Skip to content

build(deps): bump net.bytebuddy:byte-buddy from 1.17.5 to 1.18.8#2585

Closed
dependabot[bot] wants to merge 1 commit intokaraf-4.4.xfrom
dependabot/maven/karaf-4.4.x/net.bytebuddy-byte-buddy-1.18.8
Closed

build(deps): bump net.bytebuddy:byte-buddy from 1.17.5 to 1.18.8#2585
dependabot[bot] wants to merge 1 commit intokaraf-4.4.xfrom
dependabot/maven/karaf-4.4.x/net.bytebuddy-byte-buddy-1.18.8

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 24, 2026

Bumps net.bytebuddy:byte-buddy from 1.17.5 to 1.18.8.

Release notes

Sourced from net.bytebuddy:byte-buddy's releases.

Byte Buddy 1.18.8

  • Improve support for repeatable builds.
  • Fix reordering of exception table in type initializers when instrumenting.

Byte Buddy 1.18.7

  • Introduce new versioning concept with -jdk5 suffix for backwards-compatible jar and Java 8 baseline for regular jar.

Byte Buddy 1.18.5

  • Eagerly resolve of canonical files during attach emulation to avoid failure when process ends before file can be deleted.
  • Add super classes to hash code / equals computation in Advice that were missing.

Byte Buddy 1.18.4

  • Add support for new build description in Android 9.

Byte Buddy 1.18.3

  • Avoid using Class File API when Byte Buddy is loaded on the boot loader where multi-release jars are not available.
  • Add additional safety when processing class files with illegally formed parameters.
  • Update to latest ASM.

Byte Buddy 1.18.2

  • Support modifiers for value classes in Valhalla builds.
  • Improve use of build cache in Gradle.

Byte Buddy 1.18.1

  • Fix generated module-info to include new package.

Byte Buddy 1.18.0

  • Add support for module-info class files and ModuleDescriptions.
  • Allow for manipulating module information using the ByteBuddy API.

Byte Buddy 1.17.8

  • Avoid use of types that are deprecated as of Java 26.
  • Include ASM 9.9 that offers ASM support for Java 26.
  • Make sure that generated code internal to Byte Buddy supports CDS if available.
  • Update version of ASM to JDK Class File API bridge to fix some minor bugs related to type annotations.

Byte Buddy 1.17.7

  • Specify correct JVM environment for Android builds when using the Gradle plugin.
  • Avoid recomputing the size of a parameter list for performance reasons after measuring the significant impact.
  • Correct validation of JVM names to avoid breaking when Java names are not allowed while JVM names are, with Kotlin and others.

Byte Buddy 1.17.6

  • Add convenience wrapper for ResettableClassFileTransformer that implicitly delegates to correct transformer method.
  • Add filter for deduplicate fields and methods in class file.
  • Add missing static requirement of Spotbugs annotations to module descriptors.
  • Add LazinessMode for TypePool and add convenience support to AgentBuilder.
  • Fix source jars for multi-version release to contain duplicated source.
Changelog

Sourced from net.bytebuddy:byte-buddy's changelog.

1. April 2026: version 1.18.8

  • Improve support for repeatable builds.
  • Fix reordering of exception table in type initializers when instrumenting.

1. March 2026: version 1.18.7

  • Introduce new versioning concept with -jdk5 suffix for backwards-compatible jar and Java 8 baseline for regular jar.

27. February 2026: version 1.18.6

Accidental release during rework of release pipeline. Functional, but with incorrect suffices.

15. February 2026: version 1.18.5

  • Eagerly resolve of canonical files during attach emulation to avoid failure when process ends before file can be deleted.
  • Add super classes to hash code / equals computation in Advice that were missing.

16. January 2026: version 1.18.4

  • Add support for new build description in Android 9.

26. November 2025: version 1.18.3

  • Avoid using Class File API when Byte Buddy is loaded on the boot loader where multi-release jars are not available.
  • Add additional safety when processing class files with illegally formed parameters.
  • Update to latest ASM.

26. November 2025: version 1.18.2

  • Support modifiers for value classes in Valhalla builds.
  • Improve use of build cache in Gradle.

12. November 2025: version 1.18.1

  • Fix generated module-info to include new package.

11. November 2025: version 1.18.0

  • Add support for module-info class files and ModuleDescriptions.
  • Allow for manipulating module information using the ByteBuddy API.

8. October 2025: version 1.17.8

  • Avoid use of types that are deprecated as of Java 26.
  • Include ASM 9.9 that offers ASM support for Java 26.
  • Make sure that generated code internal to Byte Buddy supports CDS if available.
  • Update version of ASM to JDK Class File API bridge to fix some minor bugs related to type annotations.

17. August 2025: version 1.17.7

... (truncated)

Commits
  • b71379a [publish] Releasing Byte Buddy 1.18.8
  • 31cce02 [release] Release new version.
  • a30791f Add nullability annotations.
  • b9ed5b9 Avoid that type initializer extension adjusts exception handlers by prependin...
  • 7d35c66 Fix test.
  • 9b46909 Support reproducible builds.
  • 9a1e34e Use GitHub HTTP URL as Maven scm url (#1887)
  • 2b8cadd Flip release order to attempt making Maven release a different "latest" version.
  • bf02559 Move to jdk5 versions.
  • ad0abe4 Update checksums.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) from 1.17.5 to 1.18.8.
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.17.5...byte-buddy-1.18.8)

---
updated-dependencies:
- dependency-name: net.bytebuddy:byte-buddy
  dependency-version: 1.18.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Apr 24, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 24, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/maven/karaf-4.4.x/net.bytebuddy-byte-buddy-1.18.8 branch April 24, 2026 20:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant