Skip to content

build(deps): bump the dependencies group across 1 directory with 26 updates#3923

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/dependencies-3af5b08b18
Open

build(deps): bump the dependencies group across 1 directory with 26 updates#3923
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/dependencies-3af5b08b18

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 23, 2026

Bumps the dependencies group with 26 updates in the / directory:

Package From To
io.avaje:avaje-jsonb 3.12 3.13
io.avaje:avaje-jsonb-generator 3.12 3.13
org.thymeleaf:thymeleaf 3.1.4.RELEASE 3.1.5.RELEASE
commons-io:commons-io 2.21.0 2.22.0
io.swagger.core.v3:swagger-annotations 2.2.47 2.2.48
io.swagger.core.v3:swagger-models 2.2.47 2.2.48
io.swagger.parser.v3:swagger-parser 2.1.39 2.1.40
com.graphql-java:graphql-java 25.0 26.0
org.jetbrains.kotlin:kotlin-stdlib 2.3.20 2.3.21
org.jetbrains.kotlin:kotlin-reflect 2.3.20 2.3.21
org.jetbrains.kotlin:kotlin-maven-plugin 2.3.20 2.3.21
com.google.guava:guava 33.5.0-jre 33.6.0-jre
org.apache.maven:maven-plugin-api 3.9.14 3.9.15
org.apache.maven:maven-core 3.9.14 3.9.15
io.repaint.maven:tiles-maven-plugin 2.43 2.44
io.vertx:vertx-core 5.0.10 5.0.11
io.vertx:vertx-sql-client 5.0.10 5.0.11
io.vertx:vertx-mysql-client 5.0.10 5.0.11
io.vertx:vertx-pg-client 5.0.10 5.0.11
dev.langchain4j:langchain4j-bom 1.13.0 1.13.1
io.projectreactor:reactor-core 3.8.4 3.8.5
io.opentelemetry:opentelemetry-api 1.60.1 1.61.0
io.opentelemetry:opentelemetry-bom 1.60.1 1.61.0
software.amazon.awssdk:bom 2.42.33 2.42.39
io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha 2.26.1-alpha 2.27.0-alpha
org.jsoup:jsoup 1.22.1 1.22.2

Updates io.avaje:avaje-jsonb from 3.12 to 3.13

Release notes

Sourced from io.avaje:avaje-jsonb's releases.

3.13

What's Changed

Full Changelog: avaje/avaje-jsonb@3.12...3.13

Commits
  • 8988e99 3.13
  • b9f81ff Merge pull request #510 from avaje/dependabot/github_actions/main/dependabot/...
  • a2381ea Merge pull request #509 from avaje/dependabot/maven/main/dependencies-67ba8eda2b
  • 90ef474 [workflow]: Bump dependabot/fetch-metadata from 2 to 3
  • 7718f7d Bump the dependencies group with 4 updates
  • a92870a Fix the guides
  • 68e8ecb Fix the guides
  • e2ac69b docs: Fix guide link paths in LIBRARY.md
  • fafc2c0 docs: Add comprehensive guides for AI agents
  • c8ef38d docs: Add LIBRARY.md with comprehensive AI-friendly capability reference
  • Additional commits viewable in compare view

Updates io.avaje:avaje-jsonb-generator from 3.12 to 3.13

Updates io.avaje:avaje-jsonb-generator from 3.12 to 3.13

Updates org.thymeleaf:thymeleaf from 3.1.4.RELEASE to 3.1.5.RELEASE

Updates commons-io:commons-io from 2.21.0 to 2.22.0

Updates io.swagger.core.v3:swagger-annotations from 2.2.47 to 2.2.48

Updates io.swagger.core.v3:swagger-models from 2.2.47 to 2.2.48

Updates io.swagger.core.v3:swagger-models from 2.2.47 to 2.2.48

Updates io.swagger.parser.v3:swagger-parser from 2.1.39 to 2.1.40

Release notes

Sourced from io.swagger.parser.v3:swagger-parser's releases.

Swagger-parser 2.1.40 released!

  • Update peter-evans/create-pull-request to v8 (#2308)
  • chore: bump core version to 2.2.48 (#2306)
  • fix: ensure maxYamlCodePoints is reliably set and cleaned up in large file tests (#2305)
  • Update gh actions (#2300)
Commits

Updates com.graphql-java:graphql-java from 25.0 to 26.0

Release notes

Sourced from com.graphql-java:graphql-java's releases.

26.0

This is the 26.0 release of graphql-java. Highlights are summarized below; the full list of merged PRs is at the end.

⚠️ Breaking Changes

Query complexity limits are now enforced by default

New QueryComplexityLimits validation checks maxDepth (default 100) and maxFieldsCount (default 100,000) as part of standard validation. Queries exceeding these limits will now fail with new MaxQueryDepthExceeded / MaxQueryFieldsExceeded validation errors.

  • Set custom limits via GraphQLContext using QueryComplexityLimits.KEY.
  • Disable entirely with QueryComplexityLimits.NONE.

Introduced in #4256.

Validation rule filtering API changed

In #4228 the rule-filter predicate changed from Predicate<Class<?>> to Predicate<OperationValidationRule> in Validator.validateDocument(...) and ParseAndValidate.parseAndValidate(...). Callers that filtered by class (e.g. rule -> rule != NoUnusedFragments.class) must migrate to the enum (rule -> rule != OperationValidationRule.NO_UNUSED_FRAGMENTS). The @Internal classes AbstractRule and RulesVisitor were removed.

Built-in directive handling consolidated (#4229)

  • DirectiveInfo was removed. Replace usages:
    • DirectiveInfo.isGraphqlSpecifiedDirective(...) → Directives.isBuiltInDirective(...)
    • DirectiveInfo.GRAPHQL_SPECIFICATION_DIRECTIVES → Directives.BUILT_IN_DIRECTIVES
    • DirectiveInfo.GRAPHQL_SPECIFICATION_DIRECTIVE_MAP → Directives.BUILT_IN_DIRECTIVES_MAP
  • Directive ordering is now consistent: all 7 built-in directives appear first, followed by user-defined directives.
  • GraphQLSchema.Builder.clearDirectives() was initially removed then re-added in #4276 with new semantics — it clears all additionalDirectives, but built-in directives are always re-added automatically at build time.

OneOf inhabitability validation (#4248)

New validator rejects OneOf input types that cannot be populated with a finite value (e.g. input A @oneOf { a: A }). Schemas that previously validated may now be rejected.

Non-null field validation for code-built schemas (#4194)

Code-built schemas now perform the same deprecated-on-non-null field validation as SDL-built ones. Schemas relying on the gap may now fail validation.

GraphQLSchema.getCodeRegistry() is no longer @Nullable (#4247)

The return type was incorrectly annotated nullable. Callers may now drop redundant null checks; downstream nullness tooling will reflect the change.

JSpecify nullability annotations rolled out broadly

Waves 2 and 3 (#4184, #4274) plus many individual PRs annotated hundreds of classes across graphql.analysis, graphql.execution, graphql.language, graphql.schema and others with @NullMarked/@NullUnmarked/@Nullable. Kotlin and other null-aware callers will now see stricter nullability contracts; code that relied on previously-permissive signatures may need adjustment.

✨ New Features

  • GraphQLSchema.FastBuilder (#4197) — a more restrictive but ~5× faster schema builder that reduces both time and memory for large schemas.
  • Query complexity limits (#4256) — depth/field-count guardrails baked into validation (see breaking changes above for the enforcement side).
  • QueryAppliedDirective on operations and documents (#4297) — directives applied at the operation/document level are now exposed as QueryAppliedDirectives.
  • New instrumentation hook for post-exception-handling results (#4206, #4207) — observe the DataFetcherResult after DataFetcherExceptionHandler has mapped exceptions to errors. ChainedInstrumentation delegates the new hook correctly.
  • Generic DataFetcherResult.newBuilder(T data) (#4254) — removes the need for explicit type witnesses on the common DataFetcherResult.<T>newResult().data(x)... pattern.
  • Re-added GraphQLSchema.Builder.clearDirectives() (#4276) — useful with GraphQLSchema.transform to rewrite non-built-in directives; built-ins are always re-added.
  • toString() on AST directives holders (#4195).

⚡ Performance

  • Incremental @defer execution starts earlier (#4174) — begins processing deferred payloads as soon as the first incremental call is detected instead of waiting for the initial result to complete.
  • Validation consolidation (#4228) — all operation validation rules run in a single OperationValidator pass, significantly cutting validation overhead.

... (truncated)

Commits

Updates org.jetbrains.kotlin:kotlin-stdlib from 2.3.20 to 2.3.21

Release notes

Sourced from org.jetbrains.kotlin:kotlin-stdlib's releases.

Kotlin 2.3.21

Changelog

Backend. Wasm

  • KT-84610 [Wasm] Failed to compile klibs in IC mode

Compiler

  • KT-84566 Prevent launching Default dispatcher threads from IJ SDK in kotlin compiler
  • KT-85358 Native: roll back the workaround for KT-84678 once MapLibre has been properly fixed
  • KT-85626 @JvmRecord in commonMain breaks compileCommonMainKotlinMetadata with "Cannot access 'java.lang.Record'"
  • KT-85405 Postpone/Revert DontIgnoreUpperBoundViolatedOnImplicitArguments
  • KT-84678 K/N: Undefined symbol from SPM-added ObjC frameworks when linking iOS target
  • KT-85021 False positive SUBCLASS_CANT_CALL_COMPANION_PROTECTED_NON_STATIC error in multi-module project

JavaScript

  • KT-82395 Support top-level declarations from compiler plugins in JS incremental compilation
  • KT-84475 K/JS: false-positive exportability warnings in multi-module project
  • KT-84633 Kotlin/JS: "Serializer for class not found" error when IR output granularity is whole-program
  • KT-85047 Kotlin/JS: @JsStatic on suspend fun of class companion generates incorrect d.ts
  • KT-84517 K/JS: bad mappings data in outputted Kotlin stdlib source map

Libraries

  • KT-71848 Kotlinx.metadata: Add CompilerPluginData into Km API

Native. C and ObjC Import

  • KT-85399 Kotlin/Native: TypeCastException when casting ObjC Protocol MetaClass with genericSafeCasts enabled
  • KT-85508 K/N: TypeCastException when using nw_parameters_create_secure_tcp block parameter on 2.3.20

Tools. Gradle

  • KT-84729 Update Gradle plugin-publish version to enable configuration cache badge on Gradle plugins portal

Tools. Gradle. Compiler plugins

  • KT-85257 AGP/Compose: MergeMappingFileTask clears R8 artifacts due to @OutputDirectory annotation on AGP 9.1+

Tools. Scripts

  • KT-85105 Scripts: JVM backend internal error (IR lowering) when scratch file contains anonymous object
  • KT-85103 Exception while generating code when explain destructuring decls
  • KT-84842 scriptCompilationClasspathFromContext behavior changed from 2.3.10 to 2.3.20
  • KT-85029 Kotlin Scripting: ScriptDiagnostic reports "at null" instead of error location

Tools. Statistics (FUS)

... (truncated)

Changelog

Sourced from org.jetbrains.kotlin:kotlin-stdlib's changelog.

2.3.21

Backend. Wasm

  • KT-84610 [Wasm] Failed to compile klibs in IC mode

Compiler

  • KT-84566 Prevent launching Default dispatcher threads from IJ SDK in kotlin compiler
  • KT-85358 Native: roll back the workaround for KT-84678 once MapLibre has been properly fixed
  • KT-85626 @JvmRecord in commonMain breaks compileCommonMainKotlinMetadata with "Cannot access 'java.lang.Record'"
  • KT-85405 Postpone/Revert DontIgnoreUpperBoundViolatedOnImplicitArguments
  • KT-84678 K/N: Undefined symbol from SPM-added ObjC frameworks when linking iOS target
  • KT-85021 False positive SUBCLASS_CANT_CALL_COMPANION_PROTECTED_NON_STATIC error in multi-module project

JavaScript

  • KT-82395 Support top-level declarations from compiler plugins in JS incremental compilation
  • KT-84475 K/JS: false-positive exportability warnings in multi-module project
  • KT-84633 Kotlin/JS: "Serializer for class not found" error when IR output granularity is whole-program
  • KT-85047 Kotlin/JS: @JsStatic on suspend fun of class companion generates incorrect d.ts
  • KT-84517 K/JS: bad mappings data in outputted Kotlin stdlib source map

Libraries

  • KT-71848 Kotlinx.metadata: Add CompilerPluginData into Km API

Native. C and ObjC Import

  • KT-85399 Kotlin/Native: TypeCastException when casting ObjC Protocol MetaClass with genericSafeCasts enabled
  • KT-85508 K/N: TypeCastException when using nw_parameters_create_secure_tcp block parameter on 2.3.20

Tools. Gradle

  • KT-84729 Update Gradle plugin-publish version to enable configuration cache badge on Gradle plugins portal

Tools. Gradle. Compiler plugins

  • KT-85257 AGP/Compose: MergeMappingFileTask clears R8 artifacts due to @OutputDirectory annotation on AGP 9.1+

Tools. Scripts

  • KT-85105 Scripts: JVM backend internal error (IR lowering) when scratch file contains anonymous object
  • KT-85103 Exception while generating code when explain destructuring decls
  • KT-84842 scriptCompilationClasspathFromContext behavior changed from 2.3.10 to 2.3.20
  • KT-85029 Kotlin Scripting: ScriptDiagnostic reports "at null" instead of error location

Tools. Statistics (FUS)

  • KT-85628 KGP: composite build FUS metrics fail on access of 'configurationTimeMetrics'
Commits
  • fea1ad8 Add ChangeLog for 2.3.21-RC2
  • 09c341e disable swift export execution tests in order to update macos
  • 67a0868 Avoid accessing KotlinNativeLink taskProvider when task was not executed
  • f89e5db [K/N] Disable TSAN in runtime tests
  • 45d6c85 [K/N] Don't generate generic safe casts for Objective-C types
  • 9261a6f [K/N][tests] Add a reproducer for KT-85508
  • c9ab9db [K/N][tests] Add a reproducer for KT-85399
  • 502e844 Explain: fix for destructuring declarations
  • 0c26485 Explain: fix for object literals
  • 68a9e3f [minor] fix testdata name in explain test
  • Additional commits viewable in compare view

Updates org.jetbrains.kotlin:kotlin-reflect from 2.3.20 to 2.3.21

Release notes

Sourced from org.jetbrains.kotlin:kotlin-reflect's releases.

Kotlin 2.3.21

Changelog

Backend. Wasm

  • KT-84610 [Wasm] Failed to compile klibs in IC mode

Compiler

  • KT-84566 Prevent launching Default dispatcher threads from IJ SDK in kotlin compiler
  • KT-85358 Native: roll back the workaround for KT-84678 once MapLibre has been properly fixed
  • KT-85626 @JvmRecord in commonMain breaks compileCommonMainKotlinMetadata with "Cannot access 'java.lang.Record'"
  • KT-85405 Postpone/Revert DontIgnoreUpperBoundViolatedOnImplicitArguments
  • KT-84678 K/N: Undefined symbol from SPM-added ObjC frameworks when linking iOS target
  • KT-85021 False positive SUBCLASS_CANT_CALL_COMPANION_PROTECTED_NON_STATIC error in multi-module project

JavaScript

  • KT-82395 Support top-level declarations from compiler plugins in JS incremental compilation
  • KT-84475 K/JS: false-positive exportability warnings in multi-module project
  • KT-84633 Kotlin/JS: "Serializer for class not found" error when IR output granularity is whole-program
  • KT-85047 Kotlin/JS: @JsStatic on suspend fun of class companion generates incorrect d.ts
  • KT-84517 K/JS: bad mappings data in outputted Kotlin stdlib source map

Libraries

  • KT-71848 Kotlinx.metadata: Add CompilerPluginData into Km API

Native. C and ObjC Import

  • KT-85399 Kotlin/Native: TypeCastException when casting ObjC Protocol MetaClass with genericSafeCasts enabled
  • KT-85508 K/N: TypeCastException when using nw_parameters_create_secure_tcp block parameter on 2.3.20

Tools. Gradle

  • KT-84729 Update Gradle plugin-publish version to enable configuration cache badge on Gradle plugins portal

Tools. Gradle. Compiler plugins

  • KT-85257 AGP/Compose: MergeMappingFileTask clears R8 artifacts due to @OutputDirectory annotation on AGP 9.1+

Tools. Scripts

  • KT-85105 Scripts: JVM backend internal error (IR lowering) when scratch file contains anonymous object
  • KT-85103 Exception while generating code when explain destructuring decls
  • KT-84842 scriptCompilationClasspathFromContext behavior changed from 2.3.10 to 2.3.20
  • KT-85029 Kotlin Scripting: ScriptDiagnostic reports "at null" instead of error location

Tools. Statistics (FUS)

... (truncated)

Changelog

Sourced from org.jetbrains.kotlin:kotlin-reflect's changelog.

2.3.21

Backend. Wasm

  • KT-84610 [Wasm] Failed to compile klibs in IC mode

Compiler

  • KT-84566 Prevent launching Default dispatcher threads from IJ SDK in kotlin compiler
  • KT-85358 Native: roll back the workaround for KT-84678 once MapLibre has been properly fixed
  • KT-85626 @JvmRecord in commonMain breaks compileCommonMainKotlinMetadata with "Cannot access 'java.lang.Record'"
  • KT-85405 Postpone/Revert DontIgnoreUpperBoundViolatedOnImplicitArguments
  • KT-84678 K/N: Undefined symbol from SPM-added ObjC frameworks when linking iOS target
  • KT-85021 False positive SUBCLASS_CANT_CALL_COMPANION_PROTECTED_NON_STATIC error in multi-module project

JavaScript

  • KT-82395 Support top-level declarations from compiler plugins in JS incremental compilation
  • KT-84475 K/JS: false-positive exportability warnings in multi-module project
  • KT-84633 Kotlin/JS: "Serializer for class not found" error when IR output granularity is whole-program
  • KT-85047 Kotlin/JS: @JsStatic on suspend fun of class companion generates incorrect d.ts
  • KT-84517 K/JS: bad mappings data in outputted Kotlin stdlib source map

Libraries

  • KT-71848 Kotlinx.metadata: Add CompilerPluginData into Km API

Native. C and ObjC Import

  • KT-85399 Kotlin/Native: TypeCastException when casting ObjC Protocol MetaClass with genericSafeCasts enabled
  • KT-85508 K/N: TypeCastException when using nw_parameters_create_secure_tcp block parameter on 2.3.20

Tools. Gradle

  • KT-84729 Update Gradle plugin-publish version to enable configuration cache badge on Gradle plugins portal

Tools. Gradle. Compiler plugins

  • KT-85257 AGP/Compose: MergeMappingFileTask clears R8 artifacts due to @OutputDirectory annotation on AGP 9.1+

Tools. Scripts

  • KT-85105 Scripts: JVM backend internal error (IR lowering) when scratch file contains anonymous object
  • KT-85103 Exception while generating code when explain destructuring decls
  • KT-84842 scriptCompilationClasspathFromContext behavior changed from 2.3.10 to 2.3.20
  • KT-85029 Kotlin Scripting: ScriptDiagnostic reports "at null" instead of error location

Tools. Statistics (FUS)

  • KT-85628 KGP: composite build FUS metrics fail on access of 'configurationTimeMetrics'
Commits
  • fea1ad8 Add ChangeLog for 2.3.21-RC2
  • 09c341e disable swift export execution tests in order to update macos
  • 67a0868 Avoid accessing KotlinNativeLink taskProvider when task was not executed
  • f89e5db [K/N] Disable TSAN in runtime tests
  • 45d6c85 [K/N] Don't generate generic safe casts for Objective-C types
  • 9261a6f [K/N][tests] Add a reproducer for KT-85508
  • c9ab9db [K/N][tests] Add a reproducer for KT-85399
  • 502e844 Explain: fix for destructuring declarations
  • 0c26485 Explain: fix for object literals
  • 68a9e3f [minor] fix testdata name in explain test
  • Additional commits viewable in compare view

Updates org.jetbrains.kotlin:kotlin-maven-plugin from 2.3.20 to 2.3.21

Updates org.jetbrains.kotlin:kotlin-reflect from 2.3.20 to 2.3.21

Release notes

Sourced from org.jetbrains.kotlin:kotlin-reflect's releases.

Kotlin 2.3.21

Changelog

Backend. Wasm

  • KT-84610 [Wasm] Failed to compile klibs in IC mode

Compiler

  • KT-84566 Prevent launching Default dispatcher threads from IJ SDK in kotlin compiler
  • KT-85358 Native: roll back the workaround for KT-84678 once MapLibre has been properly fixed
  • KT-85626 @JvmRecord in commonMain breaks compileCommonMainKotlinMetadata with "Cannot access 'java.lang.Record'"
  • KT-85405 Postpone/Revert DontIgnoreUpperBoundViolatedOnImplicitArguments
  • KT-84678 K/N: Undefined symbol from SPM-added ObjC frameworks when linking iOS target
  • KT-85021 False positive SUBCLASS_CANT_CALL_COMPANION_PROTECTED_NON_STATIC error in multi-module project

JavaScript

  • KT-82395 Support top-level declarations from compiler plugins in JS incremental compilation
  • KT-84475 K/JS: false-positive exportability warnings in multi-module project
  • KT-84633 Kotlin/JS: "Serializer for class not found" error when IR output granularity is whole-program
  • KT-85047 Kotlin/JS: @JsStatic on suspend fun of class companion generates incorrect d.ts
  • KT-84517 K/JS: bad mappings data in outputted Kotlin stdlib source map

Libraries

  • KT-71848 Kotlinx.metadata: Add CompilerPluginData into Km API

Native. C and ObjC Import

  • KT-85399 Kotlin/Native: TypeCastException when casting ObjC Protocol MetaClass with genericSafeCasts enabled
  • KT-85508 K/N: TypeCastException when using nw_parameters_create_secure_tcp block parameter on 2.3.20

Tools. Gradle

  • KT-84729 Update Gradle plugin-publish version to enable configuration cache badge on Gradle plugins portal

Tools. Gradle. Compiler plugins

  • KT-85257 AGP/Compose: MergeMappingFileTask clears R8 artifacts due to @OutputDirectory annotation on AGP 9.1+

Tools. Scripts

  • KT-85105 Scripts: JVM backend internal error (IR lowering) when scratch file contains anonymous object
  • KT-85103 Exception while generating code when explain destructuring decls
  • KT-84842 scriptCompilationClasspathFromContext behavior changed from 2.3.10 to 2.3.20
  • KT-85029 Kotlin Scripting: ScriptDiagnostic reports "at null" instead of error location

Tools. Statistics (FUS)

... (truncated)

Changelog

Sourced from org.jetbrains.kotlin:kotlin-reflect's changelog.

2.3.21

Backend. Wasm

  • KT-84610 [Wasm] Failed to compile klibs in IC mode

Compiler

  • KT-84566 Prevent launching Default dispatcher threads from IJ SDK in kotlin compiler
  • KT-85358 Native: roll back the workaround for KT-84678 once MapLibre has been properly fixed
  • KT-85626 @JvmRecord in commonMain breaks compileCommonMainKotlinMetadata with "Cannot access 'java.lang.Record'"
  • KT-85405 Postpone/Revert DontIgnoreUpperBoundViolatedOnImplicitArguments
  • KT-84678 K/N: Undefined symbol from SPM-added ObjC frameworks when linking iOS target
  • KT-85021 False positive SUBCLASS_CANT_CALL_COMPANION_PROTECTED_NON_STATIC error in multi-module project

JavaScript

  • KT-82395 Support top-level declarations from compiler plugins in JS incremental compilation
  • KT-84475 K/JS: false-positive exportability warnings in multi-module project
  • KT-84633 Kotlin/JS: "Serializer for class not found" error when IR output granularity is whole-program
  • KT-85047 Kotlin/JS: @JsStatic on suspend fun of class companion generates incorrect d.ts
  • KT-84517 K/JS: bad mappings data in outputted Kotlin stdlib source map

Libraries

  • KT-71848 Kotlinx.metadata: Add CompilerPluginData into Km API

Native. C and ObjC Import

  • KT-85399 Kotlin/Native: TypeCastException when casting ObjC Protocol MetaClass with genericSafeCasts enabled
  • KT-85508 K/N: TypeCastException when using nw_parameters_create_secure_tcp block parameter on 2.3.20

Tools. Gradle

  • KT-84729 Update Gradle plugin-publish version to enable configuration cache badge on Gradle plugins portal

Tools. Gradle. Compiler plugins

  • KT-85257 AGP/Compose: MergeMappingFileTask clears R8 artifacts due to @OutputDirectory annotation on AGP 9.1+

Tools. Scripts

  • KT-85105 Scripts: JVM backend internal error (IR lowering) when scratch file contains anonymous object
  • KT-85103 Exception while generating code when explain destructuring decls
  • KT-84842 scriptCompilationClasspathFromContext behavior changed from 2.3.10 to 2.3.20
  • KT-85029 Kotlin Scripting: ScriptDiagnostic reports "at null" instead of error location

Tools. Statistics (FUS)

  • KT-85628 KGP: composite build FUS metrics fail on access of 'configurationTimeMetrics'
Commits
  • fea1ad8 Add ChangeLog for 2.3.21-RC2
  • 09c341e disable swift export execution tests in order to update macos
  • 67a0868 Avoid accessing KotlinNativeLink taskProvider when task was not executed
  • f89e5db [K/N] Disable TSAN in runtime tests
  • 45d6c85 [K/N] Don't generate generic safe casts for Objective-C types
  • 9261a6f [K/N][tests] Add a reproducer for KT-85508
  • c9ab9db [K/N][tests] Add a reproducer for KT-85399
  • 502e844 Explain: fix for destructuring declarations
  • 0c26485 Explain: fix for object literals
  • 68a9e3f [minor] fix testdata name in explain test
  • Additional commits viewable in compare view

Updates com.google.guava:guava from 33.5.0-jre to 33.6.0-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.6.0

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.6.0-jre</version>
  <!-- or, for Android: -->
  <version>33.6.0-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

  • Migrated some classes from finalize() to PhantomReference in preparation for the removal of finalization. (786b619dd6, 7c6b17c, aeef90988d)
  • cache: Deprecated CacheBuilder APIs that use TimeUnit in favor of those that use Duration. (73f8b0bb84)
  • collect: Added toImmutableSortedMap collectors that use the natural comparator. (64d70b9f94)
  • collect: Changed ConcurrentHashMultiset, ImmutableMap and TreeMultiset deserialization to avoid mutating final fields. In extremely unlikely scenarios in which an instance of that type contains an object that refers back to that instance, this could lead to a broken instance that throws NullPointerException when used. (8240c7e596, 046468055f)
  • graph: Removed @Beta from all APIs in the package. (dae9566b73)
  • graph: Added support to Graphs.transitiveClosure() for different strategies for adding self-loops. (2e13df25b2)
  • graph: Added an asNetwork() view to Graph and ValueGraph. (909c593c61)
  • hash: Added BloomFilter.serializedSize(). (df9bcc251a)
  • net: Added HttpHeaders.CDN_CACHE_CONTROL. (75331b5030)
Commits

Updates org.apache.maven:maven-plugin-api from 3.9.14 to 3.9.15

Release notes

Sourced from org.apache.maven:maven-plugin-api's releases.

3.9.15

📝 Documentation updates

📦 Dependency updates

Commits
  • 98b2cdb [maven-release-plugin] prepare release maven-3.9.15
  • 221f0b5 Use new Maven logos in documentation
  • 4329770 Bump actions/upload-artifact from 7.0.0 to 7.0.1 (#11932)
  • f341795 Bump org.codehaus.plexus:plexus-utils from 3.6.0 to 3.6.1
  • f37986d Bump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3 (#11865)
  • 9ac23b0 Bump actions/cache from 5.0.3 to 5.0.4 (#11813)
  • 3f0b263 Update README.md
  • 4b79fff document the only supported value: 4.0.0
  • 32a0564 Bump actions/download-artifact from 8.0.0 to 8.0.1 (#11790)
  • 465a93c [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates org.apache.maven:maven-core from 3.9.14 to 3.9.15

Updates org.jetbrains.kotlin:kotlin-maven-plugin from 2.3.20 to 2.3.21

Updates io.repaint.maven:tiles-maven-plugin from 2.43 to 2.44

Commits
  • 8580ced [maven-release-plugin] prepare release tiles-maven-plugin-2.44
  • f55588a Updated README
  • c13ccbb Reverted compiler to 1.8
  • 07e524c Updated actions/upload-artifact to v7
  • 3732bcb Updated actions/deploy to v5
  • 2368b34 Updated astro
  • 891c172 Updated GHA actions versions
  • cc2b0b4 Updated GHA actions
  • ed974bc Updated dependencies
  • ba2e83a Bump smol-toml from 1.6.0 to 1.6.1 in /docs
  • Additional commits viewable in compare view

Updates io.vertx:vertx-core from 5.0.10 to 5.0.11

Commits
  • 17daa03 Releasing 5.0.11
  • 7f77d1e Revert "Work around HTTP/2 decompression padding issue."
  • 3894859 Let the HTTP/2 max number of small continuation frames allowed to be configur...
  • 82b01d9 Fix HttpClientResponse body()/end() race (5.0 backport)
  • 89878bd Improve the resiliency of Vert.x Logger.
  • 4a756df Merge pull request #6061 from eclipse-vertx/service-loading-controrl-5.0
  • 4824954 Move the discovery of VerticleFactory implementations to the VertxBuilder boo...
  • b5b0d58 Let the VertxBootstrap be configured with a list of service providers to use ...
  • cf0e7f0 Avoid declaring VertxBootstrapImpl in VertxBootstrap contract
  • 242107b Set next snapshot version
  • See full diff in compare view

Updates io.vertx:vertx-sql-client from 5.0.10 to 5.0.11

Commits

Updates io.vertx:vertx-mysql-client from 5.0.10 to 5.0.11

Commits

@dependabot
build(deps): bump the dependencies group across 1 directory with 26 u…
dc348b5 
…pdates

Bumps the dependencies group with 26 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [io.avaje:avaje-jsonb](https://github.com/avaje/avaje-jsonb) | `3.12` | `3.13` |
| io.avaje:avaje-jsonb-generator | `3.12` | `3.13` |
| org.thymeleaf:thymeleaf | `3.1.4.RELEASE` | `3.1.5.RELEASE` |
| commons-io:commons-io | `2.21.0` | `2.22.0` |
| io.swagger.core.v3:swagger-annotations | `2.2.47` | `2.2.48` |
| io.swagger.core.v3:swagger-models | `2.2.47` | `2.2.48` |
| [io.swagger.parser.v3:swagger-parser](https://github.com/swagger-api/swagger-parser) | `2.1.39` | `2.1.40` |
| [com.graphql-java:graphql-java](https://github.com/graphql-java/graphql-java) | `25.0` | `26.0` |
| [org.jetbrains.kotlin:kotlin-stdlib](https://github.com/JetBrains/kotlin) | `2.3.20` | `2.3.21` |
| [org.jetbrains.kotlin:kotlin-reflect](https://github.com/JetBrains/kotlin) | `2.3.20` | `2.3.21` |
| org.jetbrains.kotlin:kotlin-maven-plugin | `2.3.20` | `2.3.21` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.5.0-jre` | `33.6.0-jre` |
| [org.apache.maven:maven-plugin-api](https://github.com/apache/maven) | `3.9.14` | `3.9.15` |
| org.apache.maven:maven-core | `3.9.14` | `3.9.15` |
| [io.repaint.maven:tiles-maven-plugin](https://github.com/repaint-io/maven-tiles) | `2.43` | `2.44` |
| [io.vertx:vertx-core](https://github.com/eclipse/vert.x) | `5.0.10` | `5.0.11` |
| [io.vertx:vertx-sql-client](https://github.com/eclipse-vertx/vertx-sql-client) | `5.0.10` | `5.0.11` |
| [io.vertx:vertx-mysql-client](https://github.com/eclipse-vertx/vertx-sql-client) | `5.0.10` | `5.0.11` |
| [io.vertx:vertx-pg-client](https://github.com/eclipse-vertx/vertx-sql-client) | `5.0.10` | `5.0.11` |
| [dev.langchain4j:langchain4j-bom](https://github.com/langchain4j/langchain4j) | `1.13.0` | `1.13.1` |
| [io.projectreactor:reactor-core](https://github.com/reactor/reactor-core) | `3.8.4` | `3.8.5` |
| [io.opentelemetry:opentelemetry-api](https://github.com/open-telemetry/opentelemetry-java) | `1.60.1` | `1.61.0` |
| [io.opentelemetry:opentelemetry-bom](https://github.com/open-telemetry/opentelemetry-java) | `1.60.1` | `1.61.0` |
| software.amazon.awssdk:bom | `2.42.33` | `2.42.39` |
| [io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha](https://github.com/open-telemetry/opentelemetry-java-instrumentation) | `2.26.1-alpha` | `2.27.0-alpha` |
| [org.jsoup:jsoup](https://github.com/jhy/jsoup) | `1.22.1` | `1.22.2` |



Updates `io.avaje:avaje-jsonb` from 3.12 to 3.13
- [Release notes](https://github.com/avaje/avaje-jsonb/releases)
- [Commits](avaje/avaje-jsonb@3.12...3.13)

Updates `io.avaje:avaje-jsonb-generator` from 3.12 to 3.13

Updates `io.avaje:avaje-jsonb-generator` from 3.12 to 3.13

Updates `org.thymeleaf:thymeleaf` from 3.1.4.RELEASE to 3.1.5.RELEASE

Updates `commons-io:commons-io` from 2.21.0 to 2.22.0

Updates `io.swagger.core.v3:swagger-annotations` from 2.2.47 to 2.2.48

Updates `io.swagger.core.v3:swagger-models` from 2.2.47 to 2.2.48

Updates `io.swagger.core.v3:swagger-models` from 2.2.47 to 2.2.48

Updates `io.swagger.parser.v3:swagger-parser` from 2.1.39 to 2.1.40
- [Release notes](https://github.com/swagger-api/swagger-parser/releases)
- [Commits](swagger-api/swagger-parser@v2.1.39...v2.1.40)

Updates `com.graphql-java:graphql-java` from 25.0 to 26.0
- [Release notes](https://github.com/graphql-java/graphql-java/releases)
- [Commits](https://github.com/graphql-java/graphql-java/commits)

Updates `org.jetbrains.kotlin:kotlin-stdlib` from 2.3.20 to 2.3.21
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.20...v2.3.21)

Updates `org.jetbrains.kotlin:kotlin-reflect` from 2.3.20 to 2.3.21
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.20...v2.3.21)

Updates `org.jetbrains.kotlin:kotlin-maven-plugin` from 2.3.20 to 2.3.21

Updates `org.jetbrains.kotlin:kotlin-reflect` from 2.3.20 to 2.3.21
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.20...v2.3.21)

Updates `com.google.guava:guava` from 33.5.0-jre to 33.6.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `org.apache.maven:maven-plugin-api` from 3.9.14 to 3.9.15
- [Release notes](https://github.com/apache/maven/releases)
- [Commits](apache/maven@maven-3.9.14...maven-3.9.15)

Updates `org.apache.maven:maven-core` from 3.9.14 to 3.9.15

Updates `org.jetbrains.kotlin:kotlin-maven-plugin` from 2.3.20 to 2.3.21

Updates `io.repaint.maven:tiles-maven-plugin` from 2.43 to 2.44
- [Release notes](https://github.com/repaint-io/maven-tiles/releases)
- [Changelog](https://github.com/repaint-io/maven-tiles/blob/master/CHANGELOG.adoc)
- [Commits](repaint-io/maven-tiles@tiles-maven-plugin-2.43...tiles-maven-plugin-2.44)

Updates `io.vertx:vertx-core` from 5.0.10 to 5.0.11
- [Commits](eclipse-vertx/vert.x@5.0.10...5.0.11)

Updates `io.vertx:vertx-sql-client` from 5.0.10 to 5.0.11
- [Commits](eclipse-vertx/vertx-sql-client@5.0.10...5.0.11)

Updates `io.vertx:vertx-mysql-client` from 5.0.10 to 5.0.11
- [Commits](eclipse-vertx/vertx-sql-client@5.0.10...5.0.11)

Updates `io.vertx:vertx-pg-client` from 5.0.10 to 5.0.11
- [Commits](eclipse-vertx/vertx-sql-client@5.0.10...5.0.11)

Updates `dev.langchain4j:langchain4j-bom` from 1.13.0 to 1.13.1
- [Release notes](https://github.com/langchain4j/langchain4j/releases)
- [Commits](langchain4j/langchain4j@1.13.0...1.13.1)

Updates `io.projectreactor:reactor-core` from 3.8.4 to 3.8.5
- [Release notes](https://github.com/reactor/reactor-core/releases)
- [Commits](reactor/reactor-core@v3.8.4...v3.8.5)

Updates `io.opentelemetry:opentelemetry-api` from 1.60.1 to 1.61.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.60.1...v1.61.0)

Updates `io.opentelemetry:opentelemetry-bom` from 1.60.1 to 1.61.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.60.1...v1.61.0)

Updates `io.vertx:vertx-sql-client` from 5.0.10 to 5.0.11
- [Commits](eclipse-vertx/vertx-sql-client@5.0.10...5.0.11)

Updates `io.vertx:vertx-mysql-client` from 5.0.10 to 5.0.11
- [Commits](eclipse-vertx/vertx-sql-client@5.0.10...5.0.11)

Updates `io.vertx:vertx-pg-client` from 5.0.10 to 5.0.11
- [Commits](eclipse-vertx/vertx-sql-client@5.0.10...5.0.11)

Updates `software.amazon.awssdk:bom` from 2.42.33 to 2.42.39

Updates `io.opentelemetry:opentelemetry-bom` from 1.60.1 to 1.61.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.60.1...v1.61.0)

Updates `io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha` from 2.26.1-alpha to 2.27.0-alpha
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-java-instrumentation/commits)

Updates `org.jsoup:jsoup` from 1.22.1 to 1.22.2
- [Release notes](https://github.com/jhy/jsoup/releases)
- [Changelog](https://github.com/jhy/jsoup/blob/master/CHANGES.md)
- [Commits](jhy/jsoup@jsoup-1.22.1...jsoup-1.22.2)

---
updated-dependencies:
- dependency-name: io.avaje:avaje-jsonb
  dependency-version: '3.13'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-jsonb-generator
  dependency-version: '3.13'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-jsonb-generator
  dependency-version: '3.13'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.thymeleaf:thymeleaf
  dependency-version: 3.1.5.RELEASE
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: commons-io:commons-io
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.swagger.core.v3:swagger-annotations
  dependency-version: 2.2.48
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.swagger.core.v3:swagger-models
  dependency-version: 2.2.48
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.swagger.core.v3:swagger-models
  dependency-version: 2.2.48
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.swagger.parser.v3:swagger-parser
  dependency-version: 2.1.40
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: com.graphql-java:graphql-java
  dependency-version: '26.0'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-stdlib
  dependency-version: 2.3.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-reflect
  dependency-version: 2.3.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-maven-plugin
  dependency-version: 2.3.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-reflect
  dependency-version: 2.3.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: com.google.guava:guava
  dependency-version: 33.6.0-jre
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.maven:maven-plugin-api
  dependency-version: 3.9.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.maven:maven-core
  dependency-version: 3.9.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-maven-plugin
  dependency-version: 2.3.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.repaint.maven:tiles-maven-plugin
  dependency-version: '2.44'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.vertx:vertx-core
  dependency-version: 5.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.vertx:vertx-sql-client
  dependency-version: 5.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.vertx:vertx-mysql-client
  dependency-version: 5.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.vertx:vertx-pg-client
  dependency-version: 5.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: dev.langchain4j:langchain4j-bom
  dependency-version: 1.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.projectreactor:reactor-core
  dependency-version: 3.8.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.opentelemetry:opentelemetry-api
  dependency-version: 1.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.opentelemetry:opentelemetry-bom
  dependency-version: 1.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.vertx:vertx-sql-client
  dependency-version: 5.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.vertx:vertx-mysql-client
  dependency-version: 5.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.vertx:vertx-pg-client
  dependency-version: 5.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: software.amazon.awssdk:bom
  dependency-version: 2.42.39
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.opentelemetry:opentelemetry-bom
  dependency-version: 1.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha
  dependency-version: 2.27.0-alpha
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.jsoup:jsoup
  dependency-version: 1.22.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Apr 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants