fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
gradle (source)		minor	9.6.1 → 9.8.2
org.junit.jupiter:junit-jupiter-engine (source)	dependencies	patch	6.1.2 → 6.1.3
org.mockito:mockito-core	dependencies	minor	5.23.0 → 5.24.0
org.junit.platform:junit-platform-launcher (source)	dependencies	patch	6.1.2 → 6.1.3
org.junit.jupiter:junit-jupiter-api (source)	dependencies	patch	6.1.2 → 6.1.3
org.mariadb.jdbc:mariadb-java-client (source)	dependencies	patch	3.5.9 → 3.5.10
org.jetbrains.kotlinx:kotlinx-serialization-json	dependencies	minor	1.11.0 → 1.12.0
net.dv8tion:JDA	dependencies	minor	6.5.0 → 6.7.0
ch.qos.logback:logback-classic (source, changelog)	dependencies	patch	1.6.0 → 1.6.5

---

Release Notes

gradle/gradle (gradle)

v9.8.2: 9.8.2

Compare Source

The Gradle team is excited to announce Gradle 9.8.2.

Here are the highlights of this release:

• Java 27 support
• Maven mirror settings reuse
• Linked problem locations in build output

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aman Gautam,
Björn Kautler,
Eng Zer Jun,
Hashim Khan,
Julian Krannich,
KBS,
Labh R Jethe,
Mark Dodgson,
Maxim,
monkey,
nataphon-ktsystems,
Paul King,
Qiu Tian,
rg_sandesh,
Roberto Perez Alcolea,
Sean,
Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.2 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.2 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v9.8.1: 9.8.1

Compare Source

This is a patch release for Gradle 9.8.0. We recommend using 9.8.1 instead of 9.8.0.

This release addresses three high rated vulnerabilities:

• Unauthenticated worker-to-daemon channel deserializes untrusted Java objects
• Deserialization of untrusted Java objects before authentication in the client - daemon communication
• Failure to disable repositories failing to establish an SSL connection can expose builds to malicious artifacts

The following issues were resolved:

• [Gradle 9.8.0 complains again about invalid Toolchains on Debian / Ubuntu packaged systems]- (#​39358)
• Gradle 9.8.0 removes root java.util.logging handlers installed by a custom LogManager (breaks Quarkus test log capture)
• Dependency resolution regression

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aman Gautam,
Björn Kautler,
Eng Zer Jun,
Hashim Khan,
Julian Krannich,
KBS,
Labh R Jethe,
Mark Dodgson,
Maxim,
monkey,
nataphon-ktsystems,
Paul King,
Qiu Tian,
rg_sandesh,
Roberto Perez Alcolea,
Sean,
Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.1 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.1 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v9.8.0: 9.8.0

Compare Source

The Gradle team is excited to announce Gradle 9.8.0.

Here are the highlights of this release:

• Java 27 support
• Maven mirror settings reuse
• Linked problem locations in build output

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aman Gautam,
Björn Kautler,
Eng Zer Jun,
Hashim Khan,
Julian Krannich,
KBS,
Labh R Jethe,
Mark Dodgson,
Maxim,
monkey,
nataphon-ktsystems,
Paul King,
Qiu Tian,
rg_sandesh,
Roberto Perez Alcolea,
Sean,
Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.0 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.0 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v9.7.1: 9.7.1

Compare Source

The Gradle team is excited to announce Gradle 9.7.1.

This is a patch release for 9.7.0. We recommend using 9.7.1 instead of 9.7.0.

Here are the highlights of 9.7.0 release:

• Isolated Projects graduates to incubating
• Broader Configuration Cache compatibility
• Resilient Sync helps you fix broken builds
• More source locations in problem reports

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Adam,
Aman Gautam,
Aman Kumar,
Anton Dubrouski,
Aurimas,
gbhavya07,
Josh Friend,
nicklauslittle-gov,
Pragati,
project516,
Qin Mi,
Ravi,
sk-reddy17,
Suvrat Acharya,
Yongshun Ye.

Upgrade instructions

Switch your build to use Gradle 9.7.1 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.7.1 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v9.7.0: 9.7.0

Compare Source

The Gradle team is excited to announce Gradle 9.7.0.

Here are the highlights of this release:

• Isolated Projects graduates to incubating
• Broader Configuration Cache compatibility
• More source locations in problem reports

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Adam,
Aman Gautam,
Aman Kumar,
Anton Dubrouski,
Aurimas,
gbhavya07,
Josh Friend,
nicklauslittle-gov,
Pragati,
project516,
Qin Mi,
Ravi,
sk-reddy17,
Suvrat Acharya,
Yongshun Ye.

Upgrade instructions

Switch your build to use Gradle 9.7.0 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.7.0 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

mockito/mockito (org.mockito:mockito-core)

v5.24.0

Compare Source

^{Changelog generated by Shipkit Changelog Gradle Plugin}

5.24.0

• 2026-09-23 - 27 commit(s) by Andrei Solntsev, DragonFSKY, Hünkar Can Tunç, Joshua Selbo, M. Minot, Markus Gaisbauer, Mirko Alicastro, Vinod Kumar M ( codingkiddo ), dependabot[bot]
• Fix Mockito docs for -javaagent flag with Gradle (#​3866)
• Kotlin example for adding Mockito as an agent is incorrect (#​3864)
• Bump graalvm/setup-graalvm from 1.6.3 to 1.6.6 (#​3862)
• Bump gradle/actions from 6.2.0 to 6.3.0 (#​3852)
• Bump gradle/actions from 5 to 6.2.0 (#​3851)
• Preserve method parameters when clearing inline mocks (#​3847)
• Bump graalvm/setup-graalvm from 1.6.0 to 1.6.3 (#​3845)
• Print object fields via reflection when toString() is not implemented (#​3844)
• Migrate extensions-tests to JUnit Jupiter (#​3840)
• Bump graalvm/setup-graalvm from 1.5.6 to 1.6.0 (#​3839)
• docs(when-verify): fixes to explanations about redundancy (#​3838)
• Confusing inconsistency in example method calls in “stubbing and verifying is redundant” note of “when” and “verify” Javadoc (#​3837)
• Bump actions/checkout from 6 to 7 (#​3836)
• Fixes #​2740 : Add mockMaker option to @Spy annotation (#​3835)
• Bump graalvm/setup-graalvm from 1.5.5 to 1.5.6 (#​3834)
• Bump graalvm/setup-graalvm from 1.5.4 to 1.5.5 (#​3833)
• Bump codecov/codecov-action from 6 to 7 (#​3831)
• Bump graalvm/setup-graalvm from 1.4.5 to 1.5.4 (#​3830)
• Fix clearInlineMocks not de-registering singleton mocks (#​3829)
• Fix NotAMockException when using mockSingleton with MockitoJUnit (#​3827)
• NotAMockException when using mockSingleton with MockitoSession or MockitoJUnit (#​3826)
• Improve Gradle agent docs for configuration cache (#​3823)
• Gradle documentation for setting up instrumentation with Gradle configuration cache (#​3822)
• Fixes #​3818 : Fix data race in InvocationContainerImpl.invocationForStubbing (#​3819)
• Data race on invocationForPotentialStubbing (#​3818)
• Fixes #​3814 : implement package-level clinit suppression (#​3815)
• Package-level clinit suppression (#​3814)
• Upgrade Android Gradle Plugin to 8.13.2 (#​3812)
• Replaces raw generic types with type parameters (#​3806)
• Fixes #​2398 : Implement global suppress static initialization leveraging java agent (#​3801)
• Bump codecov/codecov-action from 5 to 6 (#​3800)
• Fix non-deterministic AssertionError when using MockMakers.SUBCLASS (#​3406, #​2823) (#​3795)
• Fixes #​3536 : Implement SpyStatic API (#​3794)
• The class's MethodParameters are removed after clearAllCaches is invoked (#​3763)
• [FeatureRequest / Idea] Create Mockito.spyStatic (#​3536)
• Add option to specify mockmaker for @Spy (#​2740)
• How can I suppress static initializer? (#​2398)

mariadb-corporation/mariadb-connector-j (org.mariadb.jdbc:mariadb-java-client)

v3.5.10

Compare Source

Full Changelog

Key Enhancements

• CONJ-1333 - Add maxAllowedPacket connection option (send/receive limit)
• CONJ-1339 - Add maxAllowedColumns option to bound server-announced column count (report by fg0x0)
• CONJ-1330 - add infer test to CI

Issues Resolved

• CONJ-1332 - Reject multipart (>16 MB) packets before authentication to prevent pre-auth OOM from a rogue server
• CONJ-1342 - socketFactory option allows loading arbitrary bytecode via jar: URL, enabling RCE when JDBC URL is
  attacker-controlled (report by Qing Xu)
• CONJ-1307 - Connection.setReadOnly(true) still allows DML statements to execute
• CONJ-1326 - Unsafe escaping in enquoteLiteral()/enquoteNCharLiteral() (thanks to jmestwa-coder)
• CONJ-1327 - Align SSL hostname verification with TLS libraries (thanks to jmestwa-coder)
• CONJ-1329 - LOAD DATA LOCAL INFILE validation fails open when a bound parameter can't be rendered (thanks to
  jmestwa-coder)
• CONJ-1331 - trustStore-configured TLS connections defer certificate-chain/identity validation instead of validating
  up front (thanks to jmestwa-coder)
• CONJ-1340 - SQL injection via unescaped identifiers in updatable ResultSet generated statements (thanks to
  jmestwa-coder)
• CONJ-1341 - MariaDbPoolDataSource.getConnection(user, password) ignores the user argument when the pool's own
  password is supplied (report by fg0x0)
• CONJ-1328 - restrictedAuth allowlist is matched with substring contains() instead of equality (thanks to
  jmestwa-coder)
• CONJ-1338 - Validate length-encoded integers fit a non-negative int before use as a length (report by fg0x0)
• CONJ-1336 - CONJ-1282 regression: TLS connection fails when JDBC hostname is an absolute FQDN ending with a trailing
  dot (report by Shaswata, thanks to Pepo48 for PR)
• CONJ-1335 - getGeneratedKeys() throws "integer overflow" after a batch insert when the auto-increment value exceeds
  Integer.MAX_VALUE, and returns bulk generated keys out of batch order

Kotlin/kotlinx.serialization (org.jetbrains.kotlinx:kotlinx-serialization-json)

v1.12.0

===================

This release is based on Kotlin 2.4.10 and contains all of the changes from 1.12.0-RC.

Additionally, it includes a fix removing unnecessary leading whitespaces from Proguard rules (#​3270),
and two changes stabilizing kotlin.uuid.Uuid serializer (#​3263) and kotlin.time.Instant serializers (#​3261).

For your convenience, the changelog for 1.12.0-RC is duplicated below:

API stabilization and deprecations

A big portion of the Json and Core APIs has been stabilized. Most important ones include:
@KeepGeneratedSerializer and @SerialInfo annotations, JsonNamingStrategy, and ContextualSerializer.
Additionally, various descriptor builders such as listDescriptor and JsonElementBuilder's addAll functions are also
stable and can be freely used. There is also one deprecation: ChunkedDecoder interface. Since there is no demand for
it, we plan to remove it in the future. See details in
the #​3238, #​3239,
and #​3216.

Also, kotlin.time.Instant and kotlin.uuid.Uuid serializers are no longer annotated with experimental annotations
from the Kotlin standard library (see [#​3261](#​3261
and #​3263)

Performance improvements

We also improved performance in various areas. ASCII-specific parser
(#​3225) brings performance of decoding from Okio and
kotlinx-io sources closer to decoding performance from
String. #​3220 makes decoding significantly faster in case
JsonElement present in your serializable classes.
And #​3248 should bring overall performance improvements
(up to 30%) on large strings.

Exceptions rework

We continue to improve exception handling in Json encoders and decoders.
#​3235 makes a big change around custom serializers and
@Serializable classes constructors:
from now on, every exception thrown during deserialization is wrapped by decoder into a JsonException. This way, it is
more predictable to write a catch and it is easier to understand what went wrong:
JsonDecodingException also includes context information such as Json path and input. Besides
that, #​3246 limits maximum nesting depth of Json
document, so you will get a proper JsonDecodingException instead of a random stack overflow error.

CBOR improvements

CBOR format also gets many improvements in this release. The most important one is memory optimization for
definitely-sized collections (#​3191, #​3192).

The others include:

• Encode unsigned integer types as positive integers (#​3194) (thanks to Eyüp Can Akman)
• Correctly decode CborLabel values (#​3195)
• Include actual tag info into CborDecodingException (#​3197)

Protobuf improvements

Protocol buffers format received a big new feature: support for unknown fields. Using a new ProtoUnknownFieldHolder
class, you can now decode and store unknown fields in Protobuf messages to retransmit them back later. See documentation
updates and #​2860 for details. Big thanks
to xzk for theirs contributions:
this one and the bug with oneof default value (#​3147).

We've also fixed Protobuf schema generation for inlined value classes (#​3209).

Other improvements and bugfixes

• Set Deprecated (HIDDEN) to setters in JsonConfiguration
• Add Json nesting depth calculation during parsing (#​3246)
• JsonElementBuilders: mark all (add|put)Json (Object|Array) functions as inline (#​3242) (thanks to Miha-x64)
• Fix Polymorphic Deserialization Error with Subclass using JsonTransformingSerializer (#​3139) (thanks to YongJun Jung)
• Align collections' SerialDescriptors with the contract (#​3199)
• Remove leading whitespace from Proguard rules (#​3270)

discord-jda/JDA (net.dv8tion:JDA)

v6.7.0: | Handle Channel Obfuscation

Overview

This release makes JDA aware of Channel Obfuscation, which will become mandatory on November 16, 2026.

You can test your bot early by enabling channel obfuscation in the discord developer portal.

[!WARNING]
This is a breaking change, which affects permission handling and what will be available to your bot. Please report any bugs / unexpected results you might encounter with JDA behavior.

Channels for interactions will use snapshots of the channel instead, utilizing the IDetachableEntity handling previously introduced for user-installed commands. These channels carry the current information about the channel, such as name and topic. They also have the permissions for the member that used the interaction, to allow permission checks to still work as expected for that specific member through member.hasPermission(channel, permissions).

Breaking Changes

• Add handling for obfuscated channels by @​MinnDevelopment in #​3042

Full Changelog: discord-jda/JDA@v6.6.0...v6.7.0

Installation

Gradle

repositories {
    mavenCentral()
}
dependencies {
    implementation("net.dv8tion:JDA:6.7.0")
}

Maven

<dependency>
    <groupId>net.dv8tion</groupId>
    <artifactId>JDA</artifactId>
    <version>6.7.0</version> 
</dependency>

v6.6.0

Overview

This is a minor release adding a few new features before a bigger change coming in 6.7.0 which will introduce handling for Obfuscated Channels.

If you can, please try out and give feedback on Add handling for obfuscated channels #​3042. To enable obfuscated channels early for testing purposes, you can toggle a switch in your application dashboard as described here.

New Features

• Add file type filtering in slash command attachment options and modal attachment uploads by @​freya022 in #​3113
• Add support for guild member banners by @​Whizyyy in #​3126

Changes

• Make LabelChildComponent replaceable by @​Kaktushose in #​3128
• Read flags_new of ApplicationInfo instead of flags by @​freya022 in #​3131
• Guild member pruning: Check for admin if PRUNE_REQUIRES_ADMIN is enabled by @​freya022 in #​3129
• Update Message.MAX_FILE_SIZE to 20 MiB by @​freya022 in #​3142

Bug Fixes

• Fix MarkdownUtil#monospace not correctly applying monospace formatting to strings with backticks by @​ManosSef in #​3139
• Fix icon URLs for GIF stickers by @​jjj-n in #​3140

Full Changelog: discord-jda/JDA@v6.5.0...v6.6.0

Installation

Gradle

repositories {
    mavenCentral()
}
dependencies {
    implementation("net.dv8tion:JDA:6.6.0")
}

Maven

<dependency>
    <groupId>net.dv8tion</groupId>
    <artifactId>JDA</artifactId>
    <version>6.6.0</version> 
</dependency>

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.