Skip to content
This repository was archived by the owner on May 7, 2026. It is now read-only.

deps(java): bump the all group across 1 directory with 30 updates#1544

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/wren-core-legacy/all-68702b2851
Open

deps(java): bump the all group across 1 directory with 30 updates#1544
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/wren-core-legacy/all-68702b2851

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 13, 2026 •
edited
Loading

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps the all group with 29 updates in the /wren-core-legacy directory:

Package From To
io.airlift:airbase 279 373
org.jdbi:jdbi3-bom 3.49.5 3.53.0
org.testcontainers:testcontainers-bom 1.21.3 2.0.5
org.testcontainers:testcontainers 1.21.3 2.0.5
com.fasterxml.jackson.core:jackson-annotations 2.19.1 2.21
com.fasterxml.jackson.core:jackson-databind 2.19.1 2.21.3
com.fasterxml.jackson.dataformat:jackson-dataformat-yaml 2.19.1 2.21.3
com.google.code.gson:gson 2.13.1 2.14.0
com.google.errorprone:error_prone_annotations 2.40.0 2.49.0
com.google.errorprone:error_prone_core 2.40.0 2.49.0
com.google.protobuf:protobuf-java 4.31.1 4.34.1
com.hubspot.jinjava:jinjava 2.8.1 2.8.3
com.zaxxer:HikariCP 6.3.0 7.0.2
io.airlift:units 1.10 1.13
io.opentelemetry:opentelemetry-api 1.47.0 1.61.0
io.opentelemetry:opentelemetry-sdk 1.47.0 1.61.0
net.bytebuddy:byte-buddy 1.17.6 1.18.8
org.checkerframework:checker-qual 3.49.5 4.1.0
org.duckdb:duckdb_jdbc 1.3.2.0 1.5.2.1
org.jetbrains:annotations 26.0.2 26.1.0
org.jgrapht:jgrapht-core 1.5.2 1.5.3
org.postgresql:postgresql 42.7.7 42.7.11
org.threeten:threetenbp 1.7.1 1.7.2
org.apache.maven.plugins:maven-shade-plugin 3.6.0 3.6.2
org.apache.maven.plugins:maven-antrun-plugin 3.1.0 3.2.0
org.codehaus.mojo:exec-maven-plugin 3.5.1 3.6.3
io.airlift.drift:drift-maven-plugin 1.23 1.24
io.trino:trino-maven-plugin 15 20
org.apache.maven.plugins:maven-dependency-plugin 3.8.1 3.10.0

Updates io.airlift:airbase from 279 to 373

Release notes

Sourced from io.airlift:airbase's releases.

airbase 373

What's Changed

Dependency updates 📦

Others

Full Changelog: airlift/airbase@372...373

airbase 372

What's Changed

Dependency updates 📦

Full Changelog: airlift/airbase@371...372

airbase 371

What's Changed

Dependency updates 📦

Others

Full Changelog: airlift/airbase@370...371

airbase 370

What's Changed

Dependency updates 📦

Others

... (truncated)

Commits

Updates org.jdbi:jdbi3-bom from 3.49.5 to 3.53.0

Release notes

Sourced from org.jdbi:jdbi3-bom's releases.

3.53.0

Fixes: Jdbi-Freemarker Security Advisory GHSA-mggx-p7jf-jgw4

The Freemarker configuration allows templates to construct arbitrary Java types, including freemarker.template.utility.Execute.

While exploiting this requires other unsafe practices (letting a user dictate template input), it seems prudent to disable template class resolution.

Please see GHSA-mggx-p7jf-jgw4 for more details.

Upgrade to testcontainers 2.x

While this required no code changes, the testcontainers project has renamed a number of their jar files. Jdbi still supports testcontainers 1.x and now also testcontainers 2.x:

If you are using testcontainers with Jdbi today and can not update to 2.x, make sure that you reference the org.testcontainers:jdbc and org.testcontainers:junit-jupiter dependencies. Those used to be available as transitive dependency from jdbi3-testcontainers.

If you upgrade to testcontainers 2.x, the org.testcontainers:testcontainers-jdbc and org.testcontainers:testcontainers-junit-jupiter dependencies must be available.

  • Update testcontainers dependency to 2.0.5 (from 1.21.4)
  • Add StatementContext parameter to SqlExceptionHandler and remove return value

3.52.1

  • fix regression for java.time.Instant mapping from 3.52.0
  • Add missing mappers for java.sql.Date and java.sql.Time
  • Add support for java.time.OffsetTime
  • Add support for java.time.ZoneOffset

3.52.0

Changes to java.time related classes

JDBC 4.2 added full support to map java.time classes onto SQL types in 2014. This release of Jdbi switches from mapping these objects onto "classic" (java.sql.Date, Time, Timestamp) to using the JDBC 4.2 API (PreparedStatement#setObject and ResultSet#getObject).

These changes should not be visible for any database, except if you were brave enough to map types with time zones or offsets (ZonedDateTime and OffsetDateTime) onto SQL types that have no timezone (TIMESTAMP or DATETIME). This affects databases that do not support the TIMESTAMP WITH TIMEZONE data type. IAW MySQL.

... (truncated)

Changelog

Sourced from org.jdbi:jdbi3-bom's changelog.

3.53.0

Fixes: Jdbi-Freemarker Security Advisory GHSA-mggx-p7jf-jgw4

The Freemarker configuration allows templates to construct arbitrary Java types, including freemarker.template.utility.Execute.

While exploiting this requires other unsafe practices (letting a user dictate template input), it seems prudent to disable template class resolution.

Please see GHSA-mggx-p7jf-jgw4 for more details.

Upgrade to testcontainers 2.x

While this required no code changes, the testcontainers project has renamed a number of their jar files. Jdbi still supports testcontainers 1.x and now also testcontainers 2.x:

If you are using testcontainers with Jdbi today and can not update to 2.x, make sure that you reference the org.testcontainers:jdbc and org.testcontainers:junit-jupiter dependencies. Those used to be available as transitive dependency from jdbi3-testcontainers.

If you upgrade to testcontainers 2.x, the org.testcontainers:testcontainers-jdbc and org.testcontainers:testcontainers-junit-jupiter dependencies must be available.

  • Update testcontainers dependency to 2.0.5 (from 1.21.4)
  • Add StatementContext parameter to SqlExceptionHandler and remove return value

3.52.1

  • fix regression for java.time.Instant mapping from 3.52.0 (#2955, reported by @​Eng-Fouad and @​toadzky)
  • Add missing mappers for java.sql.Date and java.sql.Time
  • Add support for java.time.OffsetTime
  • Add support for java.time.ZoneOffset

3.52.0

Changes to java.time related classes

JDBC 4.2 added full support to map java.time classes onto SQL types in 2014. This release of Jdbi switches from mapping these objects onto "classic" (java.sql.Date, Time, Timestamp) to using the JDBC 4.2 API (PreparedStatement#setObject and ResultSet#getObject).

These changes should not be visible for any database, except if you were brave enough to map types with time zones or offsets (ZonedDateTime and OffsetDateTime) onto SQL types that have no

... (truncated)

Commits
  • 5361840 [maven-release-plugin] prepare release v3.53.0
  • 59a8376 Release notes 3.53.0
  • 1f1a5c5 freemarker: disable template class resolution
  • 83465ac Merge remote-tracking branch 'origin/master' into sqlexception-handler-statem...
  • 5d4191f Merge pull request #2969 from hgschmie/testcontainers2
  • 05f9bdb align mysql docker image property name
  • ce9f12c align oracle docker image property name
  • ebceb8a move to testcontainers 2.x
  • 9a42863 add documentation and example
  • d53118f SqlExceptionHandler: add StatementContext parameter, remove confusing return ...
  • Additional commits viewable in compare view

Updates org.testcontainers:testcontainers-bom from 1.21.3 to 2.0.5

Release notes

Sourced from org.testcontainers:testcontainers-bom's releases.

2.0.5

What's Changed

🚀 Features & Enhancements

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

📦 Dependency updates

2.0.4

... (truncated)

Commits
  • 5c44820 Fix typo (#11717)
  • 84b1c3a Add getHttpPort and getGrpcPort methods in WeaviateContainer (#11712)
  • a412b8e Use weaviate client v6 (#11711)
  • 058fa82 Combined dependencies PR (#11710)
  • 773f344 Merge remote-tracking branch 'origin/dependabot/gradle/modules/hivemq/ch.qos....
  • ebe6043 Merge remote-tracking branch 'origin/dependabot/gradle/modules/activemq/org.a...
  • 5248d1d Merge remote-tracking branch 'origin/dependabot/gradle/modules/scylladb/softw...
  • ab781f6 Combined dependencies PR (#11708)
  • 2d6c1be Merge remote-tracking branch 'origin/dependabot/gradle/core/org.jetbrains-ann...
  • e76c291 Merge remote-tracking branch 'origin/dependabot/gradle/core/org.junit.platfor...
  • Additional commits viewable in compare view

Updates org.testcontainers:testcontainers from 1.21.3 to 2.0.5

Release notes

Sourced from org.testcontainers:testcontainers's releases.

2.0.5

What's Changed

🚀 Features & Enhancements

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

📦 Dependency updates

2.0.4

... (truncated)

Commits
  • 5c44820 Fix typo (#11717)
  • 84b1c3a Add getHttpPort and getGrpcPort methods in WeaviateContainer (#11712)
  • a412b8e Use weaviate client v6 (#11711)
  • 058fa82 Combined dependencies PR (#11710)
  • 773f344 Merge remote-tracking branch 'origin/dependabot/gradle/modules/hivemq/ch.qos....
  • ebe6043 Merge remote-tracking branch 'origin/dependabot/gradle/modules/activemq/org.a...
  • 5248d1d Merge remote-tracking branch 'origin/dependabot/gradle/modules/scylladb/softw...
  • ab781f6 Combined dependencies PR (#11708)
  • 2d6c1be Merge remote-tracking branch 'origin/dependabot/gradle/core/org.jetbrains-ann...
  • e76c291 Merge remote-tracking branch 'origin/dependabot/gradle/core/org.junit.platfor...
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-annotations from 2.19.1 to 2.21

Commits

Updates com.fasterxml.jackson.core:jackson-databind from 2.19.1 to 2.21.3

Commits

Updates com.fasterxml.jackson.dataformat:jackson-dataformat-yaml from 2.19.1 to 2.21.3

Commits
  • ccfcc95 [maven-release-plugin] prepare release jackson-dataformats-text-2.21.3
  • 5e81617 Prep for 2.21.3 release
  • 52ab617 Merge branch '2.20' into 2.21
  • 84f99f7 Merge branch '2.19' into 2.20
  • 4fe54cb Merge branch '2.18' into 2.19
  • f18c578 Post-release dep version bump
  • 8db1032 [maven-release-plugin] prepare for next development iteration
  • 7afb263 [maven-release-plugin] prepare release jackson-dataformats-text-2.18.7
  • ec50f24 Prep for 2.18.7 release
  • a8bedbd Post-release dep version bump
  • Additional commits viewable in compare view

Updates com.google.code.gson:gson from 2.13.1 to 2.14.0

Release notes

Sourced from com.google.code.gson:gson's releases.

Gson 2.14.0

What's Changed

  • Add type adapters for java.time classes by @​eamonnmcmanus in google/gson#2948

    When the java.time API is available, Gson automatically can read and write instances of classes like Instant and Duration. The format it uses essentially freezes the JSON representation that ReflectiveTypeAdapterFactory established by default, based on the private fields of java.time classes. That's not a great representation, but it is understandable. Changing it to anything else would break compatibility with systems that are expecting the current format.

    With this change, Gson no longer tries to access private fields of these classes using reflection. So it is no longer necessary to run with --add-opens for these classes on recent JDKs.

  • Remove com.google.gson.graph by @​eamonnmcmanus in google/gson#2990.

    This package was not part of any released artifact and depended on Gson internals in potentially problematic ways.

  • Validate that strings being parsed as integers consist of ASCII characters by @​eamonnmcmanus in google/gson#2995

    Previously, strings could contain non-ASCII Unicode digits and still be parsed as integers. That's inconsistent with how JSON numbers are treated.

  • Fix duplicate key detection when first value is null by @​andrewstellman in google/gson#3006

    This could potentially break code that was relying on the incorrect behaviour. For example, this JSON string was previously accepted but will no longer be: {"foo": null, "foo": bar}.

  • Remove Serializable from internal Type implementation classes. by @​eamonnmcmanus in google/gson#3011

    The nested classes ParameterizedTypeImpl, GenericArrayTypeImpl, and WildcardTypeImpl in GsonTypes are implementations of the corresponding types (without Impl) in java.lang.reflect. For some reason, they were serializable, even though the java.lang.reflect implementations are not. Having unnecessarily serializable classes could conceivably have been a security problem if they were part of a larger exploit using serialization. (We do not consider this a likely scenario and do not suggest that you need to update Gson just to get this change.)

  • Add LegacyProtoTypeAdapterFactory. by @​eamonnmcmanus in google/gson#3014

    This is not part of any released artifact, but may be of use when trying to fix code that is currently accessing the internals of protobuf classes via reflection.

  • Make AppendableWriter do flush and close if delegation object supports by @​MukjepScarlet in google/gson#2925

Other less visible changes

New Contributors

Full Changelog: google/gson@gson-parent-2.13.2...gson-parent-2.14.0

Gson 2.13.2

The main changes in this release are just newer dependencies.

... (truncated)

Commits
  • 3ff35d6 [maven-release-plugin] prepare release gson-parent-2.14.0
  • a3024fd Bump the maven group with 13 updates (#3002)
  • 5689ffe Bump the github-actions group across 1 directory with 3 updates (#3018)
  • 48db33c Add LegacyProtoTypeAdapterFactory. (#3014)
  • 53d703e Update outdated comment regarding serializable types (#3012)
  • 0189b72 Remove Serializable from internal Type implementation classes. (#3011)
  • f4d371d Fix duplicate key detection when first value is null (#3006)
  • 27d9ba1 Fix typo in README (JPMS dependencies section) (#3005)
  • 1fa9b7a Validate that strings being parsed as integers consist of ASCII characters (#...
  • b7d5954 Add iterator fail-fast tests for LinkedTreeMap.clear() (#2992)
  • Additional commits viewable in compare view

Updates com.google.errorprone:error_prone_annotations from 2.40.0 to 2.49.0

Release notes

Sourced from com.google.errorprone:error_prone_annotations's releases.

Error Prone 2.49.0

This release includes several changes to Matcher APIs, and removed some deprecated or problematic APIs:

  • Remove deprecated MethodMatchers.withSignature API, which relies on fragile toString behaviour. Alternatives for matching on method signatures with varargs and type parameters were added in google/error-prone@a98a1c5.
  • Removed variableType(Matcher) API. Matchers.variableType(Matcher) uses VariableTree#getType to match variable types, which own't work for lambda parameters with inferred types after JDK-8268850. The recommended replacement is variableType(TypePredicate).
  • Make enclosingPackage return an optional. Module elements are not enclosed by a package, checks using enclosingPackage shouldn't assume an enclosing package exists when processing arbitrary elements.
  • New FieldMatchers API, similar to MethodMatchers (google/error-prone@1dd9c3a).

New checks:

Closed issues: #2283, #3503, #5210, #5289, #5548, #5548, #5554, #5609, #5614, #5656

Full changelog: google/error-prone@v2.48.0...v2.49.0

Error Prone 2.48.0

Changes:

New checks:

Closed issues: #5529, #5537, #5522, #5521

Full changelog: google/error-prone@v2.47.0...v2.48.0

Error Prone 2.47.0

New checks:

Closed issues: #1811, #4168, #5459, #5460

Full changelog: google/error-prone@v2.46.0...v2.47.0

Error Prone 2.46.0

Changes:

... (truncated)

Commits
  • 89d75c1 Release Error Prone 2.49.0
  • 0b7b03b Fix up some javadoc on `ModifySourceCollectionInStream.isStreamApiInvocationO...
  • fe5a7b1 Remove old FieldMatchers API
  • d54a1d1 Fix up some Finally javadocs.
  • d93b319 [RefactorSwitch] bugfix comment handling
  • ff59782 [IfChainToSwitch] cleanup redundant conditions in ternary. No functional cha...
  • 43b6df6 Generalise DuplicateAssertion to handle check* methods.
  • 2c4346f Fix a bug in BooleanLiteral: it currently suggests replacing `Boolean.FALSE...
  • 559039b [IfChainToSwitch] doc-only change. fix typo in code comments.
  • 393c61c [IfChainToSwitch] enhance code generation to emit unnamed variables, when sup...
  • Additional commits viewable in compare view

Updates com.google.errorprone:error_prone_core from 2.40.0 to 2.49.0

Release notes

Sourced from com.google.errorprone:error_prone_core's releases.

Error Prone 2.49.0

This release includes several changes to Matcher APIs, and removed some deprecated or problematic APIs:

  • Remove deprecated MethodMatchers.withSignature API, which relies on fragile toString behaviour. Alternatives for matching on method signatures with varargs and type parameters were added in google/error-prone@a98a1c5.
  • Removed variableType(Matcher) API. Matchers.variableType(Matcher) uses VariableTree#getType to match variable types, which own't work for lambda parameters with inferred types after JDK-8268850. The recommended replacement is variableType(TypePredicate).
  • Make enclosingPackage return an optional. Module elements are not enclosed by a package, checks using enclosingPackage shouldn't assume an enclosing package exists when processing arbitrary elements.
  • New FieldMatchers API, similar to MethodMatchers (google/error-prone@1dd9c3a).

New checks:

Closed issues: #2283, #3503, #5210, #5289, #5548, #5548, #5554, #5609, #5614, #5656

Full changelog: google/error-prone@v2.48.0...v2.49.0

Error Prone 2.48.0

Changes:

New checks:

Closed issues: #5529, #5537, #5522, #5521

Full changelog: google/error-prone@v2.47.0...v2.48.0

Error Prone 2.47.0

New checks:

Closed issues: #1811, #4168, #5459, #5460

Full changelog: google/error-prone@v2.46.0...v2.47.0

Error Prone 2.46.0

Changes:

... (truncated)

Commits
  • 89d75c1 Release Error Prone 2.49.0
  • 0b7b03b Fix up some javadoc on `ModifySourceCollectionInStream.isStreamApiInvocationO...
  • fe5a7b1 Remove old FieldMatchers API
  • d54a1d1 Fix up some Finally javadocs.
  • d93b319 [RefactorSwitch] bugfix comment handling
  • ff59782 [IfChainToSwitch] cleanup redundant conditions in ternary. No functional cha...
  • 43b6df6 Generalise DuplicateAssertion to handle check* methods.
  • 2c4346f Fix a bug in BooleanLiteral: it currently suggests replacing `Boolean.FALSE...
  • 559039b [IfChainToSwitch] doc-only change. fix typo in code comments.
  • 393c61c [IfChainToSwitch] enhance code generation to emit unnamed variables, when sup...
  • Additional commits viewable in compare view

Updates com.google.protobuf:protobuf-java from 4.31.1 to 4.34.1

Commits

Updates com.hubspot.jinjava:jinjava from 2.8.1 to 2.8.3

Release notes

Sourced from com.hubspot.jinjava:jinjava's releases.

jinjava-2.8.3

2025-02-02 Version 2.8.3 (Maven Central)

jinjava-2.8.2

2025-10-22 Version 2.8.2 (Maven Central)

Changelog

Sourced from com.hubspot.jinjava:jinjava's changelog.

2026-02-02 Version 2.8.3 (Maven Central)

2026-02-02 Version 2.7.6 (Maven Central)

  • Disallow accessing properties on restricted classes while rendering through ForTag
  • Upgrade jackson to version 2.20

2025-10-22 Version 2.8.2 (Maven Central)

2025-09-30 Version 2.7.5 (Maven Central)

  • Disallow accessing properties on ...

    Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code v1-engine-changed labels Apr 13, 2026
@dependabot dependabot Bot force-pushed the dependabot/maven/wren-core-legacy/all-68702b2851 branch from afcb002 to db0355d Compare April 20, 2026 20:28
@dependabot dependabot Bot force-pushed the dependabot/maven/wren-core-legacy/all-68702b2851 branch from db0355d to 5a5fa7e Compare April 27, 2026 22:02
@dependabot
deps(java): bump the all group across 1 directory with 30 updates
af31900 
Bumps the all group with 29 updates in the /wren-core-legacy directory:

| Package | From | To |
| --- | --- | --- |
| [io.airlift:airbase](https://github.com/airlift/airbase) | `279` | `373` |
| [org.jdbi:jdbi3-bom](https://github.com/jdbi/jdbi) | `3.49.5` | `3.53.0` |
| [org.testcontainers:testcontainers-bom](https://github.com/testcontainers/testcontainers-java) | `1.21.3` | `2.0.5` |
| [org.testcontainers:testcontainers](https://github.com/testcontainers/testcontainers-java) | `1.21.3` | `2.0.5` |
| [com.fasterxml.jackson.core:jackson-annotations](https://github.com/FasterXML/jackson) | `2.19.1` | `2.21` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.19.1` | `2.21.3` |
| [com.fasterxml.jackson.dataformat:jackson-dataformat-yaml](https://github.com/FasterXML/jackson-dataformats-text) | `2.19.1` | `2.21.3` |
| [com.google.code.gson:gson](https://github.com/google/gson) | `2.13.1` | `2.14.0` |
| [com.google.errorprone:error_prone_annotations](https://github.com/google/error-prone) | `2.40.0` | `2.49.0` |
| [com.google.errorprone:error_prone_core](https://github.com/google/error-prone) | `2.40.0` | `2.49.0` |
| [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `4.31.1` | `4.34.1` |
| [com.hubspot.jinjava:jinjava](https://github.com/HubSpot/jinjava) | `2.8.1` | `2.8.3` |
| [com.zaxxer:HikariCP](https://github.com/brettwooldridge/HikariCP) | `6.3.0` | `7.0.2` |
| [io.airlift:units](https://github.com/airlift/units) | `1.10` | `1.13` |
| [io.opentelemetry:opentelemetry-api](https://github.com/open-telemetry/opentelemetry-java) | `1.47.0` | `1.61.0` |
| [io.opentelemetry:opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-java) | `1.47.0` | `1.61.0` |
| [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) | `1.17.6` | `1.18.8` |
| [org.checkerframework:checker-qual](https://github.com/typetools/checker-framework) | `3.49.5` | `4.1.0` |
| [org.duckdb:duckdb_jdbc](https://github.com/duckdb/duckdb) | `1.3.2.0` | `1.5.2.1` |
| [org.jetbrains:annotations](https://github.com/JetBrains/java-annotations) | `26.0.2` | `26.1.0` |
| [org.jgrapht:jgrapht-core](https://github.com/jgrapht/jgrapht) | `1.5.2` | `1.5.3` |
| [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) | `42.7.7` | `42.7.11` |
| [org.threeten:threetenbp](https://github.com/ThreeTen/threetenbp) | `1.7.1` | `1.7.2` |
| [org.apache.maven.plugins:maven-shade-plugin](https://github.com/apache/maven-shade-plugin) | `3.6.0` | `3.6.2` |
| [org.apache.maven.plugins:maven-antrun-plugin](https://github.com/apache/maven-antrun-plugin) | `3.1.0` | `3.2.0` |
| [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.5.1` | `3.6.3` |
| [io.airlift.drift:drift-maven-plugin](https://github.com/airlift/drift) | `1.23` | `1.24` |
| [io.trino:trino-maven-plugin](https://github.com/trinodb/trino-maven-plugin) | `15` | `20` |
| [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) | `3.8.1` | `3.10.0` |



Updates `io.airlift:airbase` from 279 to 373
- [Release notes](https://github.com/airlift/airbase/releases)
- [Changelog](https://github.com/airlift/airbase/blob/master/CHANGES.md)
- [Commits](https://github.com/airlift/airbase/commits)

Updates `org.jdbi:jdbi3-bom` from 3.49.5 to 3.53.0
- [Release notes](https://github.com/jdbi/jdbi/releases)
- [Changelog](https://github.com/jdbi/jdbi/blob/master/RELEASE_NOTES.md)
- [Commits](jdbi/jdbi@v3.49.5...v3.53.0)

Updates `org.testcontainers:testcontainers-bom` from 1.21.3 to 2.0.5
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.21.3...2.0.5)

Updates `org.testcontainers:testcontainers` from 1.21.3 to 2.0.5
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.21.3...2.0.5)

Updates `com.fasterxml.jackson.core:jackson-annotations` from 2.19.1 to 2.21
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.19.1 to 2.21.3
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-yaml` from 2.19.1 to 2.21.3
- [Commits](FasterXML/jackson-dataformats-text@jackson-dataformats-text-2.19.1...jackson-dataformats-text-2.21.3)

Updates `com.google.code.gson:gson` from 2.13.1 to 2.14.0
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-parent-2.13.1...gson-parent-2.14.0)

Updates `com.google.errorprone:error_prone_annotations` from 2.40.0 to 2.49.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.40.0...v2.49.0)

Updates `com.google.errorprone:error_prone_core` from 2.40.0 to 2.49.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.40.0...v2.49.0)

Updates `com.google.protobuf:protobuf-java` from 4.31.1 to 4.34.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `com.hubspot.jinjava:jinjava` from 2.8.1 to 2.8.3
- [Release notes](https://github.com/HubSpot/jinjava/releases)
- [Changelog](https://github.com/HubSpot/jinjava/blob/master/CHANGES.md)
- [Commits](HubSpot/jinjava@jinjava-2.8.1...jinjava-2.8.3)

Updates `com.zaxxer:HikariCP` from 6.3.0 to 7.0.2
- [Changelog](https://github.com/brettwooldridge/HikariCP/blob/dev/CHANGES)
- [Commits](brettwooldridge/HikariCP@HikariCP-6.3.0...HikariCP-7.0.2)

Updates `io.airlift:units` from 1.10 to 1.13
- [Release notes](https://github.com/airlift/units/releases)
- [Commits](airlift/units@1.10...1.13)

Updates `io.opentelemetry:opentelemetry-api` from 1.47.0 to 1.61.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.47.0...v1.61.0)

Updates `io.opentelemetry:opentelemetry-sdk` from 1.47.0 to 1.61.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.47.0...v1.61.0)

Updates `net.bytebuddy:byte-buddy` from 1.17.6 to 1.18.8
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.17.6...byte-buddy-1.18.8)

Updates `org.checkerframework:checker-qual` from 3.49.5 to 4.1.0
- [Release notes](https://github.com/typetools/checker-framework/releases)
- [Changelog](https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md)
- [Commits](typetools/checker-framework@checker-framework-3.49.5...checker-framework-4.1.0)

Updates `org.duckdb:duckdb_jdbc` from 1.3.2.0 to 1.5.2.1
- [Release notes](https://github.com/duckdb/duckdb/releases)
- [Commits](https://github.com/duckdb/duckdb/commits)

Updates `org.jetbrains:annotations` from 26.0.2 to 26.1.0
- [Release notes](https://github.com/JetBrains/java-annotations/releases)
- [Changelog](https://github.com/JetBrains/java-annotations/blob/master/CHANGELOG.md)
- [Commits](JetBrains/java-annotations@26.0.2...26.1.0)

Updates `org.jgrapht:jgrapht-core` from 1.5.2 to 1.5.3
- [Changelog](https://github.com/jgrapht/jgrapht/blob/master/HISTORY.md)
- [Commits](jgrapht/jgrapht@jgrapht-1.5.2...jgrapht-1.5.3)

Updates `org.postgresql:postgresql` from 42.7.7 to 42.7.11
- [Release notes](https://github.com/pgjdbc/pgjdbc/releases)
- [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md)
- [Commits](pgjdbc/pgjdbc@REL42.7.7...REL42.7.11)

Updates `org.testcontainers:testcontainers` from 1.21.3 to 2.0.5
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.21.3...2.0.5)

Updates `org.threeten:threetenbp` from 1.7.1 to 1.7.2
- [Release notes](https://github.com/ThreeTen/threetenbp/releases)
- [Changelog](https://github.com/ThreeTen/threetenbp/blob/main/RELEASE-NOTES.md)
- [Commits](ThreeTen/threetenbp@v1.7.1...v1.7.2)

Updates `com.google.errorprone:error_prone_core` from 2.40.0 to 2.49.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.40.0...v2.49.0)

Updates `org.apache.maven.plugins:maven-shade-plugin` from 3.6.0 to 3.6.2
- [Release notes](https://github.com/apache/maven-shade-plugin/releases)
- [Commits](apache/maven-shade-plugin@maven-shade-plugin-3.6.0...maven-shade-plugin-3.6.2)

Updates `org.apache.maven.plugins:maven-antrun-plugin` from 3.1.0 to 3.2.0
- [Release notes](https://github.com/apache/maven-antrun-plugin/releases)
- [Commits](apache/maven-antrun-plugin@maven-antrun-plugin-3.1.0...maven-antrun-plugin-3.2.0)

Updates `org.codehaus.mojo:exec-maven-plugin` from 3.5.1 to 3.6.3
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
- [Commits](mojohaus/exec-maven-plugin@3.5.1...3.6.3)

Updates `io.airlift.drift:drift-maven-plugin` from 1.23 to 1.24
- [Commits](airlift/drift@1.23...1.24)

Updates `io.trino:trino-maven-plugin` from 15 to 20
- [Release notes](https://github.com/trinodb/trino-maven-plugin/releases)
- [Commits](https://github.com/trinodb/trino-maven-plugin/commits)

Updates `org.ow2.asm:asm` from 9.8 to 9.9.1

Updates `org.apache.maven.plugins:maven-dependency-plugin` from 3.8.1 to 3.10.0
- [Release notes](https://github.com/apache/maven-dependency-plugin/releases)
- [Commits](apache/maven-dependency-plugin@maven-dependency-plugin-3.8.1...maven-dependency-plugin-3.10.0)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-annotations
  dependency-version: '2.21'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-yaml
  dependency-version: 2.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: com.google.errorprone:error_prone_annotations
  dependency-version: 2.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: com.google.errorprone:error_prone_core
  dependency-version: 2.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: com.google.errorprone:error_prone_core
  dependency-version: 2.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 4.34.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: com.hubspot.jinjava:jinjava
  dependency-version: 2.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: com.zaxxer:HikariCP
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: io.airlift.drift:drift-maven-plugin
  dependency-version: '1.24'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: io.airlift:airbase
  dependency-version: '369'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: io.airlift:units
  dependency-version: '1.13'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: io.opentelemetry:opentelemetry-api
  dependency-version: 1.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: io.opentelemetry:opentelemetry-sdk
  dependency-version: 1.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: io.trino:trino-maven-plugin
  dependency-version: '17'
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: net.bytebuddy:byte-buddy
  dependency-version: 1.18.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: org.apache.maven.plugins:maven-antrun-plugin
  dependency-version: 3.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: org.apache.maven.plugins:maven-dependency-plugin
  dependency-version: 3.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: org.apache.maven.plugins:maven-shade-plugin
  dependency-version: 3.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: org.checkerframework:checker-qual
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: org.codehaus.mojo:exec-maven-plugin
  dependency-version: 3.6.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: org.duckdb:duckdb_jdbc
  dependency-version: 1.5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: org.jdbi:jdbi3-bom
  dependency-version: 3.52.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: org.jetbrains:annotations
  dependency-version: 26.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: org.jgrapht:jgrapht-core
  dependency-version: 1.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: org.ow2.asm:asm
  dependency-version: 9.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: org.postgresql:postgresql
  dependency-version: 42.7.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: org.testcontainers:testcontainers
  dependency-version: 2.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: org.testcontainers:testcontainers
  dependency-version: 2.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: org.testcontainers:testcontainers-bom
  dependency-version: 2.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: org.threeten:threetenbp
  dependency-version: 1.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/maven/wren-core-legacy/all-68702b2851 branch from 5a5fa7e to af31900 Compare May 4, 2026 22:39
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code v1-engine-changed

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants