Bump com.nimbusds:nimbus-jose-jwt from 10.6 to 10.7 in /test/fixtures/hdfs-fixture by dependabot[bot] · Pull Request #20478 · opensearch-project/OpenSearch

dependabot · 2026-01-26T15:05:40Z

Bumps com.nimbusds:nimbus-jose-jwt from 10.6 to 10.7.

Changelog

Sourced from com.nimbusds:nimbus-jose-jwt's changelog.

10.6 (2025-11-06) * Adds static CollectionUtils.containsNull(Set) method. * DefaultJWTClaimsVerifier accepted "aud" (audience) argument must be compatible with Set.of (iss #499). * The DefaultJWTClaimsVerifier must not include JWT claim values in BadJWTException messages (iss #605).

10.7 (2026-01-08) * Adds MaxCompressedCipherTextLength that implements JWEDecrypterOption, to to configure the maximum allowed length of compressed cipher text. * Adds JWEObject.decrypt(JWEDecrypter, Set) method to support the MaxCompressedCipherTextLength option.

Commits

6a6d0b3 [maven-release-plugin] prepare for next development iteration
72ba7d2 Add configurable max compressed cipher text length for JWE decryption (iss #570)
74d1dd1 Merged in feature/configurable-max-compressed-ciphertext-length (pull request...
1b4a3eb Edits JavaDocs, CHANGELOG.txt for 10.7 release
9f4752d Adds casts to tests
ebdea4e [maven-release-plugin] prepare release 10.7
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) from 10.6 to 10.7. - [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt) - [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/10.7..10.6) --- updated-dependencies: - dependency-name: com.nimbusds:nimbus-jose-jwt dependency-version: '10.7' dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-01-26T15:06:25Z

Important

Review skipped

Auto incremental reviews are disabled on this repository.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

🔍 Trigger a full review

📝 Walkthrough

Walkthrough

A single transitive dependency version is bumped from 10.6 to 10.7 in a Gradle build configuration file for a test fixture, with no functional code changes.

Changes

Cohort / File(s)	Summary
Dependency Version Bump `test/fixtures/hdfs-fixture/build.gradle`	Updated transitive dependency `com.nimbusds:nimbus-jose-jwt` from version 10.6 to 10.7

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The PR description lacks the required sections from the template: no 'Description' section explaining what the change achieves, no 'Related Issues' section, and no 'Check List' with required checkboxes.	Add a Description section explaining the change, include Related Issues if applicable, and complete the Check List with required checkboxes as specified in the template.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and specifically describes the main change: bumping a dependency version in a specific build file.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-01-26T16:42:00Z

✅ Gradle check result for e449e24: SUCCESS

codecov · 2026-01-26T16:42:46Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 73.25%. Comparing base (672039d) to head (2e6fe77).
⚠️ Report is 8 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff            @@
##               main   #20478   +/-   ##
=========================================
  Coverage     73.25%   73.25%           
- Complexity    71979    71984    +5     
=========================================
  Files          5796     5796           
  Lines        329287   329350   +63     
  Branches      47419    47432   +13     
=========================================
+ Hits         241203   241280   +77     
+ Misses        68759    68714   -45     
- Partials      19325    19356   +31

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

…/com.nimbusds-nimbus-jose-jwt-10.7 Signed-off-by: Craig Perkins <cwperx@amazon.com>

github-actions · 2026-01-27T13:54:45Z

❌ Gradle check result for 2e6fe77: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

github-actions · 2026-01-27T16:45:39Z

❌ Gradle check result for 2e6fe77: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

github-actions · 2026-01-27T22:31:05Z

❌ Gradle check result for 2e6fe77: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

github-actions · 2026-01-28T00:20:15Z

✅ Gradle check result for 2e6fe77: SUCCESS

…/hdfs-fixture (opensearch-project#20478) Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Craig Perkins <cwperx@amazon.com>

dependabot bot added dependabot PRs with auto version bumps from dependabot dependencies Pull requests that update a dependency file labels Jan 26, 2026

dependabot bot requested a review from a team as a code owner January 26, 2026 15:05

dependabot bot added dependencies Pull requests that update a dependency file dependabot PRs with auto version bumps from dependabot labels Jan 26, 2026

Update changelog

e449e24

Signed-off-by: dependabot[bot] <support@github.com>

Merge branch 'main' into dependabot/gradle/test/fixtures/hdfs-fixture…

2e6fe77

…/com.nimbusds-nimbus-jose-jwt-10.7 Signed-off-by: Craig Perkins <cwperx@amazon.com>

sandeshkr419 approved these changes Jan 28, 2026

View reviewed changes

sandeshkr419 merged commit 95fa0e5 into main Jan 28, 2026
37 of 43 checks passed

sandeshkr419 deleted the dependabot/gradle/test/fixtures/hdfs-fixture/com.nimbusds-nimbus-jose-jwt-10.7 branch January 28, 2026 00:23

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump com.nimbusds:nimbus-jose-jwt from 10.6 to 10.7 in /test/fixtures/hdfs-fixture#20478

Bump com.nimbusds:nimbus-jose-jwt from 10.6 to 10.7 in /test/fixtures/hdfs-fixture#20478
sandeshkr419 merged 3 commits intomainfrom
dependabot/gradle/test/fixtures/hdfs-fixture/com.nimbusds-nimbus-jose-jwt-10.7

dependabot bot commented on behalf of github Jan 26, 2026

Uh oh!

coderabbitai bot commented Jan 26, 2026 •

edited

Loading

Review skipped

Walkthrough

Changes

Estimated code review effort

Uh oh!

github-actions bot commented Jan 26, 2026

Uh oh!

codecov bot commented Jan 26, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Jan 27, 2026

Uh oh!

github-actions bot commented Jan 27, 2026

Uh oh!

github-actions bot commented Jan 27, 2026

Uh oh!

github-actions bot commented Jan 28, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot bot commented on behalf of github Jan 26, 2026

Uh oh!

coderabbitai bot commented Jan 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Walkthrough

Changes

Estimated code review effort

Uh oh!

github-actions bot commented Jan 26, 2026

Uh oh!

codecov bot commented Jan 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

github-actions bot commented Jan 27, 2026

Uh oh!

github-actions bot commented Jan 27, 2026

Uh oh!

github-actions bot commented Jan 27, 2026

Uh oh!

github-actions bot commented Jan 28, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

coderabbitai bot commented Jan 26, 2026 •

edited

Loading

codecov bot commented Jan 26, 2026 •

edited

Loading