Skip to content

build(deps): bump mockito.version from 5.23.0 to 5.24.0 - #20513

Merged
FrankChen021 merged 1 commit into
masterfrom
dependabot/maven/mockito.version-5.24.0
Oct 8, 2026
Merged

build(deps): bump mockito.version from 5.23.0 to 5.24.0#20513
FrankChen021 merged 1 commit into
masterfrom
dependabot/maven/mockito.version-5.24.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 7, 2026

Copy link
Copy Markdown
Contributor

Bumps mockito.version from 5.23.0 to 5.24.0.
Updates org.mockito:mockito-bom from 5.23.0 to 5.24.0

Release notes

Sourced from org.mockito:mockito-bom's releases.

v5.24.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.24.0

Commits
  • 5a2f0f8 Fix Mockito docs for -javaagent flag with Gradle (#3866)
  • 9c5f36f Bump graalvm/setup-graalvm from 1.6.3 to 1.6.6 (#3862)
  • e7fd06d Preserve method parameters when clearing inline mocks (#3847)
  • 5a676bc Bump gradle/actions from 6.2.0 to 6.3.0 (#3852)
  • 508f8e7 Bump gradle/actions from 5 to 6.2.0 (#3851)
  • ee8a330 Print object fields via reflection when toString() is not implemented (#3844)
  • 39b1aba Bump graalvm/setup-graalvm from 1.6.0 to 1.6.3 (#3845)
  • d8638e1 Migrate extensions-tests to JUnit Jupiter (#3840)
  • 0aab922 Bump graalvm/setup-graalvm from 1.5.6 to 1.6.0 (#3839)
  • f3cf74c docs(when-verify): fixes to explanations about redundancy (#3838)
  • Additional commits viewable in compare view

Updates org.mockito:mockito-core from 5.23.0 to 5.24.0

Release notes

Sourced from org.mockito:mockito-core's releases.

v5.24.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.24.0

Commits
  • 5a2f0f8 Fix Mockito docs for -javaagent flag with Gradle (#3866)
  • 9c5f36f Bump graalvm/setup-graalvm from 1.6.3 to 1.6.6 (#3862)
  • e7fd06d Preserve method parameters when clearing inline mocks (#3847)
  • 5a676bc Bump gradle/actions from 6.2.0 to 6.3.0 (#3852)
  • 508f8e7 Bump gradle/actions from 5 to 6.2.0 (#3851)
  • ee8a330 Print object fields via reflection when toString() is not implemented (#3844)
  • 39b1aba Bump graalvm/setup-graalvm from 1.6.0 to 1.6.3 (#3845)
  • d8638e1 Migrate extensions-tests to JUnit Jupiter (#3840)
  • 0aab922 Bump graalvm/setup-graalvm from 1.5.6 to 1.6.0 (#3839)
  • f3cf74c docs(when-verify): fixes to explanations about redundancy (#3838)
  • Additional commits viewable in compare view

Updates org.mockito:mockito-junit-jupiter from 5.23.0 to 5.24.0

Release notes

Sourced from org.mockito:mockito-junit-jupiter's releases.

v5.24.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.24.0

Commits
  • 5a2f0f8 Fix Mockito docs for -javaagent flag with Gradle (#3866)
  • 9c5f36f Bump graalvm/setup-graalvm from 1.6.3 to 1.6.6 (#3862)
  • e7fd06d Preserve method parameters when clearing inline mocks (#3847)
  • 5a676bc Bump gradle/actions from 6.2.0 to 6.3.0 (#3852)
  • 508f8e7 Bump gradle/actions from 5 to 6.2.0 (#3851)
  • ee8a330 Print object fields via reflection when toString() is not implemented (#3844)
  • 39b1aba Bump graalvm/setup-graalvm from 1.6.0 to 1.6.3 (#3845)
  • d8638e1 Migrate extensions-tests to JUnit Jupiter (#3840)
  • 0aab922 Bump graalvm/setup-graalvm from 1.5.6 to 1.6.0 (#3839)
  • f3cf74c docs(when-verify): fixes to explanations about redundancy (#3838)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
build(deps): bump mockito.version from 5.23.0 to 5.24.0
3d2a688 
Bumps `mockito.version` from 5.23.0 to 5.24.0.

Updates `org.mockito:mockito-bom` from 5.23.0 to 5.24.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.23.0...v5.24.0)

Updates `org.mockito:mockito-core` from 5.23.0 to 5.24.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.23.0...v5.24.0)

Updates `org.mockito:mockito-junit-jupiter` from 5.23.0 to 5.24.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.23.0...v5.24.0)

---
updated-dependencies:
- dependency-name: org.mockito:mockito-bom
  dependency-version: 5.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.mockito:mockito-core
  dependency-version: 5.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.mockito:mockito-junit-jupiter
  dependency-version: 5.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 7, 2026
FrankChen021
FrankChen021 approved these changes Oct 8, 2026
View reviewed changes

@FrankChen021 FrankChen021 left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is an automated review by Codex GPT-5.6 Luna(Max).

Compatibility analysis

Verdict: SAFE for Apache Druid. The PR changes only the root mockito.version property in pom.xml from 5.23.0 to 5.24.0, which feeds the imported org.mockito:mockito-bom and the explicit Mockito test dependencies. The complete published path is 5.23.0 (published 2026-03-11, tag commit a231205b240e7884a63bf0f63440012867a4da21) -> 5.24.0 (published 2026-09-23, tag commit 5a2f0f81cdafc9b34ddb4520db7f8866c787dac0); Maven Central metadata contains no published 5.23.x release between them. Evidence: 5.23.0 release, 5.24.0 release, complete upstream comparison, and Maven Central version metadata.

The 5.23.0 transition has no Druid-relevant artifact or API change beyond the already-used Mockito 5 line; its published Android breaking note applies to mockito-android, which Druid does not declare. The 5.24.0 target adds spyStatic, @Spy(mockMaker=...), static-initializer suppression for Java-agent users, diagnostic printing improvements, and concurrency/inline-mock fixes. Existing Mockito methods used by Druid (mock, spy, when, verify, doReturn, doAnswer, doThrow, withSettings, mockStatic, verification modes, and clearInvocations) remain present. The published class inventory has no removals; org.mockito.internal.util.collections.Sets, the one internal Mockito class imported by Druid tests, remains present and unchanged.

API/ABI evidence: 5.24.0 only parameterizes existing generic signatures in MockMaker, MockingDetails, InvocationFactory, and MockCreationListener, preserving JVM erasure, and adds a default listener method. Druid has no implementation or use of those extension interfaces. Runtime evidence: both Mockito core POMs retain byte-buddy and byte-buddy-agent 1.17.7 plus Objenesis 3.3 upstream; Druid's dependency management resolves the same effective test graph in both source and target checks (byte-buddy/agent 1.18.14 and objenesis 3.6). Configuration evidence: no Druid configuration, JVM agent, or mockito.suppress.clinit setting changes. Serialization/wire/persistence and client evidence: Mockito is not used by Druid production sources and does not participate in Druid data formats, network protocols, persistence, or client APIs. License evidence: the published BOM, core, and JUnit Jupiter POMs retain the same MIT license metadata in both releases. Extension/plugin SPI evidence: no Druid Mockito plugin implementation or Mockito service descriptor exists; the only internal-package use is the unchanged test helper noted above.

Druid impact

The changed file is pom.xml:126; the managed BOM import is at pom.xml:1334-1338. The property is consumed by 26 Druid module POMs with Mockito declarations (plus the root POM), including processing, server, indexing-service, multi-stage-query, sql, services, jdbc-driver, quidem-ut, core extensions, and contrib extensions. Repository inspection found 228 Java test files importing Mockito and 263 Java test files using Mockito APIs, with no matching production src/main Java source. The representative higher-risk call sites are the four Mockito.mockStatic uses in processing/src/test/java/org/apache/druid/utils/ConnectionUriUtilsTest.java:127,143,164,179 and Sets.newSet in extensions-core/kubernetes-overlord-extensions/src/test/java/org/apache/druid/k8s/overlord/taskadapter/DynamicConfigPodTemplateSelectorTest.java:207,277; both use APIs/classes retained by 5.24.0. All direct declarations are test-scoped except the pre-existing scope-less quidem-ut declaration; that module has no Mockito source reference, and the version-only change does not alter its Druid runtime behavior or published coordinates.

Validation

git diff --check 131989817271bc836e815db738cc2be33fba3538..3d2a688b02a2bae20e779a265968378912b12717 passed, and the complete PR diff is one insertion/one deletion in pom.xml. Maven dependency-tree validation succeeded for processing with the target property and with -Dmockito.version=5.23.0; both resolved the same Druid-managed Byte Buddy/Objenesis graph and only changed Mockito core/JUnit Jupiter/BOM coordinates from 5.23.0 to 5.24.0. Public javap comparison of the published core artifacts found no removed Druid-used methods/classes, and the internal Sets helper is present in both jars.

CI gate

Final gate must match head 3d2a688b02a2bae20e779a265968378912b12717 against base 131989817271bc836e815db738cc2be33fba3538, with MERGEABLE and CLEAN. The complete paginated rollup contains exactly 27 CheckRuns and 0 StatusContexts: 27/27 CheckRuns are COMPLETED with SUCCESS, with 0 pending, failure, cancelled, skipped, neutral, or missing conclusions. The successful CheckRuns cover Analyze (java/javascript/python), Conventional Commit title validation, triage, packaging-check JDK25, static-checks-maven, strict-compilation, OpenRewrite, web checks, Docker tests, CodeQL, actions-timeline, JaCoCo coverage, all four QTest splits, and all nine JDK25 unit-test shards. No review or unresolved review thread was present before this approval.

Automation actions

This review approves only the exact head after the final live re-fetch. No bounded repair or external CI rerun was needed, no shared automation queue was modified, and no merge action was performed.

No merge was performed.

@FrankChen021
FrankChen021 merged commit f69e118 into master Oct 8, 2026
27 checks passed
@dependabot
dependabot Bot deleted the dependabot/maven/mockito.version-5.24.0 branch October 8, 2026 11:46
@github-actions github-actions Bot added this to the 39.0.0 milestone Oct 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@FrankChen021 FrankChen021 FrankChen021 approved these changes

Assignees

No one assigned

Labels

Area - Dependencies dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

39.0.0

Development

Successfully merging this pull request may close these issues.

1 participant

@FrankChen021