You are viewing a plain text version of this content. The canonical link for it is here.
Posted to robots@logging.apache.org by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/15 00:40:15 UTC
[PR] Bump the all group across 2 directories with 26 updates [logging-log4j-samples]
dependabot[bot] opened a new pull request, #403:
URL: https://github.com/apache/logging-log4j-samples/pull/403
Bumps the all group with 19 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [com.google.errorprone:error_prone_annotations](https://github.com/google/error-prone) | `2.44.0` | `2.50.0` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.5.0-jre` | `33.6.0-jre` |
| [joda-time:joda-time](https://github.com/JodaOrg/joda-time) | `2.14.0` | `2.14.2` |
| [org.yaml:snakeyaml](https://bitbucket.org/snakeyaml/snakeyaml) | `2.5` | `2.6` |
| [com.github.spotbugs:spotbugs-annotations](https://github.com/spotbugs/spotbugs) | `4.9.8` | `4.10.2` |
| [org.jetbrains.kotlin:kotlin-bom](https://github.com/JetBrains/kotlin) | `2.2.21` | `2.4.0` |
| [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `2.20.1` | `2.22.0` |
| [org.apache.logging.log4j:log4j-bom](https://github.com/apache/logging-log4j2) | `2.25.2` | `2.26.0` |
| org.apache.logging.log4j:log4j-core | `2.25.2` | `2.26.0` |
| [org.slf4j:slf4j-bom](https://github.com/qos-ch/slf4j) | `2.0.17` | `2.0.18` |
| [org.springframework.boot:spring-boot-dependencies](https://github.com/spring-projects/spring-boot) | `3.5.7` | `4.1.0` |
| [org.springframework.boot:spring-boot-maven-plugin](https://github.com/spring-projects/spring-boot) | `3.5.7` | `4.1.0` |
| [org.springframework.cloud:spring-cloud-dependencies](https://github.com/spring-cloud/spring-cloud-release) | `2025.0.0` | `2025.1.2` |
| [org.aspectj:aspectjweaver](https://github.com/eclipse/org.aspectj) | `1.9.25` | `1.9.25.1` |
| [org.aspectj:aspectjrt](https://github.com/eclipse/org.aspectj) | `1.9.25` | `1.9.25.1` |
| [org.aspectj:aspectjtools](https://github.com/eclipse/org.aspectj) | `1.9.25` | `1.9.25.1` |
| [org.codehaus.mojo:aspectj-maven-plugin](https://github.com/mojohaus/aspectj-maven-plugin) | `1.15.0` | `1.16.0` |
| [org.apache.maven.plugins:maven-jlink-plugin](https://github.com/apache/maven-jlink-plugin) | `3.2.0` | `3.3.0` |
| [io.fabric8:kubernetes-client-bom](https://github.com/fabric8io/kubernetes-client) | `7.4.0` | `7.7.0` |
Bumps the all group with 9 updates in the /log4j-samples-graalvm directory:
| Package | From | To |
| --- | --- | --- |
| [org.apache.logging.log4j:log4j-bom](https://github.com/apache/logging-log4j2) | `2.25.2` | `2.26.0` |
| [org.slf4j:slf4j-bom](https://github.com/qos-ch/slf4j) | `2.0.17` | `2.0.18` |
| [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.6.2` | `3.6.3` |
| [org.assertj:assertj-bom](https://github.com/assertj/assertj) | `3.27.6` | `3.27.7` |
| [org.junit:junit-bom](https://github.com/junit-team/junit-framework) | `6.0.1` | `6.1.0` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.20` | `1.5.34` |
| [org.json:json](https://github.com/douglascrockford/JSON-java) | `20250517` | `20260522` |
| [net.javacrumbs.json-unit:json-unit-assertj](https://github.com/lukas-krecan/JsonUnit) | `5.0.0` | `5.1.2` |
| [org.graalvm.buildtools:native-maven-plugin](https://github.com/graalvm/native-build-tools) | `0.11.2` | `1.1.2` |
Updates `com.google.errorprone:error_prone_annotations` from 2.44.0 to 2.50.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/google/error-prone/releases">com.google.errorprone:error_prone_annotations's releases</a>.</em></p>
<blockquote>
<h2>Error Prone 2.50.0</h2>
<p>New checks:</p>
<ul>
<li><a href="https://errorprone.info/bugpattern/BoxingComparator"><code>BoxingComparator</code></a>: Detect implicitly-boxing Comparator.comparing key extractors</li>
<li><a href="https://errorprone.info/bugpattern/ExposedPrivateType"><code>ExposedPrivateType</code></a>: Discourage references to private member classes from non-private APIs</li>
<li><a href="https://errorprone.info/bugpattern/JUnitMethodInvoked"><code>JUnitMethodInvoked</code></a>: Discourage directly invoking JUnit test methods</li>
<li><a href="https://errorprone.info/bugpattern/ListRemoveAmbiguous"><code>ListRemoveAmbiguous</code></a>: Detect ambiguous calls to <code>List.remove(int|Integer)</code></li>
<li><a href="https://errorprone.info/bugpattern/PreferTestParameter"><code>PreferTestParameter</code></a>: suggests using <code>@TestParameter</code> instead of <code>@TestParameters</code> for exhaustive boolean and enum parameters on single-element parameterized tests</li>
<li><a href="https://errorprone.info/bugpattern/RecordComponentAccessorAnnotationConflict"><code>RecordComponentAccessorAnnotationConflict</code></a>: Detect conflicts between record components and explicit accessor methods</li>
<li><a href="https://errorprone.info/bugpattern/RecordComponentOverride"><code>RecordComponentOverride</code></a>: Discourage <code>@Override</code> on record component declarations that don't override
anything</li>
<li><a href="https://errorprone.info/bugpattern/ThrowableEqualsHashCode"><code>ThrowableEqualsHashCode</code></a>: Discourage overriding <code>Throwable.equals()</code> and <code>hashCode()</code></li>
</ul>
<p>Closed issues: <a href="https://redirect.github.com/google/error-prone/issues/5553">#5553</a>, <a href="https://redirect.github.com/google/error-prone/issues/5649">#5649</a>, <a href="https://redirect.github.com/google/error-prone/issues/5778">#5778</a></p>
<p>Full changelog: <a href="https://github.com/google/error-prone/compare/v2.49.0...v2.50.0">https://github.com/google/error-prone/compare/v2.49.0...v2.50.0</a></p>
<h2>Error Prone 2.49.0</h2>
<p>This release includes several changes to <code>Matcher</code> APIs, and removed some deprecated or problematic APIs:</p>
<ul>
<li>Remove deprecated <code>MethodMatchers.withSignature</code> API, which relies on fragile <code>toString</code> behaviour. Alternatives for matching on method signatures with varargs and type parameters were added in <a href="https://github.com/google/error-prone/commit/a98a1c55d92d343ae2c142485e8888cd46aa78b3">https://github.com/google/error-prone/commit/a98a1c55d92d343ae2c142485e8888cd46aa78b3</a>.</li>
<li>Removed <code>variableType(Matcher)</code> API. <code>Matchers.variableType(Matcher)</code> uses <code>VariableTree#getType</code> to match variable types, which own't work for lambda parameters with inferred types after <a href="https://bugs.openjdk.org/browse/JDK-8268850">JDK-8268850</a>. The recommended replacement is <code>variableType(TypePredicate)</code>.</li>
<li>Make <code>enclosingPackage</code> return an optional. Module elements are not enclosed by a package, checks using <code>enclosingPackage</code> shouldn't assume an enclosing package exists when processing arbitrary elements.</li>
<li>New <code>FieldMatchers</code> API, similar to <code>MethodMatchers</code> (<a href="https://github.com/google/error-prone/commit/1dd9c3a6bd76fca8104be6ae1c1004655d6a1745">https://github.com/google/error-prone/commit/1dd9c3a6bd76fca8104be6ae1c1004655d6a1745</a>).</li>
</ul>
<p>New checks:</p>
<ul>
<li><a href="https://errorprone.info/bugpattern/AssertThrowsBlockToExpression"><code>AssertThrowsBlockToExpression</code></a>: Discourage unnecessary block lambdas in <code>assertThrows</code>.</li>
<li><a href="https://errorprone.info/bugpattern/AssertThrowsMinimizer"><code>AssertThrowsMinimizer</code></a>: Suggest minimizing the amount of logic in <code>assertThrows</code>.</li>
<li><a href="https://errorprone.info/bugpattern/MemorySegmentReferenceEquality"><code>MemorySegmentReferenceEquality</code></a>: Discourage using reference equality for <code>MemorySegments</code>.</li>
<li><a href="https://errorprone.info/bugpattern/PreferThrowsTag"><code>PreferThrowsTag</code></a>: Recommends using <code>@throws</code> instead of the legacy <code>@exception</code> javadoc tag.</li>
<li><a href="https://errorprone.info/bugpattern/RecordAccessorInCompactConstructor"><code>RecordAccessorInCompactConstructor</code></a>: detect record accessors inside the compact canonical ctors, which read uninitialized fields.</li>
</ul>
<p>Closed issues: <a href="https://redirect.github.com/google/error-prone/issues/2283">#2283</a>, <a href="https://redirect.github.com/google/error-prone/issues/3503">#3503</a>, <a href="https://redirect.github.com/google/error-prone/issues/5210">#5210</a>, <a href="https://redirect.github.com/google/error-prone/issues/5289">#5289</a>, <a href="https://redirect.github.com/google/error-prone/issues/5548">#5548</a>, <a href="https://redirect.github.com/google/error-prone/issues/5548">#5548</a>, <a href="https://redirect.github.com/google/error-prone/issues/5554">#5554</a>, <a href="https://redirect.github.com/google/error-prone/issues/5609">#5609</a>, <a href="https://redirect.github.com/google/error-prone/issues/5614">#5614</a>, <a href="https://redirect.github.com/google/error-prone/issues/5656">#5656</a></p>
<p>Full changelog: <a href="https://github.com/google/error-prone/compare/v2.48.0...v2.49.0">https://github.com/google/error-prone/compare/v2.48.0...v2.49.0</a></p>
<h2>Error Prone 2.48.0</h2>
<p>Changes:</p>
<ul>
<li>Added support for passing flags with command-line argument files (<code>@</code>-files) (<a href="https://github.com/google/error-prone/commit/8e84edf1beedc99ff2cff3c21a7adec578ad053e">https://github.com/google/error-prone/commit/8e84edf1beedc99ff2cff3c21a7adec578ad053e</a>)</li>
</ul>
<p>New checks:</p>
<ul>
<li><a href="https://errorprone.info/bugpattern/AvoidValueSetter"><code>AvoidValueSetter</code></a></li>
<li><a href="https://errorprone.info/bugpattern/UnnecessarySemicolon"><code>UnnecessarySemicolon</code></a></li>
</ul>
<p>Closed issues: <a href="https://redirect.github.com/google/error-prone/issues/5529">#5529</a>, <a href="https://redirect.github.com/google/error-prone/issues/5537">#5537</a>, <a href="https://redirect.github.com/google/error-prone/issues/5522">#5522</a>, <a href="https://redirect.github.com/google/error-prone/issues/5521">#5521</a></p>
<p>Full changelog: <a href="https://github.com/google/error-prone/compare/v2.47.0...v2.48.0">https://github.com/google/error-prone/compare/v2.47.0...v2.48.0</a></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/google/error-prone/commit/d802cff975605b2c76f262eaf28d22bf39534f78"><code>d802cff</code></a> Release Error Prone 2.50.0</li>
<li><a href="https://github.com/google/error-prone/commit/b12b5f206d0f9f4a9f4c647839096a7a571c0961"><code>b12b5f2</code></a> In <code>StringCharset</code>, move the description from <code>explanation</code> to <code>summary</code>.</li>
<li><a href="https://github.com/google/error-prone/commit/a7ca02a09c4b7c343eaf3eae6badbf3cf14568c4"><code>a7ca02a</code></a> Update <code>AssertThrowsUtils</code> to emit <code>var thrown = assertThrows(...)</code> instead o...</li>
<li><a href="https://github.com/google/error-prone/commit/6b565177d4dd90b09abc646e4639caa117637c18"><code>6b56517</code></a> Fix handling of nested tags in UnrecognisedJavadocTag</li>
<li><a href="https://github.com/google/error-prone/commit/d36e74f6a7bde44a23dcc6f8c729f4bf909455f6"><code>d36e74f</code></a> Remove translation of the <code>fail()</code> message into <code>assertThrows()</code>. We already ...</li>
<li><a href="https://github.com/google/error-prone/commit/c3581e93a0db15e35f8f7b3b6bb5cfe5eadbe8dc"><code>c3581e9</code></a> Fix JavacFileManager compiler crash during speculative recompiles in modular ...</li>
<li><a href="https://github.com/google/error-prone/commit/da1f32b7908e5da8376fff4e57296ef7a84a4e81"><code>da1f32b</code></a> Remove assignments from <code>assertThrows()</code> lambdas. A large percentage of remai...</li>
<li><a href="https://github.com/google/error-prone/commit/dee62f74041f8944377880476ec4babb12863b37"><code>dee62f7</code></a> Update <code>AssertThrowsBlockToExpression</code> to re-write single <code>VariableTree</code>s int...</li>
<li><a href="https://github.com/google/error-prone/commit/493944857cd9f4af7e0846481f7ebcc027c17663"><code>4939448</code></a> Only hoist the last statement into the <code>assertThrows()</code> lambda.</li>
<li><a href="https://github.com/google/error-prone/commit/30fd05a4d19da16fd141b060a42557f2e772b9d2"><code>30fd05a</code></a> refactor: Rename JavaLangClash bug pattern to AvoidCommonTypeNames</li>
<li>Additional commits viewable in <a href="https://github.com/google/error-prone/compare/v2.44.0...v2.50.0">compare view</a></li>
</ul>
</details>
<br />
Updates `com.google.guava:guava` from 33.5.0-jre to 33.6.0-jre
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/google/guava/releases">com.google.guava:guava's releases</a>.</em></p>
<blockquote>
<h2>33.6.0</h2>
<h3>Maven</h3>
<pre lang="xml"><code><dependency>
<groupId>com.google.guava</groupId>
<artifactId>guava</artifactId>
<version>33.6.0-jre</version>
<!-- or, for Android: -->
<version>33.6.0-android</version>
</dependency>
</code></pre>
<h3>Jar files</h3>
<ul>
<li><a href="https://repo1.maven.org/maven2/com/google/guava/guava/33.6.0-jre/guava-33.6.0-jre.jar">33.6.0-jre.jar</a></li>
<li><a href="https://repo1.maven.org/maven2/com/google/guava/guava/33.6.0-android/guava-33.6.0-android.jar">33.6.0-android.jar</a></li>
</ul>
<p>Guava requires <a href="https://github.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies">one runtime dependency</a>, which you can download here:</p>
<ul>
<li><a href="https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar">failureaccess-1.0.3.jar</a></li>
</ul>
<h3>Javadoc</h3>
<ul>
<li><a href="https://guava.dev/releases/33.6.0-jre/api/docs/">33.6.0-jre</a></li>
<li><a href="https://guava.dev/releases/33.6.0-android/api/docs/">33.6.0-android</a></li>
</ul>
<h3>JDiff</h3>
<ul>
<li><a href="https://guava.dev/releases/33.6.0-jre/api/diffs/">33.6.0-jre vs. 33.5.0-jre</a></li>
<li><a href="https://guava.dev/releases/33.6.0-android/api/diffs/">33.6.0-android vs. 33.5.0-android</a></li>
<li><a href="https://guava.dev/releases/33.6.0-android/api/androiddiffs/">33.6.0-android vs. 33.6.0-jre</a></li>
</ul>
<h3>Changelog</h3>
<ul>
<li>Migrated some classes from <code>finalize()</code> to <code>PhantomReference</code> in preparation for <a href="https://openjdk.org/jeps/421">the removal of finalization</a>. (786b619dd6, 7c6b17c, aeef90988d)</li>
<li><code>cache</code>: Deprecated <code>CacheBuilder</code> APIs that use <code>TimeUnit</code> in favor of those that use <code>Duration</code>. (73f8b0bb84)</li>
<li><code>collect</code>: Added <code>toImmutableSortedMap</code> collectors that use the natural comparator. (64d70b9f94)</li>
<li><code>collect</code>: Changed <code>ConcurrentHashMultiset</code>, <code>ImmutableMap</code> and <code>TreeMultiset</code> deserialization to <a href="https://openjdk.org/jeps/500">avoid mutating <code>final</code> fields</a>. In extremely unlikely scenarios in which an instance of that type contains an object that refers back to that instance, this could lead to <a href="https://docs.oracle.com/en/java/javase/26/docs/specs/serialization/input.html#the-readresolve-method:~:text=in%20cases%20where%20an%20object%20being%20serialized%20nominates%20a%20replacement%20object%20whose%20object%20graph%20has%20a%20reference%20to%20the%20original%20object">a broken instance</a> that throws <code>NullPointerException</code> when used. (8240c7e596, 046468055f)</li>
<li><code>graph</code>: Removed <code>@Beta</code> from all APIs in the package. (dae9566b73)</li>
<li><code>graph</code>: Added support to <code>Graphs.transitiveClosure()</code> for different strategies for adding self-loops. (2e13df25b2)</li>
<li><code>graph</code>: Added an <code>asNetwork()</code> view to <code>Graph</code> and <code>ValueGraph</code>. (909c593c61)</li>
<li><code>hash</code>: Added <code>BloomFilter.serializedSize()</code>. (df9bcc251a)</li>
<li><code>net</code>: Added <code>HttpHeaders.CDN_CACHE_CONTROL</code>. (75331b5030)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/google/guava/commits">compare view</a></li>
</ul>
</details>
<br />
Updates `joda-time:joda-time` from 2.14.0 to 2.14.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/JodaOrg/joda-time/releases">joda-time:joda-time's releases</a>.</em></p>
<blockquote>
<h2>Release v2.14.2</h2>
<p>See the <a href="https://www.joda.org/joda-time/changes-report.html#a2.14.2">change notes</a> for more information.</p>
<h2>What's Changed</h2>
<ul>
<li>Update time zone data to 2026bgtz by <a href="https://github.com/jodastephen"><code>@jodastephen</code></a> in <a href="https://redirect.github.com/JodaOrg/joda-time/pull/831">JodaOrg/joda-time#831</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/JodaOrg/joda-time/compare/v2.14.1...v2.14.2">https://github.com/JodaOrg/joda-time/compare/v2.14.1...v2.14.2</a></p>
<h2>Release v2.14.1</h2>
<p>See the <a href="https://www.joda.org/joda-time/changes-report.html#a2.14.1">change notes</a> for more information.</p>
<h2>What's Changed</h2>
<ul>
<li>Fix build by <a href="https://github.com/jodastephen"><code>@jodastephen</code></a> in <a href="https://redirect.github.com/JodaOrg/joda-time/pull/811">JodaOrg/joda-time#811</a></li>
<li>fix: correct typo in README (appropriate) by <a href="https://github.com/nabilshafi"><code>@nabilshafi</code></a> in <a href="https://redirect.github.com/JodaOrg/joda-time/pull/818">JodaOrg/joda-time#818</a></li>
<li>Auto-merge tzdb updates by <a href="https://github.com/jodastephen"><code>@jodastephen</code></a> in <a href="https://redirect.github.com/JodaOrg/joda-time/pull/819">JodaOrg/joda-time#819</a></li>
<li>Update deployment from OSSRH by <a href="https://github.com/jodastephen"><code>@jodastephen</code></a> in <a href="https://redirect.github.com/JodaOrg/joda-time/pull/820">JodaOrg/joda-time#820</a></li>
<li>Update time zone data to 2025cgtz by <a href="https://github.com/jodastephen"><code>@jodastephen</code></a> in <a href="https://redirect.github.com/JodaOrg/joda-time/pull/826">JodaOrg/joda-time#826</a></li>
<li>Fix time zone name key by <a href="https://github.com/jodastephen"><code>@jodastephen</code></a> in <a href="https://redirect.github.com/JodaOrg/joda-time/pull/827">JodaOrg/joda-time#827</a></li>
<li>Update time zone data to 2026agtz by <a href="https://github.com/jodastephen"><code>@jodastephen</code></a> in <a href="https://redirect.github.com/JodaOrg/joda-time/pull/829">JodaOrg/joda-time#829</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/nabilshafi"><code>@nabilshafi</code></a> made their first contribution in <a href="https://redirect.github.com/JodaOrg/joda-time/pull/818">JodaOrg/joda-time#818</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/JodaOrg/joda-time/compare/v2.14.0...v2.14.1">https://github.com/JodaOrg/joda-time/compare/v2.14.0...v2.14.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/JodaOrg/joda-time/commit/d6ba4f03c242c12feac308ac25b841a8c9457674"><code>d6ba4f0</code></a> Release v2.14.2</li>
<li><a href="https://github.com/JodaOrg/joda-time/commit/43ea40b0c2117e272dbef2b20fd675b43378c8fd"><code>43ea40b</code></a> Update time zone data to 2026bgtz (<a href="https://redirect.github.com/JodaOrg/joda-time/issues/831">#831</a>)</li>
<li><a href="https://github.com/JodaOrg/joda-time/commit/c377753444ba79cccc0c6c4806ba6fd0a800e629"><code>c377753</code></a> Release v2.14.1</li>
<li><a href="https://github.com/JodaOrg/joda-time/commit/3fd08d499067667fb51d210870e2c6bf19651bd3"><code>3fd08d4</code></a> Update time zone data to 2026agtz (<a href="https://redirect.github.com/JodaOrg/joda-time/issues/829">#829</a>)</li>
<li><a href="https://github.com/JodaOrg/joda-time/commit/c4bf8778152f20aba5a320316e11d05776fae7f5"><code>c4bf877</code></a> Fix name key (<a href="https://redirect.github.com/JodaOrg/joda-time/issues/827">#827</a>)</li>
<li><a href="https://github.com/JodaOrg/joda-time/commit/8b11cfacc4e8cef281385e7f051132f32583748f"><code>8b11cfa</code></a> Update time zone data to 2025cgtz (<a href="https://redirect.github.com/JodaOrg/joda-time/issues/826">#826</a>)</li>
<li><a href="https://github.com/JodaOrg/joda-time/commit/7088d772689b751d3e182833970290d05311bf35"><code>7088d77</code></a> Update deployment from OSSRH (<a href="https://redirect.github.com/JodaOrg/joda-time/issues/820">#820</a>)</li>
<li><a href="https://github.com/JodaOrg/joda-time/commit/34181198cb234fc5b3b3c17ef7ab820b36c3dc84"><code>3418119</code></a> Auto-merge tzdb updates (<a href="https://redirect.github.com/JodaOrg/joda-time/issues/819">#819</a>)</li>
<li><a href="https://github.com/JodaOrg/joda-time/commit/6c95155c42bfaa49565d371ff3d686b00934d0c3"><code>6c95155</code></a> Fix website commit message</li>
<li><a href="https://github.com/JodaOrg/joda-time/commit/c1d7f97f72d2c0f8537b6315fe0698a02d55a73c"><code>c1d7f97</code></a> Fix typo in README (<a href="https://redirect.github.com/JodaOrg/joda-time/issues/818">#818</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/JodaOrg/joda-time/compare/v2.14.0...v2.14.2">compare view</a></li>
</ul>
</details>
<br />
Updates `org.yaml:snakeyaml` from 2.5 to 2.6
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://bitbucket.org/snakeyaml/snakeyaml/commits/cc19a61c191ebc111ad1e22e83f75b18f27531cf"><code>cc19a61</code></a> [maven-release-plugin] prepare for next development iteration</li>
<li><a href="https://bitbucket.org/snakeyaml/snakeyaml/commits/bc4a8f4cf64c79e6a8ce9c51940f0dbea42ba707"><code>bc4a8f4</code></a> Minor fixes in Javadoc</li>
<li><a href="https://bitbucket.org/snakeyaml/snakeyaml/commits/f18203a60abb0427910821855a106bfcd4920457"><code>f18203a</code></a> Add a test for Y79Y-003</li>
<li><a href="https://bitbucket.org/snakeyaml/snakeyaml/commits/ad1fceb1baf04a81f83f65795fc11252f9027c2b"><code>ad1fceb</code></a> Less output in tests</li>
<li><a href="https://bitbucket.org/snakeyaml/snakeyaml/commits/1db66b79fc9bd1760d4f7f5878ad5eac13201d57"><code>1db66b7</code></a> Add (failing) build with JDK 25</li>
<li><a href="https://bitbucket.org/snakeyaml/snakeyaml/commits/88ebaa8210f00b3665ff03680cd770f6762c8507"><code>88ebaa8</code></a> build: fix JKD 25 tests compilation</li>
<li><a href="https://bitbucket.org/snakeyaml/snakeyaml/commits/6af8790448b7bcfec3fdcdc6053be49bb8176455"><code>6af8790</code></a> Update Javadoc</li>
<li><a href="https://bitbucket.org/snakeyaml/snakeyaml/commits/a006b7a163c843df70aa0b2fd35e06345a0fe152"><code>a006b7a</code></a> Update Javadoc</li>
<li><a href="https://bitbucket.org/snakeyaml/snakeyaml/commits/c143db209b05a4246b12cf9ea2c121e1301b1616"><code>c143db2</code></a> Update changes</li>
<li><a href="https://bitbucket.org/snakeyaml/snakeyaml/commits/d78d11f9665a4a8322af15915047b7c55aefb6cc"><code>d78d11f</code></a> Update changes</li>
<li>Additional commits viewable in <a href="https://bitbucket.org/snakeyaml/snakeyaml/branches/compare/snakeyaml-2.6..snakeyaml-2.5">compare view</a></li>
</ul>
</details>
<br />
Updates `com.github.spotbugs:spotbugs-annotations` from 4.9.8 to 4.10.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/spotbugs/spotbugs/releases">com.github.spotbugs:spotbugs-annotations's releases</a>.</em></p>
<blockquote>
<h2>4.10.2</h2>
<p>SpotBugs 4.10.2</p>
<h3>CHANGELOG</h3>
<h3>Build</h3>
<ul>
<li>Add release protection to ensure version released matches the tag and that snapshot has been removed. (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4156">#4156</a>)</li>
<li>Drop binary incompatible Saxon-HE back to 12.9 to keep java 11 compatibility. (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4159">#4159</a>)</li>
<li>Add binary check to the gradle build to ensure compatibility remains. (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4159">#4159</a>)</li>
</ul>
<h3>CHECKSUM</h3>
<table>
<thead>
<tr>
<th>file</th>
<th>checksum (sha256)</th>
</tr>
</thead>
<tbody>
<tr>
<td>spotbugs-4.10.2-javadoc.jar</td>
<td>97bf36f386f75cecacbb7663700266d65176f8544c6f62bc7f21e0ecfb868444</td>
</tr>
<tr>
<td>spotbugs-4.10.2-sources.jar</td>
<td>76476f61ce6dc0eb0c38801e21da44e77043ba21226aef6c1b9d21df06d2395a</td>
</tr>
<tr>
<td>spotbugs-4.10.2.tgz</td>
<td>63d7687c35fba12cbc8e55ec2a889a2bbf1b9be299dea91f2b0d351dc285308a</td>
</tr>
<tr>
<td>spotbugs-4.10.2.zip</td>
<td>d5c9ad825cd015fc943802f5c96d89c515fd9a6f7fbbd9ddc7d0aa24b13664df</td>
</tr>
<tr>
<td>spotbugs-annotations-4.10.2-javadoc.jar</td>
<td>a948f311281429a3060e4870d5a60e8508372113ce678c7e1e04b58ba07a2ec2</td>
</tr>
<tr>
<td>spotbugs-annotations-4.10.2-sources.jar</td>
<td>87974d23caffbc8c6e66c567747627267b5ed06573cee966d7af6d236b8d65bd</td>
</tr>
<tr>
<td>spotbugs-annotations.jar</td>
<td>5335e5107c74cdd62ef96a7908066c51abb3de63b1ebf99dc953c2c7d0747678</td>
</tr>
<tr>
<td>spotbugs-ant-4.10.2-javadoc.jar</td>
<td>6e016db4c2929c0319c9f973ec1c76724d9ba17d26cd7b87136a8dbf0731cecb</td>
</tr>
<tr>
<td>spotbugs-ant-4.10.2-sources.jar</td>
<td>91477d93b1fd1bebae35d318427b5238fb458e726478dc1a8ac41ce74838a1e6</td>
</tr>
<tr>
<td>spotbugs-ant.jar</td>
<td>22f2fa397e86663adcd4828cc1c91e63aa6cc2bfc56832885b749a86fac5c784</td>
</tr>
<tr>
<td>spotbugs.jar</td>
<td>46f5c9524c08d027cf96cda2704e5d8ded633626b94a19dc9ced3ae67595d80b</td>
</tr>
<tr>
<td>test-harness-4.10.2-javadoc.jar</td>
<td>ec93ddaa099a27c8fdb0522d8c0b24a3d696e10aaf7d71a5d8426a643c00f1b2</td>
</tr>
<tr>
<td>test-harness-4.10.2-sources.jar</td>
<td>805d2d124b0d4ea513ee9262d4ad6027c3471d45defd80fd7d20e23425d17df7</td>
</tr>
<tr>
<td>test-harness-4.10.2.jar</td>
<td>bd10d1f11a1b93e4ca4db4d27772f611bd3407f9452dbbd2d1ba62584ddc171f</td>
</tr>
<tr>
<td>test-harness-core-4.10.2-javadoc.jar</td>
<td>a9782f2a1ecb26d561b4601c46f2dbcfbe4045d587c6ce545ae830cd61399118</td>
</tr>
<tr>
<td>test-harness-core-4.10.2-sources.jar</td>
<td>043a55d99a517c0d9cf702b0c183b4afd3f03af9eff4a86d59bb37df1b35b532</td>
</tr>
<tr>
<td>test-harness-core-4.10.2.jar</td>
<td>1f9a0ee8f150dd71f960ca4f59dcf7912a45d0e9e6aefc4585fd44b975454bc0</td>
</tr>
<tr>
<td>test-harness-jupiter-4.10.2-javadoc.jar</td>
<td>eb18358668b3f2099ddcfe21e817210d34ee969eb7fecc6f697c6eecca803846</td>
</tr>
<tr>
<td>test-harness-jupiter-4.10.2-sources.jar</td>
<td>17144f315686bfd01c02fa4ae7c916060c41de8eed58d5b8470416fa08f46ced</td>
</tr>
<tr>
<td>test-harness-jupiter-4.10.2.jar</td>
<td>a91146da3e993479cfefd2690781cbd102c6360ecc63a96d88995be3bd60fcbb</td>
</tr>
</tbody>
</table>
<h2>4.10.1</h2>
<p>SpotBugs 4.10.1</p>
<p>Note</p>
<p>SpotBugs 4.10.0 was superseded by 4.10.1 due to a release issue. Users should use 4.10.1. See the discussion below for additional details:</p>
<p><a href="https://github.com/spotbugs/spotbugs/discussions/4155">https://github.com/spotbugs/spotbugs/discussions/4155</a></p>
<h3>CHANGELOG</h3>
<h3>Build</h3>
<ul>
<li>4.10.0 was not released due to a release process error (artifacts were built from a -SNAPSHOT version). 4.10.1 is the corrected release and contains the intended 4.10.0 contents.</li>
</ul>
<h3>CHECKSUM</h3>
<table>
<thead>
<tr>
<th>file</th>
<th>checksum (sha256)</th>
</tr>
</thead>
<tbody>
<tr>
<td>spotbugs-4.10.1-javadoc.jar</td>
<td>582dc49e95b080333b1025dc23e76630e5f6f1648b2f9fa71ee34918f6d9dd2c</td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md">com.github.spotbugs:spotbugs-annotations's changelog</a>.</em></p>
<blockquote>
<h2>4.10.2 - 2026-06-09</h2>
<h3>Build</h3>
<ul>
<li>Add release protection to ensure version released matches the tag and that snapshot has been removed. (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4156">#4156</a>)</li>
<li>Drop binary incompatible Saxon-HE back to 12.9 to keep java 11 compatibility. (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4159">#4159</a>)</li>
<li>Add binary check to the gradle build to ensure compatibility remains. (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4159">#4159</a>)</li>
</ul>
<h2>4.10.1 - 2026-06-08</h2>
<h3>Build</h3>
<ul>
<li>4.10.0 was not released due to a release process error (artifacts were built from a -SNAPSHOT version). 4.10.1 is the corrected release and contains the intended 4.10.0 contents.</li>
</ul>
<h2>4.10.0 - 2026-06-07</h2>
<h3>Refactor</h3>
<ul>
<li>Move internal usage of 'javax.annotation.Nonnull' to 'jakarta.annotation.NonNull'. (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/3858">#3858</a>)</li>
<li>Move internal usage of 'javax.annotation.Nullable' to 'jakarta.annotation.Nullable'. (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/3861">#3861</a>)</li>
<li>Renamed methods from <code>edu.umd.cs.findbugs.SwitchHandler</code> to reflect that they return a PC, not an offset (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/3869">#3869</a>)</li>
<li>Make the progress bar more visually appealing by adding some borders (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/3896">#3896</a>)</li>
<li>Reuse DismantleBytecode.isIf introduced in (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/3869">#3869</a>)</li>
</ul>
<h3>Added</h3>
<ul>
<li>Add partial support for <code>org.jspecify.annotations.Nullable</code>, <code>org.jspecify.annotations.NonNull</code>, <code>org.jspecify.annotations.NullUnmarked</code> and <code>org.jspecify.annotations.NullMarked</code> annotations. These are aliased to the closest existing SpotBugs nullness annotations. This is not a complete implementation of the JSpecify spec; scope-level semantics of <code>@NullMarked</code> and <code>@NullUnmarked</code> are not yet supported. (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/3996">#3996</a>)</li>
<li>Recognize <code>jakarta.annotation.Nonnull</code> and <code>jakarta.annotation.Nullable</code> (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/3780">#3780</a>)</li>
<li>Detect use of <code>sun.misc.Unsafe</code> and <code>jdk.internal.misc.Unsafe</code> (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/3804">#3804</a>)</li>
<li>New bug type is introduced: <code>NCR_NOT_PROPERLY_CHECKED_READ</code>. Improper validation of the return value from the read() method in InputStream and Reader classes may result in an array not being fully filled. (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/3766">#3766</a>)</li>
<li>New detector <code>FindImproperSynchronization</code> and introduced new bug types:
<ul>
<li><code>USO_UNSAFE_METHOD_SYNCHRONIZATION</code> is reported when using synchronized methods with the class' accessible intrinsic lock,</li>
<li><code>USO_UNSAFE_STATIC_METHOD_SYNCHRONIZATION</code> is reported when using static synchronized methods with the class' exposed intrinsic lock,</li>
<li><code>USO_UNSAFE_OBJECT_SYNCHRONIZATION</code> is reported when the lock used for synchronization is visible from the outside,</li>
<li><code>USO_UNSAFE_ACCESSIBLE_OBJECT_SYNCHRONIZATION</code> is reported when the lock used for synchronization is made accessible, with methods that update or return the lock, to the outside,</li>
<li><code>USO_UNSAFE_INHERITABLE_OBJECT_SYNCHRONIZATION</code> is reported when the lock used for synchronization is can be altered by subclasses,</li>
<li><code>USO_UNSAFE_EXPOSED_OBJECT_SYNCHRONIZATION</code> is reported when the lock used for synchronization is later exposed in the subclasses.</li>
<li><code>USBC_UNSAFE_SYNCHRONIZATION_WITH_BACKING_COLLECTION</code> is reported when the backing collection of a lock is visible from the outside,</li>
<li><code>USBC_UNSAFE_SYNCHRONIZATION_WITH_ACCESSIBLE_BACKING_COLLECTION</code> is reported when the backing collection of a lock is made accessible, with methods that update or return the lock, to the outside,</li>
<li><code>USBC_UNSAFE_SYNCHRONIZATION_WITH_INHERITABLE_BACKING_COLLECTION</code> is reported when the backing collection of a lock can be altered by subclasses.
(See <a href="https://wiki.sei.cmu.edu/confluence/display/java/LCK00-J.+Use+private+final+lock+objects+to+synchronize+classes+that+may+interact+with+untrusted+code">SEI CERT rule LCK00-J</a> and <a href="https://wiki.sei.cmu.edu/confluence/display/java/LCK04-J.+Do+not+synchronize+on+a+collection+view+if+the+backing+collection+is+accessible">SEI CERT rule LCK04-J</a>)</li>
</ul>
</li>
<li>New detector <code>FindIncreasedAccessibilityOfMethods</code> for new bug type <code>IAOM_DO_NOT_INCREASE_METHOD_ACCESSIBILITY</code>. This detector reports a bug if a class increases the accessibility of overridden or hidden methods. (See <a href="https://wiki.sei.cmu.edu/confluence/display/java/MET04-J.+Do+not+increase+the+accessibility+of+overridden+or+hidden+methods">SEI CERT rule MET04-J</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix <code>DM_STRING_TOSTRING</code> false negative when <code>toString()</code> is chained before a method call (e.g., <code>s.toString().toLowerCase()</code>); multiple occurrences in the same method are now all reported (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/3966">#3966</a>)</li>
<li>Stop exposing JUnit BOM as a transitive dependency to consumers (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/3908">#3908</a>)</li>
<li>Fix incorrect bug counts and sizes when unioning reports (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/3721">#3721</a>)</li>
<li>Classes containing only methods throwing <code>UnsupportedOperationException</code> with setter-like names are no longer considered as mutable (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/1601">#1601</a>)</li>
<li>Enhanced SARIF output with full description sections - adding markdown is still an open issue (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/2339">#2339</a>)</li>
<li>Added missing null check to <code>MultipleInstantiationsOfSingletons</code> detector (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/3823">#3823</a>)</li>
<li>Fix invalid syntax in findbugsfilter.xsd (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/3832">#3832</a>)</li>
<li>Fix <code>CT_CONSTRUCTOR_THROW</code> FP with public and private constructors (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/3822">#3822</a>)</li>
<li>Fix tool name in usage info, (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/3847">#3847</a>)</li>
<li>Fix the building of relative chains of ./././ in filenames in fbp files (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/3852">#3852</a>)</li>
<li>Fix IllegalArgumentException initializing spotbugs when inside a fat jar on Java 25 (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/3875">#3875</a>)</li>
<li>Do not report <code>DM_DEFAULT_ENCODING</code> for classes compiled with target >= 18 (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/3866">#3866</a>)</li>
<li>Fix <code>FS_BAD_DATE_FORMAT_FLAG_COMBO</code> not suppressed by field-level annotation (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/3838">#3838</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/spotbugs/spotbugs/commit/9efccc98e51780e2e4e8d40b1984bc354c672874"><code>9efccc9</code></a> release v4.10.2</li>
<li><a href="https://github.com/spotbugs/spotbugs/commit/205d91b78cb13d70a6104a1e51fe75092a597a83"><code>205d91b</code></a> Check binary compatibility (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4159">#4159</a>)</li>
<li><a href="https://github.com/spotbugs/spotbugs/commit/a177422bd0c1b362af4206303310974ad03d5d43"><code>a177422</code></a> Update spring core to v7.0.8 (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4158">#4158</a>)</li>
<li><a href="https://github.com/spotbugs/spotbugs/commit/2d6857f60d12f8ab9841d8a515a5407be068465f"><code>2d6857f</code></a> update sonatype link in <code>RELEASE_PROCEDURE.md</code> (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4157">#4157</a>)</li>
<li><a href="https://github.com/spotbugs/spotbugs/commit/32d4fb99f5215b1aff9b4c48e65a34f5781f6604"><code>32d4fb9</code></a> chore(build): Add verification on tag release that version matches the tag (#...</li>
<li><a href="https://github.com/spotbugs/spotbugs/commit/66579220ff0411c1d229bdde76ea6a927a8815c1"><code>6657922</code></a> prepare for next release</li>
<li><a href="https://github.com/spotbugs/spotbugs/commit/7460889fe10f3f4820c8dafc893d8a791796e74e"><code>7460889</code></a> release v4.10.1</li>
<li><a href="https://github.com/spotbugs/spotbugs/commit/f6c459787639dcc6ab9f1ad5a8e482e997e63330"><code>f6c4597</code></a> prepare for next release</li>
<li><a href="https://github.com/spotbugs/spotbugs/commit/6e64d996fae75e8665eac37219861274a89e7967"><code>6e64d99</code></a> release v4.10.0</li>
<li><a href="https://github.com/spotbugs/spotbugs/commit/73a6f5946b64fe5ebd0e20bd62e835963d6f61c3"><code>73a6f59</code></a> feat: add partial JSpecify annotations support (from PR <a href="https://redirect.github.com/spotbugs/spotbugs/issues/3142">#3142</a>) (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/3996">#3996</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/spotbugs/spotbugs/compare/4.9.8...4.10.2">compare view</a></li>
</ul>
</details>
<br />
Updates `org.jetbrains.kotlin:kotlin-bom` from 2.2.21 to 2.4.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin:kotlin-bom's releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.0</h2>
<h2>Changelog</h2>
<h3>Analysis API</h3>
<ul>
<li><a href="https://youtrack.jetbrains.com/issue/KT-83867"><code>KT-83867</code></a> OVERLOAD_RESOLUTION_AMBIGUITY false positive with assertEquals in IJ repo</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-83723"><code>KT-83723</code></a> [Analysis API] Enable experimental KDoc resolver by default</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-83388"><code>KT-83388</code></a> Analysis API: properly support KMP in KotlinPackageProvider</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-65683"><code>KT-65683</code></a> Analysis API: Dangling file session creation causes a <code>computeIfAbsent</code> contract violation</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a href="https://youtrack.jetbrains.com/issue/KT-78946"><code>KT-78946</code></a> Evaluation of variable with local class in type parameter leads to InventNamesForLocalClasses exception</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a href="https://youtrack.jetbrains.com/issue/KT-68260"><code>KT-68260</code></a> K2 AA: InvalidFirElementTypeException “For CALLABLE_REFERENCE_EXPRESSION with text <code>::lam1</code>, unexpected element of type: no element found” with illegal callable reference call</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-70896"><code>KT-70896</code></a> AA: False positive deprecation warning with override of built-in method in JDK mapped class</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-84711"><code>KT-84711</code></a> K2 IDE sometimes loses FIR plugin-generated declarations after file changes</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-84625"><code>KT-84625</code></a> Analysis API: collectDesignationPath fails for nested classes inside plugin-generated top-level classes</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-84596"><code>KT-84596</code></a> Improve K2 Jooq completion performance</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-84525"><code>KT-84525</code></a> KaValueParameterSymbol#getHasSynthesizedName returns false for FirDeclarationOrigin.SubstitutionOverride.DeclarationSite</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-83546"><code>KT-83546</code></a> Kotlin analysis reach ClsCustomNavigationPolicy</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-84259"><code>KT-84259</code></a> Move CommonDefaultImportsProvider to the frontend independent module</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-82945"><code>KT-82945</code></a> Analysis API: KotlinIllegalArgumentExceptionWithAttachments: Expected FirResolvedTypeRef with ConeKotlinType but was FirUserTypeRefImpl</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-71135"><code>KT-71135</code></a> AA: exception from sealed inheritors checker when <code>analyzeCopy</code></li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<h4>Fixes</h4>
<ul>
<li><a href="https://youtrack.jetbrains.com/issue/KT-83905"><code>KT-83905</code></a> Analysis API: Improve UX with test data</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-84913"><code>KT-84913</code></a> Extract compiler classes used by the PSI & Analysis API to a separate module</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-64986"><code>KT-64986</code></a> Analysis API: Implement Analysis API tests for different KMP Platforms</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-84776"><code>KT-84776</code></a> The test data manager misses the redundancy check in the update mode</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-84962"><code>KT-84962</code></a> The test data manager misses -ea flag</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-84388"><code>KT-84388</code></a> Preserve the EOF status in the test data manager to avoid extra changes</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-84362"><code>KT-84362</code></a> Analysis API tests produce many warnings due to "not yet loaded registry"</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-84279"><code>KT-84279</code></a> Test Data Manager fails on a clean build</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-83913"><code>KT-83913</code></a> Exclude compiler-based Analysis API tests from Git tracking</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-80379"><code>KT-80379</code></a> Extract per-module test generators for AA tests</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-84120"><code>KT-84120</code></a> Move CLI modules out of kotlin-compiler-fe10-for-ide</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-83200"><code>KT-83200</code></a> Track external dependencies of the Analysis API modules</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<ul>
<li><a href="https://youtrack.jetbrains.com/issue/KT-82434"><code>KT-82434</code></a> Light classes should prefer enum entries to properties</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-84200"><code>KT-84200</code></a> SLC: return type is not boxed for delegated methods with generic original method</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-72451"><code>KT-72451</code></a> "CCE: class PsiPrimitiveType cannot be cast to class PsiClassType" with same-named enum class and typealias</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin:kotlin-bom's changelog</a>.</em></p>
<blockquote>
<h2>2.4.0</h2>
<h3>Analysis API</h3>
<ul>
<li><a href="https://youtrack.jetbrains.com/issue/KT-83867"><code>KT-83867</code></a> OVERLOAD_RESOLUTION_AMBIGUITY false positive with assertEquals in IJ repo</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-83723"><code>KT-83723</code></a> [Analysis API] Enable experimental KDoc resolver by default</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-83388"><code>KT-83388</code></a> Analysis API: properly support KMP in KotlinPackageProvider</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-65683"><code>KT-65683</code></a> Analysis API: Dangling file session creation causes a <code>computeIfAbsent</code> contract violation</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a href="https://youtrack.jetbrains.com/issue/KT-78946"><code>KT-78946</code></a> Evaluation of variable with local class in type parameter leads to InventNamesForLocalClasses exception</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a href="https://youtrack.jetbrains.com/issue/KT-68260"><code>KT-68260</code></a> K2 AA: InvalidFirElementTypeException “For CALLABLE_REFERENCE_EXPRESSION with text <code>::lam1</code>, unexpected element of type: no element found” with illegal callable reference call</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-70896"><code>KT-70896</code></a> AA: False positive deprecation warning with override of built-in method in JDK mapped class</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-84711"><code>KT-84711</code></a> K2 IDE sometimes loses FIR plugin-generated declarations after file changes</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-84625"><code>KT-84625</code></a> Analysis API: collectDesignationPath fails for nested classes inside plugin-generated top-level classes</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-84596"><code>KT-84596</code></a> Improve K2 Jooq completion performance</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-84525"><code>KT-84525</code></a> KaValueParameterSymbol#getHasSynthesizedName returns false for FirDeclarationOrigin.SubstitutionOverride.DeclarationSite</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-83546"><code>KT-83546</code></a> Kotlin analysis reach ClsCustomNavigationPolicy</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-84259"><code>KT-84259</code></a> Move CommonDefaultImportsProvider to the frontend independent module</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-82945"><code>KT-82945</code></a> Analysis API: KotlinIllegalArgumentExceptionWithAttachments: Expected FirResolvedTypeRef with ConeKotlinType but was FirUserTypeRefImpl</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-71135"><code>KT-71135</code></a> AA: exception from sealed inheritors checker when <code>analyzeCopy</code></li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<h4>Fixes</h4>
<ul>
<li><a href="https://youtrack.jetbrains.com/issue/KT-83905"><code>KT-83905</code></a> Analysis API: Improve UX with test data</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-84913"><code>KT-84913</code></a> Extract compiler classes used by the PSI & Analysis API to a separate module</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-64986"><code>KT-64986</code></a> Analysis API: Implement Analysis API tests for different KMP Platforms</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-84776"><code>KT-84776</code></a> The test data manager misses the redundancy check in the update mode</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-84962"><code>KT-84962</code></a> The test data manager misses -ea flag</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-84388"><code>KT-84388</code></a> Preserve the EOF status in the test data manager to avoid extra changes</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-84362"><code>KT-84362</code></a> Analysis API tests produce many warnings due to "not yet loaded registry"</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-84279"><code>KT-84279</code></a> Test Data Manager fails on a clean build</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-83913"><code>KT-83913</code></a> Exclude compiler-based Analysis API tests from Git tracking</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-80379"><code>KT-80379</code></a> Extract per-module test generators for AA tests</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-84120"><code>KT-84120</code></a> Move CLI modules out of kotlin-compiler-fe10-for-ide</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-83200"><code>KT-83200</code></a> Track external dependencies of the Analysis API modules</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<ul>
<li><a href="https://youtrack.jetbrains.com/issue/KT-82434"><code>KT-82434</code></a> Light classes should prefer enum entries to properties</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-84200"><code>KT-84200</code></a> SLC: return type is not boxed for delegated methods with generic original method</li>
<li><a href="https://youtrack.jetbrains.com/issue/KT-72451"><code>KT-72451</code></a> "CCE: class PsiPrimitiveType cannot be cast to class PsiClassType" with same-named enum class and typealias</li>
</ul>
<h3>Analysis API. PSI</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/JetBrains/kotlin/commit/add726ca8c82922b6ab4cb2a27ae738d6a780817"><code>add726c</code></a> Add ChangeLog for 2.4.0-RC2</li>
<li><a href="https://github.com/JetBrains/kotlin/commit/69a4a81ef24de99aec8c05d175239ddfe29c876d"><code>69a4a81</code></a> [Wasm] Add binaryen per-file arguments</li>
<li><a href="https://github.com/JetBrains/kotlin/commit/8907c635d4a7101e318b895c2829fc917c64e92c"><code>8907c63</code></a> [KGP] Suppress duplicate compiler warning output when --warning-mode=all is a...</li>
<li><a href="https://github.com/JetBrains/kotlin/commit/f9bef128ea07e986602e3c6524cea85038308ae6"><code>f9bef12</code></a> [KGP] Add failing test for duplicate compiler warning output via Problems API</li>
<li><a href="https://github.com/JetBrains/kotlin/commit/7fe49c227af21127ab4eb39a2da693e14a068fe4"><code>7fe49c2</code></a> KT-86268: Use 2.4.0 toolchain for abiValidation with older CVs</li>
<li><a href="https://github.com/JetBrains/kotlin/commit/13d25e2c581f55cecbe80bf9e9359af14fa00ef9"><code>13d25e2</code></a> KT-86268: Regression test added</li>
<li><a href="https://github.com/JetBrains/kotlin/commit/f7d1a76541b33871e9be156143ceb904588c4863"><code>f7d1a76</code></a> [JKlib] Fix JAR deserializer configuration.</li>
<li><a href="https://github.com/JetBrains/kotlin/commit/5cec663affd3fe9e7b7342e336ad4952ae59a2ad"><code>5cec663</code></a> [JKlib] Wire up JvmBuiltInClassDescriptorFactory</li>
<li><a href="https://github.com/JetBrains/kotlin/commit/ef146114de8b0db65ff96b21a67c87da95a8c82e"><code>ef14611</code></a> Make the default stability of non-final classes <code>Unknown</code> instead of <code>Stable</code></li>
<li><a href="https://github.com/JetBrains/kotlin/commit/d76473afd242d7655c975a6346ed4b24c35573ca"><code>d76473a</code></a> [Gradle] Fix GeneralNativeIT.shouldAllowToOverrideDownloadUrl test failures</li>
<li>Additional commits viewable in <a href="https://github.com/JetBrains/kotlin/compare/v2.2.21...v2.4.0">compare view</a></li>
</ul>
</details>
<br />
Updates `com.fasterxml.jackson:jackson-bom` from 2.20.1 to 2.22.0
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/FasterXML/jackson-bom/commit/112e8591b5e14dff30c278c142d8111231c3a48f"><code>112e859</code></a> [maven-release-plugin] prepare release jackson-bom-2.22.0</li>
<li><a href="https://github.com/FasterXML/jackson-bom/commit/2cae2ce236587ee18c58e40e01d432a077b3e7ae"><code>2cae2ce</code></a> Prep for 2.22.0 release</li>
<li><a href="https://github.com/FasterXML/jackson-bom/commit/7955d2113f21d1027f0b643e5fbca4a1feae5964"><code>7955d21</code></a> Merge branch '2.21' into 2.x</li>
<li><a href="https://github.com/FasterXML/jackson-bom/commit/8922a05c6e46f790b67e64e15585eb070b6ebc6d"><code>8922a05</code></a> Post-release dep version bump</li>
<li><a href="https://github.com/FasterXML/jackson-bom/commit/1fa994366741173fb38bc7c194666819ade60f6d"><code>1fa9943</code></a> [maven-release-plugin] prepare for next development iteration</li>
<li><a href="https://github.com/FasterXML/jackson-bom/commit/d1abd31e4fec3035965d57a05a6256171ea8d980"><code>d1abd31</code></a> [maven-release-plugin] prepare release jackson-bom-2.21.4</li>
<li><a href="https://github.com/FasterXML/jackson-bom/commit/2aaea43db8480aa7d405ebc0de503cffc864f6f6"><code>2aaea43</code></a> Prep for 2.21.4 release</li>
<li><a href="https://github.com/FasterXML/jackson-bom/commit/902ec69efea40cdf1647c6fb49fb78734a88f3e6"><code>902ec69</code></a> Update Woodstox/stax2-api (to 7.2.0/4.3.0)</li>
<li><a href="https://github.com/FasterXML/jackson-bom/commit/257064709f8ea9ca84ea5d569080f9daacc0e017"><code>2570647</code></a> Merge branch '2.21' into 2.x</li>
<li><a href="https://github.com/FasterXML/jackson-bom/commit/9d3a9d54e40312ef0ac9192d599b59b541f65fb8"><code>9d3a9d5</code></a> Post-release dep version bump</li>
<li>Additional commits viewable in <a href="https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.20.1...jackson-bom-2.22.0">compare view</a></li>
</ul>
</details>
<br />
Updates `org.apache.logging.log4j:log4j-bom` from 2.25.2 to 2.26.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/apache/logging-log4j2/releases">org.apache.logging.log4j:log4j-bom's releases</a>.</em></p>
<blockquote>
<h2>2.26.0</h2>
<p>This minor release delivers all the fixes in the <code>[2.25.0, 2.25.4]</code> version range, plus some new fixes, and several other improvements and features.</p>
<h3>Added</h3>
<ul>
<li>Add a new <code>ConfigurationFactory::getConfiguration</code> method accepting multiple <code>URI</code>s (<a href="https://redirect.github.com/apache/logging-log4j2/issues/3775">#3775</a>, <a href="https://redirect.github.com/apache/logging-log4j2/issues/3921">#3921</a>)</li>
<li>Add and export <code>org.apache.logging.log4j.core.pattern.NamedInstantPattern</code> enabling users to programmatically access named date & time patterns supported by Pattern Layout (<a href="https://redirect.github.com/apache/logging-log4j2/issues/3789">#3789</a>)</li>
<li>Add <code>log4j.plugin.processor.minAllowedMessageKind</code> annotation processor option to <code>PluginProcessor</code> to filter diagnostic messages by severity. This allows builds that treat compiler notes as errors (e.g. Maven with <code>-Werror</code>) to suppress informational notes emitted during normal plugin processing. (<a href="https://redirect.github.com/apache/logging-log4j2/discussions/3380%5B#3380%5D(https://redirect.github.com/apache/logging-log4j2/issues/3380)">apache/logging-log4j2#3380</a>, <a href="https://redirect.github.com/apache/logging-log4j2/issues/4063">#4063</a>)</li>
<li>Add missing setters to <code>Rfc5424LayoutBuilder</code></li>
</ul>
<h3>Changed</h3>
<ul>
<li>Ensure scripts in the global <code>Scripts</code> element have explicit names by throwing a <code>ConfigurationException</code> for unnamed ones. (<a href="https://redirect.github.com/apache/logging-log4j2/issues/3176">#3176</a>)</li>
<li>Simplify file manager registry factory methods (<a href="https://redirect.github.com/apache/logging-log4j2/issues/3968">#3968</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecated withers in builder classes in favor of setters. This change improves API consistency with Log4j Core 3 and helps users adapt to the upcoming changes. (<a href="https://redirect.github.com/apache/logging-log4j2/issues/3750">#3750</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix script resolution failure when the <code>Scripts</code> element is placed after a <code>ScriptRef</code> in the configuration. (<a href="https://redirect.github.com/apache/logging-log4j2/issues/3336">#3336</a>)</li>
<li>Fix <code>ArrayIndexOutOfBoundsException</code> thrown by <code>ThrowableStackTraceRenderer</code> when the stack trace is modified concurrently (<a href="https://redirect.github.com/apache/logging-log4j2/issues/3940">#3940</a>, <a href="https://redirect.github.com/apache/logging-log4j2/issues/3955">#3955</a>)</li>
<li>Fix <code>SLF4JLogger.atFatal()</code> returning <code>atLevel(Level.TRACE)</code> instead of <code>atLevel(Level.FATAL)</code>. This was causing <code>FATAL</code>-level log events to be silently discarded when using the fluent API through the <code>log4j-to-slf4j</code> bridge. (<a href="https://redirect.github.com/apache/logging-log4j2/issues/4068">#4068</a>, <a href="https://redirect.github.com/apache/logging-log4j2/issues/4089">#4089</a>)</li>
<li>Fix Javadoc references across module boundaries (i.e., cross-references) (<a href="https://redirect.github.com/apache/logging-log4j2/issues/4099">#4099</a>, <a href="https://redirect.github.com/apache/logging-log4j2/issues/4100">#4100</a>)</li>
<li>Fix header write in <code>RollingRandomAccessFileManager</code> that was being incorrectly skipped if <code>append=true</code> and the file didn't exist before</li>
<li>Fix a properties file configuration regression caused by not referenced loggers, appenders, and filters (<a href="https://redirect.github.com/apache/logging-log4j2/issues/4036">#4036</a>, <a href="https://redirect.github.com/apache/logging-log4j2/issues/4069">#4069</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Remove the <code>jvmrunargs</code> lookup. (<a href="https://redirect.github.com/apache/logging-log4j2/issues/3874">#3874</a>)</li>
</ul>
<h3>Updated</h3>
<ul>
<li>Update <code>org.junit:junit-bom</code> to version <code>5.13.4</code> (<a href="https://redirect.github.com/apache/logging-log4j2/issues/3850">#3850</a>)</li>
<li>Update <code>org.mongodb:bson</code> to version <code>5.6.1</code> (<a href="https://redirect.github.com/apache/logging-log4j2/issues/3961">#3961</a>)</li>
<li>Update <code>org.xerial.snappy:snappy-java</code> to version <code>1.1.10.8</code> (<a href="https://redirect.github.com/apache/logging-log4j2/issues/3841">#3841</a>)</li>
</ul>
<h2>2.25.4</h2>
<p>This patch release delivers fixes for configuration inconsistencies and formatting issues across several layouts.</p>
<ul>
<li>Restores alignment between documented and actual configuration attributes.</li>
<li>Fixes formatting and sanitization issues in XML and RFC5424 layouts.</li>
<li>Improves handling of invalid characters and non-standard values.</li>
</ul>
<p>The authoritative list of recognized configuration attributes is available in the <a href="https://logging.apache.org/log4j/2.x/plugin-reference.html">PluginReference</a>.</p>
<h3>Fixed</h3>
<ul>
<li>Don't issue warnings if extra argument in parameterized logging is <code>null</code>. (<a href="https://redirect.github.com/apache/logging-log4j2/issues/3975">#3975</a>, <a href="https://redirect.github.com/apache/logging-log4j2/issues/4014">#4014</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/apache/logging-log4j2/commit/c1ad2a66cc90e643ec319b9e131764c9710bebc5"><code>c1ad2a6</code></a> Update the <code>project.build.outputTimestamp</code> property</li>
<li><a href="https://github.com/apache/logging-log4j2/commit/8b3a7990421ec5cff2a44914c07d0676067c31ad"><code>8b3a799</code></a> Set version to <code>2.26.0</code></li>
<li><a href="https://github.com/apache/logging-log4j2/commit/96486ebb8a2176f7bd14c797b334da84d90e801b"><code>96486eb</code></a> Merge remote-tracking branch 'origin/2.x' into release/2.26.0</li>
<li><a href="https://github.com/apache/logging-log4j2/commit/82432570e8bb9a67c32de51dc63ebcfcec939818"><code>8243257</code></a> Add documentation for <code>MessageRewritePolicy</code> (<a href="https://redirect.github.com/apache/logging-log4j2/issues/4042">#4042</a>)</li>
<li><a href="https://github.com/apache/logging-log4j2/commit/2a15414e839fea3f3ba61cc7403dd8e4130a15cf"><code>2a15414</code></a> Add documentation pointer to the Async HTTP Appender of <code>more-log4j2</code> (<a href="https://redirect.github.com/apache/logging-log4j2/issues/4062">#4062</a>)</li>
<li><a href="https://github.com/apache/logging-log4j2/commit/b178cb1f926b3db43c65e69e9b7be7b76431f824"><code>b178cb1</code></a> Switch CI to <code>gha/v0</code> and remove Develocity (<a href="https://redirect.github.com/apache/logging-log4j2/issues/4108">#4108</a>)</li>
<li><a href="https://github.com/apache/logging-log4j2/commit/23321deb0e1e1509ac16c5453653c86c1a4d5867"><code>23321de</code></a> Remove changelog entries for already released changes</li>
<li><a href="https://github.com/apache/logging-log4j2/commit/def55fcf441b2a9ec2e6454e8fa8e1053d7d59ba"><code>def55fc</code></a> Add <code>.release.xml</code> and <code>.release-notes.adoc.ftl</code></li>
<li><a href="https://github.com/apache/logging-log4j2/commit/0e019f23b001219fd32c78397224b134fa41e431"><code>0e019f2</code></a> Move changelog entries</li>
<li><a href="https://github.com/apache/logging-log4j2/commit/a487a5d029697fc0b276a20c4277b24bf1f66b50"><code>a487a5d</code></a> Tidy up changelog</li>
<li>Additional commits viewable in <a href="https://github.com/apache/logging-log4j2/compare/rel/2.25.2...rel/2.26.0">compare view</a></li>
</ul>
</details>
<br />
Updates `org.apache.logging.log4j:log4j-core` from 2.25.2 to 2.26.0
Updates `org.slf4j:slf4j-bom` from 2.0.17 to 2.0.18
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/qos-ch/slf4j/releases">org.slf4j:slf4j-bom's releases</a>.</em></p>
<blockquote>
<h2>SLF4J 2.0.18</h2>
<p>2026-05-12 - Release of SLF4J 2.0.18</p>
<p>• In the <code>logViaLocationAwareLoggerAPI()</code> method of <code>slf4j-api/DefaultLoggingEventBuilder</code> the first marker from the <code>markerList</code> is now passed to <code>locationAwareLogger.log()</code> instead of <code>null</code>.</p>
<p>• The <code>renderLevel()</code> method in <code>slf4j-simple/SimpleLogger</code> now uses <code>CONFIG_PARAMS.warnLevelString</code> for WARN instead of hardcoded "WARN". This issue was reported in <a href="https://redirect.github.com/qos-ch/slf4j/issues/471">issues/471</a>.</p>
<p>• A bit-wise identical binary of this version can be reproduced by building from source code at commit 58b66c2c7e840f525c07db4509534ea53ef95b82 associated with the tag v_2.0.18. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/qos-ch/slf4j/commit/58b66c2c7e840f525c07db4509534ea53ef95b82"><code>58b66c2</code></a> update central-publishing-maven-plugin</li>
<li><a href="https://github.com/qos-ch/slf4j/commit/be4841cce88b0e37f4780f6258d6da24fb023d63"><code>be4841c</code></a> prepare release 2.0.18</li>
<li><a href="https://github.com/qos-ch/slf4j/commit/d2073bece8310017914e1ff65d7107b2d4869c7d"><code>d2073be</code></a> minor refactoring, javadoc changes</li>
<li><a href="https://github.com/qos-ch/slf4j/commit/32a9854cf414993abcefec097354ca1758dc45ec"><code>32a9854</code></a> add a trivial test for CONFIG_PARAMS.warnLevelString</li>
<li><a href="https://github.com/qos-ch/slf4j/commit/77936c6f1f4808e3f0e75f54244093c21f929f60"><code>77936c6</code></a> CONFIG_PARAMS.warnLevelString should be taken into account</li>
<li><a href="https://github.com/qos-ch/slf4j/commit/34c9d30af550b7aa97d0af24c1215215a981dfc4"><code>34c9d30</code></a> extract first marker when caller locationAwareLogger</li>
<li><a href="https://github.com/qos-ch/slf4j/commit/902b46395728eff3cec405504a8b4fe43ff9b347"><code>902b463</code></a> remove cruft</li>
<li><a href="https://github.com/qos-ch/slf4j/commit/b3c2f16f12ee6e89734424971b08cfe892071cfc"><code>b3c2f16</code></a> security manager is no longer supported in later JDKs</li>
<li><a href="https://github.com/qos-ch/slf4j/commit/9468c7a28fe919860f202abaf947e99c2321cefe"><code>9468c7a</code></a> remove unneccessary and unused files</li>
<li><a href="https://github.com/qos-ch/slf4j/commit/183aaa507040ce6c61f70762c13e7d11aa4fd54e"><code>183aaa5</code></a> start work on 2.0.18-SNAPSHOT</li>
<li>See full diff in <a href="https://github.com/qos-ch/slf4j/compare/v_2.0.17...v_2.0.18">compare view</a></li>
</ul>
</details>
<br />
Updates `org.springframework.boot:spring-boot-dependencies` from 3.5.7 to 4.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/spring-projects/spring-boot/releases">org.springframework.boot:spring-boot-dependencies's releases</a>.</em></p>
<blockquote>
<h2>v4.1.0</h2>
<p>Full <a href="https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-4.1-Release-Notes">release notes for Spring Boot 4.1</a> are available on the wiki.</p>
<h2>:star: New Features</h2>
<ul>
<li>Add public constructor to InvalidConfigurationPropertyValueException that accepts a cause <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50211">#50211</a></li>
<li>Reduce memory consumption when repeatedly calling WritableJson.toByteArray <a href="https://redirect.github.com/spring-projects/spring-boot/issues/49428">#49428</a></li>
</ul>
<h2>:lady_beetle: Bug Fixes</h2>
<ul>
<li>MailSender auto-configuration does not enable hostname verification <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50747">#50747</a></li>
<li>Artemis auto-configuration uses a predictable default location for the embedded broker's data <a href="https://redirect.github.com/spring-projects/spring-boot/issues/50745">#50745</a></li>
<li>Embedded LDAP SSL should not be enabled when its bundle is empty <a href="https://redirect.github.com/spring-projects/s...
_Description has been truncated_
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: robots-unsubscribe@logging.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump the all group across 2 directories with 26 updates [logging-log4j-samples]
Posted by "ppkarwasz (via GitHub)" <gi...@apache.org>.
ppkarwasz commented on PR #403:
URL: https://github.com/apache/logging-log4j-samples/pull/403#issuecomment-5077656667
@dependabot recreate
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@logging.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump the all group across 2 directories with 26 updates [logging-log4j-samples]
Posted by "ppkarwasz (via GitHub)" <gi...@apache.org>.
ppkarwasz merged PR #403:
URL: https://github.com/apache/logging-log4j-samples/pull/403
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@logging.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump the all group across 2 directories with 26 updates [logging-log4j-samples]
Posted by "ppkarwasz (via GitHub)" <gi...@apache.org>.
ppkarwasz commented on PR #403:
URL: https://github.com/apache/logging-log4j-samples/pull/403#issuecomment-5077960709
I pushed some manual changes on top of the Dependabot commit:
- **Reverted the Spring Boot 4.1.0 and Spring Cloud 2025.1.2 bumps** back to 3.5.7 and 2025.0.0. Spring Boot 4 requires code changes (removed `spring-boot-starter-aop`, Spring Framework 7 and Spring Security 7 API removals, JUnit 6), which will be delivered in a separate PR.
- Managed `org.osgi.annotation.bundle` in the root POM, since `logging-parent` 12.x intentionally no longer manages annotation dependencies.
- Added JSpecify (referenced by `log4j-api` 2.26.1) as a provided dependency to the WAR samples, so bnd can import the annotations package instead of reporting private references.
- Imported `netty-bom` 4.1.135.Final in the Spring Cloud sample application, since `kubernetes-client` 7.8.0 requires a more recent Netty than the one managed by `spring-boot-dependencies` 3.5.7.
- Grouped the root POM `dependencyManagement` entries into IDE-foldable regions.
`./mvnw verify` passes for all modules with these changes.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@logging.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org