Skip to content

fix(deps): update all #1219

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

fix(deps): update all #1219

wants to merge 1 commit into from
+14 −14

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented May 31, 2025 •
edited
Loading

This PR contains the following updates:

Package Type Update Change Age Confidence
gradle (source) patch 8.14.1 -> 8.14.3 age confidence
com.github.spotbugs:spotbugs-annotations (source) dependencies patch 4.9.3 -> 4.9.8 age confidence
commons-codec:commons-codec (source) dependencies minor 1.18.0 -> 1.20.0 age confidence
commons-io:commons-io (source) dependencies minor 2.19.0 -> 2.21.0 age confidence
org.apache.commons:commons-text (source) dependencies minor 1.13.1 -> 1.14.0 age confidence
com.github.ben-manes.caffeine:caffeine dependencies patch 3.2.0 -> 3.2.3 age confidence
jacoco (source) dependencies patch 0.8.13 -> 0.8.14 age confidence
pmd (source) dependencies minor 7.13.0 -> 7.18.0 age confidence
org.assertj:assertj-core (source) dependencies patch 3.27.3 -> 3.27.6 age confidence
com.commercetools.sdk:commercetools-sdk-java-api (source) dependencies minor 19.3.0 -> 19.6.2 age confidence
com.commercetools.sdk:commercetools-http-client (source) dependencies minor 19.3.0 -> 19.6.2 age confidence
com.diffplug.spotless plugin minor 7.0.3 -> 7.2.1 age confidence
com.github.spotbugs plugin minor 6.1.12 -> 6.4.5 age confidence
com.github.ben-manes.versions plugin minor 0.52.0 -> 0.53.0 age confidence
org.ajoberstar.grgit plugin patch 5.3.0 -> 5.3.3 age confidence

Release Notes

gradle/gradle (gradle)

v8.14.3: 8.14.3

Compare Source

The Gradle team is excited to announce Gradle 8.14.3.

This is a patch release for 8.14. We recommend using 8.14.3 instead of 8.14.

Here are the highlights of this release:

  • Java 24 support
  • GraalVM Native Image toolchain selection
  • Enhancements to test reporting
  • Build Authoring improvements

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aurimas,
Ben Bader,
Björn Kautler,
chandre92,
Daniel Hammer,
Danish Nawab,
Florian Dreier,
Ivy Chen,
Jendrik Johannes,
jimmy1995-gu,
Madalin Valceleanu,
Na Minhyeok.

Upgrade instructions

Switch your build to use Gradle 8.14.3 by updating your wrapper:

./gradlew wrapper --gradle-version=8.14.3 && ./gradlew wrapper

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.14.2: 8.14.2

Compare Source

The Gradle team is excited to announce Gradle 8.14.2.

Here are the highlights of this release:

  • Java 24 support
  • GraalVM Native Image toolchain selection
  • Enhancements to test reporting
  • Build Authoring improvements

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aurimas,
Ben Bader,
Björn Kautler,
chandre92,
Daniel Hammer,
Danish Nawab,
Florian Dreier,
Ivy Chen,
Jendrik Johannes,
jimmy1995-gu,
Madalin Valceleanu,
Na Minhyeok.

Upgrade instructions

Switch your build to use Gradle 8.14.2 by updating your wrapper:

./gradlew wrapper --gradle-version=8.14.2 && ./gradlew wrapper

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

spotbugs/spotbugs (com.github.spotbugs:spotbugs-annotations)

v4.9.8

Compare Source

Fixed
  • Maven plugin reporting issue if -adjustPriority is not set (#​3774)

v4.9.7

Compare Source

Fixed
  • Fix Eclipse not always using latest preferences file state (#​3740)
  • Fix exception throw when singleton implementing Cloneable has no clone() method (#​3727)
  • Fix for missing -adjustPriority parameter in Eclipse preferences (#​3687)
  • Documentation of -adjustPriority parameter
  • Functionality from DetectorFactory setEnabledButNonReporting(), getPriorityAdjustment() methods and BugInstance.adjustForDetector() is deprecated and moved to PriorityAdjuster (#​3753)
  • Improved FindNakedNotify to handle the case when the lock is loaded from a field (#​3634)
Changed
  • Support for fully qualified class names for detectors in -adjustPriority parameter
  • Support for numerical and absolute priority adjustments
  • Bump up Apache Commons BCEL to the version 6.11.0 (#​3569)
Deprecated
  • Add back and deprecate edu.umd.cs.findbugs.io.IO.close(InputStream) method. (#​3756)
Build
  • Allow our GA builds to work with JDK 25 (and drop support for JDK 24) (#​3564)

v4.9.6

Compare Source

Fixed
  • Fix exception throw when analyzing jakarta.servlet.http.HttpServletRequest method calls (#​3711)

v4.9.5

Compare Source

Fixed
  • Fix for an error when a record method has the @SuppressFBWarnings annotation (#​3622)
  • Fix SF_SWITCH_FALLTHROUGH false positive when continuing a loop (#​3617)
  • CWO_CLOSED_WITHOUT_OPENED false positive (#​3616)
  • SF_SWITCH_NO_DEFAULT false positive fix for switch-arrow (#​3645)
  • Fix the issue with BCEL logging Duplicating value: ... (#​3621)
  • Add missing jakarta support for servlets / pre/post destroy (#​3694)
Added
  • Add 'java.nio.file.Path.of' to known types for path traversal checks (#​3699)
Cleanup
  • S1481: Unused local variables should be removed (#​3654)
  • Moved test libraries to jakarta namespace including switching off jsr305 where possible for jakarta.annotation (#​3695)

v4.9.4

Compare Source

Changed
  • AnnotationMatcher can now ignore bugs if annotation is also applied on methods or fields. Previously only annotations on classes were considered.
  • Add relevant CWE ids to bugs and refer the CWEs in the bug messages (#​3354).
  • Replace LOCAL_VARIABLE_UNKNOWN with exact method name for NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE (#​3485)
Fixed
  • Widen main method recognition according to JEP 445. (#​3371)
  • Do not report US_USELESS_SUPPRESSION_ON_* on methods, fields, parameters, packages or classes with an *.Generated annotation with retention >= class (#​3350)(#​3409)
  • Rewrite some member in ResourceValueFrame.java to Enum (#​2061)
  • Ignore non-interpreted text when looking for FS_BAD_DATE_FORMAT_FLAG_COMBO (#​3387)
  • Fix IllegalArgumentException thrown from FindNoSideEffectMethods detector (#​3320)
  • Do not report RV_RETURN_VALUE_IGNORED_NO_SIDE_EFFECT when part of a Mockito doAnswer(), doCallRealMethod(), doNothing(), doThrow() or doReturn() call (#​3334)
  • Fix CT_CONSTRUCTOR_THROW false positive with public and private constructors in specific order of methods (#​3417)
  • Fix AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE, AT_NONATOMIC_64BIT_PRIMITIVE and AT_STALE_THREAD_WRITE_OF_PRIMITIVE FP when the relevant code is in private method, which is only called with proper synchronization (#​3428)
  • Do not report RV_RETURN_VALUE_IGNORED_NO_SIDE_EFFECT when part of a BDDMockito call (#​3441)
  • Fix AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE when field of a local variable is set. (#​3459)
  • Fix AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE FP when there was no compound operation (#​3363)
  • Fix NM_FIELD_NAMING_CONVENTION crash in the TestASM detector (#​3489)
  • Do not report UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR for fields initialized in JUnit 3/4 setUp() method. (#​3169)
  • Fix US_USELESS_SUPPRESSION_ON_FIELD/UUF_UNUSED_FIELD false positive (#​3496)
  • Make the osgi manifest of the annotations jar Java 8 compatible (#​3498) (#​3500)
  • TextUICommandLine supports all options encoded in Eclipse preferences file (#​3520)
  • Unnecessary suppressions fix for records headers (#​3471)
  • Dead store fix when switch case contains loops (#​3530) (#​3449)
  • Consider PUTFIELD and PUTSTATIC when looking for assertions with side effects (#​3463)
  • Detect cases when equals() unconditionally returns true or false (#​3528)
  • Do not report that an Iterator does not throw NoSuchElementException when hasNext() returns true (#​3501)
  • Detect random value cast to int when stored in temporary variable (#​3461)
  • Look for interfaces default methods when searching uncalled private methods (#​1988)
  • Fixed field self assignment false positive (#​2258)
  • Fixed DMI_INVOKING_TOSTRING_ON_ARRAY on newer JDK (#​1147)
  • Fix NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE false positive with Objects.requireNonNull (#​2965) (#​3573)
  • Track inner classes access methods to correctly report the bugs (#​2029)
  • SF_SWITCH_NO_DEFAULT false positive fix (#​1148) (#​3572)
Added
  • Added the unnecessary annotation to the US_USELESS_SUPPRESSION_ON_* messages (#​3395)
  • Multi-threaded code checks can be skipped with @NotThreadSafe (#​3390)
  • New bug type CWO_CLOSED_WITHOUT_OPENED for locks that might be released without even being acquired. (See SEI CERT rule LCK08-J) (#​2055)
    • Breaking change: changed values and new items in ResourceValueFrame.
  • Inline access method for method. (#​3481)
  • Added DMI_MISLEADING_SUBSTRING for calling subString(0) on a StringBuffer/StringBuilder (#​1928)
Signing
  • Signing for Eclipse plugin has been removed at the current time due to signing keys being expired. The expired key produced a warning during install, the same is true without signing.
apache/commons-codec (commons-codec:commons-codec)

v1.20.0

The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.20.0.

The Apache Commons Codec component contains encoders and decoders for
formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
widely used encoders and decoders, the codec package also maintains a
collection of phonetic encoding utilities.

This is a feature and maintenance release. Java 8 or later is required.

ben-manes/caffeine (com.github.ben-manes.caffeine:caffeine)

v3.2.3: 3.2.3

  • Fixed frequency tracking of weak keys to use the object's identity hash code (#​1902)
  • Added support for underscores in CaffeineSpec when using numeric literals (#​1890)
  • Improved the external api to no longer lock when querying for the maximum size or weighted size (#​1897)
  • Added detection and recovery when a custom CompletableFuture is in an inconsistent state (quarkus#50513)

v3.2.2: 3.2.2

  • Fixed characteristics returned by Spliterators (#​1883)

v3.2.1: 3.2.1

  • Fixed computeIfAbsent for an async cache's synchronous view to retry if incomplete
  • Improved CaffeineSpec when being reflectively constructed (#​1839)
  • Improved the handling of negative durations with variable expiration
  • Fixed intermittent null after replacing a weak/soft value (#​1820)
jacoco/jacoco (jacoco)

v0.8.14: 0.8.14

New Features

  • JaCoCo now officially supports Java 25 (GitHub #​1950).
  • Experimental support for Java 26 class files (GitHub #​1870).
  • Branches added by the Kotlin compiler for default argument number 33 or higher are filtered out during generation of report (GitHub #​1655).
  • Part of bytecode generated by the Kotlin compiler for elvis operator that follows safe call operator is filtered out during generation of report (GitHub #​1814, #​1954).
  • Part of bytecode generated by the Kotlin compiler for more cases of chained safe call operators is filtered out during generation of report (GitHub #​1956).
  • Part of bytecode generated by the Kotlin compiler for invocations of suspendCoroutineUninterceptedOrReturn intrinsic is filtered out during generation of report (GitHub #​1929).
  • Part of bytecode generated by the Kotlin compiler for suspending lambdas with parameters is filtered out during generation of report (GitHub #​1945).
  • Part of bytecode generated by the Kotlin compiler for suspending functions and lambdas with suspension points that return inline value class is filtered out during generation of report (GitHub #​1871).
  • Part of bytecode generated by the Kotlin Compose compiler plugin for pausable composition is filtered out during generation of report (GitHub #​1911).
  • Methods generated by the Kotlin serialization compiler plugin are filtered out (GitHub #​1885, #​1970, #​1971).

Fixed bugs

  • Fixed handling of implicit else clause of when with String subject in Kotlin (GitHub #​1813, #​1940).
  • Fixed handling of implicit default clause of switch by String in Java when compiled by ECJ (GitHub #​1813, #​1940).
    Fixed handling of exceptions in chains of safe call operators in Kotlin (GitHub #​1819).

Non-functional Changes

  • JaCoCo now depends on ASM 9.9 (GitHub #​1965).
commercetools/commercetools-sdk-java-v2 (com.commercetools.sdk:commercetools-sdk-java-api)

v19.6.2

Compare Source

What's Changed

Api changes

Added Type(s)
  • added type DiscountCombinationMode
  • added type DiscountsConfiguration
  • added type ProjectSetDiscountsConfigurationAction
Removed Property(s)
  • ⚠️ removed property skipConfiguration from type RecurringOrderSetOrderSkipConfigurationAction
Added Property(s)
  • added property discounts to type Project
  • added property skipConfigurationInputDraft to type RecurringOrderSetOrderSkipConfigurationAction

Full Changelog: commercetools/commercetools-sdk-java-v2@19.6.1...19.6.2

v19.5.0

Compare Source

What's Changed

Api changes

Required Property(s)
  • changed property variantSelection of type ProductSelectionProductAddedMessage to be optional
  • changed property variantExclusion of type ProductSelectionProductExcludedMessage to be optional
  • changed property oldVariantExclusion of type ProductSelectionVariantExclusionChangedMessage to be optional
  • changed property newVariantExclusion of type ProductSelectionVariantExclusionChangedMessage to be optional
  • changed property oldVariantSelection of type ProductSelectionVariantSelectionChangedMessage to be optional
  • changed property newVariantSelection of type ProductSelectionVariantSelectionChangedMessage to be optional
  • changed property variantSelection of type ProductSelectionProductAddedMessagePayload to be optional
  • changed property variantExclusion of type ProductSelectionProductExcludedMessagePayload to be optional
  • changed property oldVariantExclusion of type ProductSelectionVariantExclusionChangedMessagePayload to be optional
  • changed property newVariantExclusion of type ProductSelectionVariantExclusionChangedMessagePayload to be optional
  • changed property oldVariantSelection of type ProductSelectionVariantSelectionChangedMessagePayload to be optional
  • changed property newVariantSelection of type ProductSelectionVariantSelectionChangedMessagePayload to be optional
Added Property(s)
  • added property interfaceId to type MyTransactionDraft
  • added property interfaceId to type Transaction
  • added property interfaceId to type TransactionDraft
Added Type(s)
  • added type PaymentTransactionInterfaceIdSetMessage
  • added type PaymentTransactionInterfaceIdSetMessagePayload
  • added type PaymentSetTransactionInterfaceIdAction

Full Changelog: commercetools/commercetools-sdk-java-v2@19.4.0...19.5.0

v19.4.0

Compare Source

Api changes

Added Property(s)
  • added property isActive to type DiscountGroup
  • added property isActive to type DiscountGroupDraft
Added Type(s)
  • added type DiscountGroupSetIsActiveAction
  • added type MaxDiscountGroupsReachedError
  • added type GraphQLMaxDiscountGroupsReachedError
  • added type DiscountGroupIsActiveSetMessage
  • added type DiscountGroupIsActiveSetMessagePayload

What's Changed

Full Changelog: commercetools/commercetools-sdk-java-v2@19.3.0...19.4.0

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/all branch 5 times, most recently from 03eb329 to 99952bc Compare June 9, 2025 09:34
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from b56a6c0 to 9451e46 Compare June 20, 2025 12:34
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from 620b976 to fcff3d2 Compare June 27, 2025 12:39
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from fc02e2f to a5bbb3e Compare July 8, 2025 03:03
@renovate renovate bot force-pushed the renovate/all branch 2 times, most recently from ca537aa to caf5655 Compare July 13, 2025 06:00
@renovate renovate bot force-pushed the renovate/all branch 6 times, most recently from 56a024b to 5997ad2 Compare July 25, 2025 10:29
@renovate renovate bot force-pushed the renovate/all branch 2 times, most recently from aece820 to 12348ee Compare August 7, 2025 16:43
@renovate renovate bot force-pushed the renovate/all branch 5 times, most recently from 7677a99 to f2ca817 Compare August 16, 2025 09:58
@renovate renovate bot force-pushed the renovate/all branch 2 times, most recently from 4c51af8 to cd2b32c Compare August 18, 2025 20:55
@renovate renovate bot force-pushed the renovate/all branch 2 times, most recently from 1dc22ce to 450bf4e Compare August 31, 2025 09:12
@renovate renovate bot force-pushed the renovate/all branch 7 times, most recently from 8ec0976 to 7a47593 Compare September 20, 2025 17:32
@renovate renovate bot force-pushed the renovate/all branch 2 times, most recently from 36678e3 to 99d86b7 Compare September 24, 2025 10:50
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from 01873a8 to 3bb2011 Compare October 18, 2025 17:40
@renovate renovate bot force-pushed the renovate/all branch 2 times, most recently from d3bb9da to 77f1796 Compare October 31, 2025 11:57
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from 9af0acd to 90ec065 Compare November 10, 2025 16:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant