Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 22, 2025

Bumps the test group with 3 updates in the / directory: net.bytebuddy:byte-buddy, org.apache.httpcomponents.core5:httpcore5 and org.mockito:mockito-junit-jupiter.

Updates net.bytebuddy:byte-buddy from 1.18.2 to 1.18.3

Release notes

Sourced from net.bytebuddy:byte-buddy's releases.

Byte Buddy 1.18.3

  • Avoid using Class File API when Byte Buddy is loaded on the boot loader where multi-release jars are not available.
  • Add additional safety when processing class files with illegally formed parameters.
  • Update to latest ASM.
Changelog

Sourced from net.bytebuddy:byte-buddy's changelog.

26. November 2025: version 1.18.3

  • Avoid using Class File API when Byte Buddy is loaded on the boot loader where multi-release jars are not available.
  • Add additional safety when processing class files with illegally formed parameters.
  • Update to latest ASM.
Commits
  • 6f358c8 [maven-release-plugin] prepare release byte-buddy-1.18.3
  • 57df2c7 [release] Release new version.
  • 1111a18 [release] Release new version.
  • 6698c45 [release] Release new version
  • 04a89c6 Avoid using class file API when loaded on the boot path as multi release jar ...
  • ba05f0d Remove unused import.
  • ec50316 Adds safety for illegally compiled parameters.
  • e720b5e Update README.md
  • a966b04 Update README.md
  • dfa50ad Update release notes and internal Byte Buddy.
  • Additional commits viewable in compare view

Updates org.apache.httpcomponents.core5:httpcore5 from 5.3.6 to 5.4

Changelog

Sourced from org.apache.httpcomponents.core5:httpcore5's changelog.

Release 5.4-alpha1

This is the first ALPHA release in the 5.4 release series that improves HTTP/2 protocol support by ensuring conformance to the latest HTTP specification (RFC 9113) and adds support for Unix domain sockets.

This release also includes all the fixes from the stable 5.3 branch.

Notable changes and features included in the 5.4 series:

  • Experimental OFFLOCK (lock-free) connection pool.

  • Conformance to RFC 9218 (Extensible Prioritization Scheme for HTTP).

  • Improved conformance to RFC 9113 (Hypertext Transfer Protocol Version 2).

  • Five-second TCP keep-alive enabled by default.

  • Unix domain socket support by the classic and async transports.

  • Redesign of classic over async API bridge.

  • Improved URI encoding per RFC 3986.

  • QUERY method support.

Change Log

  • Experimental RouteSegmentedConnPool (OFFLOCK): lock-free, route-segmented, disposal off critical path. Contributed by Arturo Bernal

  • Configurable AuthorityResolver for async server bootstraps. Contributed by Christian de Waal

  • RFC 9218 HTTP/2 Priority support (#552). Contributed by Arturo Bernal

  • Stale connection check for the async protocol handlers. Contributed by Ryan Schmitt

  • Corrected JavaDoc for HttpConnection#close to reference correct CloseMode mode (#561). Contributed by Arturo Bernal

  • HTTPCORE-785: Improved Javadocs of TlsStrategy implementations. Contributed by Oleg Kalnichevski

... (truncated)

Commits
  • 0ca2dde HttpCore 5.4 release
  • 5a3e465 Updated release notes for HttpCore 5.4 release
  • 69a7663 Fix validation of 0/8 IPv4 addresses
  • a70a62c Route-segmented pool: fix timeout race; add direct hand-off; enforce TTL on l...
  • b3fc3f3 Ensure connection is closed immediately upon socket timeout
  • 729e2a8 H2 Priority example clean-up
  • 4e640ff Accept leading zeros in IPv4-mapped IPv6 (#568)
  • 030f51f Upgraded HttpCore version to 5.4-alpha2-SNAPSHOT
  • 9be094e HttpCore 5.4-alpha1 release
  • dfb42f4 Javadoc fix
  • Additional commits viewable in compare view

Updates org.mockito:mockito-junit-jupiter from 5.20.0 to 5.21.0

Release notes

Sourced from org.mockito:mockito-junit-jupiter's releases.

v5.21.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.21.0

Commits
  • 09d2230 Bump graalvm/setup-graalvm from 1.4.3 to 1.4.4 (#3768)
  • df3e0cc Bump graalvm/setup-graalvm from 1.4.2 to 1.4.3 (#3767)
  • 04a6e9f Bump actions/checkout from 5 to 6 (#3765)
  • 756a3cf Add description of matchers to potential mismatch (#3760)
  • 58ba445 Forbid mocking WeakReference with inline mock maker (#3759)
  • 966d600 Bump actions/upload-artifact from 4 to 5 (#3756)
  • 632bf7b Bump graalvm/setup-graalvm from 1.4.1 to 1.4.2 (#3755)
  • 8564b43 Fix primitives support in GenericArrayReturnType for Android (#3753)
  • bf3a809 Bump graalvm/setup-graalvm from 1.4.0 to 1.4.1 (#3744)
  • cffddd4 Bump gradle/actions from 4 to 5 (#3743)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the test group with 3 updates in the / directory: [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy), [org.apache.httpcomponents.core5:httpcore5](https://github.com/apache/httpcomponents-core) and [org.mockito:mockito-junit-jupiter](https://github.com/mockito/mockito).


Updates `net.bytebuddy:byte-buddy` from 1.18.2 to 1.18.3
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.18.2...byte-buddy-1.18.3)

Updates `org.apache.httpcomponents.core5:httpcore5` from 5.3.6 to 5.4
- [Changelog](https://github.com/apache/httpcomponents-core/blob/master/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-core@rel/v5.3.6...rel/v5.4)

Updates `org.mockito:mockito-junit-jupiter` from 5.20.0 to 5.21.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.20.0...v5.21.0)

---
updated-dependencies:
- dependency-name: net.bytebuddy:byte-buddy
  dependency-version: 1.18.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: test
- dependency-name: org.apache.httpcomponents.core5:httpcore5
  dependency-version: '5.4'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: test
- dependency-name: org.mockito:mockito-junit-jupiter
  dependency-version: 5.21.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: test
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Dec 22, 2025
@bot-sdk-js bot-sdk-js enabled auto-merge (squash) December 23, 2025 10:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants