      "message": "MINOR: Bump com.squareup.okhttp3:okhttp-jvm from 5.3.2 to 5.4.0 (#1208)\n\nBumps\n[com.squareup.okhttp3:okhttp-jvm](https://github.com/square/okhttp) from\n5.3.2 to 5.4.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/square/okhttp/blob/master/CHANGELOG.md\"\u003ecom.squareup.okhttp3:okhttp-jvm\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 5.4.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003e2026-06-08\u003c/em\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eNew: Add superpowers to interceptors. Interceptors can now override\nanything settable on\n\u003ccode\u003eOkHttpClient.Builder\u003c/code\u003e, such as the cache, connection pool,\nsocket factory, and DNS. We expect\nthis will allow most users to use interceptors everywhere, insted of\nmixing and matching\ninterceptors with custom \u003ccode\u003eCall.Factory\u003c/code\u003e wrappers.\u003c/li\u003e\n\u003cli\u003eFix: Limit each HTTP/2 response to 256 KiB of total headers.\u003c/li\u003e\n\u003cli\u003eUpgrade: [kotlinx.coroutines 1.11.0][coroutines_1_11_0]. This is\nused by the optional\n\u003ccode\u003eokhttp-coroutines\u003c/code\u003e artifact.\u003c/li\u003e\n\u003cli\u003eUpgrade: [GraalVM 25.0.3][graalvm_25].\u003c/li\u003e\n\u003cli\u003eUpgrade: [Okio 3.17.0][okio_3_17_0].\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/61423f472da24e0ccc42b6a2c0863fb27932fea5\"\u003e\u003ccode\u003e61423f4\u003c/code\u003e\u003c/a\u003e\nPrepare for release 5.4.0.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/d7e6effcb6852ca848b5f497032546b98b0a6370\"\u003e\u003ccode\u003ed7e6eff\u003c/code\u003e\u003c/a\u003e\nUpdate eclipse.osgi to v3.24.200 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9480\"\u003e#9480\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/7a350986e3231a7b81cbfcc6e3c185327033422b\"\u003e\u003ccode\u003e7a35098\u003c/code\u003e\u003c/a\u003e\nUpdate bnd to v7.3.0 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9475\"\u003e#9475\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/0c5a45b1174b8f735cc251eb19faaed87b65d868\"\u003e\u003ccode\u003e0c5a45b\u003c/code\u003e\u003c/a\u003e\nUpdate dependency com.puppycrawl.tools:checkstyle to v13.5.0 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9468\"\u003e#9468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/113ad17f70af6984a1a8b4d46024118e5409c44b\"\u003e\u003ccode\u003e113ad17\u003c/code\u003e\u003c/a\u003e\nUpdate dependency macos to v26 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9457\"\u003e#9457\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/84f601af03d047eef3f4b2f0ca6b6f72303dcea1\"\u003e\u003ccode\u003e84f601a\u003c/code\u003e\u003c/a\u003e\nUpdate shadow.plugin to v9.4.2 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9466\"\u003e#9466\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/7d463f4bcfca91e4466037f2c65c7c700545d64c\"\u003e\u003ccode\u003e7d463f4\u003c/code\u003e\u003c/a\u003e\nUpdate spotless.plugin to v8.6.0 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9464\"\u003e#9464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/3bf00f52921a0727bd18997cd92112dd2e582ed7\"\u003e\u003ccode\u003e3bf00f5\u003c/code\u003e\u003c/a\u003e\nUpdate plugin com.diffplug.spotless to v8.6.0 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9463\"\u003e#9463\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/cfc45a3f146d2389797a3d51d405e9118bed56c9\"\u003e\u003ccode\u003ecfc45a3\u003c/code\u003e\u003c/a\u003e\nUpdate spotless.plugin to v8.5.1 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9456\"\u003e#9456\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/81c5006e336c1cb67870694e38707e2c1c44fb34\"\u003e\u003ccode\u003e81c5006\u003c/code\u003e\u003c/a\u003e\nApply gradle lint correctly (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9459\"\u003e#9459\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/square/okhttp/compare/parent-5.3.2...parent-5.4.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "915428751b8871406268aeb27bd2f055dcfba6bf",
      "tree": "a2d1b30bd501a00b8b0bb4dd673f34f285715b1f",
      "parents": [
        "f2594c99cc98923ad5949713d4519c5d4f24f4f6"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 06 16:00:46 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 06 16:00:46 2026 +0200"
      },
      "message": "MINOR: Bump logback.version from 1.5.34 to 1.5.37 (#1209)\n\nBumps `logback.version` from 1.5.34 to 1.5.37.\nUpdates `ch.qos.logback:logback-classic` from 1.5.34 to 1.5.37\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/qos-ch/logback/releases\"\u003ech.qos.logback:logback-classic\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eLogback 1.5.37\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003e2026-06-26 Release of logback version 1.5.37\u003c/strong\u003e\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003e• Given the numerous vulnerabilities related to conditional\nconfiguration processing based on the evaluation of Java expressions\nusing the Janino library, support for such expressions has been removed.\nUsers are offered the an \u003ca\nhref\u003d\"https://logback.qos.ch/translator/services/conditionalConfigMigrator.html\"\u003eonline\nmigration service\u003c/a\u003e or the \u003ccode\u003e\u0026lt;condition\u0026gt;\u003c/code\u003e element\nintroduced in version 1.5.20. See the \u003ca\nhref\u003d\"https://logback.qos.ch/manual/configuration.html#conditional\"\u003erelevant\ndocumentation\u003c/a\u003e for more details.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003e• A bitwise identical binary of this version can be reproduced by\nbuilding from source code at commit\nc1df7f522e648eec7b4ef6a12c8758fec0f00048 associated with the tag\nv_1.5.37. Release built using Java \u0026quot;21\u0026quot; 2023-10-17 LTS build\n21.0.1.+12-LTS-29 under Linux Debian 11.6.\u003c/p\u003e\n\u003ch2\u003eLogback 1.5.36\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003e2026-06-25 Release of logback version 1.5.36\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e• The \u0027condition\u0027 attribute in \u003ccode\u003e\u0026lt;if\u0026gt;\u003c/code\u003e elements now\nreject certain references that are associated with ACE attacks. This\nissue was reported by \u0026quot;yulate\u0026quot; (\u003ca\nhref\u003d\"mailto:yulate531@gmail.com.com\"\u003eyulate531@gmail.com.com\u003c/a\u003e) and\nregistered as \u003ca\nhref\u003d\"https://www.cve.org/cverecord?id\u003dCVE-2026-13006\"\u003eCVE-2026-13006\u003c/a\u003e.\n\u003cstrong\u003ePlease note that version 1.5.37 provides the full fix to this\nvulnerability.\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e• A bitwise identical binary of this version can be reproduced by\nbuilding from source code at commit\n9b94c37562bf25a6a944146701d42ee6c4eee888 associated with the tag\nv_1.5.36. Release built using Java \u0026quot;21\u0026quot; 2023-10-17 LTS build\n21.0.1.+12-LTS-29 under Linux Debian 11.6.\u003c/p\u003e\n\u003ch2\u003eLogback 1.5.35\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003e026-06-23 Release of logback version 1.5.35\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e• The \u0027condition\u0027 attribute in \u003ccode\u003e\u0026lt;if\u0026gt;\u003c/code\u003e elements now\nrejects unicode escape sequences (\\u and \\U). This closes a bypass of\nthe existing prohibition on the new operator in Janino-evaluated\nconditions. This issue was reported by IcySun (\u003ca\nhref\u003d\"mailto:icysun@qq.com\"\u003eicysun@qq.com\u003c/a\u003e) and registered as \u003ca\nhref\u003d\"https://www.cve.org/cverecord?id\u003dCVE-2026-13006\"\u003eCVE-2026-13006\u003c/a\u003e.\n\u003cstrong\u003ePlease note that version 1.5.37 provides the full fix to this\nvulnerability.\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e• Added \u003ccode\u003eConfiguratorRank.AUTHENTICATING\u003c/code\u003e (rank 100), the\nhighest configurator rank, for certified/authenticating configurators\ndiscovered via the ServiceLoader mechanism.\n\u003ccode\u003eContextInitializer\u003c/code\u003e now requires that at most one such\nconfigurator exist on the classpath; if more than one is found,\ninitialization aborts with an error.\u003c/p\u003e\n\u003cp\u003e• \u003ccode\u003eConsoleCharsetPropertyDefiner\u003c/code\u003e is no longer shipped.\nThe Java 21 multi-release compilation of logback-core has been disabled,\nwhich removes this class from the published artifact. Configurations\nthat referenced\n\u003ccode\u003ech.qos.logback.core.property.ConsoleCharsetPropertyDefiner\u003c/code\u003e\nwill need an alternative approach for console charset detection.\u003c/p\u003e\n\u003cp\u003e• The logback-examples module is now included in artifacts published\nto Maven Central.\u003c/p\u003e\n\u003cp\u003e• \u003ccode\u003eJoranConfigurator.makeAnotherInstance()\u003c/code\u003e and\n\u003ccode\u003eDefaultJoranConfigurator.performMultiStepConfigurationFileSearch()\u003c/code\u003e\nare now protected, allowing derived configurators to override these\nmethods.\u003c/p\u003e\n\u003cp\u003e• A bitwise identical binary of this version can be reproduced by\nbuilding from source code at commit\n08bd1598d565d83444f72983935e7da4746783b7 associated with the tag\nv_1.5.35. Release built using Java \u0026quot;21\u0026quot; 2023-10-17 LTS build\n21.0.1.+12-LTS-29 under Linux Debian 11.6.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/c1df7f522e648eec7b4ef6a12c8758fec0f00048\"\u003e\u003ccode\u003ec1df7f5\u003c/code\u003e\u003c/a\u003e\nprepare release 1.5.37\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/a1899674579c67711a4fff6bdc569f4bfb25ead5\"\u003e\u003ccode\u003ea189967\u003c/code\u003e\u003c/a\u003e\nremove conditional based on janino\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/aaa905292dc24235a0cd7514c4815d0eeb6c0446\"\u003e\u003ccode\u003eaaa9052\u003c/code\u003e\u003c/a\u003e\nstart work on 1.5.37-SNAPSHOT\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/9b94c37562bf25a6a944146701d42ee6c4eee888\"\u003e\u003ccode\u003e9b94c37\u003c/code\u003e\u003c/a\u003e\nprepare release 1.5.36\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/e6a8280ba2c61a448226bccbced70444aaa6e7eb\"\u003e\u003ccode\u003ee6a8280\u003c/code\u003e\u003c/a\u003e\nprevent attacks using disallowed references\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/24c4b63f60e5bbfa591c20cf39f2ce50ff8cff4f\"\u003e\u003ccode\u003e24c4b63\u003c/code\u003e\u003c/a\u003e\nstart work on 1.5.36-SNAPSHOT\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/08bd1598d565d83444f72983935e7da4746783b7\"\u003e\u003ccode\u003e08bd159\u003c/code\u003e\u003c/a\u003e\npreapre release 1.5.35\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/37d256b825fc62b4a3908fa29d8b4e34acf79ed0\"\u003e\u003ccode\u003e37d256b\u003c/code\u003e\u003c/a\u003e\nindentation changes only\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/d3d73078afbb0691423f60a066d77503fdf05fc3\"\u003e\u003ccode\u003ed3d7307\u003c/code\u003e\u003c/a\u003e\nminor comment\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/fa0411a9393282ba69396ce65f122d281c079ac0\"\u003e\u003ccode\u003efa0411a\u003c/code\u003e\u003c/a\u003e\nradomize file location\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/qos-ch/logback/compare/v_1.5.34...v_1.5.37\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `ch.qos.logback:logback-core` from 1.5.34 to 1.5.37\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/qos-ch/logback/releases\"\u003ech.qos.logback:logback-core\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eLogback 1.5.37\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003e2026-06-26 Release of logback version 1.5.37\u003c/strong\u003e\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003e• Given the numerous vulnerabilities related to conditional\nconfiguration processing based on the evaluation of Java expressions\nusing the Janino library, support for such expressions has been removed.\nUsers are offered the an \u003ca\nhref\u003d\"https://logback.qos.ch/translator/services/conditionalConfigMigrator.html\"\u003eonline\nmigration service\u003c/a\u003e or the \u003ccode\u003e\u0026lt;condition\u0026gt;\u003c/code\u003e element\nintroduced in version 1.5.20. See the \u003ca\nhref\u003d\"https://logback.qos.ch/manual/configuration.html#conditional\"\u003erelevant\ndocumentation\u003c/a\u003e for more details.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003e• A bitwise identical binary of this version can be reproduced by\nbuilding from source code at commit\nc1df7f522e648eec7b4ef6a12c8758fec0f00048 associated with the tag\nv_1.5.37. Release built using Java \u0026quot;21\u0026quot; 2023-10-17 LTS build\n21.0.1.+12-LTS-29 under Linux Debian 11.6.\u003c/p\u003e\n\u003ch2\u003eLogback 1.5.36\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003e2026-06-25 Release of logback version 1.5.36\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e• The \u0027condition\u0027 attribute in \u003ccode\u003e\u0026lt;if\u0026gt;\u003c/code\u003e elements now\nreject certain references that are associated with ACE attacks. This\nissue was reported by \u0026quot;yulate\u0026quot; (\u003ca\nhref\u003d\"mailto:yulate531@gmail.com.com\"\u003eyulate531@gmail.com.com\u003c/a\u003e) and\nregistered as \u003ca\nhref\u003d\"https://www.cve.org/cverecord?id\u003dCVE-2026-13006\"\u003eCVE-2026-13006\u003c/a\u003e.\n\u003cstrong\u003ePlease note that version 1.5.37 provides the full fix to this\nvulnerability.\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e• A bitwise identical binary of this version can be reproduced by\nbuilding from source code at commit\n9b94c37562bf25a6a944146701d42ee6c4eee888 associated with the tag\nv_1.5.36. Release built using Java \u0026quot;21\u0026quot; 2023-10-17 LTS build\n21.0.1.+12-LTS-29 under Linux Debian 11.6.\u003c/p\u003e\n\u003ch2\u003eLogback 1.5.35\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003e026-06-23 Release of logback version 1.5.35\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e• The \u0027condition\u0027 attribute in \u003ccode\u003e\u0026lt;if\u0026gt;\u003c/code\u003e elements now\nrejects unicode escape sequences (\\u and \\U). This closes a bypass of\nthe existing prohibition on the new operator in Janino-evaluated\nconditions. This issue was reported by IcySun (\u003ca\nhref\u003d\"mailto:icysun@qq.com\"\u003eicysun@qq.com\u003c/a\u003e) and registered as \u003ca\nhref\u003d\"https://www.cve.org/cverecord?id\u003dCVE-2026-13006\"\u003eCVE-2026-13006\u003c/a\u003e.\n\u003cstrong\u003ePlease note that version 1.5.37 provides the full fix to this\nvulnerability.\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e• Added \u003ccode\u003eConfiguratorRank.AUTHENTICATING\u003c/code\u003e (rank 100), the\nhighest configurator rank, for certified/authenticating configurators\ndiscovered via the ServiceLoader mechanism.\n\u003ccode\u003eContextInitializer\u003c/code\u003e now requires that at most one such\nconfigurator exist on the classpath; if more than one is found,\ninitialization aborts with an error.\u003c/p\u003e\n\u003cp\u003e• \u003ccode\u003eConsoleCharsetPropertyDefiner\u003c/code\u003e is no longer shipped.\nThe Java 21 multi-release compilation of logback-core has been disabled,\nwhich removes this class from the published artifact. Configurations\nthat referenced\n\u003ccode\u003ech.qos.logback.core.property.ConsoleCharsetPropertyDefiner\u003c/code\u003e\nwill need an alternative approach for console charset detection.\u003c/p\u003e\n\u003cp\u003e• The logback-examples module is now included in artifacts published\nto Maven Central.\u003c/p\u003e\n\u003cp\u003e• \u003ccode\u003eJoranConfigurator.makeAnotherInstance()\u003c/code\u003e and\n\u003ccode\u003eDefaultJoranConfigurator.performMultiStepConfigurationFileSearch()\u003c/code\u003e\nare now protected, allowing derived configurators to override these\nmethods.\u003c/p\u003e\n\u003cp\u003e• A bitwise identical binary of this version can be reproduced by\nbuilding from source code at commit\n08bd1598d565d83444f72983935e7da4746783b7 associated with the tag\nv_1.5.35. Release built using Java \u0026quot;21\u0026quot; 2023-10-17 LTS build\n21.0.1.+12-LTS-29 under Linux Debian 11.6.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/c1df7f522e648eec7b4ef6a12c8758fec0f00048\"\u003e\u003ccode\u003ec1df7f5\u003c/code\u003e\u003c/a\u003e\nprepare release 1.5.37\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/a1899674579c67711a4fff6bdc569f4bfb25ead5\"\u003e\u003ccode\u003ea189967\u003c/code\u003e\u003c/a\u003e\nremove conditional based on janino\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/aaa905292dc24235a0cd7514c4815d0eeb6c0446\"\u003e\u003ccode\u003eaaa9052\u003c/code\u003e\u003c/a\u003e\nstart work on 1.5.37-SNAPSHOT\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/9b94c37562bf25a6a944146701d42ee6c4eee888\"\u003e\u003ccode\u003e9b94c37\u003c/code\u003e\u003c/a\u003e\nprepare release 1.5.36\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/e6a8280ba2c61a448226bccbced70444aaa6e7eb\"\u003e\u003ccode\u003ee6a8280\u003c/code\u003e\u003c/a\u003e\nprevent attacks using disallowed references\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/24c4b63f60e5bbfa591c20cf39f2ce50ff8cff4f\"\u003e\u003ccode\u003e24c4b63\u003c/code\u003e\u003c/a\u003e\nstart work on 1.5.36-SNAPSHOT\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/08bd1598d565d83444f72983935e7da4746783b7\"\u003e\u003ccode\u003e08bd159\u003c/code\u003e\u003c/a\u003e\npreapre release 1.5.35\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/37d256b825fc62b4a3908fa29d8b4e34acf79ed0\"\u003e\u003ccode\u003e37d256b\u003c/code\u003e\u003c/a\u003e\nindentation changes only\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/d3d73078afbb0691423f60a066d77503fdf05fc3\"\u003e\u003ccode\u003ed3d7307\u003c/code\u003e\u003c/a\u003e\nminor comment\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/fa0411a9393282ba69396ce65f122d281c079ac0\"\u003e\u003ccode\u003efa0411a\u003c/code\u003e\u003c/a\u003e\nradomize file location\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/qos-ch/logback/compare/v_1.5.34...v_1.5.37\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: JB Onofré \u003cjbonofre@apache.org\u003e"
    },
    {
      "commit": "f2594c99cc98923ad5949713d4519c5d4f24f4f6",
      "tree": "adc38b27930d2b7b57fc847f8bd10a1c506b2a90",
      "parents": [
        "59010e63bb58c702ccdbcf6f7e0fb047bf8c8f73"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 06 14:32:02 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 06 14:32:02 2026 +0200"
      },
      "message": "MINOR: [CI] Bump docker/login-action from 4.2.0 to 4.4.0 (#1210)\n\nBumps [docker/login-action](https://github.com/docker/login-action) from\n4.2.0 to 4.4.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/docker/login-action/releases\"\u003edocker/login-action\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.4.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSkip empty \u003ccode\u003eregistry-auth\u003c/code\u003e secret mask by \u003ca\nhref\u003d\"https://github.com/crazy-max\"\u003e\u003ccode\u003e@​crazy-max\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/1035\"\u003edocker/login-action#1035\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003e@​aws-sdk/client-ecr\u003c/code\u003e and\n\u003ccode\u003e@​aws-sdk/client-ecr-public\u003c/code\u003e to 3.1077.0 \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/1034\"\u003edocker/login-action#1034\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/docker/login-action/compare/v4.3.0...v4.4.0\"\u003ehttps://github.com/docker/login-action/compare/v4.3.0...v4.4.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.3.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePreserve names in esbuild bundle by \u003ca\nhref\u003d\"https://github.com/crazy-max\"\u003e\u003ccode\u003e@​crazy-max\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/1022\"\u003edocker/login-action#1022\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003e@​aws-sdk/client-ecr\u003c/code\u003e and\n\u003ccode\u003e@​aws-sdk/client-ecr-public\u003c/code\u003e to 3.1076.0 \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/999\"\u003edocker/login-action#999\u003c/a\u003e\n\u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/1030\"\u003edocker/login-action#1030\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003e@​docker/actions-toolkit\u003c/code\u003e from 0.90.0 to 0.92.0 in\n\u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/1004\"\u003edocker/login-action#1004\u003c/a\u003e\n\u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/1027\"\u003edocker/login-action#1027\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003e@​sigstore/core\u003c/code\u003e from 3.1.0 to 3.2.1 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/1023\"\u003edocker/login-action#1023\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003e@​sigstore/verify\u003c/code\u003e from 3.1.0 to 3.1.1 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/1029\"\u003edocker/login-action#1029\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump http-proxy-agent and https-proxy-agent to 9.1.0 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/1017\"\u003edocker/login-action#1017\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump js-yaml from 4.1.1 to 5.2.0 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/1028\"\u003edocker/login-action#1028\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump sigstore from 4.1.0 to 4.1.1 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/1031\"\u003edocker/login-action#1031\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump tmp from 0.2.5 to 0.2.7 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/1002\"\u003edocker/login-action#1002\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump undici from 6.24.1 to 6.27.0 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/1020\"\u003edocker/login-action#1020\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump vite from 7.3.3 to 7.3.6 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/1019\"\u003edocker/login-action#1019\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/docker/login-action/compare/v4.2.0...v4.3.0\"\u003ehttps://github.com/docker/login-action/compare/v4.2.0...v4.3.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/af1e73f918a031802d376d3c8bbc3fe56130a9b0\"\u003e\u003ccode\u003eaf1e73f\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/issues/1034\"\u003e#1034\u003c/a\u003e\nfrom docker/dependabot/npm_and_yarn/aws-sdk-dependen...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/da722bde43bacb027adfc67d42dbaa4c0f9e550b\"\u003e\u003ccode\u003eda722bd\u003c/code\u003e\u003c/a\u003e\n[dependabot skip] chore: update generated content\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/2916ad60bd5cb72f07aa54c69fdcc61749c09b7a\"\u003e\u003ccode\u003e2916ad6\u003c/code\u003e\u003c/a\u003e\nbuild(deps): bump the aws-sdk-dependencies group across 1 directory with\n2 up...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/ca0a662f786e4cfddce972005bd68f3dafc3a903\"\u003e\u003ccode\u003eca0a662\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/issues/1035\"\u003e#1035\u003c/a\u003e\nfrom crazy-max/fix-registry-auth-empty-mask\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/c455755a579833bf0d2e4e54e3beb413ef10cc80\"\u003e\u003ccode\u003ec455755\u003c/code\u003e\u003c/a\u003e\nchore: update generated content\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/48351901f89581a7c12870c787d3f06d1f498438\"\u003e\u003ccode\u003e4835190\u003c/code\u003e\u003c/a\u003e\nskip empty registry-auth secret mask\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/992421c6e6806a7f6df609d1bfff374f9eca3004\"\u003e\u003ccode\u003e992421c\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/issues/1033\"\u003e#1033\u003c/a\u003e\nfrom docker/dependabot/github_actions/docker/bake-ac...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/b249b43765525dd7951068267a34cf63f22ab4f0\"\u003e\u003ccode\u003eb249b43\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/issues/1032\"\u003e#1032\u003c/a\u003e\nfrom docker/dependabot/github_actions/docker/bake-ac...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/1b67977736863551a88ff218642a2d7628b10520\"\u003e\u003ccode\u003e1b67977\u003c/code\u003e\u003c/a\u003e\nbuild(deps): bump docker/bake-action from 7.2.0 to 7.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/9d49d6a3234c78daa10c3c12183ef7b6caa8e69e\"\u003e\u003ccode\u003e9d49d6a\u003c/code\u003e\u003c/a\u003e\nbuild(deps): bump docker/bake-action/subaction/matrix\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/docker/login-action/compare/650006c6eb7dba73a995cc03b0b2d7f5ca915bee...af1e73f918a031802d376d3c8bbc3fe56130a9b0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003ddocker/login-action\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d4.2.0\u0026new-version\u003d4.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "59010e63bb58c702ccdbcf6f7e0fb047bf8c8f73",
      "tree": "8fa212ce2373a8fceaca7468aeb282f00d97ef3d",
      "parents": [
        "afd688e024753c75854e707748fe5ad4411d3361"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 06 14:31:03 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 06 14:31:03 2026 +0200"
      },
      "message": "MINOR: Bump checker.framework.version from 4.2.0 to 4.2.1 (#1211)\n\nBumps `checker.framework.version` from 4.2.0 to 4.2.1.\nUpdates `org.checkerframework:checker-qual` from 4.2.0 to 4.2.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/releases\"\u003eorg.checkerframework:checker-qual\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eChecker Framework 4.2.1\u003c/h2\u003e\n\u003ch2\u003eVersion 4.2.1 (2026-07-01)\u003c/h2\u003e\n\u003ch3\u003eClosed issues\u003c/h3\u003e\n\u003cp\u003e\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7726\"\u003e#7726\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md\"\u003eorg.checkerframework:checker-qual\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 4.2.1 (2026-07-01)\u003c/h2\u003e\n\u003ch3\u003eClosed issues\u003c/h3\u003e\n\u003cp\u003e\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7726\"\u003e#7726\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/ef8cecd00663136e5bb4d6d3d32f936d500f519c\"\u003e\u003ccode\u003eef8cecd\u003c/code\u003e\u003c/a\u003e\nnew release 4.2.1\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/5d046116bece9b5ebb359fab260c2d17988a5e41\"\u003e\u003ccode\u003e5d04611\u003c/code\u003e\u003c/a\u003e\nPrep for release.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/0907ddc90cd25f32e5bf8922d8277d0b41de7fc2\"\u003e\u003ccode\u003e0907ddc\u003c/code\u003e\u003c/a\u003e\nUse \u003ccode\u003e@MonotonicNonNull\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/6a7d71c8cbba0c3c14547d4c06ddb500d15c71d2\"\u003e\u003ccode\u003e6a7d71c\u003c/code\u003e\u003c/a\u003e\nGradle formatting\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/c10d86a0c787c2e5ca95a2c5bb9f4c598b23504e\"\u003e\u003ccode\u003ec10d86a\u003c/code\u003e\u003c/a\u003e\nUpdate plugin com-gradleup-shadow to v9.4.3 (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7778\"\u003e#7778\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/ec79d1f81a434153c13e0fb83692119304cf2908\"\u003e\u003ccode\u003eec79d1f\u003c/code\u003e\u003c/a\u003e\nUpdate Gradle to v9.6.1 (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7779\"\u003e#7779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/f95a2e030e54bae2e26a5e7fa47177acceb4ef6b\"\u003e\u003ccode\u003ef95a2e0\u003c/code\u003e\u003c/a\u003e\nMore examples for \u003ccode\u003e-AresourceLeakIgnoredExceptions\u003c/code\u003e (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7774\"\u003e#7774\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/79948a2df22a82425a3a17b70b6d784c812d7d5d\"\u003e\u003ccode\u003e79948a2\u003c/code\u003e\u003c/a\u003e\nUpdate Gradle to v9.6.0 (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7775\"\u003e#7775\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/e013552e6274b87c9f5dd1c768b4dd12a828707f\"\u003e\u003ccode\u003ee013552\u003c/code\u003e\u003c/a\u003e\nUpdate actions/checkout action to v7 (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7776\"\u003e#7776\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/4ba90c265ca8ee0ad4da7ce67af275ee6c7c40e1\"\u003e\u003ccode\u003e4ba90c2\u003c/code\u003e\u003c/a\u003e\nUpdate plugin com-diffplug-spotless to v8.7.0 (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7773\"\u003e#7773\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/compare/checker-framework-4.2.0...checker-framework-4.2.1\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.checkerframework:checker` from 4.2.0 to 4.2.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/releases\"\u003eorg.checkerframework:checker\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eChecker Framework 4.2.1\u003c/h2\u003e\n\u003ch2\u003eVersion 4.2.1 (2026-07-01)\u003c/h2\u003e\n\u003ch3\u003eClosed issues\u003c/h3\u003e\n\u003cp\u003e\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7726\"\u003e#7726\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md\"\u003eorg.checkerframework:checker\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 4.2.1 (2026-07-01)\u003c/h2\u003e\n\u003ch3\u003eClosed issues\u003c/h3\u003e\n\u003cp\u003e\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7726\"\u003e#7726\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/ef8cecd00663136e5bb4d6d3d32f936d500f519c\"\u003e\u003ccode\u003eef8cecd\u003c/code\u003e\u003c/a\u003e\nnew release 4.2.1\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/5d046116bece9b5ebb359fab260c2d17988a5e41\"\u003e\u003ccode\u003e5d04611\u003c/code\u003e\u003c/a\u003e\nPrep for release.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/0907ddc90cd25f32e5bf8922d8277d0b41de7fc2\"\u003e\u003ccode\u003e0907ddc\u003c/code\u003e\u003c/a\u003e\nUse \u003ccode\u003e@MonotonicNonNull\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/6a7d71c8cbba0c3c14547d4c06ddb500d15c71d2\"\u003e\u003ccode\u003e6a7d71c\u003c/code\u003e\u003c/a\u003e\nGradle formatting\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/c10d86a0c787c2e5ca95a2c5bb9f4c598b23504e\"\u003e\u003ccode\u003ec10d86a\u003c/code\u003e\u003c/a\u003e\nUpdate plugin com-gradleup-shadow to v9.4.3 (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7778\"\u003e#7778\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/ec79d1f81a434153c13e0fb83692119304cf2908\"\u003e\u003ccode\u003eec79d1f\u003c/code\u003e\u003c/a\u003e\nUpdate Gradle to v9.6.1 (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7779\"\u003e#7779\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/f95a2e030e54bae2e26a5e7fa47177acceb4ef6b\"\u003e\u003ccode\u003ef95a2e0\u003c/code\u003e\u003c/a\u003e\nMore examples for \u003ccode\u003e-AresourceLeakIgnoredExceptions\u003c/code\u003e (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7774\"\u003e#7774\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/79948a2df22a82425a3a17b70b6d784c812d7d5d\"\u003e\u003ccode\u003e79948a2\u003c/code\u003e\u003c/a\u003e\nUpdate Gradle to v9.6.0 (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7775\"\u003e#7775\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/e013552e6274b87c9f5dd1c768b4dd12a828707f\"\u003e\u003ccode\u003ee013552\u003c/code\u003e\u003c/a\u003e\nUpdate actions/checkout action to v7 (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7776\"\u003e#7776\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/4ba90c265ca8ee0ad4da7ce67af275ee6c7c40e1\"\u003e\u003ccode\u003e4ba90c2\u003c/code\u003e\u003c/a\u003e\nUpdate plugin com-diffplug-spotless to v8.7.0 (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7773\"\u003e#7773\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/compare/checker-framework-4.2.0...checker-framework-4.2.1\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "afd688e024753c75854e707748fe5ad4411d3361",
      "tree": "fb1f1c477fda798008fa83f6e2947d1d7cc335f8",
      "parents": [
        "1801a8a0937fb4aaac3654c66ec9109a6892666c"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 06 14:29:40 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 06 14:29:40 2026 +0200"
      },
      "message": "MINOR: Bump com.gradle:develocity-maven-extension from 2.4.1 to 2.5.0 (#1212)\n\nBumps com.gradle:develocity-maven-extension from 2.4.1 to 2.5.0.\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.gradle:develocity-maven-extension\u0026package-manager\u003dmaven\u0026previous-version\u003d2.4.1\u0026new-version\u003d2.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "1801a8a0937fb4aaac3654c66ec9109a6892666c",
      "tree": "240870f635e59c1bb4d454679184e217b897c7ea",
      "parents": [
        "e087824935d283d3636d8edb908a79df2de217c4"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 06 14:28:19 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 06 14:28:19 2026 +0200"
      },
      "message": "MINOR: Bump com.gradle:common-custom-user-data-maven-extension from 2.2.0 to 2.3.0 (#1213)\n\nBumps\n[com.gradle:common-custom-user-data-maven-extension](https://github.com/gradle/common-custom-user-data-maven-extension)\nfrom 2.2.0 to 2.3.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/releases\"\u003ecom.gradle:common-custom-user-data-maven-extension\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.3.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[NEW] Capture Cursor as an AI agent via the\n\u003ccode\u003eCURSOR_AGENT\u003c/code\u003e environment variable\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/61a5a45a57981e2dd66b67b9fbc4fde626a02e02\"\u003e\u003ccode\u003e61a5a45\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release v2.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/398a231a48153a893b36e282ab72a8fa8c979161\"\u003e\u003ccode\u003e398a231\u003c/code\u003e\u003c/a\u003e\n[Renovate Bot] Update actions/setup-java digest to 1bcf9fb (\u003ca\nhref\u003d\"https://redirect.github.com/gradle/common-custom-user-data-maven-extension/issues/389\"\u003e#389\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/f66a5c678feaf0292a70b96466abc5d437a3993a\"\u003e\u003ccode\u003ef66a5c6\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/gradle/common-custom-user-data-maven-extension/issues/391\"\u003e#391\u003c/a\u003e\nfrom gradle/erichaagdev/capture-cursor-ai-agent\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/8311f5845f801278c52094b38ecb2e3e97052420\"\u003e\u003ccode\u003e8311f58\u003c/code\u003e\u003c/a\u003e\nCapture Cursor as an AI agent\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/0236fc861cfb0391b8bb6b5abfc4c7c5ca834cc0\"\u003e\u003ccode\u003e0236fc8\u003c/code\u003e\u003c/a\u003e\n[Renovate Bot] Update dependency\norg.eclipse.sisu:org.eclipse.sisu.inject to ...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/0d8c2c5201316f4747ff8eaa038d47ac465a54d9\"\u003e\u003ccode\u003e0d8c2c5\u003c/code\u003e\u003c/a\u003e\n[Renovate Bot] Update GitHub Actions to v7 (\u003ca\nhref\u003d\"https://redirect.github.com/gradle/common-custom-user-data-maven-extension/issues/386\"\u003e#386\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/21ef159386fce25b750914e21c879496f7c01e7a\"\u003e\u003ccode\u003e21ef159\u003c/code\u003e\u003c/a\u003e\n[Renovate Bot] Update Maven dependencies (\u003ca\nhref\u003d\"https://redirect.github.com/gradle/common-custom-user-data-maven-extension/issues/387\"\u003e#387\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/d9240f0c0626d1bb0b0ef5341186fb342e48f7db\"\u003e\u003ccode\u003ed9240f0\u003c/code\u003e\u003c/a\u003e\n[Renovate Bot] Update Maven dependencies to v0.11.0 (\u003ca\nhref\u003d\"https://redirect.github.com/gradle/common-custom-user-data-maven-extension/issues/384\"\u003e#384\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/83935cce4e8aaab79a246cb1e27a14cc974ad64f\"\u003e\u003ccode\u003e83935cc\u003c/code\u003e\u003c/a\u003e\nAuto-merge GitHub Actions digest re-pins (\u003ca\nhref\u003d\"https://redirect.github.com/gradle/common-custom-user-data-maven-extension/issues/385\"\u003e#385\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/9d03ae646b229aaaf652be3e52eccdc579ef8a06\"\u003e\u003ccode\u003e9d03ae6\u003c/code\u003e\u003c/a\u003e\n[Renovate Bot] Update GitHub Actions to ad2b381 (\u003ca\nhref\u003d\"https://redirect.github.com/gradle/common-custom-user-data-maven-extension/issues/383\"\u003e#383\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/compare/v2.2.0...v2.3.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.gradle:common-custom-user-data-maven-extension\u0026package-manager\u003dmaven\u0026previous-version\u003d2.2.0\u0026new-version\u003d2.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "e087824935d283d3636d8edb908a79df2de217c4",
      "tree": "02b471043fbe698fb909b56010552013ebcf8f04",
      "parents": [
        "9e100a3b7f681a64f11eb4405e9e43431caf3647"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 06 14:25:41 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 06 14:25:41 2026 +0200"
      },
      "message": "MINOR: Bump com.diffplug.spotless:spotless-maven-plugin from 3.6.0 to 3.8.0 (#1214)\n\nBumps\n[com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless)\nfrom 3.6.0 to 3.8.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/diffplug/spotless/releases\"\u003ecom.diffplug.spotless:spotless-maven-plugin\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eMaven Plugin v3.8.0\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for custom string format for license header copyright\nyear via \u003ccode\u003eyearStringFormat()\u003c/code\u003e. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2965\"\u003e#2965\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e\u0026lt;expandWildcardImports\u0026gt;\u003c/code\u003e no longer triggers a full\ntransitive dependency resolution on every build. Dependency resolution\nis now deferred until the step actually runs, so projects that do not\nuse \u003ccode\u003e\u0026lt;expandWildcardImports\u0026gt;\u003c/code\u003e (or that use version\nranges) are no longer penalized. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/issues/2983\"\u003e#2983\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eMaven Plugin v3.7.0\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eParse standard git year output in LicenseHeaderStep. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/issues/2940\"\u003e#2940\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e\u0026lt;toggleOffOn\u0026gt;\u003c/code\u003e no longer disables lint-only steps\nsuch as \u003ccode\u003e\u0026lt;forbidWildcardImports\u0026gt;\u003c/code\u003e. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2962\"\u003e#2962\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eStringIndexOutOfBoundsException\u003c/code\u003e in scenarios where\ncopyright year is surrounded by whitespace. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2973\"\u003e#2973\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for AsciiDoc formatting via \u003ccode\u003eadocfmt\u003c/code\u003e. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2960\"\u003e#2960\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e\u0026lt;flexmark\u0026gt;\u003c/code\u003e step now supports arbitrary formatter\noptions via \u003ccode\u003e\u0026lt;formatterOptions\u0026gt;\u003c/code\u003e. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2968\"\u003e#2968\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/diffplug/spotless/blob/main/CHANGES.md\"\u003ecom.diffplug.spotless:spotless-maven-plugin\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003espotless-lib and spotless-lib-extra releases\u003c/h1\u003e\n\u003cp\u003eIf you are a Spotless user (as opposed to developer), then you are\nprobably looking for:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/blob/main/plugin-gradle/CHANGES.md\"\u003ehttps://github.com/diffplug/spotless/blob/main/plugin-gradle/CHANGES.md\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/blob/main/plugin-maven/CHANGES.md\"\u003ehttps://github.com/diffplug/spotless/blob/main/plugin-maven/CHANGES.md\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThis document is intended for Spotless developers.\u003c/p\u003e\n\u003cp\u003eWe adhere to the \u003ca\nhref\u003d\"https://keepachangelog.com/en/1.0.0/\"\u003ekeepachangelog\u003c/a\u003e format\n(starting after version \u003ccode\u003e1.27.0\u003c/code\u003e).\u003c/p\u003e\n\u003ch2\u003e[Unreleased]\u003c/h2\u003e\n\u003ch2\u003e[4.8.0] - 2026-06-29\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for custom string format for license header copyright\nyear via \u003ccode\u003eyearStringFormat()\u003c/code\u003e. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2965\"\u003e#2965\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[4.7.0] - 2026-06-16\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for AsciiDoc formatting via \u003ccode\u003eadocfmt\u003c/code\u003e. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2960\"\u003e#2960\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eflexmark\u003c/code\u003e step now supports arbitrary formatter options\nvia a \u003ccode\u003eformatterOptions\u003c/code\u003e map. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2968\"\u003e#2968\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eFenceStep.preserveWithin\u003c/code\u003e now forwards lints from nested\nsteps while still suppressing lints inside preserved blocks. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2962\"\u003e#2962\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport \u003ccode\u003ektfmt\u003c/code\u003e 0.63 and use its new builder API for\nformatting options to better avoid future breaking changes.\u003c/li\u003e\n\u003cli\u003eParse standard git year output in LicenseHeaderStep. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/issues/2940\"\u003e#2940\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eStringIndexOutOfBoundsException\u003c/code\u003e in scenarios where\ncopyright year is surrounded by whitespace. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2973\"\u003e#2973\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump default \u003ccode\u003egreclipse\u003c/code\u003e version to latest\n\u003ccode\u003e4.35\u003c/code\u003e -\u0026gt; \u003ccode\u003e4.39\u003c/code\u003e. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2924\"\u003e#2924\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[4.6.2] - 2026-05-27\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eP2Provisioner\u003c/code\u003e now passes cache directory overrides\ndirectly to Solstice. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2944\"\u003e#2944\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eforbidWildcardImports\u003c/code\u003e and\n\u003ccode\u003eforbidModuleImports\u003c/code\u003e now detect imports that have leading\nwhitespace (indentation/tabs). (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2939\"\u003e#2939\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eversionCatalog\u003c/code\u003e step no longer splits long inline tables\nacross multiple lines — Gradle\u0027s TOML 1.0 parser cannot read multi-line\ninline tables. The \u003ccode\u003emaxLineLength\u003c/code\u003e option has been removed.\n(\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/issues/2948\"\u003e#2948\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eEclipseJdtFormtterStep\u003c/code\u003e now can conditionally set\ncompiler source/compliance options. Allows for better parsing of AST\nNode for newer language features and more correct sorting; e.g. records\nor seal classes. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2942\"\u003e#2942\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eFormatter\u003c/code\u003e no longer recomputes line-ending\nnormalization (\u003ccode\u003eLineEnding.toUnix\u003c/code\u003e) a second time for every\nformatter step that changes content, removing redundant O(n) work from\nthe core formatting loop. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2934\"\u003e#2934\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eexpandWildcardImports support pom type dependency. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/issues/2839\"\u003e#2839\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[4.6.1] - 2026-05-15\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eLicenseHeaderStep\u003c/code\u003e in \u003ccode\u003eSET_FROM_GIT\u003c/code\u003e year\nmode no longer invokes \u003ccode\u003egit log\u003c/code\u003e through \u003ccode\u003ebash -c\u003c/code\u003e\n/ \u003ccode\u003ecmd /c\u003c/code\u003e, eliminating a shell-injection vector when\nprocessing repositories that contain files whose names include shell\nmetacharacters.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[4.6.0] - 2026-05-14\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003escalafmt()\u003c/code\u003e now reads the version from the\n\u003ccode\u003eversion\u003c/code\u003e field in the scalafmt config file when no version\nis explicitly set in the plugin config, falling back to the built-in\ndefault only if neither is available. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2922\"\u003e#2922\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eversionCatalog\u003c/code\u003e step for formatting and sorting\nGradle version catalog (\u003ccode\u003e.toml\u003c/code\u003e) files. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/issues/2916\"\u003e#2916\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ejavaparserVersion\u003c/code\u003e option to the Cleanthat step,\nallowing callers to override the JavaParser version pulled in\ntransitively by Cleanthat. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2903\"\u003e#2903\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/03d43ba2cdc81050e07b62646c08b22e39505368\"\u003e\u003ccode\u003e03d43ba\u003c/code\u003e\u003c/a\u003e\nPublished maven/3.8.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/8b80c1388017f9b390fd9681007ba58a8c5d77f7\"\u003e\u003ccode\u003e8b80c13\u003c/code\u003e\u003c/a\u003e\nPublished gradle/8.8.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/8ee6cf904ae77a4baec287132c69a63d4b5f4052\"\u003e\u003ccode\u003e8ee6cf9\u003c/code\u003e\u003c/a\u003e\nPublished lib/4.8.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/6c02c0bf3fa0914206b28b2e9abec5e2061273e4\"\u003e\u003ccode\u003e6c02c0b\u003c/code\u003e\u003c/a\u003e\nAdd missing changelog entry.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/264f4cc904ad85149a90822c0835c17a615cee8e\"\u003e\u003ccode\u003e264f4cc\u003c/code\u003e\u003c/a\u003e\nAdd regression test for forbidWildcardImports inside toggleOffOn (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/issues/2982\"\u003e#2982\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/6abb06449354899642d716dfb3daf67a888bac9b\"\u003e\u003ccode\u003e6abb064\u003c/code\u003e\u003c/a\u003e\nfix \u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/issues/2983\"\u003e#2983\u003c/a\u003e,\nexpandWildcardImports triggers a full transitive reso… (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/issues/2984\"\u003e#2984\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/f4536d41caebdda8201cdb126832ea96a75e5afe\"\u003e\u003ccode\u003ef4536d4\u003c/code\u003e\u003c/a\u003e\nUpdate plugin spotbugs to v6.5.8 (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/issues/2987\"\u003e#2987\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/873454acbc24dd66a0d334f29b30d5dcb645cd0a\"\u003e\u003ccode\u003e873454a\u003c/code\u003e\u003c/a\u003e\nUpdate plugin spotbugs to v6.5.8\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/000b8a8f9f0398f60aeafee4d2fbd90a6a61b7f1\"\u003e\u003ccode\u003e000b8a8\u003c/code\u003e\u003c/a\u003e\nUpdate dependency org.junit.jupiter:junit-jupiter to v6.1.1 (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/issues/2985\"\u003e#2985\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/84ebcab6a588c0ae7ddb8d883f5f60947e488e0a\"\u003e\u003ccode\u003e84ebcab\u003c/code\u003e\u003c/a\u003e\nUpdate dependency org.junit.jupiter:junit-jupiter to v6.1.1\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/diffplug/spotless/compare/maven/3.6.0...maven/3.8.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.diffplug.spotless:spotless-maven-plugin\u0026package-manager\u003dmaven\u0026previous-version\u003d3.6.0\u0026new-version\u003d3.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "9e100a3b7f681a64f11eb4405e9e43431caf3647",
      "tree": "13813e7ef9575ea5601115b47aaab4a351d191bd",
      "parents": [
        "c7e8e75c9978c60234dbcbd31311ac3ee2975fa6"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 06 14:21:40 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 06 14:21:40 2026 +0200"
      },
      "message": "MINOR: Bump com.squareup.okhttp3:mockwebserver3 from 5.3.2 to 5.4.0 (#1215)\n\nBumps\n[com.squareup.okhttp3:mockwebserver3](https://github.com/square/okhttp)\nfrom 5.3.2 to 5.4.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/square/okhttp/blob/master/CHANGELOG.md\"\u003ecom.squareup.okhttp3:mockwebserver3\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 5.4.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003e2026-06-08\u003c/em\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eNew: Add superpowers to interceptors. Interceptors can now override\nanything settable on\n\u003ccode\u003eOkHttpClient.Builder\u003c/code\u003e, such as the cache, connection pool,\nsocket factory, and DNS. We expect\nthis will allow most users to use interceptors everywhere, insted of\nmixing and matching\ninterceptors with custom \u003ccode\u003eCall.Factory\u003c/code\u003e wrappers.\u003c/li\u003e\n\u003cli\u003eFix: Limit each HTTP/2 response to 256 KiB of total headers.\u003c/li\u003e\n\u003cli\u003eUpgrade: [kotlinx.coroutines 1.11.0][coroutines_1_11_0]. This is\nused by the optional\n\u003ccode\u003eokhttp-coroutines\u003c/code\u003e artifact.\u003c/li\u003e\n\u003cli\u003eUpgrade: [GraalVM 25.0.3][graalvm_25].\u003c/li\u003e\n\u003cli\u003eUpgrade: [Okio 3.17.0][okio_3_17_0].\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/61423f472da24e0ccc42b6a2c0863fb27932fea5\"\u003e\u003ccode\u003e61423f4\u003c/code\u003e\u003c/a\u003e\nPrepare for release 5.4.0.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/d7e6effcb6852ca848b5f497032546b98b0a6370\"\u003e\u003ccode\u003ed7e6eff\u003c/code\u003e\u003c/a\u003e\nUpdate eclipse.osgi to v3.24.200 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9480\"\u003e#9480\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/7a350986e3231a7b81cbfcc6e3c185327033422b\"\u003e\u003ccode\u003e7a35098\u003c/code\u003e\u003c/a\u003e\nUpdate bnd to v7.3.0 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9475\"\u003e#9475\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/0c5a45b1174b8f735cc251eb19faaed87b65d868\"\u003e\u003ccode\u003e0c5a45b\u003c/code\u003e\u003c/a\u003e\nUpdate dependency com.puppycrawl.tools:checkstyle to v13.5.0 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9468\"\u003e#9468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/113ad17f70af6984a1a8b4d46024118e5409c44b\"\u003e\u003ccode\u003e113ad17\u003c/code\u003e\u003c/a\u003e\nUpdate dependency macos to v26 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9457\"\u003e#9457\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/84f601af03d047eef3f4b2f0ca6b6f72303dcea1\"\u003e\u003ccode\u003e84f601a\u003c/code\u003e\u003c/a\u003e\nUpdate shadow.plugin to v9.4.2 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9466\"\u003e#9466\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/7d463f4bcfca91e4466037f2c65c7c700545d64c\"\u003e\u003ccode\u003e7d463f4\u003c/code\u003e\u003c/a\u003e\nUpdate spotless.plugin to v8.6.0 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9464\"\u003e#9464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/3bf00f52921a0727bd18997cd92112dd2e582ed7\"\u003e\u003ccode\u003e3bf00f5\u003c/code\u003e\u003c/a\u003e\nUpdate plugin com.diffplug.spotless to v8.6.0 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9463\"\u003e#9463\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/cfc45a3f146d2389797a3d51d405e9118bed56c9\"\u003e\u003ccode\u003ecfc45a3\u003c/code\u003e\u003c/a\u003e\nUpdate spotless.plugin to v8.5.1 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9456\"\u003e#9456\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/81c5006e336c1cb67870694e38707e2c1c44fb34\"\u003e\u003ccode\u003e81c5006\u003c/code\u003e\u003c/a\u003e\nApply gradle lint correctly (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9459\"\u003e#9459\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/square/okhttp/compare/parent-5.3.2...parent-5.4.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.squareup.okhttp3:mockwebserver3\u0026package-manager\u003dmaven\u0026previous-version\u003d5.3.2\u0026new-version\u003d5.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "c7e8e75c9978c60234dbcbd31311ac3ee2975fa6",
      "tree": "74ec026afb086ffe6eb7b0325483d091bf893b54",
      "parents": [
        "9e863319b1e3bedda45dbb12d5989f6b1330f664"
      ],
      "author": {
        "name": "Aurélien Pupier",
        "email": "apupier@ibm.com",
        "time": "Mon Jul 06 08:50:26 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 06 08:50:26 2026 +0200"
      },
      "message": "MINOR: Restrict trigger push branch for GitHub Workflow (#1204)\n\nFeature branches rarely need their own CI runs: the code is already\ntested when a pull request is opened against a release branch. If the\npush trigger has no branch restriction and pull_request is also\nconfigured, every push to a branch with an open PR runs the workflow\ntwice: once for the push and once for the PR synchronisation.\n\nAlways give the push trigger an explicit list of branches: this stops\nbranches created from a release branch from inheriting its workflow\nruns.\n\nsee\nhttps://cwiki.apache.org/confluence/pages/viewpage.action?pageId\u003d430408443#GitHubActionsRecommendedPractices-Restrictthepushtriggertospecificbranches\n\n## What\u0027s Changed\n\nPlease fill in a description of the changes here.\n\n**This contains breaking changes.** \u003c!-- Remove this line if there are\nno breaking changes. --\u003e\n\nCloses #NNN.\n\nNote that I needed to recreate a PR as the previous one was closed\nhttps://github.com/apache/arrow-java/pull/1202#issuecomment-4864548916\n\nSigned-off-by: Aurélien Pupier \u003capupier@ibm.com\u003e"
    },
    {
      "commit": "9e863319b1e3bedda45dbb12d5989f6b1330f664",
      "tree": "e6805594e18da1bb85bcd0ef1e6dc108c01c8c71",
      "parents": [
        "8ce39730fe969b41c8620b02f3fa77c974d90784"
      ],
      "author": {
        "name": "Abdul Rawoof Khan",
        "email": "abdulr@bugqore.com",
        "time": "Mon Jul 06 06:39:33 2026 +0530"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Jul 05 18:09:33 2026 -0700"
      },
      "message": "GH-1206: validate decompressed length in Lz4CompressionCodec (#1207)\n\n## What\u0027s Changed\n\n`Lz4CompressionCodec.doDecompress` sizes the output buffer to the bytes\nit actually decompressed, but sets `writerIndex` to the length taken\nfrom the untrusted 8-byte prefix. A buffer whose prefix claims more than\nthe real output leaves the returned `ArrowBuf` with a `writerIndex` past\nits capacity, and consumers then read off-heap memory beyond the\nallocation. This adds the actual-vs-claimed length check the ZSTD codec\nalready does, so a mismatch throws instead of producing an over-long\nbuffer.\n\nCloses #1206."
    },
    {
      "commit": "8ce39730fe969b41c8620b02f3fa77c974d90784",
      "tree": "5d973e1be550c70f3d5258412c7624410a332679",
      "parents": [
        "04471f4f8900e0a91efe0d6ae717c3211aa5efbd"
      ],
      "author": {
        "name": "Jordan Epstein",
        "email": "32082339+jordepic@users.noreply.github.com",
        "time": "Thu Jul 02 18:16:18 2026 -0500"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jul 02 16:16:18 2026 -0700"
      },
      "message": "GH-1179: Correct the size of var-width vector with \u003e0 start offset during vector append (#1180)\n\n## What\u0027s Changed\n\nFix VectorAppender data size computation for variable-width vectors with\nnon-zero start offsets\n\nWhen appending a variable width offset vector in DataFusion comet I was\nreceiving exceptions\ndue to allocating too much memory. This is because Comet passes variable\nwidth arrays back\nto Java where the initial offset vector entry is greater than 0. Prior\nto this change, arrow-java\ndetermines how many bytes to copy by just looking at the last offset\nentry in the buffer,\ncompletely disregarding the value of the first. If first \u003d 100 and last\n\u003d 200, Java will still\ncopy 200 bytes instead of 100. In this change we fix that.\n\nCloses #1179\n\n---------\n\nCo-authored-by: Jordan Epstein \u003cjordan.epstein@imc.com\u003e"
    },
    {
      "commit": "04471f4f8900e0a91efe0d6ae717c3211aa5efbd",
      "tree": "5ff551150a268a53420de6799a8bcbc7ad6d9f5a",
      "parents": [
        "bd8cd52fc8426b485a8b3e64997fb178c84c9de2"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Jul 02 08:11:17 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jul 02 08:11:17 2026 +0200"
      },
      "message": "MINOR: Bump logback.version from 1.5.32 to 1.5.34 (#1171)\n\nBumps `logback.version` from 1.5.32 to 1.5.34.\nUpdates `ch.qos.logback:logback-classic` from 1.5.32 to 1.5.34\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/qos-ch/logback/releases\"\u003ech.qos.logback:logback-classic\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eLogback 1.5.34\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003e2026-06-01 Release of logback version 1.5.34\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e• In case certain StackTraceElement values returned by the\nThrowable.getStackTrace method are null, StackTraceElementProxy\nsubstitutes a dummy instance instead of throwing an\nIllegalArgumentException. This resolves [issues \u003ca\nhref\u003d\"https://redirect.github.com/qos-ch/logback/issues/1040\"\u003e#1040\u003c/a\u003e](\u003ca\nhref\u003d\"https://redirect.github.com/qos-ch/logback/issues/1040\"\u003eqos-ch/logback#1040\u003c/a\u003e),\nreported by Naotsugu Kobayashi.\u003c/p\u003e\n\u003cp\u003e• HardenedObjectInputStream will now throw an InvalidClassException\nduring deserialization attempts of Proxy classes. This change addresses\npotential deserialization whitelist bypass vulnerability reported by \u003ca\nhref\u003d\"https://github.com/york-shen\"\u003eYork Shen\u003c/a\u003e and registered as \u003ca\nhref\u003d\"https://www.cve.org/cverecord?id\u003dCVE-2026-10532\"\u003eCVE-2026-10532\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e• A bitwise identical binary of this version can be reproduced by\nbuilding from source code at commit\ne62272ac152469aec1ede056c3c7d0d7314e7bfe associated with the tag\nv_1.5.34. This release was built using Java \u0026quot;21\u0026quot; 2023-10-17\nLTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.\u003c/p\u003e\n\u003ch2\u003eLogback 1.5.33\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003e2026-05-27 Release of logback version 1.5.33\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e• \u003ccode\u003ePropertiesConfiguratorModelHandler\u003c/code\u003e now registers\nproperties file URLs to the \u003ccode\u003eConfigurationWatchList\u003c/code\u003e when\nscan is enabled (via local scan\u003d\u0026quot;true\u0026quot; attribute or top-level\nconfiguration scan), ensuring changes are detected and reconfiguration\noccurs. This problem was reported in \u003ca\nhref\u003d\"https://redirect.github.com/qos-ch/logback/issues/1034\"\u003eissues/1034\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e• When processing \u003ccode\u003e\u0026lt;conversionRule\u0026gt;\u003c/code\u003e elements and\nboth \u003ccode\u003eclass\u003c/code\u003e and \u003ccode\u003econverterClass\u003c/code\u003e attributes are\nspecified, silently use the class attribute without issuing a warning.\nHowever, if the attribute values differ, a warning will be issued. This\nchange was requested in \u003ca\nhref\u003d\"https://redirect.github.com/qos-ch/logback/issues/1031\"\u003eissues/1031\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e• \u003ccode\u003eHardenedModelInputStream\u003c/code\u003e will no longer accept to\ndeserialize all classes located under the \u0026quot;java.lang\u0026quot; and\n\u0026quot;java.util\u0026quot; packages but a limited number of explicitly\nauthorized classes in those packages. This potential deserialization\nwhitelist bypass vulnerability was reported by \u003ca\nhref\u003d\"https://github.com/york-shen\"\u003eYork Shen\u003c/a\u003e and registered as \u003ca\nhref\u003d\"https://www.cve.org/cverecord?id\u003dCVE-2026-9828\"\u003eCVE-2026-9828\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e• SSL parameters for \u003ccode\u003eSSLSocketAppender\u003c/code\u003e now enable\nhostname verification by default. Moreover, the default protocol is now\n\u0026quot;TLSv1.2\u0026quot;. This potential vulnerability was reported by York\nShen.\u003c/p\u003e\n\u003cp\u003e• When printing the status message field,\n\u003ccode\u003eViewStatusMessagesServletBase\u003c/code\u003e now escapes special\ncharacters such as \u0026quot;\u0026amp;\u0026quot; as character entities. This\npotential vulnerability was reported by York Shen.\u003c/p\u003e\n\u003cp\u003e• A bit-wise identical binary of this version can be reproduced by\nbuilding from source code at commit\n124e8b49b55ac34d08743a0646bd463410192647 associated with the tag\nv_1.5.33. Release built using Java \u0026quot;21\u0026quot; 2023-10-17 LTS build\n21.0.1.+12-LTS-29 under Linux Debian 11.6.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/e62272ac152469aec1ede056c3c7d0d7314e7bfe\"\u003e\u003ccode\u003ee62272a\u003c/code\u003e\u003c/a\u003e\nprepare release 1.5.34\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/1e9e926db1529b729a0e2d29fdee151c2aea0341\"\u003e\u003ccode\u003e1e9e926\u003c/code\u003e\u003c/a\u003e\nadd resolveProxyClassRejectsDynamicProxies unit test\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/2de5cbe90b74fa284685304bc91321313b0d8e2f\"\u003e\u003ccode\u003e2de5cbe\u003c/code\u003e\u003c/a\u003e\nadded StackTraceElementProxyTest, minor edits to AGENTS.md\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/0e9b9278b5d3f0b573762cd7b5482ed65244418e\"\u003e\u003ccode\u003e0e9b927\u003c/code\u003e\u003c/a\u003e\nin case StackTraceElement is null use a substitute, fixing\nissues/1040\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/f7a0654c2b7e8e1c461e3d9e483e82ef969b5818\"\u003e\u003ccode\u003ef7a0654\u003c/code\u003e\u003c/a\u003e\nprevent resolveProxyClass bypass\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/249b81f3754f1fb58f8507f244a36c7a940854c0\"\u003e\u003ccode\u003e249b81f\u003c/code\u003e\u003c/a\u003e\ndocs are no longer distributed\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/1c3b26a839f05b6bc1769e5a028ef326c711cec8\"\u003e\u003ccode\u003e1c3b26a\u003c/code\u003e\u003c/a\u003e\nstart work on 1.5.34-SNAPSHOT\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/124e8b49b55ac34d08743a0646bd463410192647\"\u003e\u003ccode\u003e124e8b4\u003c/code\u003e\u003c/a\u003e\nprepare release 1.5.33\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/d8fd6f25c7f12282871164911fe423c86e2ef8f3\"\u003e\u003ccode\u003ed8fd6f2\u003c/code\u003e\u003c/a\u003e\nescapeTags in message field when printing status messages\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/95edbeb8dbf53494f36324aeb7bef1825aff6cc4\"\u003e\u003ccode\u003e95edbeb\u003c/code\u003e\u003c/a\u003e\nhostnameVerification default to true in SSLParametersConfiguration,\nSSL.DEFAU...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/qos-ch/logback/compare/v_1.5.32...v_1.5.34\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `ch.qos.logback:logback-core` from 1.5.32 to 1.5.34\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/qos-ch/logback/releases\"\u003ech.qos.logback:logback-core\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eLogback 1.5.34\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003e2026-06-01 Release of logback version 1.5.34\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e• In case certain StackTraceElement values returned by the\nThrowable.getStackTrace method are null, StackTraceElementProxy\nsubstitutes a dummy instance instead of throwing an\nIllegalArgumentException. This resolves [issues \u003ca\nhref\u003d\"https://redirect.github.com/qos-ch/logback/issues/1040\"\u003e#1040\u003c/a\u003e](\u003ca\nhref\u003d\"https://redirect.github.com/qos-ch/logback/issues/1040\"\u003eqos-ch/logback#1040\u003c/a\u003e),\nreported by Naotsugu Kobayashi.\u003c/p\u003e\n\u003cp\u003e• HardenedObjectInputStream will now throw an InvalidClassException\nduring deserialization attempts of Proxy classes. This change addresses\npotential deserialization whitelist bypass vulnerability reported by \u003ca\nhref\u003d\"https://github.com/york-shen\"\u003eYork Shen\u003c/a\u003e and registered as \u003ca\nhref\u003d\"https://www.cve.org/cverecord?id\u003dCVE-2026-10532\"\u003eCVE-2026-10532\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e• A bitwise identical binary of this version can be reproduced by\nbuilding from source code at commit\ne62272ac152469aec1ede056c3c7d0d7314e7bfe associated with the tag\nv_1.5.34. This release was built using Java \u0026quot;21\u0026quot; 2023-10-17\nLTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.\u003c/p\u003e\n\u003ch2\u003eLogback 1.5.33\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003e2026-05-27 Release of logback version 1.5.33\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e• \u003ccode\u003ePropertiesConfiguratorModelHandler\u003c/code\u003e now registers\nproperties file URLs to the \u003ccode\u003eConfigurationWatchList\u003c/code\u003e when\nscan is enabled (via local scan\u003d\u0026quot;true\u0026quot; attribute or top-level\nconfiguration scan), ensuring changes are detected and reconfiguration\noccurs. This problem was reported in \u003ca\nhref\u003d\"https://redirect.github.com/qos-ch/logback/issues/1034\"\u003eissues/1034\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e• When processing \u003ccode\u003e\u0026lt;conversionRule\u0026gt;\u003c/code\u003e elements and\nboth \u003ccode\u003eclass\u003c/code\u003e and \u003ccode\u003econverterClass\u003c/code\u003e attributes are\nspecified, silently use the class attribute without issuing a warning.\nHowever, if the attribute values differ, a warning will be issued. This\nchange was requested in \u003ca\nhref\u003d\"https://redirect.github.com/qos-ch/logback/issues/1031\"\u003eissues/1031\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e• \u003ccode\u003eHardenedModelInputStream\u003c/code\u003e will no longer accept to\ndeserialize all classes located under the \u0026quot;java.lang\u0026quot; and\n\u0026quot;java.util\u0026quot; packages but a limited number of explicitly\nauthorized classes in those packages. This potential deserialization\nwhitelist bypass vulnerability was reported by \u003ca\nhref\u003d\"https://github.com/york-shen\"\u003eYork Shen\u003c/a\u003e and registered as \u003ca\nhref\u003d\"https://www.cve.org/cverecord?id\u003dCVE-2026-9828\"\u003eCVE-2026-9828\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e• SSL parameters for \u003ccode\u003eSSLSocketAppender\u003c/code\u003e now enable\nhostname verification by default. Moreover, the default protocol is now\n\u0026quot;TLSv1.2\u0026quot;. This potential vulnerability was reported by York\nShen.\u003c/p\u003e\n\u003cp\u003e• When printing the status message field,\n\u003ccode\u003eViewStatusMessagesServletBase\u003c/code\u003e now escapes special\ncharacters such as \u0026quot;\u0026amp;\u0026quot; as character entities. This\npotential vulnerability was reported by York Shen.\u003c/p\u003e\n\u003cp\u003e• A bit-wise identical binary of this version can be reproduced by\nbuilding from source code at commit\n124e8b49b55ac34d08743a0646bd463410192647 associated with the tag\nv_1.5.33. Release built using Java \u0026quot;21\u0026quot; 2023-10-17 LTS build\n21.0.1.+12-LTS-29 under Linux Debian 11.6.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/e62272ac152469aec1ede056c3c7d0d7314e7bfe\"\u003e\u003ccode\u003ee62272a\u003c/code\u003e\u003c/a\u003e\nprepare release 1.5.34\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/1e9e926db1529b729a0e2d29fdee151c2aea0341\"\u003e\u003ccode\u003e1e9e926\u003c/code\u003e\u003c/a\u003e\nadd resolveProxyClassRejectsDynamicProxies unit test\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/2de5cbe90b74fa284685304bc91321313b0d8e2f\"\u003e\u003ccode\u003e2de5cbe\u003c/code\u003e\u003c/a\u003e\nadded StackTraceElementProxyTest, minor edits to AGENTS.md\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/0e9b9278b5d3f0b573762cd7b5482ed65244418e\"\u003e\u003ccode\u003e0e9b927\u003c/code\u003e\u003c/a\u003e\nin case StackTraceElement is null use a substitute, fixing\nissues/1040\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/f7a0654c2b7e8e1c461e3d9e483e82ef969b5818\"\u003e\u003ccode\u003ef7a0654\u003c/code\u003e\u003c/a\u003e\nprevent resolveProxyClass bypass\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/249b81f3754f1fb58f8507f244a36c7a940854c0\"\u003e\u003ccode\u003e249b81f\u003c/code\u003e\u003c/a\u003e\ndocs are no longer distributed\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/1c3b26a839f05b6bc1769e5a028ef326c711cec8\"\u003e\u003ccode\u003e1c3b26a\u003c/code\u003e\u003c/a\u003e\nstart work on 1.5.34-SNAPSHOT\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/124e8b49b55ac34d08743a0646bd463410192647\"\u003e\u003ccode\u003e124e8b4\u003c/code\u003e\u003c/a\u003e\nprepare release 1.5.33\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/d8fd6f25c7f12282871164911fe423c86e2ef8f3\"\u003e\u003ccode\u003ed8fd6f2\u003c/code\u003e\u003c/a\u003e\nescapeTags in message field when printing status messages\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/qos-ch/logback/commit/95edbeb8dbf53494f36324aeb7bef1825aff6cc4\"\u003e\u003ccode\u003e95edbeb\u003c/code\u003e\u003c/a\u003e\nhostnameVerification default to true in SSLParametersConfiguration,\nSSL.DEFAU...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/qos-ch/logback/compare/v_1.5.32...v_1.5.34\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "bd8cd52fc8426b485a8b3e64997fb178c84c9de2",
      "tree": "e791f723498094cf4f4f0a6e7e564732903beb54",
      "parents": [
        "fcba1b0345faed30621863af85a102c6d2fc1362"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Jul 01 07:54:25 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Jul 01 07:54:25 2026 +0200"
      },
      "message": "MINOR: Bump com.github.luben:zstd-jni from 1.5.7-10 to 1.5.7-11 (#1184)\n\nBumps [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni)\nfrom 1.5.7-10 to 1.5.7-11.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/luben/zstd-jni/commits/v1.5.7-11\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.github.luben:zstd-jni\u0026package-manager\u003dmaven\u0026previous-version\u003d1.5.7-10\u0026new-version\u003d1.5.7-11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "fcba1b0345faed30621863af85a102c6d2fc1362",
      "tree": "30a9ef53c94159763b8c11d91dc1adc0cc57d7f7",
      "parents": [
        "301d3d8f889d3e4d1f45fc6e1707460ae5baaeb4"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Jul 01 07:51:48 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Jul 01 07:51:48 2026 +0200"
      },
      "message": "MINOR: Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.1 to 2.9.2 (#1198)\n\nBumps\n[org.cyclonedx:cyclonedx-maven-plugin](https://github.com/CycloneDX/cyclonedx-maven-plugin)\nfrom 2.9.1 to 2.9.2.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/CycloneDX/cyclonedx-maven-plugin/releases\"\u003eorg.cyclonedx:cyclonedx-maven-plugin\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.9.2\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003e🚀 New features and improvements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: upgrade maven-dependency-analyzer/asm, support Java 25 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/630\"\u003e#630\u003c/a\u003e)\n\u003ca href\u003d\"https://github.com/shihyuho\"\u003e\u003ccode\u003e@​shihyuho\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📦 Dependency updates\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump commons-codec:commons-codec from 1.17.1 to 1.22.0 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/650\"\u003e#650\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.commons:commons-lang3 from 3.17.0 to 3.19.0 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/622\"\u003e#622\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: upgrade maven-dependency-analyzer/asm, support Java 25 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/630\"\u003e#630\u003c/a\u003e)\n\u003ca href\u003d\"https://github.com/shihyuho\"\u003e\u003ccode\u003e@​shihyuho\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Build\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eupdate scm urls (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/662\"\u003e#662\u003c/a\u003e)\n\u003ca href\u003d\"https://github.com/hboutemy\"\u003e\u003ccode\u003e@​hboutemy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eswitch to Central Publishing Portal (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/659\"\u003e#659\u003c/a\u003e)\n\u003ca href\u003d\"https://github.com/hboutemy\"\u003e\u003ccode\u003e@​hboutemy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-project-info-reports-plugin from\n3.8.0 to 3.9.0 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/655\"\u003e#655\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump plugin-tools.version from 3.15.0 to 3.15.2 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/654\"\u003e#654\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump io.takari.maven.plugins:takari-plugin-integration-testing from\n3.0.1 to 3.1.1 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/616\"\u003e#616\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-invoker-plugin from 3.7.0 to\n3.9.1 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/617\"\u003e#617\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump io.takari.maven.plugins:takari-plugin-testing from 3.0.0 to\n3.1.1 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/618\"\u003e#618\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-compiler-plugin from 3.13.0 to\n3.14.1 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/621\"\u003e#621\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/checkout from 6.0.1 to 6.0.2 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/639\"\u003e#639\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/setup-java from 4 to 5 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/620\"\u003e#620\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003euse shields.io badge (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/648\"\u003e#648\u003c/a\u003e)\n\u003ca href\u003d\"https://github.com/hboutemy\"\u003e\u003ccode\u003e@​hboutemy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/checkout from 6.0.0 to 6.0.1 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/635\"\u003e#635\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/checkout from 4.2.2 to 6.0.0 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/633\"\u003e#633\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: GH workflow permissions (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/606\"\u003e#606\u003c/a\u003e)\n\u003ca\nhref\u003d\"https://github.com/jkowalleck\"\u003e\u003ccode\u003e@​jkowalleck\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esimplify compiler release configuration (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/518\"\u003e#518\u003c/a\u003e)\n\u003ca href\u003d\"https://github.com/hboutemy\"\u003e\u003ccode\u003e@​hboutemy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump JamesIves/github-pages-deploy-action from 4.7.1 to 4.7.3 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/590\"\u003e#590\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupgrade to Doxia 2: m-site-p and skin (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/593\"\u003e#593\u003c/a\u003e)\n\u003ca href\u003d\"https://github.com/hboutemy\"\u003e\u003ccode\u003e@​hboutemy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd Reproducible Central report (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/592\"\u003e#592\u003c/a\u003e)\n\u003ca href\u003d\"https://github.com/hboutemy\"\u003e\u003ccode\u003e@​hboutemy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/0fe189d0cd2c80acb1f518e53fbb703456e6534a\"\u003e\u003ccode\u003e0fe189d\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release cyclonedx-maven-plugin-2.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/96c218c71646aa987d5778b9f0f035f40ff45239\"\u003e\u003ccode\u003e96c218c\u003c/code\u003e\u003c/a\u003e\nupdate scm urls\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/0fe08b4215263965690c0a0a022c1fdbc396cad8\"\u003e\u003ccode\u003e0fe08b4\u003c/code\u003e\u003c/a\u003e\nRevert \u0026quot;Bump JamesIves/github-pages-deploy-action from 4.7.3 to\n4.8.0\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/6779e48e4108e5c1881109f39ebda293311ec591\"\u003e\u003ccode\u003e6779e48\u003c/code\u003e\u003c/a\u003e\nRevert \u0026quot;Bump release-drafter/release-drafter from 6 to 7\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/955fead7657740f51b738de11961d4c1eb233bb3\"\u003e\u003ccode\u003e955fead\u003c/code\u003e\u003c/a\u003e\nswitch to Central Publishing Portal\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/50dbac7e4cd969764e2bfb8e971b0fcf5fcbebba\"\u003e\u003ccode\u003e50dbac7\u003c/code\u003e\u003c/a\u003e\nBump release-drafter/release-drafter from 6 to 7\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/d50bc582155e15a6a1560edab0f1e94d019601e1\"\u003e\u003ccode\u003ed50bc58\u003c/code\u003e\u003c/a\u003e\nBump org.apache.maven.plugins:maven-project-info-reports-plugin\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/1034644886969032df5552fd4132102baeca40c8\"\u003e\u003ccode\u003e1034644\u003c/code\u003e\u003c/a\u003e\nBump plugin-tools.version from 3.15.0 to 3.15.2\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/018ab8e4fdf3b73049497a76bea952983b88389f\"\u003e\u003ccode\u003e018ab8e\u003c/code\u003e\u003c/a\u003e\nBump commons-codec:commons-codec from 1.17.1 to 1.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/e3597051e8c6eb694e9ccd044b9b5a0829166add\"\u003e\u003ccode\u003ee359705\u003c/code\u003e\u003c/a\u003e\nBump JamesIves/github-pages-deploy-action from 4.7.3 to 4.8.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/CycloneDX/cyclonedx-maven-plugin/compare/cyclonedx-maven-plugin-2.9.1...cyclonedx-maven-plugin-2.9.2\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dorg.cyclonedx:cyclonedx-maven-plugin\u0026package-manager\u003dmaven\u0026previous-version\u003d2.9.1\u0026new-version\u003d2.9.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "301d3d8f889d3e4d1f45fc6e1707460ae5baaeb4",
      "tree": "b7e5e585b9a28aaac8e427c7211c36cb988b3b2b",
      "parents": [
        "b0e51af855ef5befac903b1a6de3f535258ccd1b"
      ],
      "author": {
        "name": "Pedro Matias",
        "email": "pedro.matias@dremio.com",
        "time": "Tue Jun 30 05:41:30 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jun 29 21:41:30 2026 -0700"
      },
      "message": "GH-1063: Add is_update field to ActionCreatePreparedStatementResult (#1064)\n\n## What\u0027s Changed\n\nA new field, `optional bool is_update \u003d 4;`, was added to `message\nActionCreatePreparedStatementResult`. When this field is sent by the\nserver, its value indicates whether the proper network flow to execute\nthe query that the driver should follow uses\n`CommandPreparedStatementQuery` or `CommandPreparedStatementUpdate`.\n\n\nFor outdated servers that don\u0027t send the field, the driver maintains its\ncurrent behavior of using `CommandPreparedStatementQuery` when the\n`dataset_schema` is not empty, thus ensuring the backward compatibility\nof the new driver with old servers.\n\nThis change was created with AI assistance (Augment Code and Claude\ncode). All lines were manually reviewed by a human. The output is not\ncopyrightable subject matter.\n\n- Closes #1063\n\n---------\n\nCo-authored-by: David Li \u003cli.davidm96@gmail.com\u003e"
    },
    {
      "commit": "b0e51af855ef5befac903b1a6de3f535258ccd1b",
      "tree": "12f7b2dae1d96d7a8989a9546452029149132e2c",
      "parents": [
        "9122af2ad87c6f51d8ed9082ba2f0a122980ea2a"
      ],
      "author": {
        "name": "YangJie",
        "email": "yangjie01@baidu.com",
        "time": "Tue Jun 30 12:40:01 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jun 29 21:40:01 2026 -0700"
      },
      "message": "GH-1116: [Java] Fix compressed buffer prefix write and ZSTD dstCapacity (#1119)\n\n## What\n\nTwo fixes in the compression codec:\n\n1. **`AbstractCompressionCodec.compress()`: capture `writerIndex()`\nonce**\n\nThe previous code read `uncompressedBuffer.writerIndex()` at multiple\nsites — for the size comparison and again after `doCompress()` to\npopulate the 8-byte uncompressed-length prefix. Capture the value once\nat the top of `compress()` and reuse it for the empty-buffer check, the\nsize comparison, and the prefix, so all three consumers see the same\nvalue.\n\n2. **`ZstdCompressionCodec.doCompress()`: `dstCapacity` overstated by 8\nbytes**\n\n`Zstd.compressUnsafe(dst, dstSize, ...)` expects `dstSize` to be the\navailable space from `dst`. The code offsets `dst` by 8 bytes past the\nprefix but passed `8 + maxSize` instead of `maxSize`. The\n`compressBound()` headroom hides this in practice, but the parameter was\nsemantically wrong. Pass `maxSize`.\n\n## Tests\n\nCovered by the existing round-trip tests (`testEmptyBuffer`,\n`testReadWriteStream`, `testReadWriteFile`, etc.). I was not able to\nconstruct a minimal reproducer for the original `declaredUncompressed\u003d0`\nsymptom on the unfixed code, so both fixes are conservative correctness\nimprovements derived from code inspection rather than failing-then-green\nregression tests."
    },
    {
      "commit": "9122af2ad87c6f51d8ed9082ba2f0a122980ea2a",
      "tree": "b1c81463237e0c303c05b8c0b2626036aa5a5368",
      "parents": [
        "365a5f46d1fe437d2337d705dd6a0043f2ac1703"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jun 29 18:45:52 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jun 29 18:45:52 2026 +0200"
      },
      "message": "MINOR: Bump com.google.protobuf:protobuf-bom from 4.35.0 to 4.35.1 (#1186)\n\nBumps\n[com.google.protobuf:protobuf-bom](https://github.com/protocolbuffers/protobuf)\nfrom 4.35.0 to 4.35.1.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/protocolbuffers/protobuf/commits\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "365a5f46d1fe437d2337d705dd6a0043f2ac1703",
      "tree": "c216645e9c4b11de7a4cecfebbfe396414d1e88e",
      "parents": [
        "bf0b3445c5cac4f964665a5f28b4a80c4ad8d640"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jun 29 18:45:32 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jun 29 18:45:32 2026 +0200"
      },
      "message": "MINOR: [CI] Bump actions/checkout from 6 to 7 (#1193)\n\nBumps [actions/checkout](https://github.com/actions/checkout) from 6 to\n7.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/checkout/releases\"\u003eactions/checkout\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.0.0\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eblock checking out fork pr for pull_request_target and workflow_run\nby \u003ca href\u003d\"https://github.com/aiqiaoy\"\u003e\u003ccode\u003e@​aiqiaoy\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2454\"\u003eactions/checkout#2454\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the\nminor-actions-dependencies group across 1 directory by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2458\"\u003eactions/checkout#2458\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump flatted from 3.3.1 to 3.4.2 by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2460\"\u003eactions/checkout#2460\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump js-yaml from 4.1.0 to 4.2.0 by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2461\"\u003eactions/checkout#2461\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003e@​actions/core\u003c/code\u003e and\n\u003ccode\u003e@​actions/tool-cache\u003c/code\u003e and Remove uuid by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2459\"\u003eactions/checkout#2459\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupgrade module to esm and update dependencies by \u003ca\nhref\u003d\"https://github.com/aiqiaoy\"\u003e\u003ccode\u003e@​aiqiaoy\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2463\"\u003eactions/checkout#2463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump the minor-npm-dependencies group across 1 directory with 3\nupdates by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2462\"\u003eactions/checkout#2462\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egetting ready for checkout v7 release by \u003ca\nhref\u003d\"https://github.com/aiqiaoy\"\u003e\u003ccode\u003e@​aiqiaoy\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2464\"\u003eactions/checkout#2464\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupdate error wording by \u003ca\nhref\u003d\"https://github.com/aiqiaoy\"\u003e\u003ccode\u003e@​aiqiaoy\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2467\"\u003eactions/checkout#2467\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/aiqiaoy\"\u003e\u003ccode\u003e@​aiqiaoy\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2454\"\u003eactions/checkout#2454\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/checkout/compare/v6.0.3...v7.0.0\"\u003ehttps://github.com/actions/checkout/compare/v6.0.3...v7.0.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev6.0.3\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate changelog by \u003ca\nhref\u003d\"https://github.com/ericsciple\"\u003e\u003ccode\u003e@​ericsciple\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2357\"\u003eactions/checkout#2357\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: expand merge commit SHA regex and add SHA-256 test cases by \u003ca\nhref\u003d\"https://github.com/yaananth\"\u003e\u003ccode\u003e@​yaananth\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2414\"\u003eactions/checkout#2414\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix checkout init for SHA-256 repositories by \u003ca\nhref\u003d\"https://github.com/yaananth\"\u003e\u003ccode\u003e@​yaananth\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2439\"\u003eactions/checkout#2439\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate changelog for v6.0.3 by \u003ca\nhref\u003d\"https://github.com/yaananth\"\u003e\u003ccode\u003e@​yaananth\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2446\"\u003eactions/checkout#2446\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/yaananth\"\u003e\u003ccode\u003e@​yaananth\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2414\"\u003eactions/checkout#2414\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/checkout/compare/v6...v6.0.3\"\u003ehttps://github.com/actions/checkout/compare/v6...v6.0.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev6.0.2\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID\nis set by \u003ca\nhref\u003d\"https://github.com/TingluoHuang\"\u003e\u003ccode\u003e@​TingluoHuang\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2355\"\u003eactions/checkout#2355\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix tag handling: preserve annotations and explicit fetch-tags by \u003ca\nhref\u003d\"https://github.com/ericsciple\"\u003e\u003ccode\u003e@​ericsciple\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2356\"\u003eactions/checkout#2356\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/checkout/compare/v6.0.1...v6.0.2\"\u003ehttps://github.com/actions/checkout/compare/v6.0.1...v6.0.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev6.0.1\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate all references from v5 and v4 to v6 by \u003ca\nhref\u003d\"https://github.com/ericsciple\"\u003e\u003ccode\u003e@​ericsciple\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2314\"\u003eactions/checkout#2314\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd worktree support for persist-credentials includeIf by \u003ca\nhref\u003d\"https://github.com/ericsciple\"\u003e\u003ccode\u003e@​ericsciple\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2327\"\u003eactions/checkout#2327\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eClarify v6 README by \u003ca\nhref\u003d\"https://github.com/ericsciple\"\u003e\u003ccode\u003e@​ericsciple\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2328\"\u003eactions/checkout#2328\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/checkout/compare/v6...v6.0.1\"\u003ehttps://github.com/actions/checkout/compare/v6...v6.0.1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/checkout/blob/main/CHANGELOG.md\"\u003eactions/checkout\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev7.0.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBlock checking out fork PR for pull_request_target and workflow_run\nby \u003ca href\u003d\"https://github.com/aiqiaoy\"\u003e\u003ccode\u003e@​aiqiaoy\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2454\"\u003eactions/checkout#2454\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the\nminor-actions-dependencies group across 1 directory by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2458\"\u003eactions/checkout#2458\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump flatted from 3.3.1 to 3.4.2 by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2460\"\u003eactions/checkout#2460\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump js-yaml from 4.1.0 to 4.2.0 by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2461\"\u003eactions/checkout#2461\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003e@​actions/core\u003c/code\u003e and\n\u003ccode\u003e@​actions/tool-cache\u003c/code\u003e and Remove uuid by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2459\"\u003eactions/checkout#2459\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupgrade module to esm and update dependencies by \u003ca\nhref\u003d\"https://github.com/aiqiaoy\"\u003e\u003ccode\u003e@​aiqiaoy\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2463\"\u003eactions/checkout#2463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump the minor-npm-dependencies group across 1 directory with 3\nupdates by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2462\"\u003eactions/checkout#2462\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.0.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix checkout init for SHA-256 repositories by \u003ca\nhref\u003d\"https://github.com/yaananth\"\u003e\u003ccode\u003e@​yaananth\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2439\"\u003eactions/checkout#2439\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: expand merge commit SHA regex and add SHA-256 test cases by \u003ca\nhref\u003d\"https://github.com/yaananth\"\u003e\u003ccode\u003e@​yaananth\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2414\"\u003eactions/checkout#2414\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.0.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix tag handling: preserve annotations and explicit fetch-tags by \u003ca\nhref\u003d\"https://github.com/ericsciple\"\u003e\u003ccode\u003e@​ericsciple\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2356\"\u003eactions/checkout#2356\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.0.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd worktree support for persist-credentials includeIf by \u003ca\nhref\u003d\"https://github.com/ericsciple\"\u003e\u003ccode\u003e@​ericsciple\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2327\"\u003eactions/checkout#2327\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.0.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePersist creds to a separate file by \u003ca\nhref\u003d\"https://github.com/ericsciple\"\u003e\u003ccode\u003e@​ericsciple\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2286\"\u003eactions/checkout#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate README to include Node.js 24 support details and requirements\nby \u003ca href\u003d\"https://github.com/salmanmkc\"\u003e\u003ccode\u003e@​salmanmkc\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2248\"\u003eactions/checkout#2248\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev5.0.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePort v6 cleanup to v5 by \u003ca\nhref\u003d\"https://github.com/ericsciple\"\u003e\u003ccode\u003e@​ericsciple\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2301\"\u003eactions/checkout#2301\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev5.0.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate actions checkout to use node 24 by \u003ca\nhref\u003d\"https://github.com/salmanmkc\"\u003e\u003ccode\u003e@​salmanmkc\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2226\"\u003eactions/checkout#2226\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.3.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePort v6 cleanup to v4 by \u003ca\nhref\u003d\"https://github.com/ericsciple\"\u003e\u003ccode\u003e@​ericsciple\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2305\"\u003eactions/checkout#2305\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.3.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: update README.md by \u003ca\nhref\u003d\"https://github.com/motss\"\u003e\u003ccode\u003e@​motss\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/1971\"\u003eactions/checkout#1971\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd internal repos for checking out multiple repositories by \u003ca\nhref\u003d\"https://github.com/mouismail\"\u003e\u003ccode\u003e@​mouismail\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/1977\"\u003eactions/checkout#1977\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDocumentation update - add recommended permissions to Readme by \u003ca\nhref\u003d\"https://github.com/benwells\"\u003e\u003ccode\u003e@​benwells\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2043\"\u003eactions/checkout#2043\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdjust positioning of user email note and permissions heading by \u003ca\nhref\u003d\"https://github.com/joshmgross\"\u003e\u003ccode\u003e@​joshmgross\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2044\"\u003eactions/checkout#2044\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate README.md by \u003ca\nhref\u003d\"https://github.com/nebuk89\"\u003e\u003ccode\u003e@​nebuk89\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2194\"\u003eactions/checkout#2194\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate CODEOWNERS for actions by \u003ca\nhref\u003d\"https://github.com/TingluoHuang\"\u003e\u003ccode\u003e@​TingluoHuang\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2224\"\u003eactions/checkout#2224\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate package dependencies by \u003ca\nhref\u003d\"https://github.com/salmanmkc\"\u003e\u003ccode\u003e@​salmanmkc\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2236\"\u003eactions/checkout#2236\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eurl-helper.ts\u003c/code\u003e now leverages well-known environment\nvariables by \u003ca href\u003d\"https://github.com/jww3\"\u003e\u003ccode\u003e@​jww3\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/1941\"\u003eactions/checkout#1941\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpand unit test coverage for \u003ccode\u003eisGhes\u003c/code\u003e by \u003ca\nhref\u003d\"https://github.com/jww3\"\u003e\u003ccode\u003e@​jww3\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/1946\"\u003eactions/checkout#1946\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.2.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCheck out other refs/* by commit if provided, fall back to ref by \u003ca\nhref\u003d\"https://github.com/orhantoy\"\u003e\u003ccode\u003e@​orhantoy\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/1924\"\u003eactions/checkout#1924\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0\"\u003e\u003ccode\u003e9c091bb\u003c/code\u003e\u003c/a\u003e\nupdate error wording (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2467\"\u003e#2467\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/1044a6dea927916f2c38ba5aeffbc0a847b1221a\"\u003e\u003ccode\u003e1044a6d\u003c/code\u003e\u003c/a\u003e\ngetting ready for checkout v7 release (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/f0282184c7ce73ab54c7e4ab5a617122602e575f\"\u003e\u003ccode\u003ef028218\u003c/code\u003e\u003c/a\u003e\nBump the minor-npm-dependencies group across 1 directory with 3 updates\n(\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/d914b262ffc244530a203ab40decab34c3abf34d\"\u003e\u003ccode\u003ed914b26\u003c/code\u003e\u003c/a\u003e\nupgrade module to esm and update dependencies (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/537c7ef99cef6e5ddb5e7ff5d16d14510503801d\"\u003e\u003ccode\u003e537c7ef\u003c/code\u003e\u003c/a\u003e\nBump \u003ccode\u003e@​actions/core\u003c/code\u003e and \u003ccode\u003e@​actions/tool-cache\u003c/code\u003e\nand Remove uuid (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2459\"\u003e#2459\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/130a169078a413d3a5246a393625e8e742f387f6\"\u003e\u003ccode\u003e130a169\u003c/code\u003e\u003c/a\u003e\nBump js-yaml from 4.1.0 to 4.2.0 (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2461\"\u003e#2461\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/7d09575332117a40b46e5e020664df234cd416f3\"\u003e\u003ccode\u003e7d09575\u003c/code\u003e\u003c/a\u003e\nBump flatted from 3.3.1 to 3.4.2 (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2460\"\u003e#2460\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/0f9f3aa320cb53abeb534aeb54048075d9697a0e\"\u003e\u003ccode\u003e0f9f3aa\u003c/code\u003e\u003c/a\u003e\nBump actions/publish-immutable-action (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2458\"\u003e#2458\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/f9e715a95fcd1f9253f77dd28f11e88d2d6460c7\"\u003e\u003ccode\u003ef9e715a\u003c/code\u003e\u003c/a\u003e\nblock checking out fork pr for pull_request_target and workflow_run (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2454\"\u003e#2454\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/actions/checkout/compare/v6...v7\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/checkout\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d6\u0026new-version\u003d7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "bf0b3445c5cac4f964665a5f28b4a80c4ad8d640",
      "tree": "5db104c46a4d8531e6657961df4ebb5d1df1e209",
      "parents": [
        "2812cfaa4d455f202c9e11a1facdd83acb82530b"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jun 29 16:57:05 2026 +0900"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jun 29 16:57:05 2026 +0900"
      },
      "message": "MINOR: [CI] Bump actions/cache from 5 to 6 (#1197)\n\nBumps [actions/cache](https://github.com/actions/cache) from 5 to 6.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/cache/releases\"\u003eactions/cache\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.0.0\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate packages, migrate to ESM by \u003ca\nhref\u003d\"https://github.com/Samirat\"\u003e\u003ccode\u003e@​Samirat\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1760\"\u003eactions/cache#1760\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/cache/compare/v5...v6.0.0\"\u003ehttps://github.com/actions/cache/compare/v5...v6.0.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.1.0\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump \u003ccode\u003e@​actions/cache\u003c/code\u003e to v5.1.0 - handle read-only cache\naccess by \u003ca\nhref\u003d\"https://github.com/jasongin\"\u003e\u003ccode\u003e@​jasongin\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1775\"\u003eactions/cache#1775\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/cache/compare/v5...v5.1.0\"\u003ehttps://github.com/actions/cache/compare/v5...v5.1.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.0.5\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate ts-http-runtime dependency by \u003ca\nhref\u003d\"https://github.com/yacaovsnc\"\u003e\u003ccode\u003e@​yacaovsnc\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1747\"\u003eactions/cache#1747\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/cache/compare/v5...v5.0.5\"\u003ehttps://github.com/actions/cache/compare/v5...v5.0.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.0.4\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd release instructions and update maintainer docs by \u003ca\nhref\u003d\"https://github.com/Link\"\u003e\u003ccode\u003e@​Link\u003c/code\u003e\u003c/a\u003e- in \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1696\"\u003eactions/cache#1696\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePotential fix for code scanning alert no. 52: Workflow does not\ncontain permissions by \u003ca\nhref\u003d\"https://github.com/Link\"\u003e\u003ccode\u003e@​Link\u003c/code\u003e\u003c/a\u003e- in \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1697\"\u003eactions/cache#1697\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix workflow permissions and cleanup workflow names / formatting by\n\u003ca href\u003d\"https://github.com/Link\"\u003e\u003ccode\u003e@​Link\u003c/code\u003e\u003c/a\u003e- in \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1699\"\u003eactions/cache#1699\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: Update examples to use the latest version by \u003ca\nhref\u003d\"https://github.com/XZTDean\"\u003e\u003ccode\u003e@​XZTDean\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1690\"\u003eactions/cache#1690\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix proxy integration tests by \u003ca\nhref\u003d\"https://github.com/Link\"\u003e\u003ccode\u003e@​Link\u003c/code\u003e\u003c/a\u003e- in \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1701\"\u003eactions/cache#1701\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix cache key in examples.md for bun.lock by \u003ca\nhref\u003d\"https://github.com/RyPeck\"\u003e\u003ccode\u003e@​RyPeck\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1722\"\u003eactions/cache#1722\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate dependencies \u0026amp; patch security vulnerabilities by \u003ca\nhref\u003d\"https://github.com/Link\"\u003e\u003ccode\u003e@​Link\u003c/code\u003e\u003c/a\u003e- in \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1738\"\u003eactions/cache#1738\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/XZTDean\"\u003e\u003ccode\u003e@​XZTDean\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1690\"\u003eactions/cache#1690\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/RyPeck\"\u003e\u003ccode\u003e@​RyPeck\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1722\"\u003eactions/cache#1722\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/cache/compare/v5...v5.0.4\"\u003ehttps://github.com/actions/cache/compare/v5...v5.0.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.0.3\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump \u003ccode\u003e@actions/cache\u003c/code\u003e to v5.0.5 (Resolves: \u003ca\nhref\u003d\"https://github.com/actions/cache/security/dependabot/33\"\u003ehttps://github.com/actions/cache/security/dependabot/33\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003e@actions/core\u003c/code\u003e to v2.0.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/cache/compare/v5...v5.0.3\"\u003ehttps://github.com/actions/cache/compare/v5...v5.0.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev.5.0.2\u003c/h2\u003e\n\u003ch1\u003ev5.0.2\u003c/h1\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/55cc8345863c7cc4c66a329aec7e433d2d1c52a9\"\u003e\u003ccode\u003e55cc834\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/issues/1768\"\u003e#1768\u003c/a\u003e\nfrom jasongin/readonly-cache\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/d8cd72f230726cdf4457ebb61ec1b593a8d12337\"\u003e\u003ccode\u003ed8cd72f\u003c/code\u003e\u003c/a\u003e\nBump \u003ccode\u003e@​actions/cache\u003c/code\u003e to v6.1.0 - handle cache write error\ndue to RO token\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/2c8a9bd7457de244a408f35966fab2fb45fda9c8\"\u003e\u003ccode\u003e2c8a9bd\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/issues/1760\"\u003e#1760\u003c/a\u003e\nfrom actions/samirat/esm_migration_and_package_update\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/e9b91fdc3fea7d79165fceb79042ef45c2d51023\"\u003e\u003ccode\u003ee9b91fd\u003c/code\u003e\u003c/a\u003e\nPrettier fixes\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/e4884b8ff7f92ef6b52c79eda480bbc86e685adb\"\u003e\u003ccode\u003ee4884b8\u003c/code\u003e\u003c/a\u003e\nRebuild dist\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/10baf0191a3c426ea0fa4a3253a5c04233b6e18f\"\u003e\u003ccode\u003e10baf01\u003c/code\u003e\u003c/a\u003e\nFixed licenses\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/e39b386c9004d72a15d864ade8c0b3a702d47a37\"\u003e\u003ccode\u003ee39b386\u003c/code\u003e\u003c/a\u003e\nFix test mock return order\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/b6928203372a8571ff984c0c883ef3a1adfb0c06\"\u003e\u003ccode\u003eb692820\u003c/code\u003e\u003c/a\u003e\nPR feedback\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/60749128a44d25d3c520a489e576380cf00ff3f1\"\u003e\u003ccode\u003e6074912\u003c/code\u003e\u003c/a\u003e\nRebuild dist bundles as ESM to match type:module\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/5a912e8b4af820fa082a0e75cfd2c782f8fbfe0e\"\u003e\u003ccode\u003e5a912e8\u003c/code\u003e\u003c/a\u003e\nFix lint and jest issues\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/actions/cache/compare/v5...v6\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/cache\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d5\u0026new-version\u003d6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "2812cfaa4d455f202c9e11a1facdd83acb82530b",
      "tree": "9e9060468621c05f9210318fec4fd9f3984732a2",
      "parents": [
        "fb34d7a4848f5c5a93470b731e28490b1b64f166"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jun 29 09:54:40 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jun 29 09:54:40 2026 +0200"
      },
      "message": "MINOR: Bump dep.junit.jupiter.version from 6.1.0 to 6.1.1 (#1200)\n\nBumps `dep.junit.jupiter.version` from 6.1.0 to 6.1.1.\nUpdates `org.junit.jupiter:junit-jupiter-engine` from 6.1.0 to 6.1.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/releases\"\u003eorg.junit.jupiter:junit-jupiter-engine\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eJUnit 6.1.1 \u003d Platform 6.1.1 + Jupiter 6.1.1 + Vintage 6.1.1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href\u003d\"https://docs.junit.org/6.1.1/release-notes.html\"\u003eRelease\nNotes\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/compare/r6.1.0...r6.1.1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.1.0...r6.1.1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/0d85889d9846c14378b732a8da860bfef6ddf7ca\"\u003e\u003ccode\u003e0d85889\u003c/code\u003e\u003c/a\u003e\nRelease 6.1.1\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/0363eee5be323b0a0ef05a0578ed03815d1ca258\"\u003e\u003ccode\u003e0363eee\u003c/code\u003e\u003c/a\u003e\nFinalize 6.1.1 release notes\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/a6d540a593550a4247dfc3818496bc2453969235\"\u003e\u003ccode\u003ea6d540a\u003c/code\u003e\u003c/a\u003e\nMove entry to 6.1.1 release notes\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/69339d59ecb51f7047228ac53d07578b5bb4f7fa\"\u003e\u003ccode\u003e69339d5\u003c/code\u003e\u003c/a\u003e\nOnly pass timeout when publishing to avoid failure in nmcp plugin\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/dec2eb93eb70684df9de4f1249cd39dfa7b4b19b\"\u003e\u003ccode\u003edec2eb9\u003c/code\u003e\u003c/a\u003e\nAllow excluding engines from memory cleanup mode (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5786\"\u003e#5786\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/a5f4270f6bf406fa2d468e65961ed66c69e1d035\"\u003e\u003ccode\u003ea5f4270\u003c/code\u003e\u003c/a\u003e\nPublish sha256/sha512 checksums again but filter out signature ones (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5796\"\u003e#5796\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/82130129139837ce26bfb9cf38e26c7b5ec00860\"\u003e\u003ccode\u003e8213012\u003c/code\u003e\u003c/a\u003e\nUpdate plugin nmcp-settings to v1.6.0 (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5787\"\u003e#5787\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/d1bf8471dd5fe594d687eaa961eeb42d642af3f0\"\u003e\u003ccode\u003ed1bf847\u003c/code\u003e\u003c/a\u003e\nGenerate Javadoc for aggregator modules\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/d721de51cb39e5a4ffe45331f611dfab897653f3\"\u003e\u003ccode\u003ed721de5\u003c/code\u003e\u003c/a\u003e\nPass \u003ccode\u003e--no-fonts\u003c/code\u003e to \u003ccode\u003ejavadoc\u003c/code\u003e convention\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/d289ec653ee268892da8defcb6f2fdb666efc4ed\"\u003e\u003ccode\u003ed289ec6\u003c/code\u003e\u003c/a\u003e\nRestore original SetSystemProperty values in a ParameterizedTest (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5720\"\u003e#5720\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/compare/r6.1.0...r6.1.1\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.junit.jupiter:junit-jupiter-api` from 6.1.0 to 6.1.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/releases\"\u003eorg.junit.jupiter:junit-jupiter-api\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eJUnit 6.1.1 \u003d Platform 6.1.1 + Jupiter 6.1.1 + Vintage 6.1.1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href\u003d\"https://docs.junit.org/6.1.1/release-notes.html\"\u003eRelease\nNotes\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/compare/r6.1.0...r6.1.1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.1.0...r6.1.1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/0d85889d9846c14378b732a8da860bfef6ddf7ca\"\u003e\u003ccode\u003e0d85889\u003c/code\u003e\u003c/a\u003e\nRelease 6.1.1\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/0363eee5be323b0a0ef05a0578ed03815d1ca258\"\u003e\u003ccode\u003e0363eee\u003c/code\u003e\u003c/a\u003e\nFinalize 6.1.1 release notes\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/a6d540a593550a4247dfc3818496bc2453969235\"\u003e\u003ccode\u003ea6d540a\u003c/code\u003e\u003c/a\u003e\nMove entry to 6.1.1 release notes\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/69339d59ecb51f7047228ac53d07578b5bb4f7fa\"\u003e\u003ccode\u003e69339d5\u003c/code\u003e\u003c/a\u003e\nOnly pass timeout when publishing to avoid failure in nmcp plugin\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/dec2eb93eb70684df9de4f1249cd39dfa7b4b19b\"\u003e\u003ccode\u003edec2eb9\u003c/code\u003e\u003c/a\u003e\nAllow excluding engines from memory cleanup mode (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5786\"\u003e#5786\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/a5f4270f6bf406fa2d468e65961ed66c69e1d035\"\u003e\u003ccode\u003ea5f4270\u003c/code\u003e\u003c/a\u003e\nPublish sha256/sha512 checksums again but filter out signature ones (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5796\"\u003e#5796\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/82130129139837ce26bfb9cf38e26c7b5ec00860\"\u003e\u003ccode\u003e8213012\u003c/code\u003e\u003c/a\u003e\nUpdate plugin nmcp-settings to v1.6.0 (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5787\"\u003e#5787\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/d1bf8471dd5fe594d687eaa961eeb42d642af3f0\"\u003e\u003ccode\u003ed1bf847\u003c/code\u003e\u003c/a\u003e\nGenerate Javadoc for aggregator modules\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/d721de51cb39e5a4ffe45331f611dfab897653f3\"\u003e\u003ccode\u003ed721de5\u003c/code\u003e\u003c/a\u003e\nPass \u003ccode\u003e--no-fonts\u003c/code\u003e to \u003ccode\u003ejavadoc\u003c/code\u003e convention\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/d289ec653ee268892da8defcb6f2fdb666efc4ed\"\u003e\u003ccode\u003ed289ec6\u003c/code\u003e\u003c/a\u003e\nRestore original SetSystemProperty values in a ParameterizedTest (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5720\"\u003e#5720\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/compare/r6.1.0...r6.1.1\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.junit.jupiter:junit-jupiter-params` from 6.1.0 to 6.1.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/releases\"\u003eorg.junit.jupiter:junit-jupiter-params\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eJUnit 6.1.1 \u003d Platform 6.1.1 + Jupiter 6.1.1 + Vintage 6.1.1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href\u003d\"https://docs.junit.org/6.1.1/release-notes.html\"\u003eRelease\nNotes\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/compare/r6.1.0...r6.1.1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.1.0...r6.1.1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/0d85889d9846c14378b732a8da860bfef6ddf7ca\"\u003e\u003ccode\u003e0d85889\u003c/code\u003e\u003c/a\u003e\nRelease 6.1.1\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/0363eee5be323b0a0ef05a0578ed03815d1ca258\"\u003e\u003ccode\u003e0363eee\u003c/code\u003e\u003c/a\u003e\nFinalize 6.1.1 release notes\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/a6d540a593550a4247dfc3818496bc2453969235\"\u003e\u003ccode\u003ea6d540a\u003c/code\u003e\u003c/a\u003e\nMove entry to 6.1.1 release notes\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/69339d59ecb51f7047228ac53d07578b5bb4f7fa\"\u003e\u003ccode\u003e69339d5\u003c/code\u003e\u003c/a\u003e\nOnly pass timeout when publishing to avoid failure in nmcp plugin\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/dec2eb93eb70684df9de4f1249cd39dfa7b4b19b\"\u003e\u003ccode\u003edec2eb9\u003c/code\u003e\u003c/a\u003e\nAllow excluding engines from memory cleanup mode (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5786\"\u003e#5786\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/a5f4270f6bf406fa2d468e65961ed66c69e1d035\"\u003e\u003ccode\u003ea5f4270\u003c/code\u003e\u003c/a\u003e\nPublish sha256/sha512 checksums again but filter out signature ones (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5796\"\u003e#5796\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/82130129139837ce26bfb9cf38e26c7b5ec00860\"\u003e\u003ccode\u003e8213012\u003c/code\u003e\u003c/a\u003e\nUpdate plugin nmcp-settings to v1.6.0 (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5787\"\u003e#5787\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/d1bf8471dd5fe594d687eaa961eeb42d642af3f0\"\u003e\u003ccode\u003ed1bf847\u003c/code\u003e\u003c/a\u003e\nGenerate Javadoc for aggregator modules\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/d721de51cb39e5a4ffe45331f611dfab897653f3\"\u003e\u003ccode\u003ed721de5\u003c/code\u003e\u003c/a\u003e\nPass \u003ccode\u003e--no-fonts\u003c/code\u003e to \u003ccode\u003ejavadoc\u003c/code\u003e convention\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/d289ec653ee268892da8defcb6f2fdb666efc4ed\"\u003e\u003ccode\u003ed289ec6\u003c/code\u003e\u003c/a\u003e\nRestore original SetSystemProperty values in a ParameterizedTest (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5720\"\u003e#5720\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/compare/r6.1.0...r6.1.1\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "fb34d7a4848f5c5a93470b731e28490b1b64f166",
      "tree": "c2d505e8711cb485ddf0bb4788cfcf9af9bc00b0",
      "parents": [
        "6e0b5f7905c436ef847eaba4a703564ee6faae7e"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jun 29 09:53:53 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jun 29 09:53:53 2026 +0200"
      },
      "message": "MINOR: Bump io.grpc:grpc-bom from 1.81.0 to 1.82.1 (#1199)\n\nBumps [io.grpc:grpc-bom](https://github.com/grpc/grpc-java) from 1.81.0\nto 1.82.1.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/releases\"\u003eio.grpc:grpc-bom\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.82.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eprotoc-gen-grpc-java: Fix missing osx-x86_64 binary (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/pull/12878\"\u003egrpc/grpc-java#12878\u003c/a\u003e).\nThis fixes a regression in v1.82.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.82.0\u003c/h2\u003e\n\u003cp\u003eThis release drops support for Bazel 7. It may still run, but we are\nno longer testing it. We are testing Bazel 8 and 9.\u003c/p\u003e\n\u003cp\u003eWe are anticipating requiring Netty 4.2 in the next release. Please\nfile an issue if you still need Netty 4.1 support.\u003c/p\u003e\n\u003ch3\u003eBehavior Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003exds: Disable Priority LB child policy retention cache (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12806\"\u003e#12806\u003c/a\u003e).\nPreviously, when a priority became inactive, its associated child load\nbalancer was kept in a deactivated state for potential reuse. Now,\ninactive child balancers are immediately torn down and removed.\u003c/li\u003e\n\u003cli\u003exds: skip DiscoveryRequest for unsubscribed types on stream ready\n(\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12782\"\u003e#12782\u003c/a\u003e).\nWhen the bootstrap declares more than one xDS server (e.g. a default\nserver for LDS/CDS plus an authority-specific EDS-only server),\ngrpc-java was sending CDS/LDS DiscoveryRequests to the EDS-only server\ntoo. That server replies \u003ccode\u003eUNIMPLEMENTED\u003c/code\u003e, which tears down\nthe stream and EDS data never arrives. This fix makes it skip\nDiscoveryRequests for resource types we don\u0027t actually subscribe to on a\ngiven server.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eImprovements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRemove JSR-305 \u003ccode\u003e@ThreadSafe\u003c/code\u003e annotation and replace with\nJavaDoc (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12762\"\u003e#12762\u003c/a\u003e).\nRemoves JSR-305 annotations but instead of replacing it with\nErrorProne\u0027s ThreadSafe, sticks to adding a JavaDoc comment. This is\ndone only in public non-final classes and interfaces. This allows Java\napplications that have moved away from javax to compile and avoids a bug\nin Immutables and Lombok (and possibly other annotation processors) from\nfailing when JSR-305 is not present.\u003c/li\u003e\n\u003cli\u003ecore: Reduce per-stream idle memory on the server by 0.5 KB\n(b38df6c94). The main improvement here is not retaining the request\nMetadata for the life of the RPC. That means RPCs with larger request\nMetadata would see a larger benefit.\u003c/li\u003e\n\u003cli\u003ecore: Clarify missing content-type on HTTP error responses (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12720\"\u003e#12720\u003c/a\u003e).\nAdjusts the diagnostic for the missing rather than invalid content-type,\nin the Status description.\u003c/li\u003e\n\u003cli\u003ecore: throw IOException when ProxySelector returns null or empty\nlist (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12793\"\u003e#12793\u003c/a\u003e).\nProxySelector.select(URI) is required to return a non-null, non-empty\nlist. Some implementations violate this, which previously caused an\nopaque crash in ProxyDetectorImpl. Now it detects this case explicitly\nand fails gracefully, naming the offending ProxySelector class to help\nwith debugging.\u003c/li\u003e\n\u003cli\u003eokhttp: enable TLS 1.3 by default for Android clients, retain TLS\n1.2-only for desktop JVM (f43013161)\u003c/li\u003e\n\u003cli\u003exds: Reduce per-endpoint memory from CDS LB (cc0d1a810). This is\nmost noticeable when there are many endpoints returned by EDS, but the\nLB policy only uses a few of them, like pick_first.\u003c/li\u003e\n\u003cli\u003exds: pre-parse custom metric names in WRR load balancer (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12773\"\u003e#12773\u003c/a\u003e)\n(324fce715). This reduces the per-RPC overhead of the gRFC A114 support\nadded in v1.81.0\u003c/li\u003e\n\u003cli\u003exds: Propagate status cause through XdsDepManager (13b4b9727). This\npreserves more information for failures communicating with the control\nplane.\u003c/li\u003e\n\u003cli\u003ebinder: Give clear error when message is larger than parcel\n(d92ca44a1)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003exds: Trust Manager fix for certain scenarios where SAN validation\nshouldn\u0027t use the SNI sent (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12775\"\u003e#12775\u003c/a\u003e)\n(bb153a83f).\u003c/li\u003e\n\u003cli\u003ecore: Cancel DelayedClientCall when application listener throws (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12761\"\u003e#12761\u003c/a\u003e).\nAlign DelayedClientCall.DelayedListener with ClientCallImpl\u0027s existing\nbehavior for listener exceptions. When the application listener throws\nfrom onHeaders/onMessage/onReady, catch the Throwable, cancel the call\nwith CANCELLED (cause \u003d the throwable), and swallow subsequent\ncallbacks. Previously, a throw from the application listener escaped to\nthe callExecutor\u0027s uncaught-exception handler. The real call was not\ncancelled and the transport kept delivering callbacks to an already\nbroken listener\u003c/li\u003e\n\u003cli\u003ecore,opentelemetry: Fix server metric labels on early close (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12774\"\u003e#12774\u003c/a\u003e).\nAddresses the server-side OpenTelemetry metric labeling bug where a\ngenerated method can be recorded as grpc.method\u003d\u0026quot;other\u0026quot; if\n\u003ccode\u003estreamClosed()\u003c/code\u003e happens before\n\u003ccode\u003eserverCallStarted()\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003ecore: Fix pick_first NPE with\n\u003ccode\u003eGRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST\u003dtrue\u003c/code\u003e when accepting\nresolved addresses and in CONNECTING state (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12814\"\u003e#12814\u003c/a\u003e).\nIt makes sure that whenever PickFirstLeafLoadBalancer transitions into\nCONNECTING the current address in the addressIndex has a corresponding\nsubchannel. This prevents an NPE in acceptResolvedAddresses in some\nsituations.\u003c/li\u003e\n\u003cli\u003eokhttp: HPACK should fail on varint overflow (ec1099254). This\nshould have no visible impact in normal use. It mostly just makes it\neasier to debug broken implementations\u003c/li\u003e\n\u003cli\u003exds: When using the file watcher certificate provider, reload\ncert/key even if only one of them changes (f4125c591)\u003c/li\u003e\n\u003cli\u003ecompiler: Avoid compile error on weird proto file names\n(f021befcd)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNew Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003egoogleapis: support \u003ccode\u003e?force-xds\u003c/code\u003e query parameter in the\n\u003ccode\u003egoogle-c2p\u003c/code\u003e resolver (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12760\"\u003e#12760\u003c/a\u003e)\n(86fa86063). This disables environment checks and uses xDS\nunconditionally. Please note that this feature has not yet seen\ncomprehensive testing.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Netty to 4.1.133 (ada087b9d)\u003c/li\u003e\n\u003cli\u003ebazel: Upgrade googleapis proto repo to commit 1dbb1a14 (ec0a9c976).\nThis fixed a rules_go incompatibility issue with Bazel 9.1. But it also\ngreatly reduced the overall transitive dependencies, as the C++ grpc\nrepo is no longer a dependency\u003c/li\u003e\n\u003cli\u003ebazel: Upgrade workflows to Bazel 8 (039ad7779) add Bazel 9.1.0 to\nour CI matrix (17be0d3d1)\u003c/li\u003e\n\u003cli\u003eprotoc-gen-grpc-java: Linux binaries are now built with Ubuntu 20.04\ninstead of 18.04 (8802dc35b5, da98b04b09)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eThanks to\u003c/h3\u003e\n\u003cp\u003e\u003ca\nhref\u003d\"https://github.com/becomeStar\"\u003e\u003ccode\u003e@​becomeStar\u003c/code\u003e\u003c/a\u003e\u003cbr /\u003e\n\u003ca\nhref\u003d\"https://github.com/bengtsson1-flir\"\u003e\u003ccode\u003e@​bengtsson1-flir\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/7b5e9ff531a8706a562d04ed9570a4790ce8ec64\"\u003e\u003ccode\u003e7b5e9ff\u003c/code\u003e\u003c/a\u003e\nBump version to 1.82.1\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/20768f1630394b10d90c8737263cd198a43b7052\"\u003e\u003ccode\u003e20768f1\u003c/code\u003e\u003c/a\u003e\nUpdate README etc to reference 1.82.1\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/5ab5eba718f2e278e1015a0b7544e8dcf68afbc0\"\u003e\u003ccode\u003e5ab5eba\u003c/code\u003e\u003c/a\u003e\nkokoro: Remove extra / in architecture replacement\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/6726caf64c6e3d3db1ebfb5e9924fc75b706ae52\"\u003e\u003ccode\u003e6726caf\u003c/code\u003e\u003c/a\u003e\nbuildscripts: add regional td config for psm-interop (v1.82.x backport)\n(\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12864\"\u003e#12864\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/022256f3f9f3816192dd11909b20902ebffcc37d\"\u003e\u003ccode\u003e022256f\u003c/code\u003e\u003c/a\u003e\nBump version to 1.82.1-SNAPSHOT\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/78fb51905574241fbb5bc0259f908ead78dae609\"\u003e\u003ccode\u003e78fb519\u003c/code\u003e\u003c/a\u003e\nBump version to 1.82.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/b62b0fc700b379cd080093d79330c181fce93de6\"\u003e\u003ccode\u003eb62b0fc\u003c/code\u003e\u003c/a\u003e\nUpdate README etc to reference 1.82.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/8802dc35b5c4d17cc8a53986db4f98bec9a2e04f\"\u003e\u003ccode\u003e8802dc3\u003c/code\u003e\u003c/a\u003e\nbuild: downgrade multiarch to Ubuntu 20.04 and consolidate images (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12830\"\u003e#12830\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/be300bd11d15bfe6d19bd50c40dfec44e9b127e6\"\u003e\u003ccode\u003ebe300bd\u003c/code\u003e\u003c/a\u003e\nkokoro: Avoid brew on Mac OS\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/4111f6f33ab3198833da99391875d378a25229f4\"\u003e\u003ccode\u003e4111f6f\u003c/code\u003e\u003c/a\u003e\ncore: throw IOException when ProxySelector returns null or empty list\n(\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12793\"\u003e#12793\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/compare/v1.81.0...v1.82.1\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dio.grpc:grpc-bom\u0026package-manager\u003dmaven\u0026previous-version\u003d1.81.0\u0026new-version\u003d1.82.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "6e0b5f7905c436ef847eaba4a703564ee6faae7e",
      "tree": "755ca249a9aca95bbc015dcb9a393b96e4a3bc89",
      "parents": [
        "5540c4d6358cd653fcc7e463e60aa3f21f3288ab"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Jun 26 18:01:26 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Jun 26 18:01:26 2026 +0200"
      },
      "message": "MINOR: Bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15 (#1176)\n\nBumps [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco)\nfrom 0.8.14 to 0.8.15.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/jacoco/jacoco/releases\"\u003eorg.jacoco:jacoco-maven-plugin\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e0.8.15\u003c/h2\u003e\n\u003ch2\u003eNew Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eJaCoCo now officially supports Java 26 (GitHub \u003ca\nhref\u003d\"https://redirect.github.com/jacoco/jacoco/issues/2076\"\u003e#2076\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eExperimental support for Java 27 class files (GitHub \u003ca\nhref\u003d\"https://redirect.github.com/jacoco/jacoco/issues/2004\"\u003e#2004\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eCompatibility methods generated by Kotlin compiler for functions\ndefined in interfaces are filtered out during generation of report\n(GitHub \u003ca\nhref\u003d\"https://redirect.github.com/jacoco/jacoco/issues/1905\"\u003e#1905\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eCompatibility methods generated by Kotlin compiler for exposed boxed\ninline value classes (JvmExposeBoxed annotation) are filtered out during\ngeneration of report (GitHub \u003ca\nhref\u003d\"https://redirect.github.com/jacoco/jacoco/issues/1944\"\u003e#1944\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eMethods generated by the Kotlin compiler for functions with\nJvmStatic annotation are filtered out during generation of report\n(GitHub \u003ca\nhref\u003d\"https://redirect.github.com/jacoco/jacoco/issues/2097\"\u003e#2097\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eImproved filtering of bytecode generated by Kotlin compiler for when\nexpressions and statements with kotlin.String subject where first branch\ncondition contains string with largest hash (GitHub \u003ca\nhref\u003d\"https://redirect.github.com/jacoco/jacoco/issues/2098\"\u003e#2098\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003ePart of bytecode that javac versions from 24 to 26 generate for\nswitch statements and expressions with selector expression of type\njava.lang.String inside lambdas is filtered out during generation of\nreport (GitHub \u003ca\nhref\u003d\"https://redirect.github.com/jacoco/jacoco/issues/2023\"\u003e#2023\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eImproved performance of Kotlin files analysis by parsing SMAPs only\nonce per class (GitHub \u003ca\nhref\u003d\"https://redirect.github.com/jacoco/jacoco/issues/2114\"\u003e#2114\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFor better performance agent output methods tcpclient and tcpserver\nuse BufferedOutputStream to write execution data to socket. Maven\nplugin, Ant tasks, CLI, API usage examples, and ExecDumpClient API use\nBufferedInputStream to read execution data from socket. Third-party\nintegrations should do the same to benefit from this change in agent\n(GitHub \u003ca\nhref\u003d\"https://redirect.github.com/jacoco/jacoco/issues/2089\"\u003e#2089\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixed bugs\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed processing of Kotlin SMAP in synthetic classes (GitHub \u003ca\nhref\u003d\"https://redirect.github.com/jacoco/jacoco/issues/1985\"\u003e#1985\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eMultiple JaCoCo runtimes within one JVM writing to the same output\nfile should not cause data corruption when running on JDK versions from\n6 to 10 affected by \u003ca\nhref\u003d\"https://bugs.openjdk.org/browse/JDK-8166253\"\u003eJDK-8166253\u003c/a\u003e\n(GitHub \u003ca\nhref\u003d\"https://redirect.github.com/jacoco/jacoco/issues/2065\"\u003e#2065\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/jacoco/jacoco/issues/2074\"\u003e#2074\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFor better performance agent writes to output file via\nBufferedOutputStream, this fixes regression introduced in version 0.6.2\n(GitHub \u003ca\nhref\u003d\"https://redirect.github.com/jacoco/jacoco/issues/2073\"\u003e#2073\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed NullPointerException when JaCoCo agent is loaded by non system\nclass loader, for example when loaded by JBoss Modules (GitHub \u003ca\nhref\u003d\"https://redirect.github.com/jacoco/jacoco/issues/1651\"\u003e#1651\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNon-functional Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eJaCoCo now depends on ASM 9.10.1 (GitHub \u003ca\nhref\u003d\"https://redirect.github.com/jacoco/jacoco/issues/2134\"\u003e#2134\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/jacoco/jacoco/commit/6c5260a192eaa535e4a519771d530781cbac9136\"\u003e\u003ccode\u003e6c5260a\u003c/code\u003e\u003c/a\u003e\nPrepare release v0.8.15\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/jacoco/jacoco/commit/5c05141431a7f064a804a923fbae11271241f116\"\u003e\u003ccode\u003e5c05141\u003c/code\u003e\u003c/a\u003e\nTransfer of execution data through socket should use buffered stream (\u003ca\nhref\u003d\"https://redirect.github.com/jacoco/jacoco/issues/2089\"\u003e#2089\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/jacoco/jacoco/commit/ab5efa9d63c06899b2aec1d4a6099fc856132a22\"\u003e\u003ccode\u003eab5efa9\u003c/code\u003e\u003c/a\u003e\nRemove from Azure Pipelines all builds except with JDK 5 and JDK EA (\u003ca\nhref\u003d\"https://redirect.github.com/jacoco/jacoco/issues/2148\"\u003e#2148\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/jacoco/jacoco/commit/5f6ea38f20ff4583deb4ab976571c853231f97c2\"\u003e\u003ccode\u003e5f6ea38\u003c/code\u003e\u003c/a\u003e\nUse Windows 2025 image in GitHub Actions (\u003ca\nhref\u003d\"https://redirect.github.com/jacoco/jacoco/issues/2130\"\u003e#2130\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/jacoco/jacoco/commit/35a8af2cfc168ce51f2a3ea2d55d65f31e61c513\"\u003e\u003ccode\u003e35a8af2\u003c/code\u003e\u003c/a\u003e\nUse Renovate instead of Dependabot for updates of ASM (\u003ca\nhref\u003d\"https://redirect.github.com/jacoco/jacoco/issues/2137\"\u003e#2137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/jacoco/jacoco/commit/85b8ddf530821f75b3b26f5f96d03252286b3ad6\"\u003e\u003ccode\u003e85b8ddf\u003c/code\u003e\u003c/a\u003e\nUpgrade ASM to 9.10.1 (\u003ca\nhref\u003d\"https://redirect.github.com/jacoco/jacoco/issues/2134\"\u003e#2134\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/jacoco/jacoco/commit/2988647ac37c3ad35a77b51d01b10a916b85627b\"\u003e\u003ccode\u003e2988647\u003c/code\u003e\u003c/a\u003e\nAgentModule should use ClassLoader of agent instead of SystemClassLoader\n(\u003ca\nhref\u003d\"https://redirect.github.com/jacoco/jacoco/issues/1651\"\u003e#1651\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/jacoco/jacoco/commit/75a4e31fed32f180fbe4593ad91ec5c176c0535b\"\u003e\u003ccode\u003e75a4e31\u003c/code\u003e\u003c/a\u003e\nAdd filter for Kotlin \u003ccode\u003e@JvmExposeBoxed\u003c/code\u003e (\u003ca\nhref\u003d\"https://redirect.github.com/jacoco/jacoco/issues/1944\"\u003e#1944\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/jacoco/jacoco/commit/691fa1d6a0dffa91f45daf0714f28bfdaa367fc0\"\u003e\u003ccode\u003e691fa1d\u003c/code\u003e\u003c/a\u003e\nUse Renovate instead of Dependabot for updates of GitHub Actions (\u003ca\nhref\u003d\"https://redirect.github.com/jacoco/jacoco/issues/2132\"\u003e#2132\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/jacoco/jacoco/commit/3e18f17207bca0203b726ace460aa6be8d0f3dd4\"\u003e\u003ccode\u003e3e18f17\u003c/code\u003e\u003c/a\u003e\nRequire at least JDK 21 for build (\u003ca\nhref\u003d\"https://redirect.github.com/jacoco/jacoco/issues/2128\"\u003e#2128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/jacoco/jacoco/compare/v0.8.14...v0.8.15\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "5540c4d6358cd653fcc7e463e60aa3f21f3288ab",
      "tree": "4efe4f4801735a1fb5c59a07e5ea61548bf45aba",
      "parents": [
        "cb24576e895c0bf8e1d062e2fc82f2b53bfa2eb8"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Jun 26 18:01:08 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Jun 26 18:01:08 2026 +0200"
      },
      "message": "MINOR: Bump com.squareup.okhttp3:mockwebserver3-junit5 from 5.3.2 to 5.4.0 (#1185)\n\nBumps\n[com.squareup.okhttp3:mockwebserver3-junit5](https://github.com/square/okhttp)\nfrom 5.3.2 to 5.4.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/square/okhttp/blob/master/CHANGELOG.md\"\u003ecom.squareup.okhttp3:mockwebserver3-junit5\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 5.4.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003e2026-06-08\u003c/em\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eNew: Add superpowers to interceptors. Interceptors can now override\nanything settable on\n\u003ccode\u003eOkHttpClient.Builder\u003c/code\u003e, such as the cache, connection pool,\nsocket factory, and DNS. We expect\nthis will allow most users to use interceptors everywhere, insted of\nmixing and matching\ninterceptors with custom \u003ccode\u003eCall.Factory\u003c/code\u003e wrappers.\u003c/li\u003e\n\u003cli\u003eFix: Limit each HTTP/2 response to 256 KiB of total headers.\u003c/li\u003e\n\u003cli\u003eUpgrade: [kotlinx.coroutines 1.11.0][coroutines_1_11_0]. This is\nused by the optional\n\u003ccode\u003eokhttp-coroutines\u003c/code\u003e artifact.\u003c/li\u003e\n\u003cli\u003eUpgrade: [GraalVM 25.0.3][graalvm_25].\u003c/li\u003e\n\u003cli\u003eUpgrade: [Okio 3.17.0][okio_3_17_0].\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/61423f472da24e0ccc42b6a2c0863fb27932fea5\"\u003e\u003ccode\u003e61423f4\u003c/code\u003e\u003c/a\u003e\nPrepare for release 5.4.0.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/d7e6effcb6852ca848b5f497032546b98b0a6370\"\u003e\u003ccode\u003ed7e6eff\u003c/code\u003e\u003c/a\u003e\nUpdate eclipse.osgi to v3.24.200 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9480\"\u003e#9480\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/7a350986e3231a7b81cbfcc6e3c185327033422b\"\u003e\u003ccode\u003e7a35098\u003c/code\u003e\u003c/a\u003e\nUpdate bnd to v7.3.0 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9475\"\u003e#9475\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/0c5a45b1174b8f735cc251eb19faaed87b65d868\"\u003e\u003ccode\u003e0c5a45b\u003c/code\u003e\u003c/a\u003e\nUpdate dependency com.puppycrawl.tools:checkstyle to v13.5.0 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9468\"\u003e#9468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/113ad17f70af6984a1a8b4d46024118e5409c44b\"\u003e\u003ccode\u003e113ad17\u003c/code\u003e\u003c/a\u003e\nUpdate dependency macos to v26 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9457\"\u003e#9457\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/84f601af03d047eef3f4b2f0ca6b6f72303dcea1\"\u003e\u003ccode\u003e84f601a\u003c/code\u003e\u003c/a\u003e\nUpdate shadow.plugin to v9.4.2 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9466\"\u003e#9466\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/7d463f4bcfca91e4466037f2c65c7c700545d64c\"\u003e\u003ccode\u003e7d463f4\u003c/code\u003e\u003c/a\u003e\nUpdate spotless.plugin to v8.6.0 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9464\"\u003e#9464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/3bf00f52921a0727bd18997cd92112dd2e582ed7\"\u003e\u003ccode\u003e3bf00f5\u003c/code\u003e\u003c/a\u003e\nUpdate plugin com.diffplug.spotless to v8.6.0 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9463\"\u003e#9463\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/cfc45a3f146d2389797a3d51d405e9118bed56c9\"\u003e\u003ccode\u003ecfc45a3\u003c/code\u003e\u003c/a\u003e\nUpdate spotless.plugin to v8.5.1 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9456\"\u003e#9456\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okhttp/commit/81c5006e336c1cb67870694e38707e2c1c44fb34\"\u003e\u003ccode\u003e81c5006\u003c/code\u003e\u003c/a\u003e\nApply gradle lint correctly (\u003ca\nhref\u003d\"https://redirect.github.com/square/okhttp/issues/9459\"\u003e#9459\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/square/okhttp/compare/parent-5.3.2...parent-5.4.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.squareup.okhttp3:mockwebserver3-junit5\u0026package-manager\u003dmaven\u0026previous-version\u003d5.3.2\u0026new-version\u003d5.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "cb24576e895c0bf8e1d062e2fc82f2b53bfa2eb8",
      "tree": "79fdcbbe403a3163b86375b22da34c62ecd11065",
      "parents": [
        "e525fbfe7f94301ea6b9725472a91206be0c7bd2"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Jun 11 10:07:43 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jun 11 10:07:43 2026 +0200"
      },
      "message": "MINOR: Bump io.netty:netty-bom from 4.2.14.Final to 4.2.15.Final (#1175)\n\nBumps [io.netty:netty-bom](https://github.com/netty/netty) from\n4.2.14.Final to 4.2.15.Final.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-bom\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.15.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j\"\u003eCVE-2026-48059\u003c/a\u003e:\nmemory exhaustion in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e\n(high).\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85\"\u003eCVE-2026-47691\u003c/a\u003e:\nDNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e\n(high).\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm\"\u003eCVE-2026-50560\u003c/a\u003e:\nDDoS in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7\"\u003eCVE-2026-50011\u003c/a\u003e:\nmemory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e\n(high).\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2\"\u003eCVE-2026-44250\u003c/a\u003e:\nmemory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e\n(high).\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3\"\u003eCVE-2026-44890\u003c/a\u003e:\nmemory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e\n(high).\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-cq4q-cv5g-r8q5\"\u003eCVE-2026-50009\u003c/a\u003e:\ninformation disclosure and denial of service in\n\u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86\"\u003eCVE-2026-44249\u003c/a\u003e:\nIPv6 subnet filter bypass in \u003ccode\u003eio.netty:netty-handler\u003c/code\u003e\n(high).\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c\"\u003eCVE-2026-50020\u003c/a\u003e:\nrequest smuggling in \u003ccode\u003eio.netty:netty-codec-http\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-c2rx-5r8w-8xr2\"\u003eCVE-2026-44892\u003c/a\u003e:\nmemory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e\n(high).\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv\"\u003eCVE-2026-44893\u003c/a\u003e:\nmemory leak in \u003ccode\u003eio.netty:netty-codec-haproxy\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-cmm3-54f8-px4j\"\u003eCVE-2026-44894\u003c/a\u003e:\ntraffic amplification in \u003ccode\u003eio.netty:netty-codec-classes-quic\u003c/code\u003e\n(high).\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9\"\u003eCVE-2026-50010\u003c/a\u003e:\nTLS hostname verification accidentally disabled in\n\u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78\"\u003eCVE-2026-45673\u003c/a\u003e:\nDNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh\"\u003eCVE-2026-45416\u003c/a\u003e:\nexcessive memory usage from SNIHandler in\n\u003ccode\u003eio.netty:netty-handler\u003c/code\u003e (high).\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9\"\u003eCVE-2026-45536\u003c/a\u003e:\nfile descriptor leak in\n\u003ccode\u003eio.netty:netty-transport-native-epoll\u003c/code\u003e and\n\u003ccode\u003eio.netty:netty-transport-native-kqueue\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc\"\u003eCVE-2026-45674\u003c/a\u003e:\nDNS cache poisoning in \u003ccode\u003eio.netty:netty-resolver-dns\u003c/code\u003e\n(high).\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch\"\u003eCVE-2026-46340\u003c/a\u003e:\nmemory exhaustion in \u003ccode\u003eio.netty:netty-transport-sctp\u003c/code\u003e\n(high).\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q\"\u003eCVE-2026-47244\u003c/a\u003e:\ndenial of service in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm\"\u003eCVE-2026-48006\u003c/a\u003e:\nmemory exhaustion in \u003ccode\u003eio.netty:netty-codec-redis\u003c/code\u003e\n(high).\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-4grm-h2qv-h6w6\"\u003eCVE-2026-48748\u003c/a\u003e:\nmemory exhaustion in \u003ccode\u003eio.netty:netty-codec-http3\u003c/code\u003e\n(high).\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j\"\u003eCVE-2026-48043\u003c/a\u003e:\nmemory exhaustion in \u003ccode\u003eio.netty:netty-codec-http2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix race in io.netty.channel.uring.IoUringIoHandler.wakeup by \u003ca\nhref\u003d\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16836\"\u003enetty/netty#16836\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP/2: Parse request-target path like Vert.x by \u003ca\nhref\u003d\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16810\"\u003enetty/netty#16810\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: ChannelInitializer: correct misleading comment on\nexceptionCaught route by \u003ca\nhref\u003d\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16853\"\u003enetty/netty#16853\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFlowControlHandler: Suppress duplicate channelReadComplete after\ndraining queue (\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/issues/15053\"\u003e#15053\u003c/a\u003e)\nby \u003ca href\u003d\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e in\n\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePass maxAllocation to Brotli and Zstd decoders by \u003ca\nhref\u003d\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix revapi warnings by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16885\"\u003enetty/netty#16885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix SCTP and Redis tests by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16893\"\u003enetty/netty#16893\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation\nby \u003ca href\u003d\"https://github.com/skyguard1\"\u003e\u003ccode\u003e@​skyguard1\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16850\"\u003enetty/netty#16850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: MQTT: Reject malformed no-payload packets with\nnon-zero Remaining Length by \u003ca\nhref\u003d\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16890\"\u003enetty/netty#16890\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/schiemon\"\u003e\u003ccode\u003e@​schiemon\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16837\"\u003enetty/netty#16837\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/fedinskiy\"\u003e\u003ccode\u003e@​fedinskiy\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16844\"\u003enetty/netty#16844\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/a41f7b289ce1d697c50846f3ade3983e22b2ed40\"\u003e\u003ccode\u003ea41f7b2\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release netty-4.2.15.Final\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/2394530bdb6837d928c2ec0b4d8f598487059ef9\"\u003e\u003ccode\u003e2394530\u003c/code\u003e\u003c/a\u003e\nAuto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero\nRemain...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/0bd1657a601da85c324d28562dc7d1ae220ad3a7\"\u003e\u003ccode\u003e0bd1657\u003c/code\u003e\u003c/a\u003e\nAdd maxWindowLog parameter to ZstdDecoder to bound memory allocation (\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/issues/16850\"\u003e#16850\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/76291f58a901e021289e5c30618b6e136d605163\"\u003e\u003ccode\u003e76291f5\u003c/code\u003e\u003c/a\u003e\nFix SCTP and Redis tests (\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/issues/16893\"\u003e#16893\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/e067b6e3376afee7629481d46333c3acf7f95943\"\u003e\u003ccode\u003ee067b6e\u003c/code\u003e\u003c/a\u003e\nFix revapi warnings (\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/issues/16885\"\u003e#16885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/5a52600d96cc6f4d38098e0645be53ecbfc8a811\"\u003e\u003ccode\u003e5a52600\u003c/code\u003e\u003c/a\u003e\nPass maxAllocation to Brotli and Zstd decoders (\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/issues/16844\"\u003e#16844\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/541add0f7f5486ef15834da51d8dd983ec12e2b3\"\u003e\u003ccode\u003e541add0\u003c/code\u003e\u003c/a\u003e\nMerge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/270800e5d336913606493a562c8200ecf321a0c1\"\u003e\u003ccode\u003e270800e\u003c/code\u003e\u003c/a\u003e\nMerge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca\"\u003e\u003ccode\u003e3d45a1e\u003c/code\u003e\u003c/a\u003e\nMerge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/75127cab731ee35068d1f0667bffa188bc332f5d\"\u003e\u003ccode\u003e75127ca\u003c/code\u003e\u003c/a\u003e\nMerge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "e525fbfe7f94301ea6b9725472a91206be0c7bd2",
      "tree": "1475a07be068f7aae41136070b85ccd738c03bbb",
      "parents": [
        "c836fad712c8a2ca14ac3a4b5f117a3e9fbefdc7"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Jun 10 14:31:56 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Jun 10 14:31:56 2026 +0200"
      },
      "message": "MINOR: Bump com.diffplug.spotless:spotless-maven-plugin from 3.4.0 to 3.6.0 (#1172)\n\nBumps\n[com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless)\nfrom 3.4.0 to 3.6.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/diffplug/spotless/releases\"\u003ecom.diffplug.spotless:spotless-maven-plugin\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eMaven Plugin v3.6.0\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003e\u0026lt;cacheDirectory\u0026gt;\u003c/code\u003e to\n\u003ccode\u003e\u0026lt;eclipse\u0026gt;\u003c/code\u003e, \u003ccode\u003e\u0026lt;greclipse\u0026gt;\u003c/code\u003e, and\n\u003ccode\u003e\u0026lt;eclipseCdt\u0026gt;\u003c/code\u003e for the Equo/Solstice P2 cache. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2944\"\u003e#2944\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eEclipseJdtFormtterStep\u003c/code\u003e now can conditionally set\ncompiler source/compliance options. Allows for better parsing of AST\nNode for newer language features and more correct sorting; e.g. records\nor seal classes. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2942\"\u003e#2942\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e\u0026lt;versionCatalog\u0026gt;\u003c/code\u003e no longer splits long inline\ntables across multiple lines — Gradle\u0027s TOML 1.0 parser cannot read\nmulti-line inline tables. The \u003ccode\u003emaxLineLength\u003c/code\u003e option has been\nremoved. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/issues/2948\"\u003e#2948\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003espotless:apply\u003c/code\u003e no longer aborts on the first file with\nlints; it now formats all files and reports a single aggregated lint\nfailure across every file, matching the Gradle plugin\u0027s behavior. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2937\"\u003e#2937\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e\u0026lt;greclipse\u0026gt;\u003c/code\u003e and \u003ccode\u003e\u0026lt;eclipseCdt\u0026gt;\u003c/code\u003e\nnow default P2 data to the Maven local repository. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2944\"\u003e#2944\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eforbidWildcardImports\u003c/code\u003e and\n\u003ccode\u003eforbidModuleImports\u003c/code\u003e now detect imports that have leading\nwhitespace (indentation/tabs). (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2939\"\u003e#2939\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImproved formatting performance by eliminating redundant per-step\nline-ending normalization in the core formatter loop. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2934\"\u003e#2934\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eMaven Plugin v3.5.1\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e\u0026lt;licenseHeader\u0026gt;\u003c/code\u003e with\n\u003ccode\u003e\u0026lt;yearMode\u0026gt;SET_FROM_GIT\u0026lt;/yearMode\u0026gt;\u003c/code\u003e no longer\nruns \u003ccode\u003egit log\u003c/code\u003e through a shell, eliminating a shell-injection\nvector when formatting files whose names contain shell\nmetacharacters.\u003c/li\u003e\n\u003cli\u003eBump transitive \u003ccode\u003eplexus-utils\u003c/code\u003e \u003ccode\u003e4.0.2\u003c/code\u003e -\u0026gt;\n\u003ccode\u003e4.0.3\u003c/code\u003e to address \u003ca\nhref\u003d\"https://github.com/advisories/GHSA-6fmv-xxpf-w3cw\"\u003eCVE-2025-67030\u003c/a\u003e.\n(\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/issues/2919\"\u003e#2919\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eMaven Plugin v3.5.0\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e\u0026lt;scalafmt\u0026gt;\u003c/code\u003e now reads the version from the\n\u003ccode\u003eversion\u003c/code\u003e field in the scalafmt config file when no\n\u003ccode\u003e\u0026lt;version\u0026gt;\u003c/code\u003e is explicitly set, falling back to the\nbuilt-in default only if neither is available. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2922\"\u003e#2922\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003e\u0026lt;toml\u0026gt;\u003c/code\u003e format type with\n\u003ccode\u003e\u0026lt;versionCatalog\u0026gt;\u003c/code\u003e step for formatting and sorting\nGradle version catalog files. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/issues/2916\"\u003e#2916\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003e\u0026lt;javaparserVersion\u0026gt;\u003c/code\u003e option to\n\u003ccode\u003e\u0026lt;cleanthat\u0026gt;\u003c/code\u003e, allowing users to override the\nJavaParser version pulled in transitively by Cleanthat. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2903\"\u003e#2903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd a \u003ccode\u003eexpandWildcardImports\u003c/code\u003e API for java (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2930\"\u003e#2829\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreserve case of JDBI named bind params that collide with SQL\nkeywords (e.g. \u003ccode\u003e:limit\u003c/code\u003e, \u003ccode\u003e:offset\u003c/code\u003e) in the DBeaver\nSQL formatter. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2899\"\u003e#2899\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003e-Dspotless.ratchetFrom\u003d...\u003c/code\u003e user property now takes\npriority over \u003ccode\u003e\u0026lt;ratchetFrom\u0026gt;\u003c/code\u003e configured in the plugin\nor in individual formatters, instead of being overridden by them. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2896\"\u003e#2896\u003c/a\u003e,\nfixes \u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/issues/2842\"\u003e#2842\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix non-idempotent formatting when \u003ccode\u003eimportOrder()\u003c/code\u003e is\ncombined with \u003ccode\u003egreclipse()\u003c/code\u003e: a single catch-all group no\nlonger strips blank lines that \u003ccode\u003egreclipse()\u003c/code\u003e independently\ninserted between import groups. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2914\"\u003e#2914\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003eexpandWildcardImports\u003c/code\u003e failing on JDK XML types such\nas \u003ccode\u003eorg.xml.sax.InputSource\u003c/code\u003e. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2921\"\u003e#2921\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse Eclipse JDT\u0027s collator-based comparison when sorting Java\nmembers to better match Eclipse save actions. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2920\"\u003e#2920\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump default \u003ccode\u003ecleanthat\u003c/code\u003e version \u003ccode\u003e2.24\u003c/code\u003e -\u0026gt;\n\u003ccode\u003e2.25\u003c/code\u003e. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2903\"\u003e#2903\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump default \u003ccode\u003eeclipse-jdt\u003c/code\u003e version from \u003ccode\u003e4.35\u003c/code\u003e\nto \u003ccode\u003e4.39\u003c/code\u003e. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2912\"\u003e#2912\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/71a433c5cd5e8a4983c6600a10032ce3415700ba\"\u003e\u003ccode\u003e71a433c\u003c/code\u003e\u003c/a\u003e\nPublished maven/3.6.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/3a0f1017dcdfd49042a638119c1b6d998b28c67f\"\u003e\u003ccode\u003e3a0f101\u003c/code\u003e\u003c/a\u003e\nPublished gradle/8.6.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/007e9d858177c93a3c7b6f9d1eb068937022613f\"\u003e\u003ccode\u003e007e9d8\u003c/code\u003e\u003c/a\u003e\nPublished lib/4.6.2\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/a074d53565e0f523c3bba7f5135ba0d8f959f98b\"\u003e\u003ccode\u003ea074d53\u003c/code\u003e\u003c/a\u003e\nAllow setting the local P2 cache dir in the Spotless Gradle plugin (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/issues/2944\"\u003e#2944\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/a266fc2b97098aed703300ecfb00a7fc6ab57467\"\u003e\u003ccode\u003ea266fc2\u003c/code\u003e\u003c/a\u003e\nMerge branch \u0027main\u0027 into add-cache-directory-dsl\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/e0d466e5c157d41208ba84f3b0c767a4ad3d4330\"\u003e\u003ccode\u003ee0d466e\u003c/code\u003e\u003c/a\u003e\nFix: sort members treats record declarations as types (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/issues/2942\"\u003e#2942\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/3936b6f2f9290bfe946a890c1efc791eb969c7db\"\u003e\u003ccode\u003e3936b6f\u003c/code\u003e\u003c/a\u003e\nMerge branch \u0027main\u0027 into main\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/278765fcbbdc91d9bbcd3bff41005a350746792c\"\u003e\u003ccode\u003e278765f\u003c/code\u003e\u003c/a\u003e\nfix: expandWildcardImports support pom type dependency, fix \u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/issues/2839\"\u003e#2839\u003c/a\u003e\n(\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/issues/2935\"\u003e#2935\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/a18ddec9bd578c77177c9478207892d63f942826\"\u003e\u003ccode\u003ea18ddec\u003c/code\u003e\u003c/a\u003e\nRemove maxLineLength from versionCatalog step (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/issues/2949\"\u003e#2949\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/b91ad871a69bb7c3722120c81f9dae3e1ee11836\"\u003e\u003ccode\u003eb91ad87\u003c/code\u003e\u003c/a\u003e\nAdd changelog entries for versionCatalog maxLineLength removal\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/diffplug/spotless/compare/maven/3.4.0...maven/3.6.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.diffplug.spotless:spotless-maven-plugin\u0026package-manager\u003dmaven\u0026previous-version\u003d3.4.0\u0026new-version\u003d3.6.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "c836fad712c8a2ca14ac3a4b5f117a3e9fbefdc7",
      "tree": "b9f3c508ad1969513dcc3cc80038386110f1a74f",
      "parents": [
        "485f813d0cec4987f5b597f6cd448d40f074ccce"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Jun 10 09:43:35 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Jun 10 09:43:35 2026 +0200"
      },
      "message": "MINOR: Bump com.fasterxml.jackson:jackson-bom from 2.21.3 to 2.22.0 (#1173)\n\nBumps\n[com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom)\nfrom 2.21.3 to 2.22.0.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/112e8591b5e14dff30c278c142d8111231c3a48f\"\u003e\u003ccode\u003e112e859\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release jackson-bom-2.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/2cae2ce236587ee18c58e40e01d432a077b3e7ae\"\u003e\u003ccode\u003e2cae2ce\u003c/code\u003e\u003c/a\u003e\nPrep for 2.22.0 release\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/7955d2113f21d1027f0b643e5fbca4a1feae5964\"\u003e\u003ccode\u003e7955d21\u003c/code\u003e\u003c/a\u003e\nMerge branch \u00272.21\u0027 into 2.x\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/8922a05c6e46f790b67e64e15585eb070b6ebc6d\"\u003e\u003ccode\u003e8922a05\u003c/code\u003e\u003c/a\u003e\nPost-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/1fa994366741173fb38bc7c194666819ade60f6d\"\u003e\u003ccode\u003e1fa9943\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/d1abd31e4fec3035965d57a05a6256171ea8d980\"\u003e\u003ccode\u003ed1abd31\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release jackson-bom-2.21.4\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/2aaea43db8480aa7d405ebc0de503cffc864f6f6\"\u003e\u003ccode\u003e2aaea43\u003c/code\u003e\u003c/a\u003e\nPrep for 2.21.4 release\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/902ec69efea40cdf1647c6fb49fb78734a88f3e6\"\u003e\u003ccode\u003e902ec69\u003c/code\u003e\u003c/a\u003e\nUpdate Woodstox/stax2-api (to 7.2.0/4.3.0)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/257064709f8ea9ca84ea5d569080f9daacc0e017\"\u003e\u003ccode\u003e2570647\u003c/code\u003e\u003c/a\u003e\nMerge branch \u00272.21\u0027 into 2.x\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/9d3a9d54e40312ef0ac9192d599b59b541f65fb8\"\u003e\u003ccode\u003e9d3a9d5\u003c/code\u003e\u003c/a\u003e\nPost-release dep version bump\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.21.3...jackson-bom-2.22.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "485f813d0cec4987f5b597f6cd448d40f074ccce",
      "tree": "9e5e4bf23503cbc89b4970fe011441ba2f45654f",
      "parents": [
        "a993bf1727098cd21cd4973d6bcff2b20e5ebfd0"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jun 09 13:14:21 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jun 09 13:14:21 2026 +0200"
      },
      "message": "MINOR: Bump com.github.luben:zstd-jni from 1.5.7-8 to 1.5.7-10 (#1177)\n\nBumps [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni)\nfrom 1.5.7-8 to 1.5.7-10.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/luben/zstd-jni/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.github.luben:zstd-jni\u0026package-manager\u003dmaven\u0026previous-version\u003d1.5.7-8\u0026new-version\u003d1.5.7-10)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "a993bf1727098cd21cd4973d6bcff2b20e5ebfd0",
      "tree": "c5d9304dacf61be3c765272c2698dcd76994cf30",
      "parents": [
        "035d96b256cc5eb687add6af2f5326ac5523f272"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jun 09 09:19:57 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jun 09 09:19:57 2026 +0200"
      },
      "message": "MINOR: Bump com.google.api.grpc:proto-google-common-protos from 2.71.0 to 2.72.0 (#1178)\n\nBumps\n[com.google.api.grpc:proto-google-common-protos](https://github.com/googleapis/sdk-platform-java)\nfrom 2.71.0 to 2.72.0.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/6e1c1796ed06d7215bb11784ad4ab2a380690b37\"\u003e\u003ccode\u003e6e1c179\u003c/code\u003e\u003c/a\u003e\nchore(main): release 2.64.0 (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3954\"\u003e#3954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/7a2f0b0d81d2b0b988e6e36d9d8b75f8f9a141ff\"\u003e\u003ccode\u003e7a2f0b0\u003c/code\u003e\u003c/a\u003e\nchore: update upper bound dependencies file (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3966\"\u003e#3966\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/1e4a7e5088c88e5752cc24cbe44b14b3ce409778\"\u003e\u003ccode\u003e1e4a7e5\u003c/code\u003e\u003c/a\u003e\nchore: update googleapis commit at Fri Oct 17 02:31:11 UTC 2025 (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3951\"\u003e#3951\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/ffb557ce8f3460f722b27b30af5e470edd93431b\"\u003e\u003ccode\u003effb557c\u003c/code\u003e\u003c/a\u003e\ndeps: Bump grpc-java to v1.76.0 (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3942\"\u003e#3942\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/9ad8a4dfb96a44c34acd10aacd2adc30ed240631\"\u003e\u003ccode\u003e9ad8a4d\u003c/code\u003e\u003c/a\u003e\nchore: remove internal/librariangen following migration to librarian\nrepo (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3\"\u003e#3\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/0a1bbea44d6a1b024c569db89fef8d08ad7bd2d2\"\u003e\u003ccode\u003e0a1bbea\u003c/code\u003e\u003c/a\u003e\nchore(librariangen): Generate to use languagecontainer.Run (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3968\"\u003e#3968\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/452d703b703ab3222fd1a7060ed5e1ac6363322b\"\u003e\u003ccode\u003e452d703\u003c/code\u003e\u003c/a\u003e\nfeat(librariangen): generate grpc stubs and resource helpers (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3967\"\u003e#3967\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/85057e8e2402fca7bcf4a153d4981fed2b6628de\"\u003e\u003ccode\u003e85057e8\u003c/code\u003e\u003c/a\u003e\nci: remove librarian skipping on matrix builds (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3969\"\u003e#3969\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/a26a6d937e0523b9a6c193504645f96649e48573\"\u003e\u003ccode\u003ea26a6d9\u003c/code\u003e\u003c/a\u003e\nchore(librariangen): languagecontainer package to parse release-init\nrequest ...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/c86b4eaabcd5ce6bf4939ada04b6f41a85b3385e\"\u003e\u003ccode\u003ec86b4ea\u003c/code\u003e\u003c/a\u003e\nci: exclude internal/librariangen/** using dorny/paths-filter (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3961\"\u003e#3961\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/compare/gax/v2.71.0...gax/v2.72.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.google.api.grpc:proto-google-common-protos\u0026package-manager\u003dmaven\u0026previous-version\u003d2.71.0\u0026new-version\u003d2.72.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "035d96b256cc5eb687add6af2f5326ac5523f272",
      "tree": "39ff87e64b5acb2d52b0594199f88d5b51f79d15",
      "parents": [
        "da97828bfe2818e1233ef8c421e89e238fff8340"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Jun 04 15:57:55 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jun 04 15:57:55 2026 +0200"
      },
      "message": "MINOR: Bump dep.junit.jupiter.version from 5.12.2 to 6.1.0 (#1162)\n\nBumps `dep.junit.jupiter.version` from 5.12.2 to 6.1.0.\nUpdates `org.junit.jupiter:junit-jupiter-engine` from 5.12.2 to 6.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/releases\"\u003eorg.junit.jupiter:junit-jupiter-engine\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eJUnit 6.1.0 \u003d Platform 6.1.0 + Jupiter 6.1.0 + Vintage 6.1.0\u003c/p\u003e\n\u003cp\u003eSee \u003ca href\u003d\"https://docs.junit.org/6.1.0/release-notes.html\"\u003eRelease\nNotes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/JarvisCraft\"\u003e\u003ccode\u003e@​JarvisCraft\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5633\"\u003ejunit-team/junit-framework#5633\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/Maran23\"\u003e\u003ccode\u003e@​Maran23\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5644\"\u003ejunit-team/junit-framework#5644\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-RC1 \u003d Platform 6.1.0-RC1 + Jupiter 6.1.0-RC1 + Vintage\n6.1.0-RC1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href\u003d\"https://docs.junit.org/6.1.0-RC1/release-notes/\"\u003eRelease\nNotes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/mariokhoury4\"\u003e\u003ccode\u003e@​mariokhoury4\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/4574\"\u003ejunit-team/junit-framework#4574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/Ogu1208\"\u003e\u003ccode\u003e@​Ogu1208\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5145\"\u003ejunit-team/junit-framework#5145\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/HyungGeun94\"\u003e\u003ccode\u003e@​HyungGeun94\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5271\"\u003ejunit-team/junit-framework#5271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/yalishevant\"\u003e\u003ccode\u003e@​yalishevant\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5316\"\u003ejunit-team/junit-framework#5316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/JINU-CHANG\"\u003e\u003ccode\u003e@​JINU-CHANG\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5290\"\u003ejunit-team/junit-framework#5290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/jaschdoc\"\u003e\u003ccode\u003e@​jaschdoc\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5427\"\u003ejunit-team/junit-framework#5427\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/kawshikbuet17\"\u003e\u003ccode\u003e@​kawshikbuet17\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5561\"\u003ejunit-team/junit-framework#5561\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/msridhar\"\u003e\u003ccode\u003e@​msridhar\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5602\"\u003ejunit-team/junit-framework#5602\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/compare/r6.1.0-M1...r6.1.0-RC1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.1.0-M1...r6.1.0-RC1\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-M1 \u003d Platform 6.1.0-M1 + Jupiter 6.1.0-M1 + Vintage\n6.1.0-M1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href\u003d\"https://docs.junit.org/6.1.0-M1/release-notes/\"\u003eRelease\nNotes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/vy\"\u003e\u003ccode\u003e@​vy\u003c/code\u003e\u003c/a\u003e made their\nfirst contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5041\"\u003ejunit-team/junit-framework#5041\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/Pankraz76\"\u003e\u003ccode\u003e@​Pankraz76\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5006\"\u003ejunit-team/junit-framework#5006\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/arukiidou\"\u003e\u003ccode\u003e@​arukiidou\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5066\"\u003ejunit-team/junit-framework#5066\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/laeubi\"\u003e\u003ccode\u003e@​laeubi\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5092\"\u003ejunit-team/junit-framework#5092\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/jihun4452\"\u003e\u003ccode\u003e@​jihun4452\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5088\"\u003ejunit-team/junit-framework#5088\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/TWiStErRob\"\u003e\u003ccode\u003e@​TWiStErRob\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5133\"\u003ejunit-team/junit-framework#5133\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/compare/r6.0.0...r6.1.0-M1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.0...r6.1.0-M1\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.0.3 \u003d Platform 6.0.3 + Jupiter 6.0.3 + Vintage 6.0.3\u003c/p\u003e\n\u003cp\u003eSee \u003ca href\u003d\"https://docs.junit.org/6.0.3/release-notes.html\"\u003eRelease\nNotes\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/compare/r6.0.2...r6.0.3\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.2...r6.0.3\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.0.2 \u003d Platform 6.0.2 + Jupiter 6.0.2 + Vintage 6.0.2\u003c/p\u003e\n\u003cp\u003eSee \u003ca href\u003d\"https://docs.junit.org/6.0.2/release-notes.html\"\u003eRelease\nNotes\u003c/a\u003e.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/0dc3af1cb1973d257b5bc75d81e02454d5e4e556\"\u003e\u003ccode\u003e0dc3af1\u003c/code\u003e\u003c/a\u003e\nRelease 6.1.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/1d130020c85170edcb46ce7ed1f7f78824e37c04\"\u003e\u003ccode\u003e1d13002\u003c/code\u003e\u003c/a\u003e\nPrepare 6.1.0 release notes\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/072b2175bbd7b0b3b26f5d928550ec7a21e68268\"\u003e\u003ccode\u003e072b217\u003c/code\u003e\u003c/a\u003e\nUpdate plugin spotless to v8.5.0 (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5668\"\u003e#5668\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/3a53480218f4b752a9ca77506e10632cd483c0f8\"\u003e\u003ccode\u003e3a53480\u003c/code\u003e\u003c/a\u003e\nUpdate Gradle to v9.5.1 (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5666\"\u003e#5666\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/0e18a20a9f98d063ae02b3ba19329143f5c7f034\"\u003e\u003ccode\u003e0e18a20\u003c/code\u003e\u003c/a\u003e\nUpdate zizmorcore/zizmor-action action to v0.5.4 (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5669\"\u003e#5669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/0a2634fb9cbbd057b02cf629d7d272c16d62be4b\"\u003e\u003ccode\u003e0a2634f\u003c/code\u003e\u003c/a\u003e\nUpdate github/codeql-action action to v4.35.5 (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5671\"\u003e#5671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/4dbd5561b00ac761a62c516bfaec51c212a2d60c\"\u003e\u003ccode\u003e4dbd556\u003c/code\u003e\u003c/a\u003e\nRestructure workflows to have single \u0026quot;status\u0026quot; job (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5670\"\u003e#5670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/f2194cebe377512cb0ade388c62a881a0bcf5d3e\"\u003e\u003ccode\u003ef2194ce\u003c/code\u003e\u003c/a\u003e\nIncrease timeout to reduce flakiness\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/5c8fdd2df65b763151cccbe669ea9e1c3155efcd\"\u003e\u003ccode\u003e5c8fdd2\u003c/code\u003e\u003c/a\u003e\nUpdate dependency org.apache.groovy:groovy to v5.0.6 (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5659\"\u003e#5659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/43c6982324602582902c9bdb213fd5e007f9cf3d\"\u003e\u003ccode\u003e43c6982\u003c/code\u003e\u003c/a\u003e\nUpdate dependency org.slf4j:slf4j-jdk14 to v2.0.18 (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5667\"\u003e#5667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/compare/r5.12.2...r6.1.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.junit.jupiter:junit-jupiter-api` from 5.12.2 to 6.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/releases\"\u003eorg.junit.jupiter:junit-jupiter-api\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eJUnit 6.1.0 \u003d Platform 6.1.0 + Jupiter 6.1.0 + Vintage 6.1.0\u003c/p\u003e\n\u003cp\u003eSee \u003ca href\u003d\"https://docs.junit.org/6.1.0/release-notes.html\"\u003eRelease\nNotes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/JarvisCraft\"\u003e\u003ccode\u003e@​JarvisCraft\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5633\"\u003ejunit-team/junit-framework#5633\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/Maran23\"\u003e\u003ccode\u003e@​Maran23\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5644\"\u003ejunit-team/junit-framework#5644\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-RC1 \u003d Platform 6.1.0-RC1 + Jupiter 6.1.0-RC1 + Vintage\n6.1.0-RC1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href\u003d\"https://docs.junit.org/6.1.0-RC1/release-notes/\"\u003eRelease\nNotes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/mariokhoury4\"\u003e\u003ccode\u003e@​mariokhoury4\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/4574\"\u003ejunit-team/junit-framework#4574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/Ogu1208\"\u003e\u003ccode\u003e@​Ogu1208\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5145\"\u003ejunit-team/junit-framework#5145\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/HyungGeun94\"\u003e\u003ccode\u003e@​HyungGeun94\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5271\"\u003ejunit-team/junit-framework#5271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/yalishevant\"\u003e\u003ccode\u003e@​yalishevant\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5316\"\u003ejunit-team/junit-framework#5316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/JINU-CHANG\"\u003e\u003ccode\u003e@​JINU-CHANG\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5290\"\u003ejunit-team/junit-framework#5290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/jaschdoc\"\u003e\u003ccode\u003e@​jaschdoc\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5427\"\u003ejunit-team/junit-framework#5427\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/kawshikbuet17\"\u003e\u003ccode\u003e@​kawshikbuet17\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5561\"\u003ejunit-team/junit-framework#5561\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/msridhar\"\u003e\u003ccode\u003e@​msridhar\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5602\"\u003ejunit-team/junit-framework#5602\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/compare/r6.1.0-M1...r6.1.0-RC1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.1.0-M1...r6.1.0-RC1\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-M1 \u003d Platform 6.1.0-M1 + Jupiter 6.1.0-M1 + Vintage\n6.1.0-M1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href\u003d\"https://docs.junit.org/6.1.0-M1/release-notes/\"\u003eRelease\nNotes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/vy\"\u003e\u003ccode\u003e@​vy\u003c/code\u003e\u003c/a\u003e made their\nfirst contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5041\"\u003ejunit-team/junit-framework#5041\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/Pankraz76\"\u003e\u003ccode\u003e@​Pankraz76\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5006\"\u003ejunit-team/junit-framework#5006\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/arukiidou\"\u003e\u003ccode\u003e@​arukiidou\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5066\"\u003ejunit-team/junit-framework#5066\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/laeubi\"\u003e\u003ccode\u003e@​laeubi\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5092\"\u003ejunit-team/junit-framework#5092\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/jihun4452\"\u003e\u003ccode\u003e@​jihun4452\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5088\"\u003ejunit-team/junit-framework#5088\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/TWiStErRob\"\u003e\u003ccode\u003e@​TWiStErRob\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5133\"\u003ejunit-team/junit-framework#5133\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/compare/r6.0.0...r6.1.0-M1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.0...r6.1.0-M1\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.0.3 \u003d Platform 6.0.3 + Jupiter 6.0.3 + Vintage 6.0.3\u003c/p\u003e\n\u003cp\u003eSee \u003ca href\u003d\"https://docs.junit.org/6.0.3/release-notes.html\"\u003eRelease\nNotes\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/compare/r6.0.2...r6.0.3\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.2...r6.0.3\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.0.2 \u003d Platform 6.0.2 + Jupiter 6.0.2 + Vintage 6.0.2\u003c/p\u003e\n\u003cp\u003eSee \u003ca href\u003d\"https://docs.junit.org/6.0.2/release-notes.html\"\u003eRelease\nNotes\u003c/a\u003e.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/0dc3af1cb1973d257b5bc75d81e02454d5e4e556\"\u003e\u003ccode\u003e0dc3af1\u003c/code\u003e\u003c/a\u003e\nRelease 6.1.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/1d130020c85170edcb46ce7ed1f7f78824e37c04\"\u003e\u003ccode\u003e1d13002\u003c/code\u003e\u003c/a\u003e\nPrepare 6.1.0 release notes\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/072b2175bbd7b0b3b26f5d928550ec7a21e68268\"\u003e\u003ccode\u003e072b217\u003c/code\u003e\u003c/a\u003e\nUpdate plugin spotless to v8.5.0 (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5668\"\u003e#5668\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/3a53480218f4b752a9ca77506e10632cd483c0f8\"\u003e\u003ccode\u003e3a53480\u003c/code\u003e\u003c/a\u003e\nUpdate Gradle to v9.5.1 (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5666\"\u003e#5666\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/0e18a20a9f98d063ae02b3ba19329143f5c7f034\"\u003e\u003ccode\u003e0e18a20\u003c/code\u003e\u003c/a\u003e\nUpdate zizmorcore/zizmor-action action to v0.5.4 (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5669\"\u003e#5669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/0a2634fb9cbbd057b02cf629d7d272c16d62be4b\"\u003e\u003ccode\u003e0a2634f\u003c/code\u003e\u003c/a\u003e\nUpdate github/codeql-action action to v4.35.5 (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5671\"\u003e#5671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/4dbd5561b00ac761a62c516bfaec51c212a2d60c\"\u003e\u003ccode\u003e4dbd556\u003c/code\u003e\u003c/a\u003e\nRestructure workflows to have single \u0026quot;status\u0026quot; job (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5670\"\u003e#5670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/f2194cebe377512cb0ade388c62a881a0bcf5d3e\"\u003e\u003ccode\u003ef2194ce\u003c/code\u003e\u003c/a\u003e\nIncrease timeout to reduce flakiness\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/5c8fdd2df65b763151cccbe669ea9e1c3155efcd\"\u003e\u003ccode\u003e5c8fdd2\u003c/code\u003e\u003c/a\u003e\nUpdate dependency org.apache.groovy:groovy to v5.0.6 (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5659\"\u003e#5659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/43c6982324602582902c9bdb213fd5e007f9cf3d\"\u003e\u003ccode\u003e43c6982\u003c/code\u003e\u003c/a\u003e\nUpdate dependency org.slf4j:slf4j-jdk14 to v2.0.18 (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5667\"\u003e#5667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/compare/r5.12.2...r6.1.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.junit.jupiter:junit-jupiter-params` from 5.12.2 to 6.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/releases\"\u003eorg.junit.jupiter:junit-jupiter-params\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eJUnit 6.1.0 \u003d Platform 6.1.0 + Jupiter 6.1.0 + Vintage 6.1.0\u003c/p\u003e\n\u003cp\u003eSee \u003ca href\u003d\"https://docs.junit.org/6.1.0/release-notes.html\"\u003eRelease\nNotes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/JarvisCraft\"\u003e\u003ccode\u003e@​JarvisCraft\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5633\"\u003ejunit-team/junit-framework#5633\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/Maran23\"\u003e\u003ccode\u003e@​Maran23\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5644\"\u003ejunit-team/junit-framework#5644\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-RC1 \u003d Platform 6.1.0-RC1 + Jupiter 6.1.0-RC1 + Vintage\n6.1.0-RC1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href\u003d\"https://docs.junit.org/6.1.0-RC1/release-notes/\"\u003eRelease\nNotes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/mariokhoury4\"\u003e\u003ccode\u003e@​mariokhoury4\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/4574\"\u003ejunit-team/junit-framework#4574\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/Ogu1208\"\u003e\u003ccode\u003e@​Ogu1208\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5145\"\u003ejunit-team/junit-framework#5145\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/HyungGeun94\"\u003e\u003ccode\u003e@​HyungGeun94\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5271\"\u003ejunit-team/junit-framework#5271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/yalishevant\"\u003e\u003ccode\u003e@​yalishevant\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5316\"\u003ejunit-team/junit-framework#5316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/JINU-CHANG\"\u003e\u003ccode\u003e@​JINU-CHANG\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5290\"\u003ejunit-team/junit-framework#5290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/jaschdoc\"\u003e\u003ccode\u003e@​jaschdoc\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5427\"\u003ejunit-team/junit-framework#5427\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/kawshikbuet17\"\u003e\u003ccode\u003e@​kawshikbuet17\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5561\"\u003ejunit-team/junit-framework#5561\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/msridhar\"\u003e\u003ccode\u003e@​msridhar\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5602\"\u003ejunit-team/junit-framework#5602\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/compare/r6.1.0-M1...r6.1.0-RC1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.1.0-M1...r6.1.0-RC1\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.1.0-M1 \u003d Platform 6.1.0-M1 + Jupiter 6.1.0-M1 + Vintage\n6.1.0-M1\u003c/p\u003e\n\u003cp\u003eSee \u003ca href\u003d\"https://docs.junit.org/6.1.0-M1/release-notes/\"\u003eRelease\nNotes\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/vy\"\u003e\u003ccode\u003e@​vy\u003c/code\u003e\u003c/a\u003e made their\nfirst contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5041\"\u003ejunit-team/junit-framework#5041\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/Pankraz76\"\u003e\u003ccode\u003e@​Pankraz76\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5006\"\u003ejunit-team/junit-framework#5006\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/arukiidou\"\u003e\u003ccode\u003e@​arukiidou\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5066\"\u003ejunit-team/junit-framework#5066\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/laeubi\"\u003e\u003ccode\u003e@​laeubi\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5092\"\u003ejunit-team/junit-framework#5092\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/jihun4452\"\u003e\u003ccode\u003e@​jihun4452\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5088\"\u003ejunit-team/junit-framework#5088\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/TWiStErRob\"\u003e\u003ccode\u003e@​TWiStErRob\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/pull/5133\"\u003ejunit-team/junit-framework#5133\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/compare/r6.0.0...r6.1.0-M1\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.0...r6.1.0-M1\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.0.3 \u003d Platform 6.0.3 + Jupiter 6.0.3 + Vintage 6.0.3\u003c/p\u003e\n\u003cp\u003eSee \u003ca href\u003d\"https://docs.junit.org/6.0.3/release-notes.html\"\u003eRelease\nNotes\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/compare/r6.0.2...r6.0.3\"\u003ehttps://github.com/junit-team/junit-framework/compare/r6.0.2...r6.0.3\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eJUnit 6.0.2 \u003d Platform 6.0.2 + Jupiter 6.0.2 + Vintage 6.0.2\u003c/p\u003e\n\u003cp\u003eSee \u003ca href\u003d\"https://docs.junit.org/6.0.2/release-notes.html\"\u003eRelease\nNotes\u003c/a\u003e.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/0dc3af1cb1973d257b5bc75d81e02454d5e4e556\"\u003e\u003ccode\u003e0dc3af1\u003c/code\u003e\u003c/a\u003e\nRelease 6.1.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/1d130020c85170edcb46ce7ed1f7f78824e37c04\"\u003e\u003ccode\u003e1d13002\u003c/code\u003e\u003c/a\u003e\nPrepare 6.1.0 release notes\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/072b2175bbd7b0b3b26f5d928550ec7a21e68268\"\u003e\u003ccode\u003e072b217\u003c/code\u003e\u003c/a\u003e\nUpdate plugin spotless to v8.5.0 (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5668\"\u003e#5668\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/3a53480218f4b752a9ca77506e10632cd483c0f8\"\u003e\u003ccode\u003e3a53480\u003c/code\u003e\u003c/a\u003e\nUpdate Gradle to v9.5.1 (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5666\"\u003e#5666\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/0e18a20a9f98d063ae02b3ba19329143f5c7f034\"\u003e\u003ccode\u003e0e18a20\u003c/code\u003e\u003c/a\u003e\nUpdate zizmorcore/zizmor-action action to v0.5.4 (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5669\"\u003e#5669\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/0a2634fb9cbbd057b02cf629d7d272c16d62be4b\"\u003e\u003ccode\u003e0a2634f\u003c/code\u003e\u003c/a\u003e\nUpdate github/codeql-action action to v4.35.5 (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5671\"\u003e#5671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/4dbd5561b00ac761a62c516bfaec51c212a2d60c\"\u003e\u003ccode\u003e4dbd556\u003c/code\u003e\u003c/a\u003e\nRestructure workflows to have single \u0026quot;status\u0026quot; job (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5670\"\u003e#5670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/f2194cebe377512cb0ade388c62a881a0bcf5d3e\"\u003e\u003ccode\u003ef2194ce\u003c/code\u003e\u003c/a\u003e\nIncrease timeout to reduce flakiness\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/5c8fdd2df65b763151cccbe669ea9e1c3155efcd\"\u003e\u003ccode\u003e5c8fdd2\u003c/code\u003e\u003c/a\u003e\nUpdate dependency org.apache.groovy:groovy to v5.0.6 (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5659\"\u003e#5659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/commit/43c6982324602582902c9bdb213fd5e007f9cf3d\"\u003e\u003ccode\u003e43c6982\u003c/code\u003e\u003c/a\u003e\nUpdate dependency org.slf4j:slf4j-jdk14 to v2.0.18 (\u003ca\nhref\u003d\"https://redirect.github.com/junit-team/junit-framework/issues/5667\"\u003e#5667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/junit-team/junit-framework/compare/r5.12.2...r6.1.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "da97828bfe2818e1233ef8c421e89e238fff8340",
      "tree": "9107460693e0f6c250804e753abcdd2cc87a399e",
      "parents": [
        "315fd710cdf2a418e21cb567bedc8d7473e17ec7"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Jun 04 15:43:15 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jun 04 15:43:15 2026 +0200"
      },
      "message": "MINOR: Bump checker.framework.version from 4.1.0 to 4.2.0 (#1170)\n\nBumps `checker.framework.version` from 4.1.0 to 4.2.0.\nUpdates `org.checkerframework:checker-qual` from 4.1.0 to 4.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/releases\"\u003eorg.checkerframework:checker-qual\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eChecker Framework 4.2.0\u003c/h2\u003e\n\u003ch2\u003eVersion 4.2.0 (2026-06-01)\u003c/h2\u003e\n\u003ch3\u003eUser-visible changes\u003c/h3\u003e\n\u003cp\u003eRenamed error message key\n\u0026quot;createsmustcallfor.target.unparseable\u0026quot; to\n\u0026quot;createsmustcallfor.target.unparsable\u0026quot;.\u003c/p\u003e\n\u003ch3\u003eImplementation details\u003c/h3\u003e\n\u003cp\u003eIn \u003ccode\u003eAnnotatedTypeFactory\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enew overload \u003ccode\u003ecanonicalAnnotation(AnnotationMirror,\nTypeMirror)\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eIn \u003ccode\u003eTypeHierarchy\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enew methods \u003ccode\u003eequalsShallowEffective()\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eClosed issues\u003c/h3\u003e\n\u003cp\u003e\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7676\"\u003e#7676\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7679\"\u003e#7679\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7680\"\u003e#7680\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7695\"\u003e#7695\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7697\"\u003e#7697\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7699\"\u003e#7699\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7700\"\u003e#7700\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7727\"\u003e#7727\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md\"\u003eorg.checkerframework:checker-qual\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 4.2.0 (2026-06-01)\u003c/h2\u003e\n\u003ch3\u003eUser-visible changes\u003c/h3\u003e\n\u003cp\u003eRenamed error message key\n\u0026quot;createsmustcallfor.target.unparseable\u0026quot; to\n\u0026quot;createsmustcallfor.target.unparsable\u0026quot;.\u003c/p\u003e\n\u003ch3\u003eImplementation details\u003c/h3\u003e\n\u003cp\u003eIn \u003ccode\u003eAnnotatedTypeFactory\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enew overload \u003ccode\u003ecanonicalAnnotation(AnnotationMirror,\nTypeMirror)\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eIn \u003ccode\u003eTypeHierarchy\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enew methods \u003ccode\u003eequalsShallowEffective()\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eClosed issues\u003c/h3\u003e\n\u003cp\u003e\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7676\"\u003e#7676\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7679\"\u003e#7679\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7680\"\u003e#7680\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7695\"\u003e#7695\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7697\"\u003e#7697\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7699\"\u003e#7699\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7700\"\u003e#7700\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7727\"\u003e#7727\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/231e85507cb0166a94145d2e35b8d3d355c3ced6\"\u003e\u003ccode\u003e231e855\u003c/code\u003e\u003c/a\u003e\nnew release 4.2.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/e59f66f668bfffbadbd3185c103a898ee69fa745\"\u003e\u003ccode\u003ee59f66f\u003c/code\u003e\u003c/a\u003e\nPrep for release.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/bcc021ff1928ddb3e2ca9afa876bb16a6e924396\"\u003e\u003ccode\u003ebcc021f\u003c/code\u003e\u003c/a\u003e\nFix problem with type var in a method reference (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7729\"\u003e#7729\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/91392e5f6a521ee48baa974f39038a3ff309c5e3\"\u003e\u003ccode\u003e91392e5\u003c/code\u003e\u003c/a\u003e\nUse gradle-git-properties version 4\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/cdae25801e483901ce5ebd814ad5286f5e332531\"\u003e\u003ccode\u003ecdae258\u003c/code\u003e\u003c/a\u003e\nIncrease constraint limit (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7752\"\u003e#7752\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/dbb553d23011306ced4a7d49fac82aa2df850e9d\"\u003e\u003ccode\u003edbb553d\u003c/code\u003e\u003c/a\u003e\nFix check of receiver override (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7746\"\u003e#7746\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/264c73dbc2cde531fe88f6546c76727de348d3af\"\u003e\u003ccode\u003e264c73d\u003c/code\u003e\u003c/a\u003e\nFix \u0026quot;unneeded.suppression\u0026quot; warning (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7747\"\u003e#7747\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/d118b89190356b846201f2488b96710dfee11aef\"\u003e\u003ccode\u003ed118b89\u003c/code\u003e\u003c/a\u003e\nNew methods \u003ccode\u003eequalsShallowEffective()\u003c/code\u003e (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7745\"\u003e#7745\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/a916913c161d0cf6078c32e823d724a4c31890ae\"\u003e\u003ccode\u003ea916913\u003c/code\u003e\u003c/a\u003e\nSimplify logic (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7744\"\u003e#7744\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/227974fbf0e546621a53da5f2db0de83fee61c46\"\u003e\u003ccode\u003e227974f\u003c/code\u003e\u003c/a\u003e\nUpdate plugin com-gradleup-shadow to v9.4.2 (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7749\"\u003e#7749\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/compare/checker-framework-4.1.0...checker-framework-4.2.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.checkerframework:checker` from 4.1.0 to 4.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/releases\"\u003eorg.checkerframework:checker\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eChecker Framework 4.2.0\u003c/h2\u003e\n\u003ch2\u003eVersion 4.2.0 (2026-06-01)\u003c/h2\u003e\n\u003ch3\u003eUser-visible changes\u003c/h3\u003e\n\u003cp\u003eRenamed error message key\n\u0026quot;createsmustcallfor.target.unparseable\u0026quot; to\n\u0026quot;createsmustcallfor.target.unparsable\u0026quot;.\u003c/p\u003e\n\u003ch3\u003eImplementation details\u003c/h3\u003e\n\u003cp\u003eIn \u003ccode\u003eAnnotatedTypeFactory\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enew overload \u003ccode\u003ecanonicalAnnotation(AnnotationMirror,\nTypeMirror)\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eIn \u003ccode\u003eTypeHierarchy\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enew methods \u003ccode\u003eequalsShallowEffective()\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eClosed issues\u003c/h3\u003e\n\u003cp\u003e\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7676\"\u003e#7676\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7679\"\u003e#7679\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7680\"\u003e#7680\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7695\"\u003e#7695\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7697\"\u003e#7697\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7699\"\u003e#7699\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7700\"\u003e#7700\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7727\"\u003e#7727\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md\"\u003eorg.checkerframework:checker\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 4.2.0 (2026-06-01)\u003c/h2\u003e\n\u003ch3\u003eUser-visible changes\u003c/h3\u003e\n\u003cp\u003eRenamed error message key\n\u0026quot;createsmustcallfor.target.unparseable\u0026quot; to\n\u0026quot;createsmustcallfor.target.unparsable\u0026quot;.\u003c/p\u003e\n\u003ch3\u003eImplementation details\u003c/h3\u003e\n\u003cp\u003eIn \u003ccode\u003eAnnotatedTypeFactory\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enew overload \u003ccode\u003ecanonicalAnnotation(AnnotationMirror,\nTypeMirror)\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eIn \u003ccode\u003eTypeHierarchy\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enew methods \u003ccode\u003eequalsShallowEffective()\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eClosed issues\u003c/h3\u003e\n\u003cp\u003e\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7676\"\u003e#7676\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7679\"\u003e#7679\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7680\"\u003e#7680\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7695\"\u003e#7695\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7697\"\u003e#7697\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7699\"\u003e#7699\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7700\"\u003e#7700\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7727\"\u003e#7727\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/231e85507cb0166a94145d2e35b8d3d355c3ced6\"\u003e\u003ccode\u003e231e855\u003c/code\u003e\u003c/a\u003e\nnew release 4.2.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/e59f66f668bfffbadbd3185c103a898ee69fa745\"\u003e\u003ccode\u003ee59f66f\u003c/code\u003e\u003c/a\u003e\nPrep for release.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/bcc021ff1928ddb3e2ca9afa876bb16a6e924396\"\u003e\u003ccode\u003ebcc021f\u003c/code\u003e\u003c/a\u003e\nFix problem with type var in a method reference (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7729\"\u003e#7729\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/91392e5f6a521ee48baa974f39038a3ff309c5e3\"\u003e\u003ccode\u003e91392e5\u003c/code\u003e\u003c/a\u003e\nUse gradle-git-properties version 4\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/cdae25801e483901ce5ebd814ad5286f5e332531\"\u003e\u003ccode\u003ecdae258\u003c/code\u003e\u003c/a\u003e\nIncrease constraint limit (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7752\"\u003e#7752\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/dbb553d23011306ced4a7d49fac82aa2df850e9d\"\u003e\u003ccode\u003edbb553d\u003c/code\u003e\u003c/a\u003e\nFix check of receiver override (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7746\"\u003e#7746\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/264c73dbc2cde531fe88f6546c76727de348d3af\"\u003e\u003ccode\u003e264c73d\u003c/code\u003e\u003c/a\u003e\nFix \u0026quot;unneeded.suppression\u0026quot; warning (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7747\"\u003e#7747\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/d118b89190356b846201f2488b96710dfee11aef\"\u003e\u003ccode\u003ed118b89\u003c/code\u003e\u003c/a\u003e\nNew methods \u003ccode\u003eequalsShallowEffective()\u003c/code\u003e (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7745\"\u003e#7745\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/a916913c161d0cf6078c32e823d724a4c31890ae\"\u003e\u003ccode\u003ea916913\u003c/code\u003e\u003c/a\u003e\nSimplify logic (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7744\"\u003e#7744\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/227974fbf0e546621a53da5f2db0de83fee61c46\"\u003e\u003ccode\u003e227974f\u003c/code\u003e\u003c/a\u003e\nUpdate plugin com-gradleup-shadow to v9.4.2 (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7749\"\u003e#7749\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/compare/checker-framework-4.1.0...checker-framework-4.2.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "315fd710cdf2a418e21cb567bedc8d7473e17ec7",
      "tree": "5f60e2f7f019a1404e1421575fa0235e6713aaff",
      "parents": [
        "6a6b8c1c8f3364da125df743c4b00a212d91c449"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu May 28 11:20:28 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu May 28 11:20:28 2026 +0200"
      },
      "message": "MINOR: [CI] Bump docker/login-action from 4.1.0 to 4.2.0 (#1160)\n\nBumps [docker/login-action](https://github.com/docker/login-action) from\n4.1.0 to 4.2.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/docker/login-action/releases\"\u003edocker/login-action\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.2.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump \u003ccode\u003e@​actions/core\u003c/code\u003e from 3.0.0 to 3.0.1 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/976\"\u003edocker/login-action#976\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003e@​aws-sdk/client-ecr\u003c/code\u003e and\n\u003ccode\u003e@​aws-sdk/client-ecr-public\u003c/code\u003e to 3.1050.0 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/960\"\u003edocker/login-action#960\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003e@​docker/actions-toolkit\u003c/code\u003e from 0.86.0 to 0.90.0 in\n\u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/970\"\u003edocker/login-action#970\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump brace-expansion from 2.0.1 to 5.0.6 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/993\"\u003edocker/login-action#993\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump fast-xml-builder from 1.1.4 to 1.2.0 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/985\"\u003edocker/login-action#985\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump fast-xml-parser from 5.3.6 to 5.8.0 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/963\"\u003edocker/login-action#963\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump http-proxy-agent and https-proxy-agent to 9.0.0 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/961\"\u003edocker/login-action#961\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump postcss from 8.5.6 to 8.5.10 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/979\"\u003edocker/login-action#979\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump tar from 6.2.1 to 7.5.15 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/991\"\u003edocker/login-action#991\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump vite from 7.3.1 to 7.3.3 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/986\"\u003edocker/login-action#986\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/docker/login-action/compare/v4.1.0...v4.2.0\"\u003ehttps://github.com/docker/login-action/compare/v4.1.0...v4.2.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/650006c6eb7dba73a995cc03b0b2d7f5ca915bee\"\u003e\u003ccode\u003e650006c\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/issues/960\"\u003e#960\u003c/a\u003e\nfrom docker/dependabot/npm_and_yarn/aws-sdk-dependenc...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/99df1a3f6d65e48177ea57671a50e2242eae4b63\"\u003e\u003ccode\u003e99df1a3\u003c/code\u003e\u003c/a\u003e\nchore: update generated content\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/3ab375f324f46da5f6901efeda4be4e2566ebaa2\"\u003e\u003ccode\u003e3ab375f\u003c/code\u003e\u003c/a\u003e\nbuild(deps): bump the aws-sdk-dependencies group across 1 directory with\n2 up...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/39d85804ae465a1816c68ff58158ec66883981b4\"\u003e\u003ccode\u003e39d8580\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/issues/970\"\u003e#970\u003c/a\u003e\nfrom docker/dependabot/npm_and_yarn/docker/actions-to...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/4eefcd33ca7213989697445a78b6730274bfaba6\"\u003e\u003ccode\u003e4eefcd3\u003c/code\u003e\u003c/a\u003e\nchore: update generated content\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/56d092c8b3f04006c22f4fc20a2b3d2442caed56\"\u003e\u003ccode\u003e56d092c\u003c/code\u003e\u003c/a\u003e\nbuild(deps): bump \u003ccode\u003e@​docker/actions-toolkit\u003c/code\u003e from 0.86.0 to\n0.90.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/e2e31ca87063ae00fd41ad3b9c548dd8ec24c5ff\"\u003e\u003ccode\u003ee2e31ca\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/issues/976\"\u003e#976\u003c/a\u003e\nfrom docker/dependabot/npm_and_yarn/actions/core-3.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/0bced941e843afc786fbfd58b1c6c13ca11e09c9\"\u003e\u003ccode\u003e0bced94\u003c/code\u003e\u003c/a\u003e\nchore: update generated content\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/3e75a0f266b07e09777a621d0ca5f4432ef9f10c\"\u003e\u003ccode\u003e3e75a0f\u003c/code\u003e\u003c/a\u003e\nbuild(deps): bump \u003ccode\u003e@​actions/core\u003c/code\u003e from 3.0.0 to 3.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/365bebd9d646160567ebad47824f026e09ee6970\"\u003e\u003ccode\u003e365bebd\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/issues/984\"\u003e#984\u003c/a\u003e\nfrom docker/dependabot/github_actions/aws-actions/con...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/docker/login-action/compare/4907a6ddec9925e35a0a9e82d7399ccc52663121...650006c6eb7dba73a995cc03b0b2d7f5ca915bee\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003ddocker/login-action\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d4.1.0\u0026new-version\u003d4.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "6a6b8c1c8f3364da125df743c4b00a212d91c449",
      "tree": "80140a318b2a4538cdb02bd67e0d4c111087c832",
      "parents": [
        "96339f6c2f35c3e6676e62fded200c0934f9d8d3"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed May 27 13:15:12 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed May 27 13:15:12 2026 +0200"
      },
      "message": "MINOR: Bump com.gradle:develocity-maven-extension from 2.4.0 to 2.4.1 (#1161)\n\nBumps com.gradle:develocity-maven-extension from 2.4.0 to 2.4.1.\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.gradle:develocity-maven-extension\u0026package-manager\u003dmaven\u0026previous-version\u003d2.4.0\u0026new-version\u003d2.4.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "96339f6c2f35c3e6676e62fded200c0934f9d8d3",
      "tree": "79e8623be8ae5d95557141b42ffa21bb3fc1c789",
      "parents": [
        "7fc14a532492f00e0744d8316fa8fb2f6970d31e"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed May 27 11:22:01 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed May 27 11:22:01 2026 +0200"
      },
      "message": "MINOR: Bump com.nimbusds:oauth2-oidc-sdk from 11.37.1 to 11.37.2 (#1164)\n\nBumps\n[com.nimbusds:oauth2-oidc-sdk](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions)\nfrom 11.37.1 to 11.37.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/src/master/CHANGELOG.txt\"\u003ecom.nimbusds:oauth2-oidc-sdk\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eversion 1.0 (2012-05-29)\n* First official release with authorisation endpoint, token endpoint,\ncheck\nID endpoint and UserInfo endpoint support.\n* JSON Web Tokens (JWTs) support through the Nimbus-JWT library.\n* Language Tags (RFC 5646) support through the Nimbus-LangTag library.\n* JSON support through the JSON Smart library.\u003c/p\u003e\n\u003cp\u003eversion 2.0 (2013-05-13)\n* Intermediary development release with Maven build, published to\nMaven Central.\u003c/p\u003e\n\u003cp\u003eversion 2.1 (2013-06-06)\n* Updates the APIs to OpenID Connect Messages draft 20, OpenID Connect\nStandard draft 21, OpenID Connect Discovery draft 17 and OpenID\nConnect Registration draft 19.\n* Major refactoring of the APIs for greater simplicity.\n* Adds JUnit tests.\u003c/p\u003e\n\u003cp\u003eversion 2.2 (2013-06-18)\n* Refactors dynamic OpenID Connect client registration.\n* Adds partial support of the OAuth 2.0 Dynamic Client Registration\nProtocol (draft-ietf-oauth-dyn-reg-12).\n* Optimises parsing of request parameters consisting of one or more\ntokens (scope, response type, etc).\u003c/p\u003e\n\u003cp\u003eversion 2.3 (2013-06-19)\n* Renames OAuth 2.0 dynamic client registration package.\n* Adds ClientInformation.getClientMetadata() method.\n* Adds OIDCClientInformation class.\u003c/p\u003e\n\u003cp\u003eversion 2.4 (2013-06-20)\n* Adds static OIDCClientInformation.parse(JSONObject) method.\u003c/p\u003e\n\u003cp\u003eversion 2.5 (2013-06-22)\n* Adds support OAuth 2.0 dynamic client update.\n* Adds OpenID Connect dynamic client registration classes.\u003c/p\u003e\n\u003cp\u003eversion 2.6 (2013-06-25)\n* Enforces order of preference of ACR values in OpenID Connect client\nmetadata, as required by the specification.\n* Documentation and performance improvements.\u003c/p\u003e\n\u003cp\u003eversion 2.7 (2013-06-26)\n* Switches Identifier generation to java.security.SecureRandom.\u003c/p\u003e\n\u003cp\u003eversion 2.8 (2013-06-30)\n* Fixes serialisation and assignment bugs in ClientMetadata.\n* Switches Secret generation to java.security.SecureRandom.\u003c/p\u003e\n\u003cp\u003eversion 2.9 (2013-09-17)\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/fedf633e67229b69f5f5ca378a588eca8ce7d117\"\u003e\u003ccode\u003efedf633\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/29b77a0d34b72768194e8e2a53c0f56916bbee86\"\u003e\u003ccode\u003e29b77a0\u003c/code\u003e\u003c/a\u003e\nUpdates to JSON Smart 2.6.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/6e53206950bcbf0c8e5f9ad7b6fe6f3081803f86\"\u003e\u003ccode\u003e6e53206\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release 11.37.2\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/branches/compare/11.37.2..11.37.1\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.nimbusds:oauth2-oidc-sdk\u0026package-manager\u003dmaven\u0026previous-version\u003d11.37.1\u0026new-version\u003d11.37.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "7fc14a532492f00e0744d8316fa8fb2f6970d31e",
      "tree": "ead124e2698023aec80f941ee3feaedf9e39af1b",
      "parents": [
        "b58ce11516afd0aa2959673dac74ca0258ca2166"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed May 27 11:15:13 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed May 27 11:15:13 2026 +0200"
      },
      "message": "MINOR: Bump io.netty:netty-bom from 4.2.13.Final to 4.2.14.Final (#1166)\n\nBumps [io.netty:netty-bom](https://github.com/netty/netty) from\n4.2.13.Final to 4.2.14.Final.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-bom\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.14.Final\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eHTTP: Fix revapi failure introduced by\n84530fa81e12dcd1d42310bb20c1385cb44128d8 by \u003ca\nhref\u003d\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16748\"\u003enetty/netty#16748\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP: Re-add constructor to HttpProxyHandler that was removed by\nmistake by \u003ca\nhref\u003d\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16747\"\u003enetty/netty#16747\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMarshalling: Explicit document security requirements by \u003ca\nhref\u003d\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16752\"\u003enetty/netty#16752\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix io_uring op completion TRACE logging by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16755\"\u003enetty/netty#16755\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Ensure writes are done before notify close promise of\nQuicheQui… by \u003ca\nhref\u003d\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16758\"\u003enetty/netty#16758\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid re-parsing openssl key material with non-cached provider by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16759\"\u003enetty/netty#16759\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePin HTTP/RTSP version + method normalization to Locale.US by \u003ca\nhref\u003d\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16765\"\u003enetty/netty#16765\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFill MsgHdrMemoryArray#hdrs with null entry on release by \u003ca\nhref\u003d\"https://github.com/tsegismont\"\u003e\u003ccode\u003e@​tsegismont\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16764\"\u003enetty/netty#16764\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevapi: Use default \u0026quot;oldVersion\u0026quot; by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16774\"\u003enetty/netty#16774\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptive: Fix concurrency issue in adaptive allocator by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16767\"\u003enetty/netty#16767\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Make bulk byte moving in ByteBuf faster by \u003ca\nhref\u003d\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16781\"\u003enetty/netty#16781\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePin multipart Content-Type / Content-Transfer-Encoding case folding\nto Locale.US by \u003ca\nhref\u003d\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16768\"\u003enetty/netty#16768\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove dead native declarations by \u003ca\nhref\u003d\"https://github.com/pandareen\"\u003e\u003ccode\u003e@​pandareen\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16783\"\u003enetty/netty#16783\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIsolate tests that modify available Security providers by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16793\"\u003enetty/netty#16793\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove test annotations from a method that isn\u0027t a test by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16792\"\u003enetty/netty#16792\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnable OpenSslCachingKeyMaterialProvider to evict stale entries\nafter cert rotation by \u003ca\nhref\u003d\"https://github.com/zhangweikop\"\u003e\u003ccode\u003e@​zhangweikop\u003c/code\u003e\u003c/a\u003e in\n\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16523\"\u003enetty/netty#16523\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIoUring: extend user data from short to long by \u003ca\nhref\u003d\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16682\"\u003enetty/netty#16682\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert CompositeByteBuf component search fast path by \u003ca\nhref\u003d\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16811\"\u003enetty/netty#16811\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Use 100 as default max concurrent streams setting by \u003ca\nhref\u003d\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16804\"\u003enetty/netty#16804\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix ResumptionController wrapping by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16815\"\u003enetty/netty#16815\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolve all localhost addresses without querying DNS servers by \u003ca\nhref\u003d\"https://github.com/JulianVennen\"\u003e\u003ccode\u003e@​JulianVennen\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16749\"\u003enetty/netty#16749\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIpFilter: Fix ClassCastException caused by IpSubnetFilter if only\nipv6 rules are configured but remote peer is using ipv4 by \u003ca\nhref\u003d\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16803\"\u003enetty/netty#16803\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix memoryAddress() for direct ByteBuffers wrapped by Unpooled\nwithout Unsafe by \u003ca\nhref\u003d\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16788\"\u003enetty/netty#16788\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRoute synchronous onLookupComplete exceptions via\nfireExceptionCaught by \u003ca\nhref\u003d\"https://github.com/kwondh5217\"\u003e\u003ccode\u003e@​kwondh5217\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16794\"\u003enetty/netty#16794\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIoUring: Stop generic FileRegion drain loop when transferred()\nreaches count() by \u003ca\nhref\u003d\"https://github.com/LuciferYang\"\u003e\u003ccode\u003e@​LuciferYang\u003c/code\u003e\u003c/a\u003e in\n\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16826\"\u003enetty/netty#16826\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMQTT: Allow MQTT 5 CONNECT with password only by \u003ca\nhref\u003d\"https://github.com/shblue21\"\u003e\u003ccode\u003e@​shblue21\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16833\"\u003enetty/netty#16833\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix MQTT decoder size check after variable header replay by \u003ca\nhref\u003d\"https://github.com/daguimu\"\u003e\u003ccode\u003e@​daguimu\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16787\"\u003enetty/netty#16787\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/pandareen\"\u003e\u003ccode\u003e@​pandareen\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16783\"\u003enetty/netty#16783\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/zhangweikop\"\u003e\u003ccode\u003e@​zhangweikop\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16523\"\u003enetty/netty#16523\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/JulianVennen\"\u003e\u003ccode\u003e@​JulianVennen\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16749\"\u003enetty/netty#16749\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/kwondh5217\"\u003e\u003ccode\u003e@​kwondh5217\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16794\"\u003enetty/netty#16794\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/shblue21\"\u003e\u003ccode\u003e@​shblue21\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16833\"\u003enetty/netty#16833\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/netty/netty/compare/netty-4.2.13.Final...netty-4.2.14.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.13.Final...netty-4.2.14.Final\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/0a60b753d5b0de9f58e245538d61c11dc6cfc4b2\"\u003e\u003ccode\u003e0a60b75\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release netty-4.2.14.Final\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/72df658e5fdd1cc6d65bce1e0917ec31a9560269\"\u003e\u003ccode\u003e72df658\u003c/code\u003e\u003c/a\u003e\nFix MQTT decoder size check after variable header replay (\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/issues/16787\"\u003e#16787\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/7125dba6b20822aa72dd8359b350c2f3b9a545d9\"\u003e\u003ccode\u003e7125dba\u003c/code\u003e\u003c/a\u003e\nMQTT: Allow MQTT 5 CONNECT with password only (\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/issues/16833\"\u003e#16833\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/9e19320a5855746970d05a5cd785d73a17cc694d\"\u003e\u003ccode\u003e9e19320\u003c/code\u003e\u003c/a\u003e\nIoUring: Stop generic FileRegion drain loop when transferred() reaches\ncount(...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/4ce9f17f05c67b72c87bc83951800bad245fe162\"\u003e\u003ccode\u003e4ce9f17\u003c/code\u003e\u003c/a\u003e\nRoute synchronous onLookupComplete exceptions via fireExceptionCaught\n(\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/issues/16794\"\u003e#16794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/f7b1b7de625031cc60e6eaecb889c97303588759\"\u003e\u003ccode\u003ef7b1b7d\u003c/code\u003e\u003c/a\u003e\nFix memoryAddress() for direct ByteBuffers wrapped by Unpooled without\nUnsafe...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/0ccb265cadf91b2e09c2f479c9194d193d7a5dbc\"\u003e\u003ccode\u003e0ccb265\u003c/code\u003e\u003c/a\u003e\nIpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6\nrules ...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/a6aeb6deffda3e45904edd05abc5cdddcd438794\"\u003e\u003ccode\u003ea6aeb6d\u003c/code\u003e\u003c/a\u003e\nResolve all localhost addresses without querying DNS servers (\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/issues/16749\"\u003e#16749\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/c328ba2ab89d2c90c80be1d2de1cfbb8f94c438b\"\u003e\u003ccode\u003ec328ba2\u003c/code\u003e\u003c/a\u003e\nFix ResumptionController wrapping (\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/issues/16815\"\u003e#16815\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/bc5862ba488c569c888d3b82048083041f66e880\"\u003e\u003ccode\u003ebc5862b\u003c/code\u003e\u003c/a\u003e\nHTTP2: Use 100 as default max concurrent streams setting (\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/issues/16804\"\u003e#16804\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/netty/netty/compare/netty-4.2.13.Final...netty-4.2.14.Final\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dio.netty:netty-bom\u0026package-manager\u003dmaven\u0026previous-version\u003d4.2.13.Final\u0026new-version\u003d4.2.14.Final)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "b58ce11516afd0aa2959673dac74ca0258ca2166",
      "tree": "d2e22d42dfa902d212cfab250b5835be5afaf759",
      "parents": [
        "755ce550c4dfc1771c2b350a0159b5e7f903debb"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed May 27 10:54:46 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed May 27 10:54:46 2026 +0200"
      },
      "message": "MINOR: Bump com.google.protobuf:protobuf-bom from 4.34.1 to 4.35.0 (#1167)\n\nBumps\n[com.google.protobuf:protobuf-bom](https://github.com/protocolbuffers/protobuf)\nfrom 4.34.1 to 4.35.0.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/protocolbuffers/protobuf/commits\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.google.protobuf:protobuf-bom\u0026package-manager\u003dmaven\u0026previous-version\u003d4.34.1\u0026new-version\u003d4.35.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "755ce550c4dfc1771c2b350a0159b5e7f903debb",
      "tree": "83ee02976965b2a0771b018f7deccacb45d696b5",
      "parents": [
        "4ecc92f817fc71fcf94e0df87d2c6c1bc9877847"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed May 27 10:32:04 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed May 27 10:32:04 2026 +0200"
      },
      "message": "MINOR: Bump org.immutables:value from 2.12.1 to 2.12.2 (#1168)\n\nBumps [org.immutables:value](https://github.com/immutables/immutables)\nfrom 2.12.1 to 2.12.2.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/immutables/immutables/releases\"\u003eorg.immutables:value\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.12.2\u003c/h2\u003e\n\u003ch2\u003eMaintenance release\u003c/h2\u003e\n\u003ch3\u003eWhat\u0027s Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/issues/1642\"\u003e#1642\u003c/a\u003e\nFix to find nested elements on plain element with nested elements with\nmongo backend by \u003ca\nhref\u003d\"https://github.com/rgatbert\"\u003e\u003ccode\u003e@​rgatbert\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/pull/1643\"\u003eimmutables/immutables#1643\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/issues/1642\"\u003e#1642\u003c/a\u003e\nFix for further problems to find nested elements on plain element with\nnested elements with mongo backend by \u003ca\nhref\u003d\"https://github.com/rgatbert\"\u003e\u003ccode\u003e@​rgatbert\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/pull/1644\"\u003eimmutables/immutables#1644\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/issues/1645\"\u003e#1645\u003c/a\u003e\nenhance docs about records for implementationNestedInBuilder by \u003ca\nhref\u003d\"https://github.com/bmarwell\"\u003e\u003ccode\u003e@​bmarwell\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/pull/1646\"\u003eimmutables/immutables#1646\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/issues/1655\"\u003e#1655\u003c/a\u003e\nFix TYPE_USE \u003ccode\u003e@Nullable\u003c/code\u003e on concrete array types by \u003ca\nhref\u003d\"https://github.com/viditochani\"\u003e\u003ccode\u003e@​viditochani\u003c/code\u003e\u003c/a\u003e in\n\u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/pull/1658\"\u003eimmutables/immutables#1658\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNew Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/rgatbert\"\u003e\u003ccode\u003e@​rgatbert\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/pull/1643\"\u003eimmutables/immutables#1643\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/bmarwell\"\u003e\u003ccode\u003e@​bmarwell\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/pull/1646\"\u003eimmutables/immutables#1646\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/viditochani\"\u003e\u003ccode\u003e@​viditochani\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/pull/1658\"\u003eimmutables/immutables#1658\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/immutables/immutables/compare/2.12.1...2.12.2\"\u003ehttps://github.com/immutables/immutables/compare/2.12.1...2.12.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/immutables/immutables/commit/6f1918f2ed84bf110fcb9f3dcd5fcf630bcad6d7\"\u003e\u003ccode\u003e6f1918f\u003c/code\u003e\u003c/a\u003e\nv2.12.2\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/immutables/immutables/commit/71d350b769c0b391c38b3fe35564ced71caff065\"\u003e\u003ccode\u003e71d350b\u003c/code\u003e\u003c/a\u003e\nnode24 v5 github actions\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/immutables/immutables/commit/bb26b408e435b7c7c39ce72c945b5e5b2b34e9b6\"\u003e\u003ccode\u003ebb26b40\u003c/code\u003e\u003c/a\u003e\n\u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/issues/1655\"\u003e#1655\u003c/a\u003e\nadditional ECJ workaround\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/immutables/immutables/commit/da6acc841b58abdbf8ad76f96aefa94f17f6fa15\"\u003e\u003ccode\u003eda6acc8\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/issues/1658\"\u003e#1658\u003c/a\u003e\nfrom viditochani/fix-concrete-array-nullable\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/immutables/immutables/commit/ccd68963ab2a234b7b7f60006938cd4d727b89b5\"\u003e\u003ccode\u003eccd6896\u003c/code\u003e\u003c/a\u003e\n\u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/issues/1655\"\u003e#1655\u003c/a\u003e\nFix TYPE_USE \u003ca\nhref\u003d\"https://github.com/Nullable\"\u003e\u003ccode\u003e@​Nullable\u003c/code\u003e\u003c/a\u003e on\nconcrete array types\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/immutables/immutables/commit/78f43d47541af1f535a6ed48578651a609481c87\"\u003e\u003ccode\u003e78f43d4\u003c/code\u003e\u003c/a\u003e\n\u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/issues/1649\"\u003e#1649\u003c/a\u003e\nJackson3 meta-annotated package\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/immutables/immutables/commit/f3fe649b15d96500f8d1c93ad02cace88747cf13\"\u003e\u003ccode\u003ef3fe649\u003c/code\u003e\u003c/a\u003e\n\u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/issues/1640\"\u003e#1640\u003c/a\u003e\nWhere.WITH_COPY for copy methods\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/immutables/immutables/commit/83cdfdb423100ed823f965130cd9153aa3a56b2a\"\u003e\u003ccode\u003e83cdfdb\u003c/code\u003e\u003c/a\u003e\nChange JUnit5 dependency to use BOM\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/immutables/immutables/commit/cf04f2c106e35edf1a313900a61c80e7f0913637\"\u003e\u003ccode\u003ecf04f2c\u003c/code\u003e\u003c/a\u003e\nUpgrade jackson3: 3.0.1 -\u0026gt; 3.1.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/immutables/immutables/commit/31308e78e1cd39eba120b7e615723de24b3c1507\"\u003e\u003ccode\u003e31308e7\u003c/code\u003e\u003c/a\u003e\nUpgrade jackson: 2.19.2 -\u0026gt; 2.21.2\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/immutables/immutables/compare/2.12.1...2.12.2\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dorg.immutables:value\u0026package-manager\u003dmaven\u0026previous-version\u003d2.12.1\u0026new-version\u003d2.12.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "4ecc92f817fc71fcf94e0df87d2c6c1bc9877847",
      "tree": "0163a8a1d8a2de0461c0277f34c30038a5e8aad5",
      "parents": [
        "ef359de2cf33f3020eb7c41cd4a5eee564b99bf6"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed May 20 11:32:03 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed May 20 11:32:03 2026 +0200"
      },
      "message": "MINOR: Bump org.apache.parquet:parquet-variant from 1.17.0 to 1.17.1 (#1150)\n\nBumps\n[org.apache.parquet:parquet-variant](https://github.com/apache/parquet-mr)\nfrom 1.17.0 to 1.17.1.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/apache/parquet-mr/releases\"\u003eorg.apache.parquet:parquet-variant\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eApache Parquet Java 1.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix reading of proto Uint32Value by \u003ca\nhref\u003d\"https://github.com/0x26res\"\u003e\u003ccode\u003e@​0x26res\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-java/pull/3113\"\u003eapache/parquet-java#3113\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump jackson dependencies from 2.19.2 to 2.21.2 by \u003ca\nhref\u003d\"https://github.com/manuzhang\"\u003e\u003ccode\u003e@​manuzhang\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-java/pull/3460\"\u003eapache/parquet-java#3460\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump jackson.version from 2.21.2 to 2.21.3 by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-java/pull/3538\"\u003eapache/parquet-java#3538\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/apache/parquet-java/compare/apache-parquet-1.17.0...apache-parquet-1.17.1\"\u003ehttps://github.com/apache/parquet-java/compare/apache-parquet-1.17.0...apache-parquet-1.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eApache Parquet Java 1.17.1 RC0\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix reading of proto Uint32Value by \u003ca\nhref\u003d\"https://github.com/0x26res\"\u003e\u003ccode\u003e@​0x26res\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-java/pull/3113\"\u003eapache/parquet-java#3113\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump jackson dependencies from 2.19.2 to 2.21.2 by \u003ca\nhref\u003d\"https://github.com/manuzhang\"\u003e\u003ccode\u003e@​manuzhang\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-java/pull/3460\"\u003eapache/parquet-java#3460\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump jackson.version from 2.21.2 to 2.21.3 by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-java/pull/3538\"\u003eapache/parquet-java#3538\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/apache/parquet-java/compare/apache-parquet-1.17.0...apache-parquet-1.17.1-rc0\"\u003ehttps://github.com/apache/parquet-java/compare/apache-parquet-1.17.0...apache-parquet-1.17.1-rc0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/parquet-java/commit/78a8d3230eb4769db93de5f2f2e18363c04cae81\"\u003e\u003ccode\u003e78a8d32\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release apache-parquet-1.17.1-rc0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/parquet-java/commit/b4351b2bbb08b30a1e5dafed0b7d995179c8208f\"\u003e\u003ccode\u003eb4351b2\u003c/code\u003e\u003c/a\u003e\nBump version to 1.17.1-SNAPSHOT (\u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-mr/issues/3544\"\u003e#3544\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/parquet-java/commit/aa65eb460b204622f20848787b329d395b727756\"\u003e\u003ccode\u003eaa65eb4\u003c/code\u003e\u003c/a\u003e\nBump jackson.version from 2.21.2 to 2.21.3 (\u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-mr/issues/3538\"\u003e#3538\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/parquet-java/commit/ef00c4634233c714b3fd8d82a09a6c7e58c4e8a3\"\u003e\u003ccode\u003eef00c46\u003c/code\u003e\u003c/a\u003e\n\u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-mr/issues/3112\"\u003eGH-3112\u003c/a\u003e:\nFix reading of proto Uint32Value (\u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-mr/issues/3113\"\u003e#3113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/parquet-java/commit/0f91a199853bfcb48aff9af919ae4967f305ef7e\"\u003e\u003ccode\u003e0f91a19\u003c/code\u003e\u003c/a\u003e\n\u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-mr/issues/3410\"\u003eGH-3410\u003c/a\u003e:\nBump jackson dependencies from 2.19.2 to 2.21.2 (\u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-mr/issues/3460\"\u003e#3460\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/apache/parquet-mr/compare/apache-parquet-1.17.0...apache-parquet-1.17.1\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dorg.apache.parquet:parquet-variant\u0026package-manager\u003dmaven\u0026previous-version\u003d1.17.0\u0026new-version\u003d1.17.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "ef359de2cf33f3020eb7c41cd4a5eee564b99bf6",
      "tree": "b93e8ac822eeafe70a0d95b4146b6d8f2b037a17",
      "parents": [
        "4899492a26f941d955f5567797aa697262e747dd"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed May 20 08:27:25 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed May 20 08:27:25 2026 +0200"
      },
      "message": "MINOR: Bump dep.slf4j.version from 2.0.17 to 2.0.18 (#1151)\n\nBumps `dep.slf4j.version` from 2.0.17 to 2.0.18.\nUpdates `org.slf4j:slf4j-api` from 2.0.17 to 2.0.18\n\nUpdates `org.slf4j:slf4j-jdk14` from 2.0.17 to 2.0.18\n\nUpdates `org.slf4j:jul-to-slf4j` from 2.0.17 to 2.0.18\n\nUpdates `org.slf4j:jcl-over-slf4j` from 2.0.17 to 2.0.18\n\nUpdates `org.slf4j:log4j-over-slf4j` from 2.0.17 to 2.0.18\n\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "4899492a26f941d955f5567797aa697262e747dd",
      "tree": "9b5974f20a7cc2e9887e137bb91d8bdb862e03fe",
      "parents": [
        "28367478a6ae695e409368b6f68b9ea22730fd9c"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue May 19 15:48:10 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue May 19 15:48:10 2026 +0200"
      },
      "message": "MINOR: Bump parquet.version from 1.17.0 to 1.17.1 (#1152)\n\nBumps `parquet.version` from 1.17.0 to 1.17.1.\nUpdates `org.apache.parquet:parquet-avro` from 1.17.0 to 1.17.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/apache/parquet-mr/releases\"\u003eorg.apache.parquet:parquet-avro\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eApache Parquet Java 1.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix reading of proto Uint32Value by \u003ca\nhref\u003d\"https://github.com/0x26res\"\u003e\u003ccode\u003e@​0x26res\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-java/pull/3113\"\u003eapache/parquet-java#3113\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump jackson dependencies from 2.19.2 to 2.21.2 by \u003ca\nhref\u003d\"https://github.com/manuzhang\"\u003e\u003ccode\u003e@​manuzhang\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-java/pull/3460\"\u003eapache/parquet-java#3460\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump jackson.version from 2.21.2 to 2.21.3 by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-java/pull/3538\"\u003eapache/parquet-java#3538\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/apache/parquet-java/compare/apache-parquet-1.17.0...apache-parquet-1.17.1\"\u003ehttps://github.com/apache/parquet-java/compare/apache-parquet-1.17.0...apache-parquet-1.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eApache Parquet Java 1.17.1 RC0\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix reading of proto Uint32Value by \u003ca\nhref\u003d\"https://github.com/0x26res\"\u003e\u003ccode\u003e@​0x26res\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-java/pull/3113\"\u003eapache/parquet-java#3113\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump jackson dependencies from 2.19.2 to 2.21.2 by \u003ca\nhref\u003d\"https://github.com/manuzhang\"\u003e\u003ccode\u003e@​manuzhang\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-java/pull/3460\"\u003eapache/parquet-java#3460\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump jackson.version from 2.21.2 to 2.21.3 by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-java/pull/3538\"\u003eapache/parquet-java#3538\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/apache/parquet-java/compare/apache-parquet-1.17.0...apache-parquet-1.17.1-rc0\"\u003ehttps://github.com/apache/parquet-java/compare/apache-parquet-1.17.0...apache-parquet-1.17.1-rc0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/parquet-java/commit/78a8d3230eb4769db93de5f2f2e18363c04cae81\"\u003e\u003ccode\u003e78a8d32\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release apache-parquet-1.17.1-rc0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/parquet-java/commit/b4351b2bbb08b30a1e5dafed0b7d995179c8208f\"\u003e\u003ccode\u003eb4351b2\u003c/code\u003e\u003c/a\u003e\nBump version to 1.17.1-SNAPSHOT (\u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-mr/issues/3544\"\u003e#3544\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/parquet-java/commit/aa65eb460b204622f20848787b329d395b727756\"\u003e\u003ccode\u003eaa65eb4\u003c/code\u003e\u003c/a\u003e\nBump jackson.version from 2.21.2 to 2.21.3 (\u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-mr/issues/3538\"\u003e#3538\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/parquet-java/commit/ef00c4634233c714b3fd8d82a09a6c7e58c4e8a3\"\u003e\u003ccode\u003eef00c46\u003c/code\u003e\u003c/a\u003e\n\u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-mr/issues/3112\"\u003eGH-3112\u003c/a\u003e:\nFix reading of proto Uint32Value (\u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-mr/issues/3113\"\u003e#3113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/parquet-java/commit/0f91a199853bfcb48aff9af919ae4967f305ef7e\"\u003e\u003ccode\u003e0f91a19\u003c/code\u003e\u003c/a\u003e\n\u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-mr/issues/3410\"\u003eGH-3410\u003c/a\u003e:\nBump jackson dependencies from 2.19.2 to 2.21.2 (\u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-mr/issues/3460\"\u003e#3460\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/apache/parquet-mr/compare/apache-parquet-1.17.0...apache-parquet-1.17.1\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.apache.parquet:parquet-hadoop` from 1.17.0 to 1.17.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/apache/parquet-mr/releases\"\u003eorg.apache.parquet:parquet-hadoop\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eApache Parquet Java 1.17.1\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix reading of proto Uint32Value by \u003ca\nhref\u003d\"https://github.com/0x26res\"\u003e\u003ccode\u003e@​0x26res\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-java/pull/3113\"\u003eapache/parquet-java#3113\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump jackson dependencies from 2.19.2 to 2.21.2 by \u003ca\nhref\u003d\"https://github.com/manuzhang\"\u003e\u003ccode\u003e@​manuzhang\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-java/pull/3460\"\u003eapache/parquet-java#3460\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump jackson.version from 2.21.2 to 2.21.3 by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-java/pull/3538\"\u003eapache/parquet-java#3538\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/apache/parquet-java/compare/apache-parquet-1.17.0...apache-parquet-1.17.1\"\u003ehttps://github.com/apache/parquet-java/compare/apache-parquet-1.17.0...apache-parquet-1.17.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eApache Parquet Java 1.17.1 RC0\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix reading of proto Uint32Value by \u003ca\nhref\u003d\"https://github.com/0x26res\"\u003e\u003ccode\u003e@​0x26res\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-java/pull/3113\"\u003eapache/parquet-java#3113\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump jackson dependencies from 2.19.2 to 2.21.2 by \u003ca\nhref\u003d\"https://github.com/manuzhang\"\u003e\u003ccode\u003e@​manuzhang\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-java/pull/3460\"\u003eapache/parquet-java#3460\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump jackson.version from 2.21.2 to 2.21.3 by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-java/pull/3538\"\u003eapache/parquet-java#3538\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/apache/parquet-java/compare/apache-parquet-1.17.0...apache-parquet-1.17.1-rc0\"\u003ehttps://github.com/apache/parquet-java/compare/apache-parquet-1.17.0...apache-parquet-1.17.1-rc0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/parquet-java/commit/78a8d3230eb4769db93de5f2f2e18363c04cae81\"\u003e\u003ccode\u003e78a8d32\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release apache-parquet-1.17.1-rc0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/parquet-java/commit/b4351b2bbb08b30a1e5dafed0b7d995179c8208f\"\u003e\u003ccode\u003eb4351b2\u003c/code\u003e\u003c/a\u003e\nBump version to 1.17.1-SNAPSHOT (\u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-mr/issues/3544\"\u003e#3544\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/parquet-java/commit/aa65eb460b204622f20848787b329d395b727756\"\u003e\u003ccode\u003eaa65eb4\u003c/code\u003e\u003c/a\u003e\nBump jackson.version from 2.21.2 to 2.21.3 (\u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-mr/issues/3538\"\u003e#3538\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/parquet-java/commit/ef00c4634233c714b3fd8d82a09a6c7e58c4e8a3\"\u003e\u003ccode\u003eef00c46\u003c/code\u003e\u003c/a\u003e\n\u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-mr/issues/3112\"\u003eGH-3112\u003c/a\u003e:\nFix reading of proto Uint32Value (\u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-mr/issues/3113\"\u003e#3113\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/parquet-java/commit/0f91a199853bfcb48aff9af919ae4967f305ef7e\"\u003e\u003ccode\u003e0f91a19\u003c/code\u003e\u003c/a\u003e\n\u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-mr/issues/3410\"\u003eGH-3410\u003c/a\u003e:\nBump jackson dependencies from 2.19.2 to 2.21.2 (\u003ca\nhref\u003d\"https://redirect.github.com/apache/parquet-mr/issues/3460\"\u003e#3460\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/apache/parquet-mr/compare/apache-parquet-1.17.0...apache-parquet-1.17.1\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "28367478a6ae695e409368b6f68b9ea22730fd9c",
      "tree": "28642c546706c64bcad3ea177c9d3fa18b479235",
      "parents": [
        "d88adb33b00e8a7c3b743312b11c05ed36d2bd37"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue May 19 15:47:49 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue May 19 15:47:49 2026 +0200"
      },
      "message": "MINOR: Bump io.grpc:grpc-bom from 1.80.0 to 1.81.0 (#1154)\n\nBumps [io.grpc:grpc-bom](https://github.com/grpc/grpc-java) from 1.80.0\nto 1.81.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/releases\"\u003eio.grpc:grpc-bom\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eV1.81.0\u003c/h2\u003e\n\u003cp\u003eIn this release we drop support for Android API level 22 or lower\n(Lollipop or earlier), following Google Play Service’s \u003ca\nhref\u003d\"https://developers.google.com/android/guides/setup\"\u003ediscontinued\nupdates for Lollipop (API levels 21 \u0026amp; 22)\u003c/a\u003e and now requires a\nminimum of API level 23 (Android 6.0 Marshmallow).\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eAPI Changes\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eapi: Deprecate LoadBalancer.handleResolvedAddresses(). Developers\nmaintaining custom LoadBalancer implementations should transition to\nusing LoadBalancer.acceptResolvedAddresses(). Unlike the deprecated\nmethod, acceptResolvedAddresses() returns a Status object, allowing the\nload balancer to explicitly report success or reject the update if the\nprovided addresses or configuration are invalid. (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/11623\"\u003e#11623\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eBehavior Changes\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ecore: Enable dns \u0026quot;caching\u0026quot; on Android for 30 seconds to\nreduce CPU impact of a refresh loop with an LB policy (0675f70af).\nDnsNameResolver ignores re-resolution requests on OpenJDK-like platforms\nif it has been too soon since the last DNS query because\nInetAddress.getAllByName() has a cache with a fixed entry lifetime, but\nthis logic was disabled for Android which does not have that style of\ncache. Android’s cache uses the result TTL, which will rarely be less\nthan 30 seconds. This change would probably be most noticeable when 1)\nchanging to a different network (e.g., from wifi to mobile), 2) the\nserver has different addresses for different networks, and 3) the app is\nnot using AndroidChannelBuilder with an\n\u003ccode\u003eandroid.context.Context\u003c/code\u003e. For reference, it seems Chrome\ncaches for 1 minute\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eBug Fixes\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eopentelemetry: Fix baggage propagation, the baggage propagation for\nopentelemetry introduced in \u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/pull/12389\"\u003e#12389\u003c/a\u003e\nwas broken. The context is decided once and used for all recording for\nthe call, thus guaranteeing all record()s have consistent\ninformation.\u003c/li\u003e\n\u003cli\u003ecore: Address a race condition where\n\u003ccode\u003eManagedChannelOrphanWrapper\u003c/code\u003e could incorrectly log a\n\u0026quot;not shutdown properly\u0026quot; warning during garbage collection when\nusing directExecutor(). (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12705\"\u003e#12705\u003c/a\u003e)\n(d459338d9)\u003c/li\u003e\n\u003cli\u003exds: Fix xDS HTTP CONNECT\u0027s transport socket name bug which is now\ncorrected to use \u003ccode\u003etypeUrl\u003c/code\u003e. (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12740\"\u003e#12740\u003c/a\u003e)\n(eac9fe961)\u003c/li\u003e\n\u003cli\u003exds: Fix an issue where subchannel metrics were dropping their\nassociation with the \u003ccode\u003ebackend_service\u003c/code\u003e. This ensures xDS load\nbalancing metrics are reported accurately. (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12735\"\u003e#12735\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eNew Features\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enetty: Add tcp metrics, by implementing a few of the metrics defined\nin \u003ca\nhref\u003d\"https://redirect.github.com/grpc/proposal/pull/519\"\u003eA80\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eapi: Add a CallOption for a custom label on per-RPC metrics\n(0e39b2967). This CallOption is copied by grpc-opentelemetry to the\n\u003ccode\u003egrpc.client.call.custom\u003c/code\u003e label as defined by \u003ca\nhref\u003d\"https://github.com/grpc/proposal/blob/master/A108-otel-custom-per-call-label.md\"\u003egRFC\nA108\u003c/a\u003e. See also the \u003ca\nhref\u003d\"https://grpc.io/docs/guides/opentelemetry-metrics/\"\u003egRPC\nOpenTelemetry Metrics guide\u003c/a\u003e (update \u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc.io/pull/1505\"\u003ein-progress\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003exds: Add support for Weighted Round Robin (WRR) load balancing\ndriven by custom backend metrics, implementing the behavior defined in\ngRFC A114. (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12645\"\u003e#12645\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eutils: Update \u003ccode\u003eAdvancedTlsX509KeyManager\u003c/code\u003e so that\ndevelopers can now preserve and use key aliases when dynamically\nreloading TLS certificates. (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12686\"\u003e#12686\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eDocumentation\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate the \u0026quot;Outgoing Flow Control\u0026quot; section in the Manual\nFlow Control example to say onNext() does not block, but rather queues\nthe messages in memory and advises developers to use\nCallStreamObserver.isReady() to prevent this memory exhaustion (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12700\"\u003e#12700\u003c/a\u003e)\n(a3a9ffcbe) (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12726\"\u003e#12726\u003c/a\u003e)\n(65ae2efda)\u003c/li\u003e\n\u003cli\u003eexamples: Clean up Health example, and document need for\ngrpc-services (3ed732fc0)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eDependencies\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Dependencies (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12719\"\u003e#12719\u003c/a\u003e)\n(16e17abba). Google-auth-library: 1.42.1, animal-sniffer: 1.27,\nassertj-core:3.27.7, error_prone_annotations:2.48.0,\nproto-google-common-protos:2.64.1, google-cloud-logging:3.23.10,\njetty-http2-server:12.1.7, jetty-ee10-servlet:12.1.7, lincheck:3.4,\nopentelemetry-api:1.60.1,\nopentelemetry-exporter-prometheus:1.60.1-alpha,\nopentelemetry-gcp-resources:1.54.0-alpha,\nopentelemetry-sdk-extension-autoconfigure:1.60.1,\nopentelemetry-sdk-testing:1.60.1, robolectric:4.16.1,\ntomcat-embed-core:10.1.52, tomcat-embed-core9: 9.0.115,\u003c/li\u003e\n\u003cli\u003eUpgrade Netty to 4.1.132 and netty-tcnative to 2.0.75\n(1528f809c)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eThanks to\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/becomeStar\"\u003e\u003ccode\u003e@​becomeStar\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/benjaminp\"\u003e\u003ccode\u003e@​benjaminp\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/JoeCqupt\"\u003e\u003ccode\u003e@​JoeCqupt\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/Kainsin\"\u003e\u003ccode\u003e@​Kainsin\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/merlimat\"\u003e\u003ccode\u003e@​merlimat\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/SreeramdasLavanya\"\u003e\u003ccode\u003e@​SreeramdasLavanya\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/themechbro\"\u003e\u003ccode\u003e@​themechbro\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/zhangweikop\"\u003e\u003ccode\u003e@​zhangweikop\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/6951542f66c59f63cbf5348b38a2306a3964adda\"\u003e\u003ccode\u003e6951542\u003c/code\u003e\u003c/a\u003e\nBump version to 1.81.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/e94188e81298c36ac9654dc76025940171abc0a4\"\u003e\u003ccode\u003ee94188e\u003c/code\u003e\u003c/a\u003e\nUpdate README etc to reference 1.81.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/4813c6d06089d49a479f7f1786297dc3d8c0e549\"\u003e\u003ccode\u003e4813c6d\u003c/code\u003e\u003c/a\u003e\ncore,xds: Fix backend_service plumbing for subchannel metrics (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12735\"\u003e#12735\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/6737eb583a273dd13bf9e7b82cc1d9df75e551bd\"\u003e\u003ccode\u003e6737eb5\u003c/code\u003e\u003c/a\u003e\nRevert \u0026quot;Replace javax ThreadSafe annotation with errorprone\nThreadSafe (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/1274\"\u003e#1274\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/ef3531325ba98fa043f6f7f16fa0715e9296d7a3\"\u003e\u003ccode\u003eef35313\u003c/code\u003e\u003c/a\u003e\nReplace javax ThreadSafe annotation with errorprone ThreadSafe (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12742\"\u003e#12742\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/3ed732fc09c41b185cd03fdd6864c4ebb82f3a80\"\u003e\u003ccode\u003e3ed732f\u003c/code\u003e\u003c/a\u003e\nexamples: Clean up Health, and document need for grpc-services\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/eac9fe9612881d54d51ddc5496599ba9a8201021\"\u003e\u003ccode\u003eeac9fe9\u003c/code\u003e\u003c/a\u003e\nxds: fix xDS HTTP CONNECT\u0027s transport socket name bug (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12740\"\u003e#12740\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/1528f809c9e506cf2e7052e3f41fd8b75636d3d3\"\u003e\u003ccode\u003e1528f80\u003c/code\u003e\u003c/a\u003e\nUpgrade Netty to 4.1.132 and netty-tcnative to 2.0.75\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/d057a7ebee2945fc0a9ca58b36afdb5b37a99680\"\u003e\u003ccode\u003ed057a7e\u003c/code\u003e\u003c/a\u003e\n[xds] Implement A114: WRR support for custom backend metrics (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12645\"\u003e#12645\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/842636f88452c30769a5561f7659db6e4f9fc2a0\"\u003e\u003ccode\u003e842636f\u003c/code\u003e\u003c/a\u003e\nxds: Add configuration objects for ExtAuthz, GrpcService and Bootstrap\nchange...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/compare/v1.80.0...v1.81.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dio.grpc:grpc-bom\u0026package-manager\u003dmaven\u0026previous-version\u003d1.80.0\u0026new-version\u003d1.81.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: JB Onofré \u003cjbonofre@apache.org\u003e"
    },
    {
      "commit": "d88adb33b00e8a7c3b743312b11c05ed36d2bd37",
      "tree": "d30c40d2aef5c85f6dae9fc8a6503e21d9b19946",
      "parents": [
        "c49d97625524a9ba3cb72380f88a2ee12f435695"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon May 18 18:42:53 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon May 18 18:42:53 2026 +0200"
      },
      "message": "MINOR: Bump io.netty:netty-bom from 4.2.12.Final to 4.2.13.Final (#1155)\n\nBumps [io.netty:netty-bom](https://github.com/netty/netty) from\n4.2.12.Final to 4.2.13.Final.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-bom\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.13.Final\u003c/h2\u003e\n\u003ch2\u003eCVEs Fixed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7\"\u003eCVE-2026-42586\u003c/a\u003e\n(netty-codec-redis)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr\"\u003eCVE-2026-42578\u003c/a\u003e\n(netty-handler-proxy)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-rwm7-x88c-3g2p\"\u003eCVE-2026-42577\u003c/a\u003e\n(netty-transport-native-epoll)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv\"\u003eCVE-2026-42587\u003c/a\u003e\n(netty-codec-http, netty-codec-http2)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv\"\u003eCVE-2026-41417\u003c/a\u003e\n(netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9\"\u003eCVE-2026-42581\u003c/a\u003e\n(netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723\"\u003eCVE-2026-42580\u003c/a\u003e\n(netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv\"\u003eCVE-2026-42585\u003c/a\u003e\n(netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm\"\u003eCVE-2026-42579\u003c/a\u003e\n(netty-codec-dns)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-2c5c-chwr-9hqw\"\u003eCVE-2026-42582\u003c/a\u003e\n(netty-codec-http3)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6\"\u003eCVE-2026-42583\u003c/a\u003e\n(netty-codec, netty-codec-compression)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3\"\u003eCVE-2026-42584\u003c/a\u003e\n(netty-codec-http)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-jfg9-48mv-9qgx\"\u003eCVE-2026-44248\u003c/a\u003e\n(netty-codec-mqtt)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eKqueue: sendfile EINTR doesn\u0027t advance offset — data duplication by\n\u003ca\nhref\u003d\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16544\"\u003enetty/netty#16544\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace usage of strerror with thread-safe alternative by \u003ca\nhref\u003d\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16547\"\u003enetty/netty#16547\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix implementation of strerror_r_xsi for GNU by \u003ca\nhref\u003d\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16546\"\u003enetty/netty#16546\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLazy init ArrayList in DefaultHeaders.getAll by \u003ca\nhref\u003d\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16526\"\u003enetty/netty#16526\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eLess logging in AWS-LC build by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16565\"\u003enetty/netty#16565\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnsure the CRYPTO_BUFFER_POOL is also freed when we fail creating\nthe SSLContext by \u003ca\nhref\u003d\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16545\"\u003enetty/netty#16545\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Fix IndexOutOfBoundsException in StompSubframeDecoder\non heartbeat by \u003ca\nhref\u003d\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16543\"\u003enetty/netty#16543\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid leak in PemReader on OutOfDirectMemoryError by \u003ca\nhref\u003d\"https://github.com/raipc\"\u003e\u003ccode\u003e@​raipc\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16551\"\u003enetty/netty#16551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIoUring: Disable test while we debug to unblock other builds by \u003ca\nhref\u003d\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16581\"\u003enetty/netty#16581\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eInclude user properties and subscription IDs in\nMqttProperties#isEmpty by \u003ca\nhref\u003d\"https://github.com/ShadowySpirits\"\u003e\u003ccode\u003e@​ShadowySpirits\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16575\"\u003enetty/netty#16575\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative DNS resolver: Guard against malloc failures by \u003ca\nhref\u003d\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16559\"\u003enetty/netty#16559\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Increase timeouts for QuicChannelConnectTest by \u003ca\nhref\u003d\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16578\"\u003enetty/netty#16578\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix parsing HTTP chunks with multiple extensions by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16579\"\u003enetty/netty#16579\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.plexus:plexus-utils from 3.4.2 to 4.0.3 in\n/codec-native-quic by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16572\"\u003enetty/netty#16572\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert to PR build to Ubuntu 22.04 by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16595\"\u003enetty/netty#16595\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNative transports: Correctly create pipe when pipe2 is not supported\nby \u003ca\nhref\u003d\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16592\"\u003enetty/netty#16592\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Cleanup code to always return negative value on failure by \u003ca\nhref\u003d\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16591\"\u003enetty/netty#16591\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix component search fast path by \u003ca\nhref\u003d\"https://github.com/yawkat\"\u003e\u003ccode\u003e@​yawkat\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16548\"\u003enetty/netty#16548\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize read-only toStringMultipleThreads1 by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16608\"\u003enetty/netty#16608\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize more AbstractByteBufTests by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16611\"\u003enetty/netty#16611\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove note about needing 256-bit for PQC by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16605\"\u003enetty/netty#16605\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStabilize testSessionInvalidate for Conscrypt by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16615\"\u003enetty/netty#16615\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Correctly handle SSL_CTX_new failures by \u003ca\nhref\u003d\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16622\"\u003enetty/netty#16622\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake LocalIoHandle public by \u003ca\nhref\u003d\"https://github.com/rdicroce\"\u003e\u003ccode\u003e@​rdicroce\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16621\"\u003enetty/netty#16621\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eQuic: Fix shadowing of variable which leads to incorrectly handling\nerrors by \u003ca\nhref\u003d\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16623\"\u003enetty/netty#16623\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAuto-port 4.2: Use stream error for maxContentLength exceeded in\nInboundHttp2ToHttpAdapter by \u003ca\nhref\u003d\"https://github.com/netty-project-bot\"\u003e\u003ccode\u003e@​netty-project-bot\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16629\"\u003enetty/netty#16629\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix \u003ccode\u003eshutdownInput\u003c/code\u003e bug in kqueue for empty recv buffer\nby \u003ca href\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16630\"\u003enetty/netty#16630\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix FFM address semantics in directBufferAddress by \u003ca\nhref\u003d\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16603\"\u003enetty/netty#16603\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Ensure HTTP2 preface is always send as first message by \u003ca\nhref\u003d\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16636\"\u003enetty/netty#16636\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMove Http2FrameCodecSubClassTest to correct package by \u003ca\nhref\u003d\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16640\"\u003enetty/netty#16640\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eKqueue: Fix usage of LOCAL_PEERPID by \u003ca\nhref\u003d\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16637\"\u003enetty/netty#16637\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid ArrayQueue allocation in HttpServerCodec by \u003ca\nhref\u003d\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16596\"\u003enetty/netty#16596\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix file descriptor reuse bug in kqueue by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16650\"\u003enetty/netty#16650\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/b3844c8108b42f68d56144b36d4d1ed96078a688\"\u003e\u003ccode\u003eb3844c8\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release netty-4.2.13.Final\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/82f47fa53571d04d8add02e3a01762cebd139a00\"\u003e\u003ccode\u003e82f47fa\u003c/code\u003e\u003c/a\u003e\nMerge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/ada0999ae6a011c787203108c8d987e0bc25b82d\"\u003e\u003ccode\u003eada0999\u003c/code\u003e\u003c/a\u003e\nMerge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/b4051e230e2fd349892f3739d6770b006c1d7528\"\u003e\u003ccode\u003eb4051e2\u003c/code\u003e\u003c/a\u003e\nFix BrotliDecoder not forwarding all decompressed chunks\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/67207c19218d7962f772af234f89de4424c7cf07\"\u003e\u003ccode\u003e67207c1\u003c/code\u003e\u003c/a\u003e\nMerge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/541ca7c645b8bd04901b54136b745622be289d19\"\u003e\u003ccode\u003e541ca7c\u003c/code\u003e\u003c/a\u003e\nMerge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/943edb361423eee5574b636a8c2bf6baf5cb2464\"\u003e\u003ccode\u003e943edb3\u003c/code\u003e\u003c/a\u003e\nFix codec-dns tests\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/6459a284e6653c90fe4b15c0e8516d8302b1cd0e\"\u003e\u003ccode\u003e6459a28\u003c/code\u003e\u003c/a\u003e\nMerge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/b4ba61bd9059156cc9dcece7a81ea389efe571c2\"\u003e\u003ccode\u003eb4ba61b\u003c/code\u003e\u003c/a\u003e\nFix checkstyle in HttpObjectDecoder\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/977661f71f7511ad68ca17cabd7b5185efb978f4\"\u003e\u003ccode\u003e977661f\u003c/code\u003e\u003c/a\u003e\nMerge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/netty/netty/compare/netty-4.2.12.Final...netty-4.2.13.Final\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dio.netty:netty-bom\u0026package-manager\u003dmaven\u0026previous-version\u003d4.2.12.Final\u0026new-version\u003d4.2.13.Final)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "c49d97625524a9ba3cb72380f88a2ee12f435695",
      "tree": "05520d46388f92948acdca42a22c33653f3c03dc",
      "parents": [
        "8c36d02205974c0cb912b11383e26f141ee2971e"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon May 18 17:45:26 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon May 18 17:45:26 2026 +0200"
      },
      "message": "MINOR: Bump org.immutables:value-annotations from 2.12.1 to 2.12.2 (#1157)\n\nBumps\n[org.immutables:value-annotations](https://github.com/immutables/immutables)\nfrom 2.12.1 to 2.12.2.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/immutables/immutables/releases\"\u003eorg.immutables:value-annotations\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.12.2\u003c/h2\u003e\n\u003ch2\u003eMaintenance release\u003c/h2\u003e\n\u003ch3\u003eWhat\u0027s Changed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/issues/1642\"\u003e#1642\u003c/a\u003e\nFix to find nested elements on plain element with nested elements with\nmongo backend by \u003ca\nhref\u003d\"https://github.com/rgatbert\"\u003e\u003ccode\u003e@​rgatbert\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/pull/1643\"\u003eimmutables/immutables#1643\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/issues/1642\"\u003e#1642\u003c/a\u003e\nFix for further problems to find nested elements on plain element with\nnested elements with mongo backend by \u003ca\nhref\u003d\"https://github.com/rgatbert\"\u003e\u003ccode\u003e@​rgatbert\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/pull/1644\"\u003eimmutables/immutables#1644\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/issues/1645\"\u003e#1645\u003c/a\u003e\nenhance docs about records for implementationNestedInBuilder by \u003ca\nhref\u003d\"https://github.com/bmarwell\"\u003e\u003ccode\u003e@​bmarwell\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/pull/1646\"\u003eimmutables/immutables#1646\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/issues/1655\"\u003e#1655\u003c/a\u003e\nFix TYPE_USE \u003ccode\u003e@Nullable\u003c/code\u003e on concrete array types by \u003ca\nhref\u003d\"https://github.com/viditochani\"\u003e\u003ccode\u003e@​viditochani\u003c/code\u003e\u003c/a\u003e in\n\u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/pull/1658\"\u003eimmutables/immutables#1658\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eNew Contributors\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/rgatbert\"\u003e\u003ccode\u003e@​rgatbert\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/pull/1643\"\u003eimmutables/immutables#1643\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/bmarwell\"\u003e\u003ccode\u003e@​bmarwell\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/pull/1646\"\u003eimmutables/immutables#1646\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/viditochani\"\u003e\u003ccode\u003e@​viditochani\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/pull/1658\"\u003eimmutables/immutables#1658\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/immutables/immutables/compare/2.12.1...2.12.2\"\u003ehttps://github.com/immutables/immutables/compare/2.12.1...2.12.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/immutables/immutables/commit/6f1918f2ed84bf110fcb9f3dcd5fcf630bcad6d7\"\u003e\u003ccode\u003e6f1918f\u003c/code\u003e\u003c/a\u003e\nv2.12.2\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/immutables/immutables/commit/71d350b769c0b391c38b3fe35564ced71caff065\"\u003e\u003ccode\u003e71d350b\u003c/code\u003e\u003c/a\u003e\nnode24 v5 github actions\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/immutables/immutables/commit/bb26b408e435b7c7c39ce72c945b5e5b2b34e9b6\"\u003e\u003ccode\u003ebb26b40\u003c/code\u003e\u003c/a\u003e\n\u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/issues/1655\"\u003e#1655\u003c/a\u003e\nadditional ECJ workaround\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/immutables/immutables/commit/da6acc841b58abdbf8ad76f96aefa94f17f6fa15\"\u003e\u003ccode\u003eda6acc8\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/issues/1658\"\u003e#1658\u003c/a\u003e\nfrom viditochani/fix-concrete-array-nullable\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/immutables/immutables/commit/ccd68963ab2a234b7b7f60006938cd4d727b89b5\"\u003e\u003ccode\u003eccd6896\u003c/code\u003e\u003c/a\u003e\n\u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/issues/1655\"\u003e#1655\u003c/a\u003e\nFix TYPE_USE \u003ca\nhref\u003d\"https://github.com/Nullable\"\u003e\u003ccode\u003e@​Nullable\u003c/code\u003e\u003c/a\u003e on\nconcrete array types\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/immutables/immutables/commit/78f43d47541af1f535a6ed48578651a609481c87\"\u003e\u003ccode\u003e78f43d4\u003c/code\u003e\u003c/a\u003e\n\u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/issues/1649\"\u003e#1649\u003c/a\u003e\nJackson3 meta-annotated package\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/immutables/immutables/commit/f3fe649b15d96500f8d1c93ad02cace88747cf13\"\u003e\u003ccode\u003ef3fe649\u003c/code\u003e\u003c/a\u003e\n\u003ca\nhref\u003d\"https://redirect.github.com/immutables/immutables/issues/1640\"\u003e#1640\u003c/a\u003e\nWhere.WITH_COPY for copy methods\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/immutables/immutables/commit/83cdfdb423100ed823f965130cd9153aa3a56b2a\"\u003e\u003ccode\u003e83cdfdb\u003c/code\u003e\u003c/a\u003e\nChange JUnit5 dependency to use BOM\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/immutables/immutables/commit/cf04f2c106e35edf1a313900a61c80e7f0913637\"\u003e\u003ccode\u003ecf04f2c\u003c/code\u003e\u003c/a\u003e\nUpgrade jackson3: 3.0.1 -\u0026gt; 3.1.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/immutables/immutables/commit/31308e78e1cd39eba120b7e615723de24b3c1507\"\u003e\u003ccode\u003e31308e7\u003c/code\u003e\u003c/a\u003e\nUpgrade jackson: 2.19.2 -\u0026gt; 2.21.2\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/immutables/immutables/compare/2.12.1...2.12.2\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dorg.immutables:value-annotations\u0026package-manager\u003dmaven\u0026previous-version\u003d2.12.1\u0026new-version\u003d2.12.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "8c36d02205974c0cb912b11383e26f141ee2971e",
      "tree": "f01ed42704c21cd619b6dbacf2b159580da75029",
      "parents": [
        "af86cd3a7c17237368ea8411ed32e21b262c5b7b"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon May 18 17:45:09 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon May 18 17:45:09 2026 +0200"
      },
      "message": "MINOR: Bump org.apache:apache from 37 to 38 (#1156)\n\nBumps [org.apache:apache](https://github.com/apache/maven-apache-parent)\nfrom 37 to 38.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/apache/maven-apache-parent/releases\"\u003eorg.apache:apache\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eApache Parent POM version 38\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003e👻 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate banner links (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/576\"\u003e#576\u003c/a\u003e)\n\u003ca\nhref\u003d\"https://github.com/slawekjaranowski\"\u003e\u003ccode\u003e@​slawekjaranowski\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📦 Dependency updates\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-invoker-plugin from 3.10.0 to\n3.10.1 (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/578\"\u003e#578\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-invoker-plugin from 3.9.1 to\n3.10.0 (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/575\"\u003e#575\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-resources-plugin from 3.4.0 to\n3.5.0 (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/572\"\u003e#572\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-shade-plugin from 3.6.1 to 3.6.2\n(\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/573\"\u003e#573\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump\norg.apache.apache.resources:apache-source-release-assembly-descriptor\nfrom 1.7 to 1.8 (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/571\"\u003e#571\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump version.maven-surefire from 3.5.4 to 3.5.5 (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/570\"\u003e#570\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-dependency-plugin from 3.9.0 to\n3.10.0 (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/568\"\u003e#568\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-compiler-plugin from 3.14.1 to\n3.15.0 (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/567\"\u003e#567\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/apache/maven-apache-parent/commits\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dorg.apache:apache\u0026package-manager\u003dmaven\u0026previous-version\u003d37\u0026new-version\u003d38)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "af86cd3a7c17237368ea8411ed32e21b262c5b7b",
      "tree": "fd7c868050f916458c429f4f4ec9b4816845bb76",
      "parents": [
        "3bc34b041761081ac32a7cd3b167f9ab8b628677"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon May 18 15:22:37 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon May 18 15:22:37 2026 +0200"
      },
      "message": "MINOR: Bump org.apache.calcite.avatica:avatica from 1.26.0 to 1.27.0 (#986)\n\nBumps\n[org.apache.calcite.avatica:avatica](https://github.com/apache/calcite-avatica)\nfrom 1.26.0 to 1.27.0.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/calcite-avatica/commit/7754d942f858e5521966c1771cf2e111e8a7ef87\"\u003e\u003ccode\u003e7754d94\u003c/code\u003e\u003c/a\u003e\n[CALCITE-7200] Release Avatica 1.27.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/calcite-avatica/commit/1e05be2bbe3e63eafe7b157beb8cbe00abaa15f2\"\u003e\u003ccode\u003e1e05be2\u003c/code\u003e\u003c/a\u003e\n[CALCITE-7171] Update Jackson from 2.15.4 to 2.18.4.1 and switch to\nusing jac...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/calcite-avatica/commit/9698a96a36275736f48afc0a0b0a81dfaadc77a6\"\u003e\u003ccode\u003e9698a96\u003c/code\u003e\u003c/a\u003e\n[CALCITE-7177] Update Guava from 33.4.0-jre to 33.4.8-jre in\nAvatica\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/calcite-avatica/commit/0aec6258a2cdae73463c69810dbfce3c26792088\"\u003e\u003ccode\u003e0aec625\u003c/code\u003e\u003c/a\u003e\nBump rexml from 3.4.1 to 3.4.2 in /site\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/calcite-avatica/commit/5954d1ae00a4be4947c1040f8e6b0b4372c628c1\"\u003e\u003ccode\u003e5954d1a\u003c/code\u003e\u003c/a\u003e\n[CALCITE-7165] Update OWASP plugin version to 12.1.3 for JDKs \u0026gt;\u003d\n11\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/calcite-avatica/commit/7b6f14c9a79ad18820482f43442e14f72566afb4\"\u003e\u003ccode\u003e7b6f14c\u003c/code\u003e\u003c/a\u003e\n[CALCITE-7172] Update chekstyle version from 10.19.0 to 10.26.1 in\nAvatica\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/calcite-avatica/commit/3ee1fd772c91a6eeaf0dbabcb27a6f6240ac7970\"\u003e\u003ccode\u003e3ee1fd7\u003c/code\u003e\u003c/a\u003e\n[CALCITE-7169] Update protobuf from 3.25.5 to 3.25.8 in Avatica\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/calcite-avatica/commit/927dc10699d257457a234078f75e2fafe671be64\"\u003e\u003ccode\u003e927dc10\u003c/code\u003e\u003c/a\u003e\n[CALCITE-7168] Update httpcore5 from 5.3.1 to 5.3.5 in Avatica\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/calcite-avatica/commit/458189ff52e2c2624b3d3d1096cfe1fc29f47af8\"\u003e\u003ccode\u003e458189f\u003c/code\u003e\u003c/a\u003e\n[CALCITE-7167] Upgrade Jetty from 9.4.56.v20240826 to 9.4.58.v20250814\nin Ava...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/calcite-avatica/commit/592a39e43b5dd59b3eaf9f9266cb02a9c4ce4065\"\u003e\u003ccode\u003e592a39e\u003c/code\u003e\u003c/a\u003e\n[CALCITE-7166] Update Gradle from 8.7 to 8.14.3 in Avatica\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/apache/calcite-avatica/compare/rel/avatica-1.26.0...rel/avatica-1.27.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n\u003e **Note**\n\u003e Automatic rebases have been disabled on this pull request as it has\nbeen open for over 30 days.\n\n---------\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: JB Onofré \u003cjbonofre@apache.org\u003e"
    },
    {
      "commit": "3bc34b041761081ac32a7cd3b167f9ab8b628677",
      "tree": "177bf6972fa3a38fc2c723cb7d5e9956252f7aee",
      "parents": [
        "0f7665f2b78a5f6bcfb37924fbee05a45adfb5f8"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed May 13 13:51:48 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed May 13 13:51:48 2026 +0200"
      },
      "message": "MINOR: Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#1126)\n\nBumps commons-io:commons-io from 2.21.0 to 2.22.0.\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcommons-io:commons-io\u0026package-manager\u003dmaven\u0026previous-version\u003d2.21.0\u0026new-version\u003d2.22.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "0f7665f2b78a5f6bcfb37924fbee05a45adfb5f8",
      "tree": "503764e2fa49bcf6152f2d9f6d4541fe2f054134",
      "parents": [
        "331e9ee0968ab92499ed362ed276fa85e60b870d"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue May 12 09:31:15 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue May 12 09:31:15 2026 +0200"
      },
      "message": "MINOR: Bump com.nimbusds:oauth2-oidc-sdk from 11.37 to 11.37.1 (#1143)\n\nBumps\n[com.nimbusds:oauth2-oidc-sdk](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions)\nfrom 11.37 to 11.37.1.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/src/master/CHANGELOG.txt\"\u003ecom.nimbusds:oauth2-oidc-sdk\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eversion 1.0 (2012-05-29)\n* First official release with authorisation endpoint, token endpoint,\ncheck\nID endpoint and UserInfo endpoint support.\n* JSON Web Tokens (JWTs) support through the Nimbus-JWT library.\n* Language Tags (RFC 5646) support through the Nimbus-LangTag library.\n* JSON support through the JSON Smart library.\u003c/p\u003e\n\u003cp\u003eversion 2.0 (2013-05-13)\n* Intermediary development release with Maven build, published to\nMaven Central.\u003c/p\u003e\n\u003cp\u003eversion 2.1 (2013-06-06)\n* Updates the APIs to OpenID Connect Messages draft 20, OpenID Connect\nStandard draft 21, OpenID Connect Discovery draft 17 and OpenID\nConnect Registration draft 19.\n* Major refactoring of the APIs for greater simplicity.\n* Adds JUnit tests.\u003c/p\u003e\n\u003cp\u003eversion 2.2 (2013-06-18)\n* Refactors dynamic OpenID Connect client registration.\n* Adds partial support of the OAuth 2.0 Dynamic Client Registration\nProtocol (draft-ietf-oauth-dyn-reg-12).\n* Optimises parsing of request parameters consisting of one or more\ntokens (scope, response type, etc).\u003c/p\u003e\n\u003cp\u003eversion 2.3 (2013-06-19)\n* Renames OAuth 2.0 dynamic client registration package.\n* Adds ClientInformation.getClientMetadata() method.\n* Adds OIDCClientInformation class.\u003c/p\u003e\n\u003cp\u003eversion 2.4 (2013-06-20)\n* Adds static OIDCClientInformation.parse(JSONObject) method.\u003c/p\u003e\n\u003cp\u003eversion 2.5 (2013-06-22)\n* Adds support OAuth 2.0 dynamic client update.\n* Adds OpenID Connect dynamic client registration classes.\u003c/p\u003e\n\u003cp\u003eversion 2.6 (2013-06-25)\n* Enforces order of preference of ACR values in OpenID Connect client\nmetadata, as required by the specification.\n* Documentation and performance improvements.\u003c/p\u003e\n\u003cp\u003eversion 2.7 (2013-06-26)\n* Switches Identifier generation to java.security.SecureRandom.\u003c/p\u003e\n\u003cp\u003eversion 2.8 (2013-06-30)\n* Fixes serialisation and assignment bugs in ClientMetadata.\n* Switches Secret generation to java.security.SecureRandom.\u003c/p\u003e\n\u003cp\u003eversion 2.9 (2013-09-17)\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/2a0f2715d0943405b445f2ccf001a072044ef685\"\u003e\u003ccode\u003e2a0f271\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/fac7277ad412ee74e2e46eb89f6f75de6228a4e4\"\u003e\u003ccode\u003efac7277\u003c/code\u003e\u003c/a\u003e\nBumps Nimbus JOSE+JWT, BouncyCastle\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/517deb7444d54ee9c11c2bab42715fbc87871714\"\u003e\u003ccode\u003e517deb7\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release 11.37.1\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/branches/compare/11.37.1..11.37\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.nimbusds:oauth2-oidc-sdk\u0026package-manager\u003dmaven\u0026previous-version\u003d11.37\u0026new-version\u003d11.37.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "331e9ee0968ab92499ed362ed276fa85e60b870d",
      "tree": "746718a1ad3d2b6de0100b52024b05643b6dff90",
      "parents": [
        "e6d9248447ef90d2d9a1412bfdee7019377e0603"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon May 11 15:53:29 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon May 11 15:53:29 2026 +0200"
      },
      "message": "MINOR: Bump commons-codec:commons-codec from 1.21.0 to 1.22.0 (#1127)\n\nBumps\n[commons-codec:commons-codec](https://github.com/apache/commons-codec)\nfrom 1.21.0 to 1.22.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt\"\u003ecommons-codec:commons-codec\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eApache Commons Codec 1.22.0 Release Notes\u003c/h2\u003e\n\u003cp\u003eThe Apache Commons Codec team is pleased to announce the release of\nApache Commons Codec 1.22.0.\u003c/p\u003e\n\u003cp\u003eThe Apache Commons Codec component contains encoders and decoders for\nformats such as Base16, Base32, Base64, digest, and Hexadecimal. In\naddition to these\nwidely used encoders and decoders, the codec package also maintains a\ncollection of phonetic encoding utilities.\u003c/p\u003e\n\u003cp\u003eThis is a feature and maintenance release. Java 8 or later is\nrequired.\u003c/p\u003e\n\u003ch2\u003eNew features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCODEC-326: Add Base58 support. Thanks to Inkeet, Gary Gregory, Wolff\nBock von Wuelfingen.\u003c/li\u003e\n\u003cli\u003e\n\u003cpre\u003e\u003ccode\u003e Add\nBaseNCodecInputStream.AbstracBuilder.setByteArray(byte[]). Thanks to\nGary Gregory.\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003eCODEC-335: Add GitIdentifiers to compute Git blob and tree object\nidentifiers. Thanks to Piotr P. Karwasz, Gary Gregory.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eFixed Bugs\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCODEC-249: Fix Incorrect transform of CH digraph according Metaphone\nbasic rules \u003ca\nhref\u003d\"https://redirect.github.com/apache/commons-codec/issues/423\"\u003e#423\u003c/a\u003e.\nThanks to Shalu Jha, Andrey, Gary Gregory.\u003c/li\u003e\n\u003cli\u003eCODEC-317: ColognePhonetic can create duplicate consecutive codes in\nsome cases. Thanks to DRUser123, Shalu Jha, Gary Gregory.\u003c/li\u003e\n\u003cli\u003e\n\u003cpre\u003e\u003ccode\u003e Add boundary tests for BinaryCodec.fromAscii partial-bit\ninputs [#425](https://github.com/apache/commons-codec/issues/425).\nThanks to fancying, Gary Gregory.\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003eCODEC-336: Base64.Builder.setUrlSafe(boolean) Javadoc incorrectly\nstates null is accepted for primitive boolean parameter. Thanks to\nPartha Paul, Gary Gregory.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eChanges\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cpre\u003e\u003ccode\u003e Bump org.apache.commons:commons-parent from 96 to 98. Thanks\nto Gary Gregory.\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFor complete information on Apache Commons Codec, including\ninstructions on how to submit bug reports,\npatches, or suggestions for improvement, see the Apache Commons Codec\nwebsite:\u003c/p\u003e\n\u003cp\u003e\u003ca\nhref\u003d\"https://commons.apache.org/proper/commons-codec/\"\u003ehttps://commons.apache.org/proper/commons-codec/\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eDownload page: \u003ca\nhref\u003d\"https://commons.apache.org/proper/commons-codec/download_codec.cgi\"\u003ehttps://commons.apache.org/proper/commons-codec/download_codec.cgi\u003c/a\u003e\u003c/p\u003e\n\u003chr /\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/commons-codec/commit/81a6295f071df5819893422a397d94bc396f2edd\"\u003e\u003ccode\u003e81a6295\u003c/code\u003e\u003c/a\u003e\nPrepare for the release candidate 1.22.0 RC1\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/commons-codec/commit/73104b011a9758896904831f9b1bd29aad077f11\"\u003e\u003ccode\u003e73104b0\u003c/code\u003e\u003c/a\u003e\nPrepare for the next release candidate\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/commons-codec/commit/8e36214fa2760d37e4e9c83336ed5bb324c23482\"\u003e\u003ccode\u003e8e36214\u003c/code\u003e\u003c/a\u003e\nIn-line single use test local variables\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/commons-codec/commit/9bd67e787d88705baa26e85f3a9609dec015ba5b\"\u003e\u003ccode\u003e9bd67e7\u003c/code\u003e\u003c/a\u003e\nUse vararg syntax\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/commons-codec/commit/25e52b06a3c24dc06216e7d29321a2f01c60ec6f\"\u003e\u003ccode\u003e25e52b0\u003c/code\u003e\u003c/a\u003e\nUse vararg syntax\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/commons-codec/commit/e2ebaca8b30d1d04d0eb6a4e811a6d26631f4d31\"\u003e\u003ccode\u003ee2ebaca\u003c/code\u003e\u003c/a\u003e\nBump github/codeql-action from 4.35.1 to 4.35.2\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/commons-codec/commit/33998a05a8adc84ca944bad2e5c7215309d1477b\"\u003e\u003ccode\u003e33998a0\u003c/code\u003e\u003c/a\u003e\nBump actions/upload-artifact from 7.0.0 to 7.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/commons-codec/commit/50c6583280cb3ed67407dcaeb31df4f8fa8ede20\"\u003e\u003ccode\u003e50c6583\u003c/code\u003e\u003c/a\u003e\nBump actions/cache from 5.0.4 to 5.0.5\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/commons-codec/commit/b2be3a82b2d0902e89718a56c6afb5850d020668\"\u003e\u003ccode\u003eb2be3a8\u003c/code\u003e\u003c/a\u003e\nAdd \u003ca\nhref\u003d\"https://github.com/Override\"\u003e\u003ccode\u003e@​Override\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/apache/commons-codec/commit/20f09bfcfdce88760ec9be095b848e85d9084acf\"\u003e\u003ccode\u003e20f09bf\u003c/code\u003e\u003c/a\u003e\nUse final.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/apache/commons-codec/compare/rel/commons-codec-1.21.0...rel/commons-codec-1.22.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "e6d9248447ef90d2d9a1412bfdee7019377e0603",
      "tree": "edc6377fa4c8965aa33cb704cb0f35fe08d066a8",
      "parents": [
        "b068e28343d54604b1966e916a376ea4c1491f48"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon May 11 15:53:10 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon May 11 15:53:10 2026 +0200"
      },
      "message": "MINOR: Bump com.gradle:common-custom-user-data-maven-extension from 2.1.0 to 2.2.0 (#1128)\n\nBumps\n[com.gradle:common-custom-user-data-maven-extension](https://github.com/gradle/common-custom-user-data-maven-extension)\nfrom 2.1.0 to 2.2.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/releases\"\u003ecom.gradle:common-custom-user-data-maven-extension\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.2.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[NEW] Add AI tag to the Build Scan when invoked by an AI Agent\u003c/li\u003e\n\u003cli\u003e[NEW] Add custom value to the Build Scan indicating which AI Agent\ninvoked the build\u003c/li\u003e\n\u003cli\u003e[NEW] Add link in Build Scan to GitHub PR\u003c/li\u003e\n\u003cli\u003e[NEW] For GitHub PRs, capture \u003ccode\u003eGITHUB_BASE_REF\u003c/code\u003e as the\nvalue \u003ccode\u003ePR base branch\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/d594c600651c22fb242ae7989704dedd55354941\"\u003e\u003ccode\u003ed594c60\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release v2.2.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/0a48e7af84f66dbcab13a1ed922b37ae20036cea\"\u003e\u003ccode\u003e0a48e7a\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/gradle/common-custom-user-data-maven-extension/issues/375\"\u003e#375\u003c/a\u003e\nfrom gradle/cj/github-pr-base-branch\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/02f60010470630dc040841fb3103b16307b1c22f\"\u003e\u003ccode\u003e02f6001\u003c/code\u003e\u003c/a\u003e\nCapture GITHUB_BASE_REF as \u0027PR base branch\u0027 for GitHub PR builds\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/fc03fa942b75a6e85d20055d193874f134d3953f\"\u003e\u003ccode\u003efc03fa9\u003c/code\u003e\u003c/a\u003e\nAdd recent feature additions to changes.md\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/15015551ae69bc5cc65d5c00e1e38f84868beb44\"\u003e\u003ccode\u003e1501555\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/gradle/common-custom-user-data-maven-extension/issues/370\"\u003e#370\u003c/a\u003e\nfrom gradle/add-ai-agent-metadata\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/de773aef7d7ee25182e8233dff2624c45bb2f1bf\"\u003e\u003ccode\u003ede773ae\u003c/code\u003e\u003c/a\u003e\n[Renovate Bot] Update dependency org.apache.maven:maven-core to v3.9.15\n(\u003ca\nhref\u003d\"https://redirect.github.com/gradle/common-custom-user-data-maven-extension/issues/374\"\u003e#374\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/074832a77b9f4695f05d9b7e58955a787451c674\"\u003e\u003ccode\u003e074832a\u003c/code\u003e\u003c/a\u003e\n[Renovate Bot] Update dependency maven to v3.9.15 (\u003ca\nhref\u003d\"https://redirect.github.com/gradle/common-custom-user-data-maven-extension/issues/373\"\u003e#373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/9de6cf166eab1220a012322d51ce9628820e08b4\"\u003e\u003ccode\u003e9de6cf1\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/gradle/common-custom-user-data-maven-extension/issues/372\"\u003e#372\u003c/a\u003e\nfrom gradle/renovate/github-actions\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/ea1e3fcf40fdf65864361024935fee8f6032b6f8\"\u003e\u003ccode\u003eea1e3fc\u003c/code\u003e\u003c/a\u003e\n[Renovate Bot] Update actions/upload-artifact digest to 043fb46\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/438484954c53f3c0aff0c913de0cc4b0d7ddcaf6\"\u003e\u003ccode\u003e4384849\u003c/code\u003e\u003c/a\u003e\nMatch AI tags/values to CCUD Gradle\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/compare/v2.1.0...v2.2.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "b068e28343d54604b1966e916a376ea4c1491f48",
      "tree": "22c3ba408cb17b36631d4f847d32470d39e6c641",
      "parents": [
        "30d528fa9992c9ed16a01853a2ed285f0efcbd21"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon May 11 15:52:55 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon May 11 15:52:55 2026 +0200"
      },
      "message": "MINOR: Bump com.github.ben-manes.caffeine:caffeine from 3.2.3 to 3.2.4 (#1130)\n\nBumps\n[com.github.ben-manes.caffeine:caffeine](https://github.com/ben-manes/caffeine)\nfrom 3.2.3 to 3.2.4.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/ben-manes/caffeine/releases\"\u003ecom.github.ben-manes.caffeine:caffeine\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.2.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImproved access expiration\u0027s read performance by avoiding false\nsharing effects caused by the timestamp update\u003c/li\u003e\n\u003cli\u003eFixed head-of-line blocking of expiration queues caused by in-flight\nasync entries (\u003ca\nhref\u003d\"https://redirect.github.com/ben-manes/caffeine/issues/1954\"\u003e#1954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed various minor issues found using AI audits\u003c/li\u003e\n\u003cli\u003eAdded \u003ca\nhref\u003d\"https://docs.oracle.com/en/java/javase/25/docs/api//java.base/java/io/ObjectInputFilter.html\"\u003eObjectInputFilter\u003c/a\u003e\nsupport to JCache\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/ben-manes/caffeine/commit/836b65c0a83e5d1641ded9c6de578654bc04b2e9\"\u003e\u003ccode\u003e836b65c\u003c/code\u003e\u003c/a\u003e\nuse a consistent expiration tolerance calculation\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/ben-manes/caffeine/commit/0dc7daf962730048fe46ae4626827afbb97ddf92\"\u003e\u003ccode\u003e0dc7daf\u003c/code\u003e\u003c/a\u003e\nresurrect in-flight async entries on expiration\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/ben-manes/caffeine/commit/0bac8b54fd634ffe95d35ccd1d94daba95e7b369\"\u003e\u003ccode\u003e0bac8b5\u003c/code\u003e\u003c/a\u003e\nhandle head-of-line blocking of expiration queues (fixes \u003ca\nhref\u003d\"https://redirect.github.com/ben-manes/caffeine/issues/1954\"\u003e#1954\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/ben-manes/caffeine/commit/ff258366de0a89129152ead72524ce88f8fca67b\"\u003e\u003ccode\u003eff25836\u003c/code\u003e\u003c/a\u003e\ntest polish\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/ben-manes/caffeine/commit/f3a6176e2e3a7fe085214472858c6029c108fc3f\"\u003e\u003ccode\u003ef3a6176\u003c/code\u003e\u003c/a\u003e\nFix JCache close/createCache races and recursive teardown\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/ben-manes/caffeine/commit/622fbe7dbf7606f114b956205706935be2fcf3c8\"\u003e\u003ccode\u003e622fbe7\u003c/code\u003e\u003c/a\u003e\nFix removal in identity views and widen hill-climber counters\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/ben-manes/caffeine/commit/8da5a7a05d8b725c9dbd577be8ffaf2372aa7e23\"\u003e\u003ccode\u003e8da5a7a\u003c/code\u003e\u003c/a\u003e\ndefer weighing the entry until after the putIfAbsent hit fast-path\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/ben-manes/caffeine/commit/94ad0ff8556c9923a8d9746ab85af9ee830dd051\"\u003e\u003ccode\u003e94ad0ff\u003c/code\u003e\u003c/a\u003e\nRecord eviction stats before notifying the removal listener\nconsistently\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/ben-manes/caffeine/commit/f94c0113d0c98dc0afaadf1f6748ea280aa4dff7\"\u003e\u003ccode\u003ef94c011\u003c/code\u003e\u003c/a\u003e\nAuto-assert eviction stats alongside\nnotifications.withCause.exclusively\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/ben-manes/caffeine/commit/2e945e090fbff4f96251dfe1bacba3780a5bdb0c\"\u003e\u003ccode\u003e2e945e0\u003c/code\u003e\u003c/a\u003e\nSkip timestamp writes within tolerance on the read path.\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/ben-manes/caffeine/compare/v3.2.3...v3.2.4\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "30d528fa9992c9ed16a01853a2ed285f0efcbd21",
      "tree": "357e5061f575a8f812a82c13ea9f6505fa91f134",
      "parents": [
        "5e2fb636514c708cf27bd367c8f452d72ab5fdef"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon May 11 15:52:35 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon May 11 15:52:35 2026 +0200"
      },
      "message": "MINOR: Bump checker.framework.version from 4.0.0 to 4.1.0 (#1131)\n\nBumps `checker.framework.version` from 4.0.0 to 4.1.0.\nUpdates `org.checkerframework:checker-qual` from 4.0.0 to 4.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/releases\"\u003eorg.checkerframework:checker-qual\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eChecker Framework 4.1.0\u003c/h2\u003e\n\u003ch2\u003eVersion 4.1.0 (2026-05-01)\u003c/h2\u003e\n\u003ch3\u003eUser-visible changes\u003c/h3\u003e\n\u003cp\u003eRemoved deprecated script \u003ccode\u003echecker/bin-devel/build.sh\u003c/code\u003e;\nuse \u003ccode\u003e./gradlew assemble\u003c/code\u003e instead.\u003c/p\u003e\n\u003cp\u003eRemoved deprecated names \u0026quot;builder\u0026quot;,\n\u0026quot;object.construction\u0026quot;, and \u0026quot;objectconstruction\u0026quot; for\nthe Called Methods Checker.\u003c/p\u003e\n\u003ch3\u003eImplementation details\u003c/h3\u003e\n\u003cp\u003eNew method annotation \u003ccode\u003e@DoesNotUnrefineReceiver\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eIn \u003ccode\u003eAnnotatedTypeFactory\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enew method \u003ccode\u003ehasDoesNotUnrefineReceiver()\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eisAliasedTypeAnnotation()\u003c/code\u003e is now protected rather than\npublic.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eClosed issues\u003c/h3\u003e\n\u003cp\u003e\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/6890\"\u003e#6890\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7364\"\u003e#7364\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7488\"\u003e#7488\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md\"\u003eorg.checkerframework:checker-qual\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 4.1.0 (2026-05-01)\u003c/h2\u003e\n\u003ch3\u003eUser-visible changes\u003c/h3\u003e\n\u003cp\u003eRemoved deprecated script \u003ccode\u003echecker/bin-devel/build.sh\u003c/code\u003e;\nuse \u003ccode\u003e./gradlew assemble\u003c/code\u003e\ninstead.\u003c/p\u003e\n\u003cp\u003eRemoved deprecated names \u0026quot;builder\u0026quot;,\n\u0026quot;object.construction\u0026quot;, and\n\u0026quot;objectconstruction\u0026quot; for the Called Methods Checker.\u003c/p\u003e\n\u003ch3\u003eImplementation details\u003c/h3\u003e\n\u003cp\u003eNew method annotation \u003ccode\u003e@DoesNotUnrefineReceiver\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eIn \u003ccode\u003eAnnotatedTypeFactory\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enew method \u003ccode\u003ehasDoesNotUnrefineReceiver()\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eisAliasedTypeAnnotation()\u003c/code\u003e is now protected rather than\npublic.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eClosed issues\u003c/h3\u003e\n\u003cp\u003e\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/6890\"\u003e#6890\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7364\"\u003e#7364\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7488\"\u003e#7488\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/b8a7ca60a241c37d6889e8ecd38ba5fe6234e4d6\"\u003e\u003ccode\u003eb8a7ca6\u003c/code\u003e\u003c/a\u003e\nnew release 4.1.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/f1563d2caeb6120b97b2dab32bc592ecf23b0848\"\u003e\u003ccode\u003ef1563d2\u003c/code\u003e\u003c/a\u003e\nUpdate for release.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/786773754bb83c294f3c04629027660fb289d699\"\u003e\u003ccode\u003e7867737\u003c/code\u003e\u003c/a\u003e\nSet environment variable \u003ccode\u003eGH_TOKEN\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/771b037663bdd490f04245437dff8ae6ebb1c64b\"\u003e\u003ccode\u003e771b037\u003c/code\u003e\u003c/a\u003e\nTweak documentation (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7668\"\u003e#7668\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/71735d1ec23ef765d8e559c92cb736630b0efaa3\"\u003e\u003ccode\u003e71735d1\u003c/code\u003e\u003c/a\u003e\nFix documentation typo\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/6465706e3b4a69f95b2421da4284b47ccb49b81a\"\u003e\u003ccode\u003e6465706\u003c/code\u003e\u003c/a\u003e\nMake \u003ccode\u003eisAliasedTypeAnnotation()\u003c/code\u003e protected (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7667\"\u003e#7667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/8af69bca25fbd1d293a46ea224567feabce34370\"\u003e\u003ccode\u003e8af69bc\u003c/code\u003e\u003c/a\u003e\nUpdate cimg/base Docker tag to v2026.04\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/fa3ad9b59ac273df809e390fbcf2667e7977cce7\"\u003e\u003ccode\u003efa3ad9b\u003c/code\u003e\u003c/a\u003e\nHow to update the Hevea version number\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/18002bf382ef24f3a4605dc17725bd9909c4497f\"\u003e\u003ccode\u003e18002bf\u003c/code\u003e\u003c/a\u003e\nUse environment variable\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/dd8381c0344e7a3befb65c1e13b19b37aeb636c7\"\u003e\u003ccode\u003edd8381c\u003c/code\u003e\u003c/a\u003e\nSet up GitHub Actions CI\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/compare/checker-framework-4.0.0...checker-framework-4.1.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.checkerframework:checker` from 4.0.0 to 4.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/releases\"\u003eorg.checkerframework:checker\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eChecker Framework 4.1.0\u003c/h2\u003e\n\u003ch2\u003eVersion 4.1.0 (2026-05-01)\u003c/h2\u003e\n\u003ch3\u003eUser-visible changes\u003c/h3\u003e\n\u003cp\u003eRemoved deprecated script \u003ccode\u003echecker/bin-devel/build.sh\u003c/code\u003e;\nuse \u003ccode\u003e./gradlew assemble\u003c/code\u003e instead.\u003c/p\u003e\n\u003cp\u003eRemoved deprecated names \u0026quot;builder\u0026quot;,\n\u0026quot;object.construction\u0026quot;, and \u0026quot;objectconstruction\u0026quot; for\nthe Called Methods Checker.\u003c/p\u003e\n\u003ch3\u003eImplementation details\u003c/h3\u003e\n\u003cp\u003eNew method annotation \u003ccode\u003e@DoesNotUnrefineReceiver\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eIn \u003ccode\u003eAnnotatedTypeFactory\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enew method \u003ccode\u003ehasDoesNotUnrefineReceiver()\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eisAliasedTypeAnnotation()\u003c/code\u003e is now protected rather than\npublic.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eClosed issues\u003c/h3\u003e\n\u003cp\u003e\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/6890\"\u003e#6890\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7364\"\u003e#7364\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7488\"\u003e#7488\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md\"\u003eorg.checkerframework:checker\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 4.1.0 (2026-05-01)\u003c/h2\u003e\n\u003ch3\u003eUser-visible changes\u003c/h3\u003e\n\u003cp\u003eRemoved deprecated script \u003ccode\u003echecker/bin-devel/build.sh\u003c/code\u003e;\nuse \u003ccode\u003e./gradlew assemble\u003c/code\u003e\ninstead.\u003c/p\u003e\n\u003cp\u003eRemoved deprecated names \u0026quot;builder\u0026quot;,\n\u0026quot;object.construction\u0026quot;, and\n\u0026quot;objectconstruction\u0026quot; for the Called Methods Checker.\u003c/p\u003e\n\u003ch3\u003eImplementation details\u003c/h3\u003e\n\u003cp\u003eNew method annotation \u003ccode\u003e@DoesNotUnrefineReceiver\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eIn \u003ccode\u003eAnnotatedTypeFactory\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003enew method \u003ccode\u003ehasDoesNotUnrefineReceiver()\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eisAliasedTypeAnnotation()\u003c/code\u003e is now protected rather than\npublic.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eClosed issues\u003c/h3\u003e\n\u003cp\u003e\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/6890\"\u003e#6890\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7364\"\u003e#7364\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7488\"\u003e#7488\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/b8a7ca60a241c37d6889e8ecd38ba5fe6234e4d6\"\u003e\u003ccode\u003eb8a7ca6\u003c/code\u003e\u003c/a\u003e\nnew release 4.1.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/f1563d2caeb6120b97b2dab32bc592ecf23b0848\"\u003e\u003ccode\u003ef1563d2\u003c/code\u003e\u003c/a\u003e\nUpdate for release.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/786773754bb83c294f3c04629027660fb289d699\"\u003e\u003ccode\u003e7867737\u003c/code\u003e\u003c/a\u003e\nSet environment variable \u003ccode\u003eGH_TOKEN\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/771b037663bdd490f04245437dff8ae6ebb1c64b\"\u003e\u003ccode\u003e771b037\u003c/code\u003e\u003c/a\u003e\nTweak documentation (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7668\"\u003e#7668\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/71735d1ec23ef765d8e559c92cb736630b0efaa3\"\u003e\u003ccode\u003e71735d1\u003c/code\u003e\u003c/a\u003e\nFix documentation typo\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/6465706e3b4a69f95b2421da4284b47ccb49b81a\"\u003e\u003ccode\u003e6465706\u003c/code\u003e\u003c/a\u003e\nMake \u003ccode\u003eisAliasedTypeAnnotation()\u003c/code\u003e protected (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7667\"\u003e#7667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/8af69bca25fbd1d293a46ea224567feabce34370\"\u003e\u003ccode\u003e8af69bc\u003c/code\u003e\u003c/a\u003e\nUpdate cimg/base Docker tag to v2026.04\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/fa3ad9b59ac273df809e390fbcf2667e7977cce7\"\u003e\u003ccode\u003efa3ad9b\u003c/code\u003e\u003c/a\u003e\nHow to update the Hevea version number\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/18002bf382ef24f3a4605dc17725bd9909c4497f\"\u003e\u003ccode\u003e18002bf\u003c/code\u003e\u003c/a\u003e\nUse environment variable\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/dd8381c0344e7a3befb65c1e13b19b37aeb636c7\"\u003e\u003ccode\u003edd8381c\u003c/code\u003e\u003c/a\u003e\nSet up GitHub Actions CI\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/compare/checker-framework-4.0.0...checker-framework-4.1.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "5e2fb636514c708cf27bd367c8f452d72ab5fdef",
      "tree": "b8475c2db0271bc0091b23f7ef2f737e41e37271",
      "parents": [
        "5dc3ea699a4b7f8e4799c8ee318b96c9a9cc4f31"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon May 11 15:45:59 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon May 11 15:45:59 2026 +0200"
      },
      "message": "MINOR: Bump com.google.api.grpc:proto-google-common-protos from 2.70.0 to 2.71.0 (#1144)\n\nBumps\n[com.google.api.grpc:proto-google-common-protos](https://github.com/googleapis/sdk-platform-java)\nfrom 2.70.0 to 2.71.0.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/647366865339840bbf1561e0f0cf776c7c88642a\"\u003e\u003ccode\u003e6473668\u003c/code\u003e\u003c/a\u003e\nchore(main): release 2.63.0 (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3927\"\u003e#3927\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/8015e7e48422b56f9c7e353447a7fcc75fe1787c\"\u003e\u003ccode\u003e8015e7e\u003c/code\u003e\u003c/a\u003e\nchore: update googleapis commit at Fri Oct 3 02:28:22 UTC 2025 (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3923\"\u003e#3923\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/48075a80cea71fd3bc7697bca106633fb433f8a1\"\u003e\u003ccode\u003e48075a8\u003c/code\u003e\u003c/a\u003e\nchore: Upper bound file deps change has chore type (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3949\"\u003e#3949\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/1d7466332b5dc13fde6ed687247873135a5fa919\"\u003e\u003ccode\u003e1d74663\u003c/code\u003e\u003c/a\u003e\ndeps: update google auth library dependencies to v1.40.0 (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3945\"\u003e#3945\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/7fb4f155eef478c1a66bc2f1fdecd7565d225b3e\"\u003e\u003ccode\u003e7fb4f15\u003c/code\u003e\u003c/a\u003e\ndeps: Upgrade Google Http Java Client to v2.0.2 (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3946\"\u003e#3946\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/feabef32c4c45be0fb1db3615568365b902ece24\"\u003e\u003ccode\u003efeabef3\u003c/code\u003e\u003c/a\u003e\nfeat(librariangen): add bazel package (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3940\"\u003e#3940\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/8d6c1f915ba5f0c4ac9b89120e63dddd62e37a22\"\u003e\u003ccode\u003e8d6c1f9\u003c/code\u003e\u003c/a\u003e\ndeps: Bump Guava to v33.5.0 (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3943\"\u003e#3943\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/180b9a017e839d5f3c34a980d7c0706cac30a38c\"\u003e\u003ccode\u003e180b9a0\u003c/code\u003e\u003c/a\u003e\nbuild(deps): update dependency\ncom.google.cloud:google-cloud-shared-config to...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/3f548fbcee1b2fc3f9aff7d12977e7d364ecfcf9\"\u003e\u003ccode\u003e3f548fb\u003c/code\u003e\u003c/a\u003e\ndeps: update upper bound dependencies file (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3947\"\u003e#3947\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/a1b5ba3bec5d3facdb1b5550b82dcc1c3172bd8b\"\u003e\u003ccode\u003ea1b5ba3\u003c/code\u003e\u003c/a\u003e\nchore: Manage errorprone and j2objc versions in pom-parent (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3948\"\u003e#3948\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/compare/gax/v2.70.0...gax/v2.71.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.google.api.grpc:proto-google-common-protos\u0026package-manager\u003dmaven\u0026previous-version\u003d2.70.0\u0026new-version\u003d2.71.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "5dc3ea699a4b7f8e4799c8ee318b96c9a9cc4f31",
      "tree": "6858086b17aab89c4831d430d393345d35f4fce8",
      "parents": [
        "138e8521b17a2b83814b8714c7d8e0f94fe13656"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon May 11 07:58:24 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon May 11 07:58:24 2026 +0200"
      },
      "message": "MINOR: Bump com.github.luben:zstd-jni from 1.5.7-7 to 1.5.7-8 (#1132)\n\nBumps [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni)\nfrom 1.5.7-7 to 1.5.7-8.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/luben/zstd-jni/commit/0afb51a8420183cfb894063ea06cb08b91f63ce2\"\u003e\u003ccode\u003e0afb51a\u003c/code\u003e\u003c/a\u003e\nUse gcc on AIX\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/luben/zstd-jni/commit/1addabc11201bc2a33df8cbd4f90c0508a273d46\"\u003e\u003ccode\u003e1addabc\u003c/code\u003e\u003c/a\u003e\nv1.5.7-8\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/luben/zstd-jni/commit/3044e793cb449c0d55367a2232955136ee0d95f2\"\u003e\u003ccode\u003e3044e79\u003c/code\u003e\u003c/a\u003e\nMore validation\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/luben/zstd-jni/commit/8257354d97008c8cee736246bd45277e0998ce06\"\u003e\u003ccode\u003e8257354\u003c/code\u003e\u003c/a\u003e\nRemove the check for OSGI when trying to load from JAR\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/luben/zstd-jni/commit/702105065a4973e4faf179a32dd535e7ef64a93a\"\u003e\u003ccode\u003e7021050\u003c/code\u003e\u003c/a\u003e\nRevert \u0026quot;Test on RISE RISC-V runners\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/luben/zstd-jni/commit/9a1ed43541d6bd833eaa4c7537624e15fbc95151\"\u003e\u003ccode\u003e9a1ed43\u003c/code\u003e\u003c/a\u003e\nTest on RISE RISC-V runners\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/luben/zstd-jni/commit/92a338167cc6221b618f34e22010ec62ff2eea95\"\u003e\u003ccode\u003e92a3381\u003c/code\u003e\u003c/a\u003e\nignore .DS_Store\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/luben/zstd-jni/compare/v1.5.7-7...v1.5.7-8\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "138e8521b17a2b83814b8714c7d8e0f94fe13656",
      "tree": "963c8379a6b3b27d27cce5bfdb0091c81ee83a42",
      "parents": [
        "e5482cd63d2043c0e418f1adc7bcd1e5192c5078"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon May 11 05:20:41 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon May 11 05:20:41 2026 +0200"
      },
      "message": "MINOR: Bump com.fasterxml.jackson:jackson-bom from 2.21.2 to 2.21.3 (#1133)\n\nBumps\n[com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom)\nfrom 2.21.2 to 2.21.3.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/374fbd08ee91a6c91626bae1d6497df21c89b541\"\u003e\u003ccode\u003e374fbd0\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release jackson-bom-2.21.3\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/7059df78cc36832349acad026169ff890f4c718c\"\u003e\u003ccode\u003e7059df7\u003c/code\u003e\u003c/a\u003e\nPrep for 2.21.3 release\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/2fd60bdab3228f6b99dce81326d9fd7eaf587401\"\u003e\u003ccode\u003e2fd60bd\u003c/code\u003e\u003c/a\u003e\nMerge branch \u00272.20\u0027 into 2.21\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/b82a3640491f66be2e56bef377b5002cd9d1567b\"\u003e\u003ccode\u003eb82a364\u003c/code\u003e\u003c/a\u003e\nMerge branch \u00272.19\u0027 into 2.20\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/ef4e013e95fc64583b0a414711648a84fc50be46\"\u003e\u003ccode\u003eef4e013\u003c/code\u003e\u003c/a\u003e\nMerge branch \u00272.18\u0027 into 2.19\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/536ae51c1db9dfbfc8dda697ccfd6545cf626d2b\"\u003e\u003ccode\u003e536ae51\u003c/code\u003e\u003c/a\u003e\nPost-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/536c5339035643fdca46ddd947f253afd072f764\"\u003e\u003ccode\u003e536c533\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/426b778e5ea490d164e572a63319c7cf2f362f2f\"\u003e\u003ccode\u003e426b778\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release jackson-bom-2.18.7\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/a73cda9be3e57f29c53fea748f1f867eaa1457ab\"\u003e\u003ccode\u003ea73cda9\u003c/code\u003e\u003c/a\u003e\nPrep for 2.18.7 release\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/76b4a05087a9e42eb1b26f59d5b7028b0496da5e\"\u003e\u003ccode\u003e76b4a05\u003c/code\u003e\u003c/a\u003e\nPost-release dep version bump\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.21.2...jackson-bom-2.21.3\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "e5482cd63d2043c0e418f1adc7bcd1e5192c5078",
      "tree": "ea6895a30a52830e64f8a28634bbdc0aaf302745",
      "parents": [
        "0f0a58433b46004ff9869a2512beded177340bca"
      ],
      "author": {
        "name": "JB Onofré",
        "email": "jbonofre@apache.org",
        "time": "Sun May 10 08:15:56 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun May 10 08:15:56 2026 +0200"
      },
      "message": "MINOR: Fix Gandiva JNI build against Arrow C++ 24.0.0 (#1140)\n\nArrow C++ 24.0.0 introduced two breaking changes for the JNI build:\n\n1. `arrow::decimal()` was removed; replaced with `arrow::decimal128()`\nin the Gandiva JNI source.\n\n2. xsimd \u003e\u003d 14.0.0 is now a required dependency. The Docker image\u0027s\nvcpkg registry only ships xsimd 13.2.0, so the Linux JNI CMake\nconfiguration was failing. Fixed by passing `xsimd_SOURCE\u003dBUNDLED` to\nthe Arrow C++ CMake configure step so Arrow downloads and uses xsimd\n14.0.0 directly, and by passing the vcpkg toolchain file to the Arrow\nC++ configure step so other vcpkg-managed dependencies are still\nresolved correctly."
    },
    {
      "commit": "0f0a58433b46004ff9869a2512beded177340bca",
      "tree": "61bdc8074c685d23b805e85864b2f5a186e12db2",
      "parents": [
        "09038fbb578d38e98878359557b1e13dcb96b04f"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 27 06:17:22 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 27 06:17:22 2026 +0200"
      },
      "message": "MINOR: Bump io.grpc:grpc-bom from 1.79.0 to 1.80.0 (#1093)\n\nBumps [io.grpc:grpc-bom](https://github.com/grpc/grpc-java) from 1.79.0\nto 1.80.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/releases\"\u003eio.grpc:grpc-bom\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eV1.80.0\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eAPI Changes\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ecore: Added PickResult.copyWithSubchannel() and\nPickResult.copyWithStreamTracerFactory() to simplify updating PickResult\nwhile preserving metadata. Load balancing policies should now ensure\nForwardingSubchannel decorators are unwrapped before being returned in a\npick result. (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12658\"\u003e#12658\u003c/a\u003e)\n(eae16b251)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eBug Fixes\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ecore: Fixed the retry backoff jitter range to [0.8, 1.2] to align\nwith the gRPC A6 specification. Retries will now occur more consistently\naround the calculated backoff interval. (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12639\"\u003e#12639\u003c/a\u003e)\n(024fdd0ea)\ncore: Fixed a race condition in RetriableStream where inFlightSubStreams\ncounting could become inconsistent during concurrent retry and deadline\nevents. This ensures that client calls (such as blockingUnaryCall) do\nnot hang indefinitely and correctly receive a close signal. (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12649\"\u003e#12649\u003c/a\u003e)\n(73abb4854)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eImprovements\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eapi: Trigger R8\u0027s ServiceLoader optimization to reduce necessary\nconfiguration when using R8 Full Mode (470219f9c). This allows gRPC to\navoid reflection, and the need to specify -keeps for various class’s\nconstructors.\nUpgrade to protobuf 33.4 (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12615\"\u003e#12615\u003c/a\u003e)\n(50c18f183)\u003c/li\u003e\n\u003cli\u003ecronet: Introduced CRONET_READ_BUFFER_SIZE_KEY to allow customizing\nthe read buffer size per-stream via CallOptions. Increasing the buffer\nsize from the 4KB default can significantly improve performance for\nlarge messages by reducing JNI and context-switching overhead.\n(31fdb6c22)\u003c/li\u003e\n\u003cli\u003eapi: Moved FlagResetRule to api/testFixtures and updated\nManagedChannelRegistry to honor the GRPC_ENABLE_RFC3986_URIS feature\nflag. This ensures that target parsing is consistent across the library\nwhen the new URI parser is enabled. (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12608\"\u003e#12608\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eapi: Updated NameResolverRegistry to natively support io.grpc.Uri.\nThis is a foundational change that allows gRPC\u0027s name resolution system\nto handle URIs parsed with the new RFC 3986-compliant parser, ensuring\nmore robust target handling. (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12609\"\u003e#12609\u003c/a\u003e)\n(990348876)\u003c/li\u003e\n\u003cli\u003exds: Removed the GRPC_EXPERIMENTAL_XDS_SNI feature flag. SNI\ndetermination via xDS is now always enabled and follows gRFC A101, where\nSNI is derived from xDS configurations like auto_host_sni or\nUpstreamTlsContext.sni. This ensures that no SNI is sent if not\nexplicitly configured, unless the legacy channel authority fallback is\nenabled. (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12625\"\u003e#12625\u003c/a\u003e)\n(ac44e9681)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eNew Features\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ecore: pick_first shuffling now a weighted shuffle and observes\nweights from EDS (34dd29042). This finishes the \u003ca\nhref\u003d\"https://github.com/grpc/proposal/blob/master/A113-pick-first-weighted-shuffling.md\"\u003egRFC\nA113 pick_first: Weighted Random Shuffling\u003c/a\u003e support\u003c/li\u003e\n\u003cli\u003enetty: Added RFC 3986 support to the unix: name resolver. This\nenables proper parsing of Unix domain socket URIs, including correct\nhandling of query and fragment components in both hierarchical (e.g.,\nunix:///path) and opaque (e.g., unix:/path) formats. (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12659\"\u003e#12659\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eThanks to\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/becomeStar\"\u003e\u003ccode\u003e@​becomeStar\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/aymanm-google\"\u003e\u003ccode\u003e@​aymanm-google\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/PetitBaguette\"\u003e\u003ccode\u003e@​PetitBaguette\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/stagegrowth\"\u003e\u003ccode\u003e@​stagegrowth\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/wcchoi\"\u003e\u003ccode\u003e@​wcchoi\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/Gyuhyeok99\"\u003e\u003ccode\u003e@​Gyuhyeok99\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/6c231b4c534d887bc6407f8af52733d996f19819\"\u003e\u003ccode\u003e6c231b4\u003c/code\u003e\u003c/a\u003e\nBump version to 1.80.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/daf7a6c3c0496dce3f9d9c26aeae2479a3a4d7de\"\u003e\u003ccode\u003edaf7a6c\u003c/code\u003e\u003c/a\u003e\nUpdate README etc to reference 1.80.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/b7f9074e23fa543e9a804e20df8a8a656feb39ea\"\u003e\u003ccode\u003eb7f9074\u003c/code\u003e\u003c/a\u003e\nRevert \u0026quot;fix(xds): Allow and normalize trailing dot (FQDN) in\nmatchHostName (#...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/09a6e2ef6ebdbee4d3980d5ac6bd3e3e1c2d9755\"\u003e\u003ccode\u003e09a6e2e\u003c/code\u003e\u003c/a\u003e\nRevert \u0026quot;netty: Preserve early server handshake failure cause in\nlogs\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/31fdb6c2268b4b1c8ba6c995ee46c58e84a831aa\"\u003e\u003ccode\u003e31fdb6c\u003c/code\u003e\u003c/a\u003e\nAdd \u003ccode\u003eCRONET_READ_BUFFER_SIZE_KEY\u003c/code\u003e API to\nCronetClientStream\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/470219f9ca330887215d3192f72095aa844d84fb\"\u003e\u003ccode\u003e470219f\u003c/code\u003e\u003c/a\u003e\nTrigger R8\u0027s ServiceLoader optimization\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/50ead96f4718569782cc7a3f694c9aa755722bac\"\u003e\u003ccode\u003e50ead96\u003c/code\u003e\u003c/a\u003e\nnetty: Preserve early server handshake failure cause in logs\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/eae16b2517e294cde94c2a8b1171c0131fa7991a\"\u003e\u003ccode\u003eeae16b2\u003c/code\u003e\u003c/a\u003e\nunwrap ForwardingSubchannel during Picks (\u003ca\nhref\u003d\"https://redirect.github.com/grpc/grpc-java/issues/12658\"\u003e#12658\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/d9320eea62534e8a87319c1124a3a0f8443e43a8\"\u003e\u003ccode\u003ed9320ee\u003c/code\u003e\u003c/a\u003e\nnetty: Add RFC 3986 support to the \u0027unix:\u0027 name resolver.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/commit/d5536b34b26788993c9b0ae4212f22a35a9ecf3c\"\u003e\u003ccode\u003ed5536b3\u003c/code\u003e\u003c/a\u003e\nnetty: factor out some duplicated code into a helper method\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/grpc/grpc-java/compare/v1.79.0...v1.80.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "09038fbb578d38e98878359557b1e13dcb96b04f",
      "tree": "7c6c035c4f56fbacf38d5688e67e57dbc12bcc3a",
      "parents": [
        "980b5146b5c659e5a06c4592b59cef0f2514ea72"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 27 06:15:04 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 27 06:15:04 2026 +0200"
      },
      "message": "MINOR: Bump checker.framework.version from 3.55.1 to 4.0.0 (#1113)\n\nBumps `checker.framework.version` from 3.55.1 to 4.0.0.\nUpdates `org.checkerframework:checker-qual` from 3.55.1 to 4.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/releases\"\u003eorg.checkerframework:checker-qual\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 4.0.0 of the Checker Framework\u003c/h2\u003e\n\u003ch2\u003eVersion 4.0.0 (2026-04-07)\u003c/h2\u003e\n\u003ch3\u003eUser-visible changes\u003c/h3\u003e\n\u003cp\u003eTo run the Checker Framework, you need to use a JDK 17 or later\nversion of javac. That is, you need to use JDK 17 or later when\ncompiling your code.\u003c/p\u003e\n\u003cp\u003eThe Checker Framework can type-check any Java project, including\nprojects that compile to Java 8 or 11 bytecodes and run on JRE versions\n8 or 11. That is, your code can run under any release of Java, from Java\n8 onward.\u003c/p\u003e\n\u003cp\u003eThe type qualifiers and utility libraries in\n\u003ccode\u003echecker-qual.jar\u003c/code\u003e and \u003ccode\u003echecker-util.jar\u003c/code\u003e still\nuse Java 11 bytecode. Thus, they may be used in projects that run under\nJava 11 or later.\u003c/p\u003e\n\u003ch3\u003eChanges since version 3.0.0\u003c/h3\u003e\n\u003cp\u003eSince version 3.0.0, 91 authors have made over 4500 commits and\nclosed over 600 issues. Thanks to everyone who contributed!\u003c/p\u003e\n\u003cp\u003eNew checkers include:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eThe \u003ca\nhref\u003d\"https://checkerframework.org/manual/#index-checker\"\u003eIndex\nChecker\u003c/a\u003e warns about out-of-bounds accesses to arrays and\nstrings.\u003c/li\u003e\n\u003cli\u003eThe \u003ca\nhref\u003d\"https://checkerframework.org/manual/#initialized-fields-checker\"\u003eInitialized\nFields Checker\u003c/a\u003e warns if a constructor does not initialize a\nfield.\u003c/li\u003e\n\u003cli\u003eThe \u003ca\nhref\u003d\"https://checkerframework.org/manual/#resource-leak-checker\"\u003eResource\nLeak Checker\u003c/a\u003e guarantees that every resource is closed rather than\nleaked. Examples of resources are a channel, executor,\n\u003ccode\u003eExecutionControl\u003c/code\u003e, file, \u003ccode\u003eFileLock\u003c/code\u003e,\n\u003ccode\u003eFormatter\u003c/code\u003e, reader, \u003ccode\u003eScanner\u003c/code\u003e, socket, stream,\nwriter, etc.\u003c/li\u003e\n\u003cli\u003eThe \u003ca\nhref\u003d\"https://checkerframework.org/manual/#sql-quotes-checker\"\u003eSQL\nQuotes Checker\u003c/a\u003e helps prevent SQL injection vulnerabilities.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eNew command-line arguments include:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e-AskipFiles\u003c/code\u003e, \u003ccode\u003e-AonlyFiles\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AassumeSideEffectFree\u003c/code\u003e,\n\u003ccode\u003e-AassumeDeterministic\u003c/code\u003e, \u003ccode\u003e-AassumePure\u003c/code\u003e,\n\u003ccode\u003e-AassumePureGetters\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AuseConservativeDefaultsForUncheckedCode\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AignoreRawTypeArguments\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AwarnRedundantAnnotations\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-Ainfer\u003dajava\u003c/code\u003e, \u003ccode\u003e-AinferOutputDirectory\u003c/code\u003e,\n\u003ccode\u003e-AinferOutputOriginal\u003c/code\u003e,\n\u003ccode\u003e-AshowWpiFailedInferences\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AshowSuppressWarningsStrings\u003c/code\u003e,\n\u003ccode\u003e-AwarnUnneededSuppressionsExceptions\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AshowPrefixInWarningMessages\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AstubNoWarnIfNotFound\u003c/code\u003e, \u003ccode\u003e-AstubWarnNote\u003c/code\u003e,\n\u003ccode\u003e-AmergeStubsWithSource\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-Aonelinemsg\u003c/code\u003e, \u003ccode\u003e-AdumpOnErrors\u003c/code\u003e,\n\u003ccode\u003e-AexceptionLineSeparator\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-ApermitMissingJdk\u003c/code\u003e, \u003ccode\u003e-AparseAllJdk\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AslowTypecheckingSeconds\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-Aversion\u003c/code\u003e, \u003ccode\u003e-AprintGitProperties\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eYou can pass an option to only a particular checker (not all\ncheckers) by using an underscore prefix.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eOther improvements include thousands of enhancements and bug fixes --\ntoo many to list here.\u003c/p\u003e\n\u003ch3\u003eImplementation details\u003c/h3\u003e\n\u003cp\u003eAll previously-deprecated methods and classes have been removed. If\nyour project builds upon the Checker Framework, we suggest that you\nupgrade to version 3.55.1, resolve all the deprecation warnings, then\nupgrade to version 4.0.0.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md\"\u003eorg.checkerframework:checker-qual\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 4.0.0 (2026-04-07)\u003c/h2\u003e\n\u003ch3\u003eUser-visible changes\u003c/h3\u003e\n\u003cp\u003eTo run the Checker Framework, you need to use a JDK 17 or later\nversion of\njavac. That is, you need to use JDK 17 or later when compiling your\ncode.\u003c/p\u003e\n\u003cp\u003eThe Checker Framework can type-check any Java project, including\nprojects that\ncompile to Java 8 or 11 bytecodes and run on JRE versions 8 or 11. That\nis,\nyour code can run under any release of Java, from Java 8 onward.\u003c/p\u003e\n\u003cp\u003eThe type qualifiers and utility libraries in\n\u003ccode\u003echecker-qual.jar\u003c/code\u003e and\n\u003ccode\u003echecker-util.jar\u003c/code\u003e still use Java 11 bytecode. Thus, they may\nbe used in\nprojects that run under Java 11 or later.\u003c/p\u003e\n\u003ch3\u003eChanges since version 3.0.0\u003c/h3\u003e\n\u003cp\u003eSince version 3.0.0, 91 authors have made over 4500 commits and\nclosed over 600\nissues.  Thanks to everyone who contributed!\u003c/p\u003e\n\u003cp\u003eNew checkers include:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eThe \u003ca\nhref\u003d\"https://checkerframework.org/manual/#index-checker\"\u003eIndex\nChecker\u003c/a\u003e warns\nabout out-of-bounds accesses to arrays and strings.\u003c/li\u003e\n\u003cli\u003eThe \u003ca\nhref\u003d\"https://checkerframework.org/manual/#initialized-fields-checker\"\u003eInitialized\nFields\nChecker\u003c/a\u003e\nwarns if a constructor does not initialize a field.\u003c/li\u003e\n\u003cli\u003eThe \u003ca\nhref\u003d\"https://checkerframework.org/manual/#resource-leak-checker\"\u003eResource\nLeak\nChecker\u003c/a\u003e\nguarantees that every resource is closed rather than leaked. Examples of\nresources are a channel, executor, \u003ccode\u003eExecutionControl\u003c/code\u003e, file,\n\u003ccode\u003eFileLock\u003c/code\u003e,\n\u003ccode\u003eFormatter\u003c/code\u003e, reader, \u003ccode\u003eScanner\u003c/code\u003e, socket, stream,\nwriter, etc.\u003c/li\u003e\n\u003cli\u003eThe \u003ca\nhref\u003d\"https://checkerframework.org/manual/#sql-quotes-checker\"\u003eSQL\nQuotes\nChecker\u003c/a\u003e helps\nprevent SQL injection vulnerabilities.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eNew command-line arguments include:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e-AskipFiles\u003c/code\u003e, \u003ccode\u003e-AonlyFiles\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AassumeSideEffectFree\u003c/code\u003e,\n\u003ccode\u003e-AassumeDeterministic\u003c/code\u003e, \u003ccode\u003e-AassumePure\u003c/code\u003e,\n\u003ccode\u003e-AassumePureGetters\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AuseConservativeDefaultsForUncheckedCode\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AignoreRawTypeArguments\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AwarnRedundantAnnotations\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-Ainfer\u003dajava\u003c/code\u003e, \u003ccode\u003e-AinferOutputDirectory\u003c/code\u003e,\n\u003ccode\u003e-AinferOutputOriginal\u003c/code\u003e,\n\u003ccode\u003e-AshowWpiFailedInferences\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AshowSuppressWarningsStrings\u003c/code\u003e,\n\u003ccode\u003e-AwarnUnneededSuppressionsExceptions\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AshowPrefixInWarningMessages\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AstubNoWarnIfNotFound\u003c/code\u003e, \u003ccode\u003e-AstubWarnNote\u003c/code\u003e,\n\u003ccode\u003e-AmergeStubsWithSource\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-Aonelinemsg\u003c/code\u003e, \u003ccode\u003e-AdumpOnErrors\u003c/code\u003e,\n\u003ccode\u003e-AexceptionLineSeparator\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-ApermitMissingJdk\u003c/code\u003e, \u003ccode\u003e-AparseAllJdk\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AslowTypecheckingSeconds\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/479d0875daa271447e2822c657896b5f9d02ce24\"\u003e\u003ccode\u003e479d087\u003c/code\u003e\u003c/a\u003e\nnew release 4.0.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/bfff75751f4fa4094b7d3015c4b2cfbc2893fbc5\"\u003e\u003ccode\u003ebfff757\u003c/code\u003e\u003c/a\u003e\nPut the manual in the right place.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/c532f6d12fd5352610f70215f010786e9a2e9924\"\u003e\u003ccode\u003ec532f6d\u003c/code\u003e\u003c/a\u003e\nPut a copy of manual.pdf at top level of website as expected.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/5e53e6cfd1e5535623ea260342391037106778ec\"\u003e\u003ccode\u003e5e53e6c\u003c/code\u003e\u003c/a\u003e\nNo closed issues.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/e67ae858ed36f81ac586fbf42821fa3a483e7f23\"\u003e\u003ccode\u003ee67ae85\u003c/code\u003e\u003c/a\u003e\nPrep for release.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/4192d0d88bc272c571a8dd3454d499982cd0ee42\"\u003e\u003ccode\u003e4192d0d\u003c/code\u003e\u003c/a\u003e\nRemove file SKIP-REQUIRE-JAVADOC\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/7d6d85687d2298dbe85d59692ab85d03566a29e7\"\u003e\u003ccode\u003e7d6d856\u003c/code\u003e\u003c/a\u003e\nRemove or update references to JDK 8-16\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/b1e3761bbf0dfb1185d7e8e0b850ef97cafd5ea8\"\u003e\u003ccode\u003eb1e3761\u003c/code\u003e\u003c/a\u003e\nRemove all deprecated methods\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/a1b30642b07d64603a9ec9ef093f910e5be0bf41\"\u003e\u003ccode\u003ea1b3064\u003c/code\u003e\u003c/a\u003e\nDirectly use Java 17 and below Javac APIs. (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7582\"\u003e#7582\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/4efdbdbbda3ac5230bcae57341098816aa71abfb\"\u003e\u003ccode\u003e4efdbdb\u003c/code\u003e\u003c/a\u003e\nRemove support for Java 8 from scripts and build scripts. (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7575\"\u003e#7575\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/compare/checker-framework-3.55.1...checker-framework-4.0.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.checkerframework:checker` from 3.55.1 to 4.0.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/releases\"\u003eorg.checkerframework:checker\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 4.0.0 of the Checker Framework\u003c/h2\u003e\n\u003ch2\u003eVersion 4.0.0 (2026-04-07)\u003c/h2\u003e\n\u003ch3\u003eUser-visible changes\u003c/h3\u003e\n\u003cp\u003eTo run the Checker Framework, you need to use a JDK 17 or later\nversion of javac. That is, you need to use JDK 17 or later when\ncompiling your code.\u003c/p\u003e\n\u003cp\u003eThe Checker Framework can type-check any Java project, including\nprojects that compile to Java 8 or 11 bytecodes and run on JRE versions\n8 or 11. That is, your code can run under any release of Java, from Java\n8 onward.\u003c/p\u003e\n\u003cp\u003eThe type qualifiers and utility libraries in\n\u003ccode\u003echecker-qual.jar\u003c/code\u003e and \u003ccode\u003echecker-util.jar\u003c/code\u003e still\nuse Java 11 bytecode. Thus, they may be used in projects that run under\nJava 11 or later.\u003c/p\u003e\n\u003ch3\u003eChanges since version 3.0.0\u003c/h3\u003e\n\u003cp\u003eSince version 3.0.0, 91 authors have made over 4500 commits and\nclosed over 600 issues. Thanks to everyone who contributed!\u003c/p\u003e\n\u003cp\u003eNew checkers include:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eThe \u003ca\nhref\u003d\"https://checkerframework.org/manual/#index-checker\"\u003eIndex\nChecker\u003c/a\u003e warns about out-of-bounds accesses to arrays and\nstrings.\u003c/li\u003e\n\u003cli\u003eThe \u003ca\nhref\u003d\"https://checkerframework.org/manual/#initialized-fields-checker\"\u003eInitialized\nFields Checker\u003c/a\u003e warns if a constructor does not initialize a\nfield.\u003c/li\u003e\n\u003cli\u003eThe \u003ca\nhref\u003d\"https://checkerframework.org/manual/#resource-leak-checker\"\u003eResource\nLeak Checker\u003c/a\u003e guarantees that every resource is closed rather than\nleaked. Examples of resources are a channel, executor,\n\u003ccode\u003eExecutionControl\u003c/code\u003e, file, \u003ccode\u003eFileLock\u003c/code\u003e,\n\u003ccode\u003eFormatter\u003c/code\u003e, reader, \u003ccode\u003eScanner\u003c/code\u003e, socket, stream,\nwriter, etc.\u003c/li\u003e\n\u003cli\u003eThe \u003ca\nhref\u003d\"https://checkerframework.org/manual/#sql-quotes-checker\"\u003eSQL\nQuotes Checker\u003c/a\u003e helps prevent SQL injection vulnerabilities.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eNew command-line arguments include:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e-AskipFiles\u003c/code\u003e, \u003ccode\u003e-AonlyFiles\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AassumeSideEffectFree\u003c/code\u003e,\n\u003ccode\u003e-AassumeDeterministic\u003c/code\u003e, \u003ccode\u003e-AassumePure\u003c/code\u003e,\n\u003ccode\u003e-AassumePureGetters\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AuseConservativeDefaultsForUncheckedCode\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AignoreRawTypeArguments\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AwarnRedundantAnnotations\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-Ainfer\u003dajava\u003c/code\u003e, \u003ccode\u003e-AinferOutputDirectory\u003c/code\u003e,\n\u003ccode\u003e-AinferOutputOriginal\u003c/code\u003e,\n\u003ccode\u003e-AshowWpiFailedInferences\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AshowSuppressWarningsStrings\u003c/code\u003e,\n\u003ccode\u003e-AwarnUnneededSuppressionsExceptions\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AshowPrefixInWarningMessages\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AstubNoWarnIfNotFound\u003c/code\u003e, \u003ccode\u003e-AstubWarnNote\u003c/code\u003e,\n\u003ccode\u003e-AmergeStubsWithSource\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-Aonelinemsg\u003c/code\u003e, \u003ccode\u003e-AdumpOnErrors\u003c/code\u003e,\n\u003ccode\u003e-AexceptionLineSeparator\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-ApermitMissingJdk\u003c/code\u003e, \u003ccode\u003e-AparseAllJdk\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AslowTypecheckingSeconds\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-Aversion\u003c/code\u003e, \u003ccode\u003e-AprintGitProperties\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eYou can pass an option to only a particular checker (not all\ncheckers) by using an underscore prefix.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eOther improvements include thousands of enhancements and bug fixes --\ntoo many to list here.\u003c/p\u003e\n\u003ch3\u003eImplementation details\u003c/h3\u003e\n\u003cp\u003eAll previously-deprecated methods and classes have been removed. If\nyour project builds upon the Checker Framework, we suggest that you\nupgrade to version 3.55.1, resolve all the deprecation warnings, then\nupgrade to version 4.0.0.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md\"\u003eorg.checkerframework:checker\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 4.0.0 (2026-04-07)\u003c/h2\u003e\n\u003ch3\u003eUser-visible changes\u003c/h3\u003e\n\u003cp\u003eTo run the Checker Framework, you need to use a JDK 17 or later\nversion of\njavac. That is, you need to use JDK 17 or later when compiling your\ncode.\u003c/p\u003e\n\u003cp\u003eThe Checker Framework can type-check any Java project, including\nprojects that\ncompile to Java 8 or 11 bytecodes and run on JRE versions 8 or 11. That\nis,\nyour code can run under any release of Java, from Java 8 onward.\u003c/p\u003e\n\u003cp\u003eThe type qualifiers and utility libraries in\n\u003ccode\u003echecker-qual.jar\u003c/code\u003e and\n\u003ccode\u003echecker-util.jar\u003c/code\u003e still use Java 11 bytecode. Thus, they may\nbe used in\nprojects that run under Java 11 or later.\u003c/p\u003e\n\u003ch3\u003eChanges since version 3.0.0\u003c/h3\u003e\n\u003cp\u003eSince version 3.0.0, 91 authors have made over 4500 commits and\nclosed over 600\nissues.  Thanks to everyone who contributed!\u003c/p\u003e\n\u003cp\u003eNew checkers include:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eThe \u003ca\nhref\u003d\"https://checkerframework.org/manual/#index-checker\"\u003eIndex\nChecker\u003c/a\u003e warns\nabout out-of-bounds accesses to arrays and strings.\u003c/li\u003e\n\u003cli\u003eThe \u003ca\nhref\u003d\"https://checkerframework.org/manual/#initialized-fields-checker\"\u003eInitialized\nFields\nChecker\u003c/a\u003e\nwarns if a constructor does not initialize a field.\u003c/li\u003e\n\u003cli\u003eThe \u003ca\nhref\u003d\"https://checkerframework.org/manual/#resource-leak-checker\"\u003eResource\nLeak\nChecker\u003c/a\u003e\nguarantees that every resource is closed rather than leaked. Examples of\nresources are a channel, executor, \u003ccode\u003eExecutionControl\u003c/code\u003e, file,\n\u003ccode\u003eFileLock\u003c/code\u003e,\n\u003ccode\u003eFormatter\u003c/code\u003e, reader, \u003ccode\u003eScanner\u003c/code\u003e, socket, stream,\nwriter, etc.\u003c/li\u003e\n\u003cli\u003eThe \u003ca\nhref\u003d\"https://checkerframework.org/manual/#sql-quotes-checker\"\u003eSQL\nQuotes\nChecker\u003c/a\u003e helps\nprevent SQL injection vulnerabilities.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eNew command-line arguments include:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e-AskipFiles\u003c/code\u003e, \u003ccode\u003e-AonlyFiles\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AassumeSideEffectFree\u003c/code\u003e,\n\u003ccode\u003e-AassumeDeterministic\u003c/code\u003e, \u003ccode\u003e-AassumePure\u003c/code\u003e,\n\u003ccode\u003e-AassumePureGetters\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AuseConservativeDefaultsForUncheckedCode\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AignoreRawTypeArguments\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AwarnRedundantAnnotations\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-Ainfer\u003dajava\u003c/code\u003e, \u003ccode\u003e-AinferOutputDirectory\u003c/code\u003e,\n\u003ccode\u003e-AinferOutputOriginal\u003c/code\u003e,\n\u003ccode\u003e-AshowWpiFailedInferences\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AshowSuppressWarningsStrings\u003c/code\u003e,\n\u003ccode\u003e-AwarnUnneededSuppressionsExceptions\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AshowPrefixInWarningMessages\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AstubNoWarnIfNotFound\u003c/code\u003e, \u003ccode\u003e-AstubWarnNote\u003c/code\u003e,\n\u003ccode\u003e-AmergeStubsWithSource\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-Aonelinemsg\u003c/code\u003e, \u003ccode\u003e-AdumpOnErrors\u003c/code\u003e,\n\u003ccode\u003e-AexceptionLineSeparator\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-ApermitMissingJdk\u003c/code\u003e, \u003ccode\u003e-AparseAllJdk\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e-AslowTypecheckingSeconds\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/479d0875daa271447e2822c657896b5f9d02ce24\"\u003e\u003ccode\u003e479d087\u003c/code\u003e\u003c/a\u003e\nnew release 4.0.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/bfff75751f4fa4094b7d3015c4b2cfbc2893fbc5\"\u003e\u003ccode\u003ebfff757\u003c/code\u003e\u003c/a\u003e\nPut the manual in the right place.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/c532f6d12fd5352610f70215f010786e9a2e9924\"\u003e\u003ccode\u003ec532f6d\u003c/code\u003e\u003c/a\u003e\nPut a copy of manual.pdf at top level of website as expected.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/5e53e6cfd1e5535623ea260342391037106778ec\"\u003e\u003ccode\u003e5e53e6c\u003c/code\u003e\u003c/a\u003e\nNo closed issues.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/e67ae858ed36f81ac586fbf42821fa3a483e7f23\"\u003e\u003ccode\u003ee67ae85\u003c/code\u003e\u003c/a\u003e\nPrep for release.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/4192d0d88bc272c571a8dd3454d499982cd0ee42\"\u003e\u003ccode\u003e4192d0d\u003c/code\u003e\u003c/a\u003e\nRemove file SKIP-REQUIRE-JAVADOC\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/7d6d85687d2298dbe85d59692ab85d03566a29e7\"\u003e\u003ccode\u003e7d6d856\u003c/code\u003e\u003c/a\u003e\nRemove or update references to JDK 8-16\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/b1e3761bbf0dfb1185d7e8e0b850ef97cafd5ea8\"\u003e\u003ccode\u003eb1e3761\u003c/code\u003e\u003c/a\u003e\nRemove all deprecated methods\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/a1b30642b07d64603a9ec9ef093f910e5be0bf41\"\u003e\u003ccode\u003ea1b3064\u003c/code\u003e\u003c/a\u003e\nDirectly use Java 17 and below Javac APIs. (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7582\"\u003e#7582\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/4efdbdbbda3ac5230bcae57341098816aa71abfb\"\u003e\u003ccode\u003e4efdbdb\u003c/code\u003e\u003c/a\u003e\nRemove support for Java 8 from scripts and build scripts. (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7575\"\u003e#7575\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/compare/checker-framework-3.55.1...checker-framework-4.0.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "980b5146b5c659e5a06c4592b59cef0f2514ea72",
      "tree": "1f30fe959384ff82f35f4319f52b53afa57c9633",
      "parents": [
        "3dca92baf2a806802e437f84bfe06947d4433343"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Apr 21 15:57:26 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Apr 21 15:57:26 2026 +0200"
      },
      "message": "MINOR: Bump org.bouncycastle:bcpkix-jdk18on from 1.83 to 1.84 (#1122)\n\nBumps\n[org.bouncycastle:bcpkix-jdk18on](https://github.com/bcgit/bc-java) from\n1.83 to 1.84.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html\"\u003eorg.bouncycastle:bcpkix-jdk18on\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/bcgit/bc-java/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dorg.bouncycastle:bcpkix-jdk18on\u0026package-manager\u003dmaven\u0026previous-version\u003d1.83\u0026new-version\u003d1.84)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "3dca92baf2a806802e437f84bfe06947d4433343",
      "tree": "20a918612c3f62a62d1b64cef6e40b36c291bf5c",
      "parents": [
        "8d3e8dd2f01f7ddc22cda5aa04cde30eb5f6d308"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Apr 21 15:46:36 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Apr 21 15:46:36 2026 +0200"
      },
      "message": "MINOR: Bump com.google.guava:guava-bom from 33.5.0-jre to 33.6.0-jre (#1123)\n\nBumps [com.google.guava:guava-bom](https://github.com/google/guava) from\n33.5.0-jre to 33.6.0-jre.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/google/guava/releases\"\u003ecom.google.guava:guava-bom\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e33.6.0\u003c/h2\u003e\n\u003ch3\u003eMaven\u003c/h3\u003e\n\u003cpre lang\u003d\"xml\"\u003e\u003ccode\u003e\u0026lt;dependency\u0026gt;\n  \u0026lt;groupId\u0026gt;com.google.guava\u0026lt;/groupId\u0026gt;\n  \u0026lt;artifactId\u0026gt;guava\u0026lt;/artifactId\u0026gt;\n  \u0026lt;version\u0026gt;33.6.0-jre\u0026lt;/version\u0026gt;\n  \u0026lt;!-- or, for Android: --\u0026gt;\n  \u0026lt;version\u0026gt;33.6.0-android\u0026lt;/version\u0026gt;\n\u0026lt;/dependency\u0026gt;\n\u003c/code\u003e\u003c/pre\u003e\n\u003ch3\u003eJar files\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://repo1.maven.org/maven2/com/google/guava/guava/33.6.0-jre/guava-33.6.0-jre.jar\"\u003e33.6.0-jre.jar\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://repo1.maven.org/maven2/com/google/guava/guava/33.6.0-android/guava-33.6.0-android.jar\"\u003e33.6.0-android.jar\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eGuava requires \u003ca\nhref\u003d\"https://github.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies\"\u003eone\nruntime dependency\u003c/a\u003e, which you can download here:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar\"\u003efailureaccess-1.0.3.jar\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eJavadoc\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://guava.dev/releases/33.6.0-jre/api/docs/\"\u003e33.6.0-jre\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://guava.dev/releases/33.6.0-android/api/docs/\"\u003e33.6.0-android\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eJDiff\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://guava.dev/releases/33.6.0-jre/api/diffs/\"\u003e33.6.0-jre vs.\n33.5.0-jre\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://guava.dev/releases/33.6.0-android/api/diffs/\"\u003e33.6.0-android\nvs. 33.5.0-android\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://guava.dev/releases/33.6.0-android/api/androiddiffs/\"\u003e33.6.0-android\nvs. 33.6.0-jre\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChangelog\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMigrated some classes from \u003ccode\u003efinalize()\u003c/code\u003e to\n\u003ccode\u003ePhantomReference\u003c/code\u003e in preparation for \u003ca\nhref\u003d\"https://openjdk.org/jeps/421\"\u003ethe removal of finalization\u003c/a\u003e.\n(786b619dd6, 7c6b17c, aeef90988d)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ecache\u003c/code\u003e: Deprecated \u003ccode\u003eCacheBuilder\u003c/code\u003e APIs that\nuse \u003ccode\u003eTimeUnit\u003c/code\u003e in favor of those that use\n\u003ccode\u003eDuration\u003c/code\u003e. (73f8b0bb84)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ecollect\u003c/code\u003e: Added \u003ccode\u003etoImmutableSortedMap\u003c/code\u003e\ncollectors that use the natural comparator. (64d70b9f94)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ecollect\u003c/code\u003e: Changed \u003ccode\u003eConcurrentHashMultiset\u003c/code\u003e,\n\u003ccode\u003eImmutableMap\u003c/code\u003e and \u003ccode\u003eTreeMultiset\u003c/code\u003e deserialization\nto \u003ca href\u003d\"https://openjdk.org/jeps/500\"\u003eavoid mutating\n\u003ccode\u003efinal\u003c/code\u003e fields\u003c/a\u003e. In extremely unlikely scenarios in which\nan instance of that type contains an object that refers back to that\ninstance, this could lead to \u003ca\nhref\u003d\"https://docs.oracle.com/en/java/javase/26/docs/specs/serialization/input.html#the-readresolve-method:~:text\u003din%20cases%20where%20an%20object%20being%20serialized%20nominates%20a%20replacement%20object%20whose%20object%20graph%20has%20a%20reference%20to%20the%20original%20object\"\u003ea\nbroken instance\u003c/a\u003e that throws \u003ccode\u003eNullPointerException\u003c/code\u003e when\nused. (8240c7e596, 046468055f)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003egraph\u003c/code\u003e: Removed \u003ccode\u003e@Beta\u003c/code\u003e from all APIs in the\npackage. (dae9566b73)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003egraph\u003c/code\u003e: Added support to\n\u003ccode\u003eGraphs.transitiveClosure()\u003c/code\u003e for different strategies for\nadding self-loops. (2e13df25b2)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003egraph\u003c/code\u003e: Added an \u003ccode\u003easNetwork()\u003c/code\u003e view to\n\u003ccode\u003eGraph\u003c/code\u003e and \u003ccode\u003eValueGraph\u003c/code\u003e. (909c593c61)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ehash\u003c/code\u003e: Added \u003ccode\u003eBloomFilter.serializedSize()\u003c/code\u003e.\n(df9bcc251a)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003enet\u003c/code\u003e: Added \u003ccode\u003eHttpHeaders.CDN_CACHE_CONTROL\u003c/code\u003e.\n(75331b5030)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/google/guava/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.google.guava:guava-bom\u0026package-manager\u003dmaven\u0026previous-version\u003d33.5.0-jre\u0026new-version\u003d33.6.0-jre)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "8d3e8dd2f01f7ddc22cda5aa04cde30eb5f6d308",
      "tree": "e2aded2799bf89f129202b464d6ee6be92dac632",
      "parents": [
        "0d55ba78aeed3e6b28e3d65ced37c360f5e0ed4e"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Apr 21 15:18:55 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Apr 21 15:18:55 2026 +0200"
      },
      "message": "MINOR: Bump com.google.api.grpc:proto-google-common-protos from 2.67.0 to 2.70.0 (#1124)\n\nBumps\n[com.google.api.grpc:proto-google-common-protos](https://github.com/googleapis/sdk-platform-java)\nfrom 2.67.0 to 2.70.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/releases\"\u003ecom.google.api.grpc:proto-google-common-protos\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.68.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/compare/v2.67.0...v2.68.0\"\u003e2.68.0\u003c/a\u003e\n(2026-03-17)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd client request duration metric. (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4132\"\u003e#4132\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/6a763979c2c5427f0a7ba23708fb7948520662d8\"\u003e6a76397\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd more attributes to golden signals metrics. (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4135\"\u003e#4135\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/59d0624ec5a85580a503f719897597161f529e3f\"\u003e59d0624\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egax-httpjson:\u003c/strong\u003e add HttpJsonErrorParser utility (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4137\"\u003e#4137\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/a1b7565ef752259d79d3f1288b85120c6ac7452b\"\u003ea1b7565\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egenerator:\u003c/strong\u003e add extra allowed modules that will not\nbe removed from the monorepo if they are present (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4124\"\u003e#4124\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/774fe6ede6bf25e150fb405dfe3bac9d85e21169\"\u003e774fe6e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eo11y:\u003c/strong\u003e introduce \u003ccode\u003egcp.client.repo\u003c/code\u003e and\n\u003ccode\u003egcp.client.artifact\u003c/code\u003e attributes (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4120\"\u003e#4120\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/105f644209cb78845a423d949cb7633a86d07868\"\u003e105f644\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eo11y:\u003c/strong\u003e Introduce \u003ccode\u003erpc.system.name\u003c/code\u003e and\n\u003ccode\u003erpc.method\u003c/code\u003e in gRPC (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4121\"\u003e#4121\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/7ab6d2e5784f264558b7aca6f23e771361dbea3a\"\u003e7ab6d2e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eo11y:\u003c/strong\u003e introduce server.port attribute (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4128\"\u003e#4128\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/56aa3438393e1992bb8f688291fb12030ec9bc0e\"\u003e56aa343\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd null checks for ApiTracerFactory in ClientContext (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4122\"\u003e#4122\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/4b3dbe29b32dd0fba6c7a5f4a08fafa2798eeca5\"\u003e4b3dbe2\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDecrease log level for directpath warnings outside GCE (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4139\"\u003e#4139\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/c9651e7fa1501726798c0e38365e4b7c0acabc55\"\u003ec9651e7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egax-grpc:\u003c/strong\u003e add pick_first fallback to direct path\nservice config (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4143\"\u003e#4143\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/b150fe9ccfd5a97319388be4079699722aa033dc\"\u003eb150fe9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePopulate method level attributes in metrics recording (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4149\"\u003e#4149\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/7b7e6c99251e1aecb1831084f5576aa9e8e48930\"\u003e7b7e6c9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esuppress warnings in generated projects for non-idiomatic durations\n(\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4119\"\u003e#4119\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/4206e6ed7546d6b8330dcb8dc29179e59677ccd3\"\u003e4206e6e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse ServiceName + MethodName as the regex for Otel (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/2543\"\u003e#2543\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/b9ae73fba59ba32e9688d11c2b3db51fe0d68d8d\"\u003eb9ae73f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ehermetic_build:\u003c/strong\u003e fix config field name in readme (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4130\"\u003e#4130\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/a0c8f67f5a425d9a365b8e451b18add2c5947a11\"\u003ea0c8f67\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/blob/main/CHANGELOG.md\"\u003ecom.google.api.grpc:proto-google-common-protos\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/compare/v2.67.0...v2.68.0\"\u003e2.68.0\u003c/a\u003e\n(2026-03-17)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd client request duration metric. (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4132\"\u003e#4132\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/6a763979c2c5427f0a7ba23708fb7948520662d8\"\u003e6a76397\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd more attributes to golden signals metrics. (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4135\"\u003e#4135\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/59d0624ec5a85580a503f719897597161f529e3f\"\u003e59d0624\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egax-httpjson:\u003c/strong\u003e add HttpJsonErrorParser utility (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4137\"\u003e#4137\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/a1b7565ef752259d79d3f1288b85120c6ac7452b\"\u003ea1b7565\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egenerator:\u003c/strong\u003e add extra allowed modules that will not\nbe removed from the monorepo if they are present (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4124\"\u003e#4124\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/774fe6ede6bf25e150fb405dfe3bac9d85e21169\"\u003e774fe6e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eo11y:\u003c/strong\u003e introduce \u003ccode\u003egcp.client.repo\u003c/code\u003e and\n\u003ccode\u003egcp.client.artifact\u003c/code\u003e attributes (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4120\"\u003e#4120\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/105f644209cb78845a423d949cb7633a86d07868\"\u003e105f644\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eo11y:\u003c/strong\u003e Introduce \u003ccode\u003erpc.system.name\u003c/code\u003e and\n\u003ccode\u003erpc.method\u003c/code\u003e in gRPC (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4121\"\u003e#4121\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/7ab6d2e5784f264558b7aca6f23e771361dbea3a\"\u003e7ab6d2e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eo11y:\u003c/strong\u003e introduce server.port attribute (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4128\"\u003e#4128\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/56aa3438393e1992bb8f688291fb12030ec9bc0e\"\u003e56aa343\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd null checks for ApiTracerFactory in ClientContext (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4122\"\u003e#4122\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/4b3dbe29b32dd0fba6c7a5f4a08fafa2798eeca5\"\u003e4b3dbe2\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDecrease log level for directpath warnings outside GCE (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4139\"\u003e#4139\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/c9651e7fa1501726798c0e38365e4b7c0acabc55\"\u003ec9651e7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003egax-grpc:\u003c/strong\u003e add pick_first fallback to direct path\nservice config (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4143\"\u003e#4143\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/b150fe9ccfd5a97319388be4079699722aa033dc\"\u003eb150fe9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePopulate method level attributes in metrics recording (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4149\"\u003e#4149\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/7b7e6c99251e1aecb1831084f5576aa9e8e48930\"\u003e7b7e6c9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003esuppress warnings in generated projects for non-idiomatic durations\n(\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4119\"\u003e#4119\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/4206e6ed7546d6b8330dcb8dc29179e59677ccd3\"\u003e4206e6e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse ServiceName + MethodName as the regex for Otel (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/2543\"\u003e#2543\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/b9ae73fba59ba32e9688d11c2b3db51fe0d68d8d\"\u003eb9ae73f\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ehermetic_build:\u003c/strong\u003e fix config field name in readme (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4130\"\u003e#4130\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/a0c8f67f5a425d9a365b8e451b18add2c5947a11\"\u003ea0c8f67\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/27fe524365a5bcecfab71165c3d2ec95ff85b5a4\"\u003e\u003ccode\u003e27fe524\u003c/code\u003e\u003c/a\u003e\nchore(main): release 2.62.0 (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3884\"\u003e#3884\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/a660a869d2edbfc4b98e4f06c4885f520d45d869\"\u003e\u003ccode\u003ea660a86\u003c/code\u003e\u003c/a\u003e\nchore: Update the upper bound dependencies file (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3886\"\u003e#3886\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/592e899c516288b0a60b69525ba12d6f29bc6200\"\u003e\u003ccode\u003e592e899\u003c/code\u003e\u003c/a\u003e\nfeat: Set sampledToLocalTracing flag to true for all gRPC\nMethodDescriptors (...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/fc80c7b6e0e2b1d1100cc836a864a128bee426e5\"\u003e\u003ccode\u003efc80c7b\u003c/code\u003e\u003c/a\u003e\nchore: Fix dependency CI tests (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3883\"\u003e#3883\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/210464d5409fea56967a28f7eafe76e71a2ef5ef\"\u003e\u003ccode\u003e210464d\u003c/code\u003e\u003c/a\u003e\nci: Test upper bound dependenices file in Github CI (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3877\"\u003e#3877\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/f392d901bb77402972ee3c75e84a519b13382ade\"\u003e\u003ccode\u003ef392d90\u003c/code\u003e\u003c/a\u003e\nchore: Update auto triage guidelines (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3882\"\u003e#3882\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/7b1a15149db9106cfd4b6a65ed93b92432baf461\"\u003e\u003ccode\u003e7b1a151\u003c/code\u003e\u003c/a\u003e\nci: Fix gemini cli issues triage (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3881\"\u003e#3881\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/00195e637101037eb16d544a770754459173e7e7\"\u003e\u003ccode\u003e00195e6\u003c/code\u003e\u003c/a\u003e\nchore: Enable Gemini CLI Github Actions (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3880\"\u003e#3880\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/c34e3848ad771c66d30a9dd38322d23286931277\"\u003e\u003ccode\u003ec34e384\u003c/code\u003e\u003c/a\u003e\nchore: Add initial GEMINI.md file (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3879\"\u003e#3879\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/48792bcb295a151797dfdeaeb0ed33a2940603ad\"\u003e\u003ccode\u003e48792bc\u003c/code\u003e\u003c/a\u003e\nchore(main): release 2.61.1-SNAPSHOT (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/3876\"\u003e#3876\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/compare/v2.67.0...gax/v2.70.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.google.api.grpc:proto-google-common-protos\u0026package-manager\u003dmaven\u0026previous-version\u003d2.67.0\u0026new-version\u003d2.70.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "0d55ba78aeed3e6b28e3d65ced37c360f5e0ed4e",
      "tree": "d8430451f31d9deba634052d82d9caa22176f205",
      "parents": [
        "4ca6017bdd8590a6ad0a0a4154d993ec0c416076"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 13 17:37:53 2026 +0900"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 13 17:37:53 2026 +0900"
      },
      "message": "MINOR: [CI] Bump actions/upload-artifact from 7.0.0 to 7.0.1 (#1111)\n\nBumps\n[actions/upload-artifact](https://github.com/actions/upload-artifact)\nfrom 7.0.0 to 7.0.1.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/upload-artifact/releases\"\u003eactions/upload-artifact\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.0.1\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate the readme with direct upload details by \u003ca\nhref\u003d\"https://github.com/danwkennedy\"\u003e\u003ccode\u003e@​danwkennedy\u003c/code\u003e\u003c/a\u003e in\n\u003ca\nhref\u003d\"https://redirect.github.com/actions/upload-artifact/pull/795\"\u003eactions/upload-artifact#795\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReadme: bump all the example versions to v7 by \u003ca\nhref\u003d\"https://github.com/danwkennedy\"\u003e\u003ccode\u003e@​danwkennedy\u003c/code\u003e\u003c/a\u003e in\n\u003ca\nhref\u003d\"https://redirect.github.com/actions/upload-artifact/pull/796\"\u003eactions/upload-artifact#796\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eInclude changes in typespec/ts-http-runtime 0.3.5 by \u003ca\nhref\u003d\"https://github.com/yacaovsnc\"\u003e\u003ccode\u003e@​yacaovsnc\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/upload-artifact/pull/797\"\u003eactions/upload-artifact#797\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/upload-artifact/compare/v7...v7.0.1\"\u003ehttps://github.com/actions/upload-artifact/compare/v7...v7.0.1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/upload-artifact/commit/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a\"\u003e\u003ccode\u003e043fb46\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/upload-artifact/issues/797\"\u003e#797\u003c/a\u003e\nfrom actions/yacaovsnc/update-dependency\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/upload-artifact/commit/634250c1388765ea7ed0f053e636f1f399000b94\"\u003e\u003ccode\u003e634250c\u003c/code\u003e\u003c/a\u003e\nInclude changes in typespec/ts-http-runtime 0.3.5\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/upload-artifact/commit/e454baaac2be505c9450e11b8f3215c6fc023ce8\"\u003e\u003ccode\u003ee454baa\u003c/code\u003e\u003c/a\u003e\nReadme: bump all the example versions to v7 (\u003ca\nhref\u003d\"https://redirect.github.com/actions/upload-artifact/issues/796\"\u003e#796\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/upload-artifact/commit/74fad66b98a6d799dc004d3353ccd0e6f6b2530e\"\u003e\u003ccode\u003e74fad66\u003c/code\u003e\u003c/a\u003e\nUpdate the readme with direct upload details (\u003ca\nhref\u003d\"https://redirect.github.com/actions/upload-artifact/issues/795\"\u003e#795\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/actions/upload-artifact/compare/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/upload-artifact\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d7.0.0\u0026new-version\u003d7.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "4ca6017bdd8590a6ad0a0a4154d993ec0c416076",
      "tree": "1b2ba6a4ac83a5ea661b5bb43d65a6165a709082",
      "parents": [
        "e4f8c9251229846190716cce5a9772292952c761"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 13 17:37:40 2026 +0900"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 13 17:37:40 2026 +0900"
      },
      "message": "MINOR: [CI] Bump actions/github-script from 8 to 9 (#1110)\n\nBumps [actions/github-script](https://github.com/actions/github-script)\nfrom 8 to 9.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/github-script/releases\"\u003eactions/github-script\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev9.0.0\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eNew features:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003egetOctokit\u003c/code\u003e factory function\u003c/strong\u003e —\nAvailable directly in the script context. Create additional\nauthenticated Octokit clients with different tokens for multi-token\nworkflows, GitHub App tokens, and cross-org access. See \u003ca\nhref\u003d\"https://github.com/actions/github-script#creating-additional-clients-with-getoctokit\"\u003eCreating\nadditional clients with \u003ccode\u003egetOctokit\u003c/code\u003e\u003c/a\u003e for details and\nexamples.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eOrchestration ID in user-agent\u003c/strong\u003e — The\n\u003ccode\u003eACTIONS_ORCHESTRATION_ID\u003c/code\u003e environment variable is\nautomatically appended to the user-agent string for request\ntracing.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eBreaking changes:\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e\u003ccode\u003erequire(\u0027@actions/github\u0027)\u003c/code\u003e no longer works in\nscripts.\u003c/strong\u003e The upgrade to \u003ccode\u003e@actions/github\u003c/code\u003e v9\n(ESM-only) means \u003ccode\u003erequire(\u0027@actions/github\u0027)\u003c/code\u003e will fail at\nruntime. If you previously used patterns like \u003ccode\u003econst { getOctokit }\n\u003d require(\u0027@actions/github\u0027)\u003c/code\u003e to create secondary clients, use the\nnew injected \u003ccode\u003egetOctokit\u003c/code\u003e function instead — it\u0027s available\ndirectly in the script context with no imports needed.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003egetOctokit\u003c/code\u003e is now an injected function parameter.\nScripts that declare \u003ccode\u003econst getOctokit \u003d ...\u003c/code\u003e or \u003ccode\u003elet\ngetOctokit \u003d ...\u003c/code\u003e will get a \u003ccode\u003eSyntaxError\u003c/code\u003e because\nJavaScript does not allow \u003ccode\u003econst\u003c/code\u003e/\u003ccode\u003elet\u003c/code\u003e\nredeclaration of function parameters. Use the injected\n\u003ccode\u003egetOctokit\u003c/code\u003e directly, or use \u003ccode\u003evar getOctokit \u003d\n...\u003c/code\u003e if you need to redeclare it.\u003c/li\u003e\n\u003cli\u003eIf your script accesses other \u003ccode\u003e@actions/github\u003c/code\u003e internals\nbeyond the standard \u003ccode\u003egithub\u003c/code\u003e/\u003ccode\u003eoctokit\u003c/code\u003e client, you\nmay need to update those references for v9 compatibility.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd ACTIONS_ORCHESTRATION_ID to user-agent string by \u003ca\nhref\u003d\"https://github.com/Copilot\"\u003e\u003ccode\u003e@​Copilot\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/github-script/pull/695\"\u003eactions/github-script#695\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: use deployment: false for integration test environments by \u003ca\nhref\u003d\"https://github.com/salmanmkc\"\u003e\u003ccode\u003e@​salmanmkc\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/github-script/pull/712\"\u003eactions/github-script#712\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat!: add getOctokit to script context, upgrade\n\u003ccode\u003e@​actions/github\u003c/code\u003e v9, \u003ccode\u003e@​octokit/core\u003c/code\u003e v7, and\nrelated packages by \u003ca\nhref\u003d\"https://github.com/salmanmkc\"\u003e\u003ccode\u003e@​salmanmkc\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/github-script/pull/700\"\u003eactions/github-script#700\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/Copilot\"\u003e\u003ccode\u003e@​Copilot\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/github-script/pull/695\"\u003eactions/github-script#695\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/github-script/compare/v8.0.0...v9.0.0\"\u003ehttps://github.com/actions/github-script/compare/v8.0.0...v9.0.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/github-script/commit/3a2844b7e9c422d3c10d287c895573f7108da1b3\"\u003e\u003ccode\u003e3a2844b\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/github-script/issues/700\"\u003e#700\u003c/a\u003e\nfrom actions/salmanmkc/expose-getoctokit + prepare re...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/github-script/commit/ca10bbdd1a7739de09e99a200c7a59f5d73a4079\"\u003e\u003ccode\u003eca10bbd\u003c/code\u003e\u003c/a\u003e\nfix: use \u003ccode\u003e@​octokit/core/\u003c/code\u003etypes import for v7\ncompatibility\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/github-script/commit/86e48e20ac85c970ed1f96e718fd068173948b7b\"\u003e\u003ccode\u003e86e48e2\u003c/code\u003e\u003c/a\u003e\nmerge: incorporate main branch changes\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/github-script/commit/c1084728b5b935ec4ddc1e4cee877b01797b3ff9\"\u003e\u003ccode\u003ec108472\u003c/code\u003e\u003c/a\u003e\nchore: rebuild dist for v9 upgrade and getOctokit factory\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/github-script/commit/afff112e4f8b57c718168af75b89ce00bc8d091d\"\u003e\u003ccode\u003eafff112\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/github-script/issues/712\"\u003e#712\u003c/a\u003e\nfrom actions/salmanmkc/deployment-false + fix user-ag...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/github-script/commit/ff8117e5b78c415f814f39ad6998f424fee7b817\"\u003e\u003ccode\u003eff8117e\u003c/code\u003e\u003c/a\u003e\nci: fix user-agent test to handle orchestration ID\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/github-script/commit/81c6b7876079abe10ff715951c9fc7b3e1ab389d\"\u003e\u003ccode\u003e81c6b78\u003c/code\u003e\u003c/a\u003e\nci: use deployment: false to suppress deployment noise from integration\ntests\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/github-script/commit/3953caf8858d318f37b6cc53a9f5708859b5a7b7\"\u003e\u003ccode\u003e3953caf\u003c/code\u003e\u003c/a\u003e\ndocs: update README examples from \u003ca\nhref\u003d\"https://github.com/v8\"\u003e\u003ccode\u003e@​v8\u003c/code\u003e\u003c/a\u003e to \u003ca\nhref\u003d\"https://github.com/v9\"\u003e\u003ccode\u003e@​v9\u003c/code\u003e\u003c/a\u003e, add getOctokit docs\nand v9 brea...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/github-script/commit/c17d55b90dcdb3d554d0027a6c180a7adc2daf78\"\u003e\u003ccode\u003ec17d55b\u003c/code\u003e\u003c/a\u003e\nci: add getOctokit integration test job\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/github-script/commit/a047196d9a02fe92098771cafbb98c2f1814e408\"\u003e\u003ccode\u003ea047196\u003c/code\u003e\u003c/a\u003e\ntest: add getOctokit integration tests via callAsyncFunction\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/actions/github-script/compare/v8...v9\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/github-script\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d8\u0026new-version\u003d9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "e4f8c9251229846190716cce5a9772292952c761",
      "tree": "c20c79bc703c42d131dd347755257d83a6ed25b5",
      "parents": [
        "d952ed48ef257b90a2085bca574ddd9213b67c91"
      ],
      "author": {
        "name": "Sutou Kouhei",
        "email": "kou@clear-code.com",
        "time": "Fri Apr 10 14:31:54 2026 +0900"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Apr 10 14:31:54 2026 +0900"
      },
      "message": "GH-1107: Increase publish job timeout (#1108)\n\n## What\u0027s Changed\n\nWe have many artifacts and need `sleep 1` per upload. So 5min timeout is\ntoo short.\n\nCloses #1107."
    },
    {
      "commit": "d952ed48ef257b90a2085bca574ddd9213b67c91",
      "tree": "2a18c52f8749f5656278f22741ec99965fe515a6",
      "parents": [
        "13c8b9353b80f553e720ff50fce0cb103de87c55"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 06 14:24:24 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 06 14:24:24 2026 +0200"
      },
      "message": "MINOR: Bump dep.hadoop.version from 3.4.3 to 3.5.0 (#1104)\n\nBumps `dep.hadoop.version` from 3.4.3 to 3.5.0.\nUpdates `org.apache.hadoop:hadoop-client-runtime` from 3.4.3 to 3.5.0\n\nUpdates `org.apache.hadoop:hadoop-client-api` from 3.4.3 to 3.5.0\n\nUpdates `org.apache.hadoop:hadoop-common` from 3.4.3 to 3.5.0\n\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "13c8b9353b80f553e720ff50fce0cb103de87c55",
      "tree": "48959f324e2c1df256d83484f9ae7789121fc060",
      "parents": [
        "d8ad7b6765620c4f3f3078ee87c3d2cfb7423945"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 06 14:23:37 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 06 14:23:37 2026 +0200"
      },
      "message": "MINOR: Bump checker.framework.version from 3.54.0 to 3.55.1 (#1105)\n\nBumps `checker.framework.version` from 3.54.0 to 3.55.1.\nUpdates `org.checkerframework:checker-qual` from 3.54.0 to 3.55.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/releases\"\u003eorg.checkerframework:checker-qual\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eChecker Framework 3.55.1\u003c/h2\u003e\n\u003ch2\u003eVersion 3.55.1 (2026-04-03)\u003c/h2\u003e\n\u003cp\u003eNo user-visible changes.\u003c/p\u003e\n\u003ch2\u003eChecker Framework 3.54.1\u003c/h2\u003e\n\u003ch2\u003eVersion 3.55.0 (2026-04-02)\u003c/h2\u003e\n\u003ch3\u003eUser-visible changes\u003c/h3\u003e\n\u003cp\u003eThe Checker Framework runs under JDK 26 -- that is, it runs on a\nversion 26 JVM.\u003c/p\u003e\n\u003cp\u003eRemoved deprecated command-line option \u003ccode\u003e-AskipDirs\u003c/code\u003e; use\n\u003ccode\u003e-AskipFiles\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eImplementation details\u003c/h3\u003e\n\u003cp\u003eIn \u003ccode\u003eAnnotatedTypeMirror\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRenamed \u003ccode\u003egetEffectiveAnnotation*()\u003c/code\u003e to\n\u003ccode\u003egetAnnotation*()\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eRenamed \u003ccode\u003ehasEffectiveAnnotation*()\u003c/code\u003e to\n\u003ccode\u003ehasAnnotation*()\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRemoved deprecated method\n\u003ccode\u003eObjectCreationNode.getConstructor()\u003c/code\u003e; use\n\u003ccode\u003egetTypeToInstantiate()\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eClosed issues\u003c/h3\u003e\n\u003cp\u003e\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7079\"\u003e#7079\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7489\"\u003e#7489\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7539\"\u003e#7539\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md\"\u003eorg.checkerframework:checker-qual\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 3.55.1 (2026-04-03)\u003c/h2\u003e\n\u003cp\u003eNo user-visible changes.\u003c/p\u003e\n\u003ch2\u003eVersion 3.55.0 (2026-04-02)\u003c/h2\u003e\n\u003ch3\u003eUser-visible changes\u003c/h3\u003e\n\u003cp\u003eThe Checker Framework runs under JDK 26 -- that is, it runs on a\nversion 26 JVM.\u003c/p\u003e\n\u003cp\u003eRemoved deprecated command-line option \u003ccode\u003e-AskipDirs\u003c/code\u003e; use\n\u003ccode\u003e-AskipFiles\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eImplementation details\u003c/h3\u003e\n\u003cp\u003eIn \u003ccode\u003eAnnotatedTypeMirror\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRenamed \u003ccode\u003egetEffectiveAnnotation*()\u003c/code\u003e to\n\u003ccode\u003egetAnnotation*()\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eRenamed \u003ccode\u003ehasEffectiveAnnotation*()\u003c/code\u003e to\n\u003ccode\u003ehasAnnotation*()\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRemoved deprecated method\n\u003ccode\u003eObjectCreationNode.getConstructor()\u003c/code\u003e; use\n\u003ccode\u003egetTypeToInstantiate()\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eClosed issues\u003c/h3\u003e\n\u003cp\u003e\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7079\"\u003e#7079\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7489\"\u003e#7489\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7539\"\u003e#7539\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/bf4ceb7660825e275f8c7561056310c47d48b81b\"\u003e\u003ccode\u003ebf4ceb7\u003c/code\u003e\u003c/a\u003e\nnew release 3.55.1\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/b8096660563a2349201e126c362c2000de20c1c5\"\u003e\u003ccode\u003eb809666\u003c/code\u003e\u003c/a\u003e\nRemove unneeded argument\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/448019e7d43607b0d1d23e94baae0cd937e0219b\"\u003e\u003ccode\u003e448019e\u003c/code\u003e\u003c/a\u003e\nMake scripts executable in .zip file\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/3bc1190be960534f1c5536ab74b760198ff5e70a\"\u003e\u003ccode\u003e3bc1190\u003c/code\u003e\u003c/a\u003e\nUpdate directory copying\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/22df6d61a52c4183401d2fa355a59645c16feca3\"\u003e\u003ccode\u003e22df6d6\u003c/code\u003e\u003c/a\u003e\nUpdate release date\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/3fc441bc5df12983f716282aeebaf8f6b934bfe6\"\u003e\u003ccode\u003e3fc441b\u003c/code\u003e\u003c/a\u003e\nNote about permissions\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/6baaa5287134b9e616cbcbc40a413f21d498e1a1\"\u003e\u003ccode\u003e6baaa52\u003c/code\u003e\u003c/a\u003e\nBrevity\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/d4ea6b993144c91992077e864c8cbf07ee929dac\"\u003e\u003ccode\u003ed4ea6b9\u003c/code\u003e\u003c/a\u003e\nSet version number to 3.55.1\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/6b03e94dcf412a24859cf5ac9d17c2a4de65d978\"\u003e\u003ccode\u003e6b03e94\u003c/code\u003e\u003c/a\u003e\nImprove release instructions\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/65613a0f0f05d39d74b36c40ba6ca398e1929157\"\u003e\u003ccode\u003e65613a0\u003c/code\u003e\u003c/a\u003e\nFix Nullness extra tests\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/compare/checker-framework-3.54.0...checker-framework-3.55.1\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.checkerframework:checker` from 3.54.0 to 3.55.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/releases\"\u003eorg.checkerframework:checker\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eChecker Framework 3.55.1\u003c/h2\u003e\n\u003ch2\u003eVersion 3.55.1 (2026-04-03)\u003c/h2\u003e\n\u003cp\u003eNo user-visible changes.\u003c/p\u003e\n\u003ch2\u003eChecker Framework 3.54.1\u003c/h2\u003e\n\u003ch2\u003eVersion 3.55.0 (2026-04-02)\u003c/h2\u003e\n\u003ch3\u003eUser-visible changes\u003c/h3\u003e\n\u003cp\u003eThe Checker Framework runs under JDK 26 -- that is, it runs on a\nversion 26 JVM.\u003c/p\u003e\n\u003cp\u003eRemoved deprecated command-line option \u003ccode\u003e-AskipDirs\u003c/code\u003e; use\n\u003ccode\u003e-AskipFiles\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eImplementation details\u003c/h3\u003e\n\u003cp\u003eIn \u003ccode\u003eAnnotatedTypeMirror\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRenamed \u003ccode\u003egetEffectiveAnnotation*()\u003c/code\u003e to\n\u003ccode\u003egetAnnotation*()\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eRenamed \u003ccode\u003ehasEffectiveAnnotation*()\u003c/code\u003e to\n\u003ccode\u003ehasAnnotation*()\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRemoved deprecated method\n\u003ccode\u003eObjectCreationNode.getConstructor()\u003c/code\u003e; use\n\u003ccode\u003egetTypeToInstantiate()\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eClosed issues\u003c/h3\u003e\n\u003cp\u003e\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7079\"\u003e#7079\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7489\"\u003e#7489\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7539\"\u003e#7539\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md\"\u003eorg.checkerframework:checker\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 3.55.1 (2026-04-03)\u003c/h2\u003e\n\u003cp\u003eNo user-visible changes.\u003c/p\u003e\n\u003ch2\u003eVersion 3.55.0 (2026-04-02)\u003c/h2\u003e\n\u003ch3\u003eUser-visible changes\u003c/h3\u003e\n\u003cp\u003eThe Checker Framework runs under JDK 26 -- that is, it runs on a\nversion 26 JVM.\u003c/p\u003e\n\u003cp\u003eRemoved deprecated command-line option \u003ccode\u003e-AskipDirs\u003c/code\u003e; use\n\u003ccode\u003e-AskipFiles\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eImplementation details\u003c/h3\u003e\n\u003cp\u003eIn \u003ccode\u003eAnnotatedTypeMirror\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRenamed \u003ccode\u003egetEffectiveAnnotation*()\u003c/code\u003e to\n\u003ccode\u003egetAnnotation*()\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eRenamed \u003ccode\u003ehasEffectiveAnnotation*()\u003c/code\u003e to\n\u003ccode\u003ehasAnnotation*()\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRemoved deprecated method\n\u003ccode\u003eObjectCreationNode.getConstructor()\u003c/code\u003e; use\n\u003ccode\u003egetTypeToInstantiate()\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eClosed issues\u003c/h3\u003e\n\u003cp\u003e\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7079\"\u003e#7079\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7489\"\u003e#7489\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7539\"\u003e#7539\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/bf4ceb7660825e275f8c7561056310c47d48b81b\"\u003e\u003ccode\u003ebf4ceb7\u003c/code\u003e\u003c/a\u003e\nnew release 3.55.1\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/b8096660563a2349201e126c362c2000de20c1c5\"\u003e\u003ccode\u003eb809666\u003c/code\u003e\u003c/a\u003e\nRemove unneeded argument\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/448019e7d43607b0d1d23e94baae0cd937e0219b\"\u003e\u003ccode\u003e448019e\u003c/code\u003e\u003c/a\u003e\nMake scripts executable in .zip file\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/3bc1190be960534f1c5536ab74b760198ff5e70a\"\u003e\u003ccode\u003e3bc1190\u003c/code\u003e\u003c/a\u003e\nUpdate directory copying\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/22df6d61a52c4183401d2fa355a59645c16feca3\"\u003e\u003ccode\u003e22df6d6\u003c/code\u003e\u003c/a\u003e\nUpdate release date\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/3fc441bc5df12983f716282aeebaf8f6b934bfe6\"\u003e\u003ccode\u003e3fc441b\u003c/code\u003e\u003c/a\u003e\nNote about permissions\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/6baaa5287134b9e616cbcbc40a413f21d498e1a1\"\u003e\u003ccode\u003e6baaa52\u003c/code\u003e\u003c/a\u003e\nBrevity\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/d4ea6b993144c91992077e864c8cbf07ee929dac\"\u003e\u003ccode\u003ed4ea6b9\u003c/code\u003e\u003c/a\u003e\nSet version number to 3.55.1\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/6b03e94dcf412a24859cf5ac9d17c2a4de65d978\"\u003e\u003ccode\u003e6b03e94\u003c/code\u003e\u003c/a\u003e\nImprove release instructions\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/65613a0f0f05d39d74b36c40ba6ca398e1929157\"\u003e\u003ccode\u003e65613a0\u003c/code\u003e\u003c/a\u003e\nFix Nullness extra tests\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/compare/checker-framework-3.54.0...checker-framework-3.55.1\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "d8ad7b6765620c4f3f3078ee87c3d2cfb7423945",
      "tree": "5d47b057320ed5a203cb00f027ab64328e8a8430",
      "parents": [
        "e54681b80e84573f4cb6e7fdcb77b4247768965f"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 06 17:41:35 2026 +0900"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 06 17:41:35 2026 +0900"
      },
      "message": "MINOR: [CI] Bump docker/login-action from 4.0.0 to 4.1.0 (#1103)\n\nBumps [docker/login-action](https://github.com/docker/login-action) from\n4.0.0 to 4.1.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/docker/login-action/releases\"\u003edocker/login-action\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix scoped Docker Hub cleanup path when registry is omitted by \u003ca\nhref\u003d\"https://github.com/crazy-max\"\u003e\u003ccode\u003e@​crazy-max\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/945\"\u003edocker/login-action#945\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003e@​aws-sdk/client-ecr\u003c/code\u003e and\n\u003ccode\u003e@​aws-sdk/client-ecr-public\u003c/code\u003e to 3.1020.0 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/930\"\u003edocker/login-action#930\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003e@​docker/actions-toolkit\u003c/code\u003e from 0.77.0 to 0.86.0 in\n\u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/932\"\u003edocker/login-action#932\u003c/a\u003e\n\u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/936\"\u003edocker/login-action#936\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump brace-expansion from 1.1.12 to 1.1.13 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/952\"\u003edocker/login-action#952\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump fast-xml-parser from 5.3.4 to 5.3.6 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/942\"\u003edocker/login-action#942\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump flatted from 3.3.3 to 3.4.2 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/944\"\u003edocker/login-action#944\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump glob from 10.3.12 to 10.5.0 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/940\"\u003edocker/login-action#940\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump handlebars from 4.7.8 to 4.7.9 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/949\"\u003edocker/login-action#949\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump http-proxy-agent and https-proxy-agent to 8.0.0 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/937\"\u003edocker/login-action#937\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump lodash from 4.17.23 to 4.18.1 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/958\"\u003edocker/login-action#958\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump minimatch from 3.1.2 to 3.1.5 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/941\"\u003edocker/login-action#941\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump picomatch from 4.0.3 to 4.0.4 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/948\"\u003edocker/login-action#948\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump undici from 6.23.0 to 6.24.1 in \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/pull/938\"\u003edocker/login-action#938\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/docker/login-action/compare/v4.0.0...v4.1.0\"\u003ehttps://github.com/docker/login-action/compare/v4.0.0...v4.1.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/4907a6ddec9925e35a0a9e82d7399ccc52663121\"\u003e\u003ccode\u003e4907a6d\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/issues/930\"\u003e#930\u003c/a\u003e\nfrom docker/dependabot/npm_and_yarn/aws-sdk-dependenc...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/1e233e691a8881d7f35ca7c2d5dfaaed80b39636\"\u003e\u003ccode\u003e1e233e6\u003c/code\u003e\u003c/a\u003e\nchore: update generated content\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/6c24ead68057f18c30c808a431f0b85dc25663cb\"\u003e\u003ccode\u003e6c24ead\u003c/code\u003e\u003c/a\u003e\nbuild(deps): bump the aws-sdk-dependencies group with 2 updates\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/ee034d70944e3546349cd24295914f139342f1e6\"\u003e\u003ccode\u003eee034d7\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/issues/958\"\u003e#958\u003c/a\u003e\nfrom docker/dependabot/npm_and_yarn/lodash-4.18.1\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/1527209db9734bd2352a2dc1a63d79c9aa5358bb\"\u003e\u003ccode\u003e1527209\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/issues/937\"\u003e#937\u003c/a\u003e\nfrom docker/dependabot/npm_and_yarn/proxy-agent-depen...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/d39362aba4d72f8d9d93e0962119840690133e1b\"\u003e\u003ccode\u003ed39362a\u003c/code\u003e\u003c/a\u003e\nbuild(deps): bump lodash from 4.17.23 to 4.18.1\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/a6f092b568105cbb6d9deb7e55e0a4c5c1025fce\"\u003e\u003ccode\u003ea6f092b\u003c/code\u003e\u003c/a\u003e\nchore: update generated content\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/60953f0bed2120ec69659d271fe18d34bc069779\"\u003e\u003ccode\u003e60953f0\u003c/code\u003e\u003c/a\u003e\nbuild(deps): bump the proxy-agent-dependencies group with 2 updates\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/62c688590fb4ab6c6e89a217ced0a7b2ddcf1340\"\u003e\u003ccode\u003e62c6885\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/docker/login-action/issues/936\"\u003e#936\u003c/a\u003e\nfrom docker/dependabot/npm_and_yarn/docker/actions-to...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/docker/login-action/commit/102c0e672992d2e992c89b6f4808d65a353b5a1a\"\u003e\u003ccode\u003e102c0e6\u003c/code\u003e\u003c/a\u003e\nchore: update generated content\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/docker/login-action/compare/b45d80f862d83dbcd57f89517bcf500b2ab88fb2...4907a6ddec9925e35a0a9e82d7399ccc52663121\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003ddocker/login-action\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d4.0.0\u0026new-version\u003d4.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "e54681b80e84573f4cb6e7fdcb77b4247768965f",
      "tree": "526760b3a88b1950eea14a3d600e3ce6c1b4fb0c",
      "parents": [
        "0703021c8315a55651b6f7446da8cc781f039f72"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 30 16:20:40 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 30 16:20:40 2026 +0200"
      },
      "message": "MINOR: Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.4 to 3.4.0 (#1088)\n\nBumps\n[com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless)\nfrom 2.44.4 to 3.4.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/diffplug/spotless/releases\"\u003ecom.diffplug.spotless:spotless-maven-plugin\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eMaven Plugin v3.4.0\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003etableTest\u003c/code\u003e format type for standalone\n\u003ccode\u003e.table\u003c/code\u003e files. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2880\"\u003e#2880\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump default \u003ccode\u003etabletest-formatter\u003c/code\u003e version\n\u003ccode\u003e1.0.1\u003c/code\u003e -\u0026gt; \u003ccode\u003e1.1.1\u003c/code\u003e, now works with Java 17+.\n(\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2880\"\u003e#2880\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eLib v3.3.1\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eGitPrePushHookInstaller\u003c/code\u003e didn\u0027t work on windows, now\nfixed. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2562\"\u003e#2562\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eLib v3.3.0\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAllow specifying path to Biome JSON config file directly in\n\u003ccode\u003ebiome\u003c/code\u003e step. Requires biome 2.x. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2548\"\u003e#2548\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eGitPrePushHookInstaller\u003c/code\u003e, a reusable library component\nfor installing a Git \u003ccode\u003epre-push\u003c/code\u003e hook that runs formatter\nchecks. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2553\"\u003e#2553\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAllow setting Eclipse XML config from a string, not only from files\n(\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2361\"\u003e#2361\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eChanged\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump default \u003ccode\u003egson\u003c/code\u003e version to latest \u003ccode\u003e2.11.0\u003c/code\u003e\n-\u0026gt; \u003ccode\u003e2.13.1\u003c/code\u003e. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2414\"\u003e#2414\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump default \u003ccode\u003ejackson\u003c/code\u003e version to latest\n\u003ccode\u003e2.18.1\u003c/code\u003e -\u0026gt; \u003ccode\u003e2.19.2\u003c/code\u003e. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2558\"\u003e#2558\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump default \u003ccode\u003egherkin-utils\u003c/code\u003e version to latest\n\u003ccode\u003e9.0.0\u003c/code\u003e -\u0026gt; \u003ccode\u003e9.2.0\u003c/code\u003e. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2408\"\u003e#2408\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump default \u003ccode\u003ecleanthat\u003c/code\u003e version to latest\n\u003ccode\u003e2.22\u003c/code\u003e -\u0026gt; \u003ccode\u003e2.23\u003c/code\u003e. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2556\"\u003e#2556\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eMaven Plugin v3.3.0\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003etabletest-formatter\u003c/code\u003e support for Java and Kotlin.\n(\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2860\"\u003e#2860\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix the ability to specify a wildcard version (\u003ccode\u003e*\u003c/code\u003e) for\nexternal formatter executables, which did not work. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2848\"\u003e#2848\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[fix] \u003ccode\u003eConcurrentModificationException\u003c/code\u003e in\n\u003ccode\u003eexpandWildcardImports\u003c/code\u003e (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/issues/2830\"\u003e#2830\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eMaven Plugin v3.2.1\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eremoveSemicolons()\u003c/code\u003e should not be applied to multiline\nstrings in groovy \u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/issues/2780\"\u003e#2780\u003c/a\u003e\n(\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/issues/2792\"\u003e#2792\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eLib v3.2.0\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport for \u003ccode\u003eidea\u003c/code\u003e (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2020\"\u003e#2020\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2535\"\u003e#2535\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for removing wildcard imports via\n\u003ccode\u003eremoveWildcardImports\u003c/code\u003e step. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2517\"\u003e#2517\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003escalafmt: enforce version consistency between the version configured\nin Spotless and the version declared in Scalafmt config file (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/issues/2460\"\u003e#2460\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eSortPom\u003c/code\u003e disable expandEmptyElements, to avoid empty\nbody warnings. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2520\"\u003e#2520\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix biome formatter for new major release 2.x of biome (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2537\"\u003e#2537\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMake sure npm-based formatters use the correct\n\u003ccode\u003enode_modules\u003c/code\u003e directory when running in parallel. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2542\"\u003e#2542\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump internal dependencies for npm-based formatters (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2542\"\u003e#2542\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eMaven Plugin v3.2.0\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd the ability to specify a wildcard version (\u003ccode\u003e*\u003c/code\u003e) for\nexternal formatter executables. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/issues/2757\"\u003e#2757\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDramatic (~100x) performance improvement when using git\n\u003ccode\u003eratchetFrom\u003c/code\u003e. (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/pull/2805\"\u003e#2805\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/708a1b0e6383ad2dd34cf3def185bb085a786789\"\u003e\u003ccode\u003e708a1b0\u003c/code\u003e\u003c/a\u003e\nPublished maven/3.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/1cc0163c25b52824cd57b56cdcb8c4cb0c7b4795\"\u003e\u003ccode\u003e1cc0163\u003c/code\u003e\u003c/a\u003e\nPublished gradle/8.4.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/a4cd808f6092c6ed9371205de4af5285beea9533\"\u003e\u003ccode\u003ea4cd808\u003c/code\u003e\u003c/a\u003e\nPublished lib/4.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/9066bf6ede907e913fbe30259de0763f1b0b55ea\"\u003e\u003ccode\u003e9066bf6\u003c/code\u003e\u003c/a\u003e\nAdd links to the changelog.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/db8dc1cc8e83b18ef357a0e660f03556fd792247\"\u003e\u003ccode\u003edb8dc1c\u003c/code\u003e\u003c/a\u003e\nFix for illegal mutation issue with \u003ccode\u003epredeclareDeps\u003c/code\u003e (\u003ca\nhref\u003d\"https://redirect.github.com/diffplug/spotless/issues/2892\"\u003e#2892\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/0eb98a9574304e362f0ca6ddbfb71617de46df75\"\u003e\u003ccode\u003e0eb98a9\u003c/code\u003e\u003c/a\u003e\nchore: Updated gradle plugin change\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/3f7f12e649b1085a7937b8730e6a7689a52ca6da\"\u003e\u003ccode\u003e3f7f12e\u003c/code\u003e\u003c/a\u003e\nchore: Removes check for predeclare as it\u0027s not needed anymore\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/55c0c5c081b83ad35e92911718e3069a64467c2a\"\u003e\u003ccode\u003e55c0c5c\u003c/code\u003e\u003c/a\u003e\nfix: IsolatedProjectTest.predeclaredIsUnsupported() is now actually\nsupported...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/47489afd92aa79f56372bd53e82d09a44f606a32\"\u003e\u003ccode\u003e47489af\u003c/code\u003e\u003c/a\u003e\nfix: avoid IllegalMutationException when root project uses\npredeclareDeps() w...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/diffplug/spotless/commit/4010e8b42c32b8dfac31a988c6820b6b0ef499bd\"\u003e\u003ccode\u003e4010e8b\u003c/code\u003e\u003c/a\u003e\ntest: Introduce a test harnessing predeclared deps\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/diffplug/spotless/compare/maven/2.44.4...maven/3.4.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.diffplug.spotless:spotless-maven-plugin\u0026package-manager\u003dmaven\u0026previous-version\u003d2.44.4\u0026new-version\u003d3.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\n---------\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: JB Onofré \u003cjbonofre@apache.org\u003e\nCo-authored-by: JB Onofré \u003cjb.onofre@dremio.com\u003e"
    },
    {
      "commit": "0703021c8315a55651b6f7446da8cc781f039f72",
      "tree": "1b54586c183aa69108d4e7ac05af2578943c3ef8",
      "parents": [
        "447372ce4caa5a53387018861e3ea9d1f7be795c"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 30 14:56:30 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 30 14:56:30 2026 +0200"
      },
      "message": "MINOR: Bump org.apache:apache from 33 to 37 (#1033)\n\nBumps [org.apache:apache](https://github.com/apache/maven-apache-parent)\nfrom 33 to 37.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/apache/maven-apache-parent/releases\"\u003eorg.apache:apache\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eApache Parent POM version 37\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003e🚀 New features and improvements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDisable parallel PUT on release (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/566\"\u003e#566\u003c/a\u003e)\n\u003ca\nhref\u003d\"https://github.com/slawekjaranowski\"\u003e\u003ccode\u003e@​slawekjaranowski\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eApache Parent POM version 36\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003e:boom: Breaking changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate minimum maven version to match current stable version (3.6.3\n-\u0026gt; 3.9) (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/533\"\u003e#533\u003c/a\u003e)\n\u003ca\nhref\u003d\"https://github.com/DomGarguilo\"\u003e\u003ccode\u003e@​DomGarguilo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIntroduce javaVersion property for maven.compiler.* configuration\n(\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/551\"\u003e#551\u003c/a\u003e)\n\u003ca\nhref\u003d\"https://github.com/slawekjaranowski\"\u003e\u003ccode\u003e@​slawekjaranowski\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSwitch JDK \u0026gt;\u003d 9 to only use maven.compiler.release (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/543\"\u003e#543\u003c/a\u003e)\n\u003ca href\u003d\"https://github.com/gnodet\"\u003e\u003ccode\u003e@​gnodet\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New features and improvements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate minimum maven version to match current stable version (3.6.3\n-\u0026gt; 3.9) (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/533\"\u003e#533\u003c/a\u003e)\n\u003ca\nhref\u003d\"https://github.com/DomGarguilo\"\u003e\u003ccode\u003e@​DomGarguilo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIntroduce javaVersion property for maven.compiler.* configuration\n(\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/551\"\u003e#551\u003c/a\u003e)\n\u003ca\nhref\u003d\"https://github.com/slawekjaranowski\"\u003e\u003ccode\u003e@​slawekjaranowski\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSwitch JDK \u0026gt;\u003d 9 to only use maven.compiler.release (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/543\"\u003e#543\u003c/a\u003e)\n\u003ca href\u003d\"https://github.com/gnodet\"\u003e\u003ccode\u003e@​gnodet\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd default specification and implementation for javadoc and source\nmanifest entries (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/548\"\u003e#548\u003c/a\u003e)\n\u003ca\nhref\u003d\"https://github.com/slawekjaranowski\"\u003e\u003ccode\u003e@​slawekjaranowski\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📝 Documentation updates\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eClarify how to use Apache Snapshot repository (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/558\"\u003e#558\u003c/a\u003e)\n\u003ca href\u003d\"https://github.com/kwin\"\u003e\u003ccode\u003e@​kwin\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eactivate Fluido skin\u0027s anchorJs (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/553\"\u003e#553\u003c/a\u003e)\n\u003ca href\u003d\"https://github.com/hboutemy\"\u003e\u003ccode\u003e@​hboutemy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e👻 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAvoid - WARNING: Use of the three-letter time zone ID ... on JDK 25\nfor RAT plugin (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/562\"\u003e#562\u003c/a\u003e)\n\u003ca\nhref\u003d\"https://github.com/slawekjaranowski\"\u003e\u003ccode\u003e@​slawekjaranowski\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: enable prevent branch protection rules (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/535\"\u003e#535\u003c/a\u003e)\n\u003ca href\u003d\"https://github.com/sebtiem\"\u003e\u003ccode\u003e@​sebtiem\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📦 Dependency updates\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-release-plugin from 3.3.0 to\n3.3.1 (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/565\"\u003e#565\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-release-plugin from 3.2.0 to\n3.3.0 (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/559\"\u003e#559\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-source-plugin from 3.3.1 to\n3.4.0 (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/557\"\u003e#557\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-assembly-plugin from 3.7.1 to\n3.8.0 (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/556\"\u003e#556\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-war-plugin from 3.5.0 to 3.5.1\n(\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/555\"\u003e#555\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-resources-plugin from 3.3.1 to\n3.4.0 (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/554\"\u003e#554\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-jar-plugin from 3.4.2 to 3.5.0\n(\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/552\"\u003e#552\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade maven-release-plugin to version 3.2.0 (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/549\"\u003e#549\u003c/a\u003e)\n\u003ca href\u003d\"https://github.com/kwin\"\u003e\u003ccode\u003e@​kwin\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-dependency-plugin from 3.8.1 to\n3.9.0 (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/542\"\u003e#542\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-war-plugin from 3.4.0 to 3.5.0\n(\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/546\"\u003e#546\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump version.maven-plugin-tools from 3.15.1 to 3.15.2 (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/547\"\u003e#547\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-antrun-plugin from 3.1.0 to\n3.2.0 (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/545\"\u003e#545\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.1 to\n3.6.2 (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/541\"\u003e#541\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-scm-plugin from 2.1.0 to 2.2.1\n(\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/540\"\u003e#540\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-ear-plugin from 3.3.0 to 3.4.0\n(\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/527\"\u003e#527\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-javadoc-plugin from 3.11.3 to\n3.12.0 (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/538\"\u003e#538\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-compiler-plugin from 3.14.0 to\n3.14.1 (\u003ca\nhref\u003d\"https://redirect.github.com/apache/maven-apache-parent/pull/539\"\u003e#539\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/apache/maven-apache-parent/commits\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dorg.apache:apache\u0026package-manager\u003dmaven\u0026previous-version\u003d33\u0026new-version\u003d37)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nYou can trigger a rebase of this PR by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\n\u003e **Note**\n\u003e Automatic rebases have been disabled on this pull request as it has\nbeen open for over 30 days.\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "447372ce4caa5a53387018861e3ea9d1f7be795c",
      "tree": "2a9a8f79f06197af53f15aea2863bf630cd03ca6",
      "parents": [
        "4297733dae36ca83234a239b25068db775a09743"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 30 10:57:29 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 30 10:57:29 2026 +0200"
      },
      "message": "MINOR: Bump com.google.api.grpc:proto-google-common-protos from 2.66.0 to 2.67.0 (#1092)\n\nBumps\n[com.google.api.grpc:proto-google-common-protos](https://github.com/googleapis/sdk-platform-java)\nfrom 2.66.0 to 2.67.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/releases\"\u003ecom.google.api.grpc:proto-google-common-protos\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.67.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/compare/v2.66.1...v2.67.0\"\u003e2.67.0\u003c/a\u003e\n(2026-02-18)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eobservability:\u003c/strong\u003e introduce minimal tracing\nimplementation (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4105\"\u003e#4105\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/e4e5e893e7a62bd12528e7d448dc2789f71946eb\"\u003ee4e5e89\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Google-Auth-Library to v1.43.0 (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4114\"\u003e#4114\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/825298b6bf225bb8536ecab9d788f82f3f8eec4d\"\u003e825298b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpgrade grpc to 1.76.3 (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4106\"\u003e#4106\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/c6555f5f0cd85683db76394271e1f57989cac7d0\"\u003ec6555f5\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.66.1\u003c/h2\u003e\n\u003ch2\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/compare/v2.66.0...v2.66.1\"\u003e2.66.1\u003c/a\u003e\n(2026-02-04)\u003c/h2\u003e\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[common-protos] update reference documentation for\n\u003ccode\u003eSelectionInput.DROPDOWN\u003c/code\u003e to include dynamic data sources and\nautosuggestion (\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/9960262cf248400836c04063e6a701bec2aca1ba\"\u003e9960262\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/blob/main/CHANGELOG.md\"\u003ecom.google.api.grpc:proto-google-common-protos\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/compare/v2.66.1...v2.67.0\"\u003e2.67.0\u003c/a\u003e\n(2026-02-18)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eobservability:\u003c/strong\u003e introduce minimal tracing\nimplementation (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4105\"\u003e#4105\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/e4e5e893e7a62bd12528e7d448dc2789f71946eb\"\u003ee4e5e89\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependencies\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Google-Auth-Library to v1.43.0 (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4114\"\u003e#4114\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/825298b6bf225bb8536ecab9d788f82f3f8eec4d\"\u003e825298b\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpgrade grpc to 1.76.3 (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4106\"\u003e#4106\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/c6555f5f0cd85683db76394271e1f57989cac7d0\"\u003ec6555f5\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/compare/v2.66.0...v2.66.1\"\u003e2.66.1\u003c/a\u003e\n(2026-02-04)\u003c/h2\u003e\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[common-protos] update reference documentation for\n\u003ccode\u003eSelectionInput.DROPDOWN\u003c/code\u003e to include dynamic data sources and\nautosuggestion (\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/9960262cf248400836c04063e6a701bec2aca1ba\"\u003e9960262\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/50d2af33e055075693b8ee14cc8a2da107320144\"\u003e\u003ccode\u003e50d2af3\u003c/code\u003e\u003c/a\u003e\nchore(main): release 2.67.0 (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4107\"\u003e#4107\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/ffb6b02f9711d247204fce57d98d5f0fb974bf39\"\u003e\u003ccode\u003effb6b02\u003c/code\u003e\u003c/a\u003e\nchore(deps): update upper bound dependencies file (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4112\"\u003e#4112\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/825298b6bf225bb8536ecab9d788f82f3f8eec4d\"\u003e\u003ccode\u003e825298b\u003c/code\u003e\u003c/a\u003e\ndeps: Upgrade Google-Auth-Library to v1.43.0 (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4114\"\u003e#4114\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/3fa1ca3ffa0e4d103e2812bd5c29547b7e4d6410\"\u003e\u003ccode\u003e3fa1ca3\u003c/code\u003e\u003c/a\u003e\nchore: update googleapis commit at Thu Feb 5 03:00:22 UTC 2026 (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4104\"\u003e#4104\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/e4e5e893e7a62bd12528e7d448dc2789f71946eb\"\u003e\u003ccode\u003ee4e5e89\u003c/code\u003e\u003c/a\u003e\nfeat(observability): introduce minimal tracing implementation (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4105\"\u003e#4105\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/c6555f5f0cd85683db76394271e1f57989cac7d0\"\u003e\u003ccode\u003ec6555f5\u003c/code\u003e\u003c/a\u003e\ndeps: Upgrade grpc to 1.76.3 (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4106\"\u003e#4106\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/117c390d24a734aafb0f994ded30a054c6eed901\"\u003e\u003ccode\u003e117c390\u003c/code\u003e\u003c/a\u003e\nchore(main): release 2.66.2-SNAPSHOT (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4102\"\u003e#4102\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/ff33367579969c7ce65dd84a505f8d91b8ba67fd\"\u003e\u003ccode\u003eff33367\u003c/code\u003e\u003c/a\u003e\ntests: Upgrade logback to 1.5.25 in tests (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4103\"\u003e#4103\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/a4d8c44b60f3285244afbff7ef2cbfe032947688\"\u003e\u003ccode\u003ea4d8c44\u003c/code\u003e\u003c/a\u003e\ntests: Remove 3.25.8 from protobuf compatibility testing (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4101\"\u003e#4101\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/commit/3b280a3d65bc45368536e715a4fa6c04ddbfff66\"\u003e\u003ccode\u003e3b280a3\u003c/code\u003e\u003c/a\u003e\nchore(main): release 2.66.1 (\u003ca\nhref\u003d\"https://redirect.github.com/googleapis/sdk-platform-java/issues/4100\"\u003e#4100\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/googleapis/sdk-platform-java/compare/v2.66.0...v2.67.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.google.api.grpc:proto-google-common-protos\u0026package-manager\u003dmaven\u0026previous-version\u003d2.66.0\u0026new-version\u003d2.67.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "4297733dae36ca83234a239b25068db775a09743",
      "tree": "3cb201618c6d83e0a5aa7902524a08aa8360646d",
      "parents": [
        "89fa995eac2aa84e0195341bff601dfce66b942e"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 30 10:30:50 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 30 10:30:50 2026 +0200"
      },
      "message": "MINOR: Bump com.gradle:develocity-maven-extension from 2.3.4 to 2.4.0 (#1095)\n\nBumps com.gradle:develocity-maven-extension from 2.3.4 to 2.4.0.\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.gradle:develocity-maven-extension\u0026package-manager\u003dmaven\u0026previous-version\u003d2.3.4\u0026new-version\u003d2.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "89fa995eac2aa84e0195341bff601dfce66b942e",
      "tree": "e87d7dc9e739303da3b6b15a4388663e52f2c1be",
      "parents": [
        "168a969147ea77a6fe8f12fa15c6bc25b1e671f2"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 30 10:22:13 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 30 10:22:13 2026 +0200"
      },
      "message": "MINOR: Bump com.nimbusds:oauth2-oidc-sdk from 11.34 to 11.37 (#1096)\n\nBumps\n[com.nimbusds:oauth2-oidc-sdk](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions)\nfrom 11.34 to 11.37.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/src/master/CHANGELOG.txt\"\u003ecom.nimbusds:oauth2-oidc-sdk\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eversion 1.0 (2012-05-29)\n* First official release with authorisation endpoint, token endpoint,\ncheck\nID endpoint and UserInfo endpoint support.\n* JSON Web Tokens (JWTs) support through the Nimbus-JWT library.\n* Language Tags (RFC 5646) support through the Nimbus-LangTag library.\n* JSON support through the JSON Smart library.\u003c/p\u003e\n\u003cp\u003eversion 2.0 (2013-05-13)\n* Intermediary development release with Maven build, published to\nMaven Central.\u003c/p\u003e\n\u003cp\u003eversion 2.1 (2013-06-06)\n* Updates the APIs to OpenID Connect Messages draft 20, OpenID Connect\nStandard draft 21, OpenID Connect Discovery draft 17 and OpenID\nConnect Registration draft 19.\n* Major refactoring of the APIs for greater simplicity.\n* Adds JUnit tests.\u003c/p\u003e\n\u003cp\u003eversion 2.2 (2013-06-18)\n* Refactors dynamic OpenID Connect client registration.\n* Adds partial support of the OAuth 2.0 Dynamic Client Registration\nProtocol (draft-ietf-oauth-dyn-reg-12).\n* Optimises parsing of request parameters consisting of one or more\ntokens (scope, response type, etc).\u003c/p\u003e\n\u003cp\u003eversion 2.3 (2013-06-19)\n* Renames OAuth 2.0 dynamic client registration package.\n* Adds ClientInformation.getClientMetadata() method.\n* Adds OIDCClientInformation class.\u003c/p\u003e\n\u003cp\u003eversion 2.4 (2013-06-20)\n* Adds static OIDCClientInformation.parse(JSONObject) method.\u003c/p\u003e\n\u003cp\u003eversion 2.5 (2013-06-22)\n* Adds support OAuth 2.0 dynamic client update.\n* Adds OpenID Connect dynamic client registration classes.\u003c/p\u003e\n\u003cp\u003eversion 2.6 (2013-06-25)\n* Enforces order of preference of ACR values in OpenID Connect client\nmetadata, as required by the specification.\n* Documentation and performance improvements.\u003c/p\u003e\n\u003cp\u003eversion 2.7 (2013-06-26)\n* Switches Identifier generation to java.security.SecureRandom.\u003c/p\u003e\n\u003cp\u003eversion 2.8 (2013-06-30)\n* Fixes serialisation and assignment bugs in ClientMetadata.\n* Switches Secret generation to java.security.SecureRandom.\u003c/p\u003e\n\u003cp\u003eversion 2.9 (2013-09-17)\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/d98de1ab39f699e39903967775abc242fc064e78\"\u003e\u003ccode\u003ed98de1a\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/2ea716f29401515a656c73bef9d66d5860270b2f\"\u003e\u003ccode\u003e2ea716f\u003c/code\u003e\u003c/a\u003e\nShortens InvalidClientException messages\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/ed5773c5a3383a4c5af5f8484aad2864dc1b79c6\"\u003e\u003ccode\u003eed5773c\u003c/code\u003e\u003c/a\u003e\nTokenRevocationRequest receives custom form parameters support\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/e133559f00d1469a5da284cfdbb30d4d0102e3be\"\u003e\u003ccode\u003ee133559\u003c/code\u003e\u003c/a\u003e\nUpdates tests for shortened InvalidClientException messages\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/fe43e1f129febee53c0a15178b08b6e835bcd460\"\u003e\u003ccode\u003efe43e1f\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release 11.35\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/73224c9422c0ebb3c1a3b5387aac2d529d8bef5b\"\u003e\u003ccode\u003e73224c9\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/f3f728613feb023640801faf33873d55f6c2ec98\"\u003e\u003ccode\u003ef3f7286\u003c/code\u003e\u003c/a\u003e\nAdds static JSONObjectUtils.getNonNegativeLong methods\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/d6899e0554d630956dd09e3d2ba1236ee66d2bd6\"\u003e\u003ccode\u003ed6899e0\u003c/code\u003e\u003c/a\u003e\nCleans up JSONObjectUtils.getEnum(net.minidev.json.JSONObject,\njava.lang.Stri...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/9b05d23a876550842e75c1abff08795ac825b9a0\"\u003e\u003ccode\u003e9b05d23\u003c/code\u003e\u003c/a\u003e\nAdds non-negative checks when parsing Date instances from Unix\ntimestamps (is...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/592d8f4e82e7815966258c114b66834b9b4c9e6c\"\u003e\u003ccode\u003e592d8f4\u003c/code\u003e\u003c/a\u003e\nAdds \u0026quot;acr\u0026quot; and \u0026quot;auth_time\u0026quot; parameter (RFC 9470)\nsupport to TokenIntrospection...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/branches/compare/11.37..11.34\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.nimbusds:oauth2-oidc-sdk\u0026package-manager\u003dmaven\u0026previous-version\u003d11.34\u0026new-version\u003d11.37)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "168a969147ea77a6fe8f12fa15c6bc25b1e671f2",
      "tree": "28fb1af6255e6f73a7263d5278aa15177a91e685",
      "parents": [
        "07d998733b9c31117941d7ec6c983e7ae51d47b7"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 30 10:21:57 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 30 10:21:57 2026 +0200"
      },
      "message": "MINOR: Bump io.netty:netty-bom from 4.2.10.Final to 4.2.12.Final (#1091)\n\nBumps [io.netty:netty-bom](https://github.com/netty/netty) from\n4.2.10.Final to 4.2.12.Final.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/netty/netty/releases\"\u003eio.netty:netty-bom\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003enetty-4.2.12.Final\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRevert \u0026quot;Eliminate redundant bounds checks in CompositeByteBuf\naccessors\u0026quot; by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16550\"\u003enetty/netty#16550\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final\"\u003ehttps://github.com/netty/netty/compare/netty-4.2.11.Final...netty-4.2.12.Final\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003enetty-4.2.11.Final\u003c/h2\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2026-33871, \u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv\"\u003eHTTP/2\nCONTINUATION Frame Flood Denial of Service\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eCVE-2026-33870, \u003ca\nhref\u003d\"https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8\"\u003eHTTP\nRequest Smuggling via Chunked Extension Quoted-String Parsing\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to latest JDK 26 EA release by \u003ca\nhref\u003d\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16230\"\u003enetty/netty#16230\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP3: Allow to support non-standard HTTP3 settings by \u003ca\nhref\u003d\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16171\"\u003enetty/netty#16171\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix Incorrect nanos-to-millis conversion in epoll_wait EINTR retry\nloop by \u003ca\nhref\u003d\"https://github.com/adwsingh\"\u003e\u003ccode\u003e@​adwsingh\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16245\"\u003enetty/netty#16245\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllocate one large segment and slice for each MsgHdrMemory by \u003ca\nhref\u003d\"https://github.com/dreamlike-ocean\"\u003e\u003ccode\u003e@​dreamlike-ocean\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16234\"\u003enetty/netty#16234\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake RefCntOpenSslContext.deallocate more robust by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16253\"\u003enetty/netty#16253\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEpoll: Fix excessive CPU usage when Channel is only registered but\nno… by \u003ca\nhref\u003d\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16250\"\u003enetty/netty#16250\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to gcc for arm 10.3-2021.07 by \u003ca\nhref\u003d\"https://github.com/m1ngyuan\"\u003e\u003ccode\u003e@​m1ngyuan\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16255\"\u003enetty/netty#16255\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd acmeIdentifier extension support to pkitesting by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16256\"\u003enetty/netty#16256\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate JDK versions to latest patch releases by \u003ca\nhref\u003d\"https://github.com/m1ngyuan\"\u003e\u003ccode\u003e@​m1ngyuan\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16254\"\u003enetty/netty#16254\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid allocation in HttpObjectEncoder.addEncodedLengthHex method by\n\u003ca href\u003d\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16241\"\u003enetty/netty#16241\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16269\"\u003enetty/netty#16269\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRevert \u0026quot;Automatic backporting workflow from 4.1 to 4.2\u0026quot; by\n\u003ca href\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in\n\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16270\"\u003enetty/netty#16270\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP2: Correctly account for padding when decompress by \u003ca\nhref\u003d\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16264\"\u003enetty/netty#16264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16271\"\u003enetty/netty#16271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAutomatic backporting workflow from 4.1 to 4.2 by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16273\"\u003enetty/netty#16273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBackport PRs must be created with personal access tokens by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16276\"\u003enetty/netty#16276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpose QuicSslContextBuilder::sni by \u003ca\nhref\u003d\"https://github.com/ZeroErrors\"\u003e\u003ccode\u003e@​ZeroErrors\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16178\"\u003enetty/netty#16178\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd more porting workflows by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16275\"\u003enetty/netty#16275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd more porting workflows by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16283\"\u003enetty/netty#16283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove the unpooled allocator from test permutations by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16282\"\u003enetty/netty#16282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSome polishing of the porting workflows by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16288\"\u003enetty/netty#16288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAllow to set destination connection id when creating a client side\nQuicheChannel by \u003ca\nhref\u003d\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16286\"\u003enetty/netty#16286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate to latest JDK26 EA build by \u003ca\nhref\u003d\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16295\"\u003enetty/netty#16295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd javadoc to clarify responsibility of the user when generating\nthe remote connection id by \u003ca\nhref\u003d\"https://github.com/normanmaurer\"\u003e\u003ccode\u003e@​normanmaurer\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16293\"\u003enetty/netty#16293\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMake the build run faster by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16290\"\u003enetty/netty#16290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix IDE warnings in SslHandler by \u003ca\nhref\u003d\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16237\"\u003enetty/netty#16237\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDecrease Long allocations and map.put calls in\nReferenceCountedOpenSllEngine in handshake() method by \u003ca\nhref\u003d\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16242\"\u003enetty/netty#16242\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport boringssl SSLCredential API by \u003ca\nhref\u003d\"https://github.com/jmcrawford45\"\u003e\u003ccode\u003e@​jmcrawford45\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/15919\"\u003enetty/netty#15919\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix high-order bit aliasing in HttpUtil.validateToken by \u003ca\nhref\u003d\"https://github.com/furkanvarol\"\u003e\u003ccode\u003e@​furkanvarol\u003c/code\u003e\u003c/a\u003e in\n\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16279\"\u003enetty/netty#16279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove multi-byte access performance when UNALIGNED availability is\nunknown by \u003ca\nhref\u003d\"https://github.com/Songdoeon\"\u003e\u003ccode\u003e@​Songdoeon\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16207\"\u003enetty/netty#16207\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid unnecessary SSL.getVersion() call and string allocation in\nReferenceCountedOpenSslEngine by \u003ca\nhref\u003d\"https://github.com/doom369\"\u003e\u003ccode\u003e@​doom369\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16278\"\u003enetty/netty#16278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport more branch freedom for auto-porting by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16300\"\u003enetty/netty#16300\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: the precedence of + is higher than \u0026gt;\u0026gt; by \u003ca\nhref\u003d\"https://github.com/cuiweixie\"\u003e\u003ccode\u003e@​cuiweixie\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16312\"\u003enetty/netty#16312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdaptiveByteBufAllocator: make sure byteBuf.capacity() not greater\nthan byteBuf.maxCapacity() by \u003ca\nhref\u003d\"https://github.com/laosijikaichele\"\u003e\u003ccode\u003e@​laosijikaichele\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16309\"\u003enetty/netty#16309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix flaky PooledByteBufAllocatorTest by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16313\"\u003enetty/netty#16313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix pooled arena accounting tests by \u003ca\nhref\u003d\"https://github.com/chrisvest\"\u003e\u003ccode\u003e@​chrisvest\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/pull/16321\"\u003enetty/netty#16321\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/67ce541e4692853e24fc506466960db35bb64914\"\u003e\u003ccode\u003e67ce541\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release netty-4.2.12.Final\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/7074624644b79f4e97081bd58a58ed135962b8c2\"\u003e\u003ccode\u003e7074624\u003c/code\u003e\u003c/a\u003e\nRevert \u0026quot;Eliminate redundant bounds checks in CompositeByteBuf\naccessors\u0026quot; (\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/c3b0a43442dbf84e3eb161d5f252623f832f1579\"\u003e\u003ccode\u003ec3b0a43\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/c94a8180e749f694fb76963dd494bae17c31aff6\"\u003e\u003ccode\u003ec94a818\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release netty-4.2.11.Final\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/3b76df185678353733aa21702d6be16130d188a0\"\u003e\u003ccode\u003e3b76df1\u003c/code\u003e\u003c/a\u003e\nMerge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/aae944a19eb036993fc47c4b40639476f519deaf\"\u003e\u003ccode\u003eaae944a\u003c/code\u003e\u003c/a\u003e\nAuto-port 4.2: Limit the number of Continuation frames per HTTP2 Headers\n(\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/60014996491c41d91c26f80bca096610f34fc858\"\u003e\u003ccode\u003e6001499\u003c/code\u003e\u003c/a\u003e\nEliminate redundant bounds checks in CompositeByteBuf accessors (\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/issues/16525\"\u003e#16525\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/a7fbb6f84625ef29733a1506ed3520e3c21d5247\"\u003e\u003ccode\u003ea7fbb6f\u003c/code\u003e\u003c/a\u003e\nJdkZlibDecoder: accumulate decompressed output before firing channelRead\n(\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/7937553d8f49e17b064f57b1414907aed8e3be3d\"\u003e\u003ccode\u003e7937553\u003c/code\u003e\u003c/a\u003e\nEnforce io.netty.maxDirectMemory accounting on all Java versions (\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/issues/16489\"\u003e#16489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/893ea2ea6c35c9e1812e5d331530b88d8690022b\"\u003e\u003ccode\u003e893ea2e\u003c/code\u003e\u003c/a\u003e\nAllocate less in QueryStringDecoder.addParam for typical use case (\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/issues/16527\"\u003e#16527\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/netty/netty/compare/netty-4.2.10.Final...netty-4.2.12.Final\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dio.netty:netty-bom\u0026package-manager\u003dmaven\u0026previous-version\u003d4.2.10.Final\u0026new-version\u003d4.2.12.Final)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "07d998733b9c31117941d7ec6c983e7ae51d47b7",
      "tree": "899a15d4104e8e59740f6c2d9d693945e88e9b24",
      "parents": [
        "01affd741864c493cb76b9357fb32ead7f977672"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Mar 24 09:40:43 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Mar 24 09:40:43 2026 +0100"
      },
      "message": "MINOR: Bump com.h2database:h2 from 2.3.232 to 2.4.240 (#1084)\n\nBumps [com.h2database:h2](https://github.com/h2database/h2database) from\n2.3.232 to 2.4.240.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/h2database/h2database/releases\"\u003ecom.h2database:h2\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 2.4.240\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/h2database/h2database/commit/c8eb81be7a30786b7534377a7e475bdaa08aeeb8\"\u003e\u003ccode\u003ec8eb81b\u003c/code\u003e\u003c/a\u003e\nin preparation for a release\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/h2database/h2database/commit/7ff5ee5cf0fa7d75ad341ebf53ff9301e390b537\"\u003e\u003ccode\u003e7ff5ee5\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/h2database/h2database/issues/4260\"\u003e#4260\u003c/a\u003e\nfrom JackPGreen/update-maven-central-url\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/h2database/h2database/commit/da4c337f0251d51b2aaeeb28133fb87c8da4907c\"\u003e\u003ccode\u003eda4c337\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/h2database/h2database/issues/4271\"\u003e#4271\u003c/a\u003e\nfrom IrisesD/master\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/h2database/h2database/commit/d053544f6baa9d91339b51a1b30572d1fabfe705\"\u003e\u003ccode\u003ed053544\u003c/code\u003e\u003c/a\u003e\nfeat: allow \u003ccode\u003eCATALOG\u003c/code\u003e in \u003ccode\u003eCREATE SCHEMA\u003c/code\u003e and\n\u003ccode\u003eDROP SCHEMA\u003c/code\u003e (\u003ca\nhref\u003d\"https://redirect.github.com/h2database/h2database/issues/4277\"\u003e#4277\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/h2database/h2database/commit/a448d91e083eceec493be60d398656f27a0ed4c7\"\u003e\u003ccode\u003ea448d91\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/h2database/h2database/issues/4273\"\u003e#4273\u003c/a\u003e\nfrom naive924/feat/compactThreads\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/h2database/h2database/commit/6672123e6a404d6fde309bc9871538ddf838b0b6\"\u003e\u003ccode\u003e6672123\u003c/code\u003e\u003c/a\u003e\nfix: change log\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/h2database/h2database/commit/858e74abc3676686c547f0182a73519e9962044c\"\u003e\u003ccode\u003e858e74a\u003c/code\u003e\u003c/a\u003e\nfix: MVStore.compact: run map copy in parallel by default (¼ cores,\noverride ...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/h2database/h2database/commit/bce0ec1f9e116dae837d756af14281d3d566905d\"\u003e\u003ccode\u003ebce0ec1\u003c/code\u003e\u003c/a\u003e\nfeat: parallel map copy option for MVStore.compact()\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/h2database/h2database/commit/d8a6cc3e20e028ac854c08764b9c3e41e360b72e\"\u003e\u003ccode\u003ed8a6cc3\u003c/code\u003e\u003c/a\u003e\nFix command syntax in help.csv\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/h2database/h2database/commit/c45413cdc3f0c0bf77a62817c14cdaec65c87096\"\u003e\u003ccode\u003ec45413c\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/h2database/h2database/issues/4266\"\u003e#4266\u003c/a\u003e\nfrom andreitokar/issue-4208-2\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/h2database/h2database/compare/version-2.3.232...version-2.4.240\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.h2database:h2\u0026package-manager\u003dmaven\u0026previous-version\u003d2.3.232\u0026new-version\u003d2.4.240)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "01affd741864c493cb76b9357fb32ead7f977672",
      "tree": "eadcdbd78569f44ee875d7701c3a73474f7ba7e7",
      "parents": [
        "d5497915c604582e66613c96599b32a812fda4bc"
      ],
      "author": {
        "name": "JB Onofré",
        "email": "jb.onofre@dremio.com",
        "time": "Tue Mar 24 07:49:08 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Mar 24 07:49:08 2026 +0100"
      },
      "message": "GH-1078: Upgrade minimum JDK version from 11 to 17 (#1079)\n\nUpdate compiler source/target/release to 17 across build config\n(pom.xml, bom), CI workflows, Docker images, Brewfile, and\ndocumentation. Replace deprecated boxed-type constructors with valueOf()\nin HolderReaderImpl codegen template to fix -Werror under release\u003d17.\n\n## What\u0027s Changed\n\nJDK 11 would not be supported in some cases.\n\n**This contains breaking changes.** \u003c!-- Remove this line if there are\nno breaking changes. --\u003e\n\nCloses #1078."
    },
    {
      "commit": "d5497915c604582e66613c96599b32a812fda4bc",
      "tree": "5981b8e5cffa7169a9d34ede72fd20401d242176",
      "parents": [
        "d9d6112b3e4037d72aa44e978bc72c2f7706c52c"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 23 18:47:12 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 23 18:47:12 2026 +0100"
      },
      "message": "MINOR: Bump com.fasterxml.jackson:jackson-bom from 2.21.1 to 2.21.2 (#1082)\n\nBumps\n[com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom)\nfrom 2.21.1 to 2.21.2.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/10e12a55b0a1d0caaa82b8b41101e8ecd39ed976\"\u003e\u003ccode\u003e10e12a5\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release jackson-bom-2.21.2\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/d75490376b71e112c18fbe4d5f43a984bb2b2d6d\"\u003e\u003ccode\u003ed754903\u003c/code\u003e\u003c/a\u003e\nPrep for 2.21.2 release\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/63e1b3bb3e115e40580cd8c57263955d4fcbee24\"\u003e\u003ccode\u003e63e1b3b\u003c/code\u003e\u003c/a\u003e\nPost-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/716ab0d1d95d45d07e9f00f5b8a889f500375981\"\u003e\u003ccode\u003e716ab0d\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.21.1...jackson-bom-2.21.2\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.fasterxml.jackson:jackson-bom\u0026package-manager\u003dmaven\u0026previous-version\u003d2.21.1\u0026new-version\u003d2.21.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "d9d6112b3e4037d72aa44e978bc72c2f7706c52c",
      "tree": "38f9d6f10a3862395208e88a7ab04fca891fc001",
      "parents": [
        "1348b8dc8302daebe7bb76df9f3c13bdcf2766e9"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 23 18:46:51 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 23 18:46:51 2026 +0100"
      },
      "message": "MINOR: Bump com.google.guava:guava-bom from 33.4.8-jre to 33.5.0-jre (#1083)\n\nBumps [com.google.guava:guava-bom](https://github.com/google/guava) from\n33.4.8-jre to 33.5.0-jre.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/google/guava/releases\"\u003ecom.google.guava:guava-bom\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e33.5.0\u003c/h2\u003e\n\u003ch3\u003eMaven\u003c/h3\u003e\n\u003cpre lang\u003d\"xml\"\u003e\u003ccode\u003e\u0026lt;dependency\u0026gt;\n  \u0026lt;groupId\u0026gt;com.google.guava\u0026lt;/groupId\u0026gt;\n  \u0026lt;artifactId\u0026gt;guava\u0026lt;/artifactId\u0026gt;\n  \u0026lt;version\u0026gt;33.5.0-jre\u0026lt;/version\u0026gt;\n  \u0026lt;!-- or, for Android: --\u0026gt;\n  \u0026lt;version\u0026gt;33.5.0-android\u0026lt;/version\u0026gt;\n\u0026lt;/dependency\u0026gt;\n\u003c/code\u003e\u003c/pre\u003e\n\u003ch3\u003eJar files\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://repo1.maven.org/maven2/com/google/guava/guava/33.5.0-jre/guava-33.5.0-jre.jar\"\u003e33.5.0-jre.jar\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://repo1.maven.org/maven2/com/google/guava/guava/33.5.0-android/guava-33.5.0-android.jar\"\u003e33.5.0-android.jar\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eGuava requires \u003ca\nhref\u003d\"https://github.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies\"\u003eone\nruntime dependency\u003c/a\u003e, which you can download here:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar\"\u003efailureaccess-1.0.3.jar\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eJavadoc\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://guava.dev/releases/33.5.0-jre/api/docs/\"\u003e33.5.0-jre\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://guava.dev/releases/33.5.0-android/api/docs/\"\u003e33.5.0-android\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eJDiff\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://guava.dev/releases/33.5.0-jre/api/diffs/\"\u003e33.5.0-jre vs.\n33.4.8-jre\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://guava.dev/releases/33.5.0-android/api/diffs/\"\u003e33.5.0-android\nvs. 33.4.8-android\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://guava.dev/releases/33.5.0-android/api/androiddiffs/\"\u003e33.5.0-android\nvs. 33.5.0-jre\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChangelog\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRestored the \u003ccode\u003eAutomatic-Module-Name\u003c/code\u003e to\n\u003ccode\u003eguava-android\u003c/code\u003e. (It, unlike, \u003ccode\u003eguava-jre\u003c/code\u003e, is not\na proper module.) (7a04a8a955)\u003c/li\u003e\n\u003cli\u003eFor users of \u003ccode\u003eguava-gwt\u003c/code\u003e: Google \u003ca\nhref\u003d\"https://redirect.github.com/gwtproject/gwt-site/pull/394\"\u003ehas\nmoved off GWT internally\u003c/a\u003e. We plan to continue to release\n\u003ccode\u003eguava-gwt\u003c/code\u003e for users of GWT and \u003ca\nhref\u003d\"https://github.com/google/j2cl\"\u003eJ2CL\u003c/a\u003e, but the artifact is no\nlonger tested for GWT-specific issues, and we have limited resources to\nfix any unexpected issues that might arise. While we do not anticipate\nany specific problems, we can\u0027t guarantee how long support will\ncontinue.\u003c/li\u003e\n\u003cli\u003eIncreased our Android \u003ccode\u003eminSdkVersion\u003c/code\u003e to 23\n(Marshmallow). This follows the minimum of Google\u0027s foundational Android\nlibraries, and we expect it to have no practical impact on users.\n(5c23347cc1)\u003c/li\u003e\n\u003cli\u003eListed the JSpecify annotations as an optional dependency in our\nOSGi metadata. (2dfd572981)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ecache\u003c/code\u003e: Improved the handling of exceptions from compute\nfunctions in \u003ccode\u003eCache.asMap()\u003c/code\u003e. (We do still \u003ca\nhref\u003d\"https://guava.dev/releases/snapshot-jre/api/docs/com/google/common/cache/CacheBuilder.html#prefer-caffeine-over-guava-s-caching-api-heading\"\u003erecommend\u003c/a\u003e\nusing \u003ca href\u003d\"https://github.com/ben-manes/caffeine\"\u003eCaffeine\u003c/a\u003e\nrather than \u003ccode\u003ecom.google.common.cache\u003c/code\u003e.) (087f2c4a80)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ecollect\u003c/code\u003e: Improved \u003ccode\u003eIterators.mergeSorted()\u003c/code\u003e\nto preserve stability for equal elements. (4dc93be9a8)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003emath\u003c/code\u003e: Added \u003ccode\u003esaturatedAbs\u003c/code\u003e methods to\n\u003ccode\u003eIntMath\u003c/code\u003e and \u003ccode\u003eLongMath\u003c/code\u003e. (ed0e518f20)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003enet\u003c/code\u003e: Added \u003ccode\u003eimage/avif\u003c/code\u003e to\n\u003ccode\u003eMediaType\u003c/code\u003e. (53344caba6)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003etesting\u003c/code\u003e: Made \u003ccode\u003eCollectorTester\u003c/code\u003e available to\nAndroid users. (294c251079)\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eutil.concurrent\u003c/code\u003e: Added \u003ccode\u003eStriped.custom\u003c/code\u003e.\n(1586eb271d)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/google/guava/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.google.guava:guava-bom\u0026package-manager\u003dmaven\u0026previous-version\u003d33.4.8-jre\u0026new-version\u003d33.5.0-jre)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "1348b8dc8302daebe7bb76df9f3c13bdcf2766e9",
      "tree": "6ac37cb670668fc2dc4d970608692e282d55a864",
      "parents": [
        "a8b238061bfdab433d25ee223ce11d697a572efd"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 23 13:16:04 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 23 13:16:04 2026 +0100"
      },
      "message": "MINOR: Bump io.netty:netty-bom from 4.2.9.Final to 4.2.10.Final (#1085)\n\nBumps [io.netty:netty-bom](https://github.com/netty/netty) from\n4.2.9.Final to 4.2.10.Final.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/4cc98736c3947bc93122e0b64e0bd8fc970c6437\"\u003e\u003ccode\u003e4cc9873\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release netty-4.2.10.Final\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/54b8663619577749511269a4149adf018438c8b0\"\u003e\u003ccode\u003e54b8663\u003c/code\u003e\u003c/a\u003e\nRemove unnecessary allocations and abstractions in HttpContentCompressor\n(\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/961f427289730cd1ff92b734ddeea8dd0b7d276a\"\u003e\u003ccode\u003e961f427\u003c/code\u003e\u003c/a\u003e\nUpdate to netty-tcnative 2.0.75.Final (\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/issues/16227\"\u003e#16227\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/3007ba9d2853a03d3d0281be1ec9b358e48170b1\"\u003e\u003ccode\u003e3007ba9\u003c/code\u003e\u003c/a\u003e\nUse recommanded finalize chain pattern when override finalize() method\n(\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/issues/16212\"\u003e#16212\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/b91804287e0e06e8ca9da5e508f0490f9b7e4ad9\"\u003e\u003ccode\u003eb918042\u003c/code\u003e\u003c/a\u003e\nUpdate some dependencies (\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/issues/16198\"\u003e#16198\u003c/a\u003e)\n(\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/issues/16215\"\u003e#16215\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/874c99529e1db187cc3f5346f5f8ffea94e34f0c\"\u003e\u003ccode\u003e874c995\u003c/code\u003e\u003c/a\u003e\nReduce allocations on DefaultHeaders::containsValue (\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/issues/15843\"\u003e#15843\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/e0fe7940ce6070be48b8cb5af22ce9e7e4813ec2\"\u003e\u003ccode\u003ee0fe794\u003c/code\u003e\u003c/a\u003e\nRemove unnecessary null check in WebSocketServerExtensionHandler (\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/issues/16201\"\u003e#16201\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/1b0636b7ac773052c1fefe7f86593e655aacb1b4\"\u003e\u003ccode\u003e1b0636b\u003c/code\u003e\u003c/a\u003e\nMove default compression options into static variable in\nHttpContentCompresso...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/85a3a0ee8d67bac9f6a85aa6444e0805564fffc6\"\u003e\u003ccode\u003e85a3a0e\u003c/code\u003e\u003c/a\u003e\ncodec-http2: move the accessors from Http2Headers to DefaultHttp2Headers\n(\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/issues/16\"\u003e#16\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/netty/netty/commit/f44a88d340580510cb3a94e454c10cb949dc07fd\"\u003e\u003ccode\u003ef44a88d\u003c/code\u003e\u003c/a\u003e\nImprove chunk picking for the large-size buddy allocator (\u003ca\nhref\u003d\"https://redirect.github.com/netty/netty/issues/16179\"\u003e#16179\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/netty/netty/compare/netty-4.2.9.Final...netty-4.2.10.Final\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dio.netty:netty-bom\u0026package-manager\u003dmaven\u0026previous-version\u003d4.2.9.Final\u0026new-version\u003d4.2.10.Final)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "a8b238061bfdab433d25ee223ce11d697a572efd",
      "tree": "85bc2474a28afe7f28e7f87f6a74e3b896729ac5",
      "parents": [
        "899e883428ee067da4542393e7ecc958cfb5d90c"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 23 13:15:02 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 23 13:15:02 2026 +0100"
      },
      "message": "MINOR: Bump org.mockito:mockito-bom from 5.21.0 to 5.23.0 (#1087)\n\nBumps [org.mockito:mockito-bom](https://github.com/mockito/mockito) from\n5.21.0 to 5.23.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/mockito/mockito/releases\"\u003eorg.mockito:mockito-bom\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.23.0\u003c/h2\u003e\n\u003ch2\u003eNOTE: Breaking change for Android\u003c/h2\u003e\n\u003cp\u003eThe \u003ccode\u003emockito-android\u003c/code\u003e artifact has a breaking change:\ntests now require a device or emulator based on API 28+ (Android P).\nThis is to enable new support for mocking Kotlin classes. See \u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/issues/3788\"\u003e#3788\u003c/a\u003e\nfor more details.\u003c/p\u003e\n\u003chr /\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e\u003cem\u003eChangelog\ngenerated by \u003ca\nhref\u003d\"https://github.com/shipkit/shipkit-changelog\"\u003eShipkit Changelog\nGradle Plugin\u003c/a\u003e\u003c/em\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted\n--\u003e\u003c/p\u003e\n\u003ch4\u003e5.23.0\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e2026-03-11 - \u003ca\nhref\u003d\"https://github.com/mockito/mockito/compare/v5.22.0...v5.23.0\"\u003e6\ncommit(s)\u003c/a\u003e by Brice Dutheil, Joshua Selbo, Philippe Kernevez\u003c/li\u003e\n\u003cli\u003eReplace mockito-android mock maker implementation with\ndexmaker-mockito-inline [(\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/issues/3792\"\u003e#3792\u003c/a\u003e)](\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/pull/3792\"\u003emockito/mockito#3792\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix StackOverflowError with AbstractList after using mockSingleton\n[(\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/issues/3790\"\u003e#3790\u003c/a\u003e)](\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/pull/3790\"\u003emockito/mockito#3790\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMark parameters of \u003ccode\u003eMockito.when\u003c/code\u003e \u003ccode\u003e@Nullable\u003c/code\u003e\n[(\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/issues/3503\"\u003e#3503\u003c/a\u003e)](\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/issues/3503\"\u003emockito/mockito#3503\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev5.22.0\u003c/h2\u003e\n\u003cp\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted --\u003e\u003cem\u003eChangelog\ngenerated by \u003ca\nhref\u003d\"https://github.com/shipkit/shipkit-changelog\"\u003eShipkit Changelog\nGradle Plugin\u003c/a\u003e\u003c/em\u003e\u003c!-- raw HTML omitted --\u003e\u003c!-- raw HTML omitted\n--\u003e\u003c/p\u003e\n\u003ch4\u003e5.22.0\u003c/h4\u003e\n\u003cul\u003e\n\u003cli\u003e2026-02-27 - \u003ca\nhref\u003d\"https://github.com/mockito/mockito/compare/v5.21.0...v5.22.0\"\u003e6\ncommit(s)\u003c/a\u003e by Joshua Selbo, NiMv1, Rafael Winterhalter,\ndependabot[bot], eunbin son\u003c/li\u003e\n\u003cli\u003eAvoid mocking of internal static utilities [(\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/issues/3785\"\u003e#3785\u003c/a\u003e)](\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/pull/3785\"\u003emockito/mockito#3785\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump graalvm/setup-graalvm from 1.4.4 to 1.4.5 [(\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/issues/3780\"\u003e#3780\u003c/a\u003e)](\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/pull/3780\"\u003emockito/mockito#3780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eStatic mocking of UUID.class corrupted under JDK 25 [(\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/issues/3778\"\u003e#3778\u003c/a\u003e)](\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/issues/3778\"\u003emockito/mockito#3778\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump actions/upload-artifact from 5 to 6 [(\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/issues/3774\"\u003e#3774\u003c/a\u003e)](\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/pull/3774\"\u003emockito/mockito#3774\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs: clarify RETURNS_MOCKS behavior with sealed abstract enums\n(Java 15+) [(\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/issues/3773\"\u003e#3773\u003c/a\u003e)](\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/pull/3773\"\u003emockito/mockito#3773\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd tests for Sets utility class [(\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/issues/3771\"\u003e#3771\u003c/a\u003e)](\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/pull/3771\"\u003emockito/mockito#3771\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd core API to enable Kotlin singleton mocking [(\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/issues/3762\"\u003e#3762\u003c/a\u003e)](\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/pull/3762\"\u003emockito/mockito#3762\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eStubbing Kotlin \u003ccode\u003eobject\u003c/code\u003e singletons [(\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/issues/3652\"\u003e#3652\u003c/a\u003e)](\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/issues/3652\"\u003emockito/mockito#3652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eIncorrect documentation for RETURNS_MOCKS [(\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/issues/3285\"\u003e#3285\u003c/a\u003e)](\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/issues/3285\"\u003emockito/mockito#3285\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/mockito/mockito/commit/a231205b240e7884a63bf0f63440012867a4da21\"\u003e\u003ccode\u003ea231205\u003c/code\u003e\u003c/a\u003e\nFix StackOverflowError with AbstractList after using mockSingleton (\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/issues/3790\"\u003e#3790\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/mockito/mockito/commit/f6a91a6a6138c776fa8b41ffb3fd078c64802044\"\u003e\u003ccode\u003ef6a91a6\u003c/code\u003e\u003c/a\u003e\nReplace mockito-android mock maker implementation with\ndexmaker-mockito-inlin...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/mockito/mockito/commit/aa2298a627ab2c0bce07f648e444477d8e2e05ba\"\u003e\u003ccode\u003eaa2298a\u003c/code\u003e\u003c/a\u003e\nfix: make spotless happy\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/mockito/mockito/commit/a6729d657e232ca64da81d9801d7b8f3be6fc49a\"\u003e\u003ccode\u003ea6729d6\u003c/code\u003e\u003c/a\u003e\nchore: update BDDMockito with jspecify annotation\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/mockito/mockito/commit/bb83c922484cfd3693d61549b5d6ef39a9c02c2b\"\u003e\u003ccode\u003ebb83c92\u003c/code\u003e\u003c/a\u003e\nchore: move jspecify as a compile only dependency\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/mockito/mockito/commit/47a46954cd1c0f8ef64ec63d43da9b71081d74e6\"\u003e\u003ccode\u003e47a4695\u003c/code\u003e\u003c/a\u003e\nchore: add jspecify with minimal change. Fixes \u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/issues/3503\"\u003e#3503\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/mockito/mockito/commit/25f13951d35ca391ee50207e6c564f3e869f3d91\"\u003e\u003ccode\u003e25f1395\u003c/code\u003e\u003c/a\u003e\nAdd core API to enable Kotlin singleton mocking (\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/issues/3762\"\u003e#3762\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/mockito/mockito/commit/ef9ee5529853d96028b520f84a41ffd41afc9a1d\"\u003e\u003ccode\u003eef9ee55\u003c/code\u003e\u003c/a\u003e\nAvoids mocking private static methods, as well as package-private static\nmeth...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/mockito/mockito/commit/d16fcfc274d7ca03a2b4bdc22dd7c3ec6dac8690\"\u003e\u003ccode\u003ed16fcfc\u003c/code\u003e\u003c/a\u003e\nBump graalvm/setup-graalvm from 1.4.4 to 1.4.5 (\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/issues/3780\"\u003e#3780\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/mockito/mockito/commit/27eb8a3acdd9c9eb3ff788a71b22777026874439\"\u003e\u003ccode\u003e27eb8a3\u003c/code\u003e\u003c/a\u003e\nClarify \u003ccode\u003eRETURNS_MOCKS\u003c/code\u003e behavior with sealed abstract enums\n(Java 15+) (\u003ca\nhref\u003d\"https://redirect.github.com/mockito/mockito/issues/3773\"\u003e#3773\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/mockito/mockito/compare/v5.21.0...v5.23.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dorg.mockito:mockito-bom\u0026package-manager\u003dmaven\u0026previous-version\u003d5.21.0\u0026new-version\u003d5.23.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "899e883428ee067da4542393e7ecc958cfb5d90c",
      "tree": "84a663c8528b07f45cc5c465165ecc6ed9633dae",
      "parents": [
        "27382cd92baf29762dba2454d7e9e911c58821e3"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 23 13:14:24 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 23 13:14:24 2026 +0100"
      },
      "message": "MINOR: Bump com.google.protobuf:protobuf-bom from 4.33.4 to 4.34.1 (#1086)\n\nBumps\n[com.google.protobuf:protobuf-bom](https://github.com/protocolbuffers/protobuf)\nfrom 4.33.4 to 4.34.1.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/protocolbuffers/protobuf/commits\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.google.protobuf:protobuf-bom\u0026package-manager\u003dmaven\u0026previous-version\u003d4.33.4\u0026new-version\u003d4.34.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "27382cd92baf29762dba2454d7e9e911c58821e3",
      "tree": "18a15e47940c27f63d836b9a6cea39c66c13a005",
      "parents": [
        "394d12ef455fad83f76ec4b3a79ac6b5c6fe1139"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 16 10:07:18 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 16 10:07:18 2026 +0100"
      },
      "message": "MINOR: Bump checker.framework.version from 3.53.1 to 3.54.0 (#1070)\n\nBumps `checker.framework.version` from 3.53.1 to 3.54.0.\nUpdates `org.checkerframework:checker-qual` from 3.53.1 to 3.54.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/releases\"\u003eorg.checkerframework:checker-qual\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eChecker Framework 3.54.0\u003c/h2\u003e\n\u003ch2\u003eVersion 3.54.0 (2026-03-02)\u003c/h2\u003e\n\u003ch3\u003eUser-visible changes\u003c/h3\u003e\n\u003cp\u003eCommand-line arguments:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e-AinferOutputDirectory\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eRemoved long-deprecated\n\u003ccode\u003e-Alint\u003dforbidnonnullarraycomponents\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eNew command-line argument \u003ccode\u003e-Aonelinemsg\u003c/code\u003e puts error\nmessages on a single line. This is useful when using a tool that only\nshows the first line of the error.\u003c/p\u003e\n\u003cp\u003eThe command-line argument \u003ccode\u003e-Anomsgtext\u003c/code\u003e surrounds the\nerror key with brackets instead of parenthesis. This matches Java error\nmessages.\u003c/p\u003e\n\u003ch3\u003eImplementation details\u003c/h3\u003e\n\u003cp\u003eIn \u003ccode\u003eAnnotatedTypeFactory\u003c/code\u003e,\n\u003ccode\u003ecanonicalAnnotation()\u003c/code\u003e returns a non-null value.\u003c/p\u003e\n\u003cp\u003eIn \u003ccode\u003eAnnotationClassLoader\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRenamed \u003ccode\u003ehasWellDefinedTargetMetaAnnotation()\u003c/code\u003e to\n\u003ccode\u003eisTypeQualifierAnnotation()\u003c/code\u003e. The method now returns\n\u003ccode\u003etrue\u003c/code\u003e for annotations bearing\n\u003ccode\u003e@InvisibleQualifier\u003c/code\u003e or \u003ccode\u003e@SubtypeOf\u003c/code\u003e, in addition\nto the existing \u003ccode\u003e@Target(TYPE_USE)\u003c/code\u003e check.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eIn \u003ccode\u003eTestDiagnostic\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRenamed field \u003ccode\u003emessage\u003c/code\u003e to \u003ccode\u003ekey\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded new nullable field \u003ccode\u003emessage\u003c/code\u003e for the full message\nwithout the key.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRemoved classes and methods that have been deprecated for more than\ntwo years.\u003c/p\u003e\n\u003ch3\u003eClosed issues\u003c/h3\u003e\n\u003cp\u003e\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/6874\"\u003e#6874\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7471\"\u003e#7471\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7475\"\u003e#7475\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7486\"\u003e#7486\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md\"\u003eorg.checkerframework:checker-qual\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 3.54.0 (2026-03-02)\u003c/h2\u003e\n\u003ch3\u003eUser-visible changes\u003c/h3\u003e\n\u003cp\u003eCommand-line arguments:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e-AinferOutputDirectory\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eRemoved long-deprecated\n\u003ccode\u003e-Alint\u003dforbidnonnullarraycomponents\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eNew command-line argument \u003ccode\u003e-Aonelinemsg\u003c/code\u003e puts error\nmessages on a single line.\nThis is useful when using a tool that only shows the first line of the\nerror.\u003c/p\u003e\n\u003cp\u003eThe command-line argument \u003ccode\u003e-Anomsgtext\u003c/code\u003e surrounds the\nerror key with brackets\ninstead of parenthesis. This matches Java error messages.\u003c/p\u003e\n\u003ch3\u003eImplementation details\u003c/h3\u003e\n\u003cp\u003eIn \u003ccode\u003eAnnotatedTypeFactory\u003c/code\u003e,\n\u003ccode\u003ecanonicalAnnotation()\u003c/code\u003e returns a non-null value.\u003c/p\u003e\n\u003cp\u003eIn \u003ccode\u003eAnnotationClassLoader\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRenamed \u003ccode\u003ehasWellDefinedTargetMetaAnnotation()\u003c/code\u003e to\n\u003ccode\u003eisTypeQualifierAnnotation()\u003c/code\u003e.\nThe method now returns \u003ccode\u003etrue\u003c/code\u003e for annotations bearing\n\u003ccode\u003e@InvisibleQualifier\u003c/code\u003e\nor \u003ccode\u003e@SubtypeOf\u003c/code\u003e, in addition to the existing\n\u003ccode\u003e@Target(TYPE_USE)\u003c/code\u003e check.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eIn \u003ccode\u003eTestDiagnostic\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRenamed field \u003ccode\u003emessage\u003c/code\u003e to \u003ccode\u003ekey\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded new nullable field \u003ccode\u003emessage\u003c/code\u003e for the full message\nwithout the key.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRemoved classes and methods that have been deprecated for more than\ntwo years.\u003c/p\u003e\n\u003ch3\u003eClosed issues\u003c/h3\u003e\n\u003cp\u003e\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/6874\"\u003e#6874\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7471\"\u003e#7471\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7475\"\u003e#7475\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7486\"\u003e#7486\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/a6eff70058f1cf8094315c0918a1d5ec1963788b\"\u003e\u003ccode\u003ea6eff70\u003c/code\u003e\u003c/a\u003e\nnew release 3.54.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/fd347006340c5a365a286b46d8c4eb5743fe39ae\"\u003e\u003ccode\u003efd34700\u003c/code\u003e\u003c/a\u003e\nPrep for release.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/edb6e7a0ee35ca54f440248a99af3c5c5a3335e0\"\u003e\u003ccode\u003eedb6e7a\u003c/code\u003e\u003c/a\u003e\nPrint error key in brackets (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7525\"\u003e#7525\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/a79b1dea956ab18bc23e95799a7559afac539f5a\"\u003e\u003ccode\u003ea79b1de\u003c/code\u003e\u003c/a\u003e\nShow details of the error message in test failures (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7513\"\u003e#7513\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/a5ecc22d196f7d87c3db465aaa11aaba97d3fec3\"\u003e\u003ccode\u003ea5ecc22\u003c/code\u003e\u003c/a\u003e\nClone the JDK using the same fork and branch as CF (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7491\"\u003e#7491\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/2770c5239b907f27b2609d13ed4d80535bf42893\"\u003e\u003ccode\u003e2770c52\u003c/code\u003e\u003c/a\u003e\nUpdate cimg/base Docker tag to v2026.03\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/bba6bc98c52031e0023cba575f83a2f2385c8fcf\"\u003e\u003ccode\u003ebba6bc9\u003c/code\u003e\u003c/a\u003e\nUpdate plugin com-gradleup-shadow to v9.3.2\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/3a6d4d4dadae58a1b4dc1b67cfb684de5e7185b2\"\u003e\u003ccode\u003e3a6d4d4\u003c/code\u003e\u003c/a\u003e\nUpdate error-prone monorepo to v2.48.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/70aa5f3ce93425a87543cb60048c3dbdbe0cd8b5\"\u003e\u003ccode\u003e70aa5f3\u003c/code\u003e\u003c/a\u003e\nUpdate plugin net-ltgt-errorprone to v5.1.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/0dbd3e77823b66b498b9b7890ffba81866e57f8d\"\u003e\u003ccode\u003e0dbd3e7\u003c/code\u003e\u003c/a\u003e\nPrepare for javac AST changes\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/compare/checker-framework-3.53.1...checker-framework-3.54.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `org.checkerframework:checker` from 3.53.1 to 3.54.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/releases\"\u003eorg.checkerframework:checker\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eChecker Framework 3.54.0\u003c/h2\u003e\n\u003ch2\u003eVersion 3.54.0 (2026-03-02)\u003c/h2\u003e\n\u003ch3\u003eUser-visible changes\u003c/h3\u003e\n\u003cp\u003eCommand-line arguments:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e-AinferOutputDirectory\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eRemoved long-deprecated\n\u003ccode\u003e-Alint\u003dforbidnonnullarraycomponents\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eNew command-line argument \u003ccode\u003e-Aonelinemsg\u003c/code\u003e puts error\nmessages on a single line. This is useful when using a tool that only\nshows the first line of the error.\u003c/p\u003e\n\u003cp\u003eThe command-line argument \u003ccode\u003e-Anomsgtext\u003c/code\u003e surrounds the\nerror key with brackets instead of parenthesis. This matches Java error\nmessages.\u003c/p\u003e\n\u003ch3\u003eImplementation details\u003c/h3\u003e\n\u003cp\u003eIn \u003ccode\u003eAnnotatedTypeFactory\u003c/code\u003e,\n\u003ccode\u003ecanonicalAnnotation()\u003c/code\u003e returns a non-null value.\u003c/p\u003e\n\u003cp\u003eIn \u003ccode\u003eAnnotationClassLoader\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRenamed \u003ccode\u003ehasWellDefinedTargetMetaAnnotation()\u003c/code\u003e to\n\u003ccode\u003eisTypeQualifierAnnotation()\u003c/code\u003e. The method now returns\n\u003ccode\u003etrue\u003c/code\u003e for annotations bearing\n\u003ccode\u003e@InvisibleQualifier\u003c/code\u003e or \u003ccode\u003e@SubtypeOf\u003c/code\u003e, in addition\nto the existing \u003ccode\u003e@Target(TYPE_USE)\u003c/code\u003e check.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eIn \u003ccode\u003eTestDiagnostic\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRenamed field \u003ccode\u003emessage\u003c/code\u003e to \u003ccode\u003ekey\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded new nullable field \u003ccode\u003emessage\u003c/code\u003e for the full message\nwithout the key.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRemoved classes and methods that have been deprecated for more than\ntwo years.\u003c/p\u003e\n\u003ch3\u003eClosed issues\u003c/h3\u003e\n\u003cp\u003e\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/6874\"\u003e#6874\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7471\"\u003e#7471\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7475\"\u003e#7475\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7486\"\u003e#7486\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md\"\u003eorg.checkerframework:checker\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 3.54.0 (2026-03-02)\u003c/h2\u003e\n\u003ch3\u003eUser-visible changes\u003c/h3\u003e\n\u003cp\u003eCommand-line arguments:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003e-AinferOutputDirectory\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eRemoved long-deprecated\n\u003ccode\u003e-Alint\u003dforbidnonnullarraycomponents\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eNew command-line argument \u003ccode\u003e-Aonelinemsg\u003c/code\u003e puts error\nmessages on a single line.\nThis is useful when using a tool that only shows the first line of the\nerror.\u003c/p\u003e\n\u003cp\u003eThe command-line argument \u003ccode\u003e-Anomsgtext\u003c/code\u003e surrounds the\nerror key with brackets\ninstead of parenthesis. This matches Java error messages.\u003c/p\u003e\n\u003ch3\u003eImplementation details\u003c/h3\u003e\n\u003cp\u003eIn \u003ccode\u003eAnnotatedTypeFactory\u003c/code\u003e,\n\u003ccode\u003ecanonicalAnnotation()\u003c/code\u003e returns a non-null value.\u003c/p\u003e\n\u003cp\u003eIn \u003ccode\u003eAnnotationClassLoader\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRenamed \u003ccode\u003ehasWellDefinedTargetMetaAnnotation()\u003c/code\u003e to\n\u003ccode\u003eisTypeQualifierAnnotation()\u003c/code\u003e.\nThe method now returns \u003ccode\u003etrue\u003c/code\u003e for annotations bearing\n\u003ccode\u003e@InvisibleQualifier\u003c/code\u003e\nor \u003ccode\u003e@SubtypeOf\u003c/code\u003e, in addition to the existing\n\u003ccode\u003e@Target(TYPE_USE)\u003c/code\u003e check.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eIn \u003ccode\u003eTestDiagnostic\u003c/code\u003e:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRenamed field \u003ccode\u003emessage\u003c/code\u003e to \u003ccode\u003ekey\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAdded new nullable field \u003ccode\u003emessage\u003c/code\u003e for the full message\nwithout the key.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRemoved classes and methods that have been deprecated for more than\ntwo years.\u003c/p\u003e\n\u003ch3\u003eClosed issues\u003c/h3\u003e\n\u003cp\u003e\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/6874\"\u003e#6874\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7471\"\u003e#7471\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7475\"\u003e#7475\u003c/a\u003e,\n\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7486\"\u003e#7486\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/a6eff70058f1cf8094315c0918a1d5ec1963788b\"\u003e\u003ccode\u003ea6eff70\u003c/code\u003e\u003c/a\u003e\nnew release 3.54.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/fd347006340c5a365a286b46d8c4eb5743fe39ae\"\u003e\u003ccode\u003efd34700\u003c/code\u003e\u003c/a\u003e\nPrep for release.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/edb6e7a0ee35ca54f440248a99af3c5c5a3335e0\"\u003e\u003ccode\u003eedb6e7a\u003c/code\u003e\u003c/a\u003e\nPrint error key in brackets (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7525\"\u003e#7525\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/a79b1dea956ab18bc23e95799a7559afac539f5a\"\u003e\u003ccode\u003ea79b1de\u003c/code\u003e\u003c/a\u003e\nShow details of the error message in test failures (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7513\"\u003e#7513\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/a5ecc22d196f7d87c3db465aaa11aaba97d3fec3\"\u003e\u003ccode\u003ea5ecc22\u003c/code\u003e\u003c/a\u003e\nClone the JDK using the same fork and branch as CF (\u003ca\nhref\u003d\"https://redirect.github.com/typetools/checker-framework/issues/7491\"\u003e#7491\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/2770c5239b907f27b2609d13ed4d80535bf42893\"\u003e\u003ccode\u003e2770c52\u003c/code\u003e\u003c/a\u003e\nUpdate cimg/base Docker tag to v2026.03\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/bba6bc98c52031e0023cba575f83a2f2385c8fcf\"\u003e\u003ccode\u003ebba6bc9\u003c/code\u003e\u003c/a\u003e\nUpdate plugin com-gradleup-shadow to v9.3.2\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/3a6d4d4dadae58a1b4dc1b67cfb684de5e7185b2\"\u003e\u003ccode\u003e3a6d4d4\u003c/code\u003e\u003c/a\u003e\nUpdate error-prone monorepo to v2.48.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/70aa5f3ce93425a87543cb60048c3dbdbe0cd8b5\"\u003e\u003ccode\u003e70aa5f3\u003c/code\u003e\u003c/a\u003e\nUpdate plugin net-ltgt-errorprone to v5.1.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/commit/0dbd3e77823b66b498b9b7890ffba81866e57f8d\"\u003e\u003ccode\u003e0dbd3e7\u003c/code\u003e\u003c/a\u003e\nPrepare for javac AST changes\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/typetools/checker-framework/compare/checker-framework-3.53.1...checker-framework-3.54.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "394d12ef455fad83f76ec4b3a79ac6b5c6fe1139",
      "tree": "6e5ca51d7d6fbae95e8ff538f60a819967cfc75e",
      "parents": [
        "97e491399382215e248b3ba33e7f0d7d9650da5e"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 16 10:04:36 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 16 10:04:36 2026 +0100"
      },
      "message": "MINOR: Bump com.fasterxml.jackson:jackson-bom from 2.21.0 to 2.21.1 (#1071)\n\nBumps\n[com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom)\nfrom 2.21.0 to 2.21.1.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/08a5a9a2156cb06674505e3308e6855ac9e25283\"\u003e\u003ccode\u003e08a5a9a\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release jackson-bom-2.21.1\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/5b0337650b3a8b56e81de5e5241143108c2b4bc6\"\u003e\u003ccode\u003e5b03376\u003c/code\u003e\u003c/a\u003e\nPrep for 2.21.1 release\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/1d78778a8fa5428d7f8347b5afe7ce6bfbdd0f77\"\u003e\u003ccode\u003e1d78778\u003c/code\u003e\u003c/a\u003e\nMerge branch \u00272.20\u0027 into 2.21\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/cd46b24421444beebc2bfc9a5ab8785111a031d0\"\u003e\u003ccode\u003ecd46b24\u003c/code\u003e\u003c/a\u003e\nPost-release dep version bump\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/17179ff9d28756155d0dd28da01e3f88d021e05c\"\u003e\u003ccode\u003e17179ff\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/2a26844ad13cf49562009867d55b30a084230f2b\"\u003e\u003ccode\u003e2a26844\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release jackson-bom-2.20.2\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/6adf11bced44313d271312b2f9d158d956a0e15b\"\u003e\u003ccode\u003e6adf11b\u003c/code\u003e\u003c/a\u003e\nPrep for 2.20.2 release\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/441df8a982a8d7d12523406087493092a16b34fb\"\u003e\u003ccode\u003e441df8a\u003c/code\u003e\u003c/a\u003e\nPost-release version bump\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/commit/a1b48141c0ed54614050e28c3edb3a55c4b245ec\"\u003e\u003ccode\u003ea1b4814\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.21.0...jackson-bom-2.21.1\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.fasterxml.jackson:jackson-bom\u0026package-manager\u003dmaven\u0026previous-version\u003d2.21.0\u0026new-version\u003d2.21.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "97e491399382215e248b3ba33e7f0d7d9650da5e",
      "tree": "3b8bf0c34f993b6feed200f321de576bee4f5a10",
      "parents": [
        "74a7996d40226c659c3b0ae03c0ae75a4964f282"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 16 09:59:10 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 16 09:59:10 2026 +0100"
      },
      "message": "MINOR: Bump com.github.luben:zstd-jni from 1.5.7-6 to 1.5.7-7 (#1073)\n\nBumps [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni)\nfrom 1.5.7-6 to 1.5.7-7.\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/luben/zstd-jni/commit/73bfa2722d168f948f619f88b29913ab4df8fe1d\"\u003e\u003ccode\u003e73bfa27\u003c/code\u003e\u003c/a\u003e\nBump version to v1.5.7-7\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/luben/zstd-jni/commit/322f6bcc084cd04322978e122d97c285b3e46e6d\"\u003e\u003ccode\u003e322f6bc\u003c/code\u003e\u003c/a\u003e\nUpdate GH actions\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/luben/zstd-jni/commit/d18bc0a078bb9852d95c66d9c56ff2e0940662c3\"\u003e\u003ccode\u003ed18bc0a\u003c/code\u003e\u003c/a\u003e\nUse latest MacOS runners\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/luben/zstd-jni/commit/105111233f681a0c14e754da4f31a288df978f31\"\u003e\u003ccode\u003e1051112\u003c/code\u003e\u003c/a\u003e\nFix typo in ZstdDictCompress.java\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/luben/zstd-jni/commit/2d94b35f9b98c503ed960f899fcdaaf6616e7f1e\"\u003e\u003ccode\u003e2d94b35\u003c/code\u003e\u003c/a\u003e\naddress\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/luben/zstd-jni/commit/7c2e3ffd84a835c123cf1f0281feb5c1fcdf2baa\"\u003e\u003ccode\u003e7c2e3ff\u003c/code\u003e\u003c/a\u003e\nAvoid SetLongField call when GetPrimitiveArrayCritical return NULL\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/luben/zstd-jni/commit/d82fedadfc540f1d069ad6962733c70807495f8f\"\u003e\u003ccode\u003ed82feda\u003c/code\u003e\u003c/a\u003e\nfix: ZstdInputStream decompression failure when underlying stream\nreturns 0 t...\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/luben/zstd-jni/compare/v1.5.7-6...v1.5.7-7\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.github.luben:zstd-jni\u0026package-manager\u003dmaven\u0026previous-version\u003d1.5.7-6\u0026new-version\u003d1.5.7-7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "74a7996d40226c659c3b0ae03c0ae75a4964f282",
      "tree": "ab98952b6748367fab8d64b3e3adc6723a49fef8",
      "parents": [
        "4242d587b25a74e944f2a01e79d52dcd401d5cf2"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 16 09:55:27 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 16 09:55:27 2026 +0100"
      },
      "message": "MINOR: Bump com.nimbusds:oauth2-oidc-sdk from 11.20.1 to 11.34 (#1074)\n\nBumps\n[com.nimbusds:oauth2-oidc-sdk](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions)\nfrom 11.20.1 to 11.34.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/src/master/CHANGELOG.txt\"\u003ecom.nimbusds:oauth2-oidc-sdk\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eversion 1.0 (2012-05-29)\n* First official release with authorisation endpoint, token endpoint,\ncheck\nID endpoint and UserInfo endpoint support.\n* JSON Web Tokens (JWTs) support through the Nimbus-JWT library.\n* Language Tags (RFC 5646) support through the Nimbus-LangTag library.\n* JSON support through the JSON Smart library.\u003c/p\u003e\n\u003cp\u003eversion 2.0 (2013-05-13)\n* Intermediary development release with Maven build, published to\nMaven Central.\u003c/p\u003e\n\u003cp\u003eversion 2.1 (2013-06-06)\n* Updates the APIs to OpenID Connect Messages draft 20, OpenID Connect\nStandard draft 21, OpenID Connect Discovery draft 17 and OpenID\nConnect Registration draft 19.\n* Major refactoring of the APIs for greater simplicity.\n* Adds JUnit tests.\u003c/p\u003e\n\u003cp\u003eversion 2.2 (2013-06-18)\n* Refactors dynamic OpenID Connect client registration.\n* Adds partial support of the OAuth 2.0 Dynamic Client Registration\nProtocol (draft-ietf-oauth-dyn-reg-12).\n* Optimises parsing of request parameters consisting of one or more\ntokens (scope, response type, etc).\u003c/p\u003e\n\u003cp\u003eversion 2.3 (2013-06-19)\n* Renames OAuth 2.0 dynamic client registration package.\n* Adds ClientInformation.getClientMetadata() method.\n* Adds OIDCClientInformation class.\u003c/p\u003e\n\u003cp\u003eversion 2.4 (2013-06-20)\n* Adds static OIDCClientInformation.parse(JSONObject) method.\u003c/p\u003e\n\u003cp\u003eversion 2.5 (2013-06-22)\n* Adds support OAuth 2.0 dynamic client update.\n* Adds OpenID Connect dynamic client registration classes.\u003c/p\u003e\n\u003cp\u003eversion 2.6 (2013-06-25)\n* Enforces order of preference of ACR values in OpenID Connect client\nmetadata, as required by the specification.\n* Documentation and performance improvements.\u003c/p\u003e\n\u003cp\u003eversion 2.7 (2013-06-26)\n* Switches Identifier generation to java.security.SecureRandom.\u003c/p\u003e\n\u003cp\u003eversion 2.8 (2013-06-30)\n* Fixes serialisation and assignment bugs in ClientMetadata.\n* Switches Secret generation to java.security.SecureRandom.\u003c/p\u003e\n\u003cp\u003eversion 2.9 (2013-09-17)\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/668f6d8de81cad42984e4cacb19f69261a2254b6\"\u003e\u003ccode\u003e668f6d8\u003c/code\u003e\u003c/a\u003e\nThe ParseException message thrown by Prompt.Type.parse must not include\nparse...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/75cde87ee5301a3cc558ed040bcc51db4ff0184d\"\u003e\u003ccode\u003e75cde87\u003c/code\u003e\u003c/a\u003e\nUpdates test sample X.509 cert chain resource\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/a7a9623882a119b4024798a91955b9fc0cc095b5\"\u003e\u003ccode\u003ea7a9623\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release 11.30.2\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/e03c9bbc8e208307b0ec6d0970901b2b5fcc5d83\"\u003e\u003ccode\u003ee03c9bb\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/6f11e3038f6ebc6ded2045a145bafb22d3c66b13\"\u003e\u003ccode\u003e6f11e30\u003c/code\u003e\u003c/a\u003e\nExpands AMR test coverage\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/afba676c638c25b9acbc88f677bfa321e6e0d6da\"\u003e\u003ccode\u003eafba676\u003c/code\u003e\u003c/a\u003e\nAdds static AMR.parseList(Collection\u0026lt;String\u0026gt;) method\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/4b700b3f2176a8c04c8df6298a594a6419041caf\"\u003e\u003ccode\u003e4b700b3\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release 11.31\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/b214cfadec399b2bd695173cc8613529434f1237\"\u003e\u003ccode\u003eb214cfa\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/28628f9543f4b18f4a4c1368846386a95142777d\"\u003e\u003ccode\u003e28628f9\u003c/code\u003e\u003c/a\u003e\nThe DPoPCommonVerifier must instantiate the DPoPProofClaimsSetVerifier\nwith t...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/commits/4df4d53cea079a3bc14ec8a36117205284bdbdf3\"\u003e\u003ccode\u003e4df4d53\u003c/code\u003e\u003c/a\u003e\nThe DPoPCommonVerifier must instantiate the DPoPProofClaimsSetVerifier\nwith t...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/branches/compare/11.34..11.20.1\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.nimbusds:oauth2-oidc-sdk\u0026package-manager\u003dmaven\u0026previous-version\u003d11.20.1\u0026new-version\u003d11.34)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "4242d587b25a74e944f2a01e79d52dcd401d5cf2",
      "tree": "c22140b8edd1eb716824e2ff4f9aeee54e3ffa8a",
      "parents": [
        "47cd032939f15edbfc7c87fbcb02d585f82e5948"
      ],
      "author": {
        "name": "JB Onofré",
        "email": "jb.onofre@dremio.com",
        "time": "Mon Mar 16 09:37:09 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 16 09:37:09 2026 +0100"
      },
      "message": "MINOR: Bump version to 20.0.0-SNAPSHOT (#1076)"
    },
    {
      "commit": "47cd032939f15edbfc7c87fbcb02d585f82e5948",
      "tree": "3846f19af350ebddfe29de8027e0332f118514ec",
      "parents": [
        "fa781dcc3c42ab98214743e3aef1eb8fd5297209"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 16 08:46:10 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 16 08:46:10 2026 +0100"
      },
      "message": "MINOR: Bump org.codehaus.mojo:properties-maven-plugin from 1.2.1 to 1.3.0 (#1072)\n\nBumps\n[org.codehaus.mojo:properties-maven-plugin](https://github.com/mojohaus/properties-maven-plugin)\nfrom 1.2.1 to 1.3.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/mojohaus/properties-maven-plugin/releases\"\u003eorg.codehaus.mojo:properties-maven-plugin\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.3.0\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003e🚀 New features and improvements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFeature Request: add yml properties manager (\u003ca\nhref\u003d\"https://redirect.github.com/mojohaus/properties-maven-plugin/pull/134\"\u003e#134\u003c/a\u003e)\n\u003ca href\u003d\"https://github.com/mattmeye\"\u003e\u003ccode\u003e@​mattmeye\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eInclude/exclude project properties (\u003ca\nhref\u003d\"https://redirect.github.com/mojohaus/properties-maven-plugin/pull/126\"\u003e#126\u003c/a\u003e)\n\u003ca\nhref\u003d\"https://github.com/reda-alaoui\"\u003e\u003ccode\u003e@​reda-alaoui\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e👻 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUse Sisu plugin (\u003ca\nhref\u003d\"https://redirect.github.com/mojohaus/properties-maven-plugin/pull/140\"\u003e#140\u003c/a\u003e)\n\u003ca\nhref\u003d\"https://github.com/slachiewicz\"\u003e\u003ccode\u003e@​slachiewicz\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Build\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump release-drafter/release-drafter from 5 to 6 (\u003ca\nhref\u003d\"https://redirect.github.com/mojohaus/properties-maven-plugin/pull/120\"\u003e#120\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📦 Dependency updates\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump org.codehaus.mojo:mojo-parent from 94 to 95 (\u003ca\nhref\u003d\"https://redirect.github.com/mojohaus/properties-maven-plugin/pull/156\"\u003e#156\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.mojo:mojo-parent from 93 to 94 (\u003ca\nhref\u003d\"https://redirect.github.com/mojohaus/properties-maven-plugin/pull/154\"\u003e#154\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.yaml:snakeyaml from 2.4 to 2.5 (\u003ca\nhref\u003d\"https://redirect.github.com/mojohaus/properties-maven-plugin/pull/153\"\u003e#153\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.mojo:mojo-parent from 92 to 93 (\u003ca\nhref\u003d\"https://redirect.github.com/mojohaus/properties-maven-plugin/pull/152\"\u003e#152\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.mojo:mojo-parent from 91 to 92 (\u003ca\nhref\u003d\"https://redirect.github.com/mojohaus/properties-maven-plugin/pull/149\"\u003e#149\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.mojo:mojo-parent from 87 to 91 (\u003ca\nhref\u003d\"https://redirect.github.com/mojohaus/properties-maven-plugin/pull/148\"\u003e#148\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRequire Maven 3.6.3 (\u003ca\nhref\u003d\"https://redirect.github.com/mojohaus/properties-maven-plugin/pull/139\"\u003e#139\u003c/a\u003e)\n\u003ca\nhref\u003d\"https://github.com/slachiewicz\"\u003e\u003ccode\u003e@​slachiewicz\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.yaml:snakeyaml from 2.3 to 2.4 (\u003ca\nhref\u003d\"https://redirect.github.com/mojohaus/properties-maven-plugin/pull/138\"\u003e#138\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.mojo:mojo-parent from 86 to 87 (\u003ca\nhref\u003d\"https://redirect.github.com/mojohaus/properties-maven-plugin/pull/137\"\u003e#137\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.mojo:mojo-parent from 85 to 86 (\u003ca\nhref\u003d\"https://redirect.github.com/mojohaus/properties-maven-plugin/pull/132\"\u003e#132\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (\u003ca\nhref\u003d\"https://redirect.github.com/mojohaus/properties-maven-plugin/pull/133\"\u003e#133\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.mojo:mojo-parent from 84 to 85 (\u003ca\nhref\u003d\"https://redirect.github.com/mojohaus/properties-maven-plugin/pull/131\"\u003e#131\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.mojo:mojo-parent from 80 to 84 (\u003ca\nhref\u003d\"https://redirect.github.com/mojohaus/properties-maven-plugin/pull/130\"\u003e#130\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.mojo:mojo-parent from 78 to 80 (\u003ca\nhref\u003d\"https://redirect.github.com/mojohaus/properties-maven-plugin/pull/122\"\u003e#122\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.plexus:plexus-utils from 4.0.0 to 4.0.1 (\u003ca\nhref\u003d\"https://redirect.github.com/mojohaus/properties-maven-plugin/pull/125\"\u003e#125\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump apache/maven-gh-actions-shared from 3 to 4 (\u003ca\nhref\u003d\"https://redirect.github.com/mojohaus/properties-maven-plugin/pull/124\"\u003e#124\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.codehaus.mojo:mojo-parent from 77 to 78 (\u003ca\nhref\u003d\"https://redirect.github.com/mojohaus/properties-maven-plugin/pull/119\"\u003e#119\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/mojohaus/properties-maven-plugin/commit/91a2ade909971501f4fb7cb5b11aa79c55daebbc\"\u003e\u003ccode\u003e91a2ade\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release\nproperties-maven-plugin-1.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/mojohaus/properties-maven-plugin/commit/bf56d329e0a2bf93cf898d55d06bb82af1b65a67\"\u003e\u003ccode\u003ebf56d32\u003c/code\u003e\u003c/a\u003e\nBump org.codehaus.mojo:mojo-parent from 94 to 95\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/mojohaus/properties-maven-plugin/commit/80e20be60fb2fc5e32191c44ff179abb18e0771f\"\u003e\u003ccode\u003e80e20be\u003c/code\u003e\u003c/a\u003e\nBump org.codehaus.mojo:mojo-parent from 93 to 94\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/mojohaus/properties-maven-plugin/commit/e8ae7a549abfbedd3d0a55024a6bf7bbe120475a\"\u003e\u003ccode\u003ee8ae7a5\u003c/code\u003e\u003c/a\u003e\nBump org.yaml:snakeyaml from 2.4 to 2.5\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/mojohaus/properties-maven-plugin/commit/bb39c3dac8d245b593ade92775ac3c26dee06359\"\u003e\u003ccode\u003ebb39c3d\u003c/code\u003e\u003c/a\u003e\nBump org.codehaus.mojo:mojo-parent from 92 to 93\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/mojohaus/properties-maven-plugin/commit/b41267b38c2e505668f2e9b7f76dffc6971ec0d2\"\u003e\u003ccode\u003eb41267b\u003c/code\u003e\u003c/a\u003e\nBump org.codehaus.mojo:mojo-parent from 91 to 92\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/mojohaus/properties-maven-plugin/commit/bb548c594cc64177609a30410c0efdbb234a2d3e\"\u003e\u003ccode\u003ebb548c5\u003c/code\u003e\u003c/a\u003e\nBump org.codehaus.mojo:mojo-parent from 87 to 91\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/mojohaus/properties-maven-plugin/commit/3ffa9cb844ecacce5b49c860eeffc8ad6a19b078\"\u003e\u003ccode\u003e3ffa9cb\u003c/code\u003e\u003c/a\u003e\nUse Sisu plugin\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/mojohaus/properties-maven-plugin/commit/7adbe3b5b6cb112219128f903d30bee53d598be1\"\u003e\u003ccode\u003e7adbe3b\u003c/code\u003e\u003c/a\u003e\nRequire Maven 3.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/mojohaus/properties-maven-plugin/commit/407342ff704d73472aa7f0ad05684b5e403e37bf\"\u003e\u003ccode\u003e407342f\u003c/code\u003e\u003c/a\u003e\nBump org.yaml:snakeyaml from 2.3 to 2.4\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/mojohaus/properties-maven-plugin/compare/1.2.1...properties-maven-plugin-1.3.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dorg.codehaus.mojo:properties-maven-plugin\u0026package-manager\u003dmaven\u0026previous-version\u003d1.2.1\u0026new-version\u003d1.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "fa781dcc3c42ab98214743e3aef1eb8fd5297209",
      "tree": "86d2e9928340d14d28542cde0719e6e593440dbe",
      "parents": [
        "d5e132b96500646ea4021d3b032d00a65233b6b5"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 16 08:45:54 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 16 08:45:54 2026 +0100"
      },
      "message": "MINOR: Bump com.squareup.okio:okio-jvm from 3.16.4 to 3.17.0 (#1075)\n\nBumps [com.squareup.okio:okio-jvm](https://github.com/square/okio) from\n3.16.4 to 3.17.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/square/okio/blob/master/CHANGELOG.md\"\u003ecom.squareup.okio:okio-jvm\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 3.17.0\u003c/h2\u003e\n\u003cp\u003e\u003cem\u003e2026-03-11\u003c/em\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eNew: Adjust down the Kotlin stdlib dependency to [Kotlin\n2.1.21][kotlin_2_1_21]. Okio is built\nwith an up-to-date Kotlin compiler (2.2.21), but depends on an older\nkotlin-stdlib. We\u0027re doing\nthis so you can update Okio and Kotlin independently.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eFix: Return the correct timestamp in\n\u003ccode\u003eFileMetadata.createdAtMillis\u003c/code\u003e on Kotlin/Native on UNIX\nplatforms. We were incorrectly using the POSIX \u003ccode\u003ectime\u003c/code\u003e\n(\u003cem\u003echange\u003c/em\u003e time) instead of the\n\u003ccode\u003ebirthtime\u003c/code\u003e. With this fix Okio now prefers\n\u003ccode\u003estatx()\u003c/code\u003e over \u003ccode\u003estat()\u003c/code\u003e on native platforms. This\nAPI first appeared in Linux in 4.11 (2017) and Android in API 30\n(2020).\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okio/commit/80a50234e5edb96041a8168c4754ba9e1ff3625a\"\u003e\u003ccode\u003e80a5023\u003c/code\u003e\u003c/a\u003e\nPrepare for release 3.17.0.\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okio/commit/65c0c26bb5242b697ffc28f6c666ae0a01197ff6\"\u003e\u003ccode\u003e65c0c26\u003c/code\u003e\u003c/a\u003e\nSwitch to FileMetadata to use statx instead of stat on Linux and Apple\nplatfo...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okio/commit/b11f17b233601af92ae1fabea3fecdeea0608631\"\u003e\u003ccode\u003eb11f17b\u003c/code\u003e\u003c/a\u003e\nRemove Kotlin/JS IR default parameter workarounds. (\u003ca\nhref\u003d\"https://redirect.github.com/square/okio/issues/1786\"\u003e#1786\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okio/commit/b35f473635db8ad9d5a9b096780e960d1b8f7d4d\"\u003e\u003ccode\u003eb35f473\u003c/code\u003e\u003c/a\u003e\nUpdate Gradle to v9.4.0 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okio/issues/1785\"\u003e#1785\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okio/commit/cbcee31f2bcb7e6f606d8eafc45f4c8ea7228cae\"\u003e\u003ccode\u003ecbcee31\u003c/code\u003e\u003c/a\u003e\nUpdate actions/upload-artifact action to v7 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okio/issues/1783\"\u003e#1783\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okio/commit/fc7aecb7f6f7a123f2024ab6397da04311546bf2\"\u003e\u003ccode\u003efc7aecb\u003c/code\u003e\u003c/a\u003e\nUpdate dependency com.android.tools.build:gradle to v9.0.1 (\u003ca\nhref\u003d\"https://redirect.github.com/square/okio/issues/1781\"\u003e#1781\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okio/commit/79aa26755c77df8c4d0233926c7308fd353ad697\"\u003e\u003ccode\u003e79aa267\u003c/code\u003e\u003c/a\u003e\nDrop \u003ccode\u003eisWasm()\u003c/code\u003e early return workaround for KT-60212. (\u003ca\nhref\u003d\"https://redirect.github.com/square/okio/issues/1777\"\u003e#1777\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okio/commit/45459dca7d40b4c2df1454a0f363e0b8e153beb5\"\u003e\u003ccode\u003e45459dc\u003c/code\u003e\u003c/a\u003e\nFix result of an \u0027errnoToIOException\u0027 call is not thrown. inside\n`PosixFileSy...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okio/commit/9fbab0f7ab00b525b0ae331c8c3ac3c645afc8c8\"\u003e\u003ccode\u003e9fbab0f\u003c/code\u003e\u003c/a\u003e\nDecode env variables in WASI tests (\u003ca\nhref\u003d\"https://redirect.github.com/square/okio/issues/1773\"\u003e#1773\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/square/okio/commit/50abe8900f2e7bd48d4afc77bda0afd74fc790ac\"\u003e\u003ccode\u003e50abe89\u003c/code\u003e\u003c/a\u003e\nStop using AssertJ (\u003ca\nhref\u003d\"https://redirect.github.com/square/okio/issues/1771\"\u003e#1771\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/square/okio/compare/parent-3.16.4...parent-3.17.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.squareup.okio:okio-jvm\u0026package-manager\u003dmaven\u0026previous-version\u003d3.16.4\u0026new-version\u003d3.17.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "d5e132b96500646ea4021d3b032d00a65233b6b5",
      "tree": "02e07183c00ebfb331c3ba0f20afe0f36eca0854",
      "parents": [
        "77127ef54272b578075c574071f24ee8c1bba22e"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 16 08:45:29 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 16 08:45:29 2026 +0100"
      },
      "message": "MINOR: [CI] Bump actions/download-artifact from 8.0.0 to 8.0.1 (#1068)\n\nBumps\n[actions/download-artifact](https://github.com/actions/download-artifact)\nfrom 8.0.0 to 8.0.1.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/download-artifact/releases\"\u003eactions/download-artifact\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev8.0.1\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport for CJK characters in the artifact name by \u003ca\nhref\u003d\"https://github.com/danwkennedy\"\u003e\u003ccode\u003e@​danwkennedy\u003c/code\u003e\u003c/a\u003e in\n\u003ca\nhref\u003d\"https://redirect.github.com/actions/download-artifact/pull/471\"\u003eactions/download-artifact#471\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd a regression test for artifact name + content-type mismatches by\n\u003ca href\u003d\"https://github.com/danwkennedy\"\u003e\u003ccode\u003e@​danwkennedy\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/download-artifact/pull/472\"\u003eactions/download-artifact#472\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/download-artifact/compare/v8...v8.0.1\"\u003ehttps://github.com/actions/download-artifact/compare/v8...v8.0.1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/download-artifact/commit/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c\"\u003e\u003ccode\u003e3e5f45b\u003c/code\u003e\u003c/a\u003e\nAdd regression tests for CJK characters (\u003ca\nhref\u003d\"https://redirect.github.com/actions/download-artifact/issues/471\"\u003e#471\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/download-artifact/commit/e6d03f67377d4412c7aa56a8e2e4988e6ec479dd\"\u003e\u003ccode\u003ee6d03f6\u003c/code\u003e\u003c/a\u003e\nAdd a regression test for artifact name + content-type mismatches (\u003ca\nhref\u003d\"https://redirect.github.com/actions/download-artifact/issues/472\"\u003e#472\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/actions/download-artifact/compare/70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3...3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/download-artifact\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d8.0.0\u0026new-version\u003d8.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "77127ef54272b578075c574071f24ee8c1bba22e",
      "tree": "3fb51ad9dc4b51c5452f4c3f8e90d022bb58c2e0",
      "parents": [
        "b410fb26d01c7cefc4c6e3443a53562164001371"
      ],
      "author": {
        "name": "Sutou Kouhei",
        "email": "kou@clear-code.com",
        "time": "Mon Mar 16 16:17:40 2026 +0900"
      },
      "committer": {
        "name": "Sutou Kouhei",
        "email": "kou@clear-code.com",
        "time": "Mon Mar 16 16:17:40 2026 +0900"
      },
      "message": "GH-1077: Add missing `export GH_TOKEN` to release scripts\n"
    },
    {
      "commit": "b410fb26d01c7cefc4c6e3443a53562164001371",
      "tree": "9ac2519e7d58f077b075bd7e86d7dfce34aced4f",
      "parents": [
        "77df3ecb2cf5517fb5d37a4b2806844e3b4700df"
      ],
      "author": {
        "name": "JB Onofré",
        "email": "jb.onofre@dremio.com",
        "time": "Thu Mar 12 11:58:50 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Mar 12 11:58:50 2026 +0100"
      },
      "message": "MINOR: Bump version to 19.0.0 (#1066)"
    },
    {
      "commit": "77df3ecb2cf5517fb5d37a4b2806844e3b4700df",
      "tree": "0ad7c0f8ab6e6541b7c6b89546662b2008e0240d",
      "parents": [
        "4a7fb4ef95d9386a0a7102fb18fbe52547527c21"
      ],
      "author": {
        "name": "Yicong Huang",
        "email": "17627829+Yicong-Huang@users.noreply.github.com",
        "time": "Thu Mar 12 01:39:44 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Mar 12 09:39:44 2026 +0100"
      },
      "message": "GH-343: Fix BaseVariableWidthVector and BaseLargeVariableWidthVector offset buffer serialization (#989)\n\n## What\u0027s Changed\n\nFix `BaseVariableWidthVector`/`BaseLargeVariableWidthVector` IPC\nserialization when `valueCount` is 0.\n\n### Problem\n\nWhen `valueCount \u003d\u003d 0`, `setReaderAndWriterIndex()` was setting\n`offsetBuffer.writerIndex(0)`, which means `readableBytes() \u003d\u003d 0`. IPC\nserializer uses `readableBytes()` to determine buffer size, so 0 bytes\nwere written to the IPC stream. This crashes IPC readers in other\nlibraries because Arrow spec requires offset buffer to have at least one\nentry `[0]`.\n\nThis is a follow-up to #967 which fixed the same issue in\n`ListVector`/`LargeListVector`.\n\n### Fix\n\nModify `setReaderAndWriterIndex()` to always use `(valueCount + 1) *\nOFFSET_WIDTH` for the offset buffer\u0027s `writerIndex`, moved outside the\nif/else branch. When the offset buffer capacity is insufficient (e.g.,\nempty buffer from constructor or loaded via `loadFieldBuffers()`), it\nreallocates a properly sized buffer on demand.\n\n\n### Testing\n\nAdded tests for empty `VarCharVector` and `LargeVarCharVector` verifying\noffset buffer has correct `readableBytes()` after `setValueCount(0)`.\n\n\nCloses #343\n\n---------\n\nCo-authored-by: Yicong Huang \u003cyicong.huang+data@databricks.com\u003e"
    },
    {
      "commit": "4a7fb4ef95d9386a0a7102fb18fbe52547527c21",
      "tree": "4f09f3dd69e311626992e51184f2721d3e019857",
      "parents": [
        "18de621ff2e7a72f54d416b9ef6e6a4a96b2aa8d"
      ],
      "author": {
        "name": "Aleksei Starikov",
        "email": "aleksei.starikov.ax@gmail.com",
        "time": "Wed Mar 11 14:59:21 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Mar 11 14:59:21 2026 +0100"
      },
      "message": "GH-552: [Vector] Add absent methods to the UnionFixedSizeListWriter (#1052)\n\n## What\u0027s Changed\n\nAdd absent methods to the `UnionFixedSizeListWriter`.\n\n1. Aligned the `UnionFixedSizeListWriter` template with the\n`UnionListWriter` template, which added the following previously absent\nmethods to the generated `UnionFixedSizeListWriter` class:\n\n```\n- duration() methods\n    - DurationWriter duration()\n    - DurationWriter duration(String name, org.apache.arrow.vector.types.TimeUnit unit)\n    - DurationWriter duration(String name)\n- timeStampSecTZ() methods\n    - TimeStampSecTZWriter timeStampSecTZ()\n    - TimeStampSecTZWriter timeStampSecTZ(String name, String timezone)\n    - TimeStampSecTZWriter timeStampSecTZ(String name)\n- timeStampMilliTZ() methods\n    - TimeStampMilliTZWriter timeStampMilliTZ()\n    - TimeStampMilliTZWriter timeStampMilliTZ(String name, String timezone)\n    - TimeStampMilliTZWriter timeStampMilliTZ(String name)\n- timeStampMicroTZ() methods\n    - TimeStampMicroTZWriter timeStampMicroTZ()\n    - TimeStampMicroTZWriter timeStampMicroTZ(String name, String timezone)\n    - TimeStampMicroTZWriter timeStampMicroTZ(String name)\n- timeStampNanoTZ() methods\n    - TimeStampNanoTZWriter timeStampNanoTZ()\n    - TimeStampNanoTZWriter timeStampNanoTZ(String name, String timezone)\n    - TimeStampNanoTZWriter timeStampNanoTZ(String name)\n- fixedSizeBinary() methods\n    - FixedSizeBinaryWriter fixedSizeBinary()\n    - FixedSizeBinaryWriter fixedSizeBinary(String name, int byteWidth)\n    - FixedSizeBinaryWriter fixedSizeBinary(String name)\n- write() methods for Duration\n    - void writeDuration(long value)\n    - void write(DurationHolder holder)\n- write() methods for TimeStampSecTZ \n    - void writeTimeStampSecTZ(long value)\n    - void write(TimeStampSecTZHolder holder)\n- write() methods for TimeStampMilliTZ\n    - void writeTimeStampMilliTZ(long value)\n    - void write(TimeStampMilliTZHolder holder)\n- write() methods for TimeStampMicroTZ\n    - void writeTimeStampMicroTZ(long value)\n    - void write(TimeStampMicroTZHolder holder)\n- write() methods for TimeStampNanoTZ\n    - void writeTimeStampNanoTZ(long value)\n    - void write(TimeStampNanoTZHolder holder)\n- write() methods for FixedSizeBinary\n    - void writeFixedSizeBinary(ArrowBuf buffer)\n    - void write(FixedSizeBinaryHolder holder)\n```\n\n2. Add `structName \u003d name;` for 2 existing methods (align them with\nother similar methods):\n\n```\n- DecimalWriter decimal(String name)\n- Decimal256Writer decimal256(String name)\n```\n\n3. Remove unused assignments from the `UnionListWriter` template + add\nmissing overrides.\n\nThis fix adds override annotations to the `UnionListWriter` generated\nclass and extend/fix the code of the `UnionFixedSizeListWriter`\ngenerated class. So, the change is backward compatible.\n\nSee the gists for the generated writer classes:\n-\n[UnionFixedSizeListWriter](https://gist.github.com/axreldable/9908f98d75ec4c0a62e4ccfa176cbbe1)\n-\n[UnionListWriter](https://gist.github.com/axreldable/881f3cf1ed001c513870daf3ea4f3bbd)\n\n---\n\nInspired by this [PR](https://github.com/apache/arrow/pull/35353).\n\n---\n\nCloses #552 ."
    },
    {
      "commit": "18de621ff2e7a72f54d416b9ef6e6a4a96b2aa8d",
      "tree": "044e31ee6465580848455e9a6a5367aaf6a83037",
      "parents": [
        "6ffb2d0450effccf115203ae31da10708a35dda8"
      ],
      "author": {
        "name": "Pedro Matias",
        "email": "pedro.matias@dremio.com",
        "time": "Wed Mar 11 10:59:07 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Mar 11 11:59:07 2026 +0100"
      },
      "message": "GH-1004:  [JDBC] Fix NPE in ArrowFlightJdbcDriver#connect​(final String url, final Properties info)  (#1005)\n\n## What\u0027s Changed\n`ArrowFlightJdbcDriver.connect(final String url, final Properties info)`\nnow properly ignores a null value for `info`, obtaining the properties\nsolely from the URL.\n\nCloses #1004."
    },
    {
      "commit": "6ffb2d0450effccf115203ae31da10708a35dda8",
      "tree": "6a58d18d1eb1c5c9c03d3ae69b2d62b1bae7e7c0",
      "parents": [
        "c8666f28569ca7e825b45f8ca39434c12428bec6"
      ],
      "author": {
        "name": "Aleksei Starikov",
        "email": "aleksei.starikov.ax@gmail.com",
        "time": "Wed Mar 11 11:23:45 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Mar 11 11:23:45 2026 +0100"
      },
      "message": "GH-301: [Vector] Allow adding a vector at the end of VectorSchemaRoot (#1013)\n\n## What\u0027s Changed\n\nAllow adding a vector at the end of VectorSchemaRoot in the\n`VectorSchemaRoot#addVector()` method.\n\nPreviously, the precondition `index \u003c fieldVectors.size()` rejected\n`index \u003d\u003d fieldVectors.size()`, so appending was impossible. The\nprecondition is now `index \u003c\u003d fieldVectors.size()`, and when `index \u003d\u003d\nfieldVectors.size()` the new vector is appended after all existing\nvectors.\n\nThe implementation of `VectorSchemaRoot#addVector()` is now aligned with\n[BaseTable#insertVector()](https://github.com/apache/arrow-java/blob/main/vector/src/main/java/org/apache/arrow/vector/table/BaseTable.java#L156)\n\nThe change is backward compatible, as it extends the functionality of\nthe `VectorSchemaRoot#addVector()` method.\n\nCloses #301."
    },
    {
      "commit": "c8666f28569ca7e825b45f8ca39434c12428bec6",
      "tree": "4408b9e039da0f4a1ed5c106002c11356bede430",
      "parents": [
        "bdec833fb69f945db9f3c767715c93d09214f2b5"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Mar 11 11:09:05 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Mar 11 11:09:05 2026 +0100"
      },
      "message": "MINOR: Bump com.gradle:common-custom-user-data-maven-extension from 2.0.3 to 2.1.0 (#998)\n\nBumps\n[com.gradle:common-custom-user-data-maven-extension](https://github.com/gradle/common-custom-user-data-maven-extension)\nfrom 2.0.3 to 2.1.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/releases\"\u003ecom.gradle:common-custom-user-data-maven-extension\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.1.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[NEW] Add support for evaluating one or more Groovy scripts in the\nDevelocity storage directory\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.0.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[FIX] Added a null-safety check to handle cases where the Maven\nsession may be null\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.0.6\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[FIX] GitHub Actions build link doesn\u0027t include run attempt\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.0.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[FIX] Add GitHub run attempt as custom value to precisely identify\nGitHub Action run\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.0.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[FIX] Add GitHub run number as custom value to precisely identify\nGitHub Action run\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/0bb5838877d857339d4978d7cf95ebf92d80fca0\"\u003e\u003ccode\u003e0bb5838\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release v2.1.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/4b1a27c382505dd0141ded0f97b55e762b36b60e\"\u003e\u003ccode\u003e4b1a27c\u003c/code\u003e\u003c/a\u003e\nUpdate changes.md\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/b9010d0e992d013c796db047d0d6198625cb4ee8\"\u003e\u003ccode\u003eb9010d0\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/gradle/common-custom-user-data-maven-extension/issues/329\"\u003e#329\u003c/a\u003e\nfrom gradle/erichaagdev/groovy-scripts-m2-directory\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/82281ec9c8e64b513c21dc3a070ce3d9e1024189\"\u003e\u003ccode\u003e82281ec\u003c/code\u003e\u003c/a\u003e\nSwitch Groovy script evaluation order\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/7cdb3cc04431f2df925970f598b493debad18413\"\u003e\u003ccode\u003e7cdb3cc\u003c/code\u003e\u003c/a\u003e\nClarify script locations in README\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/2c511ae9448ff6709e3ec126051ce85c32d4321b\"\u003e\u003ccode\u003e2c511ae\u003c/code\u003e\u003c/a\u003e\nAdd support for evaluating one or more Groovy scripts in the Develocity\nstora...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/f02dbca75dfe88afdf5e3a6aec78cf85474fbd3f\"\u003e\u003ccode\u003ef02dbca\u003c/code\u003e\u003c/a\u003e\nUpdate to use version 2.0.7 of the Common Custom User Data Maven\nExtension\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/88e0f414d7035a5a15b3a08105851887113bc051\"\u003e\u003ccode\u003e88e0f41\u003c/code\u003e\u003c/a\u003e\nPrepare for next round of development\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/36edaf81c38f68c0ecc85f906d5877ec819432ba\"\u003e\u003ccode\u003e36edaf8\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare for next development iteration\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/commit/683a96653c5d96555bb9c2f84cc948edeb101bd8\"\u003e\u003ccode\u003e683a966\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release v2.0.7\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/gradle/common-custom-user-data-maven-extension/compare/v2.0.3...v2.1.0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcom.gradle:common-custom-user-data-maven-extension\u0026package-manager\u003dmaven\u0026previous-version\u003d2.0.3\u0026new-version\u003d2.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nYou can trigger a rebase of this PR by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after\nyour CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge\nand block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating\nit. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\n\u003e **Note**\n\u003e Automatic rebases have been disabled on this pull request as it has\nbeen open for over 30 days.\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "bdec833fb69f945db9f3c767715c93d09214f2b5",
      "tree": "83301490fcbc110ff78ffe224463fba4ae4c6de3",
      "parents": [
        "e349a9a837aa9e3c5a56cbdd841f4e9655fa9ab2"
      ],
      "author": {
        "name": "Pedro Matias",
        "email": "pedro.matias@dremio.com",
        "time": "Wed Mar 11 07:34:47 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Mar 11 08:34:47 2026 +0100"
      },
      "message": "GH-994: Fix DatabaseMetaData NPEs when SqlInfo is unavailable (#995)\n\n## What\u0027s Changed\n\nMultiple DatabaseMetaData methods had NPEs when the method\n`ArrowDatabaseMetadata.getSqlInfoAndCacheIfCacheIsEmpty(final SqlInfo\nsqlInfoCommand, final Class\u003cT\u003e desiredType)`\nreturned null.\n\nNow the method never returns null. If the database server does not\nprovide the requested info, either a sensible default is returned or a\nSQLException is thrown.\n\nCloses #994."
    },
    {
      "commit": "e349a9a837aa9e3c5a56cbdd841f4e9655fa9ab2",
      "tree": "fda76ccd75c285a7acfda9ddacd6afd9e2ce6234",
      "parents": [
        "7390f551267798d4670eae6b2894c527dbc90403"
      ],
      "author": {
        "name": "Logan Riggs",
        "email": "logan.riggs@dremio.com",
        "time": "Wed Mar 11 00:09:23 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Mar 11 08:09:23 2026 +0100"
      },
      "message": "GH-1061: Add codegen classifier jar for arrow-vector. (#1062)\n\n## What\u0027s Changed\n\nAdd a new codegen classifier jar for arrow-vector that contains tdd and\nother template files.\n\nCloses #1061 ."
    }
  ],
  "next": "7390f551267798d4670eae6b2894c527dbc90403"
}