Skip to content

build(deps): bump the maven group with 4 updates - #2826

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/maven/maven-084b26e18f
Closed

dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/maven/maven-084b26e18f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the maven group with 4 updates: net.bytebuddy:byte-buddy, net.bytebuddy:byte-buddy-agent, com.palantir.javapoet:javapoet and com.fasterxml.woodstox:woodstox-core.

Updates net.bytebuddy:byte-buddy from 1.18.14 to 1.18.15

Changelog

Sourced from net.bytebuddy:byte-buddy's changelog.

Byte Buddy release notes

Commits
  • f2dffef [publish] Releasing Byte Buddy 1.18.15
  • 7af339e [release] Release new version
  • 74b23dc Update ASM.
  • 807fb56 Remove the sigstore dry run from the build pipeline.
  • 2efd25c Break the build on binary incompatibility again.
  • 29a92ee Update internal Byte Buddy and release notes.
  • b6ebdb3 [publish] Start next development iteration 1.18.15-SNAPSHOT
  • See full diff in compare view

Updates net.bytebuddy:byte-buddy-agent from 1.18.14 to 1.18.15

Changelog

Sourced from net.bytebuddy:byte-buddy-agent's changelog.

Byte Buddy release notes

Commits
  • f2dffef [publish] Releasing Byte Buddy 1.18.15
  • 7af339e [release] Release new version
  • 74b23dc Update ASM.
  • 807fb56 Remove the sigstore dry run from the build pipeline.
  • 2efd25c Break the build on binary incompatibility again.
  • 29a92ee Update internal Byte Buddy and release notes.
  • b6ebdb3 [publish] Start next development iteration 1.18.15-SNAPSHOT
  • See full diff in compare view

Updates com.palantir.javapoet:javapoet from 0.20.0 to 0.21.0

Release notes

Sourced from com.palantir.javapoet:javapoet's releases.

0.21.0

No documented user-facing changes

Full Changelog: 0.20.0...0.21.0

Commits
  • 581ba8b Release 0.21.0
  • a95b7bd Excavator: Update open-source publishing plugins (#539)
  • 2a5c112 Excavator: Upgrade Java dependency com.google.testing.compile:* (#538)
  • 4c3b61a Excavator: Upgrade gradle wrapper to the latest version (#537)
  • 2a8e377 Excavator: Upgrade failure-reports plugin (#536)
  • 89f9164 Excavator: Upgrades Baseline to the latest version (#535)
  • c5c5c20 Excavator: Format Java files (#534)
  • 223d210 Excavator: Add the gradle-idea-configuration plugin to the build (#531)
  • 76fcf96 [High Priority] Excavator: Update gradle-jdks infrastructure plugins (#527)
  • c9c4351 [High Priority] Excavator: Upgrade gradle-consistent-versions (#530)
  • Additional commits viewable in compare view

Updates com.fasterxml.woodstox:woodstox-core from 7.2.2 to 7.3.0

Commits
  • b6ba67d [maven-release-plugin] prepare release woodstox-core-7.3.0
  • 607b34b Prep for 7.3.0 release
  • ef9e014 Disable external entity resolution in MSV schema factories (#320)
  • 12a5d1a #341: Speed up text scanning in BasicStreamReader; P_MAX_TEXT_LENGTH now al...
  • 8933a4e Fix #336: don't truncate upper bits in MergedReader.read() (#337)
  • dbc439f Fix #334: BufferingXmlWriter.writeCData(char[], off, len) passes len instead ...
  • 0b527e2 lazy URL construction in WstxInputFactory (#333)
  • 4867018 Bump dawidd6/action-download-artifact in the github-actions group (#338)
  • dac82e1 Fix #327: merge from child table after rehash (#328)
  • 7c5ffe4 Add JDK 25 to CI (#332)
  • Additional commits viewable in compare view

Updates net.bytebuddy:byte-buddy-agent from 1.18.14 to 1.18.15

Changelog

Sourced from net.bytebuddy:byte-buddy-agent's changelog.

Byte Buddy release notes

Commits
  • f2dffef [publish] Releasing Byte Buddy 1.18.15
  • 7af339e [release] Release new version
  • 74b23dc Update ASM.
  • 807fb56 Remove the sigstore dry run from the build pipeline.
  • 2efd25c Break the build on binary incompatibility again.
  • 29a92ee Update internal Byte Buddy and release notes.
  • b6ebdb3 [publish] Start next development iteration 1.18.15-SNAPSHOT
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven group with 4 updates: [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy), [net.bytebuddy:byte-buddy-agent](https://github.com/raphw/byte-buddy), [com.palantir.javapoet:javapoet](https://github.com/palantir/javapoet) and [com.fasterxml.woodstox:woodstox-core](https://github.com/FasterXML/woodstox).


Updates `net.bytebuddy:byte-buddy` from 1.18.14 to 1.18.15
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.18.14...byte-buddy-1.18.15)

Updates `net.bytebuddy:byte-buddy-agent` from 1.18.14 to 1.18.15
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.18.14...byte-buddy-1.18.15)

Updates `com.palantir.javapoet:javapoet` from 0.20.0 to 0.21.0
- [Release notes](https://github.com/palantir/javapoet/releases)
- [Commits](palantir/javapoet@0.20.0...0.21.0)

Updates `com.fasterxml.woodstox:woodstox-core` from 7.2.2 to 7.3.0
- [Commits](FasterXML/woodstox@woodstox-core-7.2.2...woodstox-core-7.3.0)

Updates `net.bytebuddy:byte-buddy-agent` from 1.18.14 to 1.18.15
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.18.14...byte-buddy-1.18.15)

---
updated-dependencies:
- dependency-name: net.bytebuddy:byte-buddy
  dependency-version: 1.18.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: net.bytebuddy:byte-buddy-agent
  dependency-version: 1.18.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: com.palantir.javapoet:javapoet
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: com.fasterxml.woodstox:woodstox-core
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: net.bytebuddy:byte-buddy-agent
  dependency-version: 1.18.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 19, 2026
@sruehl

sruehl commented Oct 19, 2026

Copy link
Copy Markdown
Contributor

@justinmclean this PR is a example why the grouping just not works in practice... One bad dependency and whoops PR is broken... no idea how that is supposed to work but this would now block all updates because of one bad depedency (woodstox). Can you look into what we could do about that?

@sruehl

sruehl commented Oct 19, 2026

Copy link
Copy Markdown
Contributor

0cd122e might fix it

@sruehl

sruehl commented Oct 19, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@sruehl

sruehl commented Oct 19, 2026

Copy link
Copy Markdown
Contributor

@dependabot ignore com.fasterxml.woodstox:woodstox-core

@dependabot @github

dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you about com.fasterxml.woodstox:woodstox-core again, unless you unignore it.

@sruehl

sruehl commented Oct 19, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate

@dependabot @github

dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 19, 2026
@dependabot
dependabot Bot deleted the dependabot/maven/maven-084b26e18f branch October 19, 2026 11:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant