From 8d4325dc2d689b2192017caa73bbf2d42428b609 Mon Sep 17 00:00:00 2001 From: alexander-yevsyukov Date: Tue, 14 Jul 2026 17:56:54 +0100 Subject: [PATCH 1/4] Bump Jackson -> `2.22.1` Delivers the security patch https://github.com/FasterXML/jackson-databind/issues/5962 --- buildSrc/src/main/kotlin/io/spine/dependency/lib/Jackson.kt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/buildSrc/src/main/kotlin/io/spine/dependency/lib/Jackson.kt b/buildSrc/src/main/kotlin/io/spine/dependency/lib/Jackson.kt index a2a64c0ef..33b3b089c 100644 --- a/buildSrc/src/main/kotlin/io/spine/dependency/lib/Jackson.kt +++ b/buildSrc/src/main/kotlin/io/spine/dependency/lib/Jackson.kt @@ -33,7 +33,7 @@ import io.spine.dependency.DependencyWithBom @Suppress("unused") object Jackson : DependencyWithBom() { override val group = "com.fasterxml.jackson" - override val version = "2.22.0" + override val version = "2.22.1" // https://github.com/FasterXML/jackson-annotations?tab=readme-ov-file#release-notes const val annotationsVersion = "2.22" From 217dfdd8d5d4dec3451f55d1f37b4861ea566535 Mon Sep 17 00:00:00 2001 From: alexander-yevsyukov Date: Tue, 14 Jul 2026 18:16:51 +0100 Subject: [PATCH 2/4] Bump ErrorProne -> `2.42.0` --- .../main/kotlin/io/spine/dependency/build/ErrorProne.kt | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/buildSrc/src/main/kotlin/io/spine/dependency/build/ErrorProne.kt b/buildSrc/src/main/kotlin/io/spine/dependency/build/ErrorProne.kt index b1e3e474c..a0226ca4a 100644 --- a/buildSrc/src/main/kotlin/io/spine/dependency/build/ErrorProne.kt +++ b/buildSrc/src/main/kotlin/io/spine/dependency/build/ErrorProne.kt @@ -29,8 +29,13 @@ package io.spine.dependency.build // https://errorprone.info/ @Suppress("unused", "ConstPropertyName") object ErrorProne { - // https://github.com/google/error-prone - private const val version = "2.36.0" + /** + * This is the last version which is compatible with Java 17. + * + * The version 2.43.0 requires JDK 21. + * https://github.com/google/error-prone/releases/tag/v2.43.0 + */ + private const val version = "2.42.0" const val group = "com.google.errorprone" From 80630b76f57e28ce5c9fe7d368e11d976e0b74a2 Mon Sep 17 00:00:00 2001 From: alexander-yevsyukov Date: Tue, 14 Jul 2026 18:26:54 +0100 Subject: [PATCH 3/4] Bump Base -> `2.0.0-SNAPSHOT.424` --- buildSrc/src/main/kotlin/io/spine/dependency/local/Base.kt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/buildSrc/src/main/kotlin/io/spine/dependency/local/Base.kt b/buildSrc/src/main/kotlin/io/spine/dependency/local/Base.kt index 4c0bcf02e..c4259a681 100644 --- a/buildSrc/src/main/kotlin/io/spine/dependency/local/Base.kt +++ b/buildSrc/src/main/kotlin/io/spine/dependency/local/Base.kt @@ -33,8 +33,8 @@ package io.spine.dependency.local */ @Suppress("ConstPropertyName", "unused") object Base { - const val version = "2.0.0-SNAPSHOT.423" - const val versionForBuildScript = "2.0.0-SNAPSHOT.423" + const val version = "2.0.0-SNAPSHOT.424" + const val versionForBuildScript = "2.0.0-SNAPSHOT.424" const val group = Spine.group private const val prefix = "spine" const val libModule = "$prefix-base" From 395977b2612d5d18ae5767edccde52d235463cf5 Mon Sep 17 00:00:00 2001 From: alexander-yevsyukov Date: Tue, 14 Jul 2026 18:49:49 +0100 Subject: [PATCH 4/4] Bump Compiler and CoreJvm local snapshots Refresh Compiler -> `2.0.0-SNAPSHOT.062` and CoreJvm -> `2.0.0-SNAPSHOT.450` to the latest builds published in the Spine SDK Artifact Registry. Co-Authored-By: Claude Sonnet 5 --- .../src/main/kotlin/io/spine/dependency/local/Compiler.kt | 4 ++-- buildSrc/src/main/kotlin/io/spine/dependency/local/CoreJvm.kt | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/buildSrc/src/main/kotlin/io/spine/dependency/local/Compiler.kt b/buildSrc/src/main/kotlin/io/spine/dependency/local/Compiler.kt index ba16d2f8b..1f54366e3 100644 --- a/buildSrc/src/main/kotlin/io/spine/dependency/local/Compiler.kt +++ b/buildSrc/src/main/kotlin/io/spine/dependency/local/Compiler.kt @@ -72,7 +72,7 @@ object Compiler : Dependency() { * The version of the Compiler dependencies. */ override val version: String - private const val fallbackVersion = "2.0.0-SNAPSHOT.061" + private const val fallbackVersion = "2.0.0-SNAPSHOT.062" /** * The distinct version of the Compiler used by other build tools. @@ -81,7 +81,7 @@ object Compiler : Dependency() { * transitive dependencies, this is the version used to build the project itself. */ val dogfoodingVersion: String - private const val fallbackDfVersion = "2.0.0-SNAPSHOT.061" + private const val fallbackDfVersion = "2.0.0-SNAPSHOT.062" /** * The artifact for the Compiler Gradle plugin. diff --git a/buildSrc/src/main/kotlin/io/spine/dependency/local/CoreJvm.kt b/buildSrc/src/main/kotlin/io/spine/dependency/local/CoreJvm.kt index 2f7e68e77..391256339 100644 --- a/buildSrc/src/main/kotlin/io/spine/dependency/local/CoreJvm.kt +++ b/buildSrc/src/main/kotlin/io/spine/dependency/local/CoreJvm.kt @@ -39,7 +39,7 @@ typealias CoreJava = CoreJvm @Suppress("ConstPropertyName", "unused") object CoreJvm { const val group = Spine.group - const val version = "2.0.0-SNAPSHOT.420" + const val version = "2.0.0-SNAPSHOT.450" const val coreArtifact = "spine-core" const val clientArtifact = "spine-client"