Skip to content

Bump the all group across 1 directory with 12 updates - #888

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/all-e0d72c3585
Open

Bump the all group across 1 directory with 12 updates#888
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/all-e0d72c3585

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the all group with 12 updates in the / directory:

Package From To
org.apache.httpcomponents:httpcomponents-parent 14 15
org.conscrypt:conscrypt-openjdk-uber 2.6.1 2.7.0
com.kohlschutter.junixsocket:junixsocket-core 2.10.1 2.11.1
com.github.luben:zstd-jni 1.5.7-11 1.5.7-20
io.micrometer:micrometer-core 1.17.0 1.17.1
io.micrometer:micrometer-observation 1.17.0 1.17.1
io.micrometer:micrometer-registry-prometheus 1.17.0 1.17.1
io.micrometer:micrometer-observation 1.17.0 1.17.1
io.micrometer:micrometer-registry-prometheus 1.17.0 1.17.1
io.micrometer:micrometer-tracing 1.7.0 1.7.1
io.micrometer:micrometer-tracing-bridge-otel 1.7.0 1.7.1
io.micrometer:micrometer-tracing-bridge-otel 1.7.0 1.7.1
io.opentelemetry:opentelemetry-bom 1.64.0 1.66.0
com.github.siom79.japicmp:japicmp-maven-plugin 0.26.1 0.26.2
org.apache.maven.plugins:maven-toolchains-plugin 3.2.0 3.3.0

Updates org.apache.httpcomponents:httpcomponents-parent from 14 to 15

Changelog

Sourced from org.apache.httpcomponents:httpcomponents-parent's changelog.

Release 15

Change Log

  • Upgraded org.apache.apache to 40
  • Removed outdated profiles
  • Removed reporting section and report plugin version declarations
Commits

Updates org.conscrypt:conscrypt-openjdk-uber from 2.6.1 to 2.7.0

Release notes

Sourced from org.conscrypt:conscrypt-openjdk-uber's releases.

v2.7.0

Conscrypt Version 2.7.0.

This is a new release of conscrypt-openjdk, conscrypt-openjdk-uber and conscrypt-android on maven.

It includes the following changes:

  • TLS uses X25519MLKEM768 by default.
  • Encrypted Client Hello (ECH).
  • Composite-ML-DSA Signatures (with Ed25519, ECDSA, RSA PKCS1 and RSA PSS).
  • Hash-SLH-DSA Signatures (with SHA384).
  • Some cleanups.

v2.7-alpha

Conscrypt Version 2.7-alpha.

This is a new release of conscrypt-openjdk, conscrypt-openjdk-uber and conscrypt-android on maven.

It includes the following changes:

  • TLS uses X25519MLKEM768 by default.
  • Encrypted Client Hello (ECH).
  • Composite-ML-DSA Signatures (with Ed25519, ECDSA, RSA PKCS1 and RSA PSS).
  • Hash-SLH-DSA Signatures (with SHA384).
  • Some cleanups.

v2.6.3

This release uses the same Conscrypt source code as release 2.6.2, but the maven binary was compiled with this boringssl version: https://boringssl.googlesource.com/boringssl/+/refs/tags/0.20260616.0

This should fix google/conscrypt#1530

v2.6.2

Commits

Updates com.kohlschutter.junixsocket:junixsocket-core from 2.10.1 to 2.11.1

Release notes

Sourced from com.kohlschutter.junixsocket:junixsocket-core's releases.

junixsocket 2.11.0

  • New module: junixsocket-memory (Java 22+): SharedMemory/mmap, POSIX shm, futex-based Mutexes, memfd, etc.
  • Remove junixsocket-jetty support for Jetty 12.0.x and older (breaking change)
  • Add several new exceptions (subclasses of IOException / SocketException)
  • Add FileChannelSupplier for FileDescriptorCast
  • Add support for Astral OS; native binary not included yet
  • Add AFSocketCapability for send/receive timeout
  • Add support for AF_SYSTEM CTLIOCGINFO (number of registered kernel control names)
  • Improve/simplify check for AFServerSocket.isLocalSocketAddressValid
  • Improve exception reporting upon "accept"
  • Reduce possible local JNI refernce accumulation in poll
  • Fix NullPointerException in AFSelector
  • Fix spurious Connection-Refused in AFSocketImpl.connect
  • Fix AFSocketChannel.read returning 0 on EOF
  • Fix VirtualThread issue on machines with 1 or 2 CPUs
  • Fix spurious connect timeouts on Windows
  • Fix for TIPC: Ignore EINVAL upon setsocketopt SOL_TIPC/TIPC_GROUP_LEAVE
  • Improve selftest
  • Code cleanup and other optimizations
  • Update documentation
Commits
  • 52dc074 docs: Update changelog, README
  • c36ccf2 Set version to 2.11.1
  • 76f1de4 native: Fix invalid pointer cast when checking "available"
  • ecbef49 docs: changelog: fix typo
  • f6d2f6c docs: Update README, changelog
  • 954836d memory: test: Fix futex wakeup assumptions
  • 646a005 Set version to 2.11.0
  • 593d9d2 test: rmi: Fix testRemoteShutdownNotAllowed
  • c7e3f62 Update dependencies
  • b776161 demo: Update PostgreSQL version
  • Additional commits viewable in compare view

Updates com.github.luben:zstd-jni from 1.5.7-11 to 1.5.7-20

Commits
  • b154531 Don't re-run jniCompile before packaging
  • a47b87f Faster perf test runs
  • 6564a02 GetPrimitiveArrayCritical calls can be nested
  • 82d7f90 Revert "Don't jniCompile when packaging"
  • acc7b2c simplify comments
  • 9a643d6 keep FrameProgressionBuffer off-heap
  • 6d5439f improve getFrameProgression method performance & memory usage
  • 518e870 implement ZstdCompressCtx based on FFM API
  • d061790 Next version is v1.5.7-20
  • 5ddc98b Don't jniCompile when packaging
  • Additional commits viewable in compare view

Updates io.micrometer:micrometer-core from 1.17.0 to 1.17.1

Commits

Updates io.micrometer:micrometer-observation from 1.17.0 to 1.17.1

Commits

Updates io.micrometer:micrometer-registry-prometheus from 1.17.0 to 1.17.1

Commits

Updates io.micrometer:micrometer-observation from 1.17.0 to 1.17.1

Commits

Updates io.micrometer:micrometer-registry-prometheus from 1.17.0 to 1.17.1

Commits

Updates io.micrometer:micrometer-tracing from 1.7.0 to 1.7.1

Commits

Updates io.micrometer:micrometer-tracing-bridge-otel from 1.7.0 to 1.7.1

Commits

Updates io.micrometer:micrometer-tracing-bridge-otel from 1.7.0 to 1.7.1

Commits

Updates io.opentelemetry:opentelemetry-bom from 1.64.0 to 1.66.0

Release notes

Sourced from io.opentelemetry:opentelemetry-bom's releases.

Version 1.66.0

API

  • Fix Baggage.fromContext() and Baggage.fromContextOrNull() to handle a null context (#8667)
  • Do not percent-encode W3C baggage metadata (#8682)
  • Fix ArrayIndexOutOfBoundsException in OtelEncodingUtils for invalid hex characters (#8748)

SDK

Traces

  • Record processed spans before export completes and reject new spans on shutdown in SpanProcessor self-observability instrumentation (#8735)

Metrics

  • Improve explicit bucket histogram contention performance (#8717)

Logs

  • Record processed logs before export completes and reject new logs on shutdown in LogRecordProcessor self-observability instrumentation (#8698)

Exporters

  • OTLP: Respect Retry-After in OTLP HTTP senders (#8633)
  • OTLP: Add setEnabledProtocols option to OTLP HTTP exporter builders (#8610)
  • OTLP: Reject mixing keyManager and sslContext in TlsConfigHelper (#8710)
  • OTLP: Fix OkHttpGrpcSender mTLS when using the platform default trust store (#8758)
  • OTLP: Suppress instrumentation of exporter requests in JdkHttpSender (#8757)
  • OTLP: Accept RFC 1123 hostnames in EndpointUtil.validateEndpoint for OkHttp senders (#8746)
  • OTLP: Include the number of affected items in exporter error logging (#8780)
  • OTLP: Add toString to OtlpJsonLogging{Span,Metric,LogRecord}Exporter (#8725)
  • OTLP Profiles: Improve JFR export example and align LinkData null-element handling with the spec (#8349)
  • Prometheus: Remove default host log warning in PrometheusHttpServerBuilder (#8679)
  • Prometheus: Align UCUM byte unit conversions with the specification table (#8752)

Extensions

  • BREAKING Declarative config: Rename generated model POJO setters from with<Prop> to set<Prop> (#8742)
  • Declarative config: Resolve experimental properties on stable APIs in generated model POJOs (#8654)
  • Declarative config: Fix inverted scope_info_enabled and target_info_enabled flags in the Prometheus component provider (#8750)
  • Declarative config: Support output_stream in otlp_file/development (#8676)
  • Incubator: Add toString to ComposableAnnotatingSampler (#8645)

Project tooling

  • Remediate zizmor findings in GitHub Actions workflows (#8592)

🙇 Thank you

This release was possible thanks to the following contributors who shared their brilliant ideas and awesome pull requests:

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-bom's changelog.

Version 1.66.0 (2026-09-11)

API

  • Fix Baggage.fromContext() and Baggage.fromContextOrNull() to handle a null context (#8667)
  • Do not percent-encode W3C baggage metadata (#8682)
  • Fix ArrayIndexOutOfBoundsException in OtelEncodingUtils for invalid hex characters (#8748)

SDK

Traces

  • Record processed spans before export completes and reject new spans on shutdown in SpanProcessor self-observability instrumentation (#8735)

Metrics

  • Improve explicit bucket histogram contention performance (#8717)

Logs

  • Record processed logs before export completes and reject new logs on shutdown in LogRecordProcessor self-observability instrumentation (#8698)

Exporters

  • OTLP: Respect Retry-After in OTLP HTTP senders (#8633)
  • OTLP: Add setEnabledProtocols option to OTLP HTTP exporter builders (#8610)
  • OTLP: Reject mixing keyManager and sslContext in TlsConfigHelper (#8710)
  • OTLP: Fix OkHttpGrpcSender mTLS when using the platform default trust store (#8758)
  • OTLP: Suppress instrumentation of exporter requests in JdkHttpSender (#8757)
  • OTLP: Accept RFC 1123 hostnames in EndpointUtil.validateEndpoint for OkHttp senders (#8746)
  • OTLP: Include the number of affected items in exporter error logging (#8780)
  • OTLP: Add toString to OtlpJsonLogging{Span,Metric,LogRecord}Exporter (#8725)
  • OTLP Profiles: Improve JFR export example and align LinkData null-element handling with the spec (#8349)

... (truncated)

Commits
  • 300a358 [release/v1.66.x] Prepare release 1.66.0 (#8799)
  • dd71106 Prepare for 1.66.0 release (#8795)
  • 9284265 Manual 1.65.0 post release (#8794)
  • 10c7338 Align UCUM byte unit conversions with the specification table (#8752)
  • bf1a64c Accept RFC 1123 hostnames in EndpointUtil.validateEndpoint (#8746)
  • ab72956 Add number of affected items to Exporter error logging (#8780)
  • 275fe92 Update dependency com.squareup.wire:wire-bom to v7 (#8793)
  • 050f481 Remove unused parameter from B3 propagation integration tests (#8791)
  • 8d7bd65 Improve explicit histogram contention performance (#8717)
  • 2c880d9 Rename inverted grpc detection test in GrpcJavaOtlpIntegrationTest (#8790)
  • Additional commits viewable in compare view

Updates com.github.siom79.japicmp:japicmp-maven-plugin from 0.26.1 to 0.26.2

Release notes

Sourced from com.github.siom79.japicmp:japicmp-maven-plugin's releases.

japicmp-base-0.26.2

  • Fix false CLASS_NOW_NOT_EXTENDABLE for added private constructors #527
Commits
  • e874564 [maven-release-plugin] prepare release japicmp-base-0.26.2
  • 06891fb upgraded version in *.md files to 0.26.2
  • 7239921 Add release notes for version 0.26.2
  • 797cd10 Merge pull request #527 from dossett/fix-private-constructor-extendability
  • 255f72f Fix extendability checks for version-specific constructors
  • 5186e1d Merge pull request #524 from siom79/release-v0.26.1
  • 2d326a4 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates org.apache.maven.plugins:maven-toolchains-plugin from 3.2.0 to 3.3.0

Release notes

Sourced from org.apache.maven.plugins:maven-toolchains-plugin's releases.

3.3.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

... (truncated)

Commits
  • 52474c0 [maven-release-plugin] prepare release maven-toolchains-plugin-3.3.0
  • 39e84b2 Update toolchains documentation to use JSR-330 terminology and links (#165)
  • a213292 Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml
  • 2402d77 Replace Plexus XML configuration with JSR-330 annotated beans (#160)
  • ab80fc8 Bump apache/maven-gh-actions-shared/.github/workflows/stale.yml (#161)
  • 525f40c Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml (#163)
  • d3960b9 Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml (#164)
  • e0b39a6 Add .asf.yaml project metadata for ATR
  • e53bcec Add tag-template to release-drafter config
  • df6df08 Update site descriptors and download page content
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the all group across 1 directory with 12 updates
d08f428 
Bumps the all group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.apache.httpcomponents:httpcomponents-parent](https://github.com/apache/httpcomponents-parent) | `14` | `15` |
| [org.conscrypt:conscrypt-openjdk-uber](https://github.com/google/conscrypt) | `2.6.1` | `2.7.0` |
| [com.kohlschutter.junixsocket:junixsocket-core](https://github.com/kohlschutter/junixsocket) | `2.10.1` | `2.11.1` |
| [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni) | `1.5.7-11` | `1.5.7-20` |
| [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer-commercial) | `1.17.0` | `1.17.1` |
| [io.micrometer:micrometer-observation](https://github.com/micrometer-metrics/micrometer-commercial) | `1.17.0` | `1.17.1` |
| [io.micrometer:micrometer-registry-prometheus](https://github.com/micrometer-metrics/micrometer-commercial) | `1.17.0` | `1.17.1` |
| [io.micrometer:micrometer-observation](https://github.com/micrometer-metrics/micrometer-commercial) | `1.17.0` | `1.17.1` |
| [io.micrometer:micrometer-registry-prometheus](https://github.com/micrometer-metrics/micrometer-commercial) | `1.17.0` | `1.17.1` |
| [io.micrometer:micrometer-tracing](https://github.com/micrometer-metrics/tracing-commercial) | `1.7.0` | `1.7.1` |
| [io.micrometer:micrometer-tracing-bridge-otel](https://github.com/micrometer-metrics/tracing-commercial) | `1.7.0` | `1.7.1` |
| [io.micrometer:micrometer-tracing-bridge-otel](https://github.com/micrometer-metrics/tracing-commercial) | `1.7.0` | `1.7.1` |
| [io.opentelemetry:opentelemetry-bom](https://github.com/open-telemetry/opentelemetry-java) | `1.64.0` | `1.66.0` |
| [com.github.siom79.japicmp:japicmp-maven-plugin](https://github.com/siom79/japicmp) | `0.26.1` | `0.26.2` |
| [org.apache.maven.plugins:maven-toolchains-plugin](https://github.com/apache/maven-toolchains-plugin) | `3.2.0` | `3.3.0` |



Updates `org.apache.httpcomponents:httpcomponents-parent` from 14 to 15
- [Changelog](https://github.com/apache/httpcomponents-parent/blob/master/RELEASE_NOTES.txt)
- [Commits](https://github.com/apache/httpcomponents-parent/commits)

Updates `org.conscrypt:conscrypt-openjdk-uber` from 2.6.1 to 2.7.0
- [Release notes](https://github.com/google/conscrypt/releases)
- [Commits](google/conscrypt@2.6.1...2.7.0)

Updates `com.kohlschutter.junixsocket:junixsocket-core` from 2.10.1 to 2.11.1
- [Release notes](https://github.com/kohlschutter/junixsocket/releases)
- [Commits](kohlschutter/junixsocket@junixsocket-2.10.1...junixsocket-2.11.1)

Updates `com.github.luben:zstd-jni` from 1.5.7-11 to 1.5.7-20
- [Commits](luben/zstd-jni@v1.5.7-11...v1.5.7-20)

Updates `io.micrometer:micrometer-core` from 1.17.0 to 1.17.1
- [Commits](https://github.com/micrometer-metrics/micrometer-commercial/commits)

Updates `io.micrometer:micrometer-observation` from 1.17.0 to 1.17.1
- [Commits](https://github.com/micrometer-metrics/micrometer-commercial/commits)

Updates `io.micrometer:micrometer-registry-prometheus` from 1.17.0 to 1.17.1
- [Commits](https://github.com/micrometer-metrics/micrometer-commercial/commits)

Updates `io.micrometer:micrometer-observation` from 1.17.0 to 1.17.1
- [Commits](https://github.com/micrometer-metrics/micrometer-commercial/commits)

Updates `io.micrometer:micrometer-registry-prometheus` from 1.17.0 to 1.17.1
- [Commits](https://github.com/micrometer-metrics/micrometer-commercial/commits)

Updates `io.micrometer:micrometer-tracing` from 1.7.0 to 1.7.1
- [Commits](https://github.com/micrometer-metrics/tracing-commercial/commits)

Updates `io.micrometer:micrometer-tracing-bridge-otel` from 1.7.0 to 1.7.1
- [Commits](https://github.com/micrometer-metrics/tracing-commercial/commits)

Updates `io.micrometer:micrometer-tracing-bridge-otel` from 1.7.0 to 1.7.1
- [Commits](https://github.com/micrometer-metrics/tracing-commercial/commits)

Updates `io.opentelemetry:opentelemetry-bom` from 1.64.0 to 1.66.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.64.0...v1.66.0)

Updates `com.github.siom79.japicmp:japicmp-maven-plugin` from 0.26.1 to 0.26.2
- [Release notes](https://github.com/siom79/japicmp/releases)
- [Changelog](https://github.com/siom79/japicmp/blob/master/release.py)
- [Commits](siom79/japicmp@japicmp-base-0.26.1...japicmp-base-0.26.2)

Updates `org.apache.maven.plugins:maven-toolchains-plugin` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/apache/maven-toolchains-plugin/releases)
- [Commits](apache/maven-toolchains-plugin@maven-toolchains-plugin-3.2.0...maven-toolchains-plugin-3.3.0)

---
updated-dependencies:
- dependency-name: org.apache.httpcomponents:httpcomponents-parent
  dependency-version: '15'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: org.conscrypt:conscrypt-openjdk-uber
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: com.kohlschutter.junixsocket:junixsocket-core
  dependency-version: 2.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: com.github.luben:zstd-jni
  dependency-version: 1.5.7-20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.micrometer:micrometer-core
  dependency-version: 1.17.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.micrometer:micrometer-observation
  dependency-version: 1.17.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.micrometer:micrometer-registry-prometheus
  dependency-version: 1.17.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.micrometer:micrometer-observation
  dependency-version: 1.17.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.micrometer:micrometer-registry-prometheus
  dependency-version: 1.17.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.micrometer:micrometer-tracing
  dependency-version: 1.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.micrometer:micrometer-tracing-bridge-otel
  dependency-version: 1.7.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.micrometer:micrometer-tracing-bridge-otel
  dependency-version: 1.7.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: io.opentelemetry:opentelemetry-bom
  dependency-version: 1.66.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: com.github.siom79.japicmp:japicmp-maven-plugin
  dependency-version: 0.26.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: org.apache.maven.plugins:maven-toolchains-plugin
  dependency-version: 3.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants