Skip to content

chore(deps): bump the gradle-deps group across 1 directory with 3 updates - #77

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/gradle/gradle-deps-e42a405c10
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/gradle/gradle-deps-e42a405c10

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 25, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the gradle-deps group with 3 updates in the / directory: gradle-wrapper, org.jetbrains.kotlinx:kotlinx-serialization-json and io.lettuce:lettuce-core.

Updates gradle-wrapper from 9.8.1 to 9.8.2

Release notes

Sourced from gradle-wrapper's releases.

9.8.2

The Gradle team is excited to announce Gradle 9.8.2.

Here are the highlights of this release:

  • Java 27 support
  • Maven mirror settings reuse
  • Linked problem locations in build output

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Aman Gautam, Björn Kautler, Eng Zer Jun, Hashim Khan, Julian Krannich, KBS, Labh R Jethe, Mark Dodgson, Maxim, monkey, nataphon-ktsystems, Paul King, Qiu Tian, rg_sandesh, Roberto Perez Alcolea, Sean, Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.2 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.2 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

Commits
  • 8de7bcf Speed up the AllVersionsCrossVersion flaky quarantine (#39494)
  • 66805db Run all cross-version targets in flaky quarantine
  • cdd4c8f Skip empty test tasks in the flaky test quarantine
  • 6badb77 Split the AllVersionsCrossVersion quarantine across agents
  • 1655e44 Prepare for 9.8.2 (#39492)
  • 6702214 Prepare for 9.8.2
  • 688c0c1 Fix false warning about unstable graph (#39479)
  • 3601d4f Clarify selector reuse comments in SelectorState
  • 6e836fd Fix false warning about unstable graph
  • a0790e5 Fix hidden artifact cleanup pattern in CheckProject (#39451)
  • Additional commits viewable in compare view

Updates org.jetbrains.kotlinx:kotlinx-serialization-json from 1.11.0 to 1.12.0

Release notes

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-json's releases.

v1.12.0

This release is based on Kotlin 2.4.10 and contains all of the changes from 1.12.0-RC.

Additionally, it includes a fix removing unnecessary leading whitespaces from Proguard rules (#3270), and two changes stabilizing kotlin.uuid.Uuid serializer (#3263) and kotlin.time.Instant serializers (#3261).

For your convenience, the changelog for 1.12.0-RC is duplicated below:

API stabilization and deprecations

A big portion of the Json and Core APIs has been stabilized. Most important ones include: @KeepGeneratedSerializer and @SerialInfo annotations, JsonNamingStrategy, and ContextualSerializer. Additionally, various descriptor builders such as listDescriptor and JsonElementBuilder's addAll functions are also stable and can be freely used. There is also one deprecation: ChunkedDecoder interface. Since there is no demand for it, we plan to remove it in the future. See details in the #3238, #3239, and #3216.

Also, kotlin.time.Instant and kotlin.uuid.Uuid serializers are no longer annotated with experimental annotations from the Kotlin standard library (see #3261 and #3263)

Performance improvements

We also improved performance in various areas. ASCII-specific parser (#3225) brings performance of decoding from Okio and kotlinx-io sources closer to decoding performance from String. #3220 makes decoding significantly faster in case JsonElement present in your serializable classes. And #3248 should bring overall performance improvements (up to 30%) on large strings.

Exceptions rework

We continue to improve exception handling in Json encoders and decoders. #3235 makes a big change around custom serializers and @Serializable classes constructors: from now on, every exception thrown during deserialization is wrapped by decoder into a JsonException. This way, it is more predictable to write a catch and it is easier to understand what went wrong: JsonDecodingException also includes context information such as Json path and input. Besides that, #3246 limits maximum nesting depth of Json document, so you will get a proper JsonDecodingException instead of a random stack overflow error.

CBOR improvements

CBOR format also gets many improvements in this release. The most important one is memory optimization for definitely-sized collections (#3191, #3192).

The others include:

  • Encode unsigned integer types as positive integers (#3194) (thanks to Eyüp Can Akman)
  • Correctly decode CborLabel values (#3195)
  • Include actual tag info into CborDecodingException (#3197)

Protobuf improvements

Protocol buffers format received a big new feature: support for unknown fields. Using a new ProtoUnknownFieldHolder class, you can now decode and store unknown fields in Protobuf messages to retransmit them back later. See documentation updates and #2860 for details.

... (truncated)

Changelog

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-json's changelog.

1.12.0 / 2026-10-19

This release is based on Kotlin 2.4.10 and contains all of the changes from 1.12.0-RC.

Additionally, it includes a fix removing unnecessary leading whitespaces from Proguard rules (#3270), and two changes stabilizing kotlin.uuid.Uuid serializer (#3263) and kotlin.time.Instant serializers (#3261).

For your convenience, the changelog for 1.12.0-RC is duplicated below:

API stabilization and deprecations

A big portion of the Json and Core APIs has been stabilized. Most important ones include: @KeepGeneratedSerializer and @SerialInfo annotations, JsonNamingStrategy, and ContextualSerializer. Additionally, various descriptor builders such as listDescriptor and JsonElementBuilder's addAll functions are also stable and can be freely used. There is also one deprecation: ChunkedDecoder interface. Since there is no demand for it, we plan to remove it in the future. See details in the #3238, #3239, and #3216.

Also, kotlin.time.Instant and kotlin.uuid.Uuid serializers are no longer annotated with experimental annotations from the Kotlin standard library (see [#3261](Kotlin/kotlinx.serialization#3261 and #3263)

Performance improvements

We also improved performance in various areas. ASCII-specific parser (#3225) brings performance of decoding from Okio and kotlinx-io sources closer to decoding performance from String. #3220 makes decoding significantly faster in case JsonElement present in your serializable classes. And #3248 should bring overall performance improvements (up to 30%) on large strings.

Exceptions rework

We continue to improve exception handling in Json encoders and decoders. #3235 makes a big change around custom serializers and @Serializable classes constructors: from now on, every exception thrown during deserialization is wrapped by decoder into a JsonException. This way, it is more predictable to write a catch and it is easier to understand what went wrong: JsonDecodingException also includes context information such as Json path and input. Besides that, #3246 limits maximum nesting depth of Json document, so you will get a proper JsonDecodingException instead of a random stack overflow error.

CBOR improvements

CBOR format also gets many improvements in this release. The most important one is memory optimization for definitely-sized collections (#3191, #3192).

... (truncated)

Commits

Updates io.lettuce:lettuce-core from 6.8.2.RELEASE to 6.9.0.RELEASE

Release notes

Sourced from io.lettuce:lettuce-core's releases.

6.9.0.RELEASE

The Lettuce team is pleased to announce the Lettuce 6.9.0 release! This release changes how commands are rejected while a connection is not available. Read the behavior change below before you upgrade.

Lettuce 6 supports Redis 2.6+ up to Redis 8.2. In terms of Java runtime, Lettuce requires at least Java 8 and works with Java 21.

Thanks to all contributors who made Lettuce 6.9.0 possible.

Behavior change

This applies when commands are rejected while disconnected: with DisconnectedBehavior.REJECT_COMMANDS, or with DisconnectedBehavior.DEFAULT and auto-reconnect disabled.

  • Redis Cluster: a command now fails right away when the connection to its target node is still being established, for example the first commands to a node after startup, or after a new slot mapping appears. This also applies to commands redirected with MOVED/ASK. Before, these commands waited for the connection attempt, up to the connect timeout.
  • All connection types: when writing a command to the channel fails, the command is now rejected instead of being re-queued.

To avoid rejections right after startup, connect to the cluster nodes up front.

This change is also in 7.7.0 and later. The 7.0.x – 7.6.x lines do not include it.

Fixes

Full Changelog: redis/lettuce@6.8.2.RELEASE...6.9.0.RELEASE

Changelog

Sourced from io.lettuce:lettuce-core's changelog.

Lettuce 6.9.0 RELEASE NOTES

The Lettuce team is pleased to announce the Lettuce 6.9.0 release! This release changes how commands are rejected while a connection is not available. Read the behavior change below before you upgrade.

Lettuce 6 supports Redis 2.6+ up to Redis 8.2. In terms of Java runtime, Lettuce requires at least Java 8 and works with Java 21.

Thanks to all contributors who made Lettuce 6.9.0 possible.

Behavior change

This applies when commands are rejected while disconnected: with DisconnectedBehavior.REJECT_COMMANDS, or with DisconnectedBehavior.DEFAULT and auto-reconnect disabled.

  • Redis Cluster: a command now fails right away when the connection to its target node is still being established, for example the first commands to a node after startup, or after a new slot mapping appears. This also applies to commands redirected with MOVED/ASK. Before, these commands waited for the connection attempt, up to the connect timeout.
  • All connection types: when writing a command to the channel fails, the command is now rejected instead of being re-queued.

To avoid rejections right after startup, connect to the cluster nodes up front.

This change is also in 7.7.0 and later. The 7.0.x – 7.6.x lines do not include it.

Fixes

Full Changelog: redis/lettuce@6.8.2.RELEASE...6.9.0.RELEASE

Commits
  • cc883e1 Add maven wrapper (#3951)
  • f4bef00 Fix snapshot and release publishing with Maven 3.10 credential scoping (#3940)
  • f3947a7 Reset shared client options after AtMostOnceIntegrationTests
  • c60a3e5 Raise memlock limit for io_uring in integration tests
  • 9dd089f Release 6.9.0
  • e88c506 Fix/cluster reject commands pending future (#3782)
  • See full diff in compare view

@dependabot
dependabot Bot requested a review from rennf93 as a code owner October 25, 2026 02:54
@dependabot dependabot Bot added dependencies gradle/libs.versions.toml or wrapper changes java Pull requests that update java code labels Oct 25, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Thanks for opening your first pull request on guard-core-jvm!

Quick checklist before review (most of these are enforced by CI, but worth a glance):

  • The PR body says Closes #N for an open issue (the issue-link check enforces it); chores take the no-issue label
  • ./gradlew spotlessCheck detekt is clean
  • ./gradlew build passes
  • The conformance smoke is green: ./gradlew :guard-core-conformance:test (a flipped corpus case needs a ledger or xfail update with a written reason)
  • No blanket @Suppress in non-test code; the CHANGELOG.md entry for the current version mentions the change

See AGENTS.md for the boundary rules (the engine module stays dependency-free; conformance data is vendored byte-identical, never hand-edited) and the mirror-lockstep versioning note.

Welcome aboard - a maintainer will review shortly.

@github-actions github-actions Bot added area: engine Touches guard-core-engine/ (framework-free core, dependency-free) area: facade Touches guard-core/ (published facade module) area: conformance Touches the spec 4.1.0 corpus, runner, or xfail baseline benchmarks JMH benchmarks and performance comparisons build Gradle manifests, toolchain config, linters labels Oct 25, 2026
@rennf93 rennf93 self-assigned this Oct 25, 2026
…ates

Bumps the gradle-deps group with 3 updates in the / directory: [gradle-wrapper](https://github.com/gradle/gradle), [org.jetbrains.kotlinx:kotlinx-serialization-json](https://github.com/Kotlin/kotlinx.serialization) and [io.lettuce:lettuce-core](https://github.com/redis/lettuce).


Updates `gradle-wrapper` from 9.8.1 to 9.8.2
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v9.8.1...v9.8.2)

Updates `org.jetbrains.kotlinx:kotlinx-serialization-json` from 1.11.0 to 1.12.0
- [Release notes](https://github.com/Kotlin/kotlinx.serialization/releases)
- [Changelog](https://github.com/Kotlin/kotlinx.serialization/blob/master/CHANGELOG.md)
- [Commits](Kotlin/kotlinx.serialization@v1.11.0...v1.12.0)

Updates `io.lettuce:lettuce-core` from 6.8.2.RELEASE to 6.9.0.RELEASE
- [Release notes](https://github.com/redis/lettuce/releases)
- [Changelog](https://github.com/redis/lettuce/blob/6.9.0.RELEASE/RELEASE-NOTES.md)
- [Commits](redis/lettuce@6.8.2.RELEASE...6.9.0.RELEASE)

---
updated-dependencies:
- dependency-name: gradle-wrapper
  dependency-version: 9.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-deps
- dependency-name: io.lettuce:lettuce-core
  dependency-version: 6.9.0.RELEASE
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-deps
- dependency-name: org.jetbrains.kotlinx:kotlinx-serialization-json
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the gradle-deps group with 3 updates chore(deps): bump the gradle-deps group across 1 directory with 3 updates Oct 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot/gradle/gradle-deps-e42a405c10 branch from aba4a75 to 5553f5f Compare October 25, 2026 16:09
rennf93 added a commit that referenced this pull request Oct 25, 2026
* chore(deps): bump workflow actions together and dependency groups

Workflow refs: analyze v4.39.0->v4.39.1,init v4.39.0->v4.39.1,autobuild v4.39.0->v4.39.1.

All references of each multi-step action move in one commit so workflows such
as CodeQL run against a single action version; single-step Dependabot PRs
leave the steps of one workflow on different versions and fail their own CI.

I also grouped github-actions updates in .github/dependabot.yml so future
action bumps arrive as one weekly PR instead of one PR per workflow step.

* build(deps): apply Dependabot #77 file updates

* chore(deps): suppress jackson advisories scoped to dokka's build-time resolver

jackson-core and jackson-databind 2.15.3 reach the osv scan only through
dokka 2.2.0's internal doc-generator configuration; they appear in no
compile, test or shipped classpath in any gradle.lockfile. The 18 entries
follow the spec 14 suppression discipline: per advisory, with the exposure
and the removal trigger (dokka shipping jackson >= 2.18.11).

---------

Co-authored-by: Renn F <rennf93@users.noreply.github.com>
@dependabot @github

dependabot Bot commented on behalf of github Oct 25, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 25, 2026
@dependabot
dependabot Bot deleted the dependabot/gradle/gradle-deps-e42a405c10 branch October 25, 2026 18:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area: conformance Touches the spec 4.1.0 corpus, runner, or xfail baseline area: engine Touches guard-core-engine/ (framework-free core, dependency-free) area: facade Touches guard-core/ (published facade module) benchmarks JMH benchmarks and performance comparisons build Gradle manifests, toolchain config, linters dependencies gradle/libs.versions.toml or wrapper changes java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant