Skip to content

chore(deps): bump the production-minor-patch group across 1 directory with 13 updates#199

Merged
tiana-code merged 2 commits into
mainfrom
dependabot/gradle/production-minor-patch-161ed69daf
Jun 20, 2026
Merged

chore(deps): bump the production-minor-patch group across 1 directory with 13 updates#199
tiana-code merged 2 commits into
mainfrom
dependabot/gradle/production-minor-patch-161ed69daf

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the production-minor-patch group with 13 updates in the / directory:

Package From To
org.postgresql:postgresql 42.7.4 42.7.11
com.fasterxml.jackson.module:jackson-module-kotlin 2.18.3 2.22.0
com.fasterxml.jackson.core:jackson-databind 2.18.3 2.22.0
com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.18.3 2.22.0
com.github.f4b6a3:ulid-creator 5.2.3 5.2.4
io.cloudevents:cloudevents-api 4.0.1 4.1.1
io.cloudevents:cloudevents-core 4.0.1 4.1.1
io.cloudevents:cloudevents-json-jackson 4.0.1 4.1.1
org.testcontainers:testcontainers 1.20.4 1.21.4
org.testcontainers:postgresql 1.20.4 1.21.4
org.testcontainers:redpanda 1.20.4 1.21.4
org.testcontainers:junit-jupiter 1.20.4 1.21.4
io.mockk:mockk 1.13.13 1.14.11

Updates org.postgresql:postgresql from 42.7.4 to 42.7.11

Release notes

Sourced from org.postgresql:postgresql's releases.

v42.7.11

Security

  • fix: Limit SCRAM PBKDF2 iterations accepted from the server. pgjdbc was vulnerable to a client-side denial of service in SCRAM-SHA-256 authentication, where a malicious or compromised PostgreSQL server could specify an extremely large PBKDF2 iteration count, causing the client to consume unbounded CPU and potentially exhaust connection pools. The fix introduces a new scramMaxIterations connection property (defaulting to 100,000) to cap iteration counts before computation begins. See the Security Advisory for more detail. The following CVE-2026-42198 has been issued.

Changes

🐛 Bug Fixes

  • fix: ensure extended protocol messages end with Sync message @​vlsi (#3728)
  • fix: enable cursor-based fetching in extended protocol when transaction started via SQL command @​vlsi (#3996)
  • fix: retry with SSL on IOException when sslMode=ALLOW @​vlsi (#3973)
  • fix: allow fallback to non-SSL connection when sslMode=prefer and sslResponseTimeout kicks in @​vlsi (#3968)
  • fix: catch SecurityException from setContextClassLoader on ForkJoinPool workers @​vlsi (#3962)
  • fix: use compareTo for LogSequenceNumber comparison @​vlsi (#3961)
  • fix: release COPY lock on IOException to prevent connection hang (#3957) @​vlsi (#3960)

🧰 Maintenance

⬆️ Dependencies

... (truncated)

Changelog

Sourced from org.postgresql:postgresql's changelog.

[42.7.11] (2026-04-28)

Security

  • fix: Limit SCRAM PBKDF2 iterations accepted from the server. pgjdbc was vulnerable to a client-side denial of service in SCRAM-SHA-256 authentication, where a malicious or compromised PostgreSQL server could specify an extremely large PBKDF2 iteration count, causing the client to consume unbounded CPU and potentially exhaust connection pools. The fix introduces a new scramMaxIterations connection property (defaulting to 100,000) to cap iteration counts before computation begins. See the Security Advisory for more detail. The following CVE-2026-42198 has been issued.

Added

Changed

Fixed

[42.7.10] (2026-02-11)

Changed

Fixed

Reverted

[42.7.9] (2026-01-14)

Added

... (truncated)

Commits
  • 78e261f fix: Add sources and javadocs to shaded published lib generation
  • 1e09fa0 update Changelog and website for release of 42.7.11 (#4042)
  • d479fa5 Fix scram fix location in changelog and update published artifact developer l...
  • b04fc46 docs: Add scram max iters fix to changelog
  • cf54822 test: Disable scram test on older version without scram_iterations GUC
  • 7dbcc79 test: Add SCRAM max iteration tests
  • c9d41d1 fix: Limit SCRAM PBKDF2 iterations accepted from the server
  • a340cb2 style: replace @​exception with @​throws in getBoolean javadoc
  • 77837f8 fix(deps): update dependency org.openrewrite.rewrite:org.openrewrite.rewrite....
  • 23af03b chore(deps): update actions/checkout action to v6
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.module:jackson-module-kotlin from 2.18.3 to 2.22.0

Commits
  • c0d7f48 [maven-release-plugin] prepare release jackson-module-kotlin-2.22.0
  • 5ce5800 Prep for 2.22.0 release
  • b92e1ab Merge branch '2.21' into 2.x
  • 753796e Post-release dep version bump
  • ae3ed35 [maven-release-plugin] prepare for next development iteration
  • d1e079e [maven-release-plugin] prepare release jackson-module-kotlin-2.21.4
  • 77295a2 Prep for 2.21.4 release
  • 3ef400e Merge branch '2.20' into 2.21
  • 609b375 Merge branch '2.19' into 2.20
  • c623e25 Merge branch '2.18' into 2.19
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.18.3 to 2.22.0

Commits

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.18.3 to 2.22.0

Updates com.fasterxml.jackson.core:jackson-databind from 2.18.3 to 2.22.0

Commits

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.18.3 to 2.22.0

Updates com.github.f4b6a3:ulid-creator from 5.2.3 to 5.2.4

Changelog

Sourced from com.github.f4b6a3:ulid-creator's changelog.

[5.2.4] - 2026-02-21

  • Change UlidCreator to use thread-safe lazy initialization and to be more friendly with GraalVM native compilation. #36
  • use new release mechanism, see this blog post.
Commits
  • 46f015a [maven-release-plugin] prepare release ulid-creator-5.2.4
  • 19c9a52 Update pom.xml
  • 5721cc4 Update docs
  • 7894092 Change UlidCreator to use thread-safe lazy initialization
  • 7335848 Add maven wrapper
  • 6b06c5c cleanup
  • 672d553 Merge pull request #38 from moxim/master
  • 31f78ab prepare for new release mechanism
  • 1b82480 Update pom.xml
  • 477d5dc [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates io.cloudevents:cloudevents-api from 4.0.1 to 4.1.1

Release notes

Sourced from io.cloudevents:cloudevents-api's releases.

v4.1.1

What's Changed

Full Changelog: cloudevents/sdk-java@v4.1.0...v4.1.1

v4.1.0

Note: 4.1 is the last planned Y stream to support Java 8. We will be doing a series of major version bumps as well as base Java version bump in 5.0

What's Changed

New Contributors

Full Changelog: cloudevents/sdk-java@v4.0.2...v4.1.0

v4.0.2

What's Changed

... (truncated)

Commits

Updates io.cloudevents:cloudevents-core from 4.0.1 to 4.1.1

Release notes

Sourced from io.cloudevents:cloudevents-core's releases.

v4.1.1

What's Changed

Full Changelog: cloudevents/sdk-java@v4.1.0...v4.1.1

v4.1.0

Note: 4.1 is the last planned Y stream to support Java 8. We will be doing a series of major version bumps as well as base Java version bump in 5.0

What's Changed

New Contributors

Full Changelog: cloudevents/sdk-java@v4.0.2...v4.1.0

v4.0.2

What's Changed

... (truncated)

Commits

Updates io.cloudevents:cloudevents-json-jackson from 4.0.1 to 4.1.1

Updates io.cloudevents:cloudevents-core from 4.0.1 to 4.1.1

Release notes

Sourced from io.cloudevents:cloudevents-core's releases.

v4.1.1

What's Changed

Full Changelog: cloudevents/sdk-java@v4.1.0...v4.1.1

v4.1.0

Note: 4.1 is the last planned Y stream to support Java 8. We will be doing a series of major version bumps as well as base Java version bump in 5.0

What's Changed

New Contributors

Full Changelog: cloudevents/sdk-java@v4.0.2...v4.1.0

v4.0.2

What's Changed

... (truncated)

Commits

Updates io.cloudevents:cloudevents-json-jackson from 4.0.1 to 4.1.1

Updates org.testcontainers:testcontainers from 1.20.4 to 1.21.4

Release notes

Sourced from org.testcontainers:testcontainers's releases.

1.21.4

This release makes version 1.21.x works with recent Docker Engine changes.

1.21.3

What's Changed

1.21.2

What's Changed

📖 Documentation

📦 Dependency updates

1.21.1

What's Changed

🚀 Features & Enhancements

🐛 Bug Fixes

  • Use generic init script filename when copying it into a Cassandra container (#9606) @​maximevw

📖 Documentation

📦 Dependency updates

... (truncated)

Commits
  • d509c81 Set version during jreleaserDeploy task
  • efa40ce Allow junit:junit dependency in checkPOMdependencies
  • 76b1364 Add JReleaser to deploy to Portal Publisher API
  • d6b6ff7 Fix compatibility with older Docker Engines by falling back to v1.32 (#11346)
  • bebbb2c Update testcontainers/sshd version to 1.3.0 (#10377)
  • 2f64a44 Support docker/mcp-gateway image (#10378)
  • b2b404a [create-pull-request] automated change (#10369)
  • c47afa8 [create-pull-request] automated change (#10368)
    • <...

    Description has been truncated

@dependabot dependabot Bot added area:infra Build, CI/CD, Gradle, Docker, Helm dependencies Dependency update (managed by Dependabot) labels Jun 18, 2026
@dependabot
dependabot Bot requested a review from tiana-code as a code owner June 18, 2026 02:02
@dependabot dependabot Bot added dependencies Dependency update (managed by Dependabot) area:infra Build, CI/CD, Gradle, Docker, Helm labels Jun 18, 2026
@tiana-code

tiana-code commented Jun 20, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot
chore(deps): bump the production-minor-patch group across 1 directory…
10b0765 
… with 13 updates

Bumps the production-minor-patch group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) | `42.7.4` | `42.7.11` |
| [com.fasterxml.jackson.module:jackson-module-kotlin](https://github.com/FasterXML/jackson-module-kotlin) | `2.18.3` | `2.22.0` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.18.3` | `2.22.0` |
| com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.18.3` | `2.22.0` |
| [com.github.f4b6a3:ulid-creator](https://github.com/f4b6a3/ulid-creator) | `5.2.3` | `5.2.4` |
| [io.cloudevents:cloudevents-api](https://github.com/cloudevents/sdk-java) | `4.0.1` | `4.1.1` |
| [io.cloudevents:cloudevents-core](https://github.com/cloudevents/sdk-java) | `4.0.1` | `4.1.1` |
| io.cloudevents:cloudevents-json-jackson | `4.0.1` | `4.1.1` |
| [org.testcontainers:testcontainers](https://github.com/testcontainers/testcontainers-java) | `1.20.4` | `1.21.4` |
| [org.testcontainers:postgresql](https://github.com/testcontainers/testcontainers-java) | `1.20.4` | `1.21.4` |
| [org.testcontainers:redpanda](https://github.com/testcontainers/testcontainers-java) | `1.20.4` | `1.21.4` |
| [org.testcontainers:junit-jupiter](https://github.com/testcontainers/testcontainers-java) | `1.20.4` | `1.21.4` |
| [io.mockk:mockk](https://github.com/mockk/mockk) | `1.13.13` | `1.14.11` |



Updates `org.postgresql:postgresql` from 42.7.4 to 42.7.11
- [Release notes](https://github.com/pgjdbc/pgjdbc/releases)
- [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md)
- [Commits](pgjdbc/pgjdbc@REL42.7.4...REL42.7.11)

Updates `com.fasterxml.jackson.module:jackson-module-kotlin` from 2.18.3 to 2.22.0
- [Commits](FasterXML/jackson-module-kotlin@jackson-module-kotlin-2.18.3...jackson-module-kotlin-2.22.0)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.3 to 2.22.0
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.18.3 to 2.22.0

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.3 to 2.22.0
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.18.3 to 2.22.0

Updates `com.github.f4b6a3:ulid-creator` from 5.2.3 to 5.2.4
- [Release notes](https://github.com/f4b6a3/ulid-creator/releases)
- [Changelog](https://github.com/f4b6a3/ulid-creator/blob/master/CHANGELOG.md)
- [Commits](f4b6a3/ulid-creator@ulid-creator-5.2.3...ulid-creator-5.2.4)

Updates `io.cloudevents:cloudevents-api` from 4.0.1 to 4.1.1
- [Release notes](https://github.com/cloudevents/sdk-java/releases)
- [Commits](cloudevents/sdk-java@v4.0.1...v4.1.1)

Updates `io.cloudevents:cloudevents-core` from 4.0.1 to 4.1.1
- [Release notes](https://github.com/cloudevents/sdk-java/releases)
- [Commits](cloudevents/sdk-java@v4.0.1...v4.1.1)

Updates `io.cloudevents:cloudevents-json-jackson` from 4.0.1 to 4.1.1

Updates `io.cloudevents:cloudevents-core` from 4.0.1 to 4.1.1
- [Release notes](https://github.com/cloudevents/sdk-java/releases)
- [Commits](cloudevents/sdk-java@v4.0.1...v4.1.1)

Updates `io.cloudevents:cloudevents-json-jackson` from 4.0.1 to 4.1.1

Updates `org.testcontainers:testcontainers` from 1.20.4 to 1.21.4
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.20.4...1.21.4)

Updates `org.testcontainers:postgresql` from 1.20.4 to 1.21.4
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.20.4...1.21.4)

Updates `org.testcontainers:redpanda` from 1.20.4 to 1.21.4
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.20.4...1.21.4)

Updates `org.testcontainers:junit-jupiter` from 1.20.4 to 1.21.4
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.20.4...1.21.4)

Updates `org.testcontainers:redpanda` from 1.20.4 to 1.21.4
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.20.4...1.21.4)

Updates `org.testcontainers:junit-jupiter` from 1.20.4 to 1.21.4
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.20.4...1.21.4)

Updates `io.mockk:mockk` from 1.13.13 to 1.14.11
- [Release notes](https://github.com/mockk/mockk/releases)
- [Commits](mockk/mockk@1.13.13...v1.14.11)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: com.fasterxml.jackson.module:jackson-module-kotlin
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: com.github.f4b6a3:ulid-creator
  dependency-version: 5.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: io.cloudevents:cloudevents-api
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: io.cloudevents:cloudevents-core
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: io.cloudevents:cloudevents-core
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: io.cloudevents:cloudevents-json-jackson
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: io.cloudevents:cloudevents-json-jackson
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: io.mockk:mockk
  dependency-version: 1.14.11
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: org.postgresql:postgresql
  dependency-version: 42.7.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: org.testcontainers:junit-jupiter
  dependency-version: 1.21.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: org.testcontainers:junit-jupiter
  dependency-version: 1.21.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: org.testcontainers:postgresql
  dependency-version: 1.21.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: org.testcontainers:redpanda
  dependency-version: 1.21.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: org.testcontainers:redpanda
  dependency-version: 1.21.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: org.testcontainers:testcontainers
  dependency-version: 1.21.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/gradle/production-minor-patch-161ed69daf branch from 66e30f6 to 10b0765 Compare June 20, 2026 15:30
@tanya_r
build(deps): hold mockk at 1.13.13 to keep Kotlin 2.0.21 alignment
4d432a4 
mockk 1.14.x pulls kotlin-stdlib 2.2, whose metadata the pinned Kotlin
2.0.21 compiler rejects. Keep the rest of the group bump (postgres-jdbc,
testcontainers, jackson, ulid, cloudevents) and revisit mockk with the
next Kotlin upgrade.
@tiana-code

tiana-code commented Jun 20, 2026

Copy link
Copy Markdown
Owner

Held mockk at 1.13.13: mockk 1.14.x pulls kotlin-stdlib 2.2, which the pinned Kotlin 2.0.21 compiler rejects (metadata 2.2.0 vs expected 2.0.0). The other bumps in the group are kept. mockk can move with the next Kotlin upgrade.

@tiana-code
tiana-code merged commit 535efc8 into main Jun 20, 2026
8 checks passed
@dependabot
dependabot Bot deleted the dependabot/gradle/production-minor-patch-161ed69daf branch June 20, 2026 15:56
@tiana-code tiana-code mentioned this pull request Jun 28, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@tiana-code tiana-code Awaiting requested review from tiana-code tiana-code is a code owner

Assignees

No one assigned

Labels

area:infra Build, CI/CD, Gradle, Docker, Helm dependencies Dependency update (managed by Dependabot)

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@tiana-code