Skip to content

Bump the dev-dependencies group with 4 updates#65

Merged
github-actions[bot] merged 1 commit intomainfrom
dependabot/gradle/dev-dependencies-40219ba2e3
Mar 9, 2026
Merged

Bump the dev-dependencies group with 4 updates#65
github-actions[bot] merged 1 commit intomainfrom
dependabot/gradle/dev-dependencies-40219ba2e3

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 9, 2026

Bumps the dev-dependencies group with 4 updates: gradle-wrapper, software.amazon.awssdk:bom, org.liquibase:liquibase-core and io.micrometer:micrometer-core.

Updates gradle-wrapper from 9.3.1 to 9.4.0

Updates software.amazon.awssdk:bom from 2.42.4 to 2.42.8

Updates org.liquibase:liquibase-core from 5.0.1 to 5.0.2

Release notes

Sourced from org.liquibase:liquibase-core's releases.

Liquibase v5.0.2

5.0.2 Liquibase Community Release Notes

Liquibase Community v5.0.2 is here, with contributions from developers around the globe. This release includes a range of bug fixes across multiple database platforms along with several quality-of-life enhancements, with 19 contributors coming together to continue improving Liquibase for the entire community.

At Liquibase, we believe great database change management starts with a community that can rely on a predictable and transparent release process. To support this commitment, and starting with version 5.0.2, we are providing two clear ways for the community to access updates and improvements:

  • Main Branch Builds on GitHub – Main branch builds are continuously published on GitHub, offering early access to the latest improvements and fixes as they are developed. These builds enable the community to test upcoming capabilities and provide feedback ahead of the next official release. Learn more on our GitHub README

  • Quarterly Community Releases – Liquibase Community updates are released on a quarterly cadence (every second month of each calendar quarter) providing stable, production-ready versions that allow teams to plan upgrades and maintenance with confidence. These releases are available through all standard distribution channels, including GitHub, Maven Central, package managers, container registries, and other official Liquibase Community distribution locations.

Together, these options ensure that teams can choose the path that best fits their needs - whether prioritizing stability through scheduled releases or engaging early with the latest innovations in Liquibase.

A huge thank you to every contributor who filed an issue, submitted a pull request, or helped review code. You are the engine that drives Liquibase forward.

What’s in this release

Notable improvements

(#7451) by @​MalloD12 New: Added the ALLOW_INHERIT_LOGICAL_FILE_PATH global configuration property, which controls whether included changelogs inherit the logicalFilePath of their parent changelog when no explicit logicalFilePath is set.

(#6627 and #7390) by @​mkarg Improved: Custom change classes that cannot be found on the classpath no longer automatically fail the entire changelog. Liquibase now honors failOnError: false at the changeset level when the failure is caused by a missing custom change class. Additionally, a failing precondition with onFail="MARK_RAN" is now respected when the custom change class is not on the classpath.

(#7479) Improved Cassandra compatibility: Refactoring to enable third-party extensions like liquibase-cassandra to provide database-specific implementations and laying the groundwork for a future fix for CQL incompatibility errors.

Liquibase Community 5.0.2 moves more community repositories to the Functional Source License (FSL). See our FSL blog for details.

Performance improvements

(#7439) Performance fix for analytics: @​tati-qalified identified and resolved a performance degradation introduced with the analytics implementation. If you noticed Liquibase running slower since analytics was added, this is the fix you've been waiting for.

(#7539) Build improvements: Groovy source compilation has been moved to the module level in liquibase-extension-testing, removing redundant build steps from the root configuration.

Drivers and Dependencies

(7528) Updated bundled JDBC driver versions: MSSQL to v13.2.1.jre11 and Firebird to v6.0.3

(#7469) Dependency cleanup: Explicit exclusions added to liquibase-core pom.xml to fix duplicated commons-text dependency.

Fixes

(#7489) by @​MalloD12 Resolved an issue where the maven-update command logged duplicate messages when using the Java API. Summary output now defaults to LOG instead of ALL, which previously caused messages to be written to both the console and the log simultaneously. This behavior can still be overridden by explicitly setting the showSummaryOutput argument.

(#7395) by @​Parthiee Invalid or empty changelog file paths are now caught and rejected during serialization

Liquibase now validates that changelog file paths are properly defined and non-empty when serializing changelog configurations. Previously, incomplete or missing paths could pass through silently, resulting in invalid configurations.

... (truncated)

Changelog

Sourced from org.liquibase:liquibase-core's changelog.

Liquibase Community 5.0.2 is a minor patch release

See the Liquibase Community 5.0.2 Release Notes for the complete set of release information.

Changes

Notable Changes

New Features

Bug Fixes

... (truncated)

Commits
  • 2c889ad Update changelog.txt for 5.0.2 (#7583)
  • bbb74fb Skip bot PRs in Claude Code review workflow (#7581)
  • c6eaa32 chore(deps-dev): bump com.oracle.database.jdbc:ojdbc8 from 19.29.0.0 to 19.30...
  • 49ec08e chore(deps): bump the production-deps group with 6 updates (#7568)
  • a65eeb4 chore(deps): bump spring.version from 7.0.3 to 7.0.5 (#7567)
  • fb9f288 chore(deps-dev): bump net.snowflake:snowflake-jdbc from 3.28.0 to 4.0.0 (#7541)
  • c4c907e chore(deps-dev): bump org.javacc.plugin:javacc-maven-plugin from 3.0.3 to 3.8...
  • 7f61ae5 chore(deps): bump the test-deps group with 4 updates (#7561)
  • 00ef199 chore(deps): bump junit-jupiter.version from 6.0.2 to 6.0.3 (#7562)
  • 8784316 chore(deps): bump the github-actions group across 1 directory with 4 updates ...
  • Additional commits viewable in compare view

Updates io.micrometer:micrometer-core from 1.16.3 to 1.16.4

Release notes

Sourced from io.micrometer:micrometer-core's releases.

1.16.4

🐞 Bug Fixes

  • Using context-propagation with a no-op Observation corrupts the current Observation #7200

📔 Documentation

  • Document (Default)MeterObservationHandler #6361
  • Document Jakarta Mail instrumentation #6485
  • Document statsd UDS config #5730

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​izeye, @​kangdaeun1022, and @​seonghyeoklee

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dev-dependencies group with 4 updates
201d9ef 
Bumps the dev-dependencies group with 4 updates: gradle-wrapper, software.amazon.awssdk:bom, [org.liquibase:liquibase-core](https://github.com/liquibase/liquibase) and [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer).


Updates `gradle-wrapper` from 9.3.1 to 9.4.0

Updates `software.amazon.awssdk:bom` from 2.42.4 to 2.42.8

Updates `org.liquibase:liquibase-core` from 5.0.1 to 5.0.2
- [Release notes](https://github.com/liquibase/liquibase/releases)
- [Changelog](https://github.com/liquibase/liquibase/blob/master/changelog.txt)
- [Commits](liquibase/liquibase@v5.0.1...v5.0.2)

Updates `io.micrometer:micrometer-core` from 1.16.3 to 1.16.4
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.16.3...v1.16.4)

---
updated-dependencies:
- dependency-name: gradle-wrapper
  dependency-version: 9.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: software.amazon.awssdk:bom
  dependency-version: 2.42.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.liquibase:liquibase-core
  dependency-version: 5.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: io.micrometer:micrometer-core
  dependency-version: 1.16.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 9, 2026
@github-actions github-actions bot merged commit 2c7644b into main Mar 9, 2026
4 checks passed
@dependabot dependabot bot deleted the dependabot/gradle/dev-dependencies-40219ba2e3 branch March 9, 2026 18:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants