Skip to content

Bump the java-sdk-dependency-updates group across 2 directories with 22 updates - #71605

Closed
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/gradle/java-sdk/java-sdk-dependency-updates-a8f99e1638
Closed

dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/gradle/java-sdk/java-sdk-dependency-updates-a8f99e1638

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 14, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the java-sdk-dependency-updates group with 15 updates in the /java-sdk directory:

Package From To
org.apache.logging.log4j:log4j-core 2.26.0 2.26.1
com.gradleup.shadow:shadow-gradle-plugin 9.1.0 9.6.1
com.github.spotbugs:spotbugs-annotations 4.9.8 4.10.3
com.fasterxml.jackson.core:jackson-annotations 2.21 2.22
com.fasterxml.jackson.dataformat:jackson-dataformat-yaml 2.21.0 2.22.1
com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.21.0 2.22.1
io.ktor:ktor-network 3.3.3 3.5.1
org.jetbrains.kotlinx:kotlinx-coroutines-core 1.10.2 1.11.0
org.jetbrains.kotlinx:kotlinx-datetime 0.7.1 0.8.0
org.jetbrains.kotlinx:kotlinx-serialization-json 1.10.0 1.11.0
org.msgpack:msgpack-core 0.9.11 0.9.12
org.jsonschema2pojo 1.2.2 1.3.3
plugin.serialization 2.3.0 2.4.10
org.jetbrains.kotlin:kotlin-gradle-plugin 2.3.0 2.4.10
gradle-wrapper 8.14.4 8.14.5

Bumps the java-sdk-dependency-updates group with 3 updates in the /java-sdk/scala_spark_example directory: org.scala-lang:scala-library, org.apache.spark:spark-sql_2.13 and org.apache.logging.log4j:log4j-bom.

Updates org.apache.logging.log4j:log4j-core from 2.26.0 to 2.26.1

Updates org.apache.logging.log4j:log4j-api from 2.26.0 to 2.26.1

Updates com.gradleup.shadow:shadow-gradle-plugin from 9.1.0 to 9.6.1

Release notes

Sourced from com.gradleup.shadow:shadow-gradle-plugin's releases.

9.6.1

Changed

  • Use GradleException for expected build failures. (#2113)

Fixed

  • Preserve repeated lines in R8 rule files when using minimize { r8 { ... } }. (#2115)

9.6.0

Added

  • Extract R8 rules from dependency JARs when using minimize { r8 { ... } }. (#2089)

Changed

  • Rename ShadowDslMarker to ShadowDsl. (#2091)
  • POTENTIALLY BREAKING: Apply @ShadowDsl to ShadowJar, ResourceTransformer, DependencyFilter, and Relocator. (#2090)
    This restricts nested DSL configuration blocks from implicitly calling outer receiver APIs in Kotlin script files.

Fixed

  • Validate ZIP entry names to prevent Zip Slip path traversal.
  • Avoid resolving unused R8 dependency. (#2101)

9.5.1

Fixed

  • Fix eager calls for toolchainSpec in Kotlin DSL. (#2087)

9.5.0

Added

  • Check DuplicatesStrategy for merging transformers. (#2026)
    This will log warnings when an incompatible DuplicatesStrategy (e.g., EXCLUDE) is applied in Gradle configuration for built-in ResourceTransformers.
  • Add KotlinModuleMetadataTransformer. (#2073)
  • Add R8 as an opt-in minimize { r8 { ... } } tool for shrinking the final shadowed JAR. (#2077)

Changed

  • Bump min Gradle requirement to 9.2.0. (#2057)
  • Remove afterEvaluate when adding variants. (#2056)

Deprecated

  • Deprecate enableKotlinModuleRemapping for ShadowJar. (#2073)
    Apply KotlinModuleMetadataTransformer explicitly to support relocating inside Kotlin module metadata files. This flag will be disabled and removed in the next major release.
  • Deprecate everything under ShadowCopyAction. (#2083)

... (truncated)

Commits

Updates com.github.spotbugs:spotbugs-annotations from 4.9.8 to 4.10.3

Release notes

Sourced from com.github.spotbugs:spotbugs-annotations's releases.

4.10.3

SpotBugs 4.10.3

CHANGELOG

Fixed

  • Fix LI_LAZY_INIT_STATIC false negative when the null guard is written in yoda-style (null == field) (#4144)
  • Fix DC_DOUBLECHECK, NP_SYNC_AND_NULL_CHECK_FIELD and SP_SPIN_ON_FIELD false negatives when the null guard is written in yoda-style (null == field) (#4144)
  • Fix message for UNS_UNSAFE_CALL bug pattern
  • Restore CLI plugin loading by fixing DetectorFactoryCollection bootstrap ordering (#4191)
  • Fix UWF_NULL_FIELD false negative for fields initialized with cast null values (#4034)
  • Fix UMAC_UNCALLABLE_METHOD_OF_ANONYMOUS_CLASS false positive for methods reached only through method references (#4059)

Changed

  • Ant FindBugsViewerTask: use default look and feel by default. (#4165)

Refactor

  • Ant FindBugsViewerTask: extend AbstractFindBugsTask to reduce duplicate code. (#4165)

CHECKSUM

file checksum (sha256)
spotbugs-4.10.3-javadoc.jar 9670d6569864fd9a45c4aa92f6e3dc2d11e2c24b4ff0a3eabe64b293dc3f0534
spotbugs-4.10.3-sources.jar e00994265d6b771db8cc79edd70500ab8af6334f636d3ac7bf169c5d7daefcbc
spotbugs-4.10.3.tgz 53c03a77da9746ed0c17aae6c0a9419a12ddeb8bf61dd7209a2e417550afd01d
spotbugs-4.10.3.zip e814ee5bf9665412658c4d684e45eae3cf993148a71bc8bc93fb343e92288151
spotbugs-annotations-4.10.3-javadoc.jar 5da6c2d1fe6ef37022dda7fdf221965bb6de57a0276e1735f518840f56ccab1f
spotbugs-annotations-4.10.3-sources.jar 87974d23caffbc8c6e66c567747627267b5ed06573cee966d7af6d236b8d65bd
spotbugs-annotations.jar 3fabaf088f8cd10803cc87dba4666cf874bdcd2e07ad154ed3fe403647ce3f2a
spotbugs-ant-4.10.3-javadoc.jar fab78b3c109057689dc2057a18071b1a997048bb18b45ae39835c1007b18f440
spotbugs-ant-4.10.3-sources.jar af1c78c8e194c2f82ea3e0517ab38a5eb6ba608c8d0e776c9097605d6b7efca6
spotbugs-ant.jar 9ec240477b7c87270be7dfe3196180cd3763f04c369e5691feeb12e66110a065
spotbugs.jar 5b12b471979fd8d664e9772d4c7e7e11b25a55d71dbb0ef2d2dcb749959052e7
test-harness-4.10.3-javadoc.jar 1a495602098f524a4a62f227bc556f75236a0231d08d7bedaeae73d478067e94
test-harness-4.10.3-sources.jar 805d2d124b0d4ea513ee9262d4ad6027c3471d45defd80fd7d20e23425d17df7
test-harness-4.10.3.jar bd10d1f11a1b93e4ca4db4d27772f611bd3407f9452dbbd2d1ba62584ddc171f
test-harness-core-4.10.3-javadoc.jar cb08bb86e5c9d5b4c4459ab103b9cd0dd99527a56f6fa645ec10d07b0fe75735
test-harness-core-4.10.3-sources.jar 043a55d99a517c0d9cf702b0c183b4afd3f03af9eff4a86d59bb37df1b35b532
test-harness-core-4.10.3.jar 1f9a0ee8f150dd71f960ca4f59dcf7912a45d0e9e6aefc4585fd44b975454bc0
test-harness-jupiter-4.10.3-javadoc.jar 02b463d272ccc7e6f9c7dcbfe7087da23afb6f9b8ad24316362397ae21fcf4cc
test-harness-jupiter-4.10.3-sources.jar 17144f315686bfd01c02fa4ae7c916060c41de8eed58d5b8470416fa08f46ced
test-harness-jupiter-4.10.3.jar a91146da3e993479cfefd2690781cbd102c6360ecc63a96d88995be3bd60fcbb

4.10.2

SpotBugs 4.10.2

CHANGELOG

Build

  • Add release protection to ensure version released matches the tag and that snapshot has been removed. (#4156)
  • Drop binary incompatible Saxon-HE back to 12.9 to keep java 11 compatibility. (#4159)

... (truncated)

Changelog

Sourced from com.github.spotbugs:spotbugs-annotations's changelog.

4.10.3 - 2026-07-12

Fixed

  • Fix LI_LAZY_INIT_STATIC false negative when the null guard is written in yoda-style (null == field) (#4144)
  • Fix DC_DOUBLECHECK, NP_SYNC_AND_NULL_CHECK_FIELD and SP_SPIN_ON_FIELD false negatives when the null guard is written in yoda-style (null == field) (#4144)
  • Fix message for UNS_UNSAFE_CALL bug pattern
  • Restore CLI plugin loading by fixing DetectorFactoryCollection bootstrap ordering (#4191)
  • Fix UWF_NULL_FIELD false negative for fields initialized with cast null values (#4034)
  • Fix UMAC_UNCALLABLE_METHOD_OF_ANONYMOUS_CLASS false positive for methods reached only through method references (#4059)

Changed

  • Ant FindBugsViewerTask: use default look and feel by default. (#4165)

Refactor

  • Ant FindBugsViewerTask: extend AbstractFindBugsTask to reduce duplicate code. (#4165)

4.10.2 - 2026-06-09

Build

  • Add release protection to ensure version released matches the tag and that snapshot has been removed. (#4156)
  • Drop binary incompatible Saxon-HE back to 12.9 to keep java 11 compatibility. (#4159)
  • Add binary check to the gradle build to ensure compatibility remains. (#4159)

4.10.1 - 2026-06-08

Build

  • 4.10.0 was not released due to a release process error (artifacts were built from a -SNAPSHOT version). 4.10.1 is the corrected release and contains the intended 4.10.0 contents.

4.10.0 - 2026-06-07

Refactor

  • Move internal usage of 'javax.annotation.Nonnull' to 'jakarta.annotation.NonNull'. (#3858)
  • Move internal usage of 'javax.annotation.Nullable' to 'jakarta.annotation.Nullable'. (#3861)
  • Renamed methods from edu.umd.cs.findbugs.SwitchHandler to reflect that they return a PC, not an offset (#3869)
  • Make the progress bar more visually appealing by adding some borders (#3896)
  • Reuse DismantleBytecode.isIf introduced in (#3869)

Added

  • Add partial support for org.jspecify.annotations.Nullable, org.jspecify.annotations.NonNull, org.jspecify.annotations.NullUnmarked and org.jspecify.annotations.NullMarked annotations. These are aliased to the closest existing SpotBugs nullness annotations. This is not a complete implementation of the JSpecify spec; scope-level semantics of @NullMarked and @NullUnmarked are not yet supported. (#3996)
  • Recognize jakarta.annotation.Nonnull and jakarta.annotation.Nullable (#3780)
  • Detect use of sun.misc.Unsafe and jdk.internal.misc.Unsafe (#3804)
  • New bug type is introduced: NCR_NOT_PROPERLY_CHECKED_READ. Improper validation of the return value from the read() method in InputStream and Reader classes may result in an array not being fully filled. (#3766)
  • New detector FindImproperSynchronization and introduced new bug types:
    • USO_UNSAFE_METHOD_SYNCHRONIZATION is reported when using synchronized methods with the class' accessible intrinsic lock,
    • USO_UNSAFE_STATIC_METHOD_SYNCHRONIZATION is reported when using static synchronized methods with the class' exposed intrinsic lock,
    • USO_UNSAFE_OBJECT_SYNCHRONIZATION is reported when the lock used for synchronization is visible from the outside,
    • USO_UNSAFE_ACCESSIBLE_OBJECT_SYNCHRONIZATION is reported when the lock used for synchronization is made accessible, with methods that update or return the lock, to the outside,
    • USO_UNSAFE_INHERITABLE_OBJECT_SYNCHRONIZATION is reported when the lock used for synchronization is can be altered by subclasses,
    • USO_UNSAFE_EXPOSED_OBJECT_SYNCHRONIZATION is reported when the lock used for synchronization is later exposed in the subclasses.
    • USBC_UNSAFE_SYNCHRONIZATION_WITH_BACKING_COLLECTION is reported when the backing collection of a lock is visible from the outside,
    • USBC_UNSAFE_SYNCHRONIZATION_WITH_ACCESSIBLE_BACKING_COLLECTION is reported when the backing collection of a lock is made accessible, with methods that update or return the lock, to the outside,
    • USBC_UNSAFE_SYNCHRONIZATION_WITH_INHERITABLE_BACKING_COLLECTION is reported when the backing collection of a lock can be altered by subclasses. (See SEI CERT rule LCK00-J and SEI CERT rule LCK04-J)
  • New detector FindIncreasedAccessibilityOfMethods for new bug type IAOM_DO_NOT_INCREASE_METHOD_ACCESSIBILITY. This detector reports a bug if a class increases the accessibility of overridden or hidden methods. (See SEI CERT rule MET04-J)

... (truncated)

Commits
  • 8d5cad4 release v4.10.3
  • f849bce Update junit-framework monorepo to v6.1.2 (#4199)
  • 368a213 Fixes #4138 : Detect yoda-style null guards in lazy-init and related detector...
  • 21ba538 Update actions/stale digest to 1e223db (#4197)
  • 6c91a0d Update dependency net.sf.saxon:Saxon-HE to v12.10 (#4198)
  • 7fb263e Update actions/setup-java digest to 0f481fc (#4196)
  • c8f9bb1 fix(deprecations): Replace deprecated io close with try with resources (#4194)
  • 1c78756 chore{build): Update eclipse-convention.gradle.kts file (#4193)
  • 1aec284 fix: improve EQ_DOESNT_OVERRIDE_EQUALS warning to mention symmetry risk (#4016)
  • f3ddc36 Fixes #4055 : Record method-reference targets as called methods (#4059)
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-annotations from 2.21 to 2.22

Commits

Updates com.fasterxml.jackson.core:jackson-core from 2.21.1 to 2.22.1

Commits
  • 2451603 [maven-release-plugin] prepare release jackson-core-2.22.1
  • d3180c0 Prep for 2.22.1 release
  • 6c5bae8 Merge branch '2.21' into 2.22
  • fda71aa Post-release dep version bump
  • 4ad6235 [maven-release-plugin] prepare for next development iteration
  • b5f62dd [maven-release-plugin] prepare release jackson-core-2.21.5
  • 11f8b8c Prep for 2.21.5 release
  • 4920004 Post-release version bump
  • 2bb55e8 [maven-release-plugin] prepare for next development iteration
  • d763562 [maven-release-plugin] prepare release jackson-core-2.22.0
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.21.0 to 2.22.0

Commits

Updates com.fasterxml.jackson.dataformat:jackson-dataformat-yaml from 2.21.0 to 2.22.1

Commits
  • 681f699 [maven-release-plugin] prepare release jackson-dataformats-text-2.22.1
  • 8e25852 Prep for 2.22.1 release
  • e1ed4d2 Merge branch '2.21' into 2.22
  • 3f3257c Post-release dep version bump
  • 3348a1a [maven-release-plugin] prepare for next development iteration
  • 687ad4f [maven-release-plugin] prepare release jackson-dataformats-text-2.21.5
  • 955c59f Prep for 2.21.5 release
  • 588933e Post-release dep version bump
  • 38f3683 [maven-release-plugin] prepare for next development iteration
  • 23d487c [maven-release-plugin] prepare release jackson-dataformats-text-2.22.0
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.21.0 to 2.22.1

Updates io.ktor:ktor-network from 3.3.3 to 3.5.1

Release notes

Sourced from io.ktor:ktor-network's releases.

3.5.1

Published 25 June 2026

Improvements

  • KTOR-9492 OpenAPI plugin: handle requireXxx functions in compiler plugin
  • KTOR-9569 Add more details for KDoc of BearerAuthConfig.sendWithoutRequest
  • KTOR-9571 Add KDoc for BearerAuthConfig.realm
  • KTOR-9570 Add Kdoc for BearerAuthConfig.refreshTokens

Bugfixes

  • KTOR-9646 Fix Kotlin 2.4.0 compiler plugin breaking changes
  • KTOR-9585 OpenAPI: JsonSchema title is truncated when it contains a dot
  • KTOR-9591 OpenAPI: @JsonClassDiscriminator on sealed types is ignored when generating OpenAPI discriminator schema
  • KTOR-9597 OpenAPI: Schema name collisions because@SerialName of sealed subtypes is used as components.schemas key
  • KTOR-9601 OpenAPI: nullable @​JvmInline value class loses nullability in generated schema
  • KTOR-9620 Some issues related to digest authentication in 3.5.0
  • KTOR-9623 Digest Auth: server must respond with one WWW-Authenticate header for each supported algorithm
  • KTOR-9624 Digest Auth: "Unsupported charset in digest authentication header" for a charset name in lowercase
  • KTOR-9630 Digest Auth: The plugin sends incorrect nonce when server responds with multiple WWW-Authenticate headers
  • KTOR-9565 WebRTC: Peer stops receiving messages after a while on iOS
  • KTOR-9610 WebRtcPeerConnection::close causes ClosedReceiveChannelException for other peer
  • KTOR-9633 WebRTC statistics fetching race condition
  • KTOR-9603 Structured concurrency is violated in WebRTC tests
  • KTOR-9671 Darwin: Semicolons in URL path are sanitized
  • KTOR-9639 Darwin: WebSocket client crashes the process when a PONG arrives after the session is closed
  • KTOR-9575 Darwin: findCharset("UTF-16") maps to NSUTF16LittleEndianStringEncoding causing decoding failure for UTF-16 content with BOM
  • KTOR-9661 HttpCache: InvalidCacheStateException is thrown on 304 when no cached entry matches varyKeys
  • KTOR-9673 Caching always missing with Content Negotiation
  • KTOR-9596 HttpTimeout: HttpRequestTimeoutException on any request with runTest and request timeout defined since 3.5.0
  • KTOR-9632 HttpRequestBuilder.timeout call removes capabilities set in DefaultRequest
  • KTOR-9252 ContentEncoding: Incomplete gzip response causes client/server to hang indefinitely
  • KTOR-9670 Compression: The plugin ignores Accept-Encoding q=0 and most-specific matching
  • KTOR-9614 Zstd Compression: "Destination buffer is too small" exception for a particular sequence of bytes
  • KTOR-9636 CORS plugin drops OPTIONS preflight requests when allowSameOrigin is on
  • KTOR-9659 CORS is skipped when the Origin header contains an IPv6 address
  • KTOR-9574 ContentNegotiation: The charset of Accept-Charset header is used for response deserialization
  • KTOR-9606 KotlinxSerializationConverter: it fails to deserialize an empty channel closed with a delay
  • KTOR-9617 OutputStreamContent and WriterContent can exhaust Dispatchers.IO
  • KTOR-9629 RawSourceChannel: coroutine cancellation is not propagated to the RawSource
  • KTOR-8870 File.readChannel: do not close a non-opened file and ignore closing exceptions
  • KTOR-9460 Curl: Can't build shared library with Ktor 3.4.2
  • KTOR-9607 Crash on Android 7: NoSuchMethodError getInstanceStrong() since 3.5.0
  • KTOR-9595 CIO: The engine imports node:net statically and breaks wasmJsBrowser webpack build
  • KTOR-9615 Apache5: The underlying request is not aborted when coroutine Job is cancelled
  • KTOR-8443 RoutingBuilder.contentType does not use parameters when matching
  • KTOR-9425 SessionTransportTransformerEncrypt init block uses wrong IV size for AES-256 (regression of KTOR-661)
  • KTOR-9621 RateLimit plugin is bypassed when the nested authenticate block rejects the request
  • KTOR-8766 DI: The close method is called twice on cleanup of AutoCloseable
  • KTOR-8695 GMTDate() being offset by 369 years on Windows
  • KTOR-9589 Duplicate PROPERTY_SETTER target in @InternalAPI annotation

... (truncated)

Changelog

Sourced from io.ktor:ktor-network's changelog.

3.5.1

Published 25 June 2026

Improvements

  • KTOR-9492 OpenAPI plugin: handle requireXxx functions in compiler plugin
  • KTOR-9569 Add more details for KDoc of BearerAuthConfig.sendWithoutRequest
  • KTOR-9571 Add KDoc for BearerAuthConfig.realm
  • KTOR-9570 Add Kdoc for BearerAuthConfig.refreshTokens

Bugfixes

  • KTOR-9646 Fix Kotlin 2.4.0 compiler plugin breaking changes
  • KTOR-9585 OpenAPI: JsonSchema title is truncated when it contains a dot
  • KTOR-9591 OpenAPI: @JsonClassDiscriminator on sealed types is ignored when generating OpenAPI discriminator schema
  • KTOR-9597 OpenAPI: Schema name collisions because@SerialName of sealed subtypes is used as components.schemas key
  • KTOR-9601 OpenAPI: nullable @​JvmInline value class loses nullability in generated schema
  • KTOR-9620 Some issues related to digest authentication in 3.5.0
  • KTOR-9623 Digest Auth: server must respond with one WWW-Authenticate header for each supported algorithm
  • KTOR-9624 Digest Auth: "Unsupported charset in digest authentication header" for a charset name in lowercase
  • KTOR-9630 Digest Auth: The plugin sends incorrect nonce when server responds with multiple WWW-Authenticate headers
  • KTOR-9565 WebRTC: Peer stops receiving messages after a while on iOS
  • KTOR-9610 WebRtcPeerConnection::close causes ClosedReceiveChannelException for other peer
  • KTOR-9633 WebRTC statistics fetching race condition
  • KTOR-9603 Structured concurrency is violated in WebRTC tests
  • KTOR-9671 Darwin: Semicolons in URL path are sanitized
  • KTOR-9639 Darwin: WebSocket client crashes the process when a PONG arrives after the session is closed
  • KTOR-9575 Darwin: findCharset("UTF-16") maps to NSUTF16LittleEndianStringEncoding causing decoding failure for UTF-16 content with BOM
  • KTOR-9661 HttpCache: InvalidCacheStateException is thrown on 304 when no cached entry matches varyKeys
  • KTOR-9673 Caching always missing with Content Negotiation
  • KTOR-9596 HttpTimeout: HttpRequestTimeoutException on any request with runTest and request timeout defined since 3.5.0
  • KTOR-9632 HttpRequestBuilder.timeout call removes capabilities set in DefaultRequest
  • KTOR-9252 ContentEncoding: Incomplete gzip response causes client/server to hang indefinitely
  • KTOR-9670 Compression: The plugin ignores Accept-Encoding q=0 and most-specific matching
  • KTOR-9614 Zstd Compression: "Destination buffer is too small" exception for a particular sequence of bytes
  • KTOR-9636 CORS plugin drops OPTIONS preflight requests when allowSameOrigin is on
  • KTOR-9659 CORS is skipped when the Origin header contains an IPv6 address
  • KTOR-9574 ContentNegotiation: The charset of Accept-Charset header is used for response deserialization
  • KTOR-9606 KotlinxSerializationConverter: it fails to deserialize an empty channel closed with a delay
  • KTOR-9617 OutputStreamContent and WriterContent can exhaust Dispatchers.IO
  • KTOR-9629 RawSourceChannel: coroutine cancellation is not propagated to the RawSource
  • KTOR-8870 File.readChannel: do not close a non-opened file and ignore closing exceptions
  • KTOR-9460 Curl: Can't build shared library with Ktor 3.4.2
  • KTOR-9607 Crash on Android 7: NoSuchMethodError getInstanceStrong() since 3.5.0
  • KTOR-9595 CIO: The engine imports node:net statically and breaks wasmJsBrowser webpack build
  • KTOR-9615 Apache5: The underlying request is not aborted when coroutine Job is cancelled
  • KTOR-8443 RoutingBuilder.contentType does not use parameters when matching
  • KTOR-9425 SessionTransportTransformerEncrypt init block uses wrong IV size for AES-256 (regression of KTOR-661)
  • KTOR-9621 RateLimit plugin is bypassed when the nested authenticate block rejects the request
  • KTOR-8766 DI: The close method is called twice on cleanup of AutoCloseable
  • KTOR-8695 GMTDate() being offset by 369 years on Windows
  • KTOR-9589 Duplicate PROPERTY_SETTER target in @​InternalAPI annotation

... (truncated)

Commits
  • 5ba9d6f Release 3.5.1 (#5719)
  • a4f145d KTOR-9661 HttpCache: InvalidCacheStateException is thrown on 304 when… (#5701)
  • 2caf278 Fix failing :ktor-io:compileDarwinMainKotlinMetadata (#5716)
  • 257de90 KTOR-8766 Fix multiple invocations of close from DI
  • e77a168 Fix cache misses with content negotiation 3x (#5714)
  • ed22950 Make huge post test less huge
  • f329069 Update dependency com.github.luben:zstd-jni to v1.5.7-11
  • 6ecd072 Update dependency io.swagger.parser.v3:swagger-parser to v2.1.44
  • a0534cd Update dependency io.pebbletemplates:pebble to v4.1.2
  • 8647e53 Update dependency com.typesafe:config to v1.4.9
  • Additional commits viewable in compare view

Updates org.jetbrains.kotlinx:kotlinx-coroutines-core from 1.10.2 to 1.11.0

Release notes

Sourced from org.jetbrains.kotlinx:kotlinx-coroutines-core's releases.

1.11.0

Various

  • Kotlin was updated to 2.2.20 (#4545).
  • Improved the published jar files (#3842, #4599).
  • Various documentation improvements, including complete rewrites of structured concurrency and error handling-related KDoc (#4433, #4596).

Breaking changes and deprecations

  • Moved Promise-related functions from JS and Wasm/JS to the new web target. On Wasm/JS, this is a breaking change. Before the change, Promise on Wasm/JS could work with arbitrary Kotlin types, but now, only JsAny subtypes are accepted (#4563).
  • Changed handling of coroutine exceptions that can't be propagated on JS and Wasm/JS. B efore, exceptions were logged, but now, they are reported to the JS runtime (#4451, #4631).
  • Deprecated using CoroutineDispatcher as the coroutine context key; now, ContinuationInterceptor has to be used instead (#4333).
  • Advanced the deprecation levels on kotlinx-coroutines-test APIs (#4604).
  • Added lint functions that mark passing a Job to coroutine builders as deprecated (#4435).

Bug fixes and improvements

  • Added a callsInPlace(EXACTLY_ONCE) contract to runBlocking in code shared between JVM and Native (#4368).
  • Added a callsInPlace(EXACTLY_ONCE) contract to suspendCancellableCoroutine (#4574).
  • Fixed flowOn incorrectly handling ThreadContextElement updates (#4403).
  • Fixed exceptions in user-supplied Thread.UncaughtExceptionHandler instances causing the internal coroutines machinery to fail (#4516).
  • Fixed CoroutineDispatcher.asScheduler in the RxJava integration not cancelling outstanding work when a Worker gets cancelled, which led to memory leaks in some scenarios (#4615).
  • Fixed SharedFlow entering an invalid state when a subscriber and an emitter are cancelled simultaneously (#4583).
  • Fixed an R8 optimization leading to shareIn/stateIn coroutines getting garbage-collected (#4646). Thanks, @​solevic!

Small additions

  • Added CompletableDeferred.asDeferred for obtaining a read-only Deferred view (#4408).
  • Added SharedFlow.asFlow for obtaining a Flow view with hidden hot flow semantics (#4530). Thanks, @​g000sha256!
  • Added a StateFlow.collectLatest overload returning Nothing to assist with finding unreachable code (#4454).
  • Added ReceiveChannel.consumeTo for consuming a ReceiveChannel into a MutableCollection (#4520).
  • Added a StateFlow<T>.onSubscription overload returning a StateFlow<T>, similar to SharedFlow<T>.onSubscription returning SharedFlow<T> (#4275). Thanks, @​xit0c!
  • Added terminal Flow operators for collecting a Flow to a Map (#1541).

Changelog relative to version 1.11.0

No changes, only the version is increased.

1.11.0-rc02

Restored binary compatibility with 1.10.2 and older versions on Wasm/JS for usages of Promise-related functions (#4661).

1.11.0-rc01

Various

  • Kotlin was updated to 2.2.20 (#4545).
  • Improved the published jar files (#3842, #4599).
  • Various documentation improvements, including complete rewrites of structured concurrency and error handling-related KDoc (#4433, #4596).

Breaking changes and deprecations

... (truncated)

Changelog

Sourced from org.jetbrains.kotlinx:kotlinx-coroutines-core's changelog.

Version 1.11.0

Various

  • Kotlin was updated to 2.2.20 (#4545).
  • Improved the published jar files (#3842, #4599).
  • Various documentation improvements, including complete rewrites of structured concurrency and error handling-related KDoc (#4433, #4596).

Breaking changes and deprecations

  • Moved Promise-related functions from JS and Wasm/JS to the new web target. On Wasm/JS, this is a breaking change. Before the change, Promise on Wasm/JS could work with arbitrary Kotlin types, but now, only JsAny subtypes are accepted (#4563).
  • Changed handling of coroutine exceptions that can't be propagated on JS and Wasm/JS. Before, exceptions were logged, but now, they are reported to the JS runtime (#4451, #4631).
  • Deprecated using CoroutineDispatcher as the coroutine context key; now, ContinuationInterceptor has to be used instead (#4333).
  • Advanced the deprecation levels on kotlinx-coroutines-test APIs (#4604).
  • Added lint functions that mark passing a Job to coroutine builders as deprecated (#4435).

Bug fixes and improvements

  • Added a callsInPlace(EXACTLY_ONCE) contract to runBlocking in code shared between JVM and Native (#4368).
  • Added a callsInPlace(EXACTLY_ONCE) contract to suspendCancellableCoroutine (#4574).
  • Fixed flowOn incorrectly handling ThreadContextElement updates (#4403).
  • Fixed exceptions in user-supplied Thread.UncaughtExceptionHandler instances causing the internal coroutines machinery to fail (#4516).
  • Fixed CoroutineDispatcher.asScheduler in the RxJava integration not cancelling outstanding work when a Worker gets cancelled, which led to memory leaks in some scenarios (#4615).
  • Fixed SharedFlow entering an invalid state when a subscriber and an emitter are cancelled simultaneously (#4583).
  • Fixed an R8 optimization leading to shareIn/stateIn coroutines getting garbage-collected (#4646). Thanks, @​solevic!

Small additions

  • Added CompletableDeferred.asDeferred for obtaining a read-only Deferred view (#4408).
  • Added SharedFlow.asFlow for obtaining a Flow view with hidden hot flow semantics (#4530). Thanks, @​g000sha256!
  • Added a StateFlow.collectLatest overload returning Nothing to assist with finding unreachable code (#4454).
  • Added ReceiveChannel.consumeTo for consuming a ReceiveChannel into a MutableCollection (#4520).
  • Added a StateFlow<T>.onSubscription overload returning a StateFlow<T>, similar to SharedFlow<T>.onSubscription returning SharedFlow<T> (#4275). Thanks, @​xit0c!
  • Added terminal Flow operators for collecting a Flow to a Map (#1541).

Changelog relative to version 1.11.0

No changes, only the version is increased.

Version 1.11.0-rc02

Restored binary compatibility with 1.10.2 and older versions on Wasm/JS for usages of Promise-related functions (#4661).

Version 1.11.0-rc01

Various

  • Kotlin was updated to 2.2.20 (#4545).
  • Improved the published jar files (#3842, #4599).
  • Various documentation improvements, including complete rewrites of structured concurrency and error handling-related KDoc (#4433, #4596).

... (truncated)

Commits
  • 8564f65 Version 1.11.0
  • a4c6af9 Merge remote-tracking branch 'origin/master' into develop
  • ef917b4 KT-84955: mark apple x64 tagets as deprecated error (#4645)
  • 5ebc421 Update the release procedure description (#4670)
  • 95f46a0 Remove old maven repository settings (#4672)
  • b4f4f0a Fix package name of ToMapCollectionSamplesTest. (#4674)
  • 86738dc Added templates to the issue creation wizard (#4654)
  • 330fcc2 Version 1.11.0-rc02
  • e31cef6 Merge remote-tracking branch 'origin/master' into develop
  • dc6e9f6 Restore Promise-related functions on Wasm/JS as HIDDEN (#4661)
  • Additional commits viewable in compare view

Updates org.jetbrains.kotlinx:kotlinx-datetime from 0.7.1 to 0.8.0

Release notes

Sourced from org.jetbrains.kotlinx:kotlinx-datetime's releases.

v0.8.0

Breaking changes:

  • Deprecate TimeZone serialization (#576).

Additions:

  • Add orNull functions for non-throwing construction of datetime entities (#68).
  • Add parseOrNull extension functions for non-throwing attempts at parsing (#508).
  • Introduce LocalIsoWeekDate for representing ISO week dates (#603).
  • Introduce functions for finding the next or previous date with the given day-of-week (#129).

Tweaks and fixes:

  • Fix bugs in Instant.until and Instant.periodUntil (#534).
  • Always output seconds in the DateTimeComponents.Formats.RFC_1123 format (#608).
  • On Kotlin/Native for Windows, whenever DST transitions are turned off by the user, the current system time zone is now fixed-offset (#575).

Changelog relative to version 0.8.0-rc02

No changes, only the version is increased.

v0.8.0-rc02

Equivalent to rc01, but published without Instant and Clock. A separate compatibility artifact contains them for binary compatibility. Please see https://github.com/Kotlin/kotlinx-datetime/#deprecation-of-instant for details.

v0.8.0-rc01

Breaking changes:

  • Deprecate TimeZone serialization (#576).

Additions:

  • Add orNull functions for non-throwing construction of datetime entities (#68).
  • Add parseOrNull extension functions for non-throwing attempts at parsing (#508).
  • Introduce LocalIsoWeekDate for representing ISO week dates (#603).
  • Introduce functions for finding the next or previous date with the given day-of-week (#129).

Tweaks and fixes:

  • Fix bugs in Instant.until and Instant.periodUntil (#534).
  • Always output seconds in the DateTimeComponents.Formats.RFC_1123 format (#608).
  • On Kotlin/Native for Windows, whenever DST transitions are turned off by the user, the current system time zone is now fixed-offset (#575).
Changelog

Sourced from org.jetbrains.kotlinx:kotlinx-datetime's changelog.

0.8.0

Breaking changes:

  • Deprecate TimeZone serialization (#576).

Additions:

  • Add orNull functions for non-throwing construction of datetime entities (#68).
  • Add parseOrNull extension functions for non-throwing attempts at parsing (#508).
  • Introduce LocalIsoWeekDate for representing

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 14, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 14, 2026
@potiuk
potiuk force-pushed the dependabot/gradle/java-sdk/java-sdk-dependency-updates-a8f99e1638 branch from c34e676 to cdbf6ef Compare August 14, 2026 13:19
dependabot Bot and others added 3 commits August 14, 2026 17:20
…22 updates

Bumps the java-sdk-dependency-updates group with 15 updates in the /java-sdk directory:

| Package | From | To |
| --- | --- | --- |
| org.apache.logging.log4j:log4j-core | `2.26.0` | `2.26.1` |
| [com.gradleup.shadow:shadow-gradle-plugin](https://github.com/GradleUp/shadow) | `9.1.0` | `9.6.1` |
| [com.github.spotbugs:spotbugs-annotations](https://github.com/spotbugs/spotbugs) | `4.9.8` | `4.10.3` |
| [com.fasterxml.jackson.core:jackson-annotations](https://github.com/FasterXML/jackson) | `2.21` | `2.22` |
| [com.fasterxml.jackson.dataformat:jackson-dataformat-yaml](https://github.com/FasterXML/jackson-dataformats-text) | `2.21.0` | `2.22.1` |
| com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.21.0` | `2.22.1` |
| [io.ktor:ktor-network](https://github.com/ktorio/ktor) | `3.3.3` | `3.5.1` |
| [org.jetbrains.kotlinx:kotlinx-coroutines-core](https://github.com/Kotlin/kotlinx.coroutines) | `1.10.2` | `1.11.0` |
| [org.jetbrains.kotlinx:kotlinx-datetime](https://github.com/Kotlin/kotlinx-datetime) | `0.7.1` | `0.8.0` |
| [org.jetbrains.kotlinx:kotlinx-serialization-json](https://github.com/Kotlin/kotlinx.serialization) | `1.10.0` | `1.11.0` |
| [org.msgpack:msgpack-core](https://github.com/msgpack/msgpack-java) | `0.9.11` | `0.9.12` |
| org.jsonschema2pojo | `1.2.2` | `1.3.3` |
| [plugin.serialization](https://github.com/JetBrains/kotlin) | `2.3.0` | `2.4.10` |
| [org.jetbrains.kotlin:kotlin-gradle-plugin](https://github.com/JetBrains/kotlin) | `2.3.0` | `2.4.10` |
| [gradle-wrapper](https://github.com/gradle/gradle) | `8.14.4` | `8.14.5` |

Bumps the java-sdk-dependency-updates group with 3 updates in the /java-sdk/scala_spark_example directory: [org.scala-lang:scala-library](https://github.com/scala/scala), org.apache.spark:spark-sql_2.13 and [org.apache.logging.log4j:log4j-bom](https://github.com/apache/logging-log4j2).


Updates `org.apache.logging.log4j:log4j-core` from 2.26.0 to 2.26.1

Updates `org.apache.logging.log4j:log4j-api` from 2.26.0 to 2.26.1

Updates `com.gradleup.shadow:shadow-gradle-plugin` from 9.1.0 to 9.6.1
- [Release notes](https://github.com/GradleUp/shadow/releases)
- [Commits](GradleUp/shadow@9.1.0...9.6.1)

Updates `com.github.spotbugs:spotbugs-annotations` from 4.9.8 to 4.10.3
- [Release notes](https://github.com/spotbugs/spotbugs/releases)
- [Changelog](https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md)
- [Commits](spotbugs/spotbugs@4.9.8...4.10.3)

Updates `com.fasterxml.jackson.core:jackson-annotations` from 2.21 to 2.22
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.core:jackson-core` from 2.21.1 to 2.22.1
- [Commits](FasterXML/jackson-core@jackson-core-2.21.1...jackson-core-2.22.1)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.21.0 to 2.22.0
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-yaml` from 2.21.0 to 2.22.1
- [Commits](FasterXML/jackson-dataformats-text@jackson-dataformats-text-2.21.0...jackson-dataformats-text-2.22.1)

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.21.0 to 2.22.1

Updates `io.ktor:ktor-network` from 3.3.3 to 3.5.1
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/main/CHANGELOG.md)
- [Commits](ktorio/ktor@3.3.3...3.5.1)

Updates `org.jetbrains.kotlinx:kotlinx-coroutines-core` from 1.10.2 to 1.11.0
- [Release notes](https://github.com/Kotlin/kotlinx.coroutines/releases)
- [Changelog](https://github.com/Kotlin/kotlinx.coroutines/blob/master/CHANGES.md)
- [Commits](Kotlin/kotlinx.coroutines@1.10.2...1.11.0)

Updates `org.jetbrains.kotlinx:kotlinx-datetime` from 0.7.1 to 0.8.0
- [Release notes](https://github.com/Kotlin/kotlinx-datetime/releases)
- [Changelog](https://github.com/Kotlin/kotlinx-datetime/blob/master/CHANGELOG.md)
- [Commits](Kotlin/kotlinx-datetime@v0.7.1...v0.8.0)

Updates `org.jetbrains.kotlinx:kotlinx-serialization-json` from 1.10.0 to 1.11.0
- [Release notes](https://github.com/Kotlin/kotlinx.serialization/releases)
- [Changelog](https://github.com/Kotlin/kotlinx.serialization/blob/master/CHANGELOG.md)
- [Commits](Kotlin/kotlinx.serialization@v1.10.0...v1.11.0)

Updates `org.msgpack:msgpack-core` from 0.9.11 to 0.9.12
- [Release notes](https://github.com/msgpack/msgpack-java/releases)
- [Changelog](https://github.com/msgpack/msgpack-java/blob/main/RELEASE_NOTES.md)
- [Commits](msgpack/msgpack-java@v0.9.11...v0.9.12)

Updates `org.msgpack:jackson-dataformat-msgpack` from 0.9.11 to 0.9.12
- [Release notes](https://github.com/msgpack/msgpack-java/releases)
- [Changelog](https://github.com/msgpack/msgpack-java/blob/main/RELEASE_NOTES.md)
- [Commits](msgpack/msgpack-java@v0.9.11...v0.9.12)

Updates `org.jsonschema2pojo` from 1.2.2 to 1.3.3

Updates `plugin.serialization` from 2.3.0 to 2.4.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.0...v2.4.10)

Updates `org.jetbrains.kotlin:kotlin-gradle-plugin` from 2.3.0 to 2.4.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.0...v2.4.10)

Updates `gradle-wrapper` from 8.14.4 to 8.14.5
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v8.14.4...v8.14.5)

Updates `org.scala-lang:scala-library` from 2.13.8 to 2.13.18
- [Release notes](https://github.com/scala/scala/releases)
- [Commits](scala/scala@v2.13.8...v2.13.18)

Updates `org.apache.spark:spark-sql_2.13` from 3.5.8 to 3.5.9

Updates `org.apache.logging.log4j:log4j-bom` from 2.26.0 to 2.26.1
- [Release notes](https://github.com/apache/logging-log4j2/releases)
- [Changelog](https://github.com/apache/logging-log4j2/blob/2.x/RELEASE-NOTES.adoc)
- [Commits](apache/logging-log4j2@rel/2.26.0...rel/2.26.1)

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.26.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java-sdk-dependency-updates
- dependency-name: org.apache.logging.log4j:log4j-api
  dependency-version: 2.26.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java-sdk-dependency-updates
- dependency-name: com.gradleup.shadow:shadow-gradle-plugin
  dependency-version: 9.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java-sdk-dependency-updates
- dependency-name: com.github.spotbugs:spotbugs-annotations
  dependency-version: 4.10.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java-sdk-dependency-updates
- dependency-name: com.fasterxml.jackson.core:jackson-annotations
  dependency-version: '2.22'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java-sdk-dependency-updates
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: 2.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java-sdk-dependency-updates
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java-sdk-dependency-updates
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-yaml
  dependency-version: 2.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java-sdk-dependency-updates
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-version: 2.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java-sdk-dependency-updates
- dependency-name: io.ktor:ktor-network
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java-sdk-dependency-updates
- dependency-name: org.jetbrains.kotlinx:kotlinx-coroutines-core
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java-sdk-dependency-updates
- dependency-name: org.jetbrains.kotlinx:kotlinx-datetime
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java-sdk-dependency-updates
- dependency-name: org.jetbrains.kotlinx:kotlinx-serialization-json
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java-sdk-dependency-updates
- dependency-name: org.msgpack:msgpack-core
  dependency-version: 0.9.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java-sdk-dependency-updates
- dependency-name: org.msgpack:jackson-dataformat-msgpack
  dependency-version: 0.9.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java-sdk-dependency-updates
- dependency-name: org.jsonschema2pojo
  dependency-version: 1.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java-sdk-dependency-updates
- dependency-name: plugin.serialization
  dependency-version: 2.4.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java-sdk-dependency-updates
- dependency-name: org.jetbrains.kotlin:kotlin-gradle-plugin
  dependency-version: 2.4.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java-sdk-dependency-updates
- dependency-name: gradle-wrapper
  dependency-version: 8.14.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java-sdk-dependency-updates
- dependency-name: org.scala-lang:scala-library
  dependency-version: 2.13.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java-sdk-dependency-updates
- dependency-name: org.apache.spark:spark-sql_2.13
  dependency-version: 3.5.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java-sdk-dependency-updates
- dependency-name: org.apache.logging.log4j:log4j-bom
  dependency-version: 2.26.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java-sdk-dependency-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
…n metadata

shadow-gradle-plugin 9.6.1 declares org.gradle.plugin.api-version 9.2.0 and
Java 17 compatibility, but the java-sdk plugin project compiles against Java 11
on Gradle 8.14.5, so resolution fails outright. 9.1.0 is the last release that
supports Java 11, which is what the pin's comment already recorded.

Gradle strict verification rejects any artifact absent from
verification-metadata.xml, and the remaining bumps in this group resolve
artifacts the committed file does not describe.
The regenerated wrapper landed in the repository with CRLF bytes, but
java-sdk/.gitattributes marks *.bat as 'text eol=crlf', meaning LF in the
object store and CRLF on checkout. The mismatch left the file permanently
dirty in every working tree and blocked rebases. Windows checkouts still
get CRLF.
@potiuk
potiuk force-pushed the dependabot/gradle/java-sdk/java-sdk-dependency-updates-a8f99e1638 branch from cdbf6ef to 729927a Compare August 14, 2026 15:22
@dependabot @github

dependabot Bot commented on behalf of github Aug 14, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 14, 2026
@dependabot
dependabot Bot deleted the dependabot/gradle/java-sdk/java-sdk-dependency-updates-a8f99e1638 branch August 14, 2026 16:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area:java-sdk dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant