Skip to content

chore(deps): update upper bound dependencies file#12939

Open
renovate-bot wants to merge 1 commit intogoogleapis:mainfrom
renovate-bot:renovate/upper-bound-dependencies-file
Open

chore(deps): update upper bound dependencies file#12939
renovate-bot wants to merge 1 commit intogoogleapis:mainfrom
renovate-bot:renovate/upper-bound-dependencies-file

Conversation

@renovate-bot
Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
com.google.code.gson:gson 2.13.22.14.0 age confidence
com.google.guava:guava 33.5.0-jre33.6.0-jre age confidence
commons-codec:commons-codec (source) 1.21.01.22.0 age confidence
org.apache.httpcomponents.client5:httpclient5 (source) 5.65.6.1 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

apache/commons-codec (commons-codec:commons-codec)

v1.22.0

The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.22.0.

The Apache Commons Codec component contains encoders and decoders for
formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
widely used encoders and decoders, the codec package also maintains a
collection of phonetic encoding utilities.

This is a feature and maintenance release. Java 8 or later is required.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate-bot renovate-bot requested a review from a team as a code owner April 27, 2026 15:39
Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates several dependency versions, including gson, guava, commons-codec, and httpclient5. A potential issue was identified regarding the update of httpclient5 to 5.6.1 without a corresponding update to httpcore5, which may lead to binary incompatibilities or runtime errors.

org.apache.httpcomponents:httpclient,httpcomponents.httpclient=4.5.14
org.apache.httpcomponents:httpcore,httpcomponents.httpcore=4.4.16
org.apache.httpcomponents.client5:httpclient5,apache-httpclient-5=5.6
org.apache.httpcomponents.client5:httpclient5,apache-httpclient-5=5.6.1
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

Updating httpclient5 to 5.6.1 while leaving httpcore5 at 5.4.2 (line 40) may lead to binary incompatibilities or NoSuchMethodError at runtime. These components are part of the same project and are typically updated in tandem to ensure compatibility. Please verify if httpcore5 also needs to be updated to a version compatible with HttpClient 5.6.1 (e.g., 5.6.x or 5.5.x).

@lqiu96 lqiu96 added the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Apr 27, 2026
@yoshi-kokoro yoshi-kokoro removed the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Apr 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants