chore: dependency updates #1700
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
chore: update crates chore: update maven deps (general) chore: update kotlin → `2.2.21-RC2` chore: update micronaut → `4.9.4` / `4.6.0` chore: update arrow → `2.2.0-beta.3` chore: update asm → `9.9` chore: update classgraph → `4.8.184` chore: update jna → `5.18.1` chore: update ktor → `3.3.1` chore: update logback → `1.5.19` chore: update gradle → `9.2.0-rc-2` chore: update bun → `1.3.x` chore: update typescript → `5.9.3` chore: update browserslist → `4.26.3` chore: update node types → `24.8.1` chore: update gradle lockfiles chore: update gradle verification metadata Signed-off-by: Sam Gammon <sam@elide.dev>
Bumps [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) from 1.0.8 to 1.0.12. - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](anthropics/claude-code-action@7ed3b61...777ffcb) --- updated-dependencies: - dependency-name: anthropics/claude-code-action dependency-version: 1.0.12 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Sam Gammon <sam@elide.dev>
Bumps debian from `7e8e5af` to `3e62bb8`. --- updated-dependencies: - dependency-name: debian dependency-version: sid-slim dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Sam Gammon <sam@elide.dev>
Bumps debian from `7e8e5af` to `3e62bb8`. --- updated-dependencies: - dependency-name: debian dependency-version: sid-slim dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Sam Gammon <sam@elide.dev>
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 4.7.1 to 5.0.0. - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@c5195ef...dded088) --- updated-dependencies: - dependency-name: actions/setup-java dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Sam Gammon <sam@elide.dev>
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.2 to 2.4.3. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](ossf/scorecard-action@05b42c6...4eaacf0) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-version: 2.4.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Sam Gammon <sam@elide.dev>
Bumps [step-security/paths-filter](https://github.com/step-security/paths-filter) from 3.0.4 to 3.0.5. - [Release notes](https://github.com/step-security/paths-filter/releases) - [Commits](step-security/paths-filter@27924be...6eee183) --- updated-dependencies: - dependency-name: step-security/paths-filter dependency-version: 3.0.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Sam Gammon <sam@elide.dev>
Bumps [gradle/actions](https://github.com/gradle/actions) from 4.4.3 to 5.0.0. - [Release notes](https://github.com/gradle/actions/releases) - [Commits](gradle/actions@ed40850...4d9f0ba) --- updated-dependencies: - dependency-name: gradle/actions dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Sam Gammon <sam@elide.dev>
There was a problem hiding this comment.
Pull Request Overview
Dependency update PR introducing newer versions across languages and tooling, including Kotlin, Gradle, Micronaut, Netty, GraalVM, ASM, Okio, and others.
- Bumps Kotlin from 2.2.20 to 2.2.21-RC2 across build scripts and embedded constants.
- Updates Gradle wrapper to 9.2.0-rc-2 and refreshes multiple lockfiles with newer library versions.
- Refreshes container base images (Debian digest) and runtime tool versions (Bun 1.3.0, Jacoco, ASM, Okio, GraalVM components).
Reviewed Changes
Copilot reviewed 62 out of 65 changed files in this pull request and generated 7 comments.
Show a summary per file
| File | Description |
|---|---|
| tools/images/elide/Dockerfile | Updates Debian base image digest for builder/runtime stages. |
| tools/images/codespace/Dockerfile | Pins Kotlin version argument to 2.2.21-RC2. |
| tools/images/bash/Dockerfile | Updates Debian base image digest. |
| tools/elide-build/src/main/kotlin/elide/internal/conventions/Constants.kt | Advances pinned versions (Kotlin SDK, Jacoco, JVM toolchain target, metadata, Okio). |
| tools/elide-build/gradle.lockfile | Broad Kotlin plugin/lib updates plus other dependency version bumps (ASM, H2, GraalVM build tools). |
| packages/transport/transport-kqueue/gradle.lockfile | Netty family upgraded to 4.2.1.Final. |
| packages/tooling/src/main/kotlin/elide/tooling/jvm/JvmLibraries.kt | Kotlin + kotlinx CSS version bumps for embedded tooling. |
| packages/tooling/gradle.lockfile | Kotlin, Micronaut, GraalVM, Ktor updates. |
| packages/terminal/gradle.lockfile | GraalVM and SLF4J version updates, adds new espresso-related modules. |
| packages/telemetry/gradle.lockfile | Micronaut and Netty updates; Kotlin stdlib bumped to RC version. |
| packages/tcnative/gradle.lockfile | GraalVM modules upgraded; SLF4J bumped. |
| packages/sqlite/gradle.lockfile | GraalVM modules upgraded; SLF4J bumped. |
| packages/server/gradle.lockfile | Large set of Micronaut, Netty, GraalVM, Kotlin, Spring updates; adds kotlin-inquirer and version alignment changes. |
| packages/secrets/gradle.lockfile | New lockfile introducing Micronaut, Ktor, Kotlin (RC) and GraalVM dependencies. |
| packages/runner/gradle.lockfile | Micronaut, Ktor, GraalVM, Kotlin updates to RC versions. |
| packages/local-ai/gradle.lockfile | Same pattern of Micronaut, Ktor, Kotlin RC, GraalVM updates. |
| packages/graalvm/gradle.lockfile | Adds kotlin-inquirer; upgrades Netty, GraalVM stack, Kotlin RC. |
| packages/graalvm-wasm/gradle.lockfile | Upgrades Micronaut, Ktor, Kotlin RC, GraalVM wasm stack. |
| packages/graalvm-ts/gradle.lockfile | Similar upgrades plus GraalVM Python/wasm components. |
| packages/graalvm-rb/gradle.lockfile | Ruby, LLVM, Espresso, Kotlin RC, Micronaut upgrades. |
| packages/graalvm-py/gradle.lockfile | Python, nativeimage, Truffle components upgraded to 25.0.0; Kotlin RC applied. |
| packages/graalvm-llvm/gradle.lockfile | LLVM + nativeimage + Kotlin RC updates. |
| packages/graalvm-kt/src/main/kotlin/elide/runtime/gvm/kotlin/KotlinLanguage.kt | Kotlin implementation version constant bumped to RC version. |
| packages/graalvm-kt/gradle.lockfile | Kotlin compiler/tooling upgraded to 2.2.21-RC2; GraalVM stack updated. |
| packages/graalvm-jvm/gradle.lockfile | Espresso / LLVM / Kotlin RC version alignment. |
| packages/graalvm-js/gradle.lockfile | GraalVM JS-related stack and Kotlin RC updates. |
| packages/graalvm-java/gradle.lockfile | Espresso / LLVM / Kotlin RC updates for Java language support. |
| packages/exec/gradle.lockfile | Micronaut and Kotlin stdlib bumped; adds semver4j. |
| packages/cli/src/projects/ktjvm-gradle/build.gradle.kts | Kotlin plugin and test library version updated to RC. |
| packages/cli/src/projects/kterr-gradle/build.gradle.kts | Kotlin plugin and test library version updated to RC. |
| gradlew.bat | Adjusts wrapper execution to use -jar directly (removes CLASSPATH usage). |
| gradle/wrapper/gradle-wrapper.properties | Gradle distribution upgraded to 9.2.0-rc-2. |
| config/bun-version | Bun runtime version bumped to 1.3.0. |
Files not reviewed (1)
- pnpm-lock.yaml: Language not supported
Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.
darvld
approved these changes
Oct 18, 2025
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #1700 +/- ##
==========================================
+ Coverage 39.94% 40.14% +0.19%
==========================================
Files 874 874
Lines 40743 40708 -35
Branches 5797 5644 -153
==========================================
+ Hits 16275 16341 +66
+ Misses 22478 22436 -42
+ Partials 1990 1931 -59
Flags with carried forward coverage won't be shown. Click here to find out more.
... and 62 files with indirect coverage changes Continue to review full report in Codecov by Sentry.
🚀 New features to boost your workflow:
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary
Add a summary about your PR here.
7e8e5afto3e62bb8in /tools/images/elide #16857e8e5afto3e62bb8in /tools/images/bash #1684Changelog