Skip to content

chore(deps): bump com.hazelcast:hazelcast from 5.2.0 to 5.2.5 in the maven group across 1 directory#27

Merged
NeatGuyCoding merged 1 commit intomainfrom
dependabot/maven/maven-e5ee3bd72e
Nov 21, 2025
Merged

chore(deps): bump com.hazelcast:hazelcast from 5.2.0 to 5.2.5 in the maven group across 1 directory#27
NeatGuyCoding merged 1 commit intomainfrom
dependabot/maven/maven-e5ee3bd72e

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 20, 2025 •
edited
Loading

Bumps the maven group with 1 update in the / directory: com.hazelcast:hazelcast.

Updates com.hazelcast:hazelcast from 5.2.0 to 5.2.5

Release notes

Sourced from com.hazelcast:hazelcast's releases.

v5.2.5

This document lists the enhancements and fixed issues for the Hazelcast Platform 5.2.5 release. The numbers in the square brackets refer to the issues and pull requests in Hazelcast's GitHub repository.

Enhancements

  • Improved the permission checks in the file connectors by adding a method that returns the permissions required to resolve field names. #25674
  • Updated the versions of following dependencies: ** Snappy to 1.1.10.5 ** gRPC to 1.59 ** Netty to 4.1.100.Final ** Elasticsearch to 7.17.13 ** Everit JSON Schema to 1.14.3 #24866, #25820, #25708, #25729, #25775

Fixes

  • Fixed an issue where the entry listeners for Replicated Maps were checking the Map permissions instead of the Replicated Map permissions. #25971
  • Fixed an issue where the map entries' metadata, such as time-to-live and expiration, was not replicated correctly over WAN after updating existing entries. #25506
  • Fixed an issue where there was a difference between the elapsed clock time and elapsed total time when listening to migration events. #25066
  • Fixed an issue where the member list was not updated after a cluster failover scenario. #24944
  • Renamed the service port for Hazelcast clusters deployed in Kubernetes environments to hazelcast. The previous name, hazelcast-service-port, caused member auto-discovery for embedded deployments to fail. #24841
  • Fixed an issue where Hazelcast was sending empty map interceptor information to the members that are newly joined to the cluster; it was causing eager map initializations. #24669

Removed/Deprecated Features

  • Removed the evaluation tool (for trying out Platform 5.x features for IMDG 3.x users) and the relevant IMDG 3.x JAR libraries from Hazelcast Platform distributions. #25697

Contributors

We would like to thank the contributors from our open source community who worked on this release:

v5.2.4

This document lists the enhancements and fixed issues for the Hazelcast Platform 5.2.4 release. The numbers in the square brackets refer to the issues and pull requests in Hazelcast's GitHub repository (github.com/hazelcast/hazelcast).

Enhancements

  • Updated the version of jackson-core dependency to 2.15.2. #24730
  • Hazelcast was sending requests to Kubernetes API when deploying an application with embedded Hazelcast and service-dns (DNS lookup mode) specified to a Kubernetes cluster. This was causing the requests to be unsuccessful and the application not to start. This mechanism has been improved by creating Kubernetes client only for the DNS lookup mode. #24045

Fixes

  • Fixed an issue where some of the members in a Hazelcast cluster deployed on Kubernetes (as a statefulset) shut down with en exception in a delayed manner. #24709
  • Fixed an issue where Jet job snapshots could be prematurely deleted after a restart of a cluster, having lossless restart enabled. #24576
  • Fixed an issue where the SELECT COUNT(DISTINCT COLUMN) query for maps was producing incorrect results. #24490
  • Fixed various issues in [Health Monitor] including incorrect metric names. #24634
  • Fixed an issue where the REST calls were failing for Hazelcast clusters with TLS v1.3 configured, and deployed on Kubernetes. #24624
  • Fixed an issue where SQL statements were failing when a class (to determine the fields of a key/value pair) no longer exists but the mapping is still valid. #24043

... (truncated)

Commits
  • 8b1bd72 Upgrade version to 5.2.5
  • c4f388d Adding OS RN for 5.2.5 (#827)
  • 0c3b54d Best-effort fix for merging metadata over WAN after merge rejection [5.2.5] (...
  • 1eec447 Extend permission checks in MessageTasks and add a test coverage [HZ-2090] [5...
  • e394e3d Fix K8s service port [CN-894] [5.2.5] (#797)
  • 06a10be [BACKPORT] Do not try to connect to the old member list after the cluster cha...
  • 1239695 Make MigrationListener timers use wall-clock not CPU time [5.2.5][HZ-2651][HZ...
  • 3939548 Correctly WAN replicate IMap metadata when updating existing records (#6514) ...
  • 6c471c1 Use MapContainer to filter maps to be cleaned up when migrating off a partiti...
  • 366fad9 Bump grpc to mitigate CVE-2023-44487 [5.2.5]
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 20, 2025

Labels

The following labels could not be found: maven. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Nov 20, 2025
@coderabbitai
Copy link
Contributor

coderabbitai bot commented Nov 20, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch dependabot/maven/maven-e5ee3bd72e

Comment @coderabbitai help to get the list of available commands and usage tips.

@dependabot dependabot bot force-pushed the dependabot/maven/maven-e5ee3bd72e branch 2 times, most recently from 5658878 to f039efe Compare November 21, 2025 00:39
@dependabot
chore(deps): bump com.hazelcast:hazelcast
65cee94 
Bumps the maven group with 1 update in the / directory: [com.hazelcast:hazelcast](https://github.com/hazelcast/hazelcast).


Updates `com.hazelcast:hazelcast` from 5.2.0 to 5.2.5
- [Release notes](https://github.com/hazelcast/hazelcast/releases)
- [Commits](hazelcast/hazelcast@v5.2.0...v5.2.5)

---
updated-dependencies:
- dependency-name: com.hazelcast:hazelcast
  dependency-version: 5.2.5
  dependency-type: direct:production
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/maven/maven-e5ee3bd72e branch from f039efe to 65cee94 Compare November 21, 2025 01:34
@NeatGuyCoding
Copy link
Collaborator

NeatGuyCoding commented Nov 21, 2025

@sanjomo For Java 8 compatibility, would not upgrade
refer to #25

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 21, 2025

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/maven/maven-e5ee3bd72e branch November 21, 2025 01:34
@sanjomo
Copy link
Member

sanjomo commented Nov 21, 2025

@NeatGuyCoding 5.2.x is minor patch versions, so you can upgrade, but not 5.3 and above

@sanjomo sanjomo restored the dependabot/maven/maven-e5ee3bd72e branch November 21, 2025 06:20
@sanjomo sanjomo reopened this Nov 21, 2025
@NeatGuyCoding NeatGuyCoding merged commit 94d2692 into main Nov 21, 2025
8 checks passed
@dependabot dependabot bot deleted the dependabot/maven/maven-e5ee3bd72e branch November 21, 2025 06:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@NeatGuyCoding @sanjomo