apache · janhoy · Jun 30, 2026 · Apr 25, 2026 · Apr 25, 2026 · May 1, 2026
diff --git a/build.gradle b/build.gradle
@@ -28,7 +28,7 @@ plugins {
   id 'net.ltgt.errorprone' version '5.1.0' apply false
   id 'com.diffplug.spotless' version '7.2.1' apply false
   id 'com.github.node-gradle.node' version '7.1.0' apply false
-  id 'dev.logchange' version '1.19.10'
+  id 'dev.logchange' version '1.19.15'
 }
 
 apply from: file('gradle/globals.gradle')

diff --git a/changelog/unreleased/PR#3529-update-io-dropwizard-metrics-to-v4-2-38-branch-9x.yml b/changelog/unreleased/PR#3529-update-io-dropwizard-metrics-to-v4-2-38-branch-9x.yml
diff --git a/changelog/unreleased/PR#3560-update-io-grpc-grpc-to-v1-80-0-branch-9x.yml b/changelog/unreleased/PR#3560-update-io-grpc-grpc-to-v1-80-0-branch-9x.yml
diff --git a/changelog/unreleased/PR#3572-update-com-google-protobuf-to-v4-branch-9x-major.yml b/changelog/unreleased/PR#3572-update-com-google-protobuf-to-v4-branch-9x-major.yml
diff --git a/changelog/unreleased/PR#3593-update-software-amazon-awssdk-to-v2-41-0-branch.yml b/changelog/unreleased/PR#3593-update-software-amazon-awssdk-to-v2-41-0-branch.yml
diff --git a/changelog/unreleased/PR#3694-update-org-immutables-value-annotations.yml b/changelog/unreleased/PR#3694-update-org-immutables-value-annotations.yml
diff --git a/changelog/unreleased/PR#4013-update-commons-codec-commons-codec.yml b/changelog/unreleased/PR#4013-update-commons-codec-commons-codec.yml
diff --git a/changelog/unreleased/PR#4014-update-commons-io-commons-io.yml b/changelog/unreleased/PR#4014-update-commons-io-commons-io.yml
diff --git a/changelog/unreleased/PR#4019-update-org-apache-commons-commons-configuration2.yml b/changelog/unreleased/PR#4019-update-org-apache-commons-commons-configuration2.yml
diff --git a/changelog/unreleased/PR#4026-update-io-netty-netty-to-v4-2-12-final-branch-9x.yml b/changelog/unreleased/PR#4026-update-io-netty-netty-to-v4-2-12-final-branch-9x.yml
diff --git a/changelog/unreleased/PR#4028-update-io-prometheus-prometheus-to-v1-5-1-branch.yml b/changelog/unreleased/PR#4028-update-io-prometheus-prometheus-to-v1-5-1-branch.yml
diff --git a/changelog/unreleased/PR#4302-update-org-apache-tika-to-v3-3-0-branch-9x.yml b/changelog/unreleased/PR#4302-update-org-apache-tika-to-v3-3-0-branch-9x.yml
diff --git a/changelog/unreleased/PR#4313-update-com-github-ben-manes-caffeine-caffeine.yml b/changelog/unreleased/PR#4313-update-com-github-ben-manes-caffeine-caffeine.yml
diff --git a/changelog/unreleased/PR#4332-update-commons-codec-commons-codec.yml b/changelog/unreleased/PR#4332-update-commons-codec-commons-codec.yml
@@ -0,0 +1,7 @@
+title: Update commons-codec:commons-codec to v1.22.0
+type: dependency_update
+authors:
+- name: solrbot
+links:
+- name: PR#4332
+  url: https://github.com/apache/solr/pull/4332
diff --git a/changelog/unreleased/PR#4390-update-com-github-ben-manes-caffeine-caffeine.yml b/changelog/unreleased/PR#4390-update-com-github-ben-manes-caffeine-caffeine.yml
@@ -0,0 +1,7 @@
+title: Update com.github.ben-manes.caffeine:caffeine to v3.2.4
+type: dependency_update
+authors:
+- name: solrbot
+links:
+- name: PR#4390
+  url: https://github.com/apache/solr/pull/4390
diff --git a/changelog/unreleased/PR#4438-update-org-slf4j-to-v2-0-18-branch-9x.yml b/changelog/unreleased/PR#4438-update-org-slf4j-to-v2-0-18-branch-9x.yml
@@ -0,0 +1,7 @@
+title: Update org.slf4j:* to v2.0.18
+type: dependency_update
+authors:
+- name: solrbot
+links:
+- name: PR#4438
+  url: https://github.com/apache/solr/pull/4438
diff --git a/changelog/unreleased/PR#4456-update-org-immutables-value-annotations.yml b/changelog/unreleased/PR#4456-update-org-immutables-value-annotations.yml
@@ -0,0 +1,7 @@
+title: Update org.immutables:value-annotations to v2.12.2
+type: dependency_update
+authors:
+- name: solrbot
+links:
+- name: PR#4456
+  url: https://github.com/apache/solr/pull/4456
diff --git a/changelog/unreleased/PR#4470-update-org-apache-tika-to-v3-3-1-branch-9x.yml b/changelog/unreleased/PR#4470-update-org-apache-tika-to-v3-3-1-branch-9x.yml
@@ -0,0 +1,7 @@
+title: Update org.apache.tika:* to v3.3.1
+type: dependency_update
+authors:
+- name: solrbot
+links:
+- name: PR#4470
+  url: https://github.com/apache/solr/pull/4470
diff --git a/changelog/unreleased/update-awssdk-2.46.18.yml b/changelog/unreleased/update-awssdk-2.46.18.yml
@@ -0,0 +1,7 @@
+title: Update software.amazon.awssdk:* to v2.46.18
+type: dependency_update
+authors:
+- name: solrbot
+links:
+- name: PR#4379
+  url: https://github.com/apache/solr/pull/4379
diff --git a/changelog/unreleased/update-bnd-annotation-7.3.0.yml b/changelog/unreleased/update-bnd-annotation-7.3.0.yml
@@ -0,0 +1,7 @@
+title: Update biz.aQute.bnd:biz.aQute.bnd.annotation to v7.3.0
+type: dependency_update
+authors:
+- name: solrbot
+links:
+- name: PR#4360
+  url: https://github.com/apache/solr/pull/4360
diff --git a/changelog/unreleased/update-bouncycastle-bcpkix-1.84.yml b/changelog/unreleased/update-bouncycastle-bcpkix-1.84.yml
@@ -0,0 +1,7 @@
+title: Update org.bouncycastle:bcpkix-jdk18on to v1.84
+type: dependency_update
+authors:
+- name: solrbot
+links:
+- name: PR#4382
+  url: https://github.com/apache/solr/pull/4382
diff --git a/changelog/unreleased/update-bytebuddy-1.18.10.yml b/changelog/unreleased/update-bytebuddy-1.18.10.yml
@@ -0,0 +1,7 @@
+title: Update net.bytebuddy:* to v1.18.10
+type: dependency_update
+authors:
+- name: solrbot
+links:
+- name: PR#4384
+  url: https://github.com/apache/solr/pull/4384
diff --git a/changelog/unreleased/update-commons-configuration2-2.15.1.yml b/changelog/unreleased/update-commons-configuration2-2.15.1.yml
@@ -0,0 +1,7 @@
+title: Update org.apache.commons:commons-configuration2 to v2.15.1
+type: dependency_update
+authors:
+- name: solrbot
+links:
+- name: PR#4439
+  url: https://github.com/apache/solr/pull/4439
diff --git a/changelog/unreleased/update-commons-io-2.22.0.yml b/changelog/unreleased/update-commons-io-2.22.0.yml
@@ -0,0 +1,7 @@
+title: Update commons-io:commons-io to v2.22.0
+type: dependency_update
+authors:
+- name: solrbot
+links:
+- name: PR#4327
+  url: https://github.com/apache/solr/pull/4327
diff --git a/changelog/unreleased/update-dropwizard-metrics-4.2.39.yml b/changelog/unreleased/update-dropwizard-metrics-4.2.39.yml
@@ -0,0 +1,7 @@
+title: Update io.dropwizard.metrics:* to v4.2.39
+type: dependency_update
+authors:
+- name: solrbot
+links:
+- name: PR#4480
+  url: https://github.com/apache/solr/pull/4480
diff --git a/changelog/unreleased/update-google-cloud-bom-0.265.0.yml b/changelog/unreleased/update-google-cloud-bom-0.265.0.yml
@@ -0,0 +1,7 @@
+title: Update com.google.cloud:google-cloud-bom to v0.265.0
+type: dependency_update
+authors:
+- name: solrbot
+links:
+- name: PR#3589
+  url: https://github.com/apache/solr/pull/3589
diff --git a/changelog/unreleased/update-grpc-1.82.1.yml b/changelog/unreleased/update-grpc-1.82.1.yml
@@ -0,0 +1,7 @@
+title: Update io.grpc:grpc-* to v1.82.1
+type: dependency_update
+authors:
+- name: solrbot
+links:
+- name: PR#4378
+  url: https://github.com/apache/solr/pull/4378
diff --git a/changelog/unreleased/update-jackson-bom-2.22.0.yml b/changelog/unreleased/update-jackson-bom-2.22.0.yml
@@ -0,0 +1,7 @@
+title: Update com.fasterxml.jackson:jackson-bom to v2.22.0
+type: dependency_update
+authors:
+- name: solrbot
+links:
+- name: PR#4016
+  url: https://github.com/apache/solr/pull/4016
diff --git a/changelog/unreleased/update-json-path-2.10.0.yml b/changelog/unreleased/update-json-path-2.10.0.yml
@@ -0,0 +1,7 @@
+title: Update com.jayway.jsonpath:json-path to v2.10.0
+type: dependency_update
+authors:
+- name: solrbot
+links:
+- name: PR#4017
+  url: https://github.com/apache/solr/pull/4017
diff --git a/changelog/unreleased/update-kerby-2.1.2.yml b/changelog/unreleased/update-kerby-2.1.2.yml
@@ -0,0 +1,7 @@
+title: Update org.apache.kerby:* to v2.1.2
+type: dependency_update
+authors:
+- name: solrbot
+links:
+- name: PR#4380
+  url: https://github.com/apache/solr/pull/4380
diff --git a/changelog/unreleased/update-logchange-plugin-1.19.15.yml b/changelog/unreleased/update-logchange-plugin-1.19.15.yml
@@ -0,0 +1,7 @@
+title: Update plugin dev.logchange to v1.19.15
+type: dependency_update
+authors:
+- name: solrbot
+links:
+- name: PR#4015
+  url: https://github.com/apache/solr/pull/4015
diff --git a/changelog/unreleased/update-netty-4.2.15.yml b/changelog/unreleased/update-netty-4.2.15.yml
@@ -0,0 +1,7 @@
+title: Update io.netty:netty* to v4.2.15.Final
+type: dependency_update
+authors:
+- name: solrbot
+links:
+- name: PR#4398
+  url: https://github.com/apache/solr/pull/4398
diff --git a/changelog/unreleased/update-opentelemetry-bom-1.63.0.yml b/changelog/unreleased/update-opentelemetry-bom-1.63.0.yml
@@ -0,0 +1,7 @@
+title: Update io.opentelemetry:opentelemetry-bom to v1.63.0 (and okhttp to v5.4.0)
+type: dependency_update
+authors:
+- name: solrbot
+links:
+- name: PR#3646
+  url: https://github.com/apache/solr/pull/3646
diff --git a/changelog/unreleased/update-prometheus-1.8.0.yml b/changelog/unreleased/update-prometheus-1.8.0.yml
@@ -0,0 +1,7 @@
+title: Update io.prometheus:prometheus* to v1.8.0
+type: dependency_update
+authors:
+- name: solrbot
+links:
+- name: PR#4371
+  url: https://github.com/apache/solr/pull/4371
diff --git a/changelog/unreleased/update-protobuf-4.35.1.yml b/changelog/unreleased/update-protobuf-4.35.1.yml
@@ -0,0 +1,7 @@
+title: Update com.google.protobuf:* to v4.35.1
+type: dependency_update
+authors:
+- name: solrbot
+links:
+- name: PR#4460
+  url: https://github.com/apache/solr/pull/4460
diff --git a/changelog/unreleased/update-randomizedtesting-2.9.1.yml b/changelog/unreleased/update-randomizedtesting-2.9.1.yml
@@ -0,0 +1,7 @@
+title: Update com.carrotsearch.randomizedtesting:* to v2.9.1
+type: dependency_update
+authors:
+- name: solrbot
+links:
+- name: PR#4494
+  url: https://github.com/apache/solr/pull/4494
diff --git a/changelog/unreleased/update-testcontainers-2.0.5.yml b/changelog/unreleased/update-testcontainers-2.0.5.yml
@@ -0,0 +1,7 @@
+title: Update org.testcontainers:testcontainers* to v2.0.5
+type: dependency_update
+authors:
+- name: solrbot
+links:
+- name: PR#4386
+  url: https://github.com/apache/solr/pull/4386
diff --git a/gradle/testing/randomization/policies/solr-tests.policy b/gradle/testing/randomization/policies/solr-tests.policy
@@ -180,6 +180,8 @@ grant {
   permission java.security.SecurityPermission "putProviderProperty.BC";
   permission java.security.SecurityPermission "removeProviderProperty.BC";
   permission java.security.SecurityPermission "getProperty.org.bouncycastle.x509.allow_non-der_tbscert";
+  permission java.security.SecurityPermission "getProperty.org.bouncycastle.ec.max_f2m_field_size";
+  permission java.security.SecurityPermission "getProperty.org.bouncycastle.asn1.max_cons_depth";
 
   // may only be necessary with Java 7?
   permission javax.security.auth.PrivateCredentialPermission "javax.security.auth.kerberos.KeyTab * \"*\"", "read";

diff --git a/solr/core/src/test/org/apache/solr/cloud/CreateRoutedAliasTest.java b/solr/core/src/test/org/apache/solr/cloud/CreateRoutedAliasTest.java
@@ -352,7 +352,7 @@ public void testCollectionNamesMustBeAbsent() throws Exception {
                 + "/admin/collections?action=CREATEALIAS"
                 + "&wt=json"
                 + "&name="
-                + getTestName()
+                + getSaferTestName()
                 + "&collections=collection1meta,collection2meta"
                 + "&router.field=evt_dt"
                 + "&router.name=time"

diff --git a/solr/core/src/test/org/apache/solr/cloud/overseer/ZkStateReaderTest.java b/solr/core/src/test/org/apache/solr/cloud/overseer/ZkStateReaderTest.java
@@ -111,7 +111,7 @@ public void close() throws IOException {
   @Before
   public void setUp() throws Exception {
     super.setUp();
-    fixture = setupTestFixture(getTestName(), -1);
+    fixture = setupTestFixture(getSaferTestName(), -1);
   }
 
   @Override
@@ -482,7 +482,7 @@ public void testForciblyRefreshAllClusterState() throws Exception {
 
   public void testForciblyRefreshAllClusterStateCompressed() throws Exception {
     fixture.close();
-    fixture = setupTestFixture(getTestName(), 0);
+    fixture = setupTestFixture(getSaferTestName(), 0);
     ZkStateWriter writer = fixture.writer;
     ZkStateReader reader = fixture.reader;
 

diff --git a/solr/core/src/test/org/apache/solr/response/TestRawResponseWriter.java b/solr/core/src/test/org/apache/solr/response/TestRawResponseWriter.java
@@ -186,7 +186,7 @@ public void testStructuredDataViaBaseWriters() throws IOException {
     // cbor
 
     byte[] cborBytes = convertJsonToCborFormat(json.getBytes(StandardCharsets.UTF_8));
-    assertEquals(26, cborBytes.length);
+    assertEquals(25, cborBytes.length);
     LongAdder numberOfObjectsInResponse = new LongAdder();
     new CborLoader(null, (document) -> numberOfObjectsInResponse.increment())
         .stream(new ByteArrayInputStream(cborBytes));

diff --git a/solr/core/src/test/org/apache/solr/util/TestCborDataFormat.java b/solr/core/src/test/org/apache/solr/util/TestCborDataFormat.java
@@ -219,7 +219,7 @@ public void test() throws Exception {
 
     byte[] b = Files.readAllBytes(filmsJson);
     byte[] bytes = serializeToCbor(b);
-    assertEquals(210439, bytes.length);
+    assertEquals(209339, bytes.length);
     LongAdder docsSz = new LongAdder();
     new CborLoader(null, (document) -> docsSz.increment()).stream(new ByteArrayInputStream(bytes));
     assertEquals(films.size(), docsSz.intValue());

diff --git a/solr/licenses/annotations-2.42.37.jar.sha1 b/solr/licenses/annotations-2.42.37.jar.sha1
diff --git a/solr/licenses/annotations-2.46.18.jar.sha1 b/solr/licenses/annotations-2.46.18.jar.sha1
@@ -0,0 +1 @@
+2ff1a7e280a2a90f9d5971f8d7847c8ddee120f9
diff --git a/solr/licenses/apache-client-2.42.37.jar.sha1 b/solr/licenses/apache-client-2.42.37.jar.sha1
diff --git a/solr/licenses/apache-client-2.46.18.jar.sha1 b/solr/licenses/apache-client-2.46.18.jar.sha1
@@ -0,0 +1 @@
+f2dca762b4e51ae8d8c9e90b91e39289980b28a3
diff --git a/solr/licenses/apache5-client-2.46.18.jar.sha1 b/solr/licenses/apache5-client-2.46.18.jar.sha1
@@ -0,0 +1 @@
+662303b4b9001c88ad7b3bd31270dcd70489454f