build(deps): bump the dependencies group with 37 updates by dependabot[bot] · Pull Request #3965 · jooby-project/jooby

dependabot · 2026-06-08T00:20:15Z

Bumps the dependencies group with 37 updates:

Package	From	To
io.netty:netty-bom	`4.2.14.Final`	`4.2.15.Final`
io.netty:netty-codec-http2	`4.2.14.Final`	`4.2.15.Final`
io.netty:netty-transport-native-epoll	`4.2.14.Final`	`4.2.15.Final`
io.netty:netty-transport-native-kqueue	`4.2.14.Final`	`4.2.15.Final`
io.netty:netty-transport-native-io_uring	`4.2.14.Final`	`4.2.15.Final`
com.typesafe:config	`1.4.8`	`1.4.9`
io.avaje:avaje-inject	`12.5`	`12.6`
io.avaje:avaje-inject-generator	`12.5`	`12.6`
io.avaje:avaje-jsonb	`3.13`	`3.14`
io.avaje:avaje-jsonb-generator	`3.13`	`3.14`
ch.qos.logback:logback-classic	`1.5.33`	`1.5.34`
io.ebean:ebean	`17.6.0`	`17.8.0`
io.ebean:ebean-querybean	`17.6.0`	`17.8.0`
io.ebean:querybean-generator	`17.6.0`	`17.8.0`
io.ebean:ebean-test	`17.6.0`	`17.8.0`
org.eclipse.jetty:jetty-server	`12.1.9`	`12.1.10`
org.eclipse.jetty.websocket:jetty-websocket-core-server	`12.1.9`	`12.1.10`
org.eclipse.jetty.websocket:jetty-websocket-jetty-api	`12.1.9`	`12.1.10`
org.eclipse.jetty.websocket:jetty-websocket-jetty-server	`12.1.9`	`12.1.10`
org.eclipse.jetty.http2:jetty-http2-server	`12.1.9`	`12.1.10`
org.eclipse.jetty:jetty-alpn-java-server	`12.1.9`	`12.1.10`
org.eclipse.jetty.compression:jetty-compression-server	`12.1.9`	`12.1.10`
org.eclipse.jetty.compression:jetty-compression-gzip	`12.1.9`	`12.1.10`
org.eclipse.jetty.http2:jetty-http2-client	`12.1.9`	`12.1.10`
org.jetbrains.kotlin:kotlin-stdlib	`2.3.21`	`2.4.0`
org.jetbrains.kotlin:kotlin-reflect	`2.3.21`	`2.4.0`
org.jetbrains.kotlin:kotlin-maven-plugin	`2.3.21`	`2.4.0`
org.jacoco:org.jacoco.agent	`0.8.14`	`0.8.15`
org.jacoco:jacoco-maven-plugin	`0.8.14`	`0.8.15`
io.vertx:vertx-core	`5.1.0`	`5.1.1`
io.vertx:vertx-sql-client	`5.1.0`	`5.1.1`
io.vertx:vertx-mysql-client	`5.1.0`	`5.1.1`
io.vertx:vertx-pg-client	`5.1.0`	`5.1.1`
net.bytebuddy:byte-buddy	`1.18.8`	`1.18.10`
dev.langchain4j:langchain4j-bom	`1.15.1`	`1.16.1`
software.amazon.awssdk:bom	`2.45.1`	`2.46.5`
io.opentelemetry:opentelemetry-bom	`1.62.0`	`1.63.0`

Updates io.netty:netty-bom from 4.2.14.Final to 4.2.15.Final

Release notes

Sourced from io.netty:netty-bom's releases.

netty-4.2.15.Final

Security fixes

CVE-2026-48059: memory exhaustion in io.netty:netty-codec-haproxy (high).

CVE-2026-47691: DNS cache poisoning in io.netty:netty-resolver-dns (high).

CVE-2026-XXXXX: DDoS in io.netty:netty-codec-http2.

CVE-2026-50011: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-44250: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-44890: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-50009: information disclosure and denial of service in io.netty:netty-codec-classes-quic.

CVE-2026-44249: IPv6 subnet filter bypass in io.netty:netty-handler (high).

CVE-2026-50020: request smuggling in io.netty:netty-codec-http.

CVE-2026-44892: memory exhaustion in io.netty:netty-codec-http3 (high).

CVE-2026-44893: memory leak in io.netty:netty-codec-haproxy (high).

CVE-2026-44894: traffic amplification in io.netty:netty-codec-classes-quic (high).

CVE-2026-50010: TLS hostname verification accidentally disabled in io.netty:netty-handler (high).

CVE-2026-45673: DNS cache poisoning in io.netty:netty-resolver-dns.

CVE-2026-45416: excessive memory usage from SNIHandler in io.netty:netty-handler (high).

CVE-2026-45536: file descriptor leak in io.netty:netty-transport-native-epoll and io.netty:netty-transport-native-kqueue.

CVE-2026-45674: DNS cache poisoning in io.netty:netty-resolver-dns (high).

CVE-2026-46340: memory exhaustion in io.netty:netty-transport-sctp (high).

CVE-2026-47244: denial of service in io.netty:netty-codec-http2.

CVE-2026-48006: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-48748: memory exhaustion in io.netty:netty-codec-http3 (high).

CVE-2026-48043: memory exhaustion in io.netty:netty-codec-http2.

What's Changed

Fix race in io.netty.channel.uring.IoUringIoHandler.wakeup by @dreamlike-ocean in netty/netty#16836

HTTP/2: Parse request-target path like Vert.x by @yawkat in netty/netty#16810

Auto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by @netty-project-bot in netty/netty#16853

FlowControlHandler: Suppress duplicate channelReadComplete after draining queue (#15053) by @schiemon in netty/netty#16837

Pass maxAllocation to Brotli and Zstd decoders by @fedinskiy in netty/netty#16844

Fix revapi warnings by @chrisvest in netty/netty#16885

Fix SCTP and Redis tests by @chrisvest in netty/netty#16893

Add maxWindowLog parameter to ZstdDecoder to bound memory allocation by @skyguard1 in netty/netty#16850

Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by @netty-project-bot in netty/netty#16890

New Contributors

@schiemon made their first contribution in netty/netty#16837

@fedinskiy made their first contribution in netty/netty#16844

Full Changelog: netty/netty@netty-4.2.14.Final...netty-4.2.15.Final

Commits

a41f7b2 [maven-release-plugin] prepare release netty-4.2.15.Final
2394530 Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...
0bd1657 Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (#16850)
76291f5 Fix SCTP and Redis tests (#16893)
e067b6e Fix revapi warnings (#16885)
5a52600 Pass maxAllocation to Brotli and Zstd decoders (#16844)
541add0 Merge commit from fork
270800e Merge commit from fork
3d45a1e Merge commit from fork
75127ca Merge commit from fork
Additional commits viewable in compare view

Updates io.netty:netty-codec-http2 from 4.2.14.Final to 4.2.15.Final

Release notes

Sourced from io.netty:netty-codec-http2's releases.

netty-4.2.15.Final

Security fixes

CVE-2026-48059: memory exhaustion in io.netty:netty-codec-haproxy (high).

CVE-2026-47691: DNS cache poisoning in io.netty:netty-resolver-dns (high).

CVE-2026-XXXXX: DDoS in io.netty:netty-codec-http2.

CVE-2026-50011: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-44250: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-44890: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-50009: information disclosure and denial of service in io.netty:netty-codec-classes-quic.

CVE-2026-44249: IPv6 subnet filter bypass in io.netty:netty-handler (high).

CVE-2026-50020: request smuggling in io.netty:netty-codec-http.

CVE-2026-44892: memory exhaustion in io.netty:netty-codec-http3 (high).

CVE-2026-44893: memory leak in io.netty:netty-codec-haproxy (high).

CVE-2026-44894: traffic amplification in io.netty:netty-codec-classes-quic (high).

CVE-2026-50010: TLS hostname verification accidentally disabled in io.netty:netty-handler (high).

CVE-2026-45673: DNS cache poisoning in io.netty:netty-resolver-dns.

CVE-2026-45416: excessive memory usage from SNIHandler in io.netty:netty-handler (high).

CVE-2026-45536: file descriptor leak in io.netty:netty-transport-native-epoll and io.netty:netty-transport-native-kqueue.

CVE-2026-45674: DNS cache poisoning in io.netty:netty-resolver-dns (high).

CVE-2026-46340: memory exhaustion in io.netty:netty-transport-sctp (high).

CVE-2026-47244: denial of service in io.netty:netty-codec-http2.

CVE-2026-48006: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-48748: memory exhaustion in io.netty:netty-codec-http3 (high).

CVE-2026-48043: memory exhaustion in io.netty:netty-codec-http2.

What's Changed

Fix race in io.netty.channel.uring.IoUringIoHandler.wakeup by @dreamlike-ocean in netty/netty#16836

HTTP/2: Parse request-target path like Vert.x by @yawkat in netty/netty#16810

Auto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by @netty-project-bot in netty/netty#16853

FlowControlHandler: Suppress duplicate channelReadComplete after draining queue (#15053) by @schiemon in netty/netty#16837

Pass maxAllocation to Brotli and Zstd decoders by @fedinskiy in netty/netty#16844

Fix revapi warnings by @chrisvest in netty/netty#16885

Fix SCTP and Redis tests by @chrisvest in netty/netty#16893

Add maxWindowLog parameter to ZstdDecoder to bound memory allocation by @skyguard1 in netty/netty#16850

Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by @netty-project-bot in netty/netty#16890

New Contributors

@schiemon made their first contribution in netty/netty#16837

@fedinskiy made their first contribution in netty/netty#16844

Full Changelog: netty/netty@netty-4.2.14.Final...netty-4.2.15.Final

Commits

a41f7b2 [maven-release-plugin] prepare release netty-4.2.15.Final
2394530 Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...
0bd1657 Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (#16850)
76291f5 Fix SCTP and Redis tests (#16893)
e067b6e Fix revapi warnings (#16885)
5a52600 Pass maxAllocation to Brotli and Zstd decoders (#16844)
541add0 Merge commit from fork
270800e Merge commit from fork
3d45a1e Merge commit from fork
75127ca Merge commit from fork
Additional commits viewable in compare view

Updates io.netty:netty-transport-native-epoll from 4.2.14.Final to 4.2.15.Final

Release notes

Sourced from io.netty:netty-transport-native-epoll's releases.

netty-4.2.15.Final

Security fixes

CVE-2026-48059: memory exhaustion in io.netty:netty-codec-haproxy (high).

CVE-2026-47691: DNS cache poisoning in io.netty:netty-resolver-dns (high).

CVE-2026-XXXXX: DDoS in io.netty:netty-codec-http2.

CVE-2026-50011: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-44250: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-44890: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-50009: information disclosure and denial of service in io.netty:netty-codec-classes-quic.

CVE-2026-44249: IPv6 subnet filter bypass in io.netty:netty-handler (high).

CVE-2026-50020: request smuggling in io.netty:netty-codec-http.

CVE-2026-44892: memory exhaustion in io.netty:netty-codec-http3 (high).

CVE-2026-44893: memory leak in io.netty:netty-codec-haproxy (high).

CVE-2026-44894: traffic amplification in io.netty:netty-codec-classes-quic (high).

CVE-2026-50010: TLS hostname verification accidentally disabled in io.netty:netty-handler (high).

CVE-2026-45673: DNS cache poisoning in io.netty:netty-resolver-dns.

CVE-2026-45416: excessive memory usage from SNIHandler in io.netty:netty-handler (high).

CVE-2026-45536: file descriptor leak in io.netty:netty-transport-native-epoll and io.netty:netty-transport-native-kqueue.

CVE-2026-45674: DNS cache poisoning in io.netty:netty-resolver-dns (high).

CVE-2026-46340: memory exhaustion in io.netty:netty-transport-sctp (high).

CVE-2026-47244: denial of service in io.netty:netty-codec-http2.

CVE-2026-48006: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-48748: memory exhaustion in io.netty:netty-codec-http3 (high).

CVE-2026-48043: memory exhaustion in io.netty:netty-codec-http2.

What's Changed

Fix race in io.netty.channel.uring.IoUringIoHandler.wakeup by @dreamlike-ocean in netty/netty#16836

HTTP/2: Parse request-target path like Vert.x by @yawkat in netty/netty#16810

Auto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by @netty-project-bot in netty/netty#16853

FlowControlHandler: Suppress duplicate channelReadComplete after draining queue (#15053) by @schiemon in netty/netty#16837

Pass maxAllocation to Brotli and Zstd decoders by @fedinskiy in netty/netty#16844

Fix revapi warnings by @chrisvest in netty/netty#16885

Fix SCTP and Redis tests by @chrisvest in netty/netty#16893

Add maxWindowLog parameter to ZstdDecoder to bound memory allocation by @skyguard1 in netty/netty#16850

Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by @netty-project-bot in netty/netty#16890

New Contributors

@schiemon made their first contribution in netty/netty#16837

@fedinskiy made their first contribution in netty/netty#16844

Full Changelog: netty/netty@netty-4.2.14.Final...netty-4.2.15.Final

Commits

a41f7b2 [maven-release-plugin] prepare release netty-4.2.15.Final
2394530 Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...
0bd1657 Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (#16850)
76291f5 Fix SCTP and Redis tests (#16893)
e067b6e Fix revapi warnings (#16885)
5a52600 Pass maxAllocation to Brotli and Zstd decoders (#16844)
541add0 Merge commit from fork
270800e Merge commit from fork
3d45a1e Merge commit from fork
75127ca Merge commit from fork
Additional commits viewable in compare view

Updates io.netty:netty-transport-native-kqueue from 4.2.14.Final to 4.2.15.Final

Release notes

Sourced from io.netty:netty-transport-native-kqueue's releases.

netty-4.2.15.Final

Security fixes

CVE-2026-48059: memory exhaustion in io.netty:netty-codec-haproxy (high).

CVE-2026-47691: DNS cache poisoning in io.netty:netty-resolver-dns (high).

CVE-2026-XXXXX: DDoS in io.netty:netty-codec-http2.

CVE-2026-50011: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-44250: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-44890: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-50009: information disclosure and denial of service in io.netty:netty-codec-classes-quic.

CVE-2026-44249: IPv6 subnet filter bypass in io.netty:netty-handler (high).

CVE-2026-50020: request smuggling in io.netty:netty-codec-http.

CVE-2026-44892: memory exhaustion in io.netty:netty-codec-http3 (high).

CVE-2026-44893: memory leak in io.netty:netty-codec-haproxy (high).

CVE-2026-44894: traffic amplification in io.netty:netty-codec-classes-quic (high).

CVE-2026-50010: TLS hostname verification accidentally disabled in io.netty:netty-handler (high).

CVE-2026-45673: DNS cache poisoning in io.netty:netty-resolver-dns.

CVE-2026-45416: excessive memory usage from SNIHandler in io.netty:netty-handler (high).

CVE-2026-45536: file descriptor leak in io.netty:netty-transport-native-epoll and io.netty:netty-transport-native-kqueue.

CVE-2026-45674: DNS cache poisoning in io.netty:netty-resolver-dns (high).

CVE-2026-46340: memory exhaustion in io.netty:netty-transport-sctp (high).

CVE-2026-47244: denial of service in io.netty:netty-codec-http2.

CVE-2026-48006: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-48748: memory exhaustion in io.netty:netty-codec-http3 (high).

CVE-2026-48043: memory exhaustion in io.netty:netty-codec-http2.

What's Changed

Fix race in io.netty.channel.uring.IoUringIoHandler.wakeup by @dreamlike-ocean in netty/netty#16836

HTTP/2: Parse request-target path like Vert.x by @yawkat in netty/netty#16810

Auto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by @netty-project-bot in netty/netty#16853

FlowControlHandler: Suppress duplicate channelReadComplete after draining queue (#15053) by @schiemon in netty/netty#16837

Pass maxAllocation to Brotli and Zstd decoders by @fedinskiy in netty/netty#16844

Fix revapi warnings by @chrisvest in netty/netty#16885

Fix SCTP and Redis tests by @chrisvest in netty/netty#16893

Add maxWindowLog parameter to ZstdDecoder to bound memory allocation by @skyguard1 in netty/netty#16850

Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by @netty-project-bot in netty/netty#16890

New Contributors

@schiemon made their first contribution in netty/netty#16837

@fedinskiy made their first contribution in netty/netty#16844

Full Changelog: netty/netty@netty-4.2.14.Final...netty-4.2.15.Final

Commits

a41f7b2 [maven-release-plugin] prepare release netty-4.2.15.Final
2394530 Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...
0bd1657 Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (#16850)
76291f5 Fix SCTP and Redis tests (#16893)
e067b6e Fix revapi warnings (#16885)
5a52600 Pass maxAllocation to Brotli and Zstd decoders (#16844)
541add0 Merge commit from fork
270800e Merge commit from fork
3d45a1e Merge commit from fork
75127ca Merge commit from fork
Additional commits viewable in compare view

Updates io.netty:netty-transport-native-io_uring from 4.2.14.Final to 4.2.15.Final

Release notes

Sourced from io.netty:netty-transport-native-io_uring's releases.

netty-4.2.15.Final

Security fixes

CVE-2026-48059: memory exhaustion in io.netty:netty-codec-haproxy (high).

CVE-2026-47691: DNS cache poisoning in io.netty:netty-resolver-dns (high).

CVE-2026-XXXXX: DDoS in io.netty:netty-codec-http2.

CVE-2026-50011: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-44250: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-44890: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-50009: information disclosure and denial of service in io.netty:netty-codec-classes-quic.

CVE-2026-44249: IPv6 subnet filter bypass in io.netty:netty-handler (high).

CVE-2026-50020: request smuggling in io.netty:netty-codec-http.

CVE-2026-44892: memory exhaustion in io.netty:netty-codec-http3 (high).

CVE-2026-44893: memory leak in io.netty:netty-codec-haproxy (high).

CVE-2026-44894: traffic amplification in io.netty:netty-codec-classes-quic (high).

CVE-2026-50010: TLS hostname verification accidentally disabled in io.netty:netty-handler (high).

CVE-2026-45673: DNS cache poisoning in io.netty:netty-resolver-dns.

CVE-2026-45416: excessive memory usage from SNIHandler in io.netty:netty-handler (high).

CVE-2026-45536: file descriptor leak in io.netty:netty-transport-native-epoll and io.netty:netty-transport-native-kqueue.

CVE-2026-45674: DNS cache poisoning in io.netty:netty-resolver-dns (high).

CVE-2026-46340: memory exhaustion in io.netty:netty-transport-sctp (high).

CVE-2026-47244: denial of service in io.netty:netty-codec-http2.

CVE-2026-48006: memory exhaustion in io.netty:netty-codec-redis (high).

CVE-2026-48748: memory exhaustion in io.netty:netty-codec-http3 (high).

CVE-2026-48043: memory exhaustion in io.netty:netty-codec-http2.

What's Changed

Fix race in io.netty.channel.uring.IoUringIoHandler.wakeup by @dreamlike-ocean in netty/netty#16836

HTTP/2: Parse request-target path like Vert.x by @yawkat in netty/netty#16810

Auto-port 4.2: ChannelInitializer: correct misleading comment on exceptionCaught route by @netty-project-bot in netty/netty#16853

FlowControlHandler: Suppress duplicate channelReadComplete after draining queue (#15053) by @schiemon in netty/netty#16837

Pass maxAllocation to Brotli and Zstd decoders by @fedinskiy in netty/netty#16844

Fix revapi warnings by @chrisvest in netty/netty#16885

Fix SCTP and Redis tests by @chrisvest in netty/netty#16893

Add maxWindowLog parameter to ZstdDecoder to bound memory allocation by @skyguard1 in netty/netty#16850

Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remaining Length by @netty-project-bot in netty/netty#16890

New Contributors

@schiemon made their first contribution in netty/netty#16837

@fedinskiy made their first contribution in netty/netty#16844

Full Changelog: netty/netty@netty-4.2.14.Final...netty-4.2.15.Final

Commits

a41f7b2 [maven-release-plugin] prepare release netty-4.2.15.Final
2394530 Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...
0bd1657 Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (#16850)
76291f5 Fix SCTP and Redis tests (#16893)
e067b6e Fix revapi warnings (#16885)
5a52600 Pass maxAllocation to Brotli and Zstd decoders (#16844)
541add0 Merge commit from fork
270800e Merge commit from fork
3d45a1e Merge commit from fork
75127ca Merge commit from fork
Additional commits viewable in compare view

Updates com.typesafe:config from 1.4.8 to 1.4.9

Release notes

Sourced from com.typesafe:config's releases.

v1.4.9

What's Changed

docs: release notes 1.4.8 by @johanandren in lightbend/config#847

fix: origin line numbers after newline separators by @mattheworford in lightbend/config#850

feat: opt-in unknown key validation for ConfigBeanFactory by @mattheworford in lightbend/config#851

fix: wrong line number for objects after multiline string by @mattheworford in lightbend/config#853

New Contributors

@mattheworford made their first contribution in lightbend/config#850

Full Changelog: lightbend/config@v1.4.8...v1.4.9

Commits

92fc7df fix: wrong line number for objects after multiline string (#853)
81f2de0 feat: opt-in unknown key validation for ConfigBeanFactory (#851)
be40b4b chore: correct origin line numbers after newline separators (#850)
8a92847 docs: release notes 1.4.8 (#847)
See full diff in compare view

Updates io.avaje:avaje-inject from 12.5 to 12.6

Release notes

Sourced from io.avaje:avaje-inject's releases.

12.6

What's New

Adds a MainClass annotation to automatically configure the maven jar plugin

adds a new wiring mode to @InjectModule for multimodule wiring, it interweaves all external modules into the generated module for faster wiring and removing some limitations of standard wiring.

What's Changed

Preserve Supertype Registration of Proxies by @SentryMan in avaje/avaje-inject#1020

Enhanced Circular Detection by @SentryMan in avaje/avaje-inject#1023

Support Interweaving Wiring by @SentryMan in avaje/avaje-inject#1013

Deprecate Bean Factory by @SentryMan in avaje/avaje-inject#1024

Ensure Closeable beans are closed when BeanScope creation fails by @stevenschlansker in avaje/avaje-inject#1027

FactoryOrder: preserve module order when supplied beans satisfy a requires by @stevenschlansker in avaje/avaje-inject#1028

Add an Annotation to Register the Main Class by @SentryMan in avaje/avaje-inject#1025

Fix strict wiring discovery bug by @SentryMan in avaje/avaje-inject#1031

Full Changelog: avaje/avaje-inject@12.5...12.6

Commits

3b7ebb0 Version 12.6 (#1035)
8b8caed Merge pull request #1034 from avaje/dependabot/maven/master/dependencies-d0c2...
96f7648 Bump the dependencies group with 3 updates
277de8a Docs: Add section on use of Optional<T> and multiple constructors (#1033)
7fbe77c 12.6-RC4
6c6d43d Fix strict wiring discovery bug (#1031)
02f9b49 Merge pull request #1032 from avaje/dependabot/maven/master/dependencies-85a4...
acd5c5b Bump org.ow2.asm:asm from 9.10 to 9.10.1 in the dependencies group
d3d6d29 Merge pull request #1029 from avaje/dependabot/maven/master/dependencies-89fe...
c87a14e Bump the dependencies group with 2 updates
Additional commits viewable in compare view

Updates io.avaje:avaje-inject-generator from 12.5 to 12.6

Updates io.avaje:avaje-jsonb from 3.13 to 3.14

Release notes

Sourced from io.avaje:avaje-jsonb's releases.

3.14

What's Changed

Add Flag to Disable SPI Adapter Loading by @SentryMan in avaje/avaje-jsonb#514

Fix Manually Linked Getter Bug by @SentryMan in avaje/avaje-jsonb#522

Fix property method subtypes by @SentryMan in avaje/avaje-jsonb#516

Support Alias with Value Enums by @SentryMan in avaje/avaje-jsonb#520

Fix Inherited Getter Issue by @SentryMan in avaje/avaje-jsonb#524

JsonProperty/Unmapped Setter Support by @SentryMan in avaje/avaje-jsonb#518

Compiler Error for Property Setter name conflict by @SentryMan in avaje/avaje-jsonb#526

Fix Inherited Setter Properties by @SentryMan in avaje/avaje-jsonb#528

Max String Buffer Property by @SentryMan in avaje/avaje-jsonb#531

Prevent Unneeded Cascade by @SentryMan in avaje/avaje-jsonb#530

Fix top level null by @SentryMan in avaje/avaje-jsonb#534

Add File to/from Json Support by @SentryMan in avaje/avaje-jsonb#535

Switch from File to Path by @thatcomputerguy0101 in avaje/avaje-jsonb#536

New Contributors

@thatcomputerguy0101 made their first contribution in avaje/avaje-jsonb#536

Full Changelog: avaje/avaje-jsonb@3.13...3.14

Commits

dc063f0 3.14
9e36c1e 3.14-RC7
ab88506 Switch from File to Path (#536)
b6d4e49 Add file to/from json (#535)
a68bb29 3.14-RC6
27d5eeb Fix top level null (#534)
8c7adff 3.14-RC5
ebf259b Prevent Unneeded Cascade (#530)
3a4fea3 Max String Property (#531)
a8f3511 3.14-RC4
Additional commits viewable in compare view

Updates io.avaje:avaje-jsonb-generator from 3.13 to 3.14

Updates ch.qos.logback:logback-classic from 1.5.33 to 1.5.34

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.5.34

2026-06-01 Release of logback version 1.5.34

• In case certain StackTraceElement values returned by the Throwable.getStackTrace method are null, StackTraceElementProxy substitutes a dummy instance instead of throwing an IllegalArgumentException. This resolves [issues #1040](qos-ch/logback#1040), reported by Naotsugu Kobayashi.

• HardenedObjectInputStream will now throw an InvalidClassException during deserialization attempts of Proxy classes. This change addresses potential deserialization whitelist bypass vulnerability reported by York Shen and registered as CVE-2026-10532.

• A bitwise identical binary of this version can be reproduced by building from source code at commit e62272ac152469aec1ede056c3c7d0d7314e7bfe associated with the tag v_1.5.34. This release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits

e62272a prepare release 1.5.34
1e9e926 add resolveProxyClassRejectsDynamicProxies unit test

Bumps the dependencies group with 37 updates: | Package | From | To | | --- | --- | --- | | [io.netty:netty-bom](https://github.com/netty/netty) | `4.2.14.Final` | `4.2.15.Final` | | [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.2.14.Final` | `4.2.15.Final` | | [io.netty:netty-transport-native-epoll](https://github.com/netty/netty) | `4.2.14.Final` | `4.2.15.Final` | | [io.netty:netty-transport-native-kqueue](https://github.com/netty/netty) | `4.2.14.Final` | `4.2.15.Final` | | [io.netty:netty-transport-native-io_uring](https://github.com/netty/netty) | `4.2.14.Final` | `4.2.15.Final` | | [com.typesafe:config](https://github.com/lightbend/config) | `1.4.8` | `1.4.9` | | [io.avaje:avaje-inject](https://github.com/avaje/avaje-inject) | `12.5` | `12.6` | | io.avaje:avaje-inject-generator | `12.5` | `12.6` | | [io.avaje:avaje-jsonb](https://github.com/avaje/avaje-jsonb) | `3.13` | `3.14` | | io.avaje:avaje-jsonb-generator | `3.13` | `3.14` | | [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.33` | `1.5.34` | | [io.ebean:ebean](https://github.com/ebean-orm/ebean) | `17.6.0` | `17.8.0` | | [io.ebean:ebean-querybean](https://github.com/ebean-orm/ebean) | `17.6.0` | `17.8.0` | | [io.ebean:querybean-generator](https://github.com/ebean-orm/ebean) | `17.6.0` | `17.8.0` | | [io.ebean:ebean-test](https://github.com/ebean-orm/ebean) | `17.6.0` | `17.8.0` | | org.eclipse.jetty:jetty-server | `12.1.9` | `12.1.10` | | org.eclipse.jetty.websocket:jetty-websocket-core-server | `12.1.9` | `12.1.10` | | org.eclipse.jetty.websocket:jetty-websocket-jetty-api | `12.1.9` | `12.1.10` | | org.eclipse.jetty.websocket:jetty-websocket-jetty-server | `12.1.9` | `12.1.10` | | org.eclipse.jetty.http2:jetty-http2-server | `12.1.9` | `12.1.10` | | org.eclipse.jetty:jetty-alpn-java-server | `12.1.9` | `12.1.10` | | org.eclipse.jetty.compression:jetty-compression-server | `12.1.9` | `12.1.10` | | org.eclipse.jetty.compression:jetty-compression-gzip | `12.1.9` | `12.1.10` | | org.eclipse.jetty.http2:jetty-http2-client | `12.1.9` | `12.1.10` | | [org.jetbrains.kotlin:kotlin-stdlib](https://github.com/JetBrains/kotlin) | `2.3.21` | `2.4.0` | | [org.jetbrains.kotlin:kotlin-reflect](https://github.com/JetBrains/kotlin) | `2.3.21` | `2.4.0` | | org.jetbrains.kotlin:kotlin-maven-plugin | `2.3.21` | `2.4.0` | | [org.jacoco:org.jacoco.agent](https://github.com/jacoco/jacoco) | `0.8.14` | `0.8.15` | | [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.14` | `0.8.15` | | [io.vertx:vertx-core](https://github.com/eclipse/vert.x) | `5.1.0` | `5.1.1` | | [io.vertx:vertx-sql-client](https://github.com/eclipse-vertx/vertx-sql-client) | `5.1.0` | `5.1.1` | | [io.vertx:vertx-mysql-client](https://github.com/eclipse-vertx/vertx-sql-client) | `5.1.0` | `5.1.1` | | [io.vertx:vertx-pg-client](https://github.com/eclipse-vertx/vertx-sql-client) | `5.1.0` | `5.1.1` | | [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) | `1.18.8` | `1.18.10` | | [dev.langchain4j:langchain4j-bom](https://github.com/langchain4j/langchain4j) | `1.15.1` | `1.16.1` | | software.amazon.awssdk:bom | `2.45.1` | `2.46.5` | | [io.opentelemetry:opentelemetry-bom](https://github.com/open-telemetry/opentelemetry-java) | `1.62.0` | `1.63.0` | Updates `io.netty:netty-bom` from 4.2.14.Final to 4.2.15.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.14.Final...netty-4.2.15.Final) Updates `io.netty:netty-codec-http2` from 4.2.14.Final to 4.2.15.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.14.Final...netty-4.2.15.Final) Updates `io.netty:netty-transport-native-epoll` from 4.2.14.Final to 4.2.15.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.14.Final...netty-4.2.15.Final) Updates `io.netty:netty-transport-native-kqueue` from 4.2.14.Final to 4.2.15.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.14.Final...netty-4.2.15.Final) Updates `io.netty:netty-transport-native-io_uring` from 4.2.14.Final to 4.2.15.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.14.Final...netty-4.2.15.Final) Updates `com.typesafe:config` from 1.4.8 to 1.4.9 - [Release notes](https://github.com/lightbend/config/releases) - [Changelog](https://github.com/lightbend/config/blob/main/NEWS.md) - [Commits](lightbend/config@v1.4.8...v1.4.9) Updates `io.avaje:avaje-inject` from 12.5 to 12.6 - [Release notes](https://github.com/avaje/avaje-inject/releases) - [Commits](avaje/avaje-inject@12.5...12.6) Updates `io.avaje:avaje-inject-generator` from 12.5 to 12.6 Updates `io.avaje:avaje-inject-generator` from 12.5 to 12.6 Updates `io.avaje:avaje-jsonb` from 3.13 to 3.14 - [Release notes](https://github.com/avaje/avaje-jsonb/releases) - [Commits](avaje/avaje-jsonb@3.13...3.14) Updates `io.avaje:avaje-jsonb-generator` from 3.13 to 3.14 Updates `io.avaje:avaje-jsonb-generator` from 3.13 to 3.14 Updates `ch.qos.logback:logback-classic` from 1.5.33 to 1.5.34 - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](qos-ch/logback@v_1.5.33...v_1.5.34) Updates `io.ebean:ebean` from 17.6.0 to 17.8.0 - [Release notes](https://github.com/ebean-orm/ebean/releases) - [Commits](https://github.com/ebean-orm/ebean/commits) Updates `io.ebean:ebean-querybean` from 17.6.0 to 17.8.0 - [Release notes](https://github.com/ebean-orm/ebean/releases) - [Commits](https://github.com/ebean-orm/ebean/commits) Updates `io.ebean:querybean-generator` from 17.6.0 to 17.8.0 - [Release notes](https://github.com/ebean-orm/ebean/releases) - [Commits](https://github.com/ebean-orm/ebean/commits) Updates `io.ebean:ebean-test` from 17.6.0 to 17.8.0 - [Release notes](https://github.com/ebean-orm/ebean/releases) - [Commits](https://github.com/ebean-orm/ebean/commits) Updates `io.ebean:ebean-querybean` from 17.6.0 to 17.8.0 - [Release notes](https://github.com/ebean-orm/ebean/releases) - [Commits](https://github.com/ebean-orm/ebean/commits) Updates `io.ebean:querybean-generator` from 17.6.0 to 17.8.0 - [Release notes](https://github.com/ebean-orm/ebean/releases) - [Commits](https://github.com/ebean-orm/ebean/commits) Updates `io.ebean:ebean-test` from 17.6.0 to 17.8.0 - [Release notes](https://github.com/ebean-orm/ebean/releases) - [Commits](https://github.com/ebean-orm/ebean/commits) Updates `org.eclipse.jetty:jetty-server` from 12.1.9 to 12.1.10 Updates `org.eclipse.jetty.websocket:jetty-websocket-core-server` from 12.1.9 to 12.1.10 Updates `org.eclipse.jetty.websocket:jetty-websocket-jetty-api` from 12.1.9 to 12.1.10 Updates `org.eclipse.jetty.websocket:jetty-websocket-jetty-server` from 12.1.9 to 12.1.10 Updates `org.eclipse.jetty.http2:jetty-http2-server` from 12.1.9 to 12.1.10 Updates `org.eclipse.jetty:jetty-alpn-java-server` from 12.1.9 to 12.1.10 Updates `org.eclipse.jetty.compression:jetty-compression-server` from 12.1.9 to 12.1.10 Updates `org.eclipse.jetty.compression:jetty-compression-gzip` from 12.1.9 to 12.1.10 Updates `org.eclipse.jetty.http2:jetty-http2-client` from 12.1.9 to 12.1.10 Updates `org.eclipse.jetty.websocket:jetty-websocket-core-server` from 12.1.9 to 12.1.10 Updates `org.jetbrains.kotlin:kotlin-stdlib` from 2.3.21 to 2.4.0 - [Release notes](https://github.com/JetBrains/kotlin/releases) - [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md) - [Commits](JetBrains/kotlin@v2.3.21...v2.4.0) Updates `org.jetbrains.kotlin:kotlin-reflect` from 2.3.21 to 2.4.0 - [Release notes](https://github.com/JetBrains/kotlin/releases) - [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md) - [Commits](JetBrains/kotlin@v2.3.21...v2.4.0) Updates `org.jetbrains.kotlin:kotlin-maven-plugin` from 2.3.21 to 2.4.0 Updates `org.jetbrains.kotlin:kotlin-reflect` from 2.3.21 to 2.4.0 - [Release notes](https://github.com/JetBrains/kotlin/releases) - [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md) - [Commits](JetBrains/kotlin@v2.3.21...v2.4.0) Updates `org.jacoco:org.jacoco.agent` from 0.8.14 to 0.8.15 - [Release notes](https://github.com/jacoco/jacoco/releases) - [Commits](jacoco/jacoco@v0.8.14...v0.8.15) Updates `org.jacoco:jacoco-maven-plugin` from 0.8.14 to 0.8.15 - [Release notes](https://github.com/jacoco/jacoco/releases) - [Commits](jacoco/jacoco@v0.8.14...v0.8.15) Updates `org.jetbrains.kotlin:kotlin-maven-plugin` from 2.3.21 to 2.4.0 Updates `org.jacoco:jacoco-maven-plugin` from 0.8.14 to 0.8.15 - [Release notes](https://github.com/jacoco/jacoco/releases) - [Commits](jacoco/jacoco@v0.8.14...v0.8.15) Updates `org.eclipse.jetty.websocket:jetty-websocket-jetty-api` from 12.1.9 to 12.1.10 Updates `org.eclipse.jetty.websocket:jetty-websocket-jetty-server` from 12.1.9 to 12.1.10 Updates `org.eclipse.jetty.http2:jetty-http2-server` from 12.1.9 to 12.1.10 Updates `org.eclipse.jetty:jetty-alpn-java-server` from 12.1.9 to 12.1.10 Updates `org.eclipse.jetty.compression:jetty-compression-server` from 12.1.9 to 12.1.10 Updates `org.eclipse.jetty.compression:jetty-compression-gzip` from 12.1.9 to 12.1.10 Updates `io.netty:netty-codec-http2` from 4.2.14.Final to 4.2.15.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.14.Final...netty-4.2.15.Final) Updates `io.netty:netty-transport-native-epoll` from 4.2.14.Final to 4.2.15.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.14.Final...netty-4.2.15.Final) Updates `io.netty:netty-transport-native-kqueue` from 4.2.14.Final to 4.2.15.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.14.Final...netty-4.2.15.Final) Updates `io.netty:netty-transport-native-io_uring` from 4.2.14.Final to 4.2.15.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.14.Final...netty-4.2.15.Final) Updates `io.vertx:vertx-core` from 5.1.0 to 5.1.1 - [Commits](eclipse-vertx/vert.x@5.1.0...5.1.1) Updates `io.vertx:vertx-sql-client` from 5.1.0 to 5.1.1 - [Commits](eclipse-vertx/vertx-sql-client@5.1.0...5.1.1) Updates `io.vertx:vertx-mysql-client` from 5.1.0 to 5.1.1 - [Commits](eclipse-vertx/vertx-sql-client@5.1.0...5.1.1) Updates `io.vertx:vertx-pg-client` from 5.1.0 to 5.1.1 - [Commits](eclipse-vertx/vertx-sql-client@5.1.0...5.1.1) Updates `net.bytebuddy:byte-buddy` from 1.18.8 to 1.18.10 - [Release notes](https://github.com/raphw/byte-buddy/releases) - [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md) - [Commits](raphw/byte-buddy@byte-buddy-1.18.8...byte-buddy-1.18.10) Updates `dev.langchain4j:langchain4j-bom` from 1.15.1 to 1.16.1 - [Release notes](https://github.com/langchain4j/langchain4j/releases) - [Commits](langchain4j/langchain4j@1.15.1...1.16.1) Updates `io.vertx:vertx-sql-client` from 5.1.0 to 5.1.1 - [Commits](eclipse-vertx/vertx-sql-client@5.1.0...5.1.1) Updates `io.vertx:vertx-mysql-client` from 5.1.0 to 5.1.1 - [Commits](eclipse-vertx/vertx-sql-client@5.1.0...5.1.1) Updates `io.vertx:vertx-pg-client` from 5.1.0 to 5.1.1 - [Commits](eclipse-vertx/vertx-sql-client@5.1.0...5.1.1) Updates `software.amazon.awssdk:bom` from 2.45.1 to 2.46.5 Updates `io.opentelemetry:opentelemetry-bom` from 1.62.0 to 1.63.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-java@v1.62.0...v1.63.0) Updates `org.eclipse.jetty.http2:jetty-http2-client` from 12.1.9 to 12.1.10 --- updated-dependencies: - dependency-name: io.netty:netty-bom dependency-version: 4.2.15.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.netty:netty-codec-http2 dependency-version: 4.2.15.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.netty:netty-transport-native-epoll dependency-version: 4.2.15.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.netty:netty-transport-native-kqueue dependency-version: 4.2.15.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.netty:netty-transport-native-io_uring dependency-version: 4.2.15.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: com.typesafe:config dependency-version: 1.4.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.avaje:avaje-inject dependency-version: '12.6' dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: io.avaje:avaje-inject-generator dependency-version: '12.6' dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: io.avaje:avaje-inject-generator dependency-version: '12.6' dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: io.avaje:avaje-jsonb dependency-version: '3.14' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: io.avaje:avaje-jsonb-generator dependency-version: '3.14' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: io.avaje:avaje-jsonb-generator dependency-version: '3.14' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: ch.qos.logback:logback-classic dependency-version: 1.5.34 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.ebean:ebean dependency-version: 17.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: io.ebean:ebean-querybean dependency-version: 17.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: io.ebean:querybean-generator dependency-version: 17.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: io.ebean:ebean-test dependency-version: 17.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: io.ebean:ebean-querybean dependency-version: 17.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: io.ebean:querybean-generator dependency-version: 17.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: io.ebean:ebean-test dependency-version: 17.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.eclipse.jetty:jetty-server dependency-version: 12.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.eclipse.jetty.websocket:jetty-websocket-core-server dependency-version: 12.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.eclipse.jetty.websocket:jetty-websocket-jetty-api dependency-version: 12.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.eclipse.jetty.websocket:jetty-websocket-jetty-server dependency-version: 12.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.eclipse.jetty.http2:jetty-http2-server dependency-version: 12.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.eclipse.jetty:jetty-alpn-java-server dependency-version: 12.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.eclipse.jetty.compression:jetty-compression-server dependency-version: 12.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.eclipse.jetty.compression:jetty-compression-gzip dependency-version: 12.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.eclipse.jetty.http2:jetty-http2-client dependency-version: 12.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.eclipse.jetty.websocket:jetty-websocket-core-server dependency-version: 12.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.jetbrains.kotlin:kotlin-stdlib dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.jetbrains.kotlin:kotlin-reflect dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.jetbrains.kotlin:kotlin-maven-plugin dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.jetbrains.kotlin:kotlin-reflect dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.jacoco:org.jacoco.agent dependency-version: 0.8.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.jacoco:jacoco-maven-plugin dependency-version: 0.8.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.jetbrains.kotlin:kotlin-maven-plugin dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.jacoco:jacoco-maven-plugin dependency-version: 0.8.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.eclipse.jetty.websocket:jetty-websocket-jetty-api dependency-version: 12.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.eclipse.jetty.websocket:jetty-websocket-jetty-server dependency-version: 12.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.eclipse.jetty.http2:jetty-http2-server dependency-version: 12.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.eclipse.jetty:jetty-alpn-java-server dependency-version: 12.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.eclipse.jetty.compression:jetty-compression-server dependency-version: 12.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.eclipse.jetty.compression:jetty-compression-gzip dependency-version: 12.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.netty:netty-codec-http2 dependency-version: 4.2.15.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.netty:netty-transport-native-epoll dependency-version: 4.2.15.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.netty:netty-transport-native-kqueue dependency-version: 4.2.15.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.netty:netty-transport-native-io_uring dependency-version: 4.2.15.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.vertx:vertx-core dependency-version: 5.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.vertx:vertx-sql-client dependency-version: 5.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.vertx:vertx-mysql-client dependency-version: 5.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.vertx:vertx-pg-client dependency-version: 5.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: net.bytebuddy:byte-buddy dependency-version: 1.18.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: dev.langchain4j:langchain4j-bom dependency-version: 1.16.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: io.vertx:vertx-sql-client dependency-version: 5.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.vertx:vertx-mysql-client dependency-version: 5.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.vertx:vertx-pg-client dependency-version: 5.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: software.amazon.awssdk:bom dependency-version: 2.46.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: io.opentelemetry:opentelemetry-bom dependency-version: 1.63.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.eclipse.jetty.http2:jetty-http2-client dependency-version: 12.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jun 8, 2026

jknack added this to the 4.5.3 milestone Jun 11, 2026

jknack merged commit 465e940 into main Jun 11, 2026
0 of 4 checks passed

dependabot Bot deleted the dependabot/maven/dependencies-d5a402d7c0 branch June 11, 2026 19:06

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the dependencies group with 37 updates#3965

build(deps): bump the dependencies group with 37 updates#3965
jknack merged 1 commit into
mainfrom
dependabot/maven/dependencies-d5a402d7c0

dependabot Bot commented on behalf of github Jun 8, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 8, 2026

netty-4.2.15.Final

Security fixes

What's Changed

New Contributors

netty-4.2.15.Final

Security fixes

What's Changed

New Contributors

netty-4.2.15.Final

Security fixes

What's Changed

New Contributors

netty-4.2.15.Final

Security fixes

What's Changed

New Contributors

netty-4.2.15.Final

Security fixes

What's Changed

New Contributors

v1.4.9

What's Changed

New Contributors

12.6

What's New

What's Changed

3.14

What's Changed

New Contributors

Logback 1.5.34

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant