build(deps): bump the gradle-deps group across 1 directory with 13 updates by dependabot[bot] · Pull Request #191 · fstaudt/helm-values

dependabot · 2025-10-01T18:02:28Z

Bumps the gradle-deps group with 13 updates in the / directory:

Package	From	To
com.gradle.plugin-publish	`1.3.1`	`2.0.0`
com.fasterxml.jackson.datatype:jackson-datatype-jsr310	`2.19.2`	`2.20.0`
io.mockk:mockk	`1.14.5`	`1.14.6`
org.yaml:snakeyaml	`2.4`	`2.5`
org.jetbrains.intellij.platform	`2.5.0`	`2.9.0`
org.apache.httpcomponents.client5:httpclient5	`5.5`	`5.5.1`
org.apache.commons:commons-compress	`1.27.1`	`1.28.0`
org.apache.commons:commons-lang3	`3.18.0`	`3.19.0`
com.fasterxml.jackson.core:jackson-databind	`2.19.2`	`2.20.0`
com.fasterxml.jackson.module:jackson-module-kotlin	`2.19.2`	`2.20.0`
com.fasterxml.jackson.dataformat:jackson-dataformat-yaml	`2.19.2`	`2.20.0`
org.junit.jupiter:junit-jupiter-api	`5.13.4`	`6.0.0`
org.assertj:assertj-core	`3.27.4`	`3.27.6`

Updates com.gradle.plugin-publish from 1.3.1 to 2.0.0

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.19.2 to 2.20.0

Updates io.mockk:mockk from 1.14.5 to 1.14.6

Release notes

Sourced from io.mockk:mockk's releases.

1.14.6

What's Changed

Fix and add clearMocks test cases by @jmatsu in mockk/mockk#1419

make captured value reference volatile by @mmimica in mockk/mockk#1418

add fail-fast guard for Kotlin inline function mocking (#1030) by @ch200203 in mockk/mockk#1421

add test reports to GitHub actions by @aSemy in mockk/mockk#994

fix duration denormalized error by @tigermint in mockk/mockk#1424

refactor: enhance confirmVerified function to include clear option by @felix-dolderer-el in mockk/mockk#1427

New Contributors

@jmatsu made their first contribution in mockk/mockk#1419

@mmimica made their first contribution in mockk/mockk#1418

@ch200203 made their first contribution in mockk/mockk#1421

@tigermint made their first contribution in mockk/mockk#1424

@felix-dolderer-el made their first contribution in mockk/mockk#1427

Full Changelog: mockk/mockk@1.14.5...1.14.6

Commits

b089459 Version bump
1688904 Merge pull request #1427 from felix-dolderer-el/master
de0ba9e docs: update README to include clear option for confirmVerified
794cd06 remove whitespaces from README
aa1f91e default: false for internalConfirmVerified
ace1da9 add KDoc explaining clear parameter for confirmVerified
6e93ff3 refactor: enhance confirmVerified function to include clear option
244af21 Fix code example and clarify that the matchers must match
50331c6 Merge pull request #1424 from tigermint/fix-duration-denormalized-error
5d8c9b2 Apply review feedback
Additional commits viewable in compare view

Updates org.yaml:snakeyaml from 2.4 to 2.5

Commits

015ab57 [maven-release-plugin] prepare for next development iteration
4795519 Update info
9c36c69 Introduce devcontainer
0c5b3e5 fix: add debug level to internal logger
a65b131 Merge branch 'master' into devcontainers
788a98b Update changes
556b4bf Add info for devcontainer
0828c39 ops: migrate deployment from OSSRH to Central Portal
30d6a3a Add a test for issue 1108
2da4c6d Remove unrelated code
Additional commits viewable in compare view

Updates org.jetbrains.intellij.platform from 2.5.0 to 2.9.0

Updates org.apache.httpcomponents.client5:httpclient5 from 5.5 to 5.5.1

Changelog

Sourced from org.apache.httpcomponents.client5:httpclient5's changelog.

Release 5.5.1

This is a maintenance release that fixes several defects in the connection management code and a regression in the DIGEST authentication reported since the previous release. It also upgrades HttpCore to version 5.3.6.

Change Log

HTTPCLIENT-2391: Improved GRACEGUL shutdown of ExecutorService used internally by async clients. Contributed by Oleg Kalnichevski

Bug fix: Use a 1 second timeout when closing out connections inside a connection pool lock. Contributed by Oleg Kalnichevski

Clarified the behavior of the protocol-level responseTimeout and the connection management level socketTimeout and their interrelation. Contributed by ChangYong

Bug fix: Connection managers to ensure open connections have a socket timeout set based on ConnectionConfig upon lease. Contributed by Oleg Kalnichevski

HTTPCLIENT-2393: Remove rspauth attribute from Authorization DIGEST header (#716) RFC 7616 compliance: rspauth is server-side (Authentication-Info 3.5) only. Contributed by Arturo Bernal

HTTPCLIENT-2386: Classic transport to use the connect timeout as a default if the TLS timeout has not been explicitly set. Contributed by Oleg Kalnichevski

HTTPCLIENT-2384: Socket options related to TcpKeepAlive are ignored. Contributed by Oleg Kalnichevski

HTTPCLIENT-2371: Logging of request re-execution at INFO priority. Contributed by Oleg Kalnichevski

HTTPCLIENT-2379: Fixed a defect in H2SharingConnPool causing an IllegalStateException when releasing the same connection from multiple threads. (#663) Contributed by Arturo Bernal abernal@apache.org

Fixed the behavior of the validateAfterInactivity connection setting by the async connection manager. Contributed by Ryan Schmitt

HTTPCLIENT-2376: Fixed the problem with ContentCompressionExec not taking acceptEncoding parameter into account.

... (truncated)

Commits

6a3d332 HttpClient 5.5.1 release
66dea80 Updated release notes for HttpClient 5.5.1 release
61f21a5 Upgraded HttpCore to version 5.3.6
694394c HTTPCLIENT-2391: improved GRACEGUL shutdown of ExecutorService used internall...
038b74f Bug fix: Use 1 second timeout when closing out connections inside a connectio...
6675520 Clarify behavior of the protocol level responseTimeout and the connection man...
cb2ccda Bug fix: connections managers to ensure open connections have socket timeout ...
4466cca HTTPCLIENT-2393 - remove rspauth from Authorization (#716)
da1a8e0 Imporved TestAsyncClient wiring; added internal methods to get the underlying...
ab40ec9 Upgraded HttpCore to version 5.3.5
Additional commits viewable in compare view

Updates org.apache.commons:commons-compress from 1.27.1 to 1.28.0

Changelog

Sourced from org.apache.commons:commons-compress's changelog.

Apache Commons Compress 1.28.0 Release Notes

The Apache Commons Compress team is pleased to announce the release of Apache Commons Compress 1.28.0.

Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.

This is a feature and maintenance release. Java 8 or later is required.

This release updates Apache Commons Lang to 3.18.0 to pick up the fix for CVE-2025-48924 (https://nvd.nist.gov/vuln/detail/CVE-2025-48924), but is not affected by it.

Changes in this version

Changes in this version include the following.

New Features

       Add GzipParameters.getModificationInstant(). Thanks to Gary Gregory.

       Add GzipParameters.setModificationInstant(Instant). Thanks to Gary Gregory.

       Add GzipParameters.OS, setOS(OS), getOS(). Thanks to Gary Gregory.

       Add GzipParameters.toString(). Thanks to Gary Gregory.

COMPRESS-638: Add GzipParameters.setFileNameCharset(Charset) and getFileNameCharset() to override the default ISO-8859-1 Charset #602. Thanks to vincexjl, Gary Gregory, Piotr P. Karwasz.

       Add support for gzip extra subfields, see GzipParameters.setExtra(HeaderExtraField) [#604](https://github.com/apache/commons-compress/issues/604). Thanks to ddeschenes-1, Gary Gregory.

       Add CompressFilterOutputStream and refactor to use. Thanks to Gary Gregory.

       Add ZipFile.stream(). Thanks to Gary Gregory.

       GzipCompressorInputStream reads the modification time (MTIME) and stores its value incorrectly multiplied by 1,000. Thanks to Danny Deschenes, Gary Gregory.

       GzipCompressorInputStream writes the modification time (MTIME) the value incorrectly divided by 1,000. Thanks to Danny Deschenes, Gary Gregory.

       Add optional FHCRC to GZIP header [#627](https://github.com/apache/commons-compress/issues/627). Thanks to Danny Deschenes, Gary Gregory.

       Add GzipCompressorInputStream.Builder allowing to customize the file name and comment Charsets. Thanks to Gary Gregory.

       Add GzipCompressorInputStream.Builder.setOnMemberStart(IOConsumer) to monitor member parsing. Thanks to Gary Gregory.

       Add GzipCompressorInputStream.Builder.setOnMemberEnd(IOConsumer) to monitor member parsing. Thanks to Gary Gregory.

       Add PMD check to default Maven goal. Thanks to Gary Gregory.

       Add SevenZFile.Builder.setMaxMemoryLimitKiB(int). Thanks to Gary Gregory.

       Add MemoryLimitException.MemoryLimitException(long, int, Throwable) and deprecate MemoryLimitException.MemoryLimitException(long, int, Exception). Thanks to Gary Gregory.

COMPRESS-692: Add support for zstd compression in zip archives. Thanks to Mehmet Karaman, Andrey Loskutov, Gary Gregory.

       Add support for XZ compression in ZIP archives. Thanks to Gary Gregory.

COMPRESS-695: Add ZipArchiveInputStream.createZstdInputStream(InputStream) to provide a different InputStream implementation for Zstandard (Zstd) #649. Thanks to Gary Gregory.

       Add org.apache.commons.compress.harmony.pack200.Pack200Exception.Pack200Exception(String, Throwable). Thanks to Gary Gregory.

COMPRESS-697: Move BitStream.nextBit() method to BitInputStream #663. Thanks to Fredrik Kjellberg, Gary Gregory.

       Add org.apache.commons.compress.compressors.lzma.LZMACompressorInputStream.builder/Builder(). Thanks to Gary Gregory.

       Add org.apache.commons.compress.compressors.lzma.LZMACompressorOutputStream.builder/Builder(). Thanks to Gary Gregory.

       Add org.apache.commons.compress.compressors.xz.XZCompressorInputStream.builder/Builder(). Thanks to Gary Gregory.

       Add org.apache.commons.compress.compressors.xz.XZCompressorOutputStream.builder/Builder(). Thanks to Gary Gregory.

       Add org.apache.commons.compress.compressors.xz.ZstdCompressorOutputStream.builder/Builder() [#666](https://github.com/apache/commons-compress/issues/666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz.

       Add org.apache.commons.compress.compressors.xz.ZstdConstants [#666](https://github.com/apache/commons-compress/issues/666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz.

... (truncated)

Commits

852d9c2 Prepare for the release candidate 1.28.0 RC1
f5eb9e2 Prepare for the next release candidate
36f204c Camel case parameter name
4c04e4a Use final
6cb7da1 Javadoc
563c9d2 Javadoc
ce73bd8 Javadoc
a464ae9 Better parameter names
c0b2b84 Add TODO for next major version
c76bc97 Use OpenVEX to document that we are not affected by CVE-2025-48924 in
Additional commits viewable in compare view

Updates org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0

Updates com.fasterxml.jackson.core:jackson-databind from 2.19.2 to 2.20.0

Commits

See full diff in compare view

Updates com.fasterxml.jackson.module:jackson-module-kotlin from 2.19.2 to 2.20.0

Commits

5684fc2 [maven-release-plugin] prepare release jackson-module-kotlin-2.20.0
4d53d9a Prep for 2.20.0
df3d719 Drop rc2 from version
03159dd Post-release version bump
3982156 [maven-release-plugin] prepare for next development iteration
295e60c [maven-release-plugin] prepare release jackson-module-kotlin-2.20.0-rc1
ddc1e5c Prep for 2.20.0-rc1
80b8371 Merge pull request #1025 from k163377/ex
50f5527 Update release notes wrt #1025
4ab4308 Fix to test that KotlinInvalidNullException is thrown
Additional commits viewable in compare view

Updates com.fasterxml.jackson.dataformat:jackson-dataformat-yaml from 2.19.2 to 2.20.0

Commits

fc3fb76 [maven-release-plugin] prepare release jackson-dataformats-text-2.20.0
c40bf7a Prep for 2.20.0
93dfc70 Bump actions/setup-java from 4.7.1 to 5.0.0 (#574)
609da3c Bump codecov/codecov-action from 5.4.3 to 5.5.0 (#575)
06413b9 Bump actions/checkout from 4.2.2 to 5.0.0 (#573)
aa3003d Drop rc2 from version
88cb341 Add deprecations wrt core/1462
519d495 Fix #497 wrt TOML too (last one) (#572)
d729b2c Fix #497 for YAML too (CSV fixed in 2.19.0) (#571)
cab1e79 Yet more tweaking for #497/YAML test
Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-api from 5.13.4 to 6.0.0

Release notes

Sourced from org.junit.jupiter:junit-jupiter-api's releases.

JUnit 6.0.0 = Platform 6.0.0 + Jupiter 6.0.0 + Vintage 6.0.0

See Release Notes.

New Contributors

@2897robo made their first contribution in junit-team/junit-framework#4525

@strangelookingnerd made their first contribution in junit-team/junit-framework#4683

@eric6iese made their first contribution in junit-team/junit-framework#4717

@raccoonback made their first contribution in junit-team/junit-framework#4822

@currenjin made their first contribution in junit-team/junit-framework#4823

@mehulimukherjee made their first contribution in junit-team/junit-framework#4913

@lslonina made their first contribution in junit-team/junit-framework#4629

Full Changelog: junit-team/junit-framework@r5.14.0...r6.0.0

JUnit 6.0.0-RC3 = Platform 6.0.0-RC3 + Jupiter 6.0.0-RC3 + Vintage 6.0.0-RC3

See Release Notes.

New Contributors

@mehulimukherjee made their first contribution in junit-team/junit-framework#4913

@lslonina made their first contribution in junit-team/junit-framework#4629

Full Changelog: junit-team/junit-framework@r6.0.0-RC2...r6.0.0-RC3

JUnit 6.0.0-RC2 = Platform 6.0.0-RC2 + Jupiter 6.0.0-RC2 + Vintage 6.0.0-RC2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0-RC1...r6.0.0-RC2

JUnit 6.0.0-RC1 = Platform 6.0.0-RC1 + Jupiter 6.0.0-RC1 + Vintage 6.0.0-RC1

See Release Notes.

New Contributors

@raccoonback made their first contribution in junit-team/junit-framework#4822

@currenjin made their first contribution in junit-team/junit-framework#4823

Full Changelog: junit-team/junit-framework@r6.0.0-M2...r6.0.0-RC1

JUnit 6.0.0-M2 = Platform 6.0.0-M2 + Jupiter 6.0.0-M2 + Vintage 6.0.0-M2

See Release Notes.

New Contributors

@eric6iese made their first contribution in junit-team/junit-framework#4717

Full Changelog: junit-team/junit-framework@r6.0.0-M1...r6.0.0-M2

... (truncated)

Commits

4f79594 Release 6.0.0
55af30a Revert "Use develop/6.x branch for junit-examples during release build"
df3cfdd Release 5.14.0
fcb84a2 Disable backward compatibility check when offline
c9c8344 Prune 5.14.0 release notes
03d8a72 Update broken link to using API Gaurdian with bndtools
3a0b29b Use temporary JUnit 6 logo
6603caa Rename eclipseClasspath to eclipseConventions to avoid confusion
ab3470b Make sealed MediaType work in Eclipse
a8cd41e Remove annotations not visible in Eclipse
Additional commits viewable in compare view

Updates org.assertj:assertj-core from 3.27.4 to 3.27.6

Release notes

Sourced from org.assertj:assertj-core's releases.

v3.27.6

🐛 Bug Fixes

Core

Add missing export for org.assertj.core.annotation #3951

❤️ Contributors

Thanks to all the contributors who worked on this release:

@duponter

v3.27.5

⚡ Improvements

Core

ByteBuddy in AssertJ 3.27.4 not compatible with Java 25 #3946

🔨 Dependency Upgrades

Core

Upgrade to Byte Buddy 1.17.7 #3947

Upgrade to JUnit BOM 5.13.4 #3947

Guava

Upgrade to Guava 33.4.8-jre #3947

Commits

716b1e0 [maven-release-plugin] prepare release assertj-build-3.27.6
e189652 Add missing export for org.assertj.core.annotation (#3951)
0cb489e Update Maven Central URL
7286309 [maven-release-plugin] prepare for next development iteration
dd4cc1d [maven-release-plugin] prepare release assertj-build-3.27.5
1d0defc Add missing permission to release workflow
844d5d0 Add missing GitHub Actions pinning to CodeQL workflow
bdd7106 Add CodeQL custom workflow
a93d7e6 Remove EOL Java 24
26ea866 Update production dependencies (#3947)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates Bumps the gradle-deps group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | com.gradle.plugin-publish | `1.3.1` | `2.0.0` | | com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.19.2` | `2.20.0` | | [io.mockk:mockk](https://github.com/mockk/mockk) | `1.14.5` | `1.14.6` | | [org.yaml:snakeyaml](https://bitbucket.org/snakeyaml/snakeyaml) | `2.4` | `2.5` | | org.jetbrains.intellij.platform | `2.5.0` | `2.9.0` | | [org.apache.httpcomponents.client5:httpclient5](https://github.com/apache/httpcomponents-client) | `5.5` | `5.5.1` | | [org.apache.commons:commons-compress](https://github.com/apache/commons-compress) | `1.27.1` | `1.28.0` | | org.apache.commons:commons-lang3 | `3.18.0` | `3.19.0` | | [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.19.2` | `2.20.0` | | [com.fasterxml.jackson.module:jackson-module-kotlin](https://github.com/FasterXML/jackson-module-kotlin) | `2.19.2` | `2.20.0` | | [com.fasterxml.jackson.dataformat:jackson-dataformat-yaml](https://github.com/FasterXML/jackson-dataformats-text) | `2.19.2` | `2.20.0` | | [org.junit.jupiter:junit-jupiter-api](https://github.com/junit-team/junit-framework) | `5.13.4` | `6.0.0` | | [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.27.4` | `3.27.6` | Updates `com.gradle.plugin-publish` from 1.3.1 to 2.0.0 Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.19.2 to 2.20.0 Updates `io.mockk:mockk` from 1.14.5 to 1.14.6 - [Release notes](https://github.com/mockk/mockk/releases) - [Commits](mockk/mockk@1.14.5...1.14.6) Updates `org.yaml:snakeyaml` from 2.4 to 2.5 - [Commits](https://bitbucket.org/snakeyaml/snakeyaml/branches/compare/snakeyaml-2.5..snakeyaml-2.4) Updates `org.jetbrains.intellij.platform` from 2.5.0 to 2.9.0 Updates `org.apache.httpcomponents.client5:httpclient5` from 5.5 to 5.5.1 - [Changelog](https://github.com/apache/httpcomponents-client/blob/rel/v5.5.1/RELEASE_NOTES.txt) - [Commits](apache/httpcomponents-client@rel/v5.5...rel/v5.5.1) Updates `org.apache.commons:commons-compress` from 1.27.1 to 1.28.0 - [Changelog](https://github.com/apache/commons-compress/blob/master/RELEASE-NOTES.txt) - [Commits](apache/commons-compress@rel/commons-compress-1.27.1...rel/commons-compress-1.28.0) Updates `org.apache.commons:commons-lang3` from 3.18.0 to 3.19.0 Updates `com.fasterxml.jackson.core:jackson-databind` from 2.19.2 to 2.20.0 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.module:jackson-module-kotlin` from 2.19.2 to 2.20.0 - [Commits](FasterXML/jackson-module-kotlin@jackson-module-kotlin-2.19.2...jackson-module-kotlin-2.20.0) Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-yaml` from 2.19.2 to 2.20.0 - [Commits](FasterXML/jackson-dataformats-text@jackson-dataformats-text-2.19.2...jackson-dataformats-text-2.20.0) Updates `org.junit.jupiter:junit-jupiter-api` from 5.13.4 to 6.0.0 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r5.13.4...r6.0.0) Updates `org.assertj:assertj-core` from 3.27.4 to 3.27.6 - [Release notes](https://github.com/assertj/assertj/releases) - [Commits](assertj/assertj@assertj-build-3.27.4...assertj-build-3.27.6) --- updated-dependencies: - dependency-name: com.gradle.plugin-publish dependency-version: 2.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: gradle-deps - dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310 dependency-version: 2.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-deps - dependency-name: io.mockk:mockk dependency-version: 1.14.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-deps - dependency-name: org.yaml:snakeyaml dependency-version: '2.5' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-deps - dependency-name: org.jetbrains.intellij.platform dependency-version: 2.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-deps - dependency-name: org.apache.httpcomponents.client5:httpclient5 dependency-version: 5.5.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-deps - dependency-name: org.apache.commons:commons-compress dependency-version: 1.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-deps - dependency-name: org.apache.commons:commons-lang3 dependency-version: 3.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-deps - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-deps - dependency-name: com.fasterxml.jackson.module:jackson-module-kotlin dependency-version: 2.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-deps - dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-yaml dependency-version: 2.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-deps - dependency-name: org.junit.jupiter:junit-jupiter-api dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: gradle-deps - dependency-name: org.assertj:assertj-core dependency-version: 3.27.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-deps ... Signed-off-by: dependabot[bot] <support@github.com>

* Initial plan * Initial plan for fixing build pipeline issues Co-authored-by: fstaudt <30255959+fstaudt@users.noreply.github.com> * Revert IntelliJ Platform Gradle Plugin to version 2.5.0 The dependency update bumped the plugin from 2.5.0 to 2.9.0, which introduced dependency resolution issues. Reverting to 2.5.0 to fix the build pipeline. Other dependency updates from the original commit are retained. Co-authored-by: fstaudt <30255959+fstaudt@users.noreply.github.com> * Fix test failures by reverting incompatible dependency updates Reverted the following dependencies due to test failures: - org.apache.commons:commons-compress from 1.28.0 back to 1.27.1 (breaking change) - org.junit.jupiter:junit-jupiter-api from 6.0.0 back to 5.13.4 (incompatible major version) Apache Commons Compress 1.28.0 introduced a breaking change that causes tar.gz archive extraction to fail in tests. JUnit Jupiter 6.0.0 is a brand new major release (released Sept 30, 2025) that may have compatibility issues. All other dependency updates from the bulk update are retained. Co-authored-by: fstaudt <30255959+fstaudt@users.noreply.github.com> * Restore JUnit Jupiter 6.0.0 upgrade JUnit Jupiter 6.0.0 does not cause any actual compatibility issues. The test failures were solely caused by Apache Commons Compress 1.28.0. All tests pass successfully with JUnit Jupiter 6.0.0 when Apache Commons Compress is at version 1.27.1. Co-authored-by: fstaudt <30255959+fstaudt@users.noreply.github.com> * Configure Dependabot to ignore commons-compress updates Added ignore configuration for org.apache.commons:commons-compress to prevent automatic updates to versions 1.28.0 and higher, which introduced breaking changes in tar.gz extraction. Patch updates will still be allowed. The IntelliJ Platform plugin remains eligible for automatic updates. Co-authored-by: fstaudt <30255959+fstaudt@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: fstaudt <30255959+fstaudt@users.noreply.github.com>

dependabot bot assigned fstaudt Oct 1, 2025

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 1, 2025

fstaudt merged commit c73cda9 into main Oct 29, 2025
4 checks passed

fstaudt deleted the dependabot/gradle/gradle-deps-fc68584108 branch October 29, 2025 11:56

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the gradle-deps group across 1 directory with 13 updates#191

build(deps): bump the gradle-deps group across 1 directory with 13 updates#191
fstaudt merged 2 commits intomainfrom
dependabot/gradle/gradle-deps-fc68584108

dependabot bot commented on behalf of github Oct 1, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot bot commented on behalf of github Oct 1, 2025

1.14.6

What's Changed

New Contributors

Release 5.5.1

Change Log

Apache Commons Compress 1.28.0 Release Notes

Changes in this version

New Features

New Contributors

New Contributors

New Contributors

New Contributors

v3.27.6

🐛 Bug Fixes

Core

❤️ Contributors

v3.27.5

⚡ Improvements

Core

🔨 Dependency Upgrades

Core

Guava

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants