Bump the minor-java-dependencies group across 1 directory with 7 updates - #1148
Merged
jchambers merged 1 commit intoAug 17, 2026
Merged
Conversation
Bumps the minor-java-dependencies group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [io.netty:netty-bom](https://github.com/netty/netty) | `4.1.133.Final` | `4.1.136.Final` | | [io.netty:netty-tcnative-boringssl-static](https://github.com/netty/netty-tcnative) | `2.0.77.Final` | `2.0.81.Final` | | [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) | `3.5.0` | `3.5.1` | | [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.5` | `3.5.6` | | [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype/central-publishing-maven-plugin) | `0.10.0` | `0.11.0` | | [io.dropwizard.metrics:metrics-core](https://github.com/dropwizard/metrics) | `4.2.38` | `4.2.39` | | [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer) | `1.16.5` | `1.17.0` | Updates `io.netty:netty-bom` from 4.1.133.Final to 4.1.136.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.1.133.Final...netty-4.1.136.Final) Updates `io.netty:netty-tcnative-boringssl-static` from 2.0.77.Final to 2.0.81.Final - [Release notes](https://github.com/netty/netty-tcnative/releases) - [Commits](netty/netty-tcnative@netty-tcnative-parent-2.0.77.Final...netty-tcnative-parent-2.0.81.Final) Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.5.0 to 3.5.1 - [Release notes](https://github.com/apache/maven-jar-plugin/releases) - [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.5.0...maven-jar-plugin-3.5.1) Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.5 to 3.5.6 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-3.5.5...surefire-3.5.6) Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.10.0 to 0.11.0 - [Commits](https://github.com/sonatype/central-publishing-maven-plugin/commits) Updates `io.dropwizard.metrics:metrics-core` from 4.2.38 to 4.2.39 - [Release notes](https://github.com/dropwizard/metrics/releases) - [Commits](dropwizard/metrics@v4.2.38...v4.2.39) Updates `io.micrometer:micrometer-core` from 1.16.5 to 1.17.0 - [Release notes](https://github.com/micrometer-metrics/micrometer/releases) - [Commits](micrometer-metrics/micrometer@v1.16.5...v1.17.0) --- updated-dependencies: - dependency-name: io.netty:netty-bom dependency-version: 4.1.136.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-java-dependencies - dependency-name: io.netty:netty-tcnative-boringssl-static dependency-version: 2.0.81.Final dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-java-dependencies - dependency-name: org.apache.maven.plugins:maven-jar-plugin dependency-version: 3.5.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-java-dependencies - dependency-name: org.apache.maven.plugins:maven-surefire-plugin dependency-version: 3.5.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-java-dependencies - dependency-name: org.sonatype.central:central-publishing-maven-plugin dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-java-dependencies - dependency-name: io.dropwizard.metrics:metrics-core dependency-version: 4.2.39 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-java-dependencies - dependency-name: io.micrometer:micrometer-core dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-java-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
jchambers
deleted the
dependabot/maven/minor-java-dependencies-5b9e61c8e6
branch
August 17, 2026 18:40
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the minor-java-dependencies group with 7 updates in the / directory:
4.1.133.Final4.1.136.Final2.0.77.Final2.0.81.Final3.5.03.5.13.5.53.5.60.10.00.11.04.2.384.2.391.16.51.17.0Updates
io.netty:netty-bomfrom 4.1.133.Final to 4.1.136.FinalRelease notes
Sourced from io.netty:netty-bom's releases.
... (truncated)
Commits
fca0764[maven-release-plugin] prepare release netty-4.1.136.Finalbb2ff68Merge branches from forks (#17063) (#17065)7b44dc9Pin github actions to reduce risk (#17043) (#17044)50e6e1dUpdate lz4-java to 1.11.1 (#17060)d7dcf6cAuto-port 4.1: Reject non-token characters in HTTP/2 header names (#17022)b12bd11Backport 4.1 Fix propagation of startTls for client SslContext handler (#17020)7fd5cc7FastLz: Guard decompression against truncated input (#17000) (#17015)42e7103Auto-port 4.1: HTTP2: Pass the correct number of arguments when logging goawa...666c3b2Auto-port 4.1: Reset UTF-8 decode state on CR in StompSubframeDecoder (#17003)df54c37Reject control characters at the boundary of the HTTP version token (#16971) ...Updates
io.netty:netty-tcnative-boringssl-staticfrom 2.0.77.Final to 2.0.81.FinalCommits
402d9c3[maven-release-plugin] prepare release netty-tcnative-parent-2.0.81.Finalf44fcb9Add SSL.getGroupName(...) which returns the name of the used by ssl's most re...81ca0c5[maven-release-plugin] prepare for next development iterationd6bed2e[maven-release-plugin] prepare release netty-tcnative-parent-2.0.80.Final185daefFix linux-x86_64 openssl-dynamic to link against OpenSSL 3.x (#989)aa6efe4[maven-release-plugin] prepare for next development iterationf79687e[maven-release-plugin] prepare release netty-tcnative-parent-2.0.79.Final47fda99linux aarch_64 openssl-dynamic link to openssl3.x (#986)a85010bDrop checks on SSL_CREDENTIAL support for older BoringSSL (#980)02d0d03Clear certificate chain in setKeyMaterial. (#987)Updates
org.apache.maven.plugins:maven-jar-pluginfrom 3.5.0 to 3.5.1Release notes
Sourced from org.apache.maven.plugins:maven-jar-plugin's releases.
Commits
b0cd63d[maven-release-plugin] prepare release maven-jar-plugin-3.5.15318a4fAdd AGENTS.md + SECURITY.md security-model pointer for scanner discoverability8e0b9bbBump org.apache.maven.plugins:maven-plugins from 48 to 49 (#547)d5a438bFix javadoc774fac9Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0b71f403Bump mavenVersion from 3.9.15 to 3.9.16 (#536)9f2a001Use plugin version properties (3.x) (#535)68a978fBump org.apache.maven.plugins:maven-plugins from 47 to 48 (#534)e105821Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#529)953dc1aBump mavenVersion from 3.9.14 to 3.9.15 (#528)Updates
org.apache.maven.plugins:maven-surefire-pluginfrom 3.5.5 to 3.5.6Release notes
Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.
Commits
25ea054[maven-release-plugin] prepare release surefire-3.5.6e5f374cBump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3dadd55bIssue #2613 Debugging failsafe tests: Message 'Listening for transport dt_soc...39dd250Bump commons-io:commons-io from 2.21.0 to 2.22.02774273Ensure that the statistics filename is calculated only once. (#3326) (#3327)0d5df8a3.5.x/bug/cherry pick embedded mode its (#3328)04ad9a2Use surefire 3.5.5 by project itself for testing37e8f69Addflakesattribute to use intestsuitereport (#3306) (#3308)a970fefIntroduce reportTestTimestamp option and include timestamp for test sets and ...e838393deploy 3.5.x branch to nexusUpdates
org.sonatype.central:central-publishing-maven-pluginfrom 0.10.0 to 0.11.0Commits
Updates
io.dropwizard.metrics:metrics-corefrom 4.2.38 to 4.2.39Commits
6ecc112[maven-release-plugin] prepare release v4.2.3993ec175ci: remove surplus double quote7407c79ci: replace zoispag/action-assign-milestone with GitHub CLI7b18db2fix(deps): update jackson monorepo (release/4.2.x) (minor) (#5174)2d55d65chore(deps): update dependency org.apache.maven.plugins:maven-enforcer-plugin...ca47350fix(deps): update dependency org.apache.httpcomponents.client5:httpclient5 to...9f0f1a1ci: build with Java 25 (#4964)a0d75cafix(deps): update log4j2 monorepo to v2.26.0 (#5215)bc71b67chore(deps): update maven plugins (#5147)a99fac2fix(deps): update dependency org.glassfish.jersey:jersey-bom to v2.48 (#5194)Updates
io.micrometer:micrometer-corefrom 1.16.5 to 1.17.0Release notes
Sourced from io.micrometer:micrometer-core's releases.
... (truncated)
Commits
8466feaMerge branch '1.16.x'fa2ed32Merge branch '1.15.x' into 1.16.xdc2e5e2Reduce allocation in gRPC server convention36da131Reduce allocation in HTTP server instrumentation9591cb4Bump com.uber.nullaway:nullaway from 0.13.5 to 0.13.6 (#7575)7a92a44Bump software.amazon.awssdk:cloudwatch from 2.46.3 to 2.46.4 (#7576)e11e7c6Merge branch '1.16.x'd8e8bcbMerge branch '1.15.x' into 1.16.xcf6ac02Reduce flakiness of PushMeterRegistryTest (#7574)d74759aBump com.google.cloud:google-cloud-monitoring from 3.93.0 to 3.94.0 (#7573)Most Recent Ignore Conditions Applied to This Pull Request
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions