Skip to content

build(deps): bump the gradle-all group across 1 directory with 5 updates - #47

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/gradle-all-4eff15a3a1
Open

build(deps): bump the gradle-all group across 1 directory with 5 updates#47
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/gradle-all-4eff15a3a1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the gradle-all group with 5 updates in the / directory:

Package From To
com.gradleup.shadow 9.4.2 9.6.1
com.hypixel.hytale:Server 0.6.0-pre.4 0.6.0-pre.13.1
org.mongodb:mongodb-driver-sync 5.8.0 5.10.0
org.junit.jupiter:junit-jupiter 6.1.0 6.1.3
gradle-wrapper 9.6.0 9.7.1

Updates com.gradleup.shadow from 9.4.2 to 9.6.1

Release notes

Sourced from com.gradleup.shadow's releases.

9.6.1

Changed

  • Use GradleException for expected build failures. (#2113)

Fixed

  • Preserve repeated lines in R8 rule files when using minimize { r8 { ... } }. (#2115)

9.6.0

Added

  • Extract R8 rules from dependency JARs when using minimize { r8 { ... } }. (#2089)

Changed

  • Rename ShadowDslMarker to ShadowDsl. (#2091)
  • POTENTIALLY BREAKING: Apply @ShadowDsl to ShadowJar, ResourceTransformer, DependencyFilter, and Relocator. (#2090)
    This restricts nested DSL configuration blocks from implicitly calling outer receiver APIs in Kotlin script files.

Fixed

  • Validate ZIP entry names to prevent Zip Slip path traversal.
  • Avoid resolving unused R8 dependency. (#2101)

9.5.1

Fixed

  • Fix eager calls for toolchainSpec in Kotlin DSL. (#2087)

9.5.0

[!NOTE] With the introduction of DuplicatesStrategy checking for transformers, you may see warnings like:

'META-INF/...kotlin_module' is matched by com.github.jengelman.gradle.plugins.shadow.transformers.KotlinModuleMetadataTransformer but its DuplicatesStrategy is EXCLUDE — duplicates may be silently dropped before the transformer processes them.

If you do not need Kotlin module metadata remapping, you can disable it:

tasks.shadowJar {
  @Suppress("DEPRECATION") // This flag will be disabled and removed in the next major version of Shadow.
  enableKotlinModuleRemapping = false
}

Added

... (truncated)

Changelog

Sourced from com.gradleup.shadow's changelog.

9.6.1 - 2026-07-22

Changed

  • Use GradleException for expected build failures. (#2113)

Fixed

  • Preserve repeated lines in R8 rule files when using minimize { r8 { ... } }. (#2115)

9.6.0 - 2026-07-16

Added

  • Extract R8 rules from dependency JARs when using minimize { r8 { ... } }. (#2089)

Changed

  • Rename ShadowDslMarker to ShadowDsl. (#2091)
  • POTENTIALLY BREAKING: Apply @ShadowDsl to ShadowJar, ResourceTransformer, DependencyFilter, and Relocator. (#2090)
    This restricts nested DSL configuration blocks from implicitly calling outer receiver APIs in Kotlin script files.

Fixed

  • Validate ZIP entry names to prevent Zip Slip path traversal.
  • Avoid resolving unused R8 dependency. (#2101)

9.5.1 - 2026-07-06

Fixed

  • Fix eager calls for toolchainSpec in Kotlin DSL. (#2087)

9.5.0 - 2026-07-06

!!! note

With the introduction of `DuplicatesStrategy` checking for transformers, you may see warnings like:
'META-INF/...kotlin_module' is matched by com.github.jengelman.gradle.plugins.shadow.transformers.KotlinModuleMetadataTransformer but its DuplicatesStrategy is EXCLUDE — duplicates may be silently dropped before the transformer processes them.

If you do not need Kotlin module metadata remapping, you can disable it:

tasks.shadowJar {
  @Suppress("DEPRECATION") // This flag will be disabled and removed in the next major version of Shadow.
  enableKotlinModuleRemapping = false
}
</code></pre>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>

<ul>
<li><a href="https://github.com/GradleUp/shadow/commit/185da5db091a35bc593d3ea101f6a2f6ddbb7aa8&quot;&gt;&lt;code&gt;185da5d&lt;/code&gt;&lt;/a> Prepare version 9.6.1</li>
<li><a href="https://github.com/GradleUp/shadow/commit/b309bc549f1e0020771c03c6d5c3a600bd68cb89&quot;&gt;&lt;code&gt;b309bc5&lt;/code&gt;&lt;/a> Extract addIncludedDependencies (<a href="https://redirect.github.com/GradleUp/shadow/issues/2116&quot;&gt;#2116&lt;/a&gt;)&lt;/li>
<li><a href="https://github.com/GradleUp/shadow/commit/46b35448b867f3d4cff97df11be7ea9b53a7d90f&quot;&gt;&lt;code&gt;46b3544&lt;/code&gt;&lt;/a> Preserve repeated lines in R8 rule files (<a href="https://redirect.github.com/GradleUp/shadow/issues/2115&quot;&gt;#2115&lt;/a&gt;)&lt;/li>
<li><a href="https://github.com/GradleUp/shadow/commit/c0d4f0d6745891ffdd5ceec1f1424450e3bbb2c3&quot;&gt;&lt;code&gt;c0d4f0d&lt;/code&gt;&lt;/a> Revert &quot;Reland Tapmoc (<a href="https://redirect.github.com/GradleUp/shadow/issues/2111&quot;&gt;#2111&lt;/a&gt;)&amp;quot;&lt;/li>
<li><a href="https://github.com/GradleUp/shadow/commit/ff1809f351e567133f2a17b655127f484893c009&quot;&gt;&lt;code&gt;ff1809f&lt;/code&gt;&lt;/a> Use GradleException for expected build failures (<a href="https://redirect.github.com/GradleUp/shadow/issues/2113&quot;&gt;#2113&lt;/a&gt;)&lt;/li>
<li><a href="https://github.com/GradleUp/shadow/commit/dc0ee64128cae4f287f0aa2c79e2b11e8d8017a6&quot;&gt;&lt;code&gt;dc0ee64&lt;/code&gt;&lt;/a> Update plugin tapmoc to v0.4.2 (<a href="https://redirect.github.com/GradleUp/shadow/issues/2112&quot;&gt;#2112&lt;/a&gt;)&lt;/li>
<li><a href="https://github.com/GradleUp/shadow/commit/398afcde1cbe50b86fa71b678f09f79d8ca133ab&quot;&gt;&lt;code&gt;398afcd&lt;/code&gt;&lt;/a> Reland Tapmoc (<a href="https://redirect.github.com/GradleUp/shadow/issues/2111&quot;&gt;#2111&lt;/a&gt;)&lt;/li>
<li><a href="https://github.com/GradleUp/shadow/commit/3ca69d5a403d5a761e6b03f1a3d60ad11ecf463a&quot;&gt;&lt;code&gt;3ca69d5&lt;/code&gt;&lt;/a> Gradle 9.7.0-rc-1 (<a href="https://redirect.github.com/GradleUp/shadow/issues/2110&quot;&gt;#2110&lt;/a&gt;)&lt;/li>
<li><a href="https://github.com/GradleUp/shadow/commit/aaaacd230d76790a49443430863878c133feeab0&quot;&gt;&lt;code&gt;aaaacd2&lt;/code&gt;&lt;/a> Prepare next development version</li>
<li><a href="https://github.com/GradleUp/shadow/commit/fb3666804bd6ca643dd4a2df0d607fcfaf5b1e66&quot;&gt;&lt;code&gt;fb36668&lt;/code&gt;&lt;/a> Prepare version 9.6.0</li>
<li>Additional commits viewable in <a href="https://github.com/GradleUp/shadow/compare/9.4.2...9.6.1&quot;&gt;compare view</a></li>
</ul>
</details>

<br />

Updates com.hypixel.hytale:Server from 0.6.0-pre.4 to 0.6.0-pre.13.1

Updates org.mongodb:mongodb-driver-sync from 5.8.0 to 5.10.0

Release notes

Sourced from org.mongodb:mongodb-driver-sync's releases.

Java Driver 5.10.0 (August 14, 2026)

What's Changed

  • Added $scoreFusion hybrid search stage for combining and normalizing the scores of multiple search pipelines (MongoDB 8.2+) #2024 by @​nhachicha
  • Added a fluent builder API for the $score aggregation stage, with normalization, weighting, and score details (MongoDB 8.2+) #2023 by @​strogiyotec
  • Added $vectorSearch support for nested embeddings and arrays of embeddings via parentFilter and nestedOptions #2026 by @​rozza
  • Removed stale @Beta from SearchOptions and VectorSearchOptions in the Java and Scala drivers #2026 by @​rozza
  • Encoded Kotlin ByteArray data class fields as BSON Binary, and added an opt-in ByteArray BSON Binary serializer for bson-kotlinx #2019 by @​rozza
  • Included the fix for CVE-2026-18710 / JAVA-6266, where ProxySettings.toString() rendered the SOCKS5 proxy username and password into application logs. First shipped in 5.9.2 #2035 by @​strogiyotec
  • ByteArray fields in Kotlin data classes are once again encoded as BSON Binary rather than a BSON array of int32, restoring the behavior from before 5.1.3. Decoding accepts both forms, so documents written by 5.1.3–5.9.x still read back correctly, but newly written documents change BSON type. Review any non-driver consumers of those fields before upgrading. See JAVA-6224

Verifying artifact signatures

Please refer to https://www.mongodb.com/docs/drivers/java/sync/current/security/validate-signatures/ for the full procedure.

To download and import the public key for verifying signatures, execute

gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 1a75005e142192223d6a7c3b76e0008d166740a8

Full Changelog: https://github.com/mongodb/mongo-java-driver/compare/r5.9.0...r5.10.0

Java Driver 5.9.2 (August 11, 2026)

What's Changed

[!WARNING] Starting from driver version 4.11.0, ProxySettings.toString() included the SOCKS5 proxy username and password in application logs.

See JAVA-6266 / CVE-2026-18710

The username and password are no longer included in toString() starting in this release.

If you cannot upgrade, set the org.mongodb.driver.client logger to WARN or higher to suppress the client-construction message. We do not recommend this as a long-term measure: it silences diagnostic information that is valuable for support, and it does not remove credentials already written to existing logs.

Full Changelog: https://github.com/mongodb/mongo-java-driver/compare/r5.9.1...r5.9.2

Java Driver 5.9.1 (July 23, 2026)

What's Changed

Verifying artifact signatures

Please refer to https://www.mongodb.com/docs/drivers/java/sync/current/security/validate-signatures/ for the full procedure.

To download and import the public key for verifying signatures, execute

gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 1a75005e142192223d6a7c3b76e0008d166740a8

... (truncated)

Commits
  • 6acf4b6 Version: bump 5.10.0
  • 09aa019 Merge commit from fork (#2035)
  • d751950 Evergreen CI windows fixes
  • 533b2b6 Ensure Kotlin can encode ByteArrays efficiently (#2019)
  • 94863fa Support $vectorSearch against nested embeddings and arrays of embeddings (#2026)
  • 1b958ae JAVA-5990 Hybrid Search Score Fusion (#2024)
  • dd814f8 JAVA-6146 Move detail out of the root AGENTS.md into references
  • d87d93a Fluent API for $score (#2023)
  • 0956b9f Resolve forwarded type arguments across POJO hierarchy edges (#2014)
  • cab37d0 Improve readability of NettyStreamCloseFutureListenerTest
  • Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter from 6.1.0 to 6.1.3

Release notes

Sourced from org.junit.jupiter:junit-jupiter's releases.

JUnit 6.1.3 = Platform 6.1.3 + Jupiter 6.1.3 + Vintage 6.1.3

See Release Notes.

Full Changelog: https://github.com/junit-team/junit-framework/compare/r6.1.2...r6.1.3

JUnit 6.1.2 = Platform 6.1.2 + Jupiter 6.1.2 + Vintage 6.1.2

See Release Notes.

Full Changelog: https://github.com/junit-team/junit-framework/compare/r6.1.1...r6.1.2

JUnit 6.1.1 = Platform 6.1.1 + Jupiter 6.1.1 + Vintage 6.1.1

See Release Notes.

Full Changelog: https://github.com/junit-team/junit-framework/compare/r6.1.0...r6.1.1

Commits
  • f59f60d Release 6.1.3
  • cd8ec92 Finalize 6.1.3 release notes
  • c8729f2 Restore compatibility with GraalVM 25 (#5901)
  • ddc9e74 Update graalvm/setup-graalvm action to v1.6.4 (#5959)
  • fe2c52a Update plugin org.graalvm.buildtools.native to v1.1.7 (#5923)
  • 62afc02 Delay GraalVM plugin updates for 3 days
  • 0cc2902 Skip graalVmTest task if GraalVM env vars are not set
  • f6bbfc5 Move GraalVM tests to separate test task (#5903)
  • e87e052 Update plugin org.graalvm.buildtools.native to v1.1.6 (#5899)
  • 1cd56df Update plugin org.graalvm.buildtools.native to v1.1.5 (#5880)
  • Additional commits viewable in compare view

Updates gradle-wrapper from 9.6.0 to 9.7.1

Release notes

Sourced from gradle-wrapper's releases.

9.7.1

The Gradle team is excited to announce Gradle 9.7.1.

This is a patch release for 9.7.0. We recommend using 9.7.1 instead of 9.7.0.

Here are the highlights of 9.7.0 release:

  • Isolated Projects graduates to incubating
  • Broader Configuration Cache compatibility
  • Resilient Sync helps you fix broken builds
  • More source locations in problem reports

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Adam, Aman Gautam, Aman Kumar, Anton Dubrouski, Aurimas, gbhavya07, Josh Friend, nicklauslittle-gov, Pragati, project516, Qin Mi, Ravi, sk-reddy17, Suvrat Acharya, Yongshun Ye.

Upgrade instructions

Switch your build to use Gradle 9.7.1 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.7.1 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

9.7.0

The Gradle team is excited to announce Gradle 9.7.0.

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gradle-all group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [com.gradleup.shadow](https://github.com/GradleUp/shadow) | `9.4.2` | `9.6.1` |
| com.hypixel.hytale:Server | `0.6.0-pre.4` | `0.6.0-pre.13.1` |
| [org.mongodb:mongodb-driver-sync](https://github.com/mongodb/mongo-java-driver) | `5.8.0` | `5.10.0` |
| [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework) | `6.1.0` | `6.1.3` |
| [gradle-wrapper](https://github.com/gradle/gradle) | `9.6.0` | `9.7.1` |



Updates `com.gradleup.shadow` from 9.4.2 to 9.6.1
- [Release notes](https://github.com/GradleUp/shadow/releases)
- [Changelog](https://github.com/GradleUp/shadow/blob/main/CHANGELOG.md)
- [Commits](GradleUp/shadow@9.4.2...9.6.1)

Updates `com.hypixel.hytale:Server` from 0.6.0-pre.4 to 0.6.0-pre.13.1

Updates `org.mongodb:mongodb-driver-sync` from 5.8.0 to 5.10.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.8.0...r5.10.0)

Updates `org.junit.jupiter:junit-jupiter` from 6.1.0 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.1.0...r6.1.3)

Updates `gradle-wrapper` from 9.6.0 to 9.7.1
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v9.6.0...v9.7.1)

---
updated-dependencies:
- dependency-name: com.gradleup.shadow
  dependency-version: 9.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-all
- dependency-name: com.hypixel.hytale:Server
  dependency-version: 0.6.0-pre.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-all
- dependency-name: org.mongodb:mongodb-driver-sync
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-all
- dependency-name: org.junit.jupiter:junit-jupiter
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-all
- dependency-name: gradle-wrapper
  dependency-version: 9.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants