Skip to content

[4.4.x] bump net.bytebuddy:byte-buddy from 1.18.12 to 1.18.13 - #2858

Open
dependabot[bot] wants to merge 1 commit into
karaf-4.4.xfrom
dependabot/maven/karaf-4.4.x/net.bytebuddy-byte-buddy-1.18.13
Open

[4.4.x] bump net.bytebuddy:byte-buddy from 1.18.12 to 1.18.13#2858
dependabot[bot] wants to merge 1 commit into
karaf-4.4.xfrom
dependabot/maven/karaf-4.4.x/net.bytebuddy-byte-buddy-1.18.13

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

Bumps net.bytebuddy:byte-buddy from 1.18.12 to 1.18.13.

Release notes

Sourced from net.bytebuddy:byte-buddy's releases.

Byte Buddy 1.18.13

  • Actually include the SBOM within the published artifacts.
  • Avoid propagation of path traversals that are contained in jar files which are copied without transformation.
  • Avoid repeated traversal of previously visited type hierarchies to improve performance.
  • Correct Kotlin support of the Gradle plugin to redirect the classes directory of a source set while retaining support for legacy Gradle versions.
  • Create Gradle tasks using Gradle's task registration API if available.
Changelog

Sourced from net.bytebuddy:byte-buddy's changelog.

2. September 2026: version 1.18.13

  • Actually include the SBOM within the published artifacts.
  • Avoid propagation of path traversals that are contained in jar files which are copied without transformation.
  • Avoid repeated traversal of previously visited type hierarchies to improve performance.
  • Correct Kotlin support of the Gradle plugin to redirect the classes directory of a source set while retaining support for legacy Gradle versions.
  • Create Gradle tasks using Gradle's task registration API if available.
Commits
  • d4da515 [publish] Releasing Byte Buddy 1.18.13
  • bb914e3 [release] Release new version
  • af2034b Create Gradle tasks via the task registration API if available to avoid the u...
  • 30aca55 Shortcut traversal of previously visited type hierarchies and harden 1-1 tran...
  • debd527 Bump actions/checkout from 6.0.2 to 7.0.1 (#1910)
  • 8315af6 Bump step-security/harden-runner from 2.16.1 to 2.19.4 (#1909)
  • e30e24f Bump actions/cache from 5.0.3 to 5.0.5 (#1914)
  • 1885f2a Bump github/codeql-action from 3.27.6 to 4.36.2 (#1916)
  • de4ed85 Correct Javadoc of Gradle plugin to avoid errors and warnings during generation.
  • 5d3a312 Bump actions/setup-java from 5.2.0 to 5.4.0 (#1918)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) from 1.18.12 to 1.18.13.
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.18.12...byte-buddy-1.18.13)

---
updated-dependencies:
- dependency-name: net.bytebuddy:byte-buddy
  dependency-version: 1.18.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 7, 2026
@github-actions

github-actions Bot commented Sep 7, 2026

Copy link
Copy Markdown

Test Results

  656 files  ±0    656 suites  ±0   1h 2m 26s ⏱️ - 2m 35s
1 006 tests ±0    963 ✅ ±0   43 💤 ±0  0 ❌ ±0 
2 750 runs  ±0  2 630 ✅ ±0  120 💤 ±0  0 ❌ ±0 

Results for commit 674ffcc. ± Comparison against base commit b2a5c92.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants