Skip to content

[CORE-69]: Bump the minor-and-patch-updates group across 1 directory with 18 updates - #1114

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/minor-and-patch-updates-a078c84543
Open

[CORE-69]: Bump the minor-and-patch-updates group across 1 directory with 18 updates#1114
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/minor-and-patch-updates-a078c84543

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 10, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch-updates group with 18 updates in the / directory:

Package From To
org.sonarqube 7.0.1.6134 7.5.0.8588
org.openapi.generator 7.17.0 7.25.0
com.diffplug.spotless 8.0.0 8.10.3
com.google.guava:guava 33.5.0-jre 33.7.1-jre
io.sentry:sentry-logback 8.25.0 8.58.0
io.swagger.core.v3:swagger-annotations 2.2.40 2.2.55
com.squareup.okhttp3:okhttp 5.3.0 5.5.0
org.apache.parquet:parquet-common 1.16.0 1.18.1
org.apache.parquet:parquet-avro 1.16.0 1.18.1
org.apache.parquet:parquet-hadoop 1.16.0 1.18.1
org.apache.parquet:parquet-avro 1.16.0 1.18.1
org.apache.parquet:parquet-hadoop 1.16.0 1.18.1
org.apache.hadoop:hadoop-common 3.4.2 3.5.0
org.apache.hadoop:hadoop-mapreduce-client-core 3.4.2 3.5.0
org.apache.hadoop:hadoop-mapreduce-client-core 3.4.2 3.5.0
org.webjars.npm:swagger-ui-dist 5.32.15 5.33.0
au.com.dius.pact.provider:spring 4.6.17 4.7.5
au.com.dius.pact.consumer:junit5 4.6.17 4.7.5
com.google.cloud:google-cloud-nio 0.128.7 0.138.0
org.apache.commons:commons-configuration2 2.15.0 2.15.1
au.com.dius.pact 4.6.17 4.7.5

Updates org.sonarqube from 7.0.1.6134 to 7.5.0.8588

Updates org.openapi.generator from 7.17.0 to 7.25.0

Updates com.diffplug.spotless from 8.0.0 to 8.10.3

Release notes

Sourced from com.diffplug.spotless's releases.

Gradle Plugin v8.10.3

Changes

  • Generate formatter defaults from version catalog. (#3045)
  • Bump default gson version 2.13.2 -> 2.14.0. (#3045)
  • Bump default zjsonpatch version 0.4.14 -> 0.4.16. (#3045)
  • Bump default jackson-dataformat-yaml version 2.14.1 -> 2.20.1. (#3045)
  • Bump default ktfmt version 0.63 -> 0.64. (2988)
  • Bump default cleanthat version 2.25 -> 2.26. (#2882)
  • Bump default jackson version 2.20.1 -> 2.22.2. (#2819)
  • Bump default javaparser version 3.27.1 -> 3.28.2. (#3065)
  • Bump default palantir-java-format version 2.80.0 -> 2.98.0. (#3068)
  • Bump default scalafmt version 3.8.1 -> 3.11.5. (#2173)
  • Bump default google-java-format version 1.30.0 -> 1.36.1. (#3075)
  • Bump default gherkin-utils version 10.0.0 -> 12.0.2. (#2979)
  • We no longer publish a plugin marker for the legacy com.diffplug.gradle.spotless id, which has been redirecting to com.diffplug.spotless since 4.0. Builds that still request it now fail with Plugin [id: 'com.diffplug.gradle.spotless'] was not found instead of the migration message. (#3086)

Fixed

  • Fix release signing by using Gradle's required eight-digit signing subkey ID. (#3105)
  • Fix race when creating the npm install cache directory. ((#3096)
  • GrEclipse no longer emits expected OSGi and nested-jar warnings during initialization. (#2445)
  • typescript prettier() no longer emits a warning when its parser is already set to typescript. (#3098)
  • versionCatalog() preserves standalone comments at section boundaries and the end of the file. (#3048)
  • versionCatalog() preserves entries when comments contain unmatched brackets, preserves commas inside quoted strings, and keeps significant line boundaries in multiline entries. (#3042)
  • versionCatalog() now reports unfinished entries as lints at their starting line. These fail formatting by default, so upgrading may expose catalog errors that previously caused silent data loss. (#3042)
  • Stop calling deprecated Configuration.setVisible from Gradle 9.0.0 (#3053)
  • Eclipse JDT formatter step no longer fails with NoClassDefFoundError or NoSuchMethodError when lombok is active as a JVM agent (e.g. -javaagent:lombok.jar in Eclipse/VS Code/Cursor). (#2795)

Gradle Plugin v8.10.2

Fixed

  • shortenFullyQualifiedTypes() now shortens fully-qualified types used in expression contexts (such as static method calls, static fields, and enum constants) while avoiding imports that would change how existing unqualified type references resolve. (#3039)
  • Eclipse JDT formatter step no longer fails with NoClassDefFoundError when lombok is active as a JVM agent (e.g. -javaagent:lombok.jar in Eclipse/VS Code/Cursor). (#2795)

Gradle Plugin v8.10.1

Fixed

  • prettier() and other npm-based steps no longer fail to start on npm 12 (EUNKNOWNCONFIG from --scripts-prepend-node-path). (#3024)
  • spotlessInternalRegisterDependencies now writes its output under a build directory that is configured after the plugin is applied, instead of always under the default build/. (#2114)
  • targetExclude now accepts a Gradle Directory, DirectoryProperty, or Provider<Directory> and excludes the files under it. Previously the directory was treated as a single file, so excluding one silently did nothing. (#2667)

Gradle Plugin v8.10.0

Added

  • New shortenFullyQualifiedTypes() step for Java, which replaces fully-qualified type names with their simple names and adds the imports they need. Best combined with importOrder() and removeUnusedImports(). (#2945)
  • Add embedded lockfiles to Eclipse JDT for every supported version (4.9 through 4.40), so eclipse() resolves from Maven Central instead of querying a P2 update site. Versions without an embedded lockfile still fall back to P2 provisioning. (#1996)

Fixed

  • removeUnusedImports no longer fails on Java import module declarations. (#2890)
  • expandWildcardImports() now builds its type-solver classpath from each Java source set's compile classpath instead of every resolvable configuration. Unrelated configurations (for example generated-code or custom resolvable configs that are not ready yet) are no longer resolved. (#2998)
  • spotlessCheck violation message now suggests the correct composite/included-build task path (e.g. ./gradlew :my-utils:spotlessApply) instead of a bare spotlessApply / :spotlessApply that does not select included-build tasks. (#2421)
  • Parallel multi-project builds no longer intermittently fail with "Cannot fingerprint input property 'stepsInternalEquality': ConfigurationCacheHackList cannot be serialized" / "Failed to provision P2 dependencies" when using eclipse() (or other P2-backed steps). Subprojects now share one deduping P2 provisioner and P2 queries are serialized process-wide. (#3004)

Changes

  • Default google-java-format remains 1.28.0 on JVM 17; bumps to 1.30.0 on JVM 21+; require at least 1.30.0 on JVM 25+ for import module support.
  • Bump default eclipse version to latest 4.39 -> 4.40. (#1996)

... (truncated)

Commits
  • eae36d8 Published gradle/8.10.3
  • 61e2016 Published maven/3.10.3
  • 49e0b07 Published lib/4.10.3
  • b7a7748 Fix release signing key ID format (#3105)
  • be8005a Document release signing correction (#3105)
  • 073fe61 Use short signing subkey ID for release publishing
  • 8ac44c7 Fix race when creating the npm install cache directory (#3096)
  • 3f2d955 Update dependency org.slf4j:slf4j-api to v2.0.20 (#3100)
  • 0c70ca8 Merge branch 'main' into fix/npm-cache-directory-race
  • bbf44a4 Fix GrEclipse initialization warnings (#3097)
  • Additional commits viewable in compare view

Updates com.google.guava:guava from 33.5.0-jre to 33.7.1-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.7.1

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.1-jre</version>
  <!-- or, for Android: -->
  <version>33.7.1-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

Guava 33.7.1 removes the Multi-Release line from our jar manifest, fixing an issue under Java 9 and 10 that was introduced to guava-jre in version 33.7.0. Sorry for the trouble.

33.7.0

Newly introduced problem for Java 9 and Java 10 only

Guava 33.7.0 includes a Multi-Release line in its jar manifest, even though it is no longer a multi-release jar. This causes some problems with tools from Java 9 and Java 10. The issue is fixed in version 33.7.1. Sorry for the trouble.

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.0-jre</version>
  <!-- or, for Android: -->
</tr></table>

... (truncated)

Commits

Updates io.sentry:sentry-logback from 8.25.0 to 8.58.0

Release notes

Sourced from io.sentry:sentry-logback's releases.

8.58.0

Features

  • Add LocalSentrySpan to sentry-compose so apps can provide a parent ISpan to a composable subtree and have nested SentryTraced spans attach to it ([#6112]getsentry/sentry-java#6112)
  • Add dataCollection, a fine-grained replacement for sendDefaultPii, for controlling data collected automatically by SDK integrations. See the Data Collection documentation for Android, Java, and Spring Boot (#5759)

[!WARNING] sendDefaultPii will be removed in the next major SDK version. Migrate to dataCollection before upgrading.

Fixes

  • Disable URL caching when reading META-INF/MANIFEST.MF files during version detection so that the SDK no longer keeps jar file handles open for the life of the process (#6124
  • Keep the EventListener wrapped by SentryOkHttpEventListener per Call (#6003)

8.57.0

Behavioral Changes

  • Measure HTTP rate-limit backoff on a monotonic clock instead of the wall clock, so that a device time change no longer lifts or extends an active rate limit (#6030)

Features

  • Add Android SDK support for reporting MemoryLimiter app exits recovered from ApplicationExitInfo (#6111).
  • Sentry can now configure Log4j2 automatically for Spring Boot 4 when sentry-log4j2 is on the classpath and Log4j2 Core is the active logging backend (#5403)
    • Enable automatic appender registration with: 
      sentry.logging.enabled=true
      Automatic registration is disabled by default for now and will be enabled by default in the next major release.
    • The appender is attached to the root logger by default. To attach it to specific loggers instead, configure one or more non-overlapping logger names: 
      sentry.logging.loggers[0]=com.example
sentry.logging.loggers[1]=org.example
    • Configure the minimum level for creating breadcrumbs. The default is INFO: 
      sentry.logging.minimum-breadcrumb-level=INFO
    • Configure the minimum level for creating Sentry error events. The default is ERROR: 
      sentry.logging.minimum-event-level=ERROR
    • Configure the minimum level for sending Sentry structured logs. The default is INFO: 
      sentry.logging.minimum-level=INFO
      Structured logs must also be enabled: 
      sentry.logs.enabled=true
  • Sentry can now configure Log4j2 automatically for Spring Boot 3 when sentry-log4j2 is on the classpath and Log4j2 Core is the active logging backend (#6072)

... (truncated)

Changelog

Sourced from io.sentry:sentry-logback's changelog.

8.58.0

Features

  • Add LocalSentrySpan to sentry-compose so apps can provide a parent ISpan to a composable subtree and have nested SentryTraced spans attach to it ([#6112]getsentry/sentry-java#6112)
  • Add dataCollection, a fine-grained replacement for sendDefaultPii, for controlling data collected automatically by SDK integrations. See the Data Collection documentation for Android, Java, and Spring Boot (#5759)

[!WARNING] sendDefaultPii will be removed in the next major SDK version. Migrate to dataCollection before upgrading.

Fixes

  • Disable URL caching when reading META-INF/MANIFEST.MF files during version detection so that the SDK no longer keeps jar file handles open for the life of the process (#6124
  • Keep the EventListener wrapped by SentryOkHttpEventListener per Call (#6003)

8.57.0

Behavioral Changes

  • Measure HTTP rate-limit backoff on a monotonic clock instead of the wall clock, so that a device time change no longer lifts or extends an active rate limit (#6030)

Features

  • Add Android SDK support for reporting MemoryLimiter app exits recovered from ApplicationExitInfo (#6111).
  • Sentry can now configure Log4j2 automatically for Spring Boot 4 when sentry-log4j2 is on the classpath and Log4j2 Core is the active logging backend (#5403)
    • Enable automatic appender registration with: 
      sentry.logging.enabled=true
      Automatic registration is disabled by default for now and will be enabled by default in the next major release.
    • The appender is attached to the root logger by default. To attach it to specific loggers instead, configure one or more non-overlapping logger names: 
      sentry.logging.loggers[0]=com.example
sentry.logging.loggers[1]=org.example
    • Configure the minimum level for creating breadcrumbs. The default is INFO: 
      sentry.logging.minimum-breadcrumb-level=INFO
    • Configure the minimum level for creating Sentry error events. The default is ERROR: 
      sentry.logging.minimum-event-level=ERROR
    • Configure the minimum level for sending Sentry structured logs. The default is INFO: 
      sentry.logging.minimum-level=INFO
      Structured logs must also be enabled: 
      sentry.logs.enabled=true

... (truncated)

Commits
  • e319d59 release: 8.58.0
  • a067ff7 docs: Warn about sendDefaultPii removal (#6156)
  • 2028874 feat(core): Data Collection (#5759)
  • 386030d feat(android): Add MemoryLimiter sample (JAVA-687) (#6118)
  • 9fd9105 feat(compose): Introduce LocalSentrySpan (#6112)
  • 8f0dc10 fix(okhttp): keep the wrapped EventListener per Call (#6003)
  • 1511066 chore(deps): bump the github-actions group across 1 directory with 4 updates ...
  • 564f05e fix(core): Disable manifest URL caching when reading versions (JAVA-730) (#6124)
  • b4d1330 Merge remote-tracking branch 'remotes/origin/release/8.57.0'
  • f7b56ef release: 8.57.0
  • Additional commits viewable in compare view

Updates io.swagger.core.v3:swagger-annotations from 2.2.40 to 2.2.55

Updates com.squareup.okhttp3:okhttp from 5.3.0 to 5.5.0

Changelog

Sourced from com.squareup.okhttp3:okhttp's changelog.

Version 5.5.0

2026-08-16

This release introduces opt-in support for [Encrypted Client Hello (ECH)]. This new feature improves user privacy by encrypting domain names in transit. With regular TLS, your coffee shop’s Wi-Fi router can see that you’re visiting wikipedia.com, but it cannot see which page you’re looking at. With ECH, the router observes only the IP address. This additional privacy is most effective on sites hosted by big CDNs because the IP address doesn’t imply a particular website.

This requires ECH support in the platform’s TLS stack. Today this is only Android 17 (API 37, released June 2026). When other TLS stacks add ECH support, we'll integrate them.

ECH took a lot of work to implement because the encryption keys are published over DNS in the [HTTPS resource record], and we needed to write new code to fetch these records. This release includes a major update to OkHttp’s DNS API: it now supports multiple resource record types (not just IP addresses!), asynchronous streaming results, and in-memory caching.

To opt in, you can use DnsOverHttps:

// DnsOverHttps itself uses OkHttpClient. Build both clients upon the
// same bootstrap client so they share a connection pool and dispatcher.
val bootstrapClient = OkHttpClient()
// This sample uses Cloudflare's 1.1.1.1 DnsOverHttps service.
val client = bootstrapClient.newBuilder()
.dns(DnsOverHttps.Builder()
.client(bootstrapClient)
.url("https://1.1.1.1/dns-query&quot;.toHttpUrl())
.build())
.build()

You could also opt in with our new AndroidDns API. Unfortunately, the privacy benefits of ECH are thwarted because its DNS queries are not encrypted by default.

// AndroidDns fetches the HTTPS DNS resource records necessary for ECH.
val client = OkHttpClient.Builder()
  .dns(AndroidDns())
  .build()
  • New: OkHttp artifacts are now signed with our [new signing key]. This project and three sibling projects ([Retrofit], [Okio], and [SQLDelight]) recently joined [the Commonhaus Foundation].
  • Fix: MockWebServer’s @StartStop annotation now supports @Nested JUnit 5 tests.
  • Fix: Our default TLS hostname verifier now reject hosts that fail IP canonicalization.
  • Fix: Closing a multipart part's sink no longer closes the entire request body.
  • Fix: Flush HTTP/1 request bodies before detaching the timeout. We had a bug where timeouts

... (truncated)

Commits

Updates org.apache.parquet:parquet-common from 1.16.0 to 1.18.1

Release notes

Sourced from org.apache.parquet:parquet-common's releases.

Apache Parquet 1.18.1

  • Ensure that toByteArray returns a copy of a buffer (apache/parquet-java#3729)
  • Fix data corruption for array-backed buffers (apache/parquet-java#3717)
  • Add parameter to enable reading KMS URL from key (apache/parquet-java#3745)
  • Bump Jackson and Jackson-databind from 2.22.1 to 2.22.2.
  • Bump zstd-jni from 1.5.7-11 to 1.5.7-15.
  • Bump fastutil from 8.5.18 to 8.5.19.

Full Changelog: apache/parquet-java@apache-parquet-1.18.0...apache-parquet-1.18.1

Apache Parquet 1.18.1 RC1

Full Changelog: apache/parquet-java@apache-parquet-1.18.0...apache-parquet-1.18.1-rc1

Apache Parquet 1.18.0

What's Changed

... (truncated)

Changelog

Sourced from org.apache.parquet:parquet-common's changelog.

Parquet

From 1.14.2 onwards, the Parquet project has migrated from Jira to GitHub, and the changelogs are now published under Releases.

Version 1.14.1

Release Notes - Parquet - Version 1.14.1

Bug

  • PARQUET-2468 - ParquetMetadata.toPrettyJSON throws exception on file read when LOG.isDebugEnabled()
  • PARQUET-2498 - Hadoop vector IO API doesn't handle empty list of ranges

Version 1.14.0

Release Notes - Parquet - Version 1.14.0

Bug

  • PARQUET-2260 - Bloom filter bytes size shouldn't be larger than maxBytes size in the configuration
  • PARQUET-2266 - Fix support for files without ColumnIndexes
  • PARQUET-2276 - ParquetReader reads do not work with Hadoop version 2.8.5
  • PARQUET-2300 - Update jackson-core 2.13.4 to a version without CVE PRISMA-2023-0067
  • PARQUET-2325 - Fix parquet-cli's dictionary subcommand to work with FIXED_LEN_BYTE_ARRAY
  • PARQUET-2329 - Fix wrong help messages of parquet-cli subcommands
  • PARQUET-2330 - Fix convert-csv to show the correct position of the invalid record
  • PARQUET-2332 - Fix unexpectedly disabled tests to be executed
  • PARQUET-2336 - Add caching key to CodecFactory
  • PARQUET-2342 - Parquet writer produced a corrupted file due to page value count overflow
  • PARQUET-2343 - Fixes NPE when rewriting file with multiple rowgroups
  • PARQUET-2348 - Recompression/Re-encrypt should rewrite bloomfilter

... (truncated)

Commits
  • 7c22cdb [maven-release-plugin] prepare release apache-parquet-1.18.1-rc1
  • 4c04bf7 Prepare for next development iteration
  • 4ae9353 Bump jackson.version from 2.22.1 to 2.22.2 (#3739)
  • a3501b6 BytesInput.copy(BytesInput) should return a copy (#3729)
  • 3fd0ae7 Add parameter to enable reading KMS URL from key material (#3745)
  • afe34d8 Bump com.fasterxml.jackson.core:jackson-databind from 2.22.1 to 2.22.2 (#3740)
  • 1916eff Bump com.github.luben:zstd-jni from 1.5.7-13 to 1.5.7-15 (#3744)
  • b1b7ffc Bump com.github.luben:zstd-jni from 1.5.7-12 to 1.5.7-13 (#3725)
  • 686bb10 Bump it.unimi.dsi:fastutil from 8.5.18 to 8.5.19 (#3684)
  • 663e907 Bump com.github.luben:zstd-jni from 1.5.7-11 to 1.5.7-12 (#3704)
  • Additional commits viewable in compare view

Updates org.apache.parquet:parquet-avro from 1.16.0 to 1.18.1

Release notes

Sourced from org.apache.parquet:parquet-avro's releases.

Apache Parquet 1.18.1

  • Ensure that toByteArray returns a copy of a buffer (apache/parquet-java#3729)
  • Fix data corruption for array-backed buffers (apache/parquet-java#3717)
  • Add parameter to enable reading KMS URL from key (apache/parquet-java#3745)
  • Bump Jackson and Jackson-databind from 2.22.1 to 2.22.2.
  • Bump zstd-jni from 1.5.7-11 to 1.5.7-15.
  • Bump fastutil from 8.5.18 to 8.5.19.

Full Changelog: apache/parquet-java@apache-parquet-1.18.0...apache-parquet-1.18.1

Apache Parquet 1.18.1 RC1

Full Changelog: apache/parquet-java@apache-parquet-1.18.0...apache-parquet-1.18.1-rc1

Apache Parquet 1.18.0

What's Changed

... (truncated)

Changelog

Sourced from org.apache.parquet:parquet-avro's changelog.

Parquet

From 1.14.2 onwards, the Parquet project has migrated from Jira to GitHub, and the changelogs are now published under Releases.

Version 1.14.1

Release Notes - Parquet - Version 1.14.1

Bug

  • PARQUET-2468 - ParquetMetadata.toPrettyJSON throws exception on file read when LOG.isDebugEnabled()
  • PARQUET-2498 - Hadoop vector IO API doesn't handle empty list of ranges

Version 1.14.0

Release Notes - Parquet - Version 1.14.0

Bug

  • PARQUET-2260 - Bloom filter bytes size shouldn't be larger than maxBytes size in the configuration
  • PARQUET-2266 - Fix support for files without ColumnIndexes
  • PARQUET-2276 - ParquetReader reads do not work with Hadoop version 2.8.5
  • PARQUET-2300 - Update jackson-core 2.13.4 to a version without CVE PRISMA-2023-0067
  • PARQUET-2325 - Fix parquet-cli's dictionary subcommand to work with FIXED_LEN_BYTE_ARRAY
  • PARQUET-2329 - Fix wrong help messages of parquet-cli subcommands
  • PARQUET-2330 - Fix convert-csv to show the correct position of the invalid record
  • PARQUET-2332 - Fix unexpectedly disabled tests to be executed
  • PARQUET-2336 - Add caching key to CodecFactory
  • PARQUET-2342 - Parquet writer produced a corrupted file due to page value count overflow
  • PARQUET-2343 - Fixes NPE when rewriting file with multiple rowgroups
  • PARQUET-2348 - Recompression/Re-encrypt should rewrite bloomfilter

... (truncated)

Commits
  • 7c22cdb [maven-release-plugin] prepare release apache-parquet-1.18.1-rc1
  • 4c04bf7 Prepare for next development iteration
  • 4ae9353 Bump jackson.version from 2.22.1 to 2.22.2 (#3739)
  • a3501b6 BytesInput.copy(BytesInput) should return a copy (#3729)
  • 3fd0ae7 Add parameter to enable reading KMS URL from key material (#3745)
  • afe34d8 Bump com.fasterxml.jackson.core:jackson-databind from 2.22.1 to 2.22.2 (#3740)
  • 1916eff Bump com.github.luben:zstd-jni from 1.5.7-13 to 1.5.7-15 (#3744)
  • b1b7ffc Bump com.github.luben:zstd-jni from 1.5.7-12 to 1.5.7-13 (#3725)
  • 686bb10 Bump it.unimi.dsi:fastutil from 8.5.18 to 8.5.19 (#3684)
  • 663e907 Bump com.github.luben:zstd-jni from 1.5.7-11 to 1.5.7-12 (#3704)
  • Additional commits viewable in compare view

Updates org.apache.parquet:parquet-hadoop from 1.16.0 to 1.18.1

Release notes

Sourced from org.apache.parquet:parquet-hadoop's releases.

Apache Parquet 1.18.1

  • Ensure that toByteArray returns a copy of a buffer (apache/parquet-java#3729)
  • Fix data corruption for array-backed buffers (apache/parquet-java#3717)
  • Add parameter to enable reading KMS URL from key (apache/parquet-java#3745)
  • Bump Jackson and Jackson-databind from 2.22.1 to 2.22.2.
  • Bump zstd-jni from 1.5.7-11 to 1.5.7-15.
  • Bump fastutil from 8.5.18 to 8.5.19.

Full Changelog: https://github.com/apache/parque...

Description has been truncated

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file gradle Gradle dependency updates labels Sep 10, 2026
@dependabot
[CORE-69]: Bump the minor-and-patch-updates group across 1 directory …
cbe3099 
…with 18 updates

Bumps the minor-and-patch-updates group with 18 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| org.sonarqube | `7.0.1.6134` | `7.5.0.8588` |
| org.openapi.generator | `7.17.0` | `7.25.0` |
| [com.diffplug.spotless](https://github.com/diffplug/spotless) | `8.0.0` | `8.10.3` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.5.0-jre` | `33.7.1-jre` |
| [io.sentry:sentry-logback](https://github.com/getsentry/sentry-java) | `8.25.0` | `8.58.0` |
| io.swagger.core.v3:swagger-annotations | `2.2.40` | `2.2.55` |
| [com.squareup.okhttp3:okhttp](https://github.com/lysine-dev/okhttp) | `5.3.0` | `5.5.0` |
| [org.apache.parquet:parquet-common](https://github.com/apache/parquet-java) | `1.16.0` | `1.18.1` |
| [org.apache.parquet:parquet-avro](https://github.com/apache/parquet-java) | `1.16.0` | `1.18.1` |
| [org.apache.parquet:parquet-hadoop](https://github.com/apache/parquet-java) | `1.16.0` | `1.18.1` |
| [org.apache.parquet:parquet-avro](https://github.com/apache/parquet-java) | `1.16.0` | `1.18.1` |
| [org.apache.parquet:parquet-hadoop](https://github.com/apache/parquet-java) | `1.16.0` | `1.18.1` |
| org.apache.hadoop:hadoop-common | `3.4.2` | `3.5.0` |
| org.apache.hadoop:hadoop-mapreduce-client-core | `3.4.2` | `3.5.0` |
| org.apache.hadoop:hadoop-mapreduce-client-core | `3.4.2` | `3.5.0` |
| [org.webjars.npm:swagger-ui-dist](https://github.com/swagger-api/swagger-ui) | `5.32.15` | `5.33.0` |
| [au.com.dius.pact.provider:spring](https://github.com/pact-foundation/pact-jvm) | `4.6.17` | `4.7.5` |
| [au.com.dius.pact.consumer:junit5](https://github.com/pact-foundation/pact-jvm) | `4.6.17` | `4.7.5` |
| [com.google.cloud:google-cloud-nio](https://github.com/googleapis/google-cloud-java) | `0.128.7` | `0.138.0` |
| org.apache.commons:commons-configuration2 | `2.15.0` | `2.15.1` |
| au.com.dius.pact | `4.6.17` | `4.7.5` |



Updates `org.sonarqube` from 7.0.1.6134 to 7.5.0.8588

Updates `org.openapi.generator` from 7.17.0 to 7.25.0

Updates `com.diffplug.spotless` from 8.0.0 to 8.10.3
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@gradle/8.0.0...gradle/8.10.3)

Updates `com.google.guava:guava` from 33.5.0-jre to 33.7.1-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `io.sentry:sentry-logback` from 8.25.0 to 8.58.0
- [Release notes](https://github.com/getsentry/sentry-java/releases)
- [Changelog](https://github.com/getsentry/sentry-java/blob/main/CHANGELOG.md)
- [Commits](getsentry/sentry-java@8.25.0...8.58.0)

Updates `io.swagger.core.v3:swagger-annotations` from 2.2.40 to 2.2.55

Updates `com.squareup.okhttp3:okhttp` from 5.3.0 to 5.5.0
- [Changelog](https://github.com/lysine-dev/okhttp/blob/main/CHANGELOG.md)
- [Commits](lysine-dev/okhttp@parent-5.3.0...parent-5.5.0)

Updates `org.apache.parquet:parquet-common` from 1.16.0 to 1.18.1
- [Release notes](https://github.com/apache/parquet-java/releases)
- [Changelog](https://github.com/apache/parquet-java/blob/master/CHANGES.md)
- [Commits](apache/parquet-java@apache-parquet-1.16.0...apache-parquet-1.18.1)

Updates `org.apache.parquet:parquet-avro` from 1.16.0 to 1.18.1
- [Release notes](https://github.com/apache/parquet-java/releases)
- [Changelog](https://github.com/apache/parquet-java/blob/master/CHANGES.md)
- [Commits](apache/parquet-java@apache-parquet-1.16.0...apache-parquet-1.18.1)

Updates `org.apache.parquet:parquet-hadoop` from 1.16.0 to 1.18.1
- [Release notes](https://github.com/apache/parquet-java/releases)
- [Changelog](https://github.com/apache/parquet-java/blob/master/CHANGES.md)
- [Commits](apache/parquet-java@apache-parquet-1.16.0...apache-parquet-1.18.1)

Updates `org.apache.parquet:parquet-avro` from 1.16.0 to 1.18.1
- [Release notes](https://github.com/apache/parquet-java/releases)
- [Changelog](https://github.com/apache/parquet-java/blob/master/CHANGES.md)
- [Commits](apache/parquet-java@apache-parquet-1.16.0...apache-parquet-1.18.1)

Updates `org.apache.parquet:parquet-hadoop` from 1.16.0 to 1.18.1
- [Release notes](https://github.com/apache/parquet-java/releases)
- [Changelog](https://github.com/apache/parquet-java/blob/master/CHANGES.md)
- [Commits](apache/parquet-java@apache-parquet-1.16.0...apache-parquet-1.18.1)

Updates `org.apache.hadoop:hadoop-common` from 3.4.2 to 3.5.0

Updates `org.apache.hadoop:hadoop-mapreduce-client-core` from 3.4.2 to 3.5.0

Updates `org.apache.hadoop:hadoop-mapreduce-client-core` from 3.4.2 to 3.5.0

Updates `org.webjars.npm:swagger-ui-dist` from 5.32.15 to 5.33.0
- [Release notes](https://github.com/swagger-api/swagger-ui/releases)
- [Commits](swagger-api/swagger-ui@v5.32.15...v5.33.0)

Updates `au.com.dius.pact.provider:spring` from 4.6.17 to 4.7.5
- [Release notes](https://github.com/pact-foundation/pact-jvm/releases)
- [Changelog](https://github.com/pact-foundation/pact-jvm/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pact-foundation/pact-jvm/commits)

Updates `au.com.dius.pact.consumer:junit5` from 4.6.17 to 4.7.5
- [Release notes](https://github.com/pact-foundation/pact-jvm/releases)
- [Changelog](https://github.com/pact-foundation/pact-jvm/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pact-foundation/pact-jvm/commits)

Updates `com.google.cloud:google-cloud-nio` from 0.128.7 to 0.138.0
- [Release notes](https://github.com/googleapis/google-cloud-java/releases)
- [Changelog](https://github.com/googleapis/google-cloud-java/blob/main/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-java/commits)

Updates `org.apache.commons:commons-configuration2` from 2.15.0 to 2.15.1

Updates `au.com.dius.pact` from 4.6.17 to 4.7.5

---
updated-dependencies:
- dependency-name: au.com.dius.pact
  dependency-version: 4.7.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: au.com.dius.pact.consumer:junit5
  dependency-version: 4.7.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: au.com.dius.pact.provider:spring
  dependency-version: 4.7.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: com.diffplug.spotless
  dependency-version: 8.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: com.google.cloud:google-cloud-nio
  dependency-version: 0.137.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: com.google.guava:guava
  dependency-version: 33.7.1-jre
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: com.squareup.okhttp3:okhttp
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: io.sentry:sentry-logback
  dependency-version: 8.55.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: io.swagger.core.v3:swagger-annotations
  dependency-version: 2.2.55
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch-updates
- dependency-name: org.apache.commons:commons-configuration2
  dependency-version: 2.15.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch-updates
- dependency-name: org.apache.hadoop:hadoop-common
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: org.apache.hadoop:hadoop-mapreduce-client-core
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: org.apache.hadoop:hadoop-mapreduce-client-core
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: org.apache.parquet:parquet-avro
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: org.apache.parquet:parquet-avro
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: org.apache.parquet:parquet-common
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: org.apache.parquet:parquet-hadoop
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: org.apache.parquet:parquet-hadoop
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: org.openapi.generator
  dependency-version: 7.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: org.sonarqube
  dependency-version: 7.5.0.8588
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: org.webjars.npm:swagger-ui-dist
  dependency-version: 5.32.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/gradle/minor-and-patch-updates-a078c84543 branch from 927da59 to cbe3099 Compare October 1, 2026 17:00

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

At least 2 approving reviews are required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file gradle Gradle dependency updates

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants