Skip to content

build(deps): bump the dependencies group with 17 updates - #3986

Merged
jknack merged 1 commit into
mainfrom
dependabot/maven/dependencies-30f8081900
Aug 3, 2026
Merged

build(deps): bump the dependencies group with 17 updates#3986
jknack merged 1 commit into
mainfrom
dependabot/maven/dependencies-30f8081900

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 17 updates:

Package From To
org.jspecify:jspecify 1.0.0 1.0.1
io.repaint.maven:tiles-maven-plugin 2.44 2.45
com.github.eirslett:frontend-maven-plugin 2.0.1 2.0.2
com.diffplug.spotless:spotless-maven-plugin 3.8.0 3.9.0
com.puppycrawl.tools:checkstyle 13.8.0 13.9.0
commons-codec:commons-codec 1.22.0 1.22.1
dev.langchain4j:langchain4j-bom 1.18.0 1.18.1
io.github.classgraph:classgraph 4.8.184 4.8.186
io.grpc:grpc-protobuf 1.83.0 1.83.1
io.grpc:grpc-stub 1.83.0 1.83.1
io.grpc:grpc-inprocess 1.83.0 1.83.1
io.grpc:grpc-services 1.83.0 1.83.1
io.grpc:grpc-servlet 1.83.0 1.83.1
io.grpc:grpc-netty-shaded 1.83.0 1.83.1
io.grpc:grpc-okhttp 1.83.0 1.83.1
software.amazon.awssdk:bom 2.49.3 2.50.0
org.jsoup:jsoup 1.22.2 1.23.1

Updates org.jspecify:jspecify from 1.0.0 to 1.0.1

Release notes

Sourced from org.jspecify:jspecify's releases.

1.0.1

JSpecify 1.0.1 makes small changes to documentation and build setup but no semantic changes.

Artifacts

Changes since version 1.0.0

  • The JSpecify module-info.class is now present at the root of the jar instead of under a multi-release root. This prevents the jar from containing a file at META-INF/versions/9/OSGI-INF/MANIFEST.MF, which was causing trouble for some users, particularly on Android.
  • The JSpecify module-info.class now contains its version number.
  • We have made various improvements to our Javadoc. While the latest docs are always available at jspecify.dev/docs/api, this release makes our improvements visible in the source files in your IDE.
Commits
  • ce9bec0 Set version to 1.0.1.
  • 7c7f0cf Migrate to com.vanniktech.maven.publish.
  • 2789f67 Bump yaml from 1.10.2 to 1.10.3 in /docs (#853)
  • 1638ca0 Bump svgo from 3.3.2 to 3.3.4 in /docs (#852)
  • 4e80178 Place module-info in the root of the jar. (#809)
  • 5b679e0 Codex found a few more questions the FAQ already answers. (#848)
  • 2019899 Link to the new location of the design FAQ and to specific sections. (#845)
  • f01eac9 batch of javadoc revisions for clarity and completeness (#671)
  • c4eff31 Import the nullness design FAQ as Markdown. (#838)
  • 75fb9cf Bump websocket-driver from 0.7.4 to 0.7.5 in /docs (#835)
  • Additional commits viewable in compare view

Updates io.repaint.maven:tiles-maven-plugin from 2.44 to 2.45

Changelog

Sourced from io.repaint.maven:tiles-maven-plugin's changelog.

= Change Log

All notable changes to this project will be documented in this file.

== 2.45

Bumped dependency and build plugin versions:

  • slf4j-api / slf4j-simple 2.0.17 → 2.0.18
  • maven-filtering 3.5.0 → 3.5.1
  • maven-gpg-plugin 3.2.6 → 3.2.8
  • maven-invoker-plugin 3.6.1 → 3.10.1
  • jreleaser-maven-plugin 1.18.0 → 1.25.0
  • maven-scm-plugin 2.1.0 → 2.2.1
  • maven-enforcer-plugin 3.5.0 → 3.6.3
  • central-publishing-maven-plugin 0.10.0 → 0.11.0
  • maven-release-plugin 3.1.1 → 3.3.1
  • sisu-maven-plugin 0.9.0.M2 → 1.0.1
  • maven-plugin-plugin 3.13.1 → 3.15.2
  • maven-surefire-plugin 3.5.0 → 3.6.0-M1
  • gmavenplus-plugin 3.0.2 → 5.1.0
  • maven-jar-plugin 3.4.2 → 3.5.0
  • maven-javadoc-plugin 3.11.2 → 3.12.0
  • maven-source-plugin 3.3.1 → 3.4.0
  • Fixed WARNING on source root modification.

== 2.41

  • Updated groovy to 4.0.27 to support building under Java 24
  • Updated slf4j to 2.0.17
  • Updated plugin versions
  • Added fallback handling for an incomplete reactor model during IDE sync (Marc Rozanc marc@rozanc.fr)

== 2.40

== 2.39

  • Added Astro based documentation (WIP)
  • Additional fixes for distributionManagement usage inside tiles

== 2.38

  • Fix NPE in Repository Policy retreival
  • Fix distribution management snapshot repository load (Ricardo Caldeira rikycaldeira@outlook.com)

== 2.37

... (truncated)

Commits
  • 6801432 [maven-release-plugin] prepare release tiles-maven-plugin-2.45
  • 33ea597 Fix modification of sourceRoots.
  • 6513c58 build: Updated Maven version, removed overrides from GHA
  • fdd17c4 Enable autopublish
  • af695ea build(deps): Updated dependencies
  • c7e0c23 Bump astro and @​astrojs/starlight in /docs
  • 968df6b [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates com.github.eirslett:frontend-maven-plugin from 2.0.1 to 2.0.2

Changelog

Sourced from com.github.eirslett:frontend-maven-plugin's changelog.

frontend-maven-plugin

Last public release: Maven Central

Changelog

Commits

Updates com.diffplug.spotless:spotless-maven-plugin from 3.8.0 to 3.9.0

Release notes

Sourced from com.diffplug.spotless:spotless-maven-plugin's releases.

Maven Plugin v3.9.0

Added

Changes

  • Replace RDF formatter library de.atextor:turtle-formatter (discontinued) with cool.rdf:cool-rdf-formatter (its new coordinates); the RDF/turtle formatter now requires Java 25+. (#2995)
  • Bump default greclipse version to latest 4.39 -> 4.40. (#2989)
  • Bump default tabletest-formatter version 1.1.1 -> 1.1.2.
Commits
  • ff6ac27 Published maven/3.9.0
  • cbd01c4 Published gradle/8.9.0
  • c724e70 Published lib/4.9.0
  • 793638d Replace de.atextor:turtle-formatter with cool.rdf:cool-rdf-formatter (#2995)
  • 3cb7227 Note Java 25+ requirement for RDF formatter; tidy changelogs
  • fd9eb96 Merge remote-tracking branch 'origin/main' into use-cool-rdf-formatter
  • d407109 Add support for prince-of-space Java formatter (#2991)
  • cb64859 Merge remote-tracking branch 'origin/main' into use-cool-rdf-formatter
  • f88db43 Bump tabletest-formatter to 1.1.2 (#3001)
  • ec7db39 Bump tabletest-formatter to 1.1.2
  • Additional commits viewable in compare view

Updates com.puppycrawl.tools:checkstyle from 13.8.0 to 13.9.0

Release notes

Sourced from com.puppycrawl.tools:checkstyle's releases.

checkstyle-13.9.0

Checkstyle 13.9.0 - https://checkstyle.org/releasenotes.html#Release_13.9.0

Breaking backward compatibility:

#20610 - Remove JavadocStyle check, use SummaryJavadoc Check instead.

New:

#19146 - JavadocType: update Check to use AST of javadoc. #17554 - UnnecessaryParentheses not reported for array access, field access and method calls. #20822 - Javadoc new AST token LEADING_ASTERISKS. #19150 - update WriteTagCheck to use AST of javadoc. #17437 - NoLineWrap: new property skipAnnotations to avoid violations on target if there are annotations. #17695 - New check: MultilineCommentLeadingAsteriskPresence. #20209 - new Check: OpenjdkAnnotationLocation. #17715 - New Check: WhitespaceBeforeEmptyBody and enable it at goolge style config. #17393 - New check: TypeBodyPadding for blank line after type definitions. #15223 - New check UnnecessaryTypeArgumentsWithRecordPattern. #7176 - New check: AnnotatedDeclarationVisibility to demand all modifiers to be the same/consistent.

Bug fixes:

#20958 - JavadocLeadingAsteriskAlign reports false positives. #19821 - Add checks for Documentation Comments Style Guide - Format of a Doc Comment. #20922 - LEADING_ASTERISK column position is not parsed correctly. #20563 - google_checks.xml: false negatives in type variable names. #19346 - JavaDoc parser does not support non-ASCII (Unicode) characters in @link class references. #17725 - Google style: multiple spaces around reserved words not detected. #20812 - Add checks for Sun Style 3.1.1 - Beginning Comments. #17878 - False-Negative: NoTrailingWhitespace misses spaces after * in multi-line comments (Google Style). #20901 - Google style: use AnnotationLocation ANNOTATION_DEF, ANNOTATION_FIELD_DEF, ENUM_CONSTANT_DEF, PACKAGE_DEF. #20553 - ClassFanOutComplexityCheck: fan-out of implicit class not measured in JEP 512 compact source files. #19930 - Documentation Comments Style Guide - Template for package.html source file. #3744 - File definition for suppressions should ignore path separator. #18619 - Wrong error message while using check NewlineAtEndOfFile. #15260 - Indentation: unexpected violation on last parentheses of chained methods. #19750 - PatternVariableAssignment fails when variable used inside an assignment target expression. #18614 - False positive: indentation inside of constructor parameters inside try block. #20660 - Add checks for Openjdk style - CopyRight Notice. #20346 - fill SarifLogger result templates in a single pass. #18615 - False positive: indentation of text block inside annotation array parameters. #19707 - TextBlockGoogleStyleFormatting: opening """ preceded by ? is not flagged as violation. #10015 - Unnecessary violation by Indentation check. #14716 - Indentation: Unexpected violation when class declaration is wrapped after public and before static. #20505 - GenericWhitespace false positive for parameterized record pattern. #11741 - Indentation: false positives when switch expression is invocation target. #19147 - update JavadocVariable to use AST of javadoc. #20339 - False positive: Indentation on file with tabs. #20522 - PatternSyntaxException in UniqueProperties when duplicated property key has dash inside brackets.

... (truncated)

Commits
  • 6104709 [maven-release-plugin] prepare release checkstyle-13.9.0
  • b3662e9 doc: release notes for 13.9.0
  • 9bff26d Issue #19934: add coverage for naming of doc images
  • 81364cb Issue #19913: Add coverage for avoid latin
  • 9cc2ba9 Issue #17695: Adding new check MultilineCommentLeadingAsteriskPresence
  • b8eac92 Issue #20673: Renumber remaining ExampleX files after UseCaseX migration
  • a5f2956 minor: Fix issue link for annotation
  • a634ab2 Issue #20625: Added example to remove suppression for : regexponfilename/tran...
  • 474c0d3 Issue #20209: Added new check OpenjdkAnnotationLocation
  • 0500e09 Issue #5573: cover unmatched influence group
  • Additional commits viewable in compare view

Updates commons-codec:commons-codec from 1.22.0 to 1.22.1

Changelog

Sourced from commons-codec:commons-codec's changelog.

Apache Commons Codec 1.22.1 Release Notes

The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.22.1.

The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.

This is a feature and maintenance release. Java 8 or later is required.

Fixed Bugs

  • CODEC-344: Base64.Builder.setEncodeTable(byte...) accepts invalid custom alphabets. Thanks to Ruiqi Dong, Gary Gregory.
  • CODEC-340: Base58.Builder.setEncodeTable(byte...) is ignored when encoding and decoding. Thanks to Ruiqi Dong, Gary Gregory.
  • CODEC-342: Base32.Builder.setEncodeTable(byte...) can create a codec that cannot decode its own output. Thanks to Ruiqi Dong, Gary Gregory.
  • CODEC-343: Base32.Builder.setHexDecodeTable(boolean) sets the encode table to a decode lookup table. Thanks to Ruiqi Dong, Gary Gregory.
  • CODEC-341: Base16.Builder.setEncodeTable(byte...) can create a codec that cannot decode its own output. Thanks to Ruiqi Dong, Gary Gregory.
  • CODEC-339: URLCodec.encodeUrl(BitSet, byte[]) allows custom safe sets to emit URL encoding control characters. Thanks to Ruiqi Dong, Gary Gregory.
  • CODEC-338: PercentCodec loses literal '+' when plusForSpace is enabled. Thanks to Ruiqi Dong, Gary Gregory.
  • CODEC-337: Digest ALL reuses System.in, so only the first algorithm sees the real input (#431). Thanks to Ruiqi Dong, Gary Gregory.
  •         Fix Base64.toIntegerBytes(BigInteger) for zero edge case ([#441](https://github.com/apache/commons-codec/issues/441)). Thanks to Gary Gregory.
    
  •         Add messages when throwing NullPointerException. Thanks to Gary Gregory.
    
  •         Add messages when throwing NullPointerException. Thanks to Gary Gregory.
    
  •         StringEncoderComparator.StringEncoderComparator(StringEncoder) now fails fast on null input. Thanks to Gary Gregory.
    

Changes

  •         Bump org.apache.commons:commons-parent from 98 to 103. Thanks to Gary Gregory.
    
  •         Bump commons-io:commons-io from 2.21.0 to 2.22.0. Thanks to Gary Gregory.
    

For complete information on Apache Commons Codec, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Codec website:

https://commons.apache.org/proper/commons-codec/

Download page: https://commons.apache.org/proper/commons-codec/download_codec.cgi


Commits
  • dc8f6c8 Prepare for the release candidate 1.22.1 RC1
  • 8203c1c Prepare for the next release candidate
  • 5647fe2 StringEncoderComparator.StringEncoderComparator(StringEncoder) now fails
  • 00c27a9 Reduce vertical whitespace
  • 568f2d7 Remove unused method
  • 316fb15 Remove unused method
  • bf6b543 Bump actions/checkout from 7.0.0 to 7.0.1
  • e14cdfe Extract redundant code.
  • 3351e63 Add messages when throwing NullPointerException.
  • f22dab7 Update SCM tag
  • Additional commits viewable in compare view

Updates dev.langchain4j:langchain4j-bom from 1.18.0 to 1.18.1

Commits
  • c06ebd9 Release versions 1.18.1 and 1.18.1-beta28
  • 55d1452 Fixes Ickle injection issue (#5856)
  • 788e7e8 Allow json deserialization of the AgenticScope only for known and registered ...
  • See full diff in compare view

Updates io.github.classgraph:classgraph from 4.8.184 to 4.8.186

Release notes

Sourced from io.github.classgraph:classgraph's releases.

classgraph-4.8.186

A large bugfix release, focused on classpath and classloader edge cases, plus three additions to the API.

New API

  • TypeSignature#resolveTypeVariables(ClassInfo contextClass) (#735, thanks to @​vlsi) — substitutes type variables in a type signature with the concrete type arguments bound by a given subclass, so a method returning T in Generic<T> resolves to String when viewed through class Impl implements Generic<String>. Bindings are composed through intermediate classes, including where a subclass reorders or renames type parameters. contextClass must be supplied rather than inferred, because MethodInfo/FieldInfo objects are shared by every class that inherits them, so they cannot know which subclass you are viewing them through. Known limitation: a type variable that an inner class inherits from its enclosing class is not resolved, since the classfile records it as declared by the inner class.
  • ClassInfo#getSubinterfaces() and ScanResult#getSubinterfaces(Class|String) (#924, thanks to @​iaik-jheher) — get only the subinterfaces of an interface. Previously getClassesImplementing() was the only option, and it returns both subinterfaces and implementing classes; that behaviour is unchanged, and is now documented.
  • ClassInfo#getMethodInfoWithAnnotation(...) / getFieldInfoWithAnnotation(...) (#914, thanks to @​He-Pin), plus the getDeclared… and Class-typed variants — get the methods or fields of a class carrying a given annotation. Meta-annotations are matched. Constructors are excluded, matching getMethodInfo(); use getMethodAndConstructorInfo() to find annotated constructors.

Behaviour changes

  • Glob accepts are now recursive, ** is supported, and multiple globs may be given (#643, thanks to @​etbasim; #870, thanks to @​SpaskeS). A mid-package glob wildcard previously matched nothing at all. Note that a wildcard must match at least one package segment, so acceptPackages("com.foo.*") matches the sub-packages of com.foo but not com.foo itself — that rule was always in force, but is now documented.
  • A glob reject is now applied to sub-packages (#884, thanks to @​palexdev). rejectPackages("java.awt.*") previously had no effect, because glob rejects were silently ignored when testing a package for rejection.
  • ClassInfo#getModifiers() no longer reports ACC_SUPER (#791, thanks to @​JAelwynTyler), which is a classfile flag with no source-level meaning. Nested-class access levels are also no longer OR-ed with the classfile access_flags.

Bug fixes — classpath and classloaders

  • Classpath element ordering was nondeterministic, and the classloader recorded for an element could come from whichever work unit won a race, producing intermittently wrong ClassInfo classloaders and loadClass() failures (#810).
  • Classpath elements are now found by probing ClassLoader#getResources() as a last resort, so scanning works against classloaders that expose no way to enumerate their classpath (#892). As a side effect this also fixes scanning inside the GraalVM native-image builder (#867, thanks to @​cmeiklejohn) — overrideClasspath() is no longer needed there.
  • Webapps deployed to Tomcat as non-exploded WAR files are now scanned correctly (#925, thanks to @​clequin-tibco).
  • Not every '!' in a path is a nested-jar separator, and a trailing separator on an inner jar is now stripped (#903, thanks to @​hoshie82). A doubly-nested path such as jar:jar:file:<war>!/WEB-INF/lib/c.jar!/ previously returned zero resources.
  • Fixed jrt:/jar: scheme handling and JRE symlink canonicalization — among other things, a malformed "jar:jar:file:…" input previously caused an infinite loop.
  • All JRE lib/ext jars are scanned when enableSystemJarsAndModules() is used (#813, thanks to @​GaoHaobo-1843), and jrt-fs.jar is no longer misclassified as a JRE lib jar.
  • An application directory containing a bundled JRE is no longer mistaken for a JDK root (#816, thanks to @​emaayan).
  • A package named classes is no longer treated as a package root (#929, thanks to @​mcnew).

Bug fixes — resources, modules and lifecycle

  • The same file is no longer returned twice when reachable two ways; resources are compared by file identity rather than by URI string, and directories are canonicalized with Path#toRealPath() on Windows (#704, thanks to @​michael-simons).
  • A module whose ModuleReader#list() returns null is treated as empty rather than throwing, and the offending module is now named in the error message (#887, thanks to @​DDDDDragon).
  • removeTemporaryFilesAfterScan() no longer closes the ScanResult's own resources (#916, thanks to @​protocol7).
  • Fixed an NPE when using an annotation after its ScanResult was closed (#930, thanks to @​Skater901).
  • Fixed a data race in ModuleReaderProxy lazy initialization (#913, thanks to @​cushon).
  • Fixed a ThreadGroup leak in SimpleThreadFactory (#931, thanks to @​iaco86).

Build

  • The build now fails fast with a clear message on an unsupported build JDK.

classgraph-4.8.185

  • Fixed #897 (thanks to @​cpovirk) / equivalently, #926 (thanks to @​sebthom):
    • TYPE_USE annotations were misplaced on constructor parameters
    • crash on unmatchable field type annotations
  • Fixed #920 (thanks to @​chubert-ch)
    • getMethodInfo() returned superclass constructors
Commits
  • 527c461 [maven-release-plugin] prepare release classgraph-4.8.186
  • c55d038 Add TypeSignature#resolveTypeVariables(ClassInfo) (#735)
  • a96d4f4 Strip the trailing nested jar separator of an inner jar (#903)
  • ace3360 Don't assert the collapsing of "jrt://" in FastPathResolverTest
  • c6ab156 Fix jrt:/jar: scheme handling and JRE symlink canonicalization
  • fe3f715 Don't leave the probed jar open in Issue892Test
  • 33300ff Find classpath elements by probing getResources() as a last resort (#892)
  • 6f95160 Test the classpath element reference precedence rule deterministically (#810)
  • 060b79d Take the classloader from the winning classpath element reference
  • c6d799f Add ClassInfo#getSubinterfaces() and ScanResult#getSubinterfaces() (#924)
  • Additional commits viewable in compare view

Updates io.grpc:grpc-protobuf from 1.83.0 to 1.83.1

Release notes

Sourced from io.grpc:grpc-protobuf's releases.

v1.83.1

gRPC Java 1.83.1 Release Notes

Improvements

  • netty: Fix client-initiated stream limit bypass in NettyServerHandler (#12942). Enforces the limit proactively at startup without waiting for SETTINGS_ACK
  • core: Coalesce Contiguous Small Buffers for ReadableBuffer (#12944)
Commits
  • 8f621c0 Bump version to 1.83.1
  • 2bafe5e Update README etc to reference 1.83.1
  • e1f2dbd netty: Fix client-initiated stream limit bypass in NettyServerHandler (v1.83....
  • ee8232f core: Coalesce Contiguous Small Buffers for ReadableBuffer (v1.83.x backport)...
  • b4ca099 Fix docker tagging failure in upload_artifacts by using stable tag name (#12922)
  • b4fb7f4 build: Allow downloading pkgconfiglite with empty checksum
  • 1fbfa86 Bump version to 1.83.1-SNAPSHOT
  • See full diff in compare view

Updates io.grpc:grpc-stub from 1.83.0 to 1.83.1

Release notes

Sourced from io.grpc:grpc-stub's releases.

v1.83.1

gRPC Java 1.83.1 Release Notes

Improvements

  • netty: Fix client-initiated stream limit bypass in NettyServerHandler (#12942). Enforces the limit proactively at startup without waiting for SETTINGS_ACK
  • core: Coalesce Contiguous Small Buffers for ReadableBuffer (#12944)
Commits
  • 8f621c0 Bump version to 1.83.1
  • 2bafe5e Update README etc to reference 1.83.1
  • e1f2dbd netty: Fix client-initiated stream limit bypass in NettyServerHandler (v1.83....
  • ee8232f core: Coalesce Contiguous Small Buffers for ReadableBuffer (v1.83.x backport)...
  • b4ca099 Fix docker tagging failure in upload_artifacts by using stable tag name (#12922)
  • b4fb7f4 build: Allow downloading pkgconfiglite with empty checksum
  • 1fbfa86 Bump version to 1.83.1-SNAPSHOT
  • See full diff in compare view

Updates io.grpc:grpc-inprocess from 1.83.0 to 1.83.1

Release notes

Sourced from io.grpc:grpc-inprocess's releases.

v1.83.1

gRPC Java 1.83.1 Release Notes

Improvements

  • netty: Fix client-initiated stream limit bypass in NettyServerHandler (#12942). Enforces the limit proactively at startup without waiting for SETTINGS_ACK
  • core: Coalesce Contiguous Small Buffers for ReadableBuffer (#12944)
Commits
  • 8f621c0 Bump version to 1.83.1
  • 2bafe5e Update README etc to reference 1.83.1
  • e1f2dbd netty: Fix client-initiated stream limit bypass in NettyServerHandler (v1.83....
  • ee8232f core: Coalesce Contiguous Small Buffers for ReadableBuffer (v1.83.x backport)...
  • b4ca099 Fix docker tagging failure in upload_artifacts by using stable tag name (#12922)
  • b4fb7f4 build: Allow downloading pkgconfiglite with empty checksum
  • 1fbfa86 Bump version to 1.83.1-SNAPSHOT
  • See full diff in compare view

Updates io.grpc:grpc-services from 1.83.0 to 1.83.1

Release notes

Sourced from io.grpc:grpc-services's releases.

v1.83.1

gRPC Java 1.83.1 Release Notes

Improvements

  • netty: Fix client-initiated stream limit bypass in NettyServerHandler (#12942). Enforces the limit proactively at startup without waiting for SETTINGS_ACK
  • core: Coalesce Contiguous Small Buffers for ReadableBuffer (#12944)
Commits
  • 8f621c0 Bump version to 1.83.1
  • 2bafe5e Update README etc to reference 1.83.1
  • e1f2dbd netty: Fix client-initiated stream limit bypass in NettyServerHandler (v1.83....
  • ee8232f core: Coalesce Contiguous Small Buffers for ReadableBuffer (v1.83.x backport)...
  • b4ca099 Fix docker tagging failure in upload_artifacts by using stable tag name (#12922)
  • b4fb7f4 build: Allow downloading pkgconfiglite with empty checksum
  • 1fbfa86 Bump version to 1.83.1-SNAPSHOT
  • See full diff in compare view

Updates io.grpc:grpc-servlet from 1.83.0 to 1.83.1

Release notes

Sourced from io.grpc:grpc-servlet's releases.

v1.83.1

gRPC Java 1.83.1 Release Notes

Improvements

  • netty: Fix client-initiated stream limit bypass in NettyServerHandler (#12942). Enforces the limit proactively at startup without waiting for SETTINGS_ACK
  • core: Coalesce Contiguous Small Buffers for ReadableBuffer (#12944)
Commits
  • 8f621c0 Bump version to 1.83.1
  • 2bafe5e Update README etc to reference 1.83.1
  • e1f2dbd netty: Fix client-initiated stream limit bypass in NettyServerHandler (v1.83....
  • ee8232f core: Coalesce Contiguous Small Buffers for ReadableBuffer (v1.83.x backport)...
  • b4ca099 Fix docker tagging failure in upload_artifacts by using stable tag name (#12922)
  • b4fb7f4 build: Allow downloading pkgconfiglite with empty checksum
  • 1fbfa86 Bump version to 1.83.1-SNAPSHOT
  • See full diff in compare view

Updates io.grpc:grpc-netty-shaded from 1.83.0 to 1.83.1

Release notes

Sourced from io.grpc:grpc-netty-shaded's releases.

v1.83.1

gRPC Java 1.83.1 Release Notes

Improvements

  • netty: Fix client-initiated stream limit bypass in NettyServerHandler (#12942). Enforces the limit proactively at startup without waiting for SETTINGS_ACK
  • core: Coalesce Contiguous Small Buffers for ReadableBuffer (#12944)
Commits
  • 8f621c0 Bump version to 1.83.1
  • 2bafe5e Update README etc to reference 1.83.1
  • e1f2dbd netty: Fix client-initiated stream limit bypass in NettyServerHandler (v1.83....
  • ee8232f core: Coalesce Contiguous Small Buffers for ReadableBuffer (v1.83.x backport)...
  • b4ca099 Fix docker tagging failure in upload_artifacts by using stable tag name (#12922)
  • b4fb7f4 build: Allow downloading pkgconfiglite with empty checksum
  • 1fbfa86 Bump version to 1.83.1-SNAPSHOT
  • See full diff in compare view

Updates io.grpc:grpc-okhttp from 1.83.0 to 1.83.1

Release notes

Sourced from io.grpc:grpc-okhttp's releases.

v1.83.1

gRPC Java 1.83.1 Release Notes

Improvements

  • netty: Fix client-initiated stream limit bypass in NettyServerHandler (#12942). Enforces the limit proactively at startup without waiting for SETTINGS_ACK
  • core: Coalesce Contiguous Small Buffers for ReadableBuffer (#12944)
Commits
  • 8f621c0 Bump version to 1.83.1
  • 2bafe5e Update README etc to reference 1.83.1
  • e1f2dbd netty: Fix client-initiated stream limit bypass in NettyServerHandler (v1.83....
  • ee8232f core: Coalesce Contiguous Small Buffers for ReadableBuffer (v1.83.x backport)...
  • b4ca099 Fix docker tagging failure in upload_artifacts by using stable tag name (#12922)
  • b4fb7f4 build: Allow downloading pkgconfiglite with empty checksum
  • 1fbfa86 Bump version to 1.83.1-SNAPSHOT
  • See full diff in compare view

Updates io.grpc:grpc-stub from 1.83.0 to 1.83.1

Release notes

Sourced from io.grpc:grpc-stub's releases.

v1.83.1

gRPC Java 1.83.1 Release Notes

Improvements

  • netty: Fix client-initiated stream limit bypass in NettyServerHandler (#12942). Enforces the limit proactively at startup without waiting for SETTINGS_ACK
  • core: Coalesce Contiguous Small Buffers for ReadableBuffer (#12944)
Commits
  • 8f621c0 Bump version to 1.83.1
  • 2bafe5e Update README etc to reference 1.83.1
  • e1f2dbd netty: Fix client-initiated stream limit bypass in NettyServerHandler (v1.83....
  • ee8232f core: Coalesce Contiguous Small Buffers for ReadableBuffer (v1.83.x backport)...
  • b4ca099 Fix docker tagging failure in upload_artifacts by using stable tag name (#12922)
  • b4fb7f4 build: Allow downloading pkgconfiglite with empty checksum
  • 1fbfa86 Bump version to 1.83.1-SNAPSHOT
  • See full diff in compare view

Updates io.grpc:grpc-inprocess from 1.83.0 to 1.83.1

Release notes

Sourced from io.grpc:grpc-inprocess's releases.

v1.83.1

gRPC Java 1.83.1 Release Notes

Improvements

  • netty: Fix client-initiated stream limit bypass in NettyServerHandler (#12942). Enforces the limit proactively at startup without waiting for SETTINGS_ACK
  • core: Coalesce Contiguous Small Buffers for ReadableBuffer (#12944)
Commits
  • 8f621c0 Bump version to 1.83.1
  • 2bafe5e Update README etc to reference 1.83.1
  • e1f2dbd netty: Fix client-initiated stream limit bypass in NettyServerHandler (v1.83....
  • ee8232f core: Coalesce Contiguous Small Buffers for ReadableBuffer (v1.83.x backport)...
  • b4ca099 Fix docker tagging failure in upload_artifacts by using stable tag name (#12922)
  • b4fb7f4 build: Allow downloading pkgconfiglite with empty checksum
  • 1fbfa86 Bump version to 1.83.1-SNAPSHOT
  • See full diff in compare view

Updates io.grpc:grpc-services from 1.83.0 to 1.83.1

Release notes

Sourced from io.grpc:grpc-services's releases.

v1.83.1

gRPC Java 1.83.1 Release Notes

Improvements

  • netty: Fix client-initiated stream limit bypass in NettyServerHandler (#12942). Enforces the limit proactively at startup without waiting for SETTINGS_ACK
  • core: Coalesce Contiguous Small Buffers for ReadableBuffer (#12944)
Commits
  • 8f621c0 Bump version to 1.83.1
  • 2bafe5e Update README etc to reference 1.83.1
  • e1f2dbd netty: Fix client-initiated stream limit bypass in NettyServerHandler (v1.83....
  • ee8232f core: Coalesce Contiguous Small Buffers for ReadableBuffer (v1.83.x backport)...
  • b4ca099 Fix docker tagging failure in upload_artifacts by using stable tag name (#12922)
  • b4fb7f4 build: Allow downloading pkgconfiglite with empty checksum
  • 1fbfa86 Bump version to 1.83.1-SNAPSHOT
  • See full diff in compare view

Updates software.amazon.awssdk:bom from 2.49.3 to 2.50.0

Updates org.jsoup:jsoup from 1.22.2 to 1.23.1

Release notes

Sourced from org.jsoup:jsoup's releases.

jsoup 1.23.1

jsoup Java HTML Parser release 1.23.1

jsoup 1.23.1 is out now, with a faster and more memory-efficient HTML parser, improved alignment with the HTML standard across noscript, CDATA, SVG, and MathML parsing, and safer, specification-correct HTTP redirects. The release also adds a fast immutable Element#classList(), direct outer-HTML output to an Appendable, and fixes across RCDATA parsing, XML conversion, tag-name handling, and Cleaner link detection.

Performance optimization was a major focus for this release. In our OpenJDK 21 benchmarks, ordinary string parsing is now 18% faster on average, parsing from an InputStream is 11% faster, and parsing with source position tracking is 70% faster while allocating 64% fewer bytes per document.

Source-tracked DOMs retain 58-65% less memory on representative medium-to-large documents, and the imp...

Description has been truncated

Bumps the dependencies group with 17 updates:

| Package | From | To |
| --- | --- | --- |
| [org.jspecify:jspecify](https://github.com/jspecify/jspecify) | `1.0.0` | `1.0.1` |
| [io.repaint.maven:tiles-maven-plugin](https://github.com/repaint-io/maven-tiles) | `2.44` | `2.45` |
| [com.github.eirslett:frontend-maven-plugin](https://github.com/eirslett/frontend-maven-plugin) | `2.0.1` | `2.0.2` |
| [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) | `3.8.0` | `3.9.0` |
| [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) | `13.8.0` | `13.9.0` |
| [commons-codec:commons-codec](https://github.com/apache/commons-codec) | `1.22.0` | `1.22.1` |
| [dev.langchain4j:langchain4j-bom](https://github.com/langchain4j/langchain4j) | `1.18.0` | `1.18.1` |
| [io.github.classgraph:classgraph](https://github.com/classgraph/classgraph) | `4.8.184` | `4.8.186` |
| [io.grpc:grpc-protobuf](https://github.com/grpc/grpc-java) | `1.83.0` | `1.83.1` |
| [io.grpc:grpc-stub](https://github.com/grpc/grpc-java) | `1.83.0` | `1.83.1` |
| [io.grpc:grpc-inprocess](https://github.com/grpc/grpc-java) | `1.83.0` | `1.83.1` |
| [io.grpc:grpc-services](https://github.com/grpc/grpc-java) | `1.83.0` | `1.83.1` |
| [io.grpc:grpc-servlet](https://github.com/grpc/grpc-java) | `1.83.0` | `1.83.1` |
| [io.grpc:grpc-netty-shaded](https://github.com/grpc/grpc-java) | `1.83.0` | `1.83.1` |
| [io.grpc:grpc-okhttp](https://github.com/grpc/grpc-java) | `1.83.0` | `1.83.1` |
| software.amazon.awssdk:bom | `2.49.3` | `2.50.0` |
| [org.jsoup:jsoup](https://github.com/jhy/jsoup) | `1.22.2` | `1.23.1` |


Updates `org.jspecify:jspecify` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/jspecify/jspecify/releases)
- [Commits](jspecify/jspecify@v1.0.0...v1.0.1)

Updates `io.repaint.maven:tiles-maven-plugin` from 2.44 to 2.45
- [Release notes](https://github.com/repaint-io/maven-tiles/releases)
- [Changelog](https://github.com/repaint-io/maven-tiles/blob/master/CHANGELOG.adoc)
- [Commits](repaint-io/maven-tiles@tiles-maven-plugin-2.44...tiles-maven-plugin-2.45)

Updates `com.github.eirslett:frontend-maven-plugin` from 2.0.1 to 2.0.2
- [Changelog](https://github.com/eirslett/frontend-maven-plugin/blob/master/CHANGELOG.md)
- [Commits](https://github.com/eirslett/frontend-maven-plugin/commits/frontend-plugins-2.0.2)

Updates `com.diffplug.spotless:spotless-maven-plugin` from 3.8.0 to 3.9.0
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@maven/3.8.0...maven/3.9.0)

Updates `com.puppycrawl.tools:checkstyle` from 13.8.0 to 13.9.0
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](checkstyle/checkstyle@checkstyle-13.8.0...checkstyle-13.9.0)

Updates `commons-codec:commons-codec` from 1.22.0 to 1.22.1
- [Changelog](https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-codec@rel/commons-codec-1.22.0...rel/commons-codec-1.22.1)

Updates `dev.langchain4j:langchain4j-bom` from 1.18.0 to 1.18.1
- [Release notes](https://github.com/langchain4j/langchain4j/releases)
- [Commits](langchain4j/langchain4j@1.18.0...1.18.1)

Updates `io.github.classgraph:classgraph` from 4.8.184 to 4.8.186
- [Release notes](https://github.com/classgraph/classgraph/releases)
- [Commits](classgraph/classgraph@classgraph-4.8.184...classgraph-4.8.186)

Updates `io.grpc:grpc-protobuf` from 1.83.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.83.0...v1.83.1)

Updates `io.grpc:grpc-stub` from 1.83.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.83.0...v1.83.1)

Updates `io.grpc:grpc-inprocess` from 1.83.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.83.0...v1.83.1)

Updates `io.grpc:grpc-services` from 1.83.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.83.0...v1.83.1)

Updates `io.grpc:grpc-servlet` from 1.83.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.83.0...v1.83.1)

Updates `io.grpc:grpc-netty-shaded` from 1.83.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.83.0...v1.83.1)

Updates `io.grpc:grpc-okhttp` from 1.83.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.83.0...v1.83.1)

Updates `io.grpc:grpc-stub` from 1.83.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.83.0...v1.83.1)

Updates `io.grpc:grpc-inprocess` from 1.83.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.83.0...v1.83.1)

Updates `io.grpc:grpc-services` from 1.83.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.83.0...v1.83.1)

Updates `software.amazon.awssdk:bom` from 2.49.3 to 2.50.0

Updates `org.jsoup:jsoup` from 1.22.2 to 1.23.1
- [Release notes](https://github.com/jhy/jsoup/releases)
- [Changelog](https://github.com/jhy/jsoup/blob/master/CHANGES.md)
- [Commits](jhy/jsoup@jsoup-1.22.2...jsoup-1.23.1)

Updates `io.grpc:grpc-servlet` from 1.83.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.83.0...v1.83.1)

Updates `io.grpc:grpc-netty-shaded` from 1.83.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.83.0...v1.83.1)

Updates `io.grpc:grpc-okhttp` from 1.83.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.83.0...v1.83.1)

---
updated-dependencies:
- dependency-name: org.jspecify:jspecify
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.repaint.maven:tiles-maven-plugin
  dependency-version: '2.45'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.github.eirslett:frontend-maven-plugin
  dependency-version: 2.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: 13.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: commons-codec:commons-codec
  dependency-version: 1.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: dev.langchain4j:langchain4j-bom
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.github.classgraph:classgraph
  dependency-version: 4.8.186
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-protobuf
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-stub
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-inprocess
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-services
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-servlet
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-netty-shaded
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-okhttp
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-stub
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-inprocess
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-services
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: software.amazon.awssdk:bom
  dependency-version: 2.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.jsoup:jsoup
  dependency-version: 1.23.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-servlet
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-netty-shaded
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-okhttp
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 3, 2026
@jknack jknack added this to the 4.5.5 milestone Aug 3, 2026
@jknack
jknack merged commit f96aaf2 into main Aug 3, 2026
4 checks passed
@dependabot
dependabot Bot deleted the dependabot/maven/dependencies-30f8081900 branch August 3, 2026 09:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant