build(deps): bump the dependencies group with 18 updates by dependabot[bot] · Pull Request #3961 · jooby-project/jooby

dependabot · 2026-05-25T00:10:21Z

Bumps the dependencies group with 18 updates:

Package	From	To
io.netty:netty-bom	`4.2.13.Final`	`4.2.14.Final`
io.netty:netty-codec-http2	`4.2.13.Final`	`4.2.14.Final`
io.netty:netty-transport-native-epoll	`4.2.13.Final`	`4.2.14.Final`
io.netty:netty-transport-native-kqueue	`4.2.13.Final`	`4.2.14.Final`
io.netty:netty-transport-native-io_uring	`4.2.13.Final`	`4.2.14.Final`
org.junit:junit-bom	`6.0.3`	`6.1.0`
io.modelcontextprotocol.sdk:mcp-bom	`1.1.2`	`1.1.3`
org.ow2.asm:asm	`9.10`	`9.10.1`
org.ow2.asm:asm-util	`9.10`	`9.10.1`
org.hibernate.orm:hibernate-core	`7.3.5.Final`	`7.3.6.Final`
org.hibernate.orm:hibernate-scan-jandex	`7.3.5.Final`	`7.3.6.Final`
io.undertow:undertow-core	`2.4.0.Final`	`2.4.1.Final`
com.bucket4j:bucket4j_jdk17-core	`8.18.0`	`8.19.0`
org.apache.kafka:kafka-clients	`4.2.0`	`4.3.0`
org.apache.maven.plugins:maven-enforcer-plugin	`3.6.2`	`3.6.3`
com.github.kagkarlsson:db-scheduler	`16.9.0`	`16.10.0`
software.amazon.awssdk:bom	`2.44.7`	`2.44.12`
io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha	`2.27.0-alpha`	`2.28.1-alpha`

Updates io.netty:netty-bom from 4.2.13.Final to 4.2.14.Final

Release notes

Sourced from io.netty:netty-bom's releases.

netty-4.2.14.Final

What's Changed

HTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by @normanmaurer in netty/netty#16748

HTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by @normanmaurer in netty/netty#16747

Marshalling: Explicit document security requirements by @normanmaurer in netty/netty#16752

Fix io_uring op completion TRACE logging by @chrisvest in netty/netty#16755

Quic: Ensure writes are done before notify close promise of QuicheQui… by @normanmaurer in netty/netty#16758

Avoid re-parsing openssl key material with non-cached provider by @chrisvest in netty/netty#16759

Pin HTTP/RTSP version + method normalization to Locale.US by @daguimu in netty/netty#16765

Fill MsgHdrMemoryArray#hdrs with null entry on release by @tsegismont in netty/netty#16764

Revapi: Use default "oldVersion" by @chrisvest in netty/netty#16774

Adaptive: Fix concurrency issue in adaptive allocator by @chrisvest in netty/netty#16767

Auto-port 4.2: Make bulk byte moving in ByteBuf faster by @netty-project-bot in netty/netty#16781

Pin multipart Content-Type / Content-Transfer-Encoding case folding to Locale.US by @daguimu in netty/netty#16768

Remove dead native declarations by @pandareen in netty/netty#16783

Isolate tests that modify available Security providers by @chrisvest in netty/netty#16793

Remove test annotations from a method that isn't a test by @chrisvest in netty/netty#16792

Enable OpenSslCachingKeyMaterialProvider to evict stale entries after cert rotation by @zhangweikop in netty/netty#16523

IoUring: extend user data from short to long by @dreamlike-ocean in netty/netty#16682

Revert CompositeByteBuf component search fast path by @yawkat in netty/netty#16811

HTTP2: Use 100 as default max concurrent streams setting by @normanmaurer in netty/netty#16804

Fix ResumptionController wrapping by @chrisvest in netty/netty#16815

Resolve all localhost addresses without querying DNS servers by @JulianVennen in netty/netty#16749

IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules are configured but remote peer is using ipv4 by @normanmaurer in netty/netty#16803

Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe by @dreamlike-ocean in netty/netty#16788

Route synchronous onLookupComplete exceptions via fireExceptionCaught by @kwondh5217 in netty/netty#16794

IoUring: Stop generic FileRegion drain loop when transferred() reaches count() by @LuciferYang in netty/netty#16826

MQTT: Allow MQTT 5 CONNECT with password only by @shblue21 in netty/netty#16833

Fix MQTT decoder size check after variable header replay by @daguimu in netty/netty#16787

New Contributors

@pandareen made their first contribution in netty/netty#16783

@zhangweikop made their first contribution in netty/netty#16523

@JulianVennen made their first contribution in netty/netty#16749

@kwondh5217 made their first contribution in netty/netty#16794

@shblue21 made their first contribution in netty/netty#16833

Full Changelog: netty/netty@netty-4.2.13.Final...netty-4.2.14.Final

Commits

0a60b75 [maven-release-plugin] prepare release netty-4.2.14.Final
72df658 Fix MQTT decoder size check after variable header replay (#16787)
7125dba MQTT: Allow MQTT 5 CONNECT with password only (#16833)
9e19320 IoUring: Stop generic FileRegion drain loop when transferred() reaches count(...
4ce9f17 Route synchronous onLookupComplete exceptions via fireExceptionCaught (#16794)
f7b1b7d Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe...
0ccb265 IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules ...
a6aeb6d Resolve all localhost addresses without querying DNS servers (#16749)
c328ba2 Fix ResumptionController wrapping (#16815)
bc5862b HTTP2: Use 100 as default max concurrent streams setting (#16804)
Additional commits viewable in compare view

Updates io.netty:netty-codec-http2 from 4.2.13.Final to 4.2.14.Final

Release notes

Sourced from io.netty:netty-codec-http2's releases.

netty-4.2.14.Final

What's Changed

HTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by @normanmaurer in netty/netty#16748

HTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by @normanmaurer in netty/netty#16747

Marshalling: Explicit document security requirements by @normanmaurer in netty/netty#16752

Fix io_uring op completion TRACE logging by @chrisvest in netty/netty#16755

Quic: Ensure writes are done before notify close promise of QuicheQui… by @normanmaurer in netty/netty#16758

Avoid re-parsing openssl key material with non-cached provider by @chrisvest in netty/netty#16759

Pin HTTP/RTSP version + method normalization to Locale.US by @daguimu in netty/netty#16765

Fill MsgHdrMemoryArray#hdrs with null entry on release by @tsegismont in netty/netty#16764

Revapi: Use default "oldVersion" by @chrisvest in netty/netty#16774

Adaptive: Fix concurrency issue in adaptive allocator by @chrisvest in netty/netty#16767

Auto-port 4.2: Make bulk byte moving in ByteBuf faster by @netty-project-bot in netty/netty#16781

Pin multipart Content-Type / Content-Transfer-Encoding case folding to Locale.US by @daguimu in netty/netty#16768

Remove dead native declarations by @pandareen in netty/netty#16783

Isolate tests that modify available Security providers by @chrisvest in netty/netty#16793

Remove test annotations from a method that isn't a test by @chrisvest in netty/netty#16792

Enable OpenSslCachingKeyMaterialProvider to evict stale entries after cert rotation by @zhangweikop in netty/netty#16523

IoUring: extend user data from short to long by @dreamlike-ocean in netty/netty#16682

Revert CompositeByteBuf component search fast path by @yawkat in netty/netty#16811

HTTP2: Use 100 as default max concurrent streams setting by @normanmaurer in netty/netty#16804

Fix ResumptionController wrapping by @chrisvest in netty/netty#16815

Resolve all localhost addresses without querying DNS servers by @JulianVennen in netty/netty#16749

IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules are configured but remote peer is using ipv4 by @normanmaurer in netty/netty#16803

Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe by @dreamlike-ocean in netty/netty#16788

Route synchronous onLookupComplete exceptions via fireExceptionCaught by @kwondh5217 in netty/netty#16794

IoUring: Stop generic FileRegion drain loop when transferred() reaches count() by @LuciferYang in netty/netty#16826

MQTT: Allow MQTT 5 CONNECT with password only by @shblue21 in netty/netty#16833

Fix MQTT decoder size check after variable header replay by @daguimu in netty/netty#16787

New Contributors

@pandareen made their first contribution in netty/netty#16783

@zhangweikop made their first contribution in netty/netty#16523

@JulianVennen made their first contribution in netty/netty#16749

@kwondh5217 made their first contribution in netty/netty#16794

@shblue21 made their first contribution in netty/netty#16833

Full Changelog: netty/netty@netty-4.2.13.Final...netty-4.2.14.Final

Commits

0a60b75 [maven-release-plugin] prepare release netty-4.2.14.Final
72df658 Fix MQTT decoder size check after variable header replay (#16787)
7125dba MQTT: Allow MQTT 5 CONNECT with password only (#16833)
9e19320 IoUring: Stop generic FileRegion drain loop when transferred() reaches count(...
4ce9f17 Route synchronous onLookupComplete exceptions via fireExceptionCaught (#16794)
f7b1b7d Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe...
0ccb265 IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules ...
a6aeb6d Resolve all localhost addresses without querying DNS servers (#16749)
c328ba2 Fix ResumptionController wrapping (#16815)
bc5862b HTTP2: Use 100 as default max concurrent streams setting (#16804)
Additional commits viewable in compare view

Updates io.netty:netty-transport-native-epoll from 4.2.13.Final to 4.2.14.Final

Release notes

Sourced from io.netty:netty-transport-native-epoll's releases.

netty-4.2.14.Final

What's Changed

HTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by @normanmaurer in netty/netty#16748

HTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by @normanmaurer in netty/netty#16747

Marshalling: Explicit document security requirements by @normanmaurer in netty/netty#16752

Fix io_uring op completion TRACE logging by @chrisvest in netty/netty#16755

Quic: Ensure writes are done before notify close promise of QuicheQui… by @normanmaurer in netty/netty#16758

Avoid re-parsing openssl key material with non-cached provider by @chrisvest in netty/netty#16759

Pin HTTP/RTSP version + method normalization to Locale.US by @daguimu in netty/netty#16765

Fill MsgHdrMemoryArray#hdrs with null entry on release by @tsegismont in netty/netty#16764

Revapi: Use default "oldVersion" by @chrisvest in netty/netty#16774

Adaptive: Fix concurrency issue in adaptive allocator by @chrisvest in netty/netty#16767

Auto-port 4.2: Make bulk byte moving in ByteBuf faster by @netty-project-bot in netty/netty#16781

Pin multipart Content-Type / Content-Transfer-Encoding case folding to Locale.US by @daguimu in netty/netty#16768

Remove dead native declarations by @pandareen in netty/netty#16783

Isolate tests that modify available Security providers by @chrisvest in netty/netty#16793

Remove test annotations from a method that isn't a test by @chrisvest in netty/netty#16792

Enable OpenSslCachingKeyMaterialProvider to evict stale entries after cert rotation by @zhangweikop in netty/netty#16523

IoUring: extend user data from short to long by @dreamlike-ocean in netty/netty#16682

Revert CompositeByteBuf component search fast path by @yawkat in netty/netty#16811

HTTP2: Use 100 as default max concurrent streams setting by @normanmaurer in netty/netty#16804

Fix ResumptionController wrapping by @chrisvest in netty/netty#16815

Resolve all localhost addresses without querying DNS servers by @JulianVennen in netty/netty#16749

IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules are configured but remote peer is using ipv4 by @normanmaurer in netty/netty#16803

Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe by @dreamlike-ocean in netty/netty#16788

Route synchronous onLookupComplete exceptions via fireExceptionCaught by @kwondh5217 in netty/netty#16794

IoUring: Stop generic FileRegion drain loop when transferred() reaches count() by @LuciferYang in netty/netty#16826

MQTT: Allow MQTT 5 CONNECT with password only by @shblue21 in netty/netty#16833

Fix MQTT decoder size check after variable header replay by @daguimu in netty/netty#16787

New Contributors

@pandareen made their first contribution in netty/netty#16783

@zhangweikop made their first contribution in netty/netty#16523

@JulianVennen made their first contribution in netty/netty#16749

@kwondh5217 made their first contribution in netty/netty#16794

@shblue21 made their first contribution in netty/netty#16833

Full Changelog: netty/netty@netty-4.2.13.Final...netty-4.2.14.Final

Commits

0a60b75 [maven-release-plugin] prepare release netty-4.2.14.Final
72df658 Fix MQTT decoder size check after variable header replay (#16787)
7125dba MQTT: Allow MQTT 5 CONNECT with password only (#16833)
9e19320 IoUring: Stop generic FileRegion drain loop when transferred() reaches count(...
4ce9f17 Route synchronous onLookupComplete exceptions via fireExceptionCaught (#16794)
f7b1b7d Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe...
0ccb265 IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules ...
a6aeb6d Resolve all localhost addresses without querying DNS servers (#16749)
c328ba2 Fix ResumptionController wrapping (#16815)
bc5862b HTTP2: Use 100 as default max concurrent streams setting (#16804)
Additional commits viewable in compare view

Updates io.netty:netty-transport-native-kqueue from 4.2.13.Final to 4.2.14.Final

Release notes

Sourced from io.netty:netty-transport-native-kqueue's releases.

netty-4.2.14.Final

What's Changed

HTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by @normanmaurer in netty/netty#16748

HTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by @normanmaurer in netty/netty#16747

Marshalling: Explicit document security requirements by @normanmaurer in netty/netty#16752

Fix io_uring op completion TRACE logging by @chrisvest in netty/netty#16755

Quic: Ensure writes are done before notify close promise of QuicheQui… by @normanmaurer in netty/netty#16758

Avoid re-parsing openssl key material with non-cached provider by @chrisvest in netty/netty#16759

Pin HTTP/RTSP version + method normalization to Locale.US by @daguimu in netty/netty#16765

Fill MsgHdrMemoryArray#hdrs with null entry on release by @tsegismont in netty/netty#16764

Revapi: Use default "oldVersion" by @chrisvest in netty/netty#16774

Adaptive: Fix concurrency issue in adaptive allocator by @chrisvest in netty/netty#16767

Auto-port 4.2: Make bulk byte moving in ByteBuf faster by @netty-project-bot in netty/netty#16781

Pin multipart Content-Type / Content-Transfer-Encoding case folding to Locale.US by @daguimu in netty/netty#16768

Remove dead native declarations by @pandareen in netty/netty#16783

Isolate tests that modify available Security providers by @chrisvest in netty/netty#16793

Remove test annotations from a method that isn't a test by @chrisvest in netty/netty#16792

Enable OpenSslCachingKeyMaterialProvider to evict stale entries after cert rotation by @zhangweikop in netty/netty#16523

IoUring: extend user data from short to long by @dreamlike-ocean in netty/netty#16682

Revert CompositeByteBuf component search fast path by @yawkat in netty/netty#16811

HTTP2: Use 100 as default max concurrent streams setting by @normanmaurer in netty/netty#16804

Fix ResumptionController wrapping by @chrisvest in netty/netty#16815

Resolve all localhost addresses without querying DNS servers by @JulianVennen in netty/netty#16749

IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules are configured but remote peer is using ipv4 by @normanmaurer in netty/netty#16803

Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe by @dreamlike-ocean in netty/netty#16788

Route synchronous onLookupComplete exceptions via fireExceptionCaught by @kwondh5217 in netty/netty#16794

IoUring: Stop generic FileRegion drain loop when transferred() reaches count() by @LuciferYang in netty/netty#16826

MQTT: Allow MQTT 5 CONNECT with password only by @shblue21 in netty/netty#16833

Fix MQTT decoder size check after variable header replay by @daguimu in netty/netty#16787

New Contributors

@pandareen made their first contribution in netty/netty#16783

@zhangweikop made their first contribution in netty/netty#16523

@JulianVennen made their first contribution in netty/netty#16749

@kwondh5217 made their first contribution in netty/netty#16794

@shblue21 made their first contribution in netty/netty#16833

Full Changelog: netty/netty@netty-4.2.13.Final...netty-4.2.14.Final

Commits

0a60b75 [maven-release-plugin] prepare release netty-4.2.14.Final
72df658 Fix MQTT decoder size check after variable header replay (#16787)
7125dba MQTT: Allow MQTT 5 CONNECT with password only (#16833)
9e19320 IoUring: Stop generic FileRegion drain loop when transferred() reaches count(...
4ce9f17 Route synchronous onLookupComplete exceptions via fireExceptionCaught (#16794)
f7b1b7d Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe...
0ccb265 IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules ...
a6aeb6d Resolve all localhost addresses without querying DNS servers (#16749)
c328ba2 Fix ResumptionController wrapping (#16815)
bc5862b HTTP2: Use 100 as default max concurrent streams setting (#16804)
Additional commits viewable in compare view

Updates io.netty:netty-transport-native-io_uring from 4.2.13.Final to 4.2.14.Final

Release notes

Sourced from io.netty:netty-transport-native-io_uring's releases.

netty-4.2.14.Final

What's Changed

HTTP: Fix revapi failure introduced by 84530fa81e12dcd1d42310bb20c1385cb44128d8 by @normanmaurer in netty/netty#16748

HTTP: Re-add constructor to HttpProxyHandler that was removed by mistake by @normanmaurer in netty/netty#16747

Marshalling: Explicit document security requirements by @normanmaurer in netty/netty#16752

Fix io_uring op completion TRACE logging by @chrisvest in netty/netty#16755

Quic: Ensure writes are done before notify close promise of QuicheQui… by @normanmaurer in netty/netty#16758

Avoid re-parsing openssl key material with non-cached provider by @chrisvest in netty/netty#16759

Pin HTTP/RTSP version + method normalization to Locale.US by @daguimu in netty/netty#16765

Fill MsgHdrMemoryArray#hdrs with null entry on release by @tsegismont in netty/netty#16764

Revapi: Use default "oldVersion" by @chrisvest in netty/netty#16774

Adaptive: Fix concurrency issue in adaptive allocator by @chrisvest in netty/netty#16767

Auto-port 4.2: Make bulk byte moving in ByteBuf faster by @netty-project-bot in netty/netty#16781

Pin multipart Content-Type / Content-Transfer-Encoding case folding to Locale.US by @daguimu in netty/netty#16768

Remove dead native declarations by @pandareen in netty/netty#16783

Isolate tests that modify available Security providers by @chrisvest in netty/netty#16793

Remove test annotations from a method that isn't a test by @chrisvest in netty/netty#16792

Enable OpenSslCachingKeyMaterialProvider to evict stale entries after cert rotation by @zhangweikop in netty/netty#16523

IoUring: extend user data from short to long by @dreamlike-ocean in netty/netty#16682

Revert CompositeByteBuf component search fast path by @yawkat in netty/netty#16811

HTTP2: Use 100 as default max concurrent streams setting by @normanmaurer in netty/netty#16804

Fix ResumptionController wrapping by @chrisvest in netty/netty#16815

Resolve all localhost addresses without querying DNS servers by @JulianVennen in netty/netty#16749

IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules are configured but remote peer is using ipv4 by @normanmaurer in netty/netty#16803

Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe by @dreamlike-ocean in netty/netty#16788

Route synchronous onLookupComplete exceptions via fireExceptionCaught by @kwondh5217 in netty/netty#16794

IoUring: Stop generic FileRegion drain loop when transferred() reaches count() by @LuciferYang in netty/netty#16826

MQTT: Allow MQTT 5 CONNECT with password only by @shblue21 in netty/netty#16833

Fix MQTT decoder size check after variable header replay by @daguimu in netty/netty#16787

New Contributors

@pandareen made their first contribution in netty/netty#16783

@zhangweikop made their first contribution in netty/netty#16523

@JulianVennen made their first contribution in netty/netty#16749

@kwondh5217 made their first contribution in netty/netty#16794

@shblue21 made their first contribution in netty/netty#16833

Full Changelog: netty/netty@netty-4.2.13.Final...netty-4.2.14.Final

Commits

0a60b75 [maven-release-plugin] prepare release netty-4.2.14.Final
72df658 Fix MQTT decoder size check after variable header replay (#16787)
7125dba MQTT: Allow MQTT 5 CONNECT with password only (#16833)
9e19320 IoUring: Stop generic FileRegion drain loop when transferred() reaches count(...
4ce9f17 Route synchronous onLookupComplete exceptions via fireExceptionCaught (#16794)
f7b1b7d Fix memoryAddress() for direct ByteBuffers wrapped by Unpooled without Unsafe...
0ccb265 IpFilter: Fix ClassCastException caused by IpSubnetFilter if only ipv6 rules ...
a6aeb6d Resolve all localhost addresses without querying DNS servers (#16749)
c328ba2 Fix ResumptionController wrapping (#16815)
bc5862b HTTP2: Use 100 as default max concurrent streams setting (#16804)
Additional commits viewable in compare view

Updates org.junit:junit-bom from 6.0.3 to 6.1.0

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 6.1.0 = Platform 6.1.0 + Jupiter 6.1.0 + Vintage 6.1.0

See Release Notes.

New Contributors

@JarvisCraft made their first contribution in junit-team/junit-framework#5633

@Maran23 made their first contribution in junit-team/junit-framework#5644

Full Changelog: junit-team/junit-framework@r6.0.3...r6.1.0

JUnit 6.1.0-RC1 = Platform 6.1.0-RC1 + Jupiter 6.1.0-RC1 + Vintage 6.1.0-RC1

See Release Notes.

New Contributors

@mariokhoury4 made their first contribution in junit-team/junit-framework#4574

@Ogu1208 made their first contribution in junit-team/junit-framework#5145

@HyungGeun94 made their first contribution in junit-team/junit-framework#5271

@yalishevant made their first contribution in junit-team/junit-framework#5316

@JINU-CHANG made their first contribution in junit-team/junit-framework#5290

@jaschdoc made their first contribution in junit-team/junit-framework#5427

@kawshikbuet17 made their first contribution in junit-team/junit-framework#5561

@msridhar made their first contribution in junit-team/junit-framework#5602

Full Changelog: junit-team/junit-framework@r6.1.0-M1...r6.1.0-RC1

JUnit 6.1.0-M1 = Platform 6.1.0-M1 + Jupiter 6.1.0-M1 + Vintage 6.1.0-M1

See Release Notes.

New Contributors

@vy made their first contribution in junit-team/junit-framework#5041

@Pankraz76 made their first contribution in junit-team/junit-framework#5006

@arukiidou made their first contribution in junit-team/junit-framework#5066

@laeubi made their first contribution in junit-team/junit-framework#5092

@jihun4452 made their first contribution in junit-team/junit-framework#5088

@TWiStErRob made their first contribution in junit-team/junit-framework#5133

Full Changelog: junit-team/junit-framework@r6.0.0...r6.1.0-M1

Commits

0dc3af1 Release 6.1.0
1d13002 Prepare 6.1.0 release notes
072b217 Update plugin spotless to v8.5.0 (#5668)
3a53480 Update Gradle to v9.5.1 (#5666)
0e18a20 Update zizmorcore/zizmor-action action to v0.5.4 (#5669)
0a2634f Update github/codeql-action action to v4.35.5 (#5671)
4dbd556 Restructure workflows to have single "status" job (#5670)
f2194ce Increase timeout to reduce flakiness
5c8fdd2 Update dependency org.apache.groovy:groovy to v5.0.6 (#5659)
43c6982 Update dependency org.slf4j:slf4j-jdk14 to v2.0.18 (#5667)
Additional commits viewable in compare view

Updates io.modelcontextprotocol.sdk:mcp-bom from 1.1.2 to 1.1.3

Release notes

Sourced from io.modelcontextprotocol.sdk:mcp-bom's releases.

v1.1.3

What's changed

Validate message endpoint in SSE client transport by @Kehrlann in modelcontextprotocol/java-sdk#943 (backport)

DefaultSseMessageEndpointValidator allows same-origin message endpoints by @Kehrlann in modelcontextprotocol/java-sdk#946 (backport)

Full Changelog: modelcontextprotocol/java-sdk@v1.1.2...v1.1.3

Commits

f4c25f0 Release version 1.1.3
45589ad Fix assertions in HttpClientSseClientTransportTests
0be6032 DefaultSseMessageEndpointValidator allows same-origin message endpoints
f4c8371 Validate message endpoint in SSE client transport
34e9b8c Next development version
See full diff in compare view

Updates org.ow2.asm:asm from 9.10 to 9.10.1

Updates org.ow2.asm:asm-util from 9.10 to 9.10.1

Updates org.hibernate.orm:hibernate-core from 7.3.5.Final to 7.3.6.Final

Release notes

Sourced from org.hibernate.orm:hibernate-core's releases.

Release 7.3.6

Hibernate ORM 7.3.6.Final released

Today, we published a new release of Hibernate ORM 7.3: 7.3.6.Final.

You can find the full list of 7.3.6.Final changes here.

What's new

See the website for requirements and compatibilities.

See the What's New guide for details about new features and capabilities.

See the Migration Guide for details about migration.

Conclusion

For additional details, see:

the release page

the Migration Guide

the Introduction Guide

the User Guide

the API docs

See also the following resources related to supported APIs:

the compatibility policy

the incubating API report (@Incubating)

the deprecated API report (@Deprecated + @Remove)

the internal API report (internal packages, Description has been truncated

Bumps the dependencies group with 18 updates: | Package | From | To | | --- | --- | --- | | [io.netty:netty-bom](https://github.com/netty/netty) | `4.2.13.Final` | `4.2.14.Final` | | [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.2.13.Final` | `4.2.14.Final` | | [io.netty:netty-transport-native-epoll](https://github.com/netty/netty) | `4.2.13.Final` | `4.2.14.Final` | | [io.netty:netty-transport-native-kqueue](https://github.com/netty/netty) | `4.2.13.Final` | `4.2.14.Final` | | [io.netty:netty-transport-native-io_uring](https://github.com/netty/netty) | `4.2.13.Final` | `4.2.14.Final` | | [org.junit:junit-bom](https://github.com/junit-team/junit-framework) | `6.0.3` | `6.1.0` | | [io.modelcontextprotocol.sdk:mcp-bom](https://github.com/modelcontextprotocol/java-sdk) | `1.1.2` | `1.1.3` | | org.ow2.asm:asm | `9.10` | `9.10.1` | | org.ow2.asm:asm-util | `9.10` | `9.10.1` | | [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) | `7.3.5.Final` | `7.3.6.Final` | | [org.hibernate.orm:hibernate-scan-jandex](https://github.com/hibernate/hibernate-orm) | `7.3.5.Final` | `7.3.6.Final` | | [io.undertow:undertow-core](https://github.com/undertow-io/undertow) | `2.4.0.Final` | `2.4.1.Final` | | [com.bucket4j:bucket4j_jdk17-core](https://github.com/bucket4j/bucket4j) | `8.18.0` | `8.19.0` | | org.apache.kafka:kafka-clients | `4.2.0` | `4.3.0` | | [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.6.2` | `3.6.3` | | [com.github.kagkarlsson:db-scheduler](https://github.com/kagkarlsson/db-scheduler) | `16.9.0` | `16.10.0` | | software.amazon.awssdk:bom | `2.44.7` | `2.44.12` | | [io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha](https://github.com/open-telemetry/opentelemetry-java-instrumentation) | `2.27.0-alpha` | `2.28.1-alpha` | Updates `io.netty:netty-bom` from 4.2.13.Final to 4.2.14.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.13.Final...netty-4.2.14.Final) Updates `io.netty:netty-codec-http2` from 4.2.13.Final to 4.2.14.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.13.Final...netty-4.2.14.Final) Updates `io.netty:netty-transport-native-epoll` from 4.2.13.Final to 4.2.14.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.13.Final...netty-4.2.14.Final) Updates `io.netty:netty-transport-native-kqueue` from 4.2.13.Final to 4.2.14.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.13.Final...netty-4.2.14.Final) Updates `io.netty:netty-transport-native-io_uring` from 4.2.13.Final to 4.2.14.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.13.Final...netty-4.2.14.Final) Updates `org.junit:junit-bom` from 6.0.3 to 6.1.0 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r6.0.3...r6.1.0) Updates `io.modelcontextprotocol.sdk:mcp-bom` from 1.1.2 to 1.1.3 - [Release notes](https://github.com/modelcontextprotocol/java-sdk/releases) - [Commits](modelcontextprotocol/java-sdk@v1.1.2...v1.1.3) Updates `org.ow2.asm:asm` from 9.10 to 9.10.1 Updates `org.ow2.asm:asm-util` from 9.10 to 9.10.1 Updates `org.ow2.asm:asm-util` from 9.10 to 9.10.1 Updates `org.hibernate.orm:hibernate-core` from 7.3.5.Final to 7.3.6.Final - [Release notes](https://github.com/hibernate/hibernate-orm/releases) - [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.3.6/changelog.txt) - [Commits](hibernate/hibernate-orm@7.3.5...7.3.6) Updates `org.hibernate.orm:hibernate-scan-jandex` from 7.3.5.Final to 7.3.6.Final - [Release notes](https://github.com/hibernate/hibernate-orm/releases) - [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.3.6/changelog.txt) - [Commits](hibernate/hibernate-orm@7.3.5...7.3.6) Updates `io.undertow:undertow-core` from 2.4.0.Final to 2.4.1.Final - [Release notes](https://github.com/undertow-io/undertow/releases) - [Commits](undertow-io/undertow@2.4.0.Final...2.4.1.Final) Updates `com.bucket4j:bucket4j_jdk17-core` from 8.18.0 to 8.19.0 - [Release notes](https://github.com/bucket4j/bucket4j/releases) - [Commits](bucket4j/bucket4j@8.18.0...8.19.0) Updates `org.apache.kafka:kafka-clients` from 4.2.0 to 4.3.0 Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.6.2 to 3.6.3 - [Release notes](https://github.com/apache/maven-enforcer/releases) - [Commits](apache/maven-enforcer@enforcer-3.6.2...enforcer-3.6.3) Updates `io.netty:netty-codec-http2` from 4.2.13.Final to 4.2.14.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.13.Final...netty-4.2.14.Final) Updates `io.netty:netty-transport-native-epoll` from 4.2.13.Final to 4.2.14.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.13.Final...netty-4.2.14.Final) Updates `io.netty:netty-transport-native-kqueue` from 4.2.13.Final to 4.2.14.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.13.Final...netty-4.2.14.Final) Updates `io.netty:netty-transport-native-io_uring` from 4.2.13.Final to 4.2.14.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.13.Final...netty-4.2.14.Final) Updates `org.hibernate.orm:hibernate-scan-jandex` from 7.3.5.Final to 7.3.6.Final - [Release notes](https://github.com/hibernate/hibernate-orm/releases) - [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.3.6/changelog.txt) - [Commits](hibernate/hibernate-orm@7.3.5...7.3.6) Updates `com.github.kagkarlsson:db-scheduler` from 16.9.0 to 16.10.0 - [Release notes](https://github.com/kagkarlsson/db-scheduler/releases) - [Commits](kagkarlsson/db-scheduler@v16.9.0...v16.10.0) Updates `software.amazon.awssdk:bom` from 2.44.7 to 2.44.12 Updates `io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha` from 2.27.0-alpha to 2.28.1-alpha - [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-java-instrumentation/commits) --- updated-dependencies: - dependency-name: io.netty:netty-bom dependency-version: 4.2.14.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.netty:netty-codec-http2 dependency-version: 4.2.14.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.netty:netty-transport-native-epoll dependency-version: 4.2.14.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.netty:netty-transport-native-kqueue dependency-version: 4.2.14.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.netty:netty-transport-native-io_uring dependency-version: 4.2.14.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.junit:junit-bom dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: io.modelcontextprotocol.sdk:mcp-bom dependency-version: 1.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.ow2.asm:asm dependency-version: 9.10.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.ow2.asm:asm-util dependency-version: 9.10.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.ow2.asm:asm-util dependency-version: 9.10.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.hibernate.orm:hibernate-core dependency-version: 7.3.6.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.hibernate.orm:hibernate-scan-jandex dependency-version: 7.3.6.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.undertow:undertow-core dependency-version: 2.4.1.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: com.bucket4j:bucket4j_jdk17-core dependency-version: 8.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.kafka:kafka-clients dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.maven.plugins:maven-enforcer-plugin dependency-version: 3.6.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.netty:netty-codec-http2 dependency-version: 4.2.14.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.netty:netty-transport-native-epoll dependency-version: 4.2.14.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.netty:netty-transport-native-kqueue dependency-version: 4.2.14.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.netty:netty-transport-native-io_uring dependency-version: 4.2.14.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.hibernate.orm:hibernate-scan-jandex dependency-version: 7.3.6.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: com.github.kagkarlsson:db-scheduler dependency-version: 16.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: software.amazon.awssdk:bom dependency-version: 2.44.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha dependency-version: 2.28.1-alpha dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels May 25, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the dependencies group with 18 updates#3961

build(deps): bump the dependencies group with 18 updates#3961
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/dependencies-e0c64431ce

dependabot Bot commented on behalf of github May 25, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github May 25, 2026

netty-4.2.14.Final

What's Changed

New Contributors

netty-4.2.14.Final

What's Changed

New Contributors

netty-4.2.14.Final

What's Changed

New Contributors

netty-4.2.14.Final

What's Changed

New Contributors

netty-4.2.14.Final

What's Changed

New Contributors

New Contributors

New Contributors

New Contributors

v1.1.3

What's changed

Release 7.3.6

Hibernate ORM 7.3.6.Final released

What's new

Conclusion

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants