deps(deps): bump the other-deps group with 50 updates by dependabot[bot] · Pull Request #290 · SophiaData/Bigdata_Code_Tutorial

dependabot · 2026-10-12T02:50:30Z

Bumps the other-deps group with 50 updates:

Package	From	To
org.yaml:snakeyaml	`2.2`	`2.7`
org.slf4j:slf4j-api	`1.7.15`	`2.0.20`
org.apache.logging.log4j:log4j-api	`2.25.5`	`2.26.1`
org.apache.logging.log4j:log4j-core	`2.25.5`	`2.26.1`
org.apache.logging.log4j:log4j-1.2-api	`2.25.5`	`2.26.1`
org.apache.logging.log4j:log4j-slf4j-impl	`2.25.5`	`2.26.1`
com.mysql:mysql-connector-j	`8.4.0`	`26.7.0`
org.apache.hadoop:hadoop-client	`3.3.6`	`3.5.0`
org.apache.hadoop:hadoop-common	`3.3.6`	`3.5.0`
org.apache.hadoop:hadoop-hdfs	`3.3.6`	`3.5.0`
org.apache.hadoop:hadoop-mapreduce-client-core	`3.3.6`	`3.5.0`
com.alibaba.nacos:nacos-client	`2.1.2`	`3.2.4`
com.alibaba:fastjson	`2.0.52`	`2.0.65`
com.jayway.jsonpath:json-path	`2.9.0`	`3.0.0`
com.google.protobuf:protobuf-java	`3.25.5`	`4.36.2`
net.minidev:json-smart	`2.5.2`	`2.6.0`
net.minidev:accessors-smart	`2.5.0`	`2.6.0`
commons-net:commons-net	`3.10.0`	`3.13.0`
com.squareup.okio:okio	`3.4.0`	`3.18.2`
org.apache.zookeeper:zookeeper	`3.9.5`	`3.9.6`
commons-cli:commons-cli	`1.5.0`	`1.11.0`
dnsjava:dnsjava	`3.6.0`	`3.6.5`
org.codehaus.plexus:plexus-utils	`3.6.1`	`4.1.0`
at.yawk.lz4:lz4-java	`1.11.4`	`1.12.0`
org.codehaus.mojo:versions-maven-plugin	`2.14.2`	`2.22.0`
org.apache.maven.plugins:maven-enforcer-plugin	`3.5.0`	`3.6.3`
org.apache.maven.plugins:maven-pmd-plugin	`3.21.0`	`3.28.0`
org.jacoco:jacoco-maven-plugin	`0.8.12`	`0.8.15`
org.apache.maven.plugins:maven-compiler-plugin	`3.10.0`	`3.16.0`
org.apache.maven.plugins:maven-surefire-plugin	`3.0.0-M5`	`3.6.0`
com.diffplug.spotless:spotless-maven-plugin	`3.10.2`	`3.10.4`
org.apache.maven.plugins:maven-checkstyle-plugin	`3.1.2`	`3.6.0`
com.github.spotbugs:spotbugs-maven-plugin	`4.8.6.6`	`4.10.4.1`
org.apache.maven.plugins:maven-shade-plugin	`3.5.1`	`3.6.2`
org.codehaus.mojo:build-helper-maven-plugin	`3.6.0`	`3.6.2`
org.apache.avro:avro	`1.12.1`	`1.12.2`
org.scala-lang:scala-library	`2.12.7`	`3.10.0`
org.apache.kafka:kafka-clients	`4.1.2`	`4.3.1`
org.elasticsearch.client:elasticsearch-rest-high-level-client	`7.17.9`	`7.17.29`
org.apache.commons:commons-lang3	`3.18.0`	`3.21.0`
org.apache.maven.plugins:maven-dependency-plugin	`3.7.1`	`3.11.0`
com.h2database:h2	`2.2.224`	`2.5.252`
com.nimbusds:nimbus-jose-jwt	`10.0.2`	`10.10`
org.apache.maven.plugins:maven-assembly-plugin	`3.6.0`	`3.8.0`
org.apache.maven.plugins:maven-jar-plugin	`3.3.0`	`3.5.1`
org.apache.paimon:paimon-flink-1.20	`1.4.1`	`1.4.2`
org.apache.paimon:paimon-flink-cdc	`1.4.1`	`1.4.2`
org.mongodb:mongodb-driver-sync	`4.11.1`	`5.13.0`
org.apache.kafka:connect-api	`3.6.1`	`4.3.1`
org.apache.maven:apache-maven	`3.9.9`	`3.10.0`

Updates org.yaml:snakeyaml from 2.2 to 2.7

Updates org.slf4j:slf4j-api from 1.7.15 to 2.0.20

Updates org.apache.logging.log4j:log4j-api from 2.25.5 to 2.26.1

Updates org.apache.logging.log4j:log4j-core from 2.25.5 to 2.26.1

Updates org.apache.logging.log4j:log4j-1.2-api from 2.25.5 to 2.26.1

Updates org.apache.logging.log4j:log4j-slf4j-impl from 2.25.5 to 2.26.1

Updates org.apache.logging.log4j:log4j-core from 2.25.5 to 2.26.1

Updates org.apache.logging.log4j:log4j-1.2-api from 2.25.5 to 2.26.1

Updates org.apache.logging.log4j:log4j-slf4j-impl from 2.25.5 to 2.26.1

Updates com.mysql:mysql-connector-j from 8.4.0 to 26.7.0

Changelog

Sourced from com.mysql:mysql-connector-j's changelog.

Changelog

https://dev.mysql.com/doc/relnotes/connector-j/en/

Version 26.7.0

Fix for Bug#39449361, LOAD DATA LOCAL INFILE accepts ambiguous Windows file URL path forms.

Fix for Bug#39328305, X Protocol reader does not validate server-supplied frame length before allocation.

Fix for Bug#39327277, Restrict SSL keystore loading to local file inputs.

Fix for Bug#39320456, Unexpected behavior with LOAD DATA LOCAL INFILE and connection options.

Fix for Bug#120227 (Bug#39204043), LOAD DATA LOCAL INFILE: missing EOF packet on IOException leaves server thread hanging.

Fix for Bug#120096 (Bug#39125648), MysqlConnector/Java Connection Url CharacterEncoding bug. Thanks to Rahman Rejepov for his contribution.

Version 9.7.0

Fix for Bug#119863 (Bug#38951042), Inaccurate decoding of negative TIME durations in Binary Protocol (Cursor Mode).

WL#17215, Implement JDBC 4.3/4.5 Statement/Connection.enquote* methods.

Fix for Bug#119245 (Bug#38599240), Select into fix breaks queries with 'into' in them. (reopened)

Fix for Bug#119659 (Bug#38916595), BinaryResultsetReader fails to consume EOF packet after column definitions when EOF is not deprecated.

Version 9.6.0

Fix for Bug#118002 (Bug#37843004), The setFetchSize() method in the Statement class may have a potential bug.

Fix for Bug#113130 (Bug#36043125), getGeneratedKeys() returns a zero resultset with non-key-generating statements.

Fix for Bug#113336 (Bug#36080226), Inconsistent getUpdateCount() Behavior with allowMultiQueries.

Fix for Bug#118234 (Bug#37975837), A potential bugs in Mysql Connector/J.

Fix for Bug#113413 (Bug#36107426), Connection.changeUser cannot be done after DriverManager.loginTimeout elapses. Thanks to Kazuhisa Kawashima for his contribution.

Fix for Bug#119271 (Bug#38599496), Connector/J fails to accept legacy value zeroDateTimeBehavior=convertToNull on multi-host URLs (failover).

Fix for Bug#119245 (Bug#38599240), Select into fix breaks queries with 'into' in them.

Version 9.5.0

Fix for Bug#72036 (Bug#18403804), XA isSameRM() shouldn't take database into account.

Fix for Bug#62693 (Bug#16722068), XAConnection savepoint capability.

... (truncated)

Commits

559f62d Update for GPL license book.
e2a58f7 Update for .gitignore with exclusion rules for codex files.
373584a Fix for Bug#39449361, LOAD DATA LOCAL INFILE accepts ambiguous Windows file U...
1ed6f37 Fix for Bug#39328305, X Protocol reader does not validate server-supplied fra...
55a2860 Fix for Bug#39327277, Restrict SSL keystore loading to local file inputs.
9ce460a Update for CalVer numbering scheme.
20e1e5d Update for README, README.md and CONTRIBUTING.md files.
f40d3be Post-release version bump for CalVer numbering scheme.
61cf1f6 Fix for Bug#39320456, Unexpected behavior with LOAD DATA LOCAL INFILE and con...
2c2d139 Fix for Bug#120227 (Bug#39204043), LOAD DATA LOCAL INFILE: missing EOF packet...
Additional commits viewable in compare view

Updates org.apache.hadoop:hadoop-client from 3.3.6 to 3.5.0

Updates org.apache.hadoop:hadoop-common from 3.3.6 to 3.5.0

Updates org.apache.hadoop:hadoop-hdfs from 3.3.6 to 3.5.0

Updates org.apache.hadoop:hadoop-mapreduce-client-core from 3.3.6 to 3.5.0

Updates com.alibaba.nacos:nacos-client from 2.1.2 to 3.2.4

Release notes

Sourced from com.alibaba.nacos:nacos-client's releases.

3.2.4 (Aug 27th, 2026)

Nacos 3.2.4 is mainly a bugfix, security-hardening, and experience-improvement release for the 3.2 series.

This release focuses on:

Strengthening JRaft, HTTP/gRPC authorization, embedded database, login, active health check, and MCP import security.

Fixing standalone Console, Prompt visibility, Config history, listener state, and MCP tool authentication issues.

Improving Config detail, edit, and history page usability.

For cluster and API operators, this release also:

Adds server-identity authentication to native JRaft gRPC traffic with rolling-upgrade-aware enforcement.

Disables selected deprecated v3 AI APIs by default and provides a temporary compatibility switch.

Adds an allowlist policy for MCP tool imports from private or local targets.

Detailed changes in this release:

Feature

#15687 Add server-identity authentication to native JRaft gRPC traffic with rolling-upgrade-aware enforcement.

Enhancement/Refactor

#14817 Add a shared, disabled-by-default compatibility gate for deprecated Pipeline and MCP import APIs.

#15661 Harden distributed embedded database result resolution to supported scalar types and registered row mappers.

#15688 Refactor controller context-path URI parsing for consistent route matching.

#15695 Improve Config detail, edit, and history layouts with compact metadata and a full-screen content view.

#15712 Harden active health checks by validating target addresses and disabling unsafe MySQL JDBC options.

#15749 Add configurable outbound access control for MCP tool imports, allowing public targets and allowlisted private or local targets.

BugFix

#15475 Fix caller identity forwarding from a standalone Console so the Server enforces caller-specific RBAC.

#15476 Fix Prompt visibility enforcement for list, detail, version, download, and Client read paths.

#15560 Fix MCP tool passthrough authentication being lost after publishing from the Console.

#15634 #15563 Fix authorization metadata and resource parsing across Admin, HTTP/gRPC, Prometheus, and AgentSpec APIs.

#15660 Fix standalone Console startup failure caused by a missing Config clone permission checker bean.

#15682 Prevent username enumeration by normalizing login failure responses.

#15701 Fix Config history next-record queries on Derby and apply gray-name filtering correctly.

#15724 Preserve the namespace filter when aggregating listener-by-IP state across cluster members.

Breaking Change Notice

Nacos 3.2.4 changes the default behavior of deprecated AI APIs and private MCP tool imports, and introduces an irreversible JRaft authentication enforcement transition.

Affected users:

... (truncated)

Commits

2c587c0 Update project revision from 3.2.2 to 3.2.4
3727713 [ISSUE #15724] Backport namespace propagation for listener IP query (#15760)
80c3ef0 Backport configurable MCP tool import endpoint policy to 3.2.4 (#15749)
68d13fc fix(console): forward caller identity to remote server (#15742) (#15743)
cd6f5b0 [ISSUE #15476] Backport Prompt visibility checks to v3.2.4 (#15739)
a72bb7a [ISSUE #14817] Backport deprecated AI API gate to 3.2.4 (#15735)
54c4277 [ISSUE #15695] Optimize configuration page layouts
2f28409 [ISSUE #15560] Fix MCP tool passthrough authentication persistence
3777d9f [ISSUE #15660] Restore missing 3.2.3 release commits to maintenance branch (#...
d8775c5 build(console): refresh restored 3.2.3 assets
Additional commits viewable in compare view

Updates com.alibaba:fastjson from 2.0.52 to 2.0.65

Release notes

Sourced from com.alibaba:fastjson's releases.

fastjson 2.0.65版本发布

FASTJSON 2.0.65 Release Notes

Release Date: 2 Sep 2026 Tag: 2.0.65 (879183e94)

Overview

This is a security fix release. It closes an AutoType authorization bypass reachable when JSONReader.Feature.SupportAutoType is enabled, and includes parser/writer robustness fixes. All users are strongly recommended to upgrade, especially applications that parse untrusted JSON or JSONB with AutoType enabled.

This release also restores fastjson2-extension-spring6 on Maven Central. It was missing for 2.0.62–2.0.64 because those releases were deployed with a JDK that did not activate the enable-for-17+ build profile, so the module never entered the build reactor #7840.

The Android variants 2.0.65.android5 and 2.0.65.android8 carry the same AutoType security fix #7843 #7844.

Security Fixes

Unified AutoType authorization on the real type name: a reader-cache hit on the FNV-1a-64 hash of @type is no longer treated as authorization. All untrusted-input paths (JSON and JSONB readers, and the object readers for beans, interfaces, exceptions, adapters, typed maps, arrays, collections and no-default-constructor types) now resolve @type through the full provider security checks — SafeMode, deny lists, type-name validation, and any user-supplied AutoTypeBeforeHandler. Compatibility is preserved for explicit local mappings declared with @JSONType(seeAlso = ...) and for readers annotated with @JSONType(... SupportAutoType) #7753

Bug Fixes

Fixed ArrayIndexOutOfBoundsException in JSONReaderASCII field-name decoding, triggered by a field name that combines an escape sequence with latin1 bytes >= 0x80 #7808 #7836

Fixed getter methods being silently discarded when serializing char/Character fields, which caused NPEs or lost field values #7719

(kotlin) Fixed NullPointerException when serializing a Kotlin class without kotlin-reflect on the classpath #7835

Documentation

Switched the star-history charts to star-history.dera.page #7780

Maven Dependency Configuration

Standard Version
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.65</version>
</dependency>
Spring 6 Extension
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring6</artifactId>
    <version>2.0.65</version>
</dependency>
Android 5 Optimized Version
</tr></table> 

... (truncated)

Commits

879183e Merge pull request #7841 from alibaba/release/2.0.65
abbcc7e 2.0.65 release
141dbe9 Merge pull request #7836 from adityaanikam/fix-jsonreaderascii-fieldname-oob-...
86a8c1a Merge pull request #7835 from obabichevjb/obabichev/fix-kotlin-npe-missing-re...
f11c2ee fix: ArrayIndexOutOfBoundsException in JSONReaderASCII field-name decoding, f...
36bc80a fix: guard against null paramNames when kotlin-reflect is not on classpath
30dd009 Merge pull request #7719 from TigerZCoder/discard-getter-when-writing-charact...
ae13900 Merge pull request #7780 from SimonFoobar648/fix/star-history-chart
5439463 fix: use star-history.dera.page for star history charts
af56f06 Merge pull request #7753 from alibaba/fix/autotype-hash-cache-unified
Additional commits viewable in compare view

Updates com.jayway.jsonpath:json-path from 2.9.0 to 3.0.0

Release notes

Sourced from com.jayway.jsonpath:json-path's releases.

json-path-3.0.0

What's Changed

adding jackson3 provider (#1066) by @bsa01 in json-path/JsonPath#1067

Prepare Version 3.0.0 - Java 17 baseline with Jackson 3 by @kallestenflo in json-path/JsonPath#1072

New Contributors

@bsa01 made their first contribution in json-path/JsonPath#1067

Full Changelog: json-path/JsonPath@json-path-2.10.0...json-path-3.0.0

json-path-2.10.0

What's Changed

Bumps dependency versions by @kallestenflo in json-path/JsonPath#1057

net.minidev:json-smart:2.6.0

org.slf4j:slf4j-api:2.0.17

com.google.code.gson:gson:2.13.2

org.hamcrest:hamcrest:3.0

com.fasterxml.jackson.core:jackson-databind:2.19.2

org.json:json:20250517

org.apache.tapestry:tapestry-json:5.9.0

jakarta.json:jakarta.json-api:2.1.3

jakarta.json.bind:jakarta.json.bind-api:2.0.0

Full Changelog: json-path/JsonPath@json-path-2.9.0...json-path-2.10.0

Commits

62a4c9f Prepare Version 3.0.0 - Java 17 baseline with Jackson 3 (#1072)
470b566 Prepare version 3.0.0
5a7f29e adding jackson3 provider (#1066) (#1067)
b6c60b3 Prepare next version (#1059)
a427387 Release 2.10.0 (#1058)
8e3b92f Bumps dependency versions (#1057)
45333e0 [CI] Remove Java 18 from build matrix (#1005)
3732a85 Upgrade net.minidev:json-smart from 2.5.0 to 2.5.1 (#1004)
2d4cc06 Upgrade to gradle 8.5 and add java 21 build (#995)
83ced52 Remove web-test project (#994)
Additional commits viewable in compare view

Updates com.google.protobuf:protobuf-java from 3.25.5 to 4.36.2

Commits

See full diff in compare view

Updates net.minidev:json-smart from 2.5.2 to 2.6.0

Release notes

Sourced from net.minidev:json-smart's releases.

v2.6.0

What's Changed

fix JSONObject.merge blocks overwriting (#175) by @caimo in netplex/json-smart-v2#238

build: prepare for next version by @hezhangjian in netplex/json-smart-v2#241

chore: use standard charset object instead by @hezhangjian in netplex/json-smart-v2#242

add Spotless + Maven wrapper by @ccudennec-otto in netplex/json-smart-v2#246

fix JSONArray merge(Object)(#51) by @caimo in netplex/json-smart-v2#247

Bump junit.version from 5.11.4 to 5.12.0 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#253

Bump junit.version from 5.11.4 to 5.12.0 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#248

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#252

Bump org.apache.maven.plugins:maven-compiler-plugin from 3.13.0 to 3.14.0 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#251

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#250

Bump org.apache.maven.plugins:maven-compiler-plugin from 3.13.0 to 3.14.0 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#249

Bump junit.version from 5.12.0 to 5.12.1 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#256

Bump junit.version from 5.12.0 to 5.12.1 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#255

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.3 to 2.44.4 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#263

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.3 to 2.44.4 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#260

Bump junit.version from 5.12.1 to 5.12.2 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#262

Bump junit.version from 5.12.1 to 5.12.2 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#261

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.4 to 2.44.5 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#268

Bump junit.version from 5.12.2 to 5.13.0 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#267

Bump junit.version from 5.12.2 to 5.13.0 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#266

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.4 to 2.44.5 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#265

Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.7 to 3.2.8 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#276

Bump junit.version from 5.13.0 to 5.13.4 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#274

Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.7 to 3.2.8 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#273

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.5 to 2.46.1 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#277

Bump junit.version from 5.13.0 to 5.13.4 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#278

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.5 to 2.46.1 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#275

fix unpack dependencies failed (#176) by @pcHwang2 in netplex/json-smart-v2#257

fix Issue 177 (support incomplet json messages) by @UrielCh in netplex/json-smart-v2#254

improve github action by @UrielCh in netplex/json-smart-v2#279

mutiple updates, new github workflow, more coverage.... by @UrielCh in netplex/json-smart-v2#280

Upgrade by @UrielCh in netplex/json-smart-v2#281

New Contributors

@pcHwang2 made their first contribution in netplex/json-smart-v2#257

Full Changelog: netplex/json-smart-v2@2.5.2...v2.6.0

Commits

ebf7cf8 try deploy
95a9bc3 try somthink else
4aac0d7 make it publish
d3a86df deploy one by one
13d282b patch deploy
b4940f5 patch deploy verbosity
edc6e6e hange publishing plugin
49e150f add git tag
29543a1 replace snapshot by the release version
5803602 force release to central
Additional commits viewable in compare view

Updates net.minidev:accessors-smart from 2.5.0 to 2.6.0

Release notes

Sourced from net.minidev:accessors-smart's releases.

v2.6.0

What's Changed

fix JSONObject.merge blocks overwriting (#175) by @caimo in netplex/json-smart-v2#238

build: prepare for next version by @hezhangjian in netplex/json-smart-v2#241

chore: use standard charset object instead by @hezhangjian in netplex/json-smart-v2#242

add Spotless + Maven wrapper by @ccudennec-otto in netplex/json-smart-v2#246

fix JSONArray merge(Object)(#51) by @caimo in netplex/json-smart-v2#247

Bump junit.version from 5.11.4 to 5.12.0 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#253

Bump junit.version from 5.11.4 to 5.12.0 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#248

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#252

Bump org.apache.maven.plugins:maven-compiler-plugin from 3.13.0 to 3.14.0 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#251

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#250

Bump org.apache.maven.plugins:maven-compiler-plugin from 3.13.0 to 3.14.0 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#249

Bump junit.version from 5.12.0 to 5.12.1 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#256

Bump junit.version from 5.12.0 to 5.12.1 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#255

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.3 to 2.44.4 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#263

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.3 to 2.44.4 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#260

Bump junit.version from 5.12.1 to 5.12.2 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#262

Bump junit.version from 5.12.1 to 5.12.2 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#261

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.4 to 2.44.5 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#268

Bump junit.version from 5.12.2 to 5.13.0 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#267

Bump junit.version from 5.12.2 to 5.13.0 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#266

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.4 to 2.44.5 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#265

Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.7 to 3.2.8 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#276

Bump junit.version from 5.13.0 to 5.13.4 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#274

Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.7 to 3.2.8 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#273

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.5 to 2.46.1 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#277

Bump junit.version from 5.13.0 to 5.13.4 in /json-smart-action by @dependabot[bot] in netplex/json-smart-v2#278

Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.5 to 2.46.1 in /json-smart by @dependabot[bot] in netplex/json-smart-v2#275

fix unpack dependencies failed (#176) by @pcHwang2 in netplex/json-smart-v2#257

fix Issue 177 (support incomplet json messages) by @UrielCh in netplex/json-smart-v2#254

improve github action by @UrielCh in netplex/json-smart-v2#279

mutiple updates, new github workflow, more coverage.... by @UrielCh in netplex/json-smart-v2#280

Upgrade by @UrielCh in netplex/json-smart-v2#281

New Contributors

@pcHwang2 made their first contribution in netplex/json-smart-v2#257

Full Changelog: netplex/json-smart-v2@2.5.2...v2.6.0

2.5.2

About CVE-2024-57699

Thanks for @ccudennec-otto Some remarks on the CVE, more discussions in #236

as mentioned here it is quite unlikely that the vulnerability is exploited if you come here because of Spring Security / com.nimbusds:oauth2-oidc-sdk

the code changes for the upcoming release will "only" fix the default modes provided by JSONParser, e.g. MODE_RFC4627

if you create the JSONParser manually / with custom options, make sure you set option LIMIT_JSON_DEPTH

since that's what "connect2id" is doing in their library, they were responsible for fixing it. They've already provided a new 11.x release that fixes the JSONParser setup on their side, i.e. you rather need their fixed version and not version 2.5.2 of json-smart

as stated here, they would also need to backport the fix to the versions that Spring Security needs IMHO

What's Changed

fix CVE-2024-57699 for predefined parsers by @ccudennec-otto in netplex/json-smart-v2#233

... (truncated)

Commits

ebf7cf8 try deploy
95a9bc3 try somthink else
4aac0d7 make it publish
d3a86df deploy one by one
13d282b patch deploy
b4940f5 patch deploy verbosity
edc6e6e hange publishing plugin
49e150f add git tag
29543a1 replace snapshot by the release version
5803602 force release to central
Additional commits viewable in compare view

Updates commons-net:commons-net from 3.10.0 to 3.13.0

Changelog

Sourced from commons-net:commons-net's changelog.

Apache Commons Net 3.13.0 Release Notes

The Apache Commons Net team is pleased to announce the release of Apache Commons Net 3.13.0.

Apache Commons Net library contains a collection of network utilities and protocol implementations. Supported protocols include Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, and Whois.

This is a feature and maintenance release. Java 8 or later is required.

For complete information on Apache Commons Net, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Net website:

https://commons.apache.org/proper/commons-net/

Download page: https://commons.apache.org/proper/commons-net/download_net.cgi

New features

o Add DatagramSocketClient.getDefaultTimeoutDuration() and deprecate getDefaultTimeout(). Thanks to Gary Gregory. o NET-741: Add subnet IPv6 handling with SubnetUtils6 #391. Thanks to Maros Orsak, Gary Gregory.

Fixed Bugs

o DaytimeTCPClientTest now should now pass inside most VPNs. Thanks to Henri Biestro, Gary Gregory. o Migrate tests to JUnit5 #358, #359. Thanks to Jakub Kupczyk, Gary Gregory. o Fix malformed Javadoc comments. Thanks to Gary Gregory. o IMAPExportMbox now restores the current thread's interrupt flag when catching InterruptedException. Thanks to Gary Gregory. o IOUtil.readWrite() now restores the current thread's interrupt flag when catching InterruptedException. Thanks to Gary Gregory. o TelnetInputStream now restores the current thread's interrupt flag when catching InterruptedException. Thanks to Gary Gregory. o NET-740: FTP fails to parse listings for Linux vsftpd in Chinese or Japanese #393. Thanks to Jianwei Guo, Gary Gregory. o TelnetInputStream.read() doesn't preserve the original InterruptedException as the cause of its InterruptedIOException. Thanks to Gary Gregory. o FTPClient._storeFile(String, String, InputStream) doesn't always close it's internal socket when an exception is thrown early in processing. Thanks to Gary Gregory. o ListenerList.removeListener(T) now ignores null input to avoid a NullPointerException. Thanks to Gary Gregory. o ListenerList.addListener(T) now ignores null input. Thanks to Gary Gregory. o Fix typo in FTPConnectionClosedException message from FTP.getReply(boolean). Thanks to Gary Gregory. o Reimplement Util.copyReader() with IOUtils.copyLarge(). Thanks to Gary Gregory. o Reimplement Util.copyStream() with IOUtils.copyLarge(). Thanks to Gary Gregory. o Reimplement Util.copyStream() with IOUtils.copyLarge(). Thanks to Gary Gregory. o Deprecate Util.copyReader(Reader, Writer) in favor of IOUtils.copyLarge(Reader, Writer). Thanks to Gary Gregory.

Changes

o Bump org.apache.commons:commons-parent from 85 to 97 #371, #388, #389. Thanks to Gary Gregory, Dependabot. o Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0. Thanks to Gary Gregory, Dependabot.

... (truncated)

Commits

35fa0df Prepare for the release candidate 3.13.0 RC1
1cc5b6e Prepare for the next release candidate
a4b246e Reuse IOUtils.copyLarge()
e5ca262 Javadoc
3cb18ec Deprecate Util.copyReader(Reader, Writer) in favor of
3373d77 Reimplement Util.copyReader() with IOUtils.copyLarge()
3be2077 Reimplement Util.copyStream() with IOUtils.copyLarge()
7b41144 Javadoc
1b584b4 Fix typo in FTPConnectionClosedException message from
3792023 Javadoc
Additional commits viewable in compare view

Updates com.squareup.okio:okio from 3.4.0 to 3.18.2

Changelog

Sourced from com.squareup.okio:okio's changelog.

Version 3.18.2

2026-09-04

Fix: Don't change behavior of base64-encoding. We introduced a bug in Okio 3.18.1 that caused base64 strings to be encoded without padding, even though the previous and expected behavior is to encode such strings with padding (= characters). The bug impacts callers who compiled against Okio releases < 3.18.0, and executed on Okio releases >= 3.18.

Version 3.18.1

2026-07-28

Fix: Restore binary-compatibility with Okio 3.17.x for Kotlin/Native users. When we introduced the new base64() function, we inadvertently changed the binary signature! Ugh! This is now fixed and we've automated binary-compatibility checking for Kotlin/Native going forward.

Version 3.18.0

2026-07-21

Fix: Use wide character APIs to better support of non-UTF-8 filesystems on Windows.

Fix: Don't crash in AssetFileSystem.exists() when the underlying storage throws a FileNotFoundException.

Fix: Load WASI paths relative to their preopen. The platform behavior recently changed in NodeJS, causing our WasiFileSystem to be unable to access files!

New: Optionally ignore whitespace when decoding hexadecimal.

New: Optionally omit padding when encoding Base64.

New: BufferedSource.readUInt(), BufferedSink.writeUInt(), and similar functions for UByte, UShort and ULong. Also add support for unsigned and little-endian.

New: BufferedSink.utf8Appendable(). Use this to adapt an Okio sink to an Appendable.

New: Source.limit() returns a wrapped source with a strict limit on how many bytes are returned.

New: ByteString.equals(other, constantTime) for subtle defense against timing attacks.

Version 3.17.0

2026-03-11

New: Adjust down the Kotlin stdlib dependency to [Kotlin 2.1.21][kotlin_2_1_21]. Okio is built with an up-to-date Kotlin compiler (2.2.21), but depends on an older kotlin-stdlib. We're doing this so you can update Okio and Kotlin independently.

Fix: Return the correct timestamp in FileMetadata.createdAtMillis on Kotlin/Native on UNIX platforms. We were incorrectly using the POSIX ctime (change time) instead of the birthtime. With this fix Okio now prefers statx() over stat() on native platforms. This API first appeared in Linux in 4.11 (2017) and Android in API 30 (2020).

... (truncated)

Commits

9403a09 Prepare for release 3.18.2.
5a1c153 Fix an unintended behavior change with base64 padding (#1869)
9f564fd Prepare for release 3.18.1.
531cf07 Hide some accidentally public symbols (#1839)
e7ef43d Update GitHub Actions for new secrets and branch (#1840)
a6730de Start enforcing binary compatibility for Kotlin/Native (#1838)
e75a7e9 Update dependency com.android.tools.build:gradle to v9.3.1 (#1836)
9d21d5c Fix interchanged docs links for 1.x and 2.x API (#1835)
bff1dff Track new docs locations from Dokka v2 (#1833)
3b16d9b Grant write permission to the publish-website action (#1832)
Additional commits viewable in compare view

Updates org.apache.zookeeper:zookeeper from 3.9.5 to 3.9.6

Updates commons-cli:commons-cli from 1.5.0 to 1.11.0

Changelog

Sourced from commons-cli:commons-cli's changelog.

Apache Commons CLI 1.11.0 Release Notes

The Apache Commons CLI team is pleased to announce the release of Apache Commons CLI 1.11.0.

Apache Commons CLI provides a simple API for presenting, processing, and validating a Command Line Interface.

This is a feature and maintenance release. Java 8 or later is required.

New Features
      Add CommandLine.getOptionCount() to measure option repetition [#396](https://github.com/apache/commons-cli/issues/396). Thanks to David Larochette, Gary Gregory.
Fixed Bugs

CLI-351: Multiple trailing BREAK_CHAR_SET characters cause infinite loop in HelpFormatter. Thanks to Damien Carbonne, Claude Warren, Gary Gregory.

CLI-351: Fix issue with groups not being reported in help output.

Bumps the other-deps group with 50 updates: | Package | From | To | | --- | --- | --- | | org.yaml:snakeyaml | `2.2` | `2.7` | | org.slf4j:slf4j-api | `1.7.15` | `2.0.20` | | org.apache.logging.log4j:log4j-api | `2.25.5` | `2.26.1` | | org.apache.logging.log4j:log4j-core | `2.25.5` | `2.26.1` | | org.apache.logging.log4j:log4j-1.2-api | `2.25.5` | `2.26.1` | | org.apache.logging.log4j:log4j-slf4j-impl | `2.25.5` | `2.26.1` | | [com.mysql:mysql-connector-j](https://github.com/mysql/mysql-connector-j) | `8.4.0` | `26.7.0` | | org.apache.hadoop:hadoop-client | `3.3.6` | `3.5.0` | | org.apache.hadoop:hadoop-common | `3.3.6` | `3.5.0` | | org.apache.hadoop:hadoop-hdfs | `3.3.6` | `3.5.0` | | org.apache.hadoop:hadoop-mapreduce-client-core | `3.3.6` | `3.5.0` | | [com.alibaba.nacos:nacos-client](https://github.com/alibaba/nacos) | `2.1.2` | `3.2.4` | | [com.alibaba:fastjson](https://github.com/alibaba/fastjson2) | `2.0.52` | `2.0.65` | | [com.jayway.jsonpath:json-path](https://github.com/jayway/JsonPath) | `2.9.0` | `3.0.0` | | [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `3.25.5` | `4.36.2` | | [net.minidev:json-smart](https://github.com/netplex/json-smart-v2) | `2.5.2` | `2.6.0` | | [net.minidev:accessors-smart](https://github.com/netplex/json-smart-v2) | `2.5.0` | `2.6.0` | | [commons-net:commons-net](https://github.com/apache/commons-net) | `3.10.0` | `3.13.0` | | [com.squareup.okio:okio](https://github.com/lysine-dev/okio) | `3.4.0` | `3.18.2` | | org.apache.zookeeper:zookeeper | `3.9.5` | `3.9.6` | | [commons-cli:commons-cli](https://github.com/apache/commons-cli) | `1.5.0` | `1.11.0` | | [dnsjava:dnsjava](https://github.com/dnsjava/dnsjava) | `3.6.0` | `3.6.5` | | [org.codehaus.plexus:plexus-utils](https://github.com/codehaus-plexus/plexus-utils) | `3.6.1` | `4.1.0` | | [at.yawk.lz4:lz4-java](https://github.com/yawkat/lz4-java) | `1.11.4` | `1.12.0` | | [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) | `2.14.2` | `2.22.0` | | [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.5.0` | `3.6.3` | | [org.apache.maven.plugins:maven-pmd-plugin](https://github.com/apache/maven-pmd-plugin) | `3.21.0` | `3.28.0` | | [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.12` | `0.8.15` | | [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.10.0` | `3.16.0` | | [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.0.0-M5` | `3.6.0` | | [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) | `3.10.2` | `3.10.4` | | [org.apache.maven.plugins:maven-checkstyle-plugin](https://github.com/apache/maven-checkstyle-plugin) | `3.1.2` | `3.6.0` | | [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) | `4.8.6.6` | `4.10.4.1` | | [org.apache.maven.plugins:maven-shade-plugin](https://github.com/apache/maven-shade-plugin) | `3.5.1` | `3.6.2` | | [org.codehaus.mojo:build-helper-maven-plugin](https://github.com/mojohaus/build-helper-maven-plugin) | `3.6.0` | `3.6.2` | | org.apache.avro:avro | `1.12.1` | `1.12.2` | | [org.scala-lang:scala-library](https://github.com/scala/scala3) | `2.12.7` | `3.10.0` | | org.apache.kafka:kafka-clients | `4.1.2` | `4.3.1` | | [org.elasticsearch.client:elasticsearch-rest-high-level-client](https://github.com/elastic/elasticsearch) | `7.17.9` | `7.17.29` | | org.apache.commons:commons-lang3 | `3.18.0` | `3.21.0` | | [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) | `3.7.1` | `3.11.0` | | [com.h2database:h2](https://github.com/h2database/h2database) | `2.2.224` | `2.5.252` | | [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) | `10.0.2` | `10.10` | | [org.apache.maven.plugins:maven-assembly-plugin](https://github.com/apache/maven-assembly-plugin) | `3.6.0` | `3.8.0` | | [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) | `3.3.0` | `3.5.1` | | org.apache.paimon:paimon-flink-1.20 | `1.4.1` | `1.4.2` | | org.apache.paimon:paimon-flink-cdc | `1.4.1` | `1.4.2` | | [org.mongodb:mongodb-driver-sync](https://github.com/mongodb/mongo-java-driver) | `4.11.1` | `5.13.0` | | org.apache.kafka:connect-api | `3.6.1` | `4.3.1` | | org.apache.maven:apache-maven | `3.9.9` | `3.10.0` | Updates `org.yaml:snakeyaml` from 2.2 to 2.7 Updates `org.slf4j:slf4j-api` from 1.7.15 to 2.0.20 Updates `org.apache.logging.log4j:log4j-api` from 2.25.5 to 2.26.1 Updates `org.apache.logging.log4j:log4j-core` from 2.25.5 to 2.26.1 Updates `org.apache.logging.log4j:log4j-1.2-api` from 2.25.5 to 2.26.1 Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.25.5 to 2.26.1 Updates `org.apache.logging.log4j:log4j-core` from 2.25.5 to 2.26.1 Updates `org.apache.logging.log4j:log4j-1.2-api` from 2.25.5 to 2.26.1 Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.25.5 to 2.26.1 Updates `com.mysql:mysql-connector-j` from 8.4.0 to 26.7.0 - [Changelog](https://github.com/mysql/mysql-connector-j/blob/trunk/CHANGES) - [Commits](mysql/mysql-connector-j@8.4.0...26.7.0) Updates `org.apache.hadoop:hadoop-client` from 3.3.6 to 3.5.0 Updates `org.apache.hadoop:hadoop-common` from 3.3.6 to 3.5.0 Updates `org.apache.hadoop:hadoop-hdfs` from 3.3.6 to 3.5.0 Updates `org.apache.hadoop:hadoop-mapreduce-client-core` from 3.3.6 to 3.5.0 Updates `com.alibaba.nacos:nacos-client` from 2.1.2 to 3.2.4 - [Release notes](https://github.com/alibaba/nacos/releases) - [Changelog](https://github.com/alibaba/nacos/blob/develop/CHANGELOG.md) - [Commits](alibaba/nacos@2.1.2...3.2.4) Updates `com.alibaba:fastjson` from 2.0.52 to 2.0.65 - [Release notes](https://github.com/alibaba/fastjson2/releases) - [Commits](alibaba/fastjson2@2.0.52...2.0.65) Updates `com.jayway.jsonpath:json-path` from 2.9.0 to 3.0.0 - [Release notes](https://github.com/jayway/JsonPath/releases) - [Changelog](https://github.com/json-path/JsonPath/blob/master/changelog.md) - [Commits](json-path/JsonPath@json-path-2.9.0...json-path-3.0.0) Updates `com.google.protobuf:protobuf-java` from 3.25.5 to 4.36.2 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `net.minidev:json-smart` from 2.5.2 to 2.6.0 - [Release notes](https://github.com/netplex/json-smart-v2/releases) - [Commits](netplex/json-smart-v2@2.5.2...v2.6.0) Updates `net.minidev:accessors-smart` from 2.5.0 to 2.6.0 - [Release notes](https://github.com/netplex/json-smart-v2/releases) - [Commits](netplex/json-smart-v2@2.5.0...v2.6.0) Updates `commons-net:commons-net` from 3.10.0 to 3.13.0 - [Changelog](https://github.com/apache/commons-net/blob/master/RELEASE-NOTES.txt) - [Commits](apache/commons-net@rel/commons-net-3.10.0...rel/commons-net-3.13.0) Updates `com.squareup.okio:okio` from 3.4.0 to 3.18.2 - [Changelog](https://github.com/lysine-dev/okio/blob/main/CHANGELOG.md) - [Commits](lysine-dev/okio@parent-3.4.0...parent-3.18.2) Updates `org.apache.zookeeper:zookeeper` from 3.9.5 to 3.9.6 Updates `commons-cli:commons-cli` from 1.5.0 to 1.11.0 - [Changelog](https://github.com/apache/commons-cli/blob/master/RELEASE-NOTES.txt) - [Commits](apache/commons-cli@commons-cli-1.5.0...rel/commons-cli-1.11.0) Updates `dnsjava:dnsjava` from 3.6.0 to 3.6.5 - [Release notes](https://github.com/dnsjava/dnsjava/releases) - [Changelog](https://github.com/dnsjava/dnsjava/blob/master/Changelog) - [Commits](https://github.com/dnsjava/dnsjava/commits) Updates `org.codehaus.plexus:plexus-utils` from 3.6.1 to 4.1.0 - [Release notes](https://github.com/codehaus-plexus/plexus-utils/releases) - [Commits](codehaus-plexus/plexus-utils@plexus-utils-3.6.1...plexus-utils-4.1.0) Updates `at.yawk.lz4:lz4-java` from 1.11.4 to 1.12.0 - [Release notes](https://github.com/yawkat/lz4-java/releases) - [Changelog](https://github.com/yawkat/lz4-java/blob/main/CHANGES.md) - [Commits](yawkat/lz4-java@v1.11.4...v1.12.0) Updates `org.codehaus.mojo:versions-maven-plugin` from 2.14.2 to 2.22.0 - [Release notes](https://github.com/mojohaus/versions/releases) - [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md) - [Commits](mojohaus/versions@2.14.2...2.22.0) Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.5.0 to 3.6.3 - [Release notes](https://github.com/apache/maven-enforcer/releases) - [Commits](apache/maven-enforcer@enforcer-3.5.0...enforcer-3.6.3) Updates `org.apache.maven.plugins:maven-pmd-plugin` from 3.21.0 to 3.28.0 - [Release notes](https://github.com/apache/maven-pmd-plugin/releases) - [Commits](apache/maven-pmd-plugin@maven-pmd-plugin-3.21.0...maven-pmd-plugin-3.28.0) Updates `org.jacoco:jacoco-maven-plugin` from 0.8.12 to 0.8.15 - [Release notes](https://github.com/jacoco/jacoco/releases) - [Commits](jacoco/jacoco@v0.8.12...v0.8.15) Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.10.0 to 3.16.0 - [Release notes](https://github.com/apache/maven-compiler-plugin/releases) - [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.10.0...maven-compiler-plugin-3.16.0) Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.0.0-M5 to 3.6.0 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-3.0.0-M5...surefire-3.6.0) Updates `com.diffplug.spotless:spotless-maven-plugin` from 3.10.2 to 3.10.4 - [Release notes](https://github.com/diffplug/spotless/releases) - [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md) - [Commits](diffplug/spotless@maven/3.10.2...maven/3.10.4) Updates `org.apache.maven.plugins:maven-checkstyle-plugin` from 3.1.2 to 3.6.0 - [Release notes](https://github.com/apache/maven-checkstyle-plugin/releases) - [Commits](apache/maven-checkstyle-plugin@maven-checkstyle-plugin-3.1.2...maven-checkstyle-plugin-3.6.0) Updates `com.github.spotbugs:spotbugs-maven-plugin` from 4.8.6.6 to 4.10.4.1 - [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases) - [Commits](spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.8.6.6...spotbugs-maven-plugin-4.10.4.1) Updates `org.apache.maven.plugins:maven-shade-plugin` from 3.5.1 to 3.6.2 - [Release notes](https://github.com/apache/maven-shade-plugin/releases) - [Commits](apache/maven-shade-plugin@maven-shade-plugin-3.5.1...maven-shade-plugin-3.6.2) Updates `org.codehaus.mojo:build-helper-maven-plugin` from 3.6.0 to 3.6.2 - [Release notes](https://github.com/mojohaus/build-helper-maven-plugin/releases) - [Commits](mojohaus/build-helper-maven-plugin@3.6.0...3.6.2) Updates `org.apache.avro:avro` from 1.12.1 to 1.12.2 Updates `org.scala-lang:scala-library` from 2.12.7 to 3.10.0 - [Release notes](https://github.com/scala/scala3/releases) - [Commits](https://github.com/scala/scala3/commits/3.10.0) Updates `org.apache.kafka:kafka-clients` from 4.1.2 to 4.3.1 Updates `org.elasticsearch.client:elasticsearch-rest-high-level-client` from 7.17.9 to 7.17.29 - [Release notes](https://github.com/elastic/elasticsearch/releases) - [Changelog](https://github.com/elastic/elasticsearch/blob/main/docs/changelog.yml) - [Commits](elastic/elasticsearch@v7.17.9...v7.17.29) Updates `org.apache.commons:commons-lang3` from 3.18.0 to 3.21.0 Updates `org.apache.maven.plugins:maven-dependency-plugin` from 3.7.1 to 3.11.0 - [Release notes](https://github.com/apache/maven-dependency-plugin/releases) - [Commits](apache/maven-dependency-plugin@maven-dependency-plugin-3.7.1...maven-dependency-plugin-3.11.0) Updates `com.h2database:h2` from 2.2.224 to 2.5.252 - [Release notes](https://github.com/h2database/h2database/releases) - [Commits](h2database/h2database@version-2.2.224...version-2.5.252) Updates `com.nimbusds:nimbus-jose-jwt` from 10.0.2 to 10.10 - [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt) - [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/10.10..10.0.2) Updates `org.apache.maven.plugins:maven-assembly-plugin` from 3.6.0 to 3.8.0 - [Release notes](https://github.com/apache/maven-assembly-plugin/releases) - [Commits](apache/maven-assembly-plugin@maven-assembly-plugin-3.6.0...v3.8.0) Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.3.0 to 3.5.1 - [Release notes](https://github.com/apache/maven-jar-plugin/releases) - [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.3.0...maven-jar-plugin-3.5.1) Updates `org.apache.paimon:paimon-flink-1.20` from 1.4.1 to 1.4.2 Updates `org.apache.paimon:paimon-flink-cdc` from 1.4.1 to 1.4.2 Updates `org.apache.paimon:paimon-flink-cdc` from 1.4.1 to 1.4.2 Updates `org.mongodb:mongodb-driver-sync` from 4.11.1 to 5.13.0 - [Release notes](https://github.com/mongodb/mongo-java-driver/releases) - [Commits](mongodb/mongo-java-driver@r4.11.1...r5.13.0) Updates `org.apache.hadoop:hadoop-common` from 3.3.6 to 3.5.0 Updates `org.apache.hadoop:hadoop-hdfs` from 3.3.6 to 3.5.0 Updates `org.apache.hadoop:hadoop-mapreduce-client-core` from 3.3.6 to 3.5.0 Updates `org.apache.kafka:connect-api` from 3.6.1 to 4.3.1 Updates `org.apache.maven:apache-maven` from 3.9.9 to 3.10.0 --- updated-dependencies: - dependency-name: org.yaml:snakeyaml dependency-version: '2.7' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.slf4j:slf4j-api dependency-version: 2.0.20 dependency-type: direct:production update-type: version-update:semver-major dependency-group: other-deps - dependency-name: org.apache.logging.log4j:log4j-api dependency-version: 2.26.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.logging.log4j:log4j-core dependency-version: 2.26.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.logging.log4j:log4j-1.2-api dependency-version: 2.26.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.logging.log4j:log4j-slf4j-impl dependency-version: 2.26.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.logging.log4j:log4j-core dependency-version: 2.26.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.logging.log4j:log4j-1.2-api dependency-version: 2.26.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.logging.log4j:log4j-slf4j-impl dependency-version: 2.26.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: com.mysql:mysql-connector-j dependency-version: 26.7.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: other-deps - dependency-name: org.apache.hadoop:hadoop-client dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.hadoop:hadoop-common dependency-version: 3.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.hadoop:hadoop-hdfs dependency-version: 3.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.hadoop:hadoop-mapreduce-client-core dependency-version: 3.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: com.alibaba.nacos:nacos-client dependency-version: 3.2.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: other-deps - dependency-name: com.alibaba:fastjson dependency-version: 2.0.65 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: other-deps - dependency-name: com.jayway.jsonpath:json-path dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: other-deps - dependency-name: com.google.protobuf:protobuf-java dependency-version: 4.36.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: other-deps - dependency-name: net.minidev:json-smart dependency-version: 2.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: net.minidev:accessors-smart dependency-version: 2.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: commons-net:commons-net dependency-version: 3.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: com.squareup.okio:okio dependency-version: 3.18.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.zookeeper:zookeeper dependency-version: 3.9.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: other-deps - dependency-name: commons-cli:commons-cli dependency-version: 1.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: dnsjava:dnsjava dependency-version: 3.6.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: other-deps - dependency-name: org.codehaus.plexus:plexus-utils dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: other-deps - dependency-name: at.yawk.lz4:lz4-java dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.codehaus.mojo:versions-maven-plugin dependency-version: 2.22.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.maven.plugins:maven-enforcer-plugin dependency-version: 3.6.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.maven.plugins:maven-pmd-plugin dependency-version: 3.28.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.jacoco:jacoco-maven-plugin dependency-version: 0.8.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: other-deps - dependency-name: org.apache.maven.plugins:maven-compiler-plugin dependency-version: 3.16.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.maven.plugins:maven-surefire-plugin dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: com.diffplug.spotless:spotless-maven-plugin dependency-version: 3.10.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: other-deps - dependency-name: org.apache.maven.plugins:maven-checkstyle-plugin dependency-version: 3.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: com.github.spotbugs:spotbugs-maven-plugin dependency-version: 4.10.4.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.maven.plugins:maven-shade-plugin dependency-version: 3.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.codehaus.mojo:build-helper-maven-plugin dependency-version: 3.6.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: other-deps - dependency-name: org.apache.avro:avro dependency-version: 1.12.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: other-deps - dependency-name: org.scala-lang:scala-library dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: other-deps - dependency-name: org.apache.kafka:kafka-clients dependency-version: 4.3.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.elasticsearch.client:elasticsearch-rest-high-level-client dependency-version: 7.17.29 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: other-deps - dependency-name: org.apache.commons:commons-lang3 dependency-version: 3.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.maven.plugins:maven-dependency-plugin dependency-version: 3.11.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: com.h2database:h2 dependency-version: 2.5.252 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: com.nimbusds:nimbus-jose-jwt dependency-version: '10.10' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.maven.plugins:maven-assembly-plugin dependency-version: 3.8.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.maven.plugins:maven-jar-plugin dependency-version: 3.5.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.paimon:paimon-flink-1.20 dependency-version: 1.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: other-deps - dependency-name: org.apache.paimon:paimon-flink-cdc dependency-version: 1.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: other-deps - dependency-name: org.apache.paimon:paimon-flink-cdc dependency-version: 1.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: other-deps - dependency-name: org.mongodb:mongodb-driver-sync dependency-version: 5.13.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: other-deps - dependency-name: org.apache.hadoop:hadoop-common dependency-version: 3.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.hadoop:hadoop-hdfs dependency-version: 3.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.hadoop:hadoop-mapreduce-client-core dependency-version: 3.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-deps - dependency-name: org.apache.kafka:connect-api dependency-version: 4.3.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: other-deps - dependency-name: org.apache.maven:apache-maven dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-12T02:50:35Z

Labels

The following labels could not be found: automated. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

github-actions · 2026-10-12T02:50:41Z

Thanks for opening this PR

dependabot · 2026-11-02T01:04:21Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added the dependencies label Oct 12, 2026

dependabot Bot closed this Nov 2, 2026

dependabot Bot deleted the dependabot/maven/other-deps-691e6b0137 branch November 2, 2026 01:04

Navigation Menu

Repository navigation

deps(deps): bump the other-deps group with 50 updates - #290

deps(deps): bump the other-deps group with 50 updates#290
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/other-deps-691e6b0137

dependabot Bot commented on behalf of github Oct 12, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 12, 2026

Uh oh!

github-actions Bot commented Oct 12, 2026

Uh oh!

dependabot Bot commented on behalf of github Nov 2, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changelog

https://dev.mysql.com/doc/relnotes/connector-j/en/

3.2.4 (Aug 27th, 2026)

Feature

Enhancement/Refactor

BugFix

Breaking Change Notice

fastjson 2.0.65版本发布

FASTJSON 2.0.65 Release Notes

Overview

Security Fixes

Bug Fixes

Documentation

Maven Dependency Configuration

Standard Version

Spring 6 Extension

Android 5 Optimized Version

json-path-3.0.0

What's Changed

New Contributors

json-path-2.10.0

What's Changed

v2.6.0

What's Changed

New Contributors

v2.6.0

What's Changed

New Contributors

2.5.2

About CVE-2024-57699

What's Changed

Apache Commons Net 3.13.0 Release Notes

New features

Fixed Bugs

Changes

Version 3.18.2

Version 3.18.1

Version 3.18.0

Version 3.17.0

Apache Commons CLI 1.11.0 Release Notes

New Features

Fixed Bugs

Uh oh!

dependabot Bot commented on behalf of github Oct 12, 2026

Labels

Uh oh!

github-actions Bot commented Oct 12, 2026

Uh oh!

dependabot Bot commented on behalf of github Nov 2, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 12, 2026 •

edited

Loading