Skip to content

Bump the all group across 1 directory with 21 updates - #364

Merged
IRus merged 1 commit into
mainfrom
dependabot/gradle/all-2cdc4f5770
Aug 9, 2026
Merged

Bump the all group across 1 directory with 21 updates#364
IRus merged 1 commit into
mainfrom
dependabot/gradle/all-2cdc4f5770

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 12, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all group with 21 updates in the / directory:

Package From To
io.ktor:ktor-version-catalog 3.5.0 3.5.2
org.http4k:http4k-server-netty 6.50.0.0 6.57.1.0
io.undertow:undertow-core 2.4.1.Final 2.4.2.Final
gradle-wrapper 9.5.1 9.7.0
org.bouncycastle:bcpkix-jdk18on 1.84 1.85
org.commonmark:commonmark 0.28.0 0.30.0
com.networknt:json-schema-validator 3.0.3 3.0.6
org.junit.jupiter:junit-jupiter 6.1.0 6.1.2
org.junit.platform:junit-platform-launcher 6.1.0 6.1.2
io.heapy.kotaml:kotaml 0.108.0 0.110.0
com.google.devtools.ksp:symbol-processing-api 2.3.9 2.3.11
com.google.devtools.ksp 2.3.9 2.3.11
ch.qos.logback:logback-classic 1.5.33 1.6.1
io.micrometer:micrometer-registry-prometheus 1.16.5 1.17.0
org.mongodb:mongodb-driver-kotlin-coroutine 5.8.0 5.9.1
io.netty:netty-all 4.2.14.Final 4.2.17.Final
io.netty:netty-transport-native-kqueue 4.2.14.Final 4.2.17.Final
io.netty:netty-transport-native-epoll 4.2.14.Final 4.2.17.Final
io.netty:netty-transport-native-io_uring 4.2.14.Final 4.2.17.Final
org.jetbrains.kotlin.jvm 2.3.21 2.4.10
org.jetbrains.kotlin.plugin.serialization 2.3.21 2.4.10

Updates io.ktor:ktor-version-catalog from 3.5.0 to 3.5.2

Release notes

Sourced from io.ktor:ktor-version-catalog's releases.

3.5.2

Published 31 July 2026

Improvements

  • KTOR-8032 RateLimit: Allow limit requests based on authentication result
  • KTOR-9719 ApplicationCall.isStaticContent returns false when called from plugin interceptors
  • KTOR-8450 ContentNegotiation: it doesn't handle content type suffixes
  • KTOR-7892 SwaggerUI: Missing oauth2-redirect.html support in the plugin
  • KTOR-9759 Reject whitespace in URL hosts during parsing
  • KTOR-9681 Update kotlinx-io to 0.9.1
  • KTOR-9743 ByteReadChannel.readLineStrict: Misleading definition of limit parameter in KDocs
  • KTOR-9504 Improve KDoc for EmbeddedServer.addShutdownHook

Bugfixes

  • KTOR-9741 CIO: request-handler coroutine leak on half-closed idle connection after ≥1MB response
  • KTOR-7661 Maven + YAML config file does not work
  • KTOR-9585 OpenAPI: JsonSchema title is truncated when it contains a dot
  • KTOR-9704 UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics, slowing every text response by 5-7x
  • KTOR-9588 SSE client (CIO engine) sends spurious Content-Length: 0 on body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)
  • KTOR-9679 ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a character at a buffer boundary
  • KTOR-9767 ByteReadChannel.readLineTo: Return read bytes count instead of decoded characters count
  • KTOR-8992 HoconConfigLoader is not loaded when ktor-server-config-yaml on the classpath
  • KTOR-9698 OpenAPI: schema for kotlinx.serialization sealed types omits discriminator property in variant schemas
  • KTOR-9690 Netty: in-flight requests are aborted on stop(), ignoring shutdown grace period
  • KTOR-8903 Netty: Close channel connection on errors properly
  • KTOR-9707 SaveBody performance regression
  • KTOR-9703 Inefficient text reading function in DefaultTransform
  • KTOR-9711 Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks response flushing for the whole connection
  • KTOR-9688 RateLimit: No access to principal when wrapped with authentication since 3.5.1
  • KTOR-9677 Auto-reloading: server is reloaded only once since 3.5.0
  • KTOR-9683 Sockets: Canceling a SelectorManager job doesn't close it properly
  • KTOR-9671 Darwin: Semicolons in URL path are sanitized

3.5.1

Published 25 June 2026

Improvements

  • KTOR-9492 OpenAPI plugin: handle requireXxx functions in compiler plugin
  • KTOR-9569 Add more details for KDoc of BearerAuthConfig.sendWithoutRequest
  • KTOR-9571 Add KDoc for BearerAuthConfig.realm
  • KTOR-9570 Add Kdoc for BearerAuthConfig.refreshTokens

Bugfixes

  • KTOR-9646 Fix Kotlin 2.4.0 compiler plugin breaking changes
  • KTOR-9585 OpenAPI: JsonSchema title is truncated when it contains a dot
  • KTOR-9591 OpenAPI: @JsonClassDiscriminator on sealed types is ignored when generating OpenAPI discriminator schema
  • KTOR-9597 OpenAPI: Schema name collisions because@SerialName of sealed subtypes is used as components.schemas key
  • KTOR-9601 OpenAPI: nullable @​JvmInline value class loses nullability in generated schema
  • KTOR-9620 Some issues related to digest authentication in 3.5.0
  • KTOR-9623 Digest Auth: server must respond with one WWW-Authenticate header for each supported algorithm

... (truncated)

Changelog

Sourced from io.ktor:ktor-version-catalog's changelog.

3.5.2

Published 31 July 2026

Improvements

  • KTOR-8032 RateLimit: Allow limit requests based on authentication result
  • KTOR-9719 ApplicationCall.isStaticContent returns false when called from plugin interceptors
  • KTOR-8450 ContentNegotiation: it doesn't handle content type suffixes
  • KTOR-7892 SwaggerUI: Missing oauth2-redirect.html support in the plugin
  • KTOR-9759 Reject whitespace in URL hosts during parsing
  • KTOR-9681 Update kotlinx-io to 0.9.1
  • KTOR-9743 ByteReadChannel.readLineStrict: Misleading definition of limit parameter in KDocs
  • KTOR-9504 Improve KDoc for EmbeddedServer.addShutdownHook

Bugfixes

  • KTOR-9741 CIO: request-handler coroutine leak on half-closed idle connection after ≥1MB response
  • KTOR-7661 Maven + YAML config file does not work
  • KTOR-9585 OpenAPI: JsonSchema title is truncated when it contains a dot
  • KTOR-9704 UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics, slowing every text response by 5-7x
  • KTOR-9588 SSE client (CIO engine) sends spurious Content-Length: 0 on body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)
  • KTOR-9679 ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a character at a buffer boundary
  • KTOR-9767 ByteReadChannel.readLineTo: Return read bytes count instead of decoded characters count
  • KTOR-8992 HoconConfigLoader is not loaded when ktor-server-config-yaml on the classpath
  • KTOR-9698 OpenAPI: schema for kotlinx.serialization sealed types omits discriminator property in variant schemas
  • KTOR-9690 Netty: in-flight requests are aborted on stop(), ignoring shutdown grace period
  • KTOR-8903 Netty: Close channel connection on errors properly
  • KTOR-9707 SaveBody performance regression
  • KTOR-9703 Inefficient text reading function in DefaultTransform
  • KTOR-9711 Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks response flushing for the whole connection
  • KTOR-9688 RateLimit: No access to principal when wrapped with authentication since 3.5.1
  • KTOR-9677 Auto-reloading: server is reloaded only once since 3.5.0
  • KTOR-9683 Sockets: Canceling a SelectorManager job doesn't close it properly
  • KTOR-9671 Darwin: Semicolons in URL path are sanitized

3.5.1

Published 25 June 2026

Improvements

  • KTOR-9492 OpenAPI plugin: handle requireXxx functions in compiler plugin
  • KTOR-9569 Add more details for KDoc of BearerAuthConfig.sendWithoutRequest
  • KTOR-9571 Add KDoc for BearerAuthConfig.realm
  • KTOR-9570 Add Kdoc for BearerAuthConfig.refreshTokens

Bugfixes

  • KTOR-9646 Fix Kotlin 2.4.0 compiler plugin breaking changes
  • KTOR-9585 OpenAPI: JsonSchema title is truncated when it contains a dot
  • KTOR-9591 OpenAPI: @JsonClassDiscriminator on sealed types is ignored when generating OpenAPI discriminator schema
  • KTOR-9597 OpenAPI: Schema name collisions because@SerialName of sealed subtypes is used as components.schemas key
  • KTOR-9601 OpenAPI: nullable @​JvmInline value class loses nullability in generated schema
  • KTOR-9620 Some issues related to digest authentication in 3.5.0

... (truncated)

Commits
  • 01c469a Release 3.5.2 (#5781)
  • c965a0c KTOR-9741 Prevent CIO request handler leak (#5783)
  • 74df458 chore: fix some comments to improve readability
  • 2672567 [KTOR-9704] Optimized encoding flow for UTF-8 (#5743)
  • d5680ed KTOR-5391: Document ECDSA certificate limitation for client authentication (#...
  • 9b0f356 something::javaClass.name is not the name of the class of something but `"j...
  • 58256cd KTOR-9743 Clarify readLine documentation
  • 088bd60 KTOR-9679 Fix regressions caused by adding buffering
  • 167176a KTOR-9588 Do not send Content-Length: 0 for body-less GET requests (#5620)
  • 7fb0844 KTOR-9585 Fix schema title trimming
  • Additional commits viewable in compare view

Updates org.http4k:http4k-server-netty from 6.50.0.0 to 6.57.1.0

Release notes

Sourced from org.http4k:http4k-server-netty's releases.

6.57.1.0

Distribution notice - from 1 October 2026, Maven Central receives http4k releases approximately quarterly. maven.http4k.org continues on the normal 1-2 week cadence. Both channels are supported. Background and current status: DISTRIBUTION.md

Changelog:

  • http4k-*: Republish 6.57.0.0 due to broken release

6.57.0.0 Changelog:

  • http4k-*: Upgrade versions
  • http4k-server-undertow*: [Unlikely break] SSE now falls back to HTTP handler if the request is not handled.
  • http4k-connect-amazon-dynamodb: [Unlikely Break] DynamoDbContract.table (testFixtures) is now an abstract property supplied by the implementing test, instead of a get() which recomputed TableName.sample(suffix = uuid(0)) on every access: against an implementation whose uuid() is random (RealAwsContract), create() made one table and the test bodies then addressed a different, non-existent one. LocalDynamoTest had already had to override it to work around this; implementations that relied on the default now supply a fixed name.
  • http4k-connect-amazon-iotdataplane: [New module!] AWS IoT Core Data Plane client supporting Publish, GetThingShadow, UpdateThingShadow, DeleteThingShadow, ListNamedShadowsForThing, GetRetainedMessage, ListRetainedMessages and DeleteConnection.
  • http4k-connect-amazon-iotdataplane-fake: [New module!] AWS IoT Core Data Plane fake which records published messages for test assertions, stores Thing Shadows, and serves the retained messages that its retained publishes create.
  • http4k-api-jsonschema*: Ability to chain schema model namer. H/T @​potfur
  • http4k-connect-amazon-dynamodb: Added DescribeTimeToLive and UpdateTimeToLive actions (with TimeToLiveStatus/TimeToLiveDescription/TimeToLiveSpecification models), so callers can read and set a table's TTL configuration. The fake supports both.
  • http4k-connect-amazon-cognito: Support for the USER_AUTH choice-based sign-in flow: AuthFlow gains USER_AUTH, ExplicitAuthFlow gains ALLOW_USER_AUTH, and AuthInitiated gains the AvailableChallenges list Cognito returns when the user can choose a sign-in method.

6.57.0.0

Distribution notice - from 1 October 2026, Maven Central receives http4k releases approximately quarterly. maven.http4k.org continues on the normal 1-2 week cadence. Both channels are supported. Background and current status: DISTRIBUTION.md

Changelog:

  • http4k-*: Upgrade versions
  • http4k-server-undertow*: [Unlikely break] SSE now falls back to HTTP handler if the request is not handled.
  • http4k-connect-amazon-dynamodb: [Unlikely Break] DynamoDbContract.table (testFixtures) is now an abstract property supplied by the implementing test, instead of a get() which recomputed TableName.sample(suffix = uuid(0)) on every access: against an implementation whose uuid() is random (RealAwsContract), create() made one table and the test bodies then addressed a different, non-existent one. LocalDynamoTest had already had to override it to work around this; implementations that relied on the default now supply a fixed name.
  • http4k-connect-amazon-iotdataplane: [New module!] AWS IoT Core Data Plane client supporting Publish, GetThingShadow, UpdateThingShadow, DeleteThingShadow, ListNamedShadowsForThing, GetRetainedMessage, ListRetainedMessages and DeleteConnection.
  • http4k-connect-amazon-iotdataplane-fake: [New module!] AWS IoT Core Data Plane fake which records published messages for test assertions, stores Thing Shadows, and serves the retained messages that its retained publishes create.
  • http4k-api-jsonschema*: Ability to chain schema model namer. H/T @​potfur
  • http4k-connect-amazon-dynamodb: Added DescribeTimeToLive and UpdateTimeToLive actions (with TimeToLiveStatus/TimeToLiveDescription/TimeToLiveSpecification models), so callers can read and set a table's TTL configuration. The fake supports both.
  • http4k-connect-amazon-cognito: Support for the USER_AUTH choice-based sign-in flow: AuthFlow gains USER_AUTH, ExplicitAuthFlow gains ALLOW_USER_AUTH, and AuthInitiated gains the AvailableChallenges list Cognito returns when the user can choose a sign-in method.

6.56.0.0

Distribution notice - from 1 October 2026, Maven Central receives http4k releases approximately quarterly. maven.http4k.org continues on the normal 1-2 week cadence. Both channels are supported. Background and current status: DISTRIBUTION.md

Changelog:

  • http4k-*: Upgrade versions
  • http4k-testing-webdriver-datastar: [Break] Datastar attributes now use the 1.0 colon separator (e.g. data-on:click, data-bind:foo, data-computed:total) instead of the removed 0.x hyphen form.
  • http4k-connect-amazon-dynamodb-fake: [Unlikely Break] UpdateResult.ConditionFailed is now a data class carrying the item to report back, rather than a data object.
  • http4k-multipart: [Fix] MultipartFormBody cannot be constructed on read-only filesystems.
  • http4k-connect-amazon-dynamodb-fake: [Fix] A conditional DeleteItem is now evaluated. The ConditionExpression was previously ignored outright, so a guarded delete always succeeded against the fake - including inside transactWriteItems, where a failing condition now correctly cancels the transaction.
  • http4k-connect-amazon-dynamodb-fake: [Fix] Fake DynamoDB attribute_exists condition for missing item will always succeed for key
  • http4k-connect-amazon-dynamodb: PutItem, UpdateItem and DeleteItem gain ReturnValuesOnConditionCheckFailure, so a failed conditional write can return the record which blocked it (DynamoDB reports it in the error body). The enum and TransactWriteItem's support for it already existed.
  • http4k-api-openapi: add support for a JSON schema dialect selector in swagger ui. H/T @​dzappold
  • http4k-platform-k8s: add k8s server extension for PolyHandler. H/T @​dzappold
  • http4k-testing-webdriver - Specify locator name for a better debugging experience H/T @​tamj0rd2

6.55.0.0

Distribution notice - from 1 October 2026, Maven Central receives http4k releases approximately quarterly. maven.http4k.org continues on the normal 1-2 week cadence. Both channels are supported. Background and current status: DISTRIBUTION.md

Changelog:

  • http4k-*: Upgrade versions including Toon to v2.0.0
  • http4k-server-undertow: [Unlikely Break] The request URI is now built from Undertow's raw request target instead of the already-decoded getRelativePath()

... (truncated)

Changelog

Sourced from org.http4k:http4k-server-netty's changelog.

v6.57.1.0

  • http4k-*: Republish 6.57.0.0 due to broken release

v6.57.0.0

  • http4k-*: Upgrade versions
  • http4k-server-undertow*: [Unlikely break] SSE now falls back to HTTP handler if the request is not handled.
  • http4k-connect-amazon-dynamodb: [Unlikely Break] DynamoDbContract.table (testFixtures) is now an abstract property supplied by the implementing test, instead of a get() which recomputed TableName.sample(suffix = uuid(0)) on every access: against an implementation whose uuid() is random (RealAwsContract), create() made one table and the test bodies then addressed a different, non-existent one. LocalDynamoTest had already had to override it to work around this; implementations that relied on the default now supply a fixed name.
  • http4k-connect-amazon-iotdataplane: [New module!] AWS IoT Core Data Plane client supporting Publish, GetThingShadow, UpdateThingShadow, DeleteThingShadow, ListNamedShadowsForThing, GetRetainedMessage, ListRetainedMessages and DeleteConnection.
  • http4k-connect-amazon-iotdataplane-fake: [New module!] AWS IoT Core Data Plane fake which records published messages for test assertions, stores Thing Shadows, and serves the retained messages that its retained publishes create.
  • http4k-api-jsonschema*: Ability to chain schema model namer. H/T @​potfur
  • http4k-connect-amazon-dynamodb: Added DescribeTimeToLive and UpdateTimeToLive actions (with TimeToLiveStatus/TimeToLiveDescription/TimeToLiveSpecification models), so callers can read and set a table's TTL configuration. The fake supports both.
  • http4k-connect-amazon-cognito: Support for the USER_AUTH choice-based sign-in flow: AuthFlow gains USER_AUTH, ExplicitAuthFlow gains ALLOW_USER_AUTH, and AuthInitiated gains the AvailableChallenges list Cognito returns when the user can choose a sign-in method.

v6.56.0.0

  • http4k-*: Upgrade versions
  • http4k-testing-webdriver-datastar: [Break] Datastar attributes now use the 1.0 colon separator (e.g. data-on:click, data-bind:foo, data-computed:total) instead of the removed 0.x hyphen form.
  • http4k-connect-amazon-dynamodb-fake: [Unlikely Break] UpdateResult.ConditionFailed is now a data class carrying the item to report back, rather than a data object.
  • http4k-multipart: [Fix] MultipartFormBody cannot be constructed on read-only filesystems.
  • http4k-connect-amazon-dynamodb-fake: [Fix] A conditional DeleteItem is now evaluated. The ConditionExpression was previously ignored outright, so a guarded delete always succeeded against the fake - including inside transactWriteItems, where a failing condition now correctly cancels the transaction.
  • http4k-connect-amazon-dynamodb-fake: [Fix] Fake DynamoDB attribute_exists condition for missing item will always succeed for key
  • http4k-connect-amazon-dynamodb: PutItem, UpdateItem and DeleteItem gain ReturnValuesOnConditionCheckFailure, so a failed conditional write can return the record which blocked it (DynamoDB reports it in the error body). The enum and TransactWriteItem's support for it already existed.
  • http4k-api-openapi: add support for a JSON schema dialect selector in swagger ui. H/T @​dzappold
  • http4k-platform-k8s: add k8s server extension for PolyHandler. H/T @​dzappold
  • http4k-testing-webdriver - Specify locator name for a better debugging experience H/T @​tamj0rd2

v6.55.0.0

  • http4k-*: Upgrade versions including Toon to v2.0.0
  • http4k-server-undertow: [Unlikely Break] The request URI is now built from Undertow's raw request target instead of the already-decoded getRelativePath()
  • http4k-server-apache: [Unlikely Break] The request path and query are now built from the raw request-target.
  • http4k-client-jetty: [Fix] A request carrying both a body and an explicit Content-Length header no longer produces a duplicate Content-Length on the outgoing request.
  • http4k-multipart: [Unlikely Break] Nested multipart/mixed parts are now rejected with a ParseError instead of being parsed recursively, bounding parser stack usage on crafted inputs. The unbounded 3-argument StreamingMultipartFormParts.parse overload now applies a default 10MB stream-length cap.
  • http4k-core: [Unlikely Break] Cookie values are now percent-encoded on serialization so ;, , and control characters can no longer be interpreted as additional cookie attributes; the same characters are stripped from Domain/Path attributes. Existing quoting of normal values is unchanged.
  • http4k-core: [Unlikely Break] DefaultCookieStorage now only accepts a Set-Cookie Domain that domain-matches the origin host, and rejects dotless public-suffix domains (e.g. com), so a response from one host can no longer plant cookies scoped to another. Host-only and exact-host cookies (e.g. localhost, example.co.uk) are unaffected.
  • http4k-realtime-core/http4k-ai-mcp-sdk: [Unlikely Break] The HTTP transport now enforces DNS-rebind protection via the new ServerFilters.HttpRebindProtection.
  • http4k-connect-mpp/http4k-ai-mcp-mpp: [Break] MppVerifier.verify now receives the server-issued Challenge alongside the Credential, so verifiers can bind the payment to the challenge the server issued (checking id/opaque, expires and single-use), closing a bypass/replay gap. The HTTP, MCP and tool filters now reject a credential whose payment fields (realm/method/intent/request) don't match an offered challenge, before invoking the verifier. A malformed Authorization: Payment header now returns a 402 malformed-credential problem instead of a 500.
  • http4k-security-webauthn: [Unlikely Break] Passkeys.passwordless(...) now defaults to userVerification = REQUIRED.
  • http4k-core: Hardened docs: extracted path parameters are percent-decoded and may contain /, \ or .., so should be treated as untrusted; clearer warnings on the deliberately-loose ReverseProxyHostMatcher.Contains and on CorsPolicy.UnsafeGlobalPermissive.
  • http4k-api-ui-swagger-: [Fix] OAuth URI is not quoted properly
  • http4k-core: [Fix] Body.webForm/form parsing no longer truncates field values containing = (e.g. base64 padding); the value is now preserved intact.
  • http4k-serverless-lambda: [Fix] The API Gateway V1 and Application Load Balancer adapters now merge multi-value headers/query params.
  • http4k-serverless-lambda: [Fix] A request that fails to parse no longer reflects the exception message into the BAD_REQUEST response body.
  • http4k-serverless-tencent: [Fix] Requests with no query parameters no longer NPE.
  • http4k-serverless-openwhisk: [Fix] An event missing __ow_method now returns NOT_IMPLEMENTED instead of throwing an NPE.
  • http4k-connect-x402/http4k-ai-mcp-x402: The payment filters (HTTP + MCP) gain an optional resourceFor lambda; when supplied, a payment is rejected with 402 unless payload.resource matches, so a payment signed for one resource can't be replayed against another. Off by default (standard behaviour unchanged).
  • http4k-template-pug4j: The file-backed Caching renderer now applies the same canonical-path containment check as HotReload, rejecting template paths that escape the base directory.
  • http4k-core: URLConnectionHttpClient now accepts a BodyMode (defaulting to Memory), allowing responses to be streamed rather than always buffered fully into memory.
  • http4k-security-webauthn: Minor hardening and robustness improvements to passkey verification

v6.54.0.0

  • http4k-*: Upgrade versions including Pug to v3.0.0

... (truncated)

Commits

Updates io.undertow:undertow-core from 2.4.1.Final to 2.4.2.Final

Commits
  • 92850b2 Prepare 2.4.2.Final
  • 8643d98 Merge pull request #1976 from ropalka/2026-06-23-backports-2.4.x
  • 5700856 [UNDERTOW-2709] UndertowOptions.ALLOWED_REQUEST_ATTRIBUTES_PATTERN is ignored...
  • f5f85e7 [UNDERTOW-2771] Revisited delimiters and unescaped characters
  • 7afc4df [UNDERTOW-2771] Decode query and path parameters if and only if parser is con...
  • 464418e [UNDERTOW-1918] ComplexSSLTestCase fails sporadically with ConnectionClosedEx...
  • 88734e1 Merge pull request #1973 from fl4via/backport-fixes_2.4.x
  • 665ff7f [UNDERTOW-2761] return 413 status instead of 500 in case of RequestTooBigExce...
  • e1daa7f [UNDERTOW-2759] Excluding new concurrency rules - they need further investiga...
  • 41c665f [UNDERTOW-2759] Excluding false positive - it is safe to have unread field no...
  • Additional commits viewable in compare view

Updates gradle-wrapper from 9.5.1 to 9.7.0

Release notes

Sourced from gradle-wrapper's releases.

9.7.0

The Gradle team is excited to announce Gradle 9.7.0.

Here are the highlights of this release:

  • Isolated Projects graduates to incubating
  • Broader Configuration Cache compatibility
  • More source locations in problem reports

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Adam, Aman Gautam, Aman Kumar, Anton Dubrouski, Aurimas, gbhavya07, Josh Friend, nicklauslittle-gov, Pragati, project516, Qin Mi, Ravi, sk-reddy17, Suvrat Acharya, Yongshun Ye.

Upgrade instructions

Switch your build to use Gradle 9.7.0 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.7.0 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

9.7.0 RC3

The Gradle team is excited to announce Gradle 9.7.0 RC3.

Here are the highlights of this release:

  • Isolated Projects graduates to incubating

... (truncated)

Commits
  • 3defbfc make DistributionIntegrationSpec more permissive for releases (#38766)
  • f176043 make DistributionIntegrationSpec more permissive for releases
  • b0828da Prepare release notes for Gradle 9.7.0GA (#38756)
  • 064b6d6 cleanup
  • dfe7bdc add new training to release notes
  • 7561968 add release notes for 37801
  • 68a1f35 cherrypick 38367 to release
  • a462c95 Rebalance AllVersionsCrossVersion buckets for agents without TestDistribution...
  • 820e2b1 Update Gradle wrapper to version 9.7.0-rc-3 (#38743)
  • 75ea3d7 Update Gradle wrapper to version 9.7.0-rc-3
  • Additional commits viewable in compare view

Updates org.bouncycastle:bcpkix-jdk18on from 1.84 to 1.85

Changelog

Sourced from org.bouncycastle:bcpkix-jdk18on's changelog.

... (truncated)

Commits

Updates org.commonmark:commonmark from 0.28.0 to 0.30.0

Release notes

Sourced from org.commonmark:commonmark's releases.

commonmark-java 0.30.0

Added

  • New option lineSeparator for MarkdownRenderer.Builder to change the default line separator from \n (e.g. to \r\n) (#442)
  • YAML front matter extension: Support extracting the raw YAML content so that you can do the YAML parsing using a library (instead of the limited built-in parsing) (#391)

Changed

  • Tables extension: Limit max number of parsed table cells by default (1 million cells), see option maxCells in TablesExtension.Builder. Parsing will throw an error if the limit would be exceeded, to protect against malicious input.
  • The default for maxOpenBlockParsers for Parser.Builder is now 100; configure the option to remove the limit.
  • Limit how deeply inline nodes may nest by default (100), see option maxInlineNesting in Parser.Builder; configure the option to remove the limit. This covers emphasis-like delimiters (e.g. * or the ins extension's +) as well as images, which can otherwise nest arbitrarily deep for a small amount of input. Anything over the limit is treated as plain text instead.

Fixed

  • Fix quadratic runtime on various pathological inputs (where inline syntax to start a node is used repeatedly but never finished):
    • Inline HTML like "x <!--".repeat(100_000) (#447)
    • Autolink starts like "<".repeat(100_000)
    • Emphasis like "a**b" + "c* ".repeat(100_000)
    • Backticks runs of different lengths
  • Fix stack overflow errors when parsing pathological inputs with repeated syntax:
    • HTML block attributes
    • Autolink email addresses
    • Deeply nested emphasis
  • Fix stack overflow error when rendering/visiting deeply nested inline nodes, by capping nesting depth during parsing (see maxInlineNesting above). This can happen with emphasis, e.g. "*".repeat(n) + "x" + "*".repeat(n) or "*a ".repeat(n) + " b*".repeat(n), as well as with images, e.g. "![".repeat(https://github.com/commonmark/commonmark-java/blob/HEAD/n) + "x" + "](u)".repeat(n)
  • YAML front matter extension: Fix inefficient string concatenation for literal-block values (|)

commonmark-java 0.29.0

Added

  • Support rendering GFM task list items to Markdown (#433)
  • Support rendering YAML front matter to Markdown (#434)
  • Alerts
    • Allow customizing HTML attributes for alert title <p> tag via AttributeProvider (#427)
    • New configuration for AlertsExtension to allow authors to provide custom titles per alert. See the custom titles section of the alerts README for more information. (#430)
    • New configuration for AlertsExtension to allow alerts to be nested within other blocks (including other alerts). See this section of the alerts README for more information. (#430)
    • New configuration for AlertsExtension to allow the set of alert types (including standard GFM types) to be completely overwritten. (#435)

... (truncated)

Changelog

Sourced from org.commonmark:commonmark's changelog.

[0.30.0] - 2026-08-06

Added

  • New option lineSeparator for MarkdownRenderer.Builder to change the default line separator from \n (e.g. to \r\n) (#442)
  • YAML front matter extension: Support extracting the raw YAML content so that you can do the YAML parsing using a library (instead of the limited built-in parsing) (#391)

Changed

  • Tables extension: Limit max number of parsed table cells by default (1 million cells), see option maxCells in TablesExtension.Builder. Parsing will throw an error if the limit would be exceeded, to protect against malicious input.
  • The default for maxOpenBlockParsers for Parser.Builder is now 100; configure the option to remove the limit.
  • Limit how deeply inline nodes may nest by default (100), see option maxInlineNesting in Parser.Builder; configure the option to remove the limit. This covers emphasis-like delimiters (e.g. * or the ins extension's +) as well as images, which can otherwise nest arbitrarily deep for a small amount of input. Anything over the limit is treated as plain text instead.

Fixed

  • Fix quadratic runtime on various pathological inputs (where inline syntax to start a node is used repeatedly but never finished):
    • Inline HTML like "x <!--".repeat(100_000) (#447)
    • Autolink starts like "<".repeat(100_000)
    • Emphasis like "a**b" + "c* ".repeat(100_000)
    • Backticks runs of different lengths
  • Fix stack overflow errors when parsing pathological inputs with repeated syntax:
    • HTML block attributes
    • Autolink email addresses
    • Deeply nested emphasis
  • Fix stack overflow error when rendering/visiting deeply nested inline nodes, by capping nesting depth during parsing (see maxInlineNesting above). This can happen with emphasis, e.g. "*".repeat(n) + "x" + "*".repeat(n) or "*a ".repeat(n) + " b*".repeat(n), as well as with images, e.g. "![".repeat(https://github.com/commonmark/commonmark-java/blob/main/n) + "x" + "](u)".repeat(n)
  • YAML front matter extension: Fix inefficient string concatenation for literal-block values (|)

[0.29.0] - 2026-06-20

Added

  • Support rendering GFM task list items to Markdown (#433)
  • Support rendering YAML front matter to Markdown (#434)
  • Alerts
    • Allow customizing HTML attributes for alert title <p> tag via AttributeProvider (#427)
    • New configuration for AlertsExtension to allow authors to provide custom titles per alert. See the custom titles section of the alerts README for more information. (#430)
    • New configuration for AlertsExtension to allow alerts to be nested within other blocks (including other alerts). See this section of the alerts README for more information. (#430)
    • New configuration for AlertsExtension to allow the set of alert types (including standard GFM types) to be completely overwritten. (#435)

... (truncated)

Commits
  • 64037cf [maven-release-plugin] prepare release commonmark-parent-0.30.0
  • bd3e066 Fix Javadoc
  • 4aaf754 mvn versions:set -DnewVersion=0.30.0-SNAPSHOT
  • 42b4fb7 Prepare CHANGELOG for version 0.30.0
  • b76e09d Limit how deep inline nodes may nest by default (100)
  • 49f65cb Fix StackOverflowError when parsing deeply nested emphasis
  • 610f84b Fix StackOverflowError when parsing pathological autolink email addresses
  • 9f1d738 Fix StackOverflowError when parsing pathological HTML block attributes
  • e13297e Fix quadratic runtime when parsing pathological backticks
  • 89d1bd3 Fix quadratic runtime when parsing with lots of <
  • Additional commits viewable in compare view

Updates com.networknt:json-schema-validator from 3.0.3 to 3.0.6

Release notes

Sourced from com.networknt:json-schema-validator's releases.

3.0.6- 2026-07-07

Added

Changed

3.0.5- 2026-06-21

Added

Changed

  • fixes #1252 problem with additionalProperties schema in jsconfig schema (#1253)
  • fixes #1174 TextNodes as schema seem to validate any value (#1250)

3.0.4- 2026-06-10

Added

Changed

Changelog

Sourced from com.networknt:json-schema-validator's changelog.

Change Log

All notable changes to this project will be documented in this file.

This format is based on Keep a Changelog.

This project does not adhere to Semantic Versioning and minor version changes can have incompatible API changes. These incompatible API changes will largely affect those who have custom validator or walker implementations. Those who just use the library to validate using the standard JSON Schema Draft specifications may not need changes.

[Unreleased]

Added

Changed

Changed

3.0.6- 2026-07-07

Added

Changed

3.0.5- 2026-06-21

Added

Changed

  • fixes #1252 problem with additionalProperties schema in jsconfig schema (#1253)
  • fixes #1174 TextNodes as schema seem to validate any value (#1250)

3.0.4- 2026-06-10

Added

Changed

3.0.3- 2026-05-27

Added

Changed

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jul 12, 2026
@dependabot
dependabot Bot force-pushed the dependabot/gradle/all-2cdc4f5770 branch 2 times, most recently from 4e329ae to f74f90a Compare August 2, 2026 20:29
@dependabot
Bump the all group across 1 directory with 21 updates
eea1ed3 
Bumps the all group with 21 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [io.ktor:ktor-version-catalog](https://github.com/ktorio/ktor) | `3.5.0` | `3.5.2` |
| [org.http4k:http4k-server-netty](https://github.com/http4k/http4k) | `6.50.0.0` | `6.57.1.0` |
| [io.undertow:undertow-core](https://github.com/undertow-io/undertow) | `2.4.1.Final` | `2.4.2.Final` |
| [gradle-wrapper](https://github.com/gradle/gradle) | `9.5.1` | `9.7.0` |
| [org.bouncycastle:bcpkix-jdk18on](https://github.com/bcgit/bc-java) | `1.84` | `1.85` |
| [org.commonmark:commonmark](https://github.com/commonmark/commonmark-java) | `0.28.0` | `0.30.0` |
| [com.networknt:json-schema-validator](https://github.com/networknt/json-schema-validator) | `3.0.3` | `3.0.6` |
| [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework) | `6.1.0` | `6.1.2` |
| [org.junit.platform:junit-platform-launcher](https://github.com/junit-team/junit-framework) | `6.1.0` | `6.1.2` |
| [io.heapy.kotaml:kotaml](https://github.com/Heapy/kotaml) | `0.108.0` | `0.110.0` |
| [com.google.devtools.ksp:symbol-processing-api](https://github.com/google/ksp) | `2.3.9` | `2.3.11` |
| [com.google.devtools.ksp](https://github.com/google/ksp) | `2.3.9` | `2.3.11` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.33` | `1.6.1` |
| [io.micrometer:micrometer-registry-prometheus](https://github.com/micrometer-metrics/micrometer) | `1.16.5` | `1.17.0` |
| [org.mongodb:mongodb-driver-kotlin-coroutine](https://github.com/mongodb/mongo-java-driver) | `5.8.0` | `5.9.1` |
| [io.netty:netty-all](https://github.com/netty/netty) | `4.2.14.Final` | `4.2.17.Final` |
| [io.netty:netty-transport-native-kqueue](https://github.com/netty/netty) | `4.2.14.Final` | `4.2.17.Final` |
| [io.netty:netty-transport-native-epoll](https://github.com/netty/netty) | `4.2.14.Final` | `4.2.17.Final` |
| [io.netty:netty-transport-native-io_uring](https://github.com/netty/netty) | `4.2.14.Final` | `4.2.17.Final` |
| [org.jetbrains.kotlin.jvm](https://github.com/JetBrains/kotlin) | `2.3.21` | `2.4.10` |
| [org.jetbrains.kotlin.plugin.serialization](https://github.com/JetBrains/kotlin) | `2.3.21` | `2.4.10` |



Updates `io.ktor:ktor-version-catalog` from 3.5.0 to 3.5.2
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/main/CHANGELOG.md)
- [Commits](ktorio/ktor@3.5.0...3.5.2)

Updates `org.http4k:http4k-server-netty` from 6.50.0.0 to 6.57.1.0
- [Release notes](https://github.com/http4k/http4k/releases)
- [Changelog](https://github.com/http4k/http4k/blob/master/CHANGELOG.md)
- [Commits](http4k/http4k@6.50.0.0...6.57.1.0)

Updates `io.undertow:undertow-core` from 2.4.1.Final to 2.4.2.Final
- [Release notes](https://github.com/undertow-io/undertow/releases)
- [Commits](undertow-io/undertow@2.4.1.Final...2.4.2.Final)

Updates `gradle-wrapper` from 9.5.1 to 9.7.0
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v9.5.1...v9.7.0)

Updates `org.bouncycastle:bcpkix-jdk18on` from 1.84 to 1.85
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.commonmark:commonmark` from 0.28.0 to 0.30.0
- [Release notes](https://github.com/commonmark/commonmark-java/releases)
- [Changelog](https://github.com/commonmark/commonmark-java/blob/main/CHANGELOG.md)
- [Commits](commonmark/commonmark-java@commonmark-parent-0.28.0...commonmark-parent-0.30.0)

Updates `com.networknt:json-schema-validator` from 3.0.3 to 3.0.6
- [Release notes](https://github.com/networknt/json-schema-validator/releases)
- [Changelog](https://github.com/networknt/json-schema-validator/blob/master/CHANGELOG.md)
- [Commits](networknt/json-schema-validator@3.0.3...3.0.6)

Updates `org.junit.jupiter:junit-jupiter` from 6.1.0 to 6.1.2
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.1.0...r6.1.2)

Updates `org.junit.platform:junit-platform-launcher` from 6.1.0 to 6.1.2
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.1.0...r6.1.2)

Updates `org.junit.platform:junit-platform-launcher` from 6.1.0 to 6.1.2
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.1.0...r6.1.2)

Updates `io.heapy.kotaml:kotaml` from 0.108.0 to 0.110.0
- [Release notes](https://github.com/Heapy/kotaml/releases)
- [Commits](Heapy/kotaml@v0.108.0...v0.110.0)

Updates `com.google.devtools.ksp:symbol-processing-api` from 2.3.9 to 2.3.11
- [Release notes](https://github.com/google/ksp/releases)
- [Commits](google/ksp@2.3.9...2.3.11)

Updates `com.google.devtools.ksp` from 2.3.9 to 2.3.11
- [Release notes](https://github.com/google/ksp/releases)
- [Commits](google/ksp@2.3.9...2.3.11)

Updates `ch.qos.logback:logback-classic` from 1.5.33 to 1.6.1
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.33...v_1.6.1)

Updates `io.micrometer:micrometer-registry-prometheus` from 1.16.5 to 1.17.0
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.16.5...v1.17.0)

Updates `org.mongodb:mongodb-driver-kotlin-coroutine` from 5.8.0 to 5.9.1
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.8.0...r5.9.1)

Updates `io.netty:netty-all` from 4.2.14.Final to 4.2.17.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.14.Final...netty-4.2.17.Final)

Updates `io.netty:netty-transport-native-kqueue` from 4.2.14.Final to 4.2.17.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.14.Final...netty-4.2.17.Final)

Updates `io.netty:netty-transport-native-epoll` from 4.2.14.Final to 4.2.17.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.14.Final...netty-4.2.17.Final)

Updates `io.netty:netty-transport-native-io_uring` from 4.2.14.Final to 4.2.17.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.14.Final...netty-4.2.17.Final)

Updates `io.netty:netty-transport-native-kqueue` from 4.2.14.Final to 4.2.17.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.14.Final...netty-4.2.17.Final)

Updates `io.netty:netty-transport-native-epoll` from 4.2.14.Final to 4.2.17.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.14.Final...netty-4.2.17.Final)

Updates `io.netty:netty-transport-native-io_uring` from 4.2.14.Final to 4.2.17.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.14.Final...netty-4.2.17.Final)

Updates `org.jetbrains.kotlin.jvm` from 2.3.21 to 2.4.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.21...v2.4.10)

Updates `org.jetbrains.kotlin.plugin.serialization` from 2.3.21 to 2.4.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.21...v2.4.10)

Updates `org.jetbrains.kotlin.plugin.serialization` from 2.3.21 to 2.4.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.21...v2.4.10)

Updates `com.google.devtools.ksp` from 2.3.9 to 2.3.11
- [Release notes](https://github.com/google/ksp/releases)
- [Commits](google/ksp@2.3.9...2.3.11)

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: com.google.devtools.ksp
  dependency-version: 2.3.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: com.google.devtools.ksp
  dependency-version: 2.3.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: com.google.devtools.ksp:symbol-processing-api
  dependency-version: 2.3.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: com.networknt:json-schema-validator
  dependency-version: 3.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: gradle-wrapper
  dependency-version: 9.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: io.heapy.kotaml:kotaml
  dependency-version: 0.110.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: io.ktor:ktor-version-catalog
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.micrometer:micrometer-registry-prometheus
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: io.netty:netty-all
  dependency-version: 4.2.16.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.netty:netty-transport-native-epoll
  dependency-version: 4.2.16.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.netty:netty-transport-native-epoll
  dependency-version: 4.2.16.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.netty:netty-transport-native-io_uring
  dependency-version: 4.2.16.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.netty:netty-transport-native-io_uring
  dependency-version: 4.2.16.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.netty:netty-transport-native-kqueue
  dependency-version: 4.2.16.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.netty:netty-transport-native-kqueue
  dependency-version: 4.2.16.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.undertow:undertow-core
  dependency-version: 2.4.2.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: org.bouncycastle:bcpkix-jdk18on
  dependency-version: '1.85'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: org.commonmark:commonmark
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: org.http4k:http4k-server-netty
  dependency-version: 6.55.0.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: org.jetbrains.kotlin.jvm
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: org.jetbrains.kotlin.plugin.serialization
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: org.jetbrains.kotlin.plugin.serialization
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: org.junit.jupiter:junit-jupiter
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: org.junit.platform:junit-platform-launcher
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: org.junit.platform:junit-platform-launcher
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: org.mongodb:mongodb-driver-kotlin-coroutine
  dependency-version: 5.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/gradle/all-2cdc4f5770 branch from f74f90a to eea1ed3 Compare August 9, 2026 20:28
@IRus
IRus merged commit 0eeb71c into main Aug 9, 2026
4 of 9 checks passed
@dependabot
dependabot Bot deleted the dependabot/gradle/all-2cdc4f5770 branch August 9, 2026 20:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@IRus