Skip to content

Update Java dependencies to latest versions#8215

Merged
rzo1 merged 20 commits into
masterfrom
license-updates
Aug 9, 2025
Merged

Update Java dependencies to latest versions#8215
rzo1 merged 20 commits into
masterfrom
license-updates

Conversation

@rzo1

@rzo1 rzo1 commented Aug 9, 2025

Copy link
Copy Markdown
Contributor

This PR updates multiple Java dependencies to their latest available versions as suggested by Dependabot.

Updated dependencies:

  • org.glassfish.jersey:jersey-bom → 3.1.11 (from 3.1.10)
  • com.zaxxer:HikariCP → 7.0.1 (from 6.3.1)
  • commons-cli:commons-cli → 1.10.0 (from 1.9.0)
  • org.apache.commons:commons-compress → 1.28.0 (from 1.27.1)
  • net.minidev:json-smart → 2.6.0 (from 2.5.2)
  • dropwizard.version → 4.0.15 (from 4.0.14)
  • org.apache.commons:commons-text → 1.14.0 (from 1.13.1)
  • com.google.errorprone:error_prone_annotations → 2.41.0 (from 2.40.0)
  • commons-codec:commons-codec → 1.19.0 (from 1.18.0)

dependabot Bot and others added 20 commits July 28, 2025 06:10
Bumps [commons-codec:commons-codec](https://github.com/apache/commons-codec) from 1.18.0 to 1.19.0.
- [Changelog](https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-codec@rel/commons-codec-1.18.0...rel/commons-codec-1.19.0)

---
updated-dependencies:
- dependency-name: commons-codec:commons-codec
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [com.google.errorprone:error_prone_annotations](https://github.com/google/error-prone) from 2.40.0 to 2.41.0.
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.40.0...v2.41.0)

---
updated-dependencies:
- dependency-name: com.google.errorprone:error_prone_annotations
  dependency-version: 2.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [org.apache.commons:commons-text](https://github.com/apache/commons-text) from 1.13.1 to 1.14.0.
- [Changelog](https://github.com/apache/commons-text/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-text@rel/commons-text-1.13.1...rel/commons-text-1.14.0)

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-text
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps `dropwizard.version` from 4.0.14 to 4.0.15.

Updates `io.dropwizard:dropwizard-core` from 4.0.14 to 4.0.15

Updates `io.dropwizard:dropwizard-assets` from 4.0.14 to 4.0.15

Updates `io.dropwizard:dropwizard-testing` from 4.0.14 to 4.0.15

---
updated-dependencies:
- dependency-name: io.dropwizard:dropwizard-core
  dependency-version: 4.0.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: io.dropwizard:dropwizard-assets
  dependency-version: 4.0.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: io.dropwizard:dropwizard-testing
  dependency-version: 4.0.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [net.minidev:json-smart](https://github.com/netplex/json-smart-v2) from 2.5.2 to 2.6.0.
- [Release notes](https://github.com/netplex/json-smart-v2/releases)
- [Commits](netplex/json-smart-v2@2.5.2...v2.6.0)

---
updated-dependencies:
- dependency-name: net.minidev:json-smart
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [org.apache.commons:commons-compress](https://github.com/apache/commons-compress) from 1.27.1 to 1.28.0.
- [Changelog](https://github.com/apache/commons-compress/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-compress@rel/commons-compress-1.27.1...rel/commons-compress-1.28.0)

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-compress
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [commons-cli:commons-cli](https://github.com/apache/commons-cli) from 1.9.0 to 1.10.0.
- [Changelog](https://github.com/apache/commons-cli/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-cli@rel/commons-cli-1.9.0...rel/commons-cli-1.10.0)

---
updated-dependencies:
- dependency-name: commons-cli:commons-cli
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [com.zaxxer:HikariCP](https://github.com/brettwooldridge/HikariCP) from 6.3.1 to 7.0.1.
- [Changelog](https://github.com/brettwooldridge/HikariCP/blob/dev/CHANGES)
- [Commits](brettwooldridge/HikariCP@HikariCP-6.3.1...HikariCP-7.0.1)

---
updated-dependencies:
- dependency-name: com.zaxxer:HikariCP
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps org.glassfish.jersey:jersey-bom from 3.1.10 to 3.1.11.

---
updated-dependencies:
- dependency-name: org.glassfish.jersey:jersey-bom
  dependency-version: 3.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…rprone-error_prone_annotations-2.41.0' into license-updates
…ons-commons-compress-1.28.0' into license-updates
…ons-commons-text-1.14.0' into license-updates

# Conflicts:
#	pom.xml
…ersey-jersey-bom-3.1.11' into license-updates

# Conflicts:
#	pom.xml
@rzo1 rzo1 added this to the 2.8.3 milestone Aug 9, 2025
@rzo1 rzo1 self-assigned this Aug 9, 2025
@rzo1 rzo1 merged commit ddd364a into master Aug 9, 2025
12 checks passed
@rzo1 rzo1 deleted the license-updates branch August 9, 2025 20:08
@reiabreu

Copy link
Copy Markdown
Contributor

@rzo1 I have been creating issues for each of the dependabots PRs, so they are easily available on the release notes.
However, this might not be the most effective solution, since the release note script can also capture PRs when properly tagged.
How would you like to continue doing this? Happy to go either way

@rzo1

rzo1 commented Aug 15, 2025

Copy link
Copy Markdown
Contributor Author

@reiabreu maybe we can stop creating separate issues and enhance the script, if needed.

@reiabreu reiabreu added the dependencies Pull requests that update a dependency file label Oct 25, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants