Repository navigation
chore(deps): Update java minor and patch - #289
Open
renovate[bot] wants to merge 1 commit into
Open
renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
|
|
renovate
Bot
force-pushed
the
renovate/java-minor-and-patch
branch
2 times, most recently
from
May 10, 2026 13:37
fa43cc1 to
81e2de1
Compare
renovate
Bot
force-pushed
the
renovate/java-minor-and-patch
branch
2 times, most recently
from
May 15, 2026 21:57
ac2e06f to
af2205e
Compare
renovate
Bot
force-pushed
the
renovate/java-minor-and-patch
branch
from
May 22, 2026 23:11
af2205e to
57a07c0
Compare
renovate
Bot
force-pushed
the
renovate/java-minor-and-patch
branch
from
May 31, 2026 10:05
57a07c0 to
7c4e889
Compare
renovate
Bot
force-pushed
the
renovate/java-minor-and-patch
branch
2 times, most recently
from
June 14, 2026 21:47
1b8ac1e to
fddc730
Compare
renovate
Bot
force-pushed
the
renovate/java-minor-and-patch
branch
from
June 26, 2026 21:32
fddc730 to
2b10757
Compare
renovate
Bot
force-pushed
the
renovate/java-minor-and-patch
branch
from
July 12, 2026 22:43
2b10757 to
2834cfd
Compare
renovate
Bot
force-pushed
the
renovate/java-minor-and-patch
branch
from
July 25, 2026 10:03
2834cfd to
e8f921d
Compare
renovate
Bot
force-pushed
the
renovate/java-minor-and-patch
branch
from
August 2, 2026 11:00
e8f921d to
874d7b0
Compare
renovate
Bot
force-pushed
the
renovate/java-minor-and-patch
branch
3 times, most recently
from
August 23, 2026 19:02
390a771 to
78404d1
Compare
renovate
Bot
force-pushed
the
renovate/java-minor-and-patch
branch
4 times, most recently
from
September 7, 2026 10:41
0b86194 to
803d471
Compare
renovate
Bot
force-pushed
the
renovate/java-minor-and-patch
branch
from
September 14, 2026 21:31
803d471 to
528a49e
Compare
|
Important Review skippedBot user detected. To trigger a single review, invoke the
 |
| Layer / File(s) | Summary |
|---|---|
Main Gradle tooling and dependencies build.gradle, gradle/wrapper/gradle-wrapper.properties |
Updates Gradle plugins, the Gradle wrapper, gRPC, protobuf, SLF4J, Guava, Gson, and TestNG. |
Gradle sample project updates samples/DgraphJavaSample/..., samples/DgraphJavaSampleDeadlineInterceptors/..., samples/DgraphJavaSampleWithDeadlineAfter/... |
Updates Gson to 2.14.0 and the Gradle wrappers to 8.14.5. |
Maven sample project updates samples/concurrent-modification/pom.xml |
Updates the Maven Compiler Plugin, Exec Maven Plugin, and Gson. |
Priority:
Estimated code review effort: 2 (Simple) | ~10 minutes
Change: Other
Suggested reviewers: mlwelles
🚥 Pre-merge checks | ✅ 5
-
✅ Passed checks (5 passed)
-
Check name Status Explanation Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled. Title check ✅ Passed The title clearly identifies a dependency update and matches the pull request's primary purpose of updating Java build and dependency versions. Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0… Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request. Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
-
✨ Finishing Touches: 💡 1
-
🧪 Generate unit tests (beta)
-
- Commit to this branch
- Create a new PR
🛠️ Fix failing CI checks: 💡
-
- Commit to this branch
- Create a new PR
-
- Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.
Comment @coderabbitai help to get the list of available commands.
renovate
Bot
force-pushed
the
renovate/java-minor-and-patch
branch
2 times, most recently
from
September 25, 2026 20:18
998723a to
36a78bc
Compare
renovate
Bot
force-pushed
the
renovate/java-minor-and-patch
branch
from
October 2, 2026 16:47
36a78bc to
a8309b6
Compare
renovate
Bot
force-pushed
the
renovate/java-minor-and-patch
branch
4 times, most recently
from
October 16, 2026 15:34
314458f to
95325d5
Compare
renovate
Bot
force-pushed
the
renovate/java-minor-and-patch
branch
2 times, most recently
from
October 23, 2026 08:14
cfc69b9 to
78adf5c
Compare
renovate
Bot
force-pushed
the
renovate/java-minor-and-patch
branch
from
October 26, 2026 18:53
78adf5c to
ca88253
Compare
renovate
Bot
force-pushed
the
renovate/java-minor-and-patch
branch
from
October 27, 2026 05:55
ca88253 to
0dcd302
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
8.14.2→8.14.67.11.0→7.12.02.13.1→2.15.04.31.1→4.36.233.4.8-jre→33.7.2-jre2.0.17→2.0.202.0.17→2.0.204.31.1→4.36.22.13.1→2.15.01.73.0→1.85.11.73.0→1.85.11.73.0→1.85.11.73.0→1.85.13.5.1→3.6.48.3.6→8.3.113.14.0→3.16.00.9.5→0.10.0Release Notes
gradle/gradle (gradle)
v8.14.6: 8.14.6Compare Source
The Gradle team is excited to announce Gradle 8.14.6.
Here are the highlights of this release:
Read the Release Notes
We would like to thank the following community members for their contributions to this release of Gradle:
Aurimas,
Ben Bader,
Björn Kautler,
chandre92,
Daniel Hammer,
Danish Nawab,
Florian Dreier,
Ivy Chen,
Jendrik Johannes,
jimmy1995-gu,
Madalin Valceleanu,
Na Minhyeok.
Upgrade instructions
Switch your build to use Gradle 8.14.6 by updating your wrapper:
See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.
For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.
Reporting problems
If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.
We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.
v8.14.5: 8.14.5Compare Source
The Gradle team is excited to announce Gradle 8.14.5.
Here are the highlights of this release:
Read the Release Notes
We would like to thank the following community members for their contributions to this release of Gradle:
Aurimas,
Ben Bader,
Björn Kautler,
chandre92,
Daniel Hammer,
Danish Nawab,
Florian Dreier,
Ivy Chen,
Jendrik Johannes,
jimmy1995-gu,
Madalin Valceleanu,
Na Minhyeok.
Upgrade instructions
Switch your build to use Gradle 8.14.5 by updating your wrapper:
See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.
For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.
Reporting problems
If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.
We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.
v8.14.4: 8.14.4Compare Source
This is a patch release for 8.14. We recommend using 8.14.4 instead of 8.14.
This release addresses two security vulnerabilities:
It also fixes the following issues:
Read the Release Notes
Upgrade instructions
Switch your build to use Gradle 8.14.4 by updating your wrapper:
See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.
For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.
Reporting problems
If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.
We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.
v8.14.3: 8.14.3Compare Source
The Gradle team is excited to announce Gradle 8.14.3.
This is a patch release for 8.14. We recommend using 8.14.3 instead of 8.14.
Here are the highlights of this release:
Read the Release Notes
We would like to thank the following community members for their contributions to this release of Gradle:
Aurimas,
Ben Bader,
Björn Kautler,
chandre92,
Daniel Hammer,
Danish Nawab,
Florian Dreier,
Ivy Chen,
Jendrik Johannes,
jimmy1995-gu,
Madalin Valceleanu,
Na Minhyeok.
Upgrade instructions
Switch your build to use Gradle 8.14.3 by updating your wrapper:
See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.
For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.
Reporting problems
If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.
We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.
testng-team/testng (org.testng:testng)
v7.12.0Compare Source
What's Changed
New Contributors
Full Changelog: testng-team/testng@7.11.0...7.12.0
grpc/grpc-java (io.grpc:grpc-stub)
v1.85.1What's Changed
v1.85.0gRPC Java 1.85.0 Release Notes
API Changes
e9a8c2b). High-cardinality metadata values provide little compression benefit and can churn the server's dynamic HPACK table. AddsNettyChannelBuilder.neverIndexMetadataKey()andneverIndexMetadataKeys() so callers can mark selected outbound metadata keys for HPACK's never-indexed literal representation.hasPermissions()toSecurityPoliciesand deprecate thePackageManagerversion.Behavior Changes
5fda0c7). It now accepts a port of 0 in the LDS listener address as matching any port.Bug Fixes
e58489f). Fixes a bug that caused empty payloads on retry attempts for regular xDS channels.fc43144). Because of a bug in the config selector, when ManagedChannel entered IDLE state due to resource deletion on the xDS control plane, the channel stayed stuck in IDLE state even after the resource came back online and a new rpc was executed.b3ae801). When a server or proxy sent a GOAWAY with an unrecognized HTTP/2 error code, such as 70007 from Apache httpd, Netty transport clients loggedNullPointerException: Http2Error cannot be null for GOAWAYand RPCs could hang until their deadline. Such codes are now treated as INTERNAL_ERROR, so the transport shuts down cleanly.Improvements
2858db2). This configures HTTPS endpoint identification in GrpcSslContexts and updates ClientTlsHandler to preserve an explicit empty-string opt-out. A null algorithm still falls back to HTTPS, retaining hostname verification for custom contexts that do not select an algorithm.c9ee3f8).java_grpc_libraryandjava_lite_grpc_librarynow invoke protoc through Protobuf'sproto_lang_toolchaininstead of always using@com_google_protobuf//:protoc. They now use the same protoc and protoc options asjava_proto_library.New Features
dd00881). This adds triggerEvent/onEvent APIs toServerCallandServerCall.Listener. This allows events to be triggered on theServerCalland be delivered as a listener callback.Dependencies
9799887)61b910b). netty-tcnative remains at 2.0.81.Documentation
893eb70)Thanks to
@kkalin68
@petedmarsh
v1.84.3Bug Fixes
v1.84.2v1.84.1v1.84.0In this release we drop support for Android API level 23 or lower (Marshmallow or earlier), following Google Play Service’s now requiring a minimum of API level 24 (Android 7.0 Nougat).
API Changes
ac02c6f)XdsServerBuilderwithSocketAddresses (#12925) (ac02c6f)6966536)Behavior Changes
96807d8)Ignore all but the first certificate if the x5c JWK parameter contains multiple values.
Skip the JWK entry instead of stopping execution or throwing when x5c is missing or contains an empty list, complying with the requirement that entries without x5c must be ignored.
Bug Fixes
72c6e5f)Fixes a bug whereby an OOB channel shutdown incorrectly shut down the shared transport factory with the main channel, and the main channel was unable to create subchannels anymore and faced an exception in doing so.
shutdownNow()becoming a no-op aftershutdown()(#12982) (3cb7007)d49a589)296c007) Chains multiple childChannelConfigurator() calls instead of overwriting them in ManagedChannelImplBuilder and XdsServerBuilder, ensuring all configurators are preserved and executed when child channels are created.7843bd4) Caches header_data received in RouteLookupResponse and sends it back as stale_header_data in RouteLookupRequest when refreshing stale cache entries, complying with the RLS specification.Improvements
56205f9) Configure max active streams limit directly uponDefaultHttp2Connectioninitialization. BecauseNettyServerHandlerinstantiatesDefaultHttp2Connectiondirectly rather than using Netty'sAbstractHttp2ConnectionHandlerBuilder, it missed Netty's built-in CVE-2026-47244 patch. This left a pre-handshake window where the server's local connection allowed up to Integer.MAX_VALUE active client-initiated streams until a SETTINGS_ACK was received. Enforcing the limit proactively at startup closes this vulnerability window and prevents client-initiated stream floods / resource exhaustion.AsyncServletOutputStreamWriterdetect and handle write when not ready (#12732) (46f3080) In highly concurrent scenarios, cached servlet container ready to write state can become stale. The servlet container may have already transitioned to a 'not ready' state, but the corresponding callback has not yet updated gRPC's internal state. This fix makes the ready state to be evaluated explicitly before attempting to write directly to the servlet output stream.0f859c3) By RFC 9113, section 6.9, receivers must take frames into account for flow control even if they're errored. This change moves the stream error response logic after connection window updates0585d48)bc01994)9fdef96)9ffa1e1)Dependencies
6ccd065). Update the maximum supported edition in the Java gRPC compiler plugin to EDITION_2026 when compiling against Protobuf version 7.35.0 (v35.0) or later.5d0a012)1bc2f5a)Documentation
ee08f53)New Features
073fd5e) Implements attempt-level RPC delay observability across the core delayed transport, built-in load balancers (pick_first, round_robin), RLS, and xDS policies, aligned with gRFC A121. Adds LoadBalancer.PickResult.withNoResult(delayType, delayReason) and delay tracing callbacks on ClientStreamTracer. Records attempt delay duration metrics (grpc.client.attempt.delay.duration) and child tracing spans ("Attempt Delay") via the OpenTelemetry plugin.Thanks to
@Zhengcy05
@carl-mastrangelo
@themechbro
@JasonLunn
@martinbaillie
@eado
@TimurRakhmatullin86
v1.83.1gRPC Java 1.83.1 Release Notes
Improvements
v1.83.0gRPC Java 1.83.0 Release Notes
API Changes
4456721)2b86f8f). This allows users to explicitly provide a NameResolverRegistry during channel creation rather than relying on the global registry, offering better isolation and control over name resolution per-channel.Behavior Changes
3018ce3). v1.82.0 enabled TLS 1.3 for clients; this does the same for servers1e85674) Enables xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports as per gRFC A85c8079ee). This only has an effect when using aggregate clusters3db3235). Previously, modifications to LoadBalancerRegistry could cause failures in the LB treed49c0b1). If using xds heavily with many targets, then MAX_CONCURRENT_STREAMS to the control plane could be exceeded. This then prevents loading resources for new targets, which causes those channels to hang on name resolution. RPCs would see the nondescript "DEADLINE_EXCEEDED: Deadline Context was exceeded after Xs" or "DEADLINE_EXCEEDED: Deadline CallOptions was exceeded after Xs"Improvements
103bd4b)663c505) This updates default service config validation to accept numeric values represented as Number, not only Double. Common JSON parsers may deserialize integer-looking JSON values such as maxAttempts: 4 and backoffMultiplier: 2 as Integer, which previously caused defaultServiceConfig() to fail with IllegalArgumentException. The values are normalized to Double when copied into the validated service config, preserving the existing internal representation expected by the service config parsing code.56d2b25). Previously there was not a hint as to what gRPC was delayed on when the deadline was exceeded.4ec83df). This removes unnecessary log noise89aef90). This introduces the ChildChannelConfigurer API to allow intercepting and customizing the configuration (such as injecting interceptors or modifying credentials) of child channels created dynamically by load balancers.Dependencies
66c6ab1). If you need Netty 4.1 support, please file an issuec886f0a)064272c):Documentation
f94574e)Thanks to
tian__mi__mi@
codingkiddo@
Zhengcy05@
v1.82.4gRPC Java 1.82.4 Release Notes
Improvements
v1.82.3gRPC Java 1.82.3 Release Notes
The fixes that were supposed to go in this release were not included in the patch by mistake. Use 1.82.4 instead.
v1.82.2v1.82.1v1.82.0This release drops support for Bazel 7. It may still run, but we are no longer testing it. We are testing Bazel 8 and 9.
We are anticipating requiring Netty 4.2 in the next release. Please file an issue if you still need Netty 4.1 support.
Behavior Changes
UNIMPLEMENTED, which tears down the stream and EDS data never arrives. This fix makes it skip DiscoveryRequests for resource types we don't actually subscribe to on a given server.Improvements
@ThreadSafeannotation and replace with JavaDoc (#12762). Removes JSR-305 annotations but instead of replacing it with ErrorProne's ThreadSafe, sticks to adding a JavaDoc comment. This is done only in public non-final classes and interfaces. This allows Java applications that have moved away from javax to compile and avoids a bug in Immutables and Lombok (and possibly other annotation processors) from failing when JSR-305 is not present.b38df6c). The main improvement here is not retaining the request Metadata for the life of the RPC. That means RPCs with larger request Metadata would see a larger benefit.f430131)cc0d1a8). This is most noticeable when there are many endpoints returned by EDS, but the LB policy only uses a few of them, like pick_first.324fce7). This reduces the per-RPC overhead of the gRFC A114 support added in v1.81.013b4b97). This preserves more information for failures communicating with the control plane.d92ca44)Bug Fixes
bb153a8).streamClosed()happens beforeserverCallStarted().GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=truewhen accepting resolved addresses and in CONNECTING state (#12814). It makes sure that whenever PickFirstLeafLoadBalancer transitions into CONNECTING the current address in the addressIndex has a corresponding subchannel. This prevents an NPE in acceptResolvedAddresses in some situations.ec10992). This should have no visible impact in normal use. It mostly just makes it easier to debug broken implementationsf4125c5)f021bef)New Features
?force-xdsquery parameter in thegoogle-c2presolver (#12760) (86fa860). This disables environment checks and uses xDS unconditionally. Please note that this feature has not yet seen comprehensive testing.Dependencies
ada087b)1dbb1a1(ec0a9c9). This fixed a rules_go incompatibility issue with Bazel 9.1. But it also greatly reduced the overall transitive dependencies, as the C++ grpc repo is no longer a dependency039ad77) add Bazel 9.1.0 to our CI matrix (17be0d3)8802dc3,da98b04)Thanks to
@becomeStar
@bengtsson1-flir
@jnowjack-lucidchart
@Kainsin
@kenkangxgwe
@mfperminov
@paulmurhy123
@schiemon
@therepanic
v1.81.1v1.81.0In this release we drop support for Android API level 22 or lower (Lollipop or earlier), following Google Play Service’s discontinued updates for Lollipop (API levels 21 & 22) and now requires a minimum of API level 23 (Android 6.0 Marshmallow).
API Changes
Behavior Changes
0675f70). DnsNameResolver ignores re-resolution requests on OpenJDK-like platforms if it has been too soon since the last DNS query because InetAddress.getAllByName() has a cache with a fixed entry lifetime, but this logic was disabled for Android which does not have that style of cache. Android’s cache uses the result TTL, which will rarely be less than 30 seconds. This change would probably be most noticeable when 1) changing to a different network (e.g., from wifi to mobile), 2) the server has different addresses for different networks, and 3) the app is not using AndroidChannelBuilder with anandroid.context.Context. For reference, it seems Chrome caches for 1 minutee39c38b). Previously each channel using the xds name resolver would create its own channel to communicate with the control plane. Now they share control plane channels, while still having separate RPCsBug Fixes
ManagedChannelOrphanWrappercould incorrectly log a "not shutdown properly" warning during garbage collection when using directExecutor(). (#12705) (d459338)typeUrl. (#12740) (eac9fe9)backend_service. This ensures xDS load balancing metrics are reported accurately. (#12735)New Features
0e39b29). This CallOption is copied by grpc-opentelemetry to thegrpc.client.call.customlabel as defined by gRFC A108. See also the gRPC OpenTelemetry Metrics guide (update in-progress)AdvancedTlsX509KeyManagerso that developers can now preserve and use key aliases when dynamically reloading TLS certificates. (#12686)Documentation
a3a9ffc) (#12726) (65ae2ef)3ed732f)Dependencies
16e17ab). Google-auth-library: 1.42.1, animal-sniffer: 1.27, assertj-core:3.27.7, error_prone_annotations:2.48.0, proto-google-common-protos:2.64.1, google-cloud-logging:3.23.10, jetty-http2-server:12.1.7, jetty-ee10-servlet:12.1.7, lincheck:3.4, opentelemetry-api:1.60.1, opentelemetry-exporter-prometheus:1.60.1-alpha, opentelemetry-gcp-resources:1.54.0-alpha, opentelemetry-sdk-extension-autoconfigure:1.60.1, opentelemetry-sdk-testing:1.60.1, robolectric:4.16.1, tomcat-embed-core:10.1.52, tomcat-embed-core9: 9.0.115,1528f80)Thanks to
v1.80.0Compare Source
API Changes
eae16b2)Bug Fixes
024fdd0)core: Fixed a race condition in RetriableStream where inFlightSubStreams counting could become inconsistent during concurrent retry and deadline events. This ensures that client calls (such as blockingUnaryCall) do not hang indefinitely and correctly receive a close signal. (#12649) (
73abb48)Improvements
470219f). This allows gConfiguration
📅 Schedule: (UTC)
* 0-3 1 * *)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.