chore(deps): bump the production-minor-patch group across 1 directory with 15 updates by dependabot[bot] · Pull Request #96 · tiana-code/fincore-engine

dependabot · 2026-06-08T04:22:20Z

Bumps the production-minor-patch group with 15 updates in the / directory:

Package	From	To
org.postgresql:postgresql	`42.7.4`	`42.7.11`
com.fasterxml.jackson.module:jackson-module-kotlin	`2.18.3`	`2.22.0`
com.fasterxml.jackson.core:jackson-databind	`2.18.3`	`2.22.0`
com.github.f4b6a3:ulid-creator	`5.2.3`	`5.2.4`
io.cloudevents:cloudevents-api	`4.0.1`	`4.1.1`
io.cloudevents:cloudevents-core	`4.0.1`	`4.1.1`
io.cloudevents:cloudevents-json-jackson	`4.0.1`	`4.1.1`
io.micrometer:micrometer-core	`1.13.7`	`1.17.0`
io.micrometer:micrometer-registry-prometheus	`1.13.7`	`1.17.0`
io.opentelemetry:opentelemetry-api	`1.41.0`	`1.63.0`
org.testcontainers:testcontainers	`1.20.4`	`1.21.4`
org.testcontainers:postgresql	`1.20.4`	`1.21.4`
org.testcontainers:redpanda	`1.20.4`	`1.21.4`
org.testcontainers:junit-jupiter	`1.20.4`	`1.21.4`
io.mockk:mockk	`1.13.13`	`1.14.11`

Updates org.postgresql:postgresql from 42.7.4 to 42.7.11

Release notes

Sourced from org.postgresql:postgresql's releases.

v42.7.11

Security

fix: Limit SCRAM PBKDF2 iterations accepted from the server. pgjdbc was vulnerable to a client-side denial of service in SCRAM-SHA-256 authentication, where a malicious or compromised PostgreSQL server could specify an extremely large PBKDF2 iteration count, causing the client to consume unbounded CPU and potentially exhaust connection pools. The fix introduces a new scramMaxIterations connection property (defaulting to 100,000) to cap iteration counts before computation begins. See the Security Advisory for more detail. The following CVE-2026-42198 has been issued.

Changes

fix: Add sources and javadocs to shaded published lib generation @sehrope (#4043)

update Changelog and website for release of 42.7.11 @davecramer (#4042)

Fix scram fix location in changelog and update published artifact developer list @sehrope (#4041)

Restrict test with scram_iterations to v16+ and release notes @sehrope (#4040)

chore(deps): update ubuntu:24.04 docker digest to 84e77de @renovate-bot (#4017)

test: add tests for QueryExecutor#getTransactionState @vlsi (#4006)

chore(deps): update actions/create-github-app-token action to v2.2.2 @renovate-bot (#3983)

fix: fix flaky CopyBothResponseTest by using WAL flush LSN @vlsi (#3979)

fix: fix flaky replication restart tests by waiting for confirmed_flush_lsn @vlsi (#3975)

test: fix flaky LogicalReplicationStatusTest by polling pg_stat_replication @vlsi (#3974)

chore: replace Appveyor with ikalnytskyi/action-setup-postgres @vlsi (#3966)

test: move test table creation from @BeforeEach to @BeforeAll @vlsi (#3967)

Return jsonb as PGObject fixes Issue #3926 @davecramer (#3956)

Update docker scripts @davecramer (#3958)

implement require_auth, this is pretty much how libpq does this. @davecramer (#3895)

docs: add SCRAM authentication test setup section to TESTING.md @emmaeng700 (#3945)

Add RequireServerVersion annotation for tests @sehrope (#3939)

🐛 Bug Fixes

fix: ensure extended protocol messages end with Sync message @vlsi (#3728)

fix: enable cursor-based fetching in extended protocol when transaction started via SQL command @vlsi (#3996)

fix: retry with SSL on IOException when sslMode=ALLOW @vlsi (#3973)

fix: allow fallback to non-SSL connection when sslMode=prefer and sslResponseTimeout kicks in @vlsi (#3968)

fix: catch SecurityException from setContextClassLoader on ForkJoinPool workers @vlsi (#3962)

fix: use compareTo for LogSequenceNumber comparison @vlsi (#3961)

fix: release COPY lock on IOException to prevent connection hang (#3957) @vlsi (#3960)

🧰 Maintenance

style: replace @exception with @throws in getBoolean javadoc @vlsi (#4035)

chore: use @vlsi/github-actions-random-matrix npm package @vlsi (#4008)

chore: use tag names for pinning github actions, pin ikalnytskyi/action-setup-postgres @vlsi (#4007)

chore: bump errorprone to 2.48.0 @vlsi (#4005)

test: add @DisableLogger annotation to suppress expected log warnings in tests @vlsi (#3971)

chore: suppress deprecations in test code to reduce build verbosity @vlsi (#3972)

chore: replace log warning in ConnectionFactory.closeStream with Throwable.addSuppressed @vlsi (#3970)

chore: use greedy pairwise coverage for CI matrix generation @vlsi (#3965)

chore: use full version tags in GitHub Actions comments @vlsi (#3963)

⬆️ Dependencies

... (truncated)

Changelog

Sourced from org.postgresql:postgresql's changelog.

[42.7.11] (2026-04-28)

Security

fix: Limit SCRAM PBKDF2 iterations accepted from the server. pgjdbc was vulnerable to a client-side denial of service in SCRAM-SHA-256 authentication, where a malicious or compromised PostgreSQL server could specify an extremely large PBKDF2 iteration count, causing the client to consume unbounded CPU and potentially exhaust connection pools. The fix introduces a new scramMaxIterations connection property (defaulting to 100,000) to cap iteration counts before computation begins. See the Security Advisory for more detail. The following CVE-2026-42198 has been issued.

Added

feat: implement require_auth connection property, aligning with libpq behavior [PR #3895](pgjdbc/pgjdbc#3895)

Changed

chore: replace Appveyor CI with ikalnytskyi/action-setup-postgres [PR #3966](pgjdbc/pgjdbc#3966)

chore: upgrade Gradle to v9 [PR #3978](pgjdbc/pgjdbc#3978)

Fixed

fix: ensure extended protocol messages end with Sync message [PR #3728](pgjdbc/pgjdbc#3728)

fix: enable cursor-based fetching in extended protocol when transaction started via SQL command [PR #3996](pgjdbc/pgjdbc#3996)

fix: retry with SSL on IOException when sslMode=ALLOW [PR #3973](pgjdbc/pgjdbc#3973)

fix: make sure the driver honours connectTimeout when retrying the connection [PR #3968](pgjdbc/pgjdbc#3968)

fix: allow fallback to non-SSL connection when sslMode=prefer and sslResponseTimeout kicks in [PR #3968](pgjdbc/pgjdbc#3968)

fix: catch SecurityException from setContextClassLoader on ForkJoinPool workers [PR #3962](pgjdbc/pgjdbc#3962)

fix: use compareTo for LogSequenceNumber comparison to handle unsigned values correctly [PR #3961](pgjdbc/pgjdbc#3961)

fix: release COPY lock on IOException to prevent connection hang [PR #3957](pgjdbc/pgjdbc#3957)

fix: return jsonb as PGObject instead of String [PR #3956](pgjdbc/pgjdbc#3956)

fix: align SSL key file permission check with libpq [PR #3952](pgjdbc/pgjdbc#3952)

fix: guard connection closed flag with a reentrant lock to protect against concurrent close [PR #3905](pgjdbc/pgjdbc#3905)

[42.7.10] (2026-02-11)

Changed

chore: Migrate to Shadow 9 PR 3931

style: fix empty line before javadoc for checkstyle compliance [PR #3925](pgjdbc/pgjdbc#3925)

style: fix lambda argument indentation for checkstyle compliance [PR #3922](pgjdbc/pgjdbc#3922)

test: add autosave=always|never|conservative and cleanupSavepoints=true|false to the randomized CI jobs [PR #3917](pgjdbc/pgjdbc#3917)

Fixed

fix: non-standard strings failing test for version 19 [PR #3934](pgjdbc/pgjdbc#3934)

fix: small issues in ConnectionFactoryImpl [PR #3929](pgjdbc/pgjdbc#3929)

fix: process pending responses before fastpath to avoid protocol errors PR # 3913

doc: use.md, fix typos [PR #3911](pgjdbc/pgjdbc#3911)

doc: datasource.md, fix minor formatting issue [PR #3912](pgjdbc/pgjdbc#3912)

doc: add the new PGP signing key to the official documentation [PR #3912](pgjdbc/pgjdbc#3813)

Reverted

Revert "fix: make all Calendar instances proleptic Gregorian (#3837) (#3887)" [PR #3932](pgjdbc/pgjdbc#3932)

[42.7.9] (2026-01-14)

Added

... (truncated)

Commits

78e261f fix: Add sources and javadocs to shaded published lib generation
1e09fa0 update Changelog and website for release of 42.7.11 (#4042)
d479fa5 Fix scram fix location in changelog and update published artifact developer l...
b04fc46 docs: Add scram max iters fix to changelog
cf54822 test: Disable scram test on older version without scram_iterations GUC
7dbcc79 test: Add SCRAM max iteration tests
c9d41d1 fix: Limit SCRAM PBKDF2 iterations accepted from the server
a340cb2 style: replace @exception with @throws in getBoolean javadoc
77837f8 fix(deps): update dependency org.openrewrite.rewrite:org.openrewrite.rewrite....
23af03b chore(deps): update actions/checkout action to v6
Additional commits viewable in compare view

Updates com.fasterxml.jackson.module:jackson-module-kotlin from 2.18.3 to 2.22.0

Commits

c0d7f48 [maven-release-plugin] prepare release jackson-module-kotlin-2.22.0
5ce5800 Prep for 2.22.0 release
b92e1ab Merge branch '2.21' into 2.x
753796e Post-release dep version bump
ae3ed35 [maven-release-plugin] prepare for next development iteration
d1e079e [maven-release-plugin] prepare release jackson-module-kotlin-2.21.4
77295a2 Prep for 2.21.4 release
3ef400e Merge branch '2.20' into 2.21
609b375 Merge branch '2.19' into 2.20
c623e25 Merge branch '2.18' into 2.19
Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.18.3 to 2.22.0

Commits

See full diff in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.18.3 to 2.22.0

Commits

See full diff in compare view

Updates com.github.f4b6a3:ulid-creator from 5.2.3 to 5.2.4

Changelog

Sourced from com.github.f4b6a3:ulid-creator's changelog.

[5.2.4] - 2026-02-21

Change UlidCreator to use thread-safe lazy initialization and to be more friendly with GraalVM native compilation. #36

use new release mechanism, see this blog post.

Commits

46f015a [maven-release-plugin] prepare release ulid-creator-5.2.4
19c9a52 Update pom.xml
5721cc4 Update docs
7894092 Change UlidCreator to use thread-safe lazy initialization
7335848 Add maven wrapper
6b06c5c cleanup
672d553 Merge pull request #38 from moxim/master
31f78ab prepare for new release mechanism
1b82480 Update pom.xml
477d5dc [maven-release-plugin] prepare for next development iteration
See full diff in compare view

Updates io.cloudevents:cloudevents-api from 4.0.1 to 4.1.1

Release notes

Sourced from io.cloudevents:cloudevents-api's releases.

v4.1.1

What's Changed

[Release] Bump to 4.1.1-SNAPSHOT by @github-actions[bot] in cloudevents/sdk-java#734

Cleanups before Java 17 by @jacekbilski in cloudevents/sdk-java#735

[Release] Bump to 4.1.1 by @github-actions[bot] in cloudevents/sdk-java#737

Full Changelog: cloudevents/sdk-java@v4.1.0...v4.1.1

v4.1.0

Note: 4.1 is the last planned Y stream to support Java 8. We will be doing a series of major version bumps as well as base Java version bump in 5.0

What's Changed

[Release] Bump to 4.1.0-SNAPSHOT by @github-actions[bot] in cloudevents/sdk-java#727

Deprecating to Jakarta EE 8 by @jacekbilski in cloudevents/sdk-java#732

[Release] Bump to 4.1.0 by @github-actions[bot] in cloudevents/sdk-java#733

New Contributors

@jacekbilski made their first contribution in cloudevents/sdk-java#732

Full Changelog: cloudevents/sdk-java@v4.0.2...v4.1.0

v4.0.2

What's Changed

[Release] Bump to 4.1.0-SNAPSHOT by @github-actions[bot] in cloudevents/sdk-java#645

Allow bumping versions in /docs only by @pierDipi in cloudevents/sdk-java#648

[Release] Bump to 4.0.0 by @github-actions[bot] in cloudevents/sdk-java#649

Make CloudEventValidatorProvider thread safe by @pierDipi in cloudevents/sdk-java#650

Bump org.apache.rocketmq:rocketmq-client-java from 5.0.4 to 5.0.7 by @dependabot[bot] in cloudevents/sdk-java#653

Fix cloudevents-sql artifactId in bom by @dsimansk in cloudevents/sdk-java#669

Bump org.apache.maven.plugins:maven-install-plugin from 2.5.1 to 3.1.3 by @dependabot[bot] in cloudevents/sdk-java#664

docs: correcting import to EventFormatProvider by @rohanrmallya in cloudevents/sdk-java#658

[Release] Bump to 4.0.1 by @github-actions[bot] in cloudevents/sdk-java#656

Bump org.apache.avro:avro from 1.11.3 to 1.11.4 in /formats/avro-compact by @dependabot[bot] in cloudevents/sdk-java#671

Bump org.eclipse.jetty:jetty-server from 9.4.51.v20230217 to 9.4.55.v20240627 in /examples/basic-http by @dependabot[bot] in cloudevents/sdk-java#672

Bump rexml from 3.2.8 to 3.3.6 in /docs by @dependabot[bot] in cloudevents/sdk-java#665

Bump rexml from 3.3.6 to 3.3.9 in /docs by @dependabot[bot] in cloudevents/sdk-java#675

Bump org.slf4j:slf4j-simple from 1.7.36 to 2.0.16 by @dependabot[bot] in cloudevents/sdk-java#674

Bump io.projectreactor:reactor-core from 3.5.1 to 3.6.11 by @dependabot[bot] in cloudevents/sdk-java#677

fix: disallow empty 'subject' header by @pnt in cloudevents/sdk-java#679

Bump org.apache.kafka:kafka-clients from 3.0.0 to 3.7.1 in /kafka by @dependabot[bot] in cloudevents/sdk-java#681

Bump org.apache.qpid:proton-j from 0.33.7 to 0.34.1 by @dependabot[bot] in cloudevents/sdk-java#678

Bump org.apache.maven.plugins:maven-antrun-plugin from 3.0.0 to 3.1.0 by @dependabot[bot] in cloudevents/sdk-java#682

Bump nokogiri from 1.16.5 to 1.18.3 in /docs by @dependabot[bot] in cloudevents/sdk-java#685

build: remove maven cache by @SleimanJneidi in cloudevents/sdk-java#696

upgrade to protobuf sdk 4.31.1 by @SleimanJneidi in cloudevents/sdk-java#695

Migrate from OSSRH to Central Portal by @pierDipi in cloudevents/sdk-java#698

Update Jackson version to 2.21.2 by @akerekes in cloudevents/sdk-java#712

Bump rexml from 3.3.9 to 3.4.2 in /docs by @dependabot[bot] in cloudevents/sdk-java#700

Bump org.apache.kafka:kafka-clients from 3.7.1 to 3.9.1 in /kafka by @dependabot[bot] in cloudevents/sdk-java#693

... (truncated)

Commits

c4d1482 Bump to 4.1.1 (#737)
65673a6 Cleanups before Java 17 (#735)
ecde1d4 Bump to 4.1.1-SNAPSHOT (#734)
d9dcc44 Bump to 4.1.0 (#733)
0a34654 Deprecating to Jakarta EE 8 (#732)
9f3073a Bump to 4.1.0-SNAPSHOT (#727)
7fcd8d6 try to fix release 4.0.2 (#726)
58aff57 Bump to 4.0.2 (#723)
91dd9c1 Bump org.sonatype.central:central-publishing-maven-plugin (#719)
13824c4 Bump maven-surefire-plugin.version from 3.5.2 to 3.5.5 (#720)
Additional commits viewable in compare view

Updates io.cloudevents:cloudevents-core from 4.0.1 to 4.1.1

Release notes

Sourced from io.cloudevents:cloudevents-core's releases.

v4.1.1

What's Changed

[Release] Bump to 4.1.1-SNAPSHOT by @github-actions[bot] in cloudevents/sdk-java#734

Cleanups before Java 17 by @jacekbilski in cloudevents/sdk-java#735

[Release] Bump to 4.1.1 by @github-actions[bot] in cloudevents/sdk-java#737

Full Changelog: cloudevents/sdk-java@v4.1.0...v4.1.1

v4.1.0

Note: 4.1 is the last planned Y stream to support Java 8. We will be doing a series of major version bumps as well as base Java version bump in 5.0

What's Changed

[Release] Bump to 4.1.0-SNAPSHOT by @github-actions[bot] in cloudevents/sdk-java#727

Deprecating to Jakarta EE 8 by @jacekbilski in cloudevents/sdk-java#732

[Release] Bump to 4.1.0 by @github-actions[bot] in cloudevents/sdk-java#733

New Contributors

@jacekbilski made their first contribution in cloudevents/sdk-java#732

Full Changelog: cloudevents/sdk-java@v4.0.2...v4.1.0

v4.0.2

What's Changed

[Release] Bump to 4.1.0-SNAPSHOT by @github-actions[bot] in cloudevents/sdk-java#645

Allow bumping versions in /docs only by @pierDipi in cloudevents/sdk-java#648

[Release] Bump to 4.0.0 by @github-actions[bot] in cloudevents/sdk-java#649

Make CloudEventValidatorProvider thread safe by @pierDipi in cloudevents/sdk-java#650

Bump org.apache.rocketmq:rocketmq-client-java from 5.0.4 to 5.0.7 by @dependabot[bot] in cloudevents/sdk-java#653

Fix cloudevents-sql artifactId in bom by @dsimansk in cloudevents/sdk-java#669

Bump org.apache.maven.plugins:maven-install-plugin from 2.5.1 to 3.1.3 by @dependabot[bot] in cloudevents/sdk-java#664

docs: correcting import to EventFormatProvider by @rohanrmallya in cloudevents/sdk-java#658

[Release] Bump to 4.0.1 by @github-actions[bot] in cloudevents/sdk-java#656

Bump org.apache.avro:avro from 1.11.3 to 1.11.4 in /formats/avro-compact by @dependabot[bot] in cloudevents/sdk-java#671

Bump org.eclipse.jetty:jetty-server from 9.4.51.v20230217 to 9.4.55.v20240627 in /examples/basic-http by @dependabot[bot] in cloudevents/sdk-java#672

Bump rexml from 3.2.8 to 3.3.6 in /docs by @dependabot[bot] in cloudevents/sdk-java#665

Bump rexml from 3.3.6 to 3.3.9 in /docs by @dependabot[bot] in cloudevents/sdk-java#675

Bump org.slf4j:slf4j-simple from 1.7.36 to 2.0.16 by @dependabot[bot] in cloudevents/sdk-java#674

Bump io.projectreactor:reactor-core from 3.5.1 to 3.6.11 by @dependabot[bot] in cloudevents/sdk-java#677

fix: disallow empty 'subject' header by @pnt in cloudevents/sdk-java#679

Bump org.apache.kafka:kafka-clients from 3.0.0 to 3.7.1 in /kafka by @dependabot[bot] in cloudevents/sdk-java#681

Bump org.apache.qpid:proton-j from 0.33.7 to 0.34.1 by @dependabot[bot] in cloudevents/sdk-java#678

Bump org.apache.maven.plugins:maven-antrun-plugin from 3.0.0 to 3.1.0 by @dependabot[bot] in cloudevents/sdk-java#682

Bump nokogiri from 1.16.5 to 1.18.3 in /docs by @dependabot[bot] in cloudevents/sdk-java#685

build: remove maven cache by @SleimanJneidi in cloudevents/sdk-java#696

upgrade to protobuf sdk 4.31.1 by @SleimanJneidi in cloudevents/sdk-java#695

Migrate from OSSRH to Central Portal by @pierDipi in cloudevents/sdk-java#698

Update Jackson version to 2.21.2 by @akerekes in cloudevents/sdk-java#712

Bump rexml from 3.3.9 to 3.4.2 in /docs by @dependabot[bot] in cloudevents/sdk-java#700

Bump org.apache.kafka:kafka-clients from 3.7.1 to 3.9.1 in /kafka by @dependabot[bot] in cloudevents/sdk-java#693

... (truncated)

Commits

c4d1482 Bump to 4.1.1 (#737)
65673a6 Cleanups before Java 17 (#735)
ecde1d4 Bump to 4.1.1-SNAPSHOT (#734)
d9dcc44 Bump to 4.1.0 (#733)
0a34654 Deprecating to Jakarta EE 8 (#732)
9f3073a Bump to 4.1.0-SNAPSHOT (#727)
7fcd8d6 try to fix release 4.0.2 (#726)
58aff57 Bump to 4.0.2 (#723)
91dd9c1 Bump org.sonatype.central:central-publishing-maven-plugin (#719)
13824c4 Bump maven-surefire-plugin.version from 3.5.2 to 3.5.5 (#720)
Additional commits viewable in compare view

Updates io.cloudevents:cloudevents-json-jackson from 4.0.1 to 4.1.1

Updates io.cloudevents:cloudevents-core from 4.0.1 to 4.1.1

Release notes

Sourced from io.cloudevents:cloudevents-core's releases.

v4.1.1

What's Changed

[Release] Bump to 4.1.1-SNAPSHOT by @github-actions[bot] in cloudevents/sdk-java#734

Cleanups before Java 17 by @jacekbilski in cloudevents/sdk-java#735

[Release] Bump to 4.1.1 by @github-actions[bot] in cloudevents/sdk-java#737

Full Changelog: cloudevents/sdk-java@v4.1.0...v4.1.1

v4.1.0

Note: 4.1 is the last planned Y stream to support Java 8. We will be doing a series of major version bumps as well as base Java version bump in 5.0

What's Changed

[Release] Bump to 4.1.0-SNAPSHOT by @github-actions[bot] in cloudevents/sdk-java#727

Deprecating to Jakarta EE 8 by @jacekbilski in cloudevents/sdk-java#732

[Release] Bump to 4.1.0 by @github-actions[bot] in cloudevents/sdk-java#733

New Contributors

@jacekbilski made their first contribution in cloudevents/sdk-java#732

Full Changelog: cloudevents/sdk-java@v4.0.2...v4.1.0

v4.0.2

What's Changed

[Release] Bump to 4.1.0-SNAPSHOT by @github-actions[bot] in cloudevents/sdk-java#645

Allow bumping versions in /docs only by @pierDipi in cloudevents/sdk-java#648

[Release] Bump to 4.0.0 by @github-actions[bot] in cloudevents/sdk-java#649

Make CloudEventValidatorProvider thread safe by @pierDipi in cloudevents/sdk-java#650

Bump org.apache.rocketmq:rocketmq-client-java from 5.0.4 to 5.0.7 by @dependabot[bot] in cloudevents/sdk-java#653

Fix cloudevents-sql artifactId in bom by @dsimansk in cloudevents/sdk-java#669

Bump org.apache.maven.plugins:maven-install-plugin from 2.5.1 to 3.1.3 by @dependabot[bot] in cloudevents/sdk-java#664

docs: correcting import to EventFormatProvider by @rohanrmallya in cloudevents/sdk-java#658

[Release] Bump to 4.0.1 by @github-actions[bot] in cloudevents/sdk-java#656

Bump org.apache.avro:avro from 1.11.3 to 1.11.4 in /formats/avro-compact by @dependabot[bot] in cloudevents/sdk-java#671

Bump org.eclipse.jetty:jetty-server from 9.4.51.v20230217 to 9.4.55.v20240627 in /examples/basic-http by @dependabot[bot] in cloudevents/sdk-java#672

Bump rexml from 3.2.8 to 3.3.6 in /docs by @dependabot[bot] in cloudevents/sdk-java#665

Bump rexml from 3.3.6 to 3.3.9 in /docs by @dependabot[bot] in cloudevents/sdk-java#675

Bump org.slf4j:slf4j-simple from 1.7.36 to 2.0.16 by @dependabot[bot] in cloudevents/sdk-java#674

Bump io.projectreactor:reactor-core from 3.5.1 to 3.6.11 by @dependabot[bot] in cloudevents/sdk-java#677

fix: disallow empty 'subject' header by @pnt in cloudevents/sdk-java#679

Bump org.apache.kafka:kafka-clients from 3.0.0 to 3.7.1 in /kafka by @dependabot[bot] in cloudevents/sdk-java#681

Bump org.apache.qpid:proton-j from 0.33.7 to 0.34.1 by @dependabot[bot] in cloudevents/sdk-java#678

Bump org.apache.maven.plugins:maven-antrun-plugin from 3.0.0 to 3.1.0 by @dependabot[bot] in cloudevents/sdk-java#682

Bump nokogiri from 1.16.5 to 1.18.3 in /docs by @dependabot[bot] in cloudevents/sdk-java#685

build: remove maven cache by @SleimanJneidi in cloudevents/sdk-java#696

upgrade to protobuf sdk 4.31.1 by @SleimanJneidi in cloudevents/sdk-java#695

Migrate from OSSRH to Central Portal by @pierDipi in cloudevents/sdk-java#698

Update Jackson version to 2.21.2 by @akerekes in cloudevents/sdk-java#712

Bump rexml from 3.3.9 to 3.4.2 in /docs by @dependabot[bot] in cloudevents/sdk-java#700

Bump org.apache.kafka:kafka-clients from 3.7.1 to 3.9.1 in /kafka by @dependabot[bot] in cloudevents/sdk-java#693

... (truncated)

Commits

c4d1482 Bump to 4.1.1 (#737)
65673a6 Cleanups before Java 17 (#735)
ecde1d4 Bump to 4.1.1-SNAPSHOT (#734)
d9dcc44 Bump to 4.1.0 (#733)
0a34654 Deprecating to Jakarta EE 8 (#732)
9f3073a Bump to 4.1.0-SNAPSHOT (#727)
7fcd8d6 try to fix release 4.0.2 (#726)
58aff57 Bump to 4.0.2 (#723)
91dd9c1 Bump org.sonatype.central:central-publishing-maven-plugin (#719)
13824c4 Bump maven-surefire-plugin.version from 3.5.2 to 3.5.5 (#720)
Additional commits viewable in compare view

Updates io.cloudevents:cloudevents-json-jackson from 4.0.1 to 4.1.1

Updates io.micrometer:micrometer-core from 1.13.7 to 1.17.0

Release notes

Sourced from io.micrometer:micrometer-core's releases.

1.17.0

See also the 1.17 migration guide and the release notes for 1.17.0-RC1, 1.17.0-M3, 1.17.0-M2, 1.17.0-M1.

🐞 Bug Fixes

ArrayIndexOutOfBoundsException when using LongTaskTimer #3877

Jetty 12's TimedHandler marks some requests with outcome UNKNOWN #7276

MeterRegistry closes HighCardinalityTagsDetector twice if the registry is closed twice #7409

Reduce allocation in HTTP server instrumentation #7580

Reduce allocation in gRPC server convention #7581

📔 Documentation

Clarify time series produced by LongTaskTimer when using Prometheus #6507

Document metrics that need to close the MeterBinder #4624

Multigauge Documentation lacks overwrite=true #4403

🔨 Dependency Upgrades

Bump com.dynatrace.metric.util:dynatrace-metric-utils-java from 2.4.0 to 2.5.0 #7452

Bump com.google.auth:google-auth-library-oauth2-http from 1.43.0 to 1.48.0 #7397

Bump com.google.cloud:google-cloud-monitoring from 3.89.0 to 3.94.0 #7398

Bump com.google.cloud:libraries-bom from 26.79.0 to 26.83.0 #7497

Bump com.netflix.spectator:spectator-reg-atlas from 1.9.6 to 1.9.9 #7552

Bump dropwizard-metrics from 4.2.38 to 4.2.39 #7527

Bump io.prometheus:prometheus-metrics-bom from 1.5.1 to 1.7.0 #7572

Bump software.amazon.awssdk:cloudwatch from 2.42.32 to 2.46.4 #7494

❤️ Contributors

Thank you to all the contributors who worked on this release:

@blaspat, @codingkiddo, @izeye, @jewoodev, and @schiemon

1.17.0-RC1

⭐ New Features

Add meter for ForkJoinPool#getDelayedTaskCount #6381

Add support for JDK 26's MemoryPoolMXBean.getTotalGcCpuTime() #7245

Clear the state of the ObservationValidator #7337

Improve exemplars sizing and add exemplarsSize config #7324

Log warning when a registry is added to composite after meter registration #6908

Treat OkHttp Request as non-nullable #7388

Validate Observation.Scope closing when using TestObservationRegistry #6329

🐞 Bug Fixes

Invalid reflection hint in micrometer-core for native GraalVM 25 build #7316

ObservationGrpcClientInterceptor throws NPE when NameResolver returns empty authority #7380

... (truncated)

Commits

8466fea Merge branch '1.16.x'
fa2ed32 Merge branch '1.15.x' into 1.16.x
dc2e5e2 Reduce allocation in gRPC server convention
36da131 Reduce allocation in HTTP server instrumentation
9591cb4 Bump com.uber.nullaway:nullaway from 0.13.5 to 0.13.6 (

… with 15 updates Bumps the production-minor-patch group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) | `42.7.4` | `42.7.11` | | [com.fasterxml.jackson.module:jackson-module-kotlin](https://github.com/FasterXML/jackson-module-kotlin) | `2.18.3` | `2.22.0` | | [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.18.3` | `2.22.0` | | [com.github.f4b6a3:ulid-creator](https://github.com/f4b6a3/ulid-creator) | `5.2.3` | `5.2.4` | | [io.cloudevents:cloudevents-api](https://github.com/cloudevents/sdk-java) | `4.0.1` | `4.1.1` | | [io.cloudevents:cloudevents-core](https://github.com/cloudevents/sdk-java) | `4.0.1` | `4.1.1` | | io.cloudevents:cloudevents-json-jackson | `4.0.1` | `4.1.1` | | [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer) | `1.13.7` | `1.17.0` | | [io.micrometer:micrometer-registry-prometheus](https://github.com/micrometer-metrics/micrometer) | `1.13.7` | `1.17.0` | | [io.opentelemetry:opentelemetry-api](https://github.com/open-telemetry/opentelemetry-java) | `1.41.0` | `1.63.0` | | [org.testcontainers:testcontainers](https://github.com/testcontainers/testcontainers-java) | `1.20.4` | `1.21.4` | | [org.testcontainers:postgresql](https://github.com/testcontainers/testcontainers-java) | `1.20.4` | `1.21.4` | | [org.testcontainers:redpanda](https://github.com/testcontainers/testcontainers-java) | `1.20.4` | `1.21.4` | | [org.testcontainers:junit-jupiter](https://github.com/testcontainers/testcontainers-java) | `1.20.4` | `1.21.4` | | [io.mockk:mockk](https://github.com/mockk/mockk) | `1.13.13` | `1.14.11` | Updates `org.postgresql:postgresql` from 42.7.4 to 42.7.11 - [Release notes](https://github.com/pgjdbc/pgjdbc/releases) - [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md) - [Commits](pgjdbc/pgjdbc@REL42.7.4...REL42.7.11) Updates `com.fasterxml.jackson.module:jackson-module-kotlin` from 2.18.3 to 2.22.0 - [Commits](FasterXML/jackson-module-kotlin@jackson-module-kotlin-2.18.3...jackson-module-kotlin-2.22.0) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.3 to 2.22.0 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.3 to 2.22.0 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.github.f4b6a3:ulid-creator` from 5.2.3 to 5.2.4 - [Release notes](https://github.com/f4b6a3/ulid-creator/releases) - [Changelog](https://github.com/f4b6a3/ulid-creator/blob/master/CHANGELOG.md) - [Commits](f4b6a3/ulid-creator@ulid-creator-5.2.3...ulid-creator-5.2.4) Updates `io.cloudevents:cloudevents-api` from 4.0.1 to 4.1.1 - [Release notes](https://github.com/cloudevents/sdk-java/releases) - [Commits](cloudevents/sdk-java@v4.0.1...v4.1.1) Updates `io.cloudevents:cloudevents-core` from 4.0.1 to 4.1.1 - [Release notes](https://github.com/cloudevents/sdk-java/releases) - [Commits](cloudevents/sdk-java@v4.0.1...v4.1.1) Updates `io.cloudevents:cloudevents-json-jackson` from 4.0.1 to 4.1.1 Updates `io.cloudevents:cloudevents-core` from 4.0.1 to 4.1.1 - [Release notes](https://github.com/cloudevents/sdk-java/releases) - [Commits](cloudevents/sdk-java@v4.0.1...v4.1.1) Updates `io.cloudevents:cloudevents-json-jackson` from 4.0.1 to 4.1.1 Updates `io.micrometer:micrometer-core` from 1.13.7 to 1.17.0 - [Release notes](https://github.com/micrometer-metrics/micrometer/releases) - [Commits](micrometer-metrics/micrometer@v1.13.7...v1.17.0) Updates `io.micrometer:micrometer-registry-prometheus` from 1.13.7 to 1.17.0 - [Release notes](https://github.com/micrometer-metrics/micrometer/releases) - [Commits](micrometer-metrics/micrometer@v1.13.7...v1.17.0) Updates `io.micrometer:micrometer-registry-prometheus` from 1.13.7 to 1.17.0 - [Release notes](https://github.com/micrometer-metrics/micrometer/releases) - [Commits](micrometer-metrics/micrometer@v1.13.7...v1.17.0) Updates `io.opentelemetry:opentelemetry-api` from 1.41.0 to 1.63.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-java@v1.41.0...v1.63.0) Updates `org.testcontainers:testcontainers` from 1.20.4 to 1.21.4 - [Release notes](https://github.com/testcontainers/testcontainers-java/releases) - [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md) - [Commits](testcontainers/testcontainers-java@1.20.4...1.21.4) Updates `org.testcontainers:postgresql` from 1.20.4 to 1.21.4 - [Release notes](https://github.com/testcontainers/testcontainers-java/releases) - [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md) - [Commits](testcontainers/testcontainers-java@1.20.4...1.21.4) Updates `org.testcontainers:redpanda` from 1.20.4 to 1.21.4 - [Release notes](https://github.com/testcontainers/testcontainers-java/releases) - [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md) - [Commits](testcontainers/testcontainers-java@1.20.4...1.21.4) Updates `org.testcontainers:junit-jupiter` from 1.20.4 to 1.21.4 - [Release notes](https://github.com/testcontainers/testcontainers-java/releases) - [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md) - [Commits](testcontainers/testcontainers-java@1.20.4...1.21.4) Updates `org.testcontainers:redpanda` from 1.20.4 to 1.21.4 - [Release notes](https://github.com/testcontainers/testcontainers-java/releases) - [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md) - [Commits](testcontainers/testcontainers-java@1.20.4...1.21.4) Updates `org.testcontainers:junit-jupiter` from 1.20.4 to 1.21.4 - [Release notes](https://github.com/testcontainers/testcontainers-java/releases) - [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md) - [Commits](testcontainers/testcontainers-java@1.20.4...1.21.4) Updates `io.mockk:mockk` from 1.13.13 to 1.14.11 - [Release notes](https://github.com/mockk/mockk/releases) - [Commits](mockk/mockk@1.13.13...v1.14.11) --- updated-dependencies: - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: com.fasterxml.jackson.module:jackson-module-kotlin dependency-version: 2.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: com.github.f4b6a3:ulid-creator dependency-version: 5.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: io.cloudevents:cloudevents-api dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: io.cloudevents:cloudevents-core dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: io.cloudevents:cloudevents-core dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: io.cloudevents:cloudevents-json-jackson dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: io.cloudevents:cloudevents-json-jackson dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: io.micrometer:micrometer-core dependency-version: 1.16.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: io.micrometer:micrometer-registry-prometheus dependency-version: 1.16.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: io.micrometer:micrometer-registry-prometheus dependency-version: 1.16.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: io.mockk:mockk dependency-version: 1.14.11 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: io.opentelemetry:opentelemetry-api dependency-version: 1.63.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: org.postgresql:postgresql dependency-version: 42.7.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: org.testcontainers:junit-jupiter dependency-version: 1.21.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: org.testcontainers:junit-jupiter dependency-version: 1.21.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: org.testcontainers:postgresql dependency-version: 1.21.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: org.testcontainers:redpanda dependency-version: 1.21.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: org.testcontainers:redpanda dependency-version: 1.21.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: org.testcontainers:testcontainers dependency-version: 1.21.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-16T04:32:27Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added area:infra Build, CI/CD, Gradle, Docker, Helm dependencies Dependency update (managed by Dependabot) labels Jun 8, 2026

dependabot Bot requested a review from tiana-code as a code owner June 8, 2026 04:22

dependabot Bot added dependencies Dependency update (managed by Dependabot) area:infra Build, CI/CD, Gradle, Docker, Helm labels Jun 8, 2026

dependabot Bot changed the title ~~chore(deps): bump the production-minor-patch group with 15 updates~~ chore(deps): bump the production-minor-patch group across 1 directory with 15 updates Jun 15, 2026

dependabot Bot force-pushed the dependabot/gradle/production-minor-patch-0bca205dbf branch from 1307b8a to a7ac876 Compare June 15, 2026 04:29

dependabot Bot closed this Jun 16, 2026

dependabot Bot deleted the dependabot/gradle/production-minor-patch-0bca205dbf branch June 16, 2026 04:32

Navigation Menu

chore(deps): bump the production-minor-patch group across 1 directory with 15 updates - #96

chore(deps): bump the production-minor-patch group across 1 directory with 15 updates#96
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/production-minor-patch-0bca205dbf

dependabot Bot commented on behalf of github Jun 8, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jun 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v42.7.11

Security

Changes

🐛 Bug Fixes

🧰 Maintenance

⬆️ Dependencies

[42.7.11] (2026-04-28)

Security

Added

Changed

Fixed

[42.7.10] (2026-02-11)

Changed

Fixed

Reverted

[42.7.9] (2026-01-14)

Added

[5.2.4] - 2026-02-21

v4.1.1

What's Changed

v4.1.0

What's Changed

New Contributors

v4.0.2

What's Changed

v4.1.1

What's Changed

v4.1.0

What's Changed

New Contributors

v4.0.2

What's Changed

v4.1.1

What's Changed

v4.1.0

What's Changed

New Contributors

v4.0.2

What's Changed

1.17.0

🐞 Bug Fixes

📔 Documentation

🔨 Dependency Upgrades

❤️ Contributors

1.17.0-RC1

⭐ New Features

🐞 Bug Fixes

Uh oh!

dependabot Bot commented on behalf of github Jun 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jun 8, 2026 •

edited

Loading