Skip to content

Bump the gradle-dependencies group with 6 updates#14

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/gradle-dependencies-a19e2d7b2e
Open

Bump the gradle-dependencies group with 6 updates#14
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/gradle-dependencies-a19e2d7b2e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the gradle-dependencies group with 6 updates:

Package From To
io.swagger.parser.v3:swagger-parser 2.1.22 2.1.45
io.netty:netty-bom 4.2.15.Final 4.2.16.Final
com.fasterxml.jackson:jackson-bom 2.21.5 2.22.1
org.apache.commons:commons-compress 1.26.0 1.28.0
org.apache.commons:commons-lang3 3.18.0 3.20.0
org.mozilla:rhino 1.7.14.1 1.9.1

Updates io.swagger.parser.v3:swagger-parser from 2.1.22 to 2.1.45

Release notes

Sourced from io.swagger.parser.v3:swagger-parser's releases.

Swagger-parser 2.1.45 released!

  • bump swagger-core to 2.2.52 (#2359)
  • build(deps): bump org.yaml:snakeyaml from 2.4 to 2.6 (#2355)
  • build(deps-dev): bump org.sonatype.central:central-publishing-maven-plugin from 0.7.0 to 0.11.0 (#2354)
  • build(deps): bump swagger-core-version from 2.2.50 to 2.2.51 (#2353)
  • build(deps): bump com.fasterxml.jackson.core:jackson-databind from 2.21.1 to 2.22.0 (#2352)
  • build(deps-dev): bump org.apache.maven.plugins:maven-source-plugin from 3.3.0 to 3.4.0 (#2350)
  • chore: fix syntax error in next-snapshot workflow (#2347)
  • build(deps): bump org.apache.maven.plugins:maven-jar-plugin from 3.3.0 to 3.5.0 (#2329)
  • build(deps-dev): bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.3 to 3.12.0 (#2328)

Swagger-parser 2.1.44 released!

  • fix: Replace the unsafe Yaml instantiation in ReferenceVisitor.getYam… (#2344)

Swagger-parser 2.1.43 released!

  • fix: resolve refs within external schemas (#2338)

Swagger-parser 2.1.42 released!

  • Update swagger-core to 2.2.50 (#2334)
  • fix: use explicit prefix for array items with dotted property names (#2330)
  • chore: migrate from tibdex/github-app-token to actions/create-github-app-token (#2324)
  • build(deps): bump commons-io:commons-io from 2.20.0 to 2.22.0 (#2319)
  • build(deps): bump org.apache.commons:commons-lang3 from 3.18.0 to 3.20.0 (#2318)
  • build(deps): bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.5 to 3.5.5 (#2316)

Swagger-parser 2.1.41 released!

  • Bump org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.14 (#2317)
  • chore: update v2 parser to 1.0.76 (#2314)
  • Prevent StackOverflowError in ResolverFully (#2297)
  • Fix thread-safety bug in OpenAPIDereferencer31 (#2294)
  • fix(converter): keep x-nullable in shared $ref responses (#2276)

Swagger-parser 2.1.40 released!

  • Update peter-evans/create-pull-request to v8 (#2308)
  • chore: bump core version to 2.2.48 (#2306)
  • fix: ensure maxYamlCodePoints is reliably set and cleaned up in large file tests (#2305)
  • Update gh actions (#2300)

Swagger-parser 2.1.39 released!

  • chore: bump core version to 2.2.45 (#2288)
  • fix: distinguish between default and example set to null and not set at all #2050 (#2286)
  • chore: upgrade jackson from 2.19.0 to 2.21.1 (#2285)

... (truncated)

Commits
  • 05c2b71 prepare release 2.1.45 (#2360)
  • ef9f551 bump swagger-core to 2.2.52 (#2359)
  • 75c0366 build(deps): bump swagger-core-version from 2.2.50 to 2.2.51 (#2353)
  • 3e0726b build(deps-dev): bump org.sonatype.central:central-publishing-maven-plugin (#...
  • fa0cc91 build(deps): bump org.yaml:snakeyaml from 2.4 to 2.6 (#2355)
  • a901e02 build(deps): bump com.fasterxml.jackson.core:jackson-databind (#2352)
  • 3e57896 build(deps-dev): bump org.apache.maven.plugins:maven-source-plugin (#2350)
  • 993bef6 build(deps-dev): bump org.apache.maven.plugins:maven-javadoc-plugin (#2328)
  • e7dc08c build(deps): bump org.apache.maven.plugins:maven-jar-plugin (#2329)
  • 2ce81b1 chore: fix syntax error in next-snapshot workflow (#2347)
  • Additional commits viewable in compare view

Updates io.netty:netty-bom from 4.2.15.Final to 4.2.16.Final

Release notes

Sourced from io.netty:netty-bom's releases.

netty-4.2.16.Final

What's Changed

... (truncated)

Commits
  • 3703d79 [maven-release-plugin] prepare release netty-4.2.16.Final
  • 63bbb2c Update rust toolchain - add required parameters
  • ac06c1b Update rust toolchain
  • 5b68c61 Merge branches from forks (#17063)
  • de5d276 Update lz4-java to 1.11.1 (#17061)
  • da22048 Pin github actions to reduce risk (#17043)
  • 0332676 Fix maxAllocation for brotli-encoded content in HttpContentDecompressor (#17037)
  • 7364401 Support QPACK sensitivity detector for Never Indexed header fields (#17026)
  • 06faf18 Allow WebSocket extension negotiation to be disabled per response (#17030)
  • bc4b983 Implement Adaptive Cumulator (#16731)
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson:jackson-bom from 2.21.5 to 2.22.1

Commits
  • b749a0c [maven-release-plugin] prepare release jackson-bom-2.22.1
  • 569073f Prep for 2.22.1 release
  • 87627b1 Merge branch '2.21' into 2.22
  • da540ae Post-release dep version bump
  • 5f0462e [maven-release-plugin] prepare for next development iteration
  • f6c940d Post-release dep version bump
  • 31cfc40 [maven-release-plugin] prepare for next development iteration
  • 112e859 [maven-release-plugin] prepare release jackson-bom-2.22.0
  • 2cae2ce Prep for 2.22.0 release
  • 7955d21 Merge branch '2.21' into 2.x
  • Additional commits viewable in compare view

Updates org.apache.commons:commons-compress from 1.26.0 to 1.28.0

Changelog

Sourced from org.apache.commons:commons-compress's changelog.

Apache Commons Compress 1.28.0 Release Notes

The Apache Commons Compress team is pleased to announce the release of Apache Commons Compress 1.28.0.

Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.

This is a feature and maintenance release. Java 8 or later is required.

This release updates Apache Commons Lang to 3.18.0 to pick up the fix for CVE-2025-48924 (https://nvd.nist.gov/vuln/detail/CVE-2025-48924), but is not affected by it.

Changes in this version

Changes in this version include the following.

New Features

  •        Add GzipParameters.getModificationInstant(). Thanks to Gary Gregory. 

  •        Add GzipParameters.setModificationInstant(Instant). Thanks to Gary Gregory. 

  •        Add GzipParameters.OS, setOS(OS), getOS(). Thanks to Gary Gregory. 

  •        Add GzipParameters.toString(). Thanks to Gary Gregory.
  • COMPRESS-638: Add GzipParameters.setFileNameCharset(Charset) and getFileNameCharset() to override the default ISO-8859-1 Charset #602. Thanks to vincexjl, Gary Gregory, Piotr P. Karwasz.
  •        Add support for gzip extra subfields, see GzipParameters.setExtra(HeaderExtraField) [#604](https://github.com/apache/commons-compress/issues/604). Thanks to ddeschenes-1, Gary Gregory. 

  •        Add CompressFilterOutputStream and refactor to use. Thanks to Gary Gregory. 

  •        Add ZipFile.stream(). Thanks to Gary Gregory. 

  •        GzipCompressorInputStream reads the modification time (MTIME) and stores its value incorrectly multiplied by 1,000. Thanks to Danny Deschenes, Gary Gregory. 

  •        GzipCompressorInputStream writes the modification time (MTIME) the value incorrectly divided by 1,000. Thanks to Danny Deschenes, Gary Gregory. 

  •        Add optional FHCRC to GZIP header [#627](https://github.com/apache/commons-compress/issues/627). Thanks to Danny Deschenes, Gary Gregory. 

  •        Add GzipCompressorInputStream.Builder allowing to customize the file name and comment Charsets. Thanks to Gary Gregory. 

  •        Add GzipCompressorInputStream.Builder.setOnMemberStart(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. 

  •        Add GzipCompressorInputStream.Builder.setOnMemberEnd(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. 

  •        Add PMD check to default Maven goal. Thanks to Gary Gregory. 

  •        Add SevenZFile.Builder.setMaxMemoryLimitKiB(int). Thanks to Gary Gregory. 

  •        Add MemoryLimitException.MemoryLimitException(long, int, Throwable) and deprecate MemoryLimitException.MemoryLimitException(long, int, Exception). Thanks to Gary Gregory.
  • COMPRESS-692: Add support for zstd compression in zip archives. Thanks to Mehmet Karaman, Andrey Loskutov, Gary Gregory.
  •        Add support for XZ compression in ZIP archives. Thanks to Gary Gregory.
  • COMPRESS-695: Add ZipArchiveInputStream.createZstdInputStream(InputStream) to provide a different InputStream implementation for Zstandard (Zstd) #649. Thanks to Gary Gregory.
  •        Add org.apache.commons.compress.harmony.pack200.Pack200Exception.Pack200Exception(String, Throwable). Thanks to Gary Gregory.
  • COMPRESS-697: Move BitStream.nextBit() method to BitInputStream #663. Thanks to Fredrik Kjellberg, Gary Gregory.
  •        Add org.apache.commons.compress.compressors.lzma.LZMACompressorInputStream.builder/Builder(). Thanks to Gary Gregory. 

  •        Add org.apache.commons.compress.compressors.lzma.LZMACompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. 

  •        Add org.apache.commons.compress.compressors.xz.XZCompressorInputStream.builder/Builder(). Thanks to Gary Gregory. 

  •        Add org.apache.commons.compress.compressors.xz.XZCompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. 

  •        Add org.apache.commons.compress.compressors.xz.ZstdCompressorOutputStream.builder/Builder() [#666](https://github.com/apache/commons-compress/issues/666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. 

  •        Add org.apache.commons.compress.compressors.xz.ZstdConstants [#666](https://github.com/apache/commons-compress/issues/666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz.

... (truncated)

Commits

Updates org.apache.commons:commons-lang3 from 3.18.0 to 3.20.0

Updates org.mozilla:rhino from 1.7.14.1 to 1.9.1

Release notes

Sourced from org.mozilla:rhino's releases.

Rhino 1.9.1

February 15, 2026

This release fixes a few small regressions introduced in Rhino 1.9.0.

  • Ensure that the "global" object is present, necessary for core-js to run
  • Prevent compiled methods from introducing illegal characters in their names
  • Support reserved words like "class" as names of XML attributes
  • Fix a performance regression in the RegExp engine.

Thanks to all who contributed!

Full Changelog: mozilla/rhino@Rhino1_9_0_Release...Rhino1_9_1_Release

Rhino 1.9.0

This release represents about a year of work on Rhino by a growing team of contributors.

Some of the improvements include:

  • Compatibility improvements in areas like destructuring and spread syntax.
  • Performance improvements from 10 to 30% in benchmarks like Delta Blue, Earley-Boyer, and Crypto in both interpreted and compiled mode
  • Better support for generics and other things when Java integration is used.

Some other improvements:

JavaScript Language Updates:

  • ES6+: Significant advancements in destructuring, spread syntax for arrays/objects, Symbol API, and improved let/const scoping. TypedArray.from/of and BigInt.asUintN/asIntN fixes.
  • RegExp: New features like named capture groups, lookbehind assertions, and Unicode mode support.
  • Future ES (ES2024/2025): Early implementation of proposals such as Promise.withResolvers, Promise.try, ArrayBuffer transfer methods, and new Set methods.

Core Engine Enhancements:

  • Major Refactoring: Extensive migration of built-in objects to a lambda-based architecture and a comprehensive overhaul of the interpreter bytecodes for better performance and maintainability.
  • Concurrency & Interop: Continued focus on thread safety improvements and enhanced Java interoperability, including better generics support.

Going forward -- we have lots of plans for Rhino, including some changes that may affect compatibility for projects that embed Rhino into larger frameworks. We think that these changes will be worth it because they will unlock better language compatibility and performance.

As such, the next version going forward will be 2.0.0-SNAPSHOT.

... (truncated)

Changelog

Sourced from org.mozilla:rhino's changelog.

Rhino 1.9.0

December 22, 2025

This release represents about a year of work on Rhino by a growing team of contributors.

Some of the improvements include:

  • Compatibility improvements in areas like destructuring and spread syntax.
  • Performance improvements from 10 to 30% in benchmarks like Delta Blue, Earley-Boyer, and Crypto in both interpreted and compiled mode
  • Better support for generics and other things when Java integration is used.

Some other improvements:

JavaScript Language Updates:

  • ES6+: Significant advancements in destructuring, spread syntax for arrays/objects, Symbol API, and improved let/const scoping. TypedArray.from/of and BigInt.asUintN/asIntN fixes.
  • RegExp: New features like named capture groups, lookbehind assertions, and Unicode mode support.
  • Future ES (ES2024/2025): Early implementation of proposals such as Promise.withResolvers, Promise.try, ArrayBuffer transfer methods, and new Set methods.

Core Engine Enhancements:

  • Major Refactoring: Extensive migration of built-in objects to a lambda-based architecture and a comprehensive overhaul of the interpreter bytecodes for better performance and maintainability.
  • Concurrency & Interop: Continued focus on thread safety improvements and enhanced Java interoperability, including better generics support.

Going forward -- we have lots of plans for Rhino, including some changes that may affect compatibility for projects that embed Rhino into larger frameworks. We think that these changes will be worth it because they will unlock better language compatibility and performance.

As such, the next version going forward will be 2.0.0-SNAPSHOT.

Thanks to everyone who contributed!

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the gradle-dependencies group with 6 updates
88e288f 
Bumps the gradle-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [io.swagger.parser.v3:swagger-parser](https://github.com/swagger-api/swagger-parser) | `2.1.22` | `2.1.45` |
| [io.netty:netty-bom](https://github.com/netty/netty) | `4.2.15.Final` | `4.2.16.Final` |
| [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `2.21.5` | `2.22.1` |
| [org.apache.commons:commons-compress](https://github.com/apache/commons-compress) | `1.26.0` | `1.28.0` |
| org.apache.commons:commons-lang3 | `3.18.0` | `3.20.0` |
| [org.mozilla:rhino](https://github.com/mozilla/rhino) | `1.7.14.1` | `1.9.1` |


Updates `io.swagger.parser.v3:swagger-parser` from 2.1.22 to 2.1.45
- [Release notes](https://github.com/swagger-api/swagger-parser/releases)
- [Commits](swagger-api/swagger-parser@v2.1.22...v2.1.45)

Updates `io.netty:netty-bom` from 4.2.15.Final to 4.2.16.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.15.Final...netty-4.2.16.Final)

Updates `com.fasterxml.jackson:jackson-bom` from 2.21.5 to 2.22.1
- [Commits](FasterXML/jackson-bom@jackson-bom-2.21.5...jackson-bom-2.22.1)

Updates `org.apache.commons:commons-compress` from 1.26.0 to 1.28.0
- [Changelog](https://github.com/apache/commons-compress/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-compress@rel/commons-compress-1.26.0...rel/commons-compress-1.28.0)

Updates `org.apache.commons:commons-lang3` from 3.18.0 to 3.20.0

Updates `org.mozilla:rhino` from 1.7.14.1 to 1.9.1
- [Release notes](https://github.com/mozilla/rhino/releases)
- [Changelog](https://github.com/mozilla/rhino/blob/master/RELEASE-NOTES.md)
- [Commits](https://github.com/mozilla/rhino/commits)

---
updated-dependencies:
- dependency-name: io.swagger.parser.v3:swagger-parser
  dependency-version: 2.1.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: io.netty:netty-bom
  dependency-version: 4.2.16.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-version: 2.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: org.apache.commons:commons-compress
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: org.mozilla:rhino
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jul 21, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) July 21, 2026 02:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants