deps(deps): bump the other-deps group across 1 directory with 51 updates by dependabot[bot] · Pull Request #255 · SophiaData/Bigdata_Code_Tutorial

dependabot · 2026-08-17T01:06:40Z

Bumps the other-deps group with 51 updates in the / directory:

Package	From	To
org.yaml:snakeyaml	`2.2`	`2.6`
org.slf4j:slf4j-api	`1.7.15`	`2.0.18`
org.apache.logging.log4j:log4j-api	`2.25.4`	`2.26.1`
org.apache.logging.log4j:log4j-core	`2.25.4`	`2.26.1`
org.apache.logging.log4j:log4j-1.2-api	`2.25.4`	`2.26.1`
org.apache.logging.log4j:log4j-slf4j-impl	`2.25.4`	`2.26.1`
com.mysql:mysql-connector-j	`8.4.0`	`26.7.0`
org.apache.hadoop:hadoop-client	`3.3.6`	`3.5.0`
org.apache.hadoop:hadoop-common	`3.3.6`	`3.5.0`
org.apache.hadoop:hadoop-hdfs	`3.3.6`	`3.5.0`
org.apache.hadoop:hadoop-mapreduce-client-core	`3.3.6`	`3.5.0`
com.alibaba.nacos:nacos-client	`2.1.2`	`3.2.3`
com.alibaba:fastjson	`2.0.52`	`2.0.64`
com.fasterxml.jackson.core:jackson-core	`2.21.4`	`2.22.1`
com.fasterxml.jackson.core:jackson-databind	`2.21.4`	`2.22.1`
com.jayway.jsonpath:json-path	`2.9.0`	`3.0.0`
com.google.protobuf:protobuf-java	`3.25.5`	`4.35.1`
net.minidev:json-smart	`2.5.2`	`2.6.0`
net.minidev:accessors-smart	`2.5.0`	`2.6.0`
commons-net:commons-net	`3.10.0`	`3.13.0`
com.squareup.okio:okio	`3.4.0`	`3.18.1`
commons-cli:commons-cli	`1.5.0`	`1.11.0`
dnsjava:dnsjava	`3.6.0`	`3.6.5`
org.codehaus.plexus:plexus-utils	`3.6.1`	`4.0.3`
at.yawk.lz4:lz4-java	`1.10.1`	`1.11.2`
com.google.errorprone:error_prone_core	`2.31.0`	`2.50.0`
org.codehaus.mojo:versions-maven-plugin	`2.14.2`	`2.21.0`
org.apache.maven.plugins:maven-enforcer-plugin	`3.5.0`	`3.6.3`
org.apache.maven.plugins:maven-pmd-plugin	`3.21.0`	`3.28.0`
org.jacoco:jacoco-maven-plugin	`0.8.12`	`0.8.15`
org.apache.maven.plugins:maven-compiler-plugin	`3.10.0`	`3.15.0`
org.apache.maven.plugins:maven-surefire-plugin	`3.0.0-M5`	`3.6.0-M1`
com.diffplug.spotless:spotless-maven-plugin	`2.23.0`	`3.9.0`
org.apache.maven.plugins:maven-checkstyle-plugin	`3.1.2`	`3.6.0`
com.github.spotbugs:spotbugs-maven-plugin	`4.8.6.6`	`4.10.3.0`
org.apache.maven.plugins:maven-shade-plugin	`3.5.1`	`3.6.2`
org.scala-lang:scala-library	`2.12.7`	`3.8.4`
org.apache.kafka:kafka-clients	`4.1.2`	`4.3.1`
org.elasticsearch.client:elasticsearch-rest-high-level-client	`7.17.9`	`7.17.29`
com.fasterxml.jackson.core:jackson-annotations	`2.21`	`2.22`
org.apache.commons:commons-lang3	`3.18.0`	`3.20.0`
com.h2database:h2	`2.2.224`	`2.4.240`
com.zaxxer:HikariCP	`5.1.0`	`7.1.0`
com.nimbusds:nimbus-jose-jwt	`10.0.2`	`10.9.1`
org.apache.maven.plugins:maven-assembly-plugin	`3.6.0`	`3.8.0`
org.apache.maven.plugins:maven-jar-plugin	`3.3.0`	`3.5.1`
org.apache.paimon:paimon-flink-1.20	`1.4.1`	`2.0.0`
org.apache.paimon:paimon-flink-cdc	`1.4.1`	`2.0.0`
org.mongodb:mongodb-driver-sync	`4.11.1`	`5.9.2`
org.apache.kafka:connect-api	`3.6.1`	`4.3.1`
org.apache.maven:apache-maven	`3.9.9`	`3.9.16`

Updates org.yaml:snakeyaml from 2.2 to 2.6

Commits

015ab57 [maven-release-plugin] prepare for next development iteration
4795519 Update info
9c36c69 Introduce devcontainer
0c5b3e5 fix: add debug level to internal logger
a65b131 Merge branch 'master' into devcontainers
788a98b Update changes
556b4bf Add info for devcontainer
0828c39 ops: migrate deployment from OSSRH to Central Portal
30d6a3a Add a test for issue 1108
2da4c6d Remove unrelated code
Additional commits viewable in compare view

Updates org.slf4j:slf4j-api from 1.7.15 to 2.0.18

Updates org.apache.logging.log4j:log4j-api from 2.25.4 to 2.26.1

Updates org.apache.logging.log4j:log4j-core from 2.25.4 to 2.26.1

Updates org.apache.logging.log4j:log4j-1.2-api from 2.25.4 to 2.26.1

Updates org.apache.logging.log4j:log4j-slf4j-impl from 2.25.4 to 2.26.1

Updates org.apache.logging.log4j:log4j-core from 2.25.4 to 2.26.1

Updates org.apache.logging.log4j:log4j-1.2-api from 2.25.4 to 2.26.1

Updates org.apache.logging.log4j:log4j-slf4j-impl from 2.25.4 to 2.26.1

Updates com.mysql:mysql-connector-j from 8.4.0 to 26.7.0

Changelog

Sourced from com.mysql:mysql-connector-j's changelog.

Changelog

https://dev.mysql.com/doc/relnotes/connector-j/en/

Version 26.7.0

Fix for Bug#39449361, LOAD DATA LOCAL INFILE accepts ambiguous Windows file URL path forms.

Fix for Bug#39328305, X Protocol reader does not validate server-supplied frame length before allocation.

Fix for Bug#39327277, Restrict SSL keystore loading to local file inputs.

Fix for Bug#39320456, Unexpected behavior with LOAD DATA LOCAL INFILE and connection options.

Fix for Bug#120227 (Bug#39204043), LOAD DATA LOCAL INFILE: missing EOF packet on IOException leaves server thread hanging.

Fix for Bug#120096 (Bug#39125648), MysqlConnector/Java Connection Url CharacterEncoding bug. Thanks to Rahman Rejepov for his contribution.

Version 9.7.0

Fix for Bug#119863 (Bug#38951042), Inaccurate decoding of negative TIME durations in Binary Protocol (Cursor Mode).

WL#17215, Implement JDBC 4.3/4.5 Statement/Connection.enquote* methods.

Fix for Bug#119245 (Bug#38599240), Select into fix breaks queries with 'into' in them. (reopened)

Fix for Bug#119659 (Bug#38916595), BinaryResultsetReader fails to consume EOF packet after column definitions when EOF is not deprecated.

Version 9.6.0

Fix for Bug#118002 (Bug#37843004), The setFetchSize() method in the Statement class may have a potential bug.

Fix for Bug#113130 (Bug#36043125), getGeneratedKeys() returns a zero resultset with non-key-generating statements.

Fix for Bug#113336 (Bug#36080226), Inconsistent getUpdateCount() Behavior with allowMultiQueries.

Fix for Bug#118234 (Bug#37975837), A potential bugs in Mysql Connector/J.

Fix for Bug#113413 (Bug#36107426), Connection.changeUser cannot be done after DriverManager.loginTimeout elapses. Thanks to Kazuhisa Kawashima for his contribution.

Fix for Bug#119271 (Bug#38599496), Connector/J fails to accept legacy value zeroDateTimeBehavior=convertToNull on multi-host URLs (failover).

Fix for Bug#119245 (Bug#38599240), Select into fix breaks queries with 'into' in them.

Version 9.5.0

Fix for Bug#72036 (Bug#18403804), XA isSameRM() shouldn't take database into account.

Fix for Bug#62693 (Bug#16722068), XAConnection savepoint capability.

... (truncated)

Commits

559f62d Update for GPL license book.
e2a58f7 Update for .gitignore with exclusion rules for codex files.
373584a Fix for Bug#39449361, LOAD DATA LOCAL INFILE accepts ambiguous Windows file U...
1ed6f37 Fix for Bug#39328305, X Protocol reader does not validate server-supplied fra...
55a2860 Fix for Bug#39327277, Restrict SSL keystore loading to local file inputs.
9ce460a Update for CalVer numbering scheme.
20e1e5d Update for README, README.md and CONTRIBUTING.md files.
f40d3be Post-release version bump for CalVer numbering scheme.
61cf1f6 Fix for Bug#39320456, Unexpected behavior with LOAD DATA LOCAL INFILE and con...
2c2d139 Fix for Bug#120227 (Bug#39204043), LOAD DATA LOCAL INFILE: missing EOF packet...
Additional commits viewable in compare view

Updates org.apache.hadoop:hadoop-client from 3.3.6 to 3.5.0

Updates org.apache.hadoop:hadoop-common from 3.3.6 to 3.5.0

Updates org.apache.hadoop:hadoop-hdfs from 3.3.6 to 3.5.0

Updates org.apache.hadoop:hadoop-mapreduce-client-core from 3.3.6 to 3.5.0

Updates com.alibaba.nacos:nacos-client from 2.1.2 to 3.2.3

Release notes

Sourced from com.alibaba.nacos:nacos-client's releases.

3.2.3 (Jul 14th, 2026)

Nacos 3.2.3 is mainly a bugfix and experience-improvement release for the 3.2 series.

This release focuses on:

Improving AI Registry, Skill, MCP, and next console workflows.

Fixing Config namespace isolation, Naming validation, and client stability issues.

Improving observability and release dependency hygiene.

It also fixes bugs across Config, Naming, AI Registry, A2A, MCP, Client, Core, and Console.

Detailed changes in this release:

Feature

#15143 #15463 Support nested Skill package uploads and preserve nested SKILL.md files as resources.

Enhancement/Refactor

#12737 #12867 Add per-Raft-group leader status and term metrics.

#15321 Refresh client disk cache asynchronously after subscriber notifications.

#15322 Align Logback adapter packagingData configuration.

#15354 Adjust next console sidebar menu elements.

#15435 Improve AI resource version diff display in next console.

BugFix

#12585 Fix pagination parameter binding so ? placeholders work correctly.

#14036 Support HTTPS/TLS prefixes in HTTP login processing.

#14693 Fix MCP service selector pagination in the console.

#15032 Fix TCP health-check SocketChannel leaks and exact member IP matching.

#15229 Normalize null A2A agent names in list queries.

#15265 Allow Skill list fuzzy queries when skillName starts or ends with a hyphen.

#15275 Copy pg-upgrade-null-tenant-id.sql to distribution/conf to prevent PostgreSQL Docker upgrade startup failures.

#15296 Update service detail status after instance online/offline toggles.

#15305 Reject blank instance IPs in Naming registration.

#15350 Fix empty Config history compare content in next console.

#15355 Restore editable Config clone target Data ID and group fields.

#15359 Fix AI Registry version deletion corrupting version aggregates and breaking A2A/MCP queries.

#15428 Preserve query parameters in MCP endpoint URLs after publish.

#15430 Preserve transportProtocol in auto-built MCP endpoint specs.

#15498 Scope ID-based Config export, batch delete, and clone operations by namespace.

Dependencies

#15442 Roll up console-ui-next dependency fixes and rebuild next console static assets.

... (truncated)

Commits

c843da5 [ISSUE #15463] fix(ai): support nested Skill packages during upload (#15464)
5c3a246 [ISSUE #15305] Reject blank instance IP in naming registration (#15454)
1878181 [ISSUE #15354] Adjust sidebar menu elements (#15455)
9d8f220 [#ISSUE 15430] Preserve transportProtocol in auto-built mcp endpoint spec (#1...
3f284df [ISSUE #12585] Fix pagination parameter binding (#15407)
f9fdb2d [ISSUE #12867] Add raft group metrics (#15408)
fe1a015 [ISSUE #15359] Fix AI registry version deletion (#15406)
6348535 [ISSUE #14036] Support TLS prefix for HTTP login (#15405)
44cca5f [ISSUE #15435] Improve next console AI resource version diff (#15436)
dfd215a chore: roll up console-ui-next dependency fixes (#15442)
Additional commits viewable in compare view

Updates com.alibaba:fastjson from 2.0.52 to 2.0.64

Release notes

Sourced from com.alibaba:fastjson's releases.

fastjson 2.0.64版本发布

FASTJSON 2.0.64 Release Notes

Release Date: 2 Aug 2026 Tag: 2.0.64

Overview

This is a bug fix release. It fixes several issues in core serialization/deserialization, Java records support, and the fastjson 1.x compatibility layer. All users are recommended to upgrade.

Bug Fixes

Fixed ClassFormatError when serializing classes with array-typed fields #4009 #4014

Fixed strBuf not kept in sync after mid-loop growth, which could produce corrupted output #7671 #7676

Fixed generic invalidation in record class #3156 #4027

Fixed global naming strategy not applied to Java records #7656 #7657

Fixed MethodHandles.Lookup initialization order — initialize before reading IMPL_LOOKUP #7691 #7718

Fixed additionalItems schema validation for Java arrays #7709

(compat) Added serialVersionUID to JSONArray for Java serialization compatibility #7687 #7698

(compat) Fixed JSONPath consecutive writes failing in fastjson 1.x compatibility layer #7697

(compat) Added ParserConfig.propertyNamingStrategy for fastjson 1.x compatibility #7740

Maven Dependency Configuration

Standard Version
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.64</version>
</dependency>
Android 5 Optimized Version
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.64.android5</version>
</dependency>
Android 8 Optimized Version
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.64.android8</version>
</dependency>

... (truncated)

Commits

3953115 Merge pull request #7744 from alibaba/release/2.0.64
194bd97 2.0.64 release
6b40188 fix: ClassFormatError when serializing classes with array-typed fields, for i...
1836c7b fix: keep strBuf in sync after mid-loop growth, for issue #7671 (#7676)
f719ac1 docs: include all feature introductions in the document (#4035)
3ff6acd fix generic invalidation in record class, for issue #3156 (#4027)
190fc07 docs: add performance and bilingual PR conventions to AGENTS.md, add CLAUDE.m...
d1029c7 fix: global naming strategy not applied to Java records (#7656) (#7657)
120789b fix: add serialVersionUID to JSONArray in fastjson1-compatible for Java seria...
be54363 fix: initialize MethodHandles.Lookup before reading IMPL_LOOKUP (#7691) (#7718)
Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-core from 2.21.4 to 2.22.1

Commits

2451603 [maven-release-plugin] prepare release jackson-core-2.22.1
d3180c0 Prep for 2.22.1 release
6c5bae8 Merge branch '2.21' into 2.22
fda71aa Post-release dep version bump
4ad6235 [maven-release-plugin] prepare for next development iteration
b5f62dd [maven-release-plugin] prepare release jackson-core-2.21.5
11f8b8c Prep for 2.21.5 release
4920004 Post-release version bump
2bb55e8 [maven-release-plugin] prepare for next development iteration
d763562 [maven-release-plugin] prepare release jackson-core-2.22.0
Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.21.4 to 2.22.1

Commits

See full diff in compare view

Updates com.jayway.jsonpath:json-path from 2.9.0 to 3.0.0

Release notes

Sourced from com.jayway.jsonpath:json-path's releases.

json-path-3.0.0

What's Changed

adding jackson3 provider (#1066) by @bsa01 in json-path/JsonPath#1067

Prepare Version 3.0.0 - Java 17 baseline with Jackson 3 by @kallestenflo in json-path/JsonPath#1072

New Contributors

@bsa01 made their first contribution in json-path/JsonPath#1067

Full Changelog: json-path/JsonPath@json-path-2.10.0...json-path-3.0.0

json-path-2.10.0

What's Changed

Bumps dependency versions by @kallestenflo in json-path/JsonPath#1057

net.minidev:json-smart:2.6.0

org.slf4j:slf4j-api:2.0.17

com.google.code.gson:gson:2.13.2

org.hamcrest:hamcrest:3.0

com.fasterxml.jackson.core:jackson-databind:2.19.2

org.json:json:20250517

org.apache.tapestry:tapestry-json:5.9.0

jakarta.json:jakarta.json-api:2.1.3

jakarta.json.bind:jakarta.json.bind-api:2.0.0

Full Changelog: json-path/JsonPath@json-path-2.9.0...json-path-2.10.0

Commits

62a4c9f Prepare Version 3.0.0 - Java 17 baseline with Jackson 3 (#1072)
470b566 Prepare version 3.0.0
5a7f29e adding jackson3 provider (#1066) (#1067)
b6c60b3 Prepare next version (#1059)
a427387 Release 2.10.0 (#1058)
8e3b92f Bumps dependency versions (#1057)
45333e0 [CI] Remove Java 18 from build matrix (#1005)
3732a85 Upgrade net.minidev:json-smart from 2.5.0 to 2.5.1 (#1004)
2d4cc06 Upgrade to gradle 8.5 and add java 21 build (#995)
83ced52 Remove web-test project (#994)
Additional commits viewable in compare view

Updates com.google.protobuf:protobuf-java from 3.25.5 to 4.35.1

Commits

See full diff in compare view

Updates net.minidev:json-smart from 2.5.2 to 2.6.0

Release notes

Sourced from net.minidev:json-smart's releases.

v2.6.0

What's Changed

fix JSONObject.merge blocks overwriting (#175) by @caimo in netplex/json-smart-v2#238

build: prepare for next version by @hezhangjian in netplex/json-smart-v2#241

chore: use standard charset object instead by @hezhangjian in netplex/json-smart-v2#242

add Spotless + Maven wrapper by @ccudennec-otto in netplex/json-smart-v2#246

fix JSONArray merge(Object)(#51) by @caimo in netplex/json-smart-v2#247

Bump junit.version from 5.11.4 to 5.12.0 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#253

Bump junit.version from 5.11.4 to 5.12.0 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#248

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#252

Bump org.apache.maven.plugins:maven-compiler-plugin from 3.13.0 to 3.14.0 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#251

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#250

Bump org.apache.maven.plugins:maven-compiler-plugin from 3.13.0 to 3.14.0 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#249

Bump junit.version from 5.12.0 to 5.12.1 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#256

Bump junit.version from 5.12.0 to 5.12.1 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#255

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.3 to 2.44.4 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#263

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.3 to 2.44.4 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#260

Bump junit.version from 5.12.1 to 5.12.2 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#262

Bump junit.version from 5.12.1 to 5.12.2 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#261

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.4 to 2.44.5 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#268

Bump junit.version from 5.12.2 to 5.13.0 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#267

Bump junit.version from 5.12.2 to 5.13.0 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#266

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.4 to 2.44.5 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#265

Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.7 to 3.2.8 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#276

Bump junit.version from 5.13.0 to 5.13.4 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#274

Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.7 to 3.2.8 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#273

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.5 to 2.46.1 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#277

Bump junit.version from 5.13.0 to 5.13.4 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#278

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.5 to 2.46.1 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#275

fix unpack dependencies failed (#176) by @pcHwang2 in netplex/json-smart-v2#257

fix Issue 177 (support incomplet json messages) by @UrielCh in netplex/json-smart-v2#254

improve github action by @UrielCh in netplex/json-smart-v2#279

mutiple updates, new github workflow, more coverage.... by @UrielCh in netplex/json-smart-v2#280

Upgrade by @UrielCh in netplex/json-smart-v2#281

New Contributors

@pcHwang2 made their first contribution in netplex/json-smart-v2#257

Full Changelog: netplex/json-smart-v2@2.5.2...v2.6.0

Commits

ebf7cf8 try deploy
95a9bc3 try somthink else
4aac0d7 make it publish
d3a86df deploy one by one
13d282b patch deploy
b4940f5 patch deploy verbosity
edc6e6e hange publishing plugin
49e150f add git tag
29543a1 replace snapshot by the release version
5803602 force release to central
Additional commits viewable in compare view

Updates net.minidev:accessors-smart from 2.5.0 to 2.6.0

Release notes

Sourced from net.minidev:accessors-smart's releases.

v2.6.0

What's Changed

fix JSONObject.merge blocks overwriting (#175) by @caimo in netplex/json-smart-v2#238

build: prepare for next version by @hezhangjian in netplex/json-smart-v2#241

chore: use standard charset object instead by @hezhangjian in netplex/json-smart-v2#242

add Spotless + Maven wrapper by @ccudennec-otto in netplex/json-smart-v2#246

fix JSONArray merge(Object)(#51) by @caimo in netplex/json-smart-v2#247

Bump junit.version from 5.11.4 to 5.12.0 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#253

Bump junit.version from 5.11.4 to 5.12.0 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#248

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#252

Bump org.apache.maven.plugins:maven-compiler-plugin from 3.13.0 to 3.14.0 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#251

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#250

Bump org.apache.maven.plugins:maven-compiler-plugin from 3.13.0 to 3.14.0 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#249

Bump junit.version from 5.12.0 to 5.12.1 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#256

Bump junit.version from 5.12.0 to 5.12.1 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#255

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.3 to 2.44.4 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#263

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.3 to 2.44.4 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#260

Bump junit.version from 5.12.1 to 5.12.2 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#262

Bump junit.version from 5.12.1 to 5.12.2 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#261

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.4 to 2.44.5 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#268

Bump junit.version from 5.12.2 to 5.13.0 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#267

Bump junit.version from 5.12.2 to 5.13.0 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#266

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.4 to 2.44.5 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#265

Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.7 to 3.2.8 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#276

Bump junit.version from 5.13.0 to 5.13.4 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#274

Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.7 to 3.2.8 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#273

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.5 to 2.46.1 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#277

Bump junit.version from 5.13.0 to 5.13.4 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#278

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.5 to 2.46.1 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#275

fix unpack dependencies failed (#176) by @pcHwang2 in netplex/json-smart-v2#257

fix Issue 177 (support incomplet json messages) by @UrielCh in netplex/json-smart-v2#254

improve github action by @UrielCh in netplex/json-smart-v2#279

mutiple updates, new github workflow, more coverage.... by @UrielCh in netplex/json-smart-v2#280

Upgrade by @UrielCh in netplex/json-smart-v2#281

New Contributors

@pcHwang2 made their first contribution in netplex/json-smart-v2#257

Full Changelog: netplex/json-smart-v2@2.5.2...v2.6.0

2.5.2

About CVE-2024-57699

Thanks for @ccudennec-otto Some remarks on the CVE, more discussions in #236

as mentioned here it is quite unlikely that the vulnerability is exploited if you come here because of Spring Security / com.nimbusds:oauth2-oidc-sdk

the code changes for the upcoming release will "only" fix the default modes provided by JSONParser, e.g. MODE_RFC4627

if you create the JSONParser manually / with custom options, make sure you set option LIMIT_JSON_DEPTH

since that's what "connect2id" is doing in their library, they were responsible for fixing it. They've already provided a new 11.x release that fixes the JSONParser setup on their side, i.e. you rather need their fixed version and not version 2.5.2 of json-smart

as stated here, they would also need to backport the fix to the versions that Spring Security needs IMHO

What's Changed

fix CVE-2024-57699 for predefined parsers by @ccudennec-otto in netplex/json-smart-v2#233

... (truncated)

Commits

ebf7cf8 try deploy
95a9bc3 try somthink else
4aac0d7 make it publish
d3a86df deploy one by one
13d282b patch deploy
b4940f5 patch deploy verbosity
edc6e6e hange publishing plugin
49e150f add git tag
29543a1 replace snapshot by the release version
5803602 force release to central
Additional commits viewable in compare view

Updates commons-net:commons-net from 3.10.0 to 3.13.0

Changelog

Sourced from commons-net:commons-net's changelog.

Apache Commons Net 3.13.0 Release Notes

The Apache Commons Net team is pleased to announce the release of Apache Commons Net 3.13.0.

Apache Commons Net library contains a collection of network utilities and protocol implementations. Supported protocols include Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, and Whois.

This is a feature and maintenance release. Java 8 or later is required.

For complete information on Apache Commons Net, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Net website:

https://commons.apache.org/proper/commons-net/

Download page: https://commons.apache.org/proper/commons-net/download_net.cgi

New features

o Add DatagramSocketClient.getDefaultTimeoutDuration() and deprecate getDefaultTimeout(). Thanks to Gary Gregory. o NET-741: Add subnet IPv6 handling with SubnetUtils6 #391. Thanks to Maros Orsak, Gary Gregory.

Fixed Bugs

o DaytimeTCPClientTest now should now pass inside most VPNs. Thanks to Henri Biestro, Gary Gregory. o Migrate tests to JUnit5 #358, #359. Thanks to Jakub Kupczyk, Gary Gregory. o Fix malformed Javadoc comments. Thanks to Gary Gregory. o IMAPExportMbox now restores the current thread's interrupt flag when catching InterruptedException. Thanks to Gary Gregory. o IOUtil.readWrite() now restores the current thread's interrupt flag when catching InterruptedException. Thanks to Gary Gregory. o TelnetInputStream now restores the current thread's interrupt flag when catching InterruptedException. Thanks to Gary Gregory. o NET-740: FTP fails to parse listings for Linux vsftpd in Chinese or Japanese #393. Thanks to Jianwei Guo, Gary Gregory. o TelnetInputStream.read() doesn't preserve the original InterruptedException as the cause of its InterruptedIOException. Thanks to Gary Gregory. o FTPClient._storeFile(String, String, InputStream) doesn't always close it's internal socket when an exception is thrown early in processing. Thanks to Gary Gregory. o ListenerList.removeListener(T) now ignores null input to avoid a NullPointerException. Thanks to Gary Gregory. o ListenerList.addListener(T) now ignores null input. Thanks to Gary Gregory. o Fix typo in FTPConnectionClosedException message from FTP.getReply(boolean). Thanks to Gary Gregory. o Reimplement Util.copyReader() with IOUtils.copyLarge(). Thanks to Gary Gregory. o Reimplement Util.copyStream() with IOUtils.copyLarge(). Thanks to Gary Gregory. o Reimplement Util.copyStream() with IOUtils.copyLarge(). Thanks to Gary Gregory. o Deprecate Util.copyReader(Reader, Writer) in favor of IOUtils.copyLarge(Reader, Writer). Thanks to Gary Gregory.

Changes

o Bump org.apache.commons:commons-parent from 85 to 97 #371, #388, #389. Thanks to Gary Gregory, Dependabot. o Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0. Thanks to Gary Gregory, Dependabot.

... (truncated)

Commits

35fa0df Prepare for the release candidate 3.13.0 RC1
1cc5b6e Prepare for the next release candidate
a4b246e Reuse IOUtils.copyLarge()
e5ca262 Javadoc
3cb18ec Deprecate Util.copyReader(Reader, Writer) in favor of
3373d77 Reimplement Util.copyReader() with IOUtils.copyLarge()
3be2077 Reimplement Util.copyStream() with IOUtils.copyLarge()
7b41144 Javadoc
1b584b4 Fix typo in FTPConnectionClosedException message from
3792023 Javadoc
Additional commits viewable in compare view

Updates com.squareup.okio:okio from 3.4.0 to 3.18.1

Changelog

Sourced from com.squareup.okio:okio's changelog.

Version 3.18.1

2026-07-28

Fix: Restore binary-compatibility with Okio 3.17.x for Kotlin/Native users. When we introduced the new base64() function, we inadvertently changed the binary signature! Ugh! This is now fixed and we've automated binary-compatibility checking for Kotlin/Native going forward.

Version 3.18.0

2026-07-21

Fix: Use wide character APIs to better support of non-UTF-8 filesystems on Windows.

Fix: Don't crash in AssetFileSystem.exists() when the underlying storage throws a FileNotFoundException.

Fix: Load WASI paths relative to their preopen. The platform behavior recently changed in NodeJS, causing our WasiFileSystem to be unable to access files!

New: Optionally ignore whitespace when decoding hexadecimal.

New: Optionally omit padding when encoding Base64.

New: BufferedSource.readUInt(), BufferedSink.writeUInt(), and similar functions for UByte, UShort and ULong. Also add support for unsigned and little-endian.

New: BufferedSink.utf8Appendable(). Use this to adapt an Okio sink to an Appendable.

New: Source.limit() returns a wrapped source with a strict limit on how many bytes are returned.

New: ByteString.equals(other, constantTime) for subtle defense against timing attacks.

Version 3.17.0

2026-03-11

New: Adjust down the Kotlin stdlib dependency to [Kotlin 2.1.21][kotlin_2_1_21]. Okio is bu...
Description has been truncated

Bumps the other-deps group with 51 updates in the / directory: | Package | From | To | | --- | --- | --- | | [org.yaml:snakeyaml](https://bitbucket.org/snakeyaml/snakeyaml) | `2.2` | `2.6` | | org.slf4j:slf4j-api | `1.7.15` | `2.0.18` | | org.apache.logging.log4j:log4j-api | `2.25.4` | `2.26.1` | | org.apache.logging.log4j:log4j-core | `2.25.4` | `2.26.1` | | org.apache.logging.log4j:log4j-1.2-api | `2.25.4` | `2.26.1` | | org.apache.logging.log4j:log4j-slf4j-impl | `2.25.4` | `2.26.1` | | [com.mysql:mysql-connector-j](https://github.com/mysql/mysql-connector-j) | `8.4.0` | `26.7.0` | | org.apache.hadoop:hadoop-client | `3.3.6` | `3.5.0` | | org.apache.hadoop:hadoop-common | `3.3.6` | `3.5.0` | | org.apache.hadoop:hadoop-hdfs | `3.3.6` | `3.5.0` | | org.apache.hadoop:hadoop-mapreduce-client-core | `3.3.6` | `3.5.0` | | [com.alibaba.nacos:nacos-client](https://github.com/alibaba/nacos) | `2.1.2` | `3.2.3` | | [com.alibaba:fastjson](https://github.com/alibaba/fastjson2) | `2.0.52` | `2.0.64` | | [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.21.4` | `2.22.1` | | [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.21.4` | `2.22.1` | | [com.jayway.jsonpath:json-path](https://github.com/jayway/JsonPath) | `2.9.0` | `3.0.0` | | [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `3.25.5` | `4.35.1` | | [net.minidev:json-smart](https://github.com/netplex/json-smart-v2) | `2.5.2` | `2.6.0` | | [net.minidev:accessors-smart](https://github.com/netplex/json-smart-v2) | `2.5.0` | `2.6.0` | | [commons-net:commons-net](https://github.com/apache/commons-net) | `3.10.0` | `3.13.0` | | [com.squareup.okio:okio](https://github.com/lysine-dev/okio) | `3.4.0` | `3.18.1` | | [commons-cli:commons-cli](https://github.com/apache/commons-cli) | `1.5.0` | `1.11.0` | | [dnsjava:dnsjava](https://github.com/dnsjava/dnsjava) | `3.6.0` | `3.6.5` | | [org.codehaus.plexus:plexus-utils](https://github.com/codehaus-plexus/plexus-utils) | `3.6.1` | `4.0.3` | | [at.yawk.lz4:lz4-java](https://github.com/yawkat/lz4-java) | `1.10.1` | `1.11.2` | | [com.google.errorprone:error_prone_core](https://github.com/google/error-prone) | `2.31.0` | `2.50.0` | | [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) | `2.14.2` | `2.21.0` | | [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.5.0` | `3.6.3` | | [org.apache.maven.plugins:maven-pmd-plugin](https://github.com/apache/maven-pmd-plugin) | `3.21.0` | `3.28.0` | | [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.12` | `0.8.15` | | [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.10.0` | `3.15.0` | | [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.0.0-M5` | `3.6.0-M1` | | [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) | `2.23.0` | `3.9.0` | | [org.apache.maven.plugins:maven-checkstyle-plugin](https://github.com/apache/maven-checkstyle-plugin) | `3.1.2` | `3.6.0` | | [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) | `4.8.6.6` | `4.10.3.0` | | [org.apache.maven.plugins:maven-shade-plugin](https://github.com/apache/maven-shade-plugin) | `3.5.1` | `3.6.2` | | [org.scala-lang:scala-library](https://github.com/scala/scala3) | `2.12.7` | `3.8.4` | | org.apache.kafka:kafka-clients | `4.1.2` | `4.3.1` | | [org.elasticsearch.client:elasticsearch-rest-high-level-client](https://github.com/elastic/elasticsearch) | `7.17.9` | `7.17.29` | | [com.fasterxml.jackson.core:jackson-annotations](https://github.com/FasterXML/jackson) | `2.21` | `2.22` | | org.apache.commons:commons-lang3 | `3.18.0` | `3.20.0` | | [com.h2database:h2](https://github.com/h2database/h2database) | `2.2.224` | `2.4.240` | | [com.zaxxer:HikariCP](https://github.com/brettwooldridge/HikariCP) | `5.1.0` | `7.1.0` | | [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) | `10.0.2` | `10.9.1` | | [org.apache.maven.plugins:maven-assembly-plugin](https://github.com/apache/maven-assembly-plugin) | `3.6.0` | `3.8.0` | | [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) | `3.3.0` | `3.5.1` | | org.apache.paimon:paimon-flink-1.20 | `1.4.1` | `2.0.0` | | org.apache.paimon:paimon-flink-cdc | `1.4.1` | `2.0.0` | | [org.mongodb:mongodb-driver-sync](https://github.com/mongodb/mongo-java-driver) | `4.11.1` | `5.9.2` | | org.apache.kafka:connect-api | `3.6.1` | `4.3.1` | | org.apache.maven:apache-maven | `3.9.9` | `3.9.16` | Updates `org.yaml:snakeyaml` from 2.2 to 2.6 - [Commits](https://bitbucket.org/snakeyaml/snakeyaml/branches/compare/snakeyaml-2.6..snakeyaml-2.2) Updates `org.slf4j:slf4j-api` from 1.7.15 to 2.0.18 Updates `org.apache.logging.log4j:log4j-api` from 2.25.4 to 2.26.1 Updates `org.apache.logging.log4j:log4j-core` from 2.25.4 to 2.26.1 Updates `org.apache.logging.log4j:log4j-1.2-api` from 2.25.4 to 2.26.1 Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.25.4 to 2.26.1 Updates `org.apache.logging.log4j:log4j-core` from 2.25.4 to 2.26.1 Updates `org.apache.logging.log4j:log4j-1.2-api` from 2.25.4 to 2.26.1 Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.25.4 to 2.26.1 Updates `com.mysql:mysql-connector-j` from 8.4.0 to 26.7.0 - [Changelog](https://github.com/mysql/mysql-connector-j/blob/trunk/CHANGES) - [Commits](mysql/mysql-connector-j@8.4.0...26.7.0) Updates `org.apache.hadoop:hadoop-client` from 3.3.6 to 3.5.0 Updates `org.apache.hadoop:hadoop-common` from 3.3.6 to 3.5.0 Updates `org.apache.hadoop:hadoop-hdfs` from 3.3.6 to 3.5.0 Updates `org.apache.hadoop:hadoop-mapreduce-client-core` from 3.3.6 to 3.5.0 Updates `com.alibaba.nacos:nacos-client` from 2.1.2 to 3.2.3 - [Release notes](https://github.com/alibaba/nacos/releases) - [Changelog](https://github.com/alibaba/nacos/blob/develop/CHANGELOG.md) - [Commits](alibaba/nacos@2.1.2...3.2.3) Updates `com.alibaba:fastjson` from 2.0.52 to 2.0.64 - [Release notes](https://github.com/alibaba/fastjson2/releases) - [Commits](alibaba/fastjson2@2.0.52...2.0.64) Updates `com.fasterxml.jackson.core:jackson-core` from 2.21.4 to 2.22.1 - [Commits](FasterXML/jackson-core@jackson-core-2.21.4...jackson-core-2.22.1) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.21.4 to 2.22.1 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.jayway.jsonpath:json-path` from 2.9.0 to 3.0.0 - [Release notes](https://github.com/jayway/JsonPath/releases) - [Changelog](https://github.com/json-path/JsonPath/blob/master/changelog.md) - [Commits](json-path/JsonPath@json-path-2.9.0...json-path-3.0.0) Updates `com.google.protobuf:protobuf-java` from 3.25.5 to 4.35.1 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `net.minidev:json-smart` from 2.5.2 to 2.6.0 - [Release notes](https://github.com/netplex/json-smart-v2/releases) - [Commits](netplex/json-smart-v2@2.5.2...v2.6.0) Updates `net.minidev:accessors-smart` from 2.5.0 to 2.6.0 - [Release notes](https://github.com/netplex/json-smart-v2/releases) - [Commits](netplex/json-smart-v2@2.5.0...v2.6.0) Updates `commons-net:commons-net` from 3.10.0 to 3.13.0 - [Changelog](https://github.com/apache/commons-net/blob/master/RELEASE-NOTES.txt) - [Commits](apache/commons-net@rel/commons-net-3.10.0...rel/commons-net-3.13.0) Updates `com.squareup.okio:okio` from 3.4.0 to 3.18.1 - [Changelog](https://github.com/lysine-dev/okio/blob/main/CHANGELOG.md) - [Commits](lysine-dev/okio@parent-3.4.0...parent-3.18.1) Updates `commons-cli:commons-cli` from 1.5.0 to 1.11.0 - [Changelog](https://github.com/apache/commons-cli/blob/master/RELEASE-NOTES.txt) - [Commits](apache/commons-cli@commons-cli-1.5.0...rel/commons-cli-1.11.0) Updates `dnsjava:dnsjava` from 3.6.0 to 3.6.5 - [Release notes](https://github.com/dnsjava/dnsjava/releases) - [Changelog](https://github.com/dnsjava/dnsjava/blob/master/Changelog) - [Commits](https://github.com/dnsjava/dnsjava/commits) Updates `org.codehaus.plexus:plexus-utils` from 3.6.1 to 4.0.3 - [Release notes](https://github.com/codehaus-plexus/plexus-utils/releases) - [Commits](codehaus-plexus/plexus-utils@plexus-utils-3.6.1...plexus-utils-4.0.3) Updates `at.yawk.lz4:lz4-java` from 1.10.1 to 1.11.2 - [Release notes](https://github.com/yawkat/lz4-java/releases) - [Changelog](https://github.com/yawkat/lz4-java/blob/main/CHANGES.md) - [Commits](yawkat/lz4-java@v1.10.1...v1.11.2) Updates `com.google.errorprone:error_prone_core` from 2.31.0 to 2.50.0 - [Release notes](https://github.com/google/error-prone/releases) - [Commits](google/error-prone@v2.31.0...v2.50.0) Updates `org.codehaus.mojo:versions-maven-plugin` from 2.14.2 to 2.21.0 - [Release notes](https://github.com/mojohaus/versions/releases) - [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md) - [Commits](mojohaus/versions@2.14.2...2.21.0) Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.5.0 to 3.6.3 - [Release notes](https://github.com/apache/maven-enforcer/releases) - [Commits](apache/maven-enforcer@enforcer-3.5.0...enforcer-3.6.3) Updates `org.apache.maven.plugins:maven-pmd-plugin` from 3.21.0 to 3.28.0 - [Release notes](https://github.com/apache/maven-pmd-plugin/releases) - [Commits](apache/maven-pmd-plugin@maven-pmd-plugin-3.21.0...maven-pmd-plugin-3.28.0) Updates `org.jacoco:jacoco-maven-plugin` from 0.8.12 to 0.8.15 - [Release notes](https://github.com/jacoco/jacoco/releases) - [Commits](jacoco/jacoco@v0.8.12...v0.8.15) Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.10.0 to 3.15.0 - [Release notes](https://github.com/apache/maven-compiler-plugin/releases) - [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.10.0...maven-compiler-plugin-3.15.0) Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.0.0-M5 to 3.6.0-M1 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-3.0.0-M5...surefire-3.6.0-M1) Updates `com.diffplug.spotless:spotless-maven-plugin` from 2.23.0 to 3.9.0 - [Release notes](https://github.com/diffplug/spotless/releases) - [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md) - [Commits](diffplug/spotless@lib/2.23.0...maven/3.9.0) Updates `org.apache.maven.plugins:maven-checkstyle-plugin` from 3.1.2 to 3.6.0 - [Release notes](https://github.com/apache/maven-checkstyle-plugin/releases) - [Commits](apache/maven-checkstyle-plugin@maven-checkstyle-plugin-3.1.2...maven-checkstyle-plugin-3.6.0) Updates `com.github.spotbugs:spotbugs-maven-plugin` from 4.8.6.6 to 4.10.3.0 - [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases) - [Commits](spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.8.6.6...spotbugs-maven-plugin-4.10.3.0) Updates `org.apache.maven.plugins:maven-shade-plugin` from 3.5.1 to 3.6.2 - [Release notes](https://github.com/apache/maven-shade-plugin/releases) - [Commits](apache/maven-shade-plugin@maven-shade-plugin-3.5.1...maven-shade-plugin-3.6.2) Updates `org.scala-lang:scala-library` from 2.12.7 to 3.8.4 - [Release notes](https://github.com/scala/scala3/releases) - [Commits](https://github.com/scala/scala3/commits/3.8.4) Updates `org.apache.kafka:kafka-clients` from 4.1.2 to 4.3.1 Updates `org.elasticsearch.client:elasticsearch-rest-high-level-client` from 7.17.9 to 7.17.29 - [Release notes](https://github.com/elastic/elasticsearch/releases) - [Changelog](https://github.com/elastic/elasticsearch/blob/main/docs/changelog.yml) - [Commits](elastic/elasticsearch@v7.17.9...v7.17.29) Updates `com.fasterxml.jackson.core:jackson-annotations` from 2.21 to 2.22 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `org.apache.commons:commons-lang3` from 3.18.0 to 3.20.0 Updates `com.h2database:h2` from 2.2.224 to 2.4.240 - [Release notes](https://github.com/h2database/h2database/releases) - [Commits](h2database/h2database@version-2.2.224...version-2.4.240) Updates `com.zaxxer:HikariCP` from 5.1.0 to 7.1.0 - [Changelog](https://github.com/brettwooldridge/HikariCP/blob/dev/CHANGES) - [Commits](brettwooldridge/HikariCP@HikariCP-5.1.0...HikariCP-7.1.0) Updates `com.nimbusds:nimbus-jose-jwt` from 10.0.2 to 10.9.1 - [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt) - [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/10.9.1..10.0.2) Updates `org.apache.maven.plugins:maven-assembly-plugin` from 3.6.0 to 3.8.0 - [Release notes](https://github.com/apache/maven-assembly-plugin/releases) - [Commits](apache/maven-assembly-plugin@maven-assembly-plugin-3.6.0...v3.8.0) Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.3.0 to 3.5.1 - [Release notes](https://github.com/apache/maven-jar-plugin/releases) - [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.3.0...maven-jar-plugin-3.5.1) Updates `org.apache.paimon:paimon-flink-1.20` from 1.4.1 to 2.0.0 Updates `org.apache.paimon:paimon-flink-cdc` from 1.4.1 to 2.0.0 Updates `org.apache.paimon:paimon-flink-cdc` from 1.4.1 to 2.0.0 Updates `org.mongodb:mongodb-driver-sync` from 4.11.1 to 5.9.2 - [Release notes](https://github.com/mongodb/mongo-java-driver/releases) - [Commits](mongodb/mongo-java-driver@r4.11.1...r5.9.2) Updates `org.apache.hadoop:hadoop-common` from 3.3.6 to 3.5.0 Updates `org.apache.hadoop:hadoop-hdfs` from 3.3.6 to 3.5.0 Updates `org.apache.hadoop:hadoop-mapreduce-client-core` from 3.3.6 to 3.5.0 Updates `org.apache.kafka:connect-api` from 3.6.1 to 4.3.1 Updates `org.apache.maven:apache-maven` from 3.9.9 to 3.9.16 --- updated-dependencies: - dependency-name: org.yaml:snakeyaml dependency-version: '2.6' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.slf4j:slf4j-api dependency-version: 2.0.18 dependency-type: direct:production update-type: version-update:semver-major dependency-group: other-deps - dependency-name: org.apache.logging.log4j:log4j-api dependency-version: 2.26.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.logging.log4j:log4j-core dependency-version: 2.26.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.logging.log4j:log4j-1.2-api dependency-version: 2.26.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.logging.log4j:log4j-slf4j-impl dependency-version: 2.26.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.logging.log4j:log4j-core dependency-version: 2.26.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.logging.log4j:log4j-1.2-api dependency-version: 2.26.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.logging.log4j:log4j-slf4j-impl dependency-version: 2.26.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: com.mysql:mysql-connector-j dependency-version: 26.7.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: other-deps - dependency-name: org.apache.hadoop:hadoop-client dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.hadoop:hadoop-common dependency-version: 3.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.hadoop:hadoop-hdfs dependency-version: 3.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.hadoop:hadoop-mapreduce-client-core dependency-version: 3.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: com.alibaba.nacos:nacos-client dependency-version: 3.2.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: other-deps - dependency-name: com.alibaba:fastjson dependency-version: 2.0.64 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: other-deps - dependency-name: com.fasterxml.jackson.core:jackson-core dependency-version: 2.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: com.jayway.jsonpath:json-path dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: other-deps - dependency-name: com.google.protobuf:protobuf-java dependency-version: 4.35.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: other-deps - dependency-name: net.minidev:json-smart dependency-version: 2.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: net.minidev:accessors-smart dependency-version: 2.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: commons-net:commons-net dependency-version: 3.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: com.squareup.okio:okio dependency-version: 3.18.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: commons-cli:commons-cli dependency-version: 1.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: dnsjava:dnsjava dependency-version: 3.6.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: other-deps - dependency-name: org.codehaus.plexus:plexus-utils dependency-version: 4.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: other-deps - dependency-name: at.yawk.lz4:lz4-java dependency-version: 1.11.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: com.google.errorprone:error_prone_core dependency-version: 2.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.codehaus.mojo:versions-maven-plugin dependency-version: 2.21.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.maven.plugins:maven-enforcer-plugin dependency-version: 3.6.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.maven.plugins:maven-pmd-plugin dependency-version: 3.28.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.jacoco:jacoco-maven-plugin dependency-version: 0.8.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: other-deps - dependency-name: org.apache.maven.plugins:maven-compiler-plugin dependency-version: 3.15.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.maven.plugins:maven-surefire-plugin dependency-version: 3.6.0-M1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: com.diffplug.spotless:spotless-maven-plugin dependency-version: 3.9.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: other-deps - dependency-name: org.apache.maven.plugins:maven-checkstyle-plugin dependency-version: 3.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: com.github.spotbugs:spotbugs-maven-plugin dependency-version: 4.10.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.maven.plugins:maven-shade-plugin dependency-version: 3.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.scala-lang:scala-library dependency-version: 3.8.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: other-deps - dependency-name: org.apache.kafka:kafka-clients dependency-version: 4.3.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.elasticsearch.client:elasticsearch-rest-high-level-client dependency-version: 7.17.29 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: other-deps - dependency-name: com.fasterxml.jackson.core:jackson-annotations dependency-version: '2.22' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.commons:commons-lang3 dependency-version: 3.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: com.h2database:h2 dependency-version: 2.4.240 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: com.zaxxer:HikariCP dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: other-deps - dependency-name: com.nimbusds:nimbus-jose-jwt dependency-version: 10.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.maven.plugins:maven-assembly-plugin dependency-version: 3.8.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.maven.plugins:maven-jar-plugin dependency-version: 3.5.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.paimon:paimon-flink-1.20 dependency-version: 2.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: other-deps - dependency-name: org.apache.paimon:paimon-flink-cdc dependency-version: 2.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: other-deps - dependency-name: org.apache.paimon:paimon-flink-cdc dependency-version: 2.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: other-deps - dependency-name: org.mongodb:mongodb-driver-sync dependency-version: 5.9.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: other-deps - dependency-name: org.apache.hadoop:hadoop-common dependency-version: 3.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.hadoop:hadoop-hdfs dependency-version: 3.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.hadoop:hadoop-mapreduce-client-core dependency-version: 3.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.kafka:connect-api dependency-version: 4.3.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: other-deps - dependency-name: org.apache.maven:apache-maven dependency-version: 3.9.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: other-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-17T01:06:41Z

Labels

The following labels could not be found: automated. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

github-actions · 2026-08-17T01:06:49Z

Thanks for opening this PR

dependabot Bot added the dependencies label Aug 17, 2026

Navigation Menu

Uh oh!

deps(deps): bump the other-deps group across 1 directory with 51 updates - #255

deps(deps): bump the other-deps group across 1 directory with 51 updates#255
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/other-deps-1aace734f9

dependabot Bot commented on behalf of github Aug 17, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 17, 2026

Uh oh!

github-actions Bot commented Aug 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 17, 2026

Changelog

https://dev.mysql.com/doc/relnotes/connector-j/en/

3.2.3 (Jul 14th, 2026)

Feature

Enhancement/Refactor

BugFix

Dependencies

fastjson 2.0.64版本发布

FASTJSON 2.0.64 Release Notes

Overview

Bug Fixes

Maven Dependency Configuration

Standard Version

Android 5 Optimized Version

Android 8 Optimized Version

json-path-3.0.0

What's Changed

New Contributors

json-path-2.10.0

What's Changed

v2.6.0

What's Changed

New Contributors

v2.6.0

What's Changed

New Contributors

2.5.2

About CVE-2024-57699

What's Changed

Apache Commons Net 3.13.0 Release Notes

New features

Fixed Bugs

Changes

Version 3.18.1

Version 3.18.0

Version 3.17.0

Uh oh!

dependabot Bot commented on behalf of github Aug 17, 2026

Labels

Uh oh!

github-actions Bot commented Aug 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants