Skip to content

deps(deps): bump the other-deps group across 1 directory with 51 updates - #293

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/other-deps-44af37f5f8
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/other-deps-44af37f5f8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the other-deps group with 51 updates in the / directory:

Package From To
org.yaml:snakeyaml 2.2 2.7
org.slf4j:slf4j-api 1.7.15 2.0.20
org.apache.logging.log4j:log4j-api 2.25.5 2.26.1
org.apache.logging.log4j:log4j-core 2.25.5 2.26.1
org.apache.logging.log4j:log4j-1.2-api 2.25.5 2.26.1
org.apache.logging.log4j:log4j-slf4j-impl 2.25.5 2.26.1
org.apache.logging.log4j:log4j-core 2.25.5 2.26.1
org.apache.logging.log4j:log4j-1.2-api 2.25.5 2.26.1
org.apache.logging.log4j:log4j-slf4j-impl 2.25.5 2.26.1
com.mysql:mysql-connector-j 8.4.0 26.10.0
org.apache.hadoop:hadoop-client 3.3.6 3.5.0
org.apache.hadoop:hadoop-common 3.3.6 3.5.0
org.apache.hadoop:hadoop-hdfs 3.3.6 3.5.0
org.apache.hadoop:hadoop-mapreduce-client-core 3.3.6 3.5.0
com.alibaba.nacos:nacos-client 2.1.2 3.3.0
com.alibaba:fastjson 2.0.52 2.0.66
com.google.code.gson:gson 2.14.0 2.15.0
com.jayway.jsonpath:json-path 2.9.0 3.0.0
com.google.protobuf:protobuf-java 3.25.5 4.36.2
net.minidev:json-smart 2.5.2 2.6.0
net.minidev:accessors-smart 2.5.0 2.6.0
commons-net:commons-net 3.10.0 3.13.0
com.squareup.okio:okio 3.4.0 3.18.2
org.apache.zookeeper:zookeeper 3.9.5 3.9.7
commons-cli:commons-cli 1.5.0 1.11.0
dnsjava:dnsjava 3.6.0 3.7.0
org.codehaus.plexus:plexus-utils 3.6.1 4.1.0
at.yawk.lz4:lz4-java 1.11.4 1.12.1
org.codehaus.mojo:versions-maven-plugin 2.14.2 2.23.0
org.apache.maven.plugins:maven-enforcer-plugin 3.5.0 3.7.0
org.apache.maven.plugins:maven-pmd-plugin 3.21.0 3.28.0
org.jacoco:jacoco-maven-plugin 0.8.12 0.8.16
org.apache.maven.plugins:maven-compiler-plugin 3.10.0 3.16.0
org.apache.maven.plugins:maven-surefire-plugin 3.0.0-M5 3.6.1
com.diffplug.spotless:spotless-maven-plugin 3.10.2 3.10.4
org.apache.maven.plugins:maven-checkstyle-plugin 3.1.2 3.6.0
com.github.spotbugs:spotbugs-maven-plugin 4.8.6.6 4.10.5.0
org.apache.maven.plugins:maven-shade-plugin 3.5.1 3.6.2
org.codehaus.mojo:build-helper-maven-plugin 3.6.0 3.6.2
org.apache.avro:avro 1.12.1 1.12.2
org.scala-lang:scala-library 2.12.7 3.10.0
org.apache.kafka:kafka-clients 4.1.2 4.4.0
org.elasticsearch.client:elasticsearch-rest-high-level-client 7.17.9 7.17.29
org.apache.commons:commons-lang3 3.18.0 3.21.0
org.apache.maven.plugins:maven-dependency-plugin 3.7.1 3.11.0
com.h2database:h2 2.2.224 2.5.252
com.nimbusds:nimbus-jose-jwt 10.0.2 10.10
org.apache.maven.plugins:maven-assembly-plugin 3.6.0 3.8.0
org.apache.maven.plugins:maven-jar-plugin 3.3.0 3.5.1
org.apache.paimon:paimon-flink-1.20 1.4.1 1.4.2
org.apache.paimon:paimon-flink-cdc 1.4.1 1.4.2
org.apache.paimon:paimon-flink-cdc 1.4.1 1.4.2
org.mongodb:mongodb-driver-sync 4.11.1 5.14.0
org.apache.hadoop:hadoop-common 3.3.6 3.5.0
org.apache.hadoop:hadoop-hdfs 3.3.6 3.5.0
org.apache.hadoop:hadoop-mapreduce-client-core 3.3.6 3.5.0
org.apache.kafka:connect-api 3.6.1 4.4.0
org.apache.maven:apache-maven 3.9.9 3.10.0

Updates org.yaml:snakeyaml from 2.2 to 2.7

Updates org.slf4j:slf4j-api from 1.7.15 to 2.0.20

Updates org.apache.logging.log4j:log4j-api from 2.25.5 to 2.26.1

Updates org.apache.logging.log4j:log4j-core from 2.25.5 to 2.26.1

Updates org.apache.logging.log4j:log4j-1.2-api from 2.25.5 to 2.26.1

Updates org.apache.logging.log4j:log4j-slf4j-impl from 2.25.5 to 2.26.1

Updates org.apache.logging.log4j:log4j-core from 2.25.5 to 2.26.1

Updates org.apache.logging.log4j:log4j-1.2-api from 2.25.5 to 2.26.1

Updates org.apache.logging.log4j:log4j-slf4j-impl from 2.25.5 to 2.26.1

Updates com.mysql:mysql-connector-j from 8.4.0 to 26.10.0

Changelog

Sourced from com.mysql:mysql-connector-j's changelog.

Changelog

https://dev.mysql.com/doc/relnotes/connector-j/en/

Version 26.10.0

  • Fix for Bug#39806615, Validate extension class names supplied through connection properties.

  • WL#17343, Upgrade 3rd party libraries and tools.

  • Fix for Bug#39449398, WebAuthn ClientDataJSON is not serialized correctly for relying party IDs containing special characters.

  • Fix for Bug#39455455, Reported result set column counts are not properly validated.

Version 26.7.0

  • Fix for Bug#39449361, LOAD DATA LOCAL INFILE accepts ambiguous Windows file URL path forms.

  • Fix for Bug#39328305, X Protocol reader does not validate server-supplied frame length before allocation.

  • Fix for Bug#39327277, Restrict SSL keystore loading to local file inputs.

  • Fix for Bug#39320456, Unexpected behavior with LOAD DATA LOCAL INFILE and connection options.

  • Fix for Bug#120227 (Bug#39204043), LOAD DATA LOCAL INFILE: missing EOF packet on IOException leaves server thread hanging.

  • Fix for Bug#120096 (Bug#39125648), MysqlConnector/Java Connection Url CharacterEncoding bug. Thanks to Rahman Rejepov for his contribution.

Version 9.7.0

  • Fix for Bug#119863 (Bug#38951042), Inaccurate decoding of negative TIME durations in Binary Protocol (Cursor Mode).

  • WL#17215, Implement JDBC 4.3/4.5 Statement/Connection.enquote* methods.

  • Fix for Bug#119245 (Bug#38599240), Select into fix breaks queries with 'into' in them. (reopened)

  • Fix for Bug#119659 (Bug#38916595), BinaryResultsetReader fails to consume EOF packet after column definitions when EOF is not deprecated.

Version 9.6.0

  • Fix for Bug#118002 (Bug#37843004), The setFetchSize() method in the Statement class may have a potential bug.

  • Fix for Bug#113130 (Bug#36043125), getGeneratedKeys() returns a zero resultset with non-key-generating statements.

  • Fix for Bug#113336 (Bug#36080226), Inconsistent getUpdateCount() Behavior with allowMultiQueries.

  • Fix for Bug#118234 (Bug#37975837), A potential bugs in Mysql Connector/J.

  • Fix for Bug#113413 (Bug#36107426), Connection.changeUser cannot be done after DriverManager.loginTimeout elapses. Thanks to Kazuhisa Kawashima for his contribution.

... (truncated)

Commits
  • fac9201 Add openSUSE 16 RPM release suffix
  • 506d696 Update for SECURITY.md.
  • b121543 Update for test in SecureSessionTest.
  • 71b54f3 Update for GPL license book.
  • 4efd800 Fix for Bug#39806615, Validate extension class names supplied through connect...
  • ac039c2 Updated build.xml to use specified testsuite jvm.
  • 9c0343a WL#17343, Upgrade 3rd party libraries and tools.
  • b0ee382 Fix for Bug#39449398, WebAuthn ClientDataJSON is not serialized correctly for...
  • 69a330f Fix for Bug#39455455, Reported result set column counts are not properly vali...
  • cf8309a Post-release version bump.
  • Additional commits viewable in compare view

Updates org.apache.hadoop:hadoop-client from 3.3.6 to 3.5.0

Updates org.apache.hadoop:hadoop-common from 3.3.6 to 3.5.0

Updates org.apache.hadoop:hadoop-hdfs from 3.3.6 to 3.5.0

Updates org.apache.hadoop:hadoop-mapreduce-client-core from 3.3.6 to 3.5.0

Updates com.alibaba.nacos:nacos-client from 2.1.2 to 3.3.0

Release notes

Sourced from com.alibaba.nacos:nacos-client's releases.

3.3.0(Oct 29th, 2026)

Nacos 3.3.0

Nacos 3.3.0 is a feature iteration release for the Nacos 3.x series. It brings protocol-neutral Agent management and discovery, shared AI resource search, and unified MCP lifecycle management to the stable release.

This release focuses on:

  • AI Registry capabilities across Agent, AgentSpec, Skill, Prompt, and MCP resources.
  • DNS service discovery and distributed locks.
  • Dynamic plugin management and authentication enabled by default.
  • Spring Boot 4 and Jackson 3 compatibility, with improved client and server reliability.

The main feature updates include:

  • Agent registration, version management, runtime endpoints, RAD discovery, transport negotiation, and Watch/Push through Java SDKs and Console workflows.
  • Shared AI resource search with hybrid keyword and vector retrieval, artifact access, and optional relevance filtering.
  • MCP draft, review, publish, online/offline, and visibility management, with migration support for historical resources.
  • Optional DNS discovery with A, AAAA, and SRV records over UDP and TCP.
  • Distributed reentrant and non-reentrant locks with watchdog renewal and Raft consistency.

The stable release also improves Skill metadata consistency across version transitions, extends visibility plugin capabilities, and strengthens Config SDK usability, Console compatibility, and recovery after Naming reconnects and cluster restarts.

These notes are cumulative and include the changes delivered in 3.3.0-BETA and 3.3.0-RC.


Detailed changes in this release:

Feature

  • #50 Add optional DNS service discovery over UDP and TCP, with A, AAAA, and SRV records, metrics, and configurable external DNS forwarding.
  • #14466 Add a neutral JSON adapter with Jackson 2 and Jackson 3 runtime support.
  • #14804 Add protocol-neutral Agent lifecycle management, Console workflows, RAD discovery, runtime endpoints, transport negotiation, Watch/Push, and Java SDKs.
  • #15279 Add distributed reentrant and non-reentrant locks with watchdog renewal, FIFO waiting, gRPC notifications, Raft consistency, and a Java Lock SDK.
  • #15471 Support SkillSpector as an AI publish pipeline.
  • #15475 Add unified dynamic plugin configuration, lifecycle management, runtime updates, deterministic discovery, and Console configuration workflows.
  • #15476#15604 Add plugin-owned visibility grant and revoke APIs and Console management for Skill and AgentSpec resources.
  • #15541 Add Agentic Resource Discovery with search, exploration, artifact retrieval, visibility filtering, persistent indexes, and hybrid keyword and vector retrieval.
  • #15640 Add Linux RISC-V64 compatibility for RocksDB JNI loading and startup.
  • #15761 Add shared MCP lifecycle management with drafts, review, publish, online/offline operations, visibility, Java SDKs, and historical reconciliation while preserving existing Config/Naming serving data.

Enhancement/Refactor

  • #8354 Replace the mandatory Prometheus client dependency with a pluggable client metrics SPI and a no-op default.
  • #12064 Support configuring the gRPC port offset through individual client properties.
  • #12734 Add request/result-based Config SDK methods, encrypted Config CAS publishing, and conditional queries with local cache reuse.
  • #13690 Log the resolved client logging configuration and include namespace IDs in subscription logs.
  • #14804 Improve Agent Console workflows, expose SDK discovery capabilities and A2A conversion helpers, and trace discovery request origins.
  • #14817 Disable selected deprecated Pipeline and MCP import APIs by default and provide a shared temporary compatibility switch.
  • #14932 Reduce read-path contention and improve index consistency in the legacy MCP cache.

... (truncated)

Commits

Updates com.alibaba:fastjson from 2.0.52 to 2.0.66

Release notes

Sourced from com.alibaba:fastjson's releases.

2.0.66

What's Changed

New Contributors

Full Changelog: alibaba/fastjson2@2.0.65...2.0.66

fastjson 2.0.65版本发布

FASTJSON 2.0.65 Release Notes

... (truncated)

Commits
  • 235cdfa Merge pull request #7899 from alibaba/release/2.0.66
  • bf3ea2e 2.0.66 release
  • 3e6a305 Merge pull request #7776 from joysinleung/fix/jsonb-readLength-oom
  • c8fbd5b fix: bound skipValue()/skipName() declared-length reads (review R2-5)
  • 9cd64ec Merge remote-tracking branch 'origin/main' into pr-7776-takeover
  • 2831cd3 Merge pull request #7884 from Rainmemery/fix/arraytobean-alphabetic-order
  • 56c7ac7 Merge pull request #7867 from Support-itecz/jsonb-string-length
  • cf895a8 Merge pull request #7791 from annoymous3/fix/truncated-backslash-escape
  • 67e9222 Merge remote-tracking branch 'origin/main' into pr-7791-takeover
  • 9f95582 Merge pull request #7797 from 1919chichi/fix/issue-3516-map-numeric-key-ref-path
  • Additional commits viewable in compare view

Updates com.google.code.gson:gson from 2.14.0 to 2.15.0

Release notes

Sourced from com.google.code.gson:gson's releases.

Gson 2.15.0

What's Changed

These are some of the more important changes

API addition:

Behaviour changes and bugfixes:

New Contributors

Full Changelog: google/gson@gson-parent-2.14.0...gson-parent-2.15.0

Commits
  • fcd4169 [maven-release-plugin] prepare release gson-parent-2.15.0
  • 828cbe0 Update protobuf-maven-plugin dependency. (#3153)
  • 66dd98a Disable Spotless plugin before Java 21. (#3152)
  • 094f500 Fix typo in comment (#3148)
  • 881d2b5 Consistently use "Gson" instead of "GSON" as project name (#3150)
  • e2292f9 Address a few static analysis findings. (#3141)
  • 67427c4 Bump the github-actions group across 1 directory with 5 updates (#3133)
  • 845664b Correct logic for BOM detection. (#3137)
  • 216c41b Bump com.fasterxml.jackson.core:jackson-databind (#3136)
  • 854c825 Simplify key removal in LegacyProtoTypeAdapterFactoryTest (#3124)
  • Additional commits viewable in compare view

Updates com.jayway.jsonpath:json-path from 2.9.0 to 3.0.0

Release notes

Sourced from com.jayway.jsonpath:json-path's releases.

json-path-3.0.0

What's Changed

New Contributors

Full Changelog: json-path/JsonPath@json-path-2.10.0...json-path-3.0.0

json-path-2.10.0

What's Changed

  • Bumps dependency versions by @​kallestenflo in json-path/JsonPath#1057
    • net.minidev:json-smart:2.6.0
    • org.slf4j:slf4j-api:2.0.17
    • com.google.code.gson:gson:2.13.2
    • org.hamcrest:hamcrest:3.0
    • com.fasterxml.jackson.core:jackson-databind:2.19.2
    • org.json:json:20250517
    • org.apache.tapestry:tapestry-json:5.9.0
    • jakarta.json:jakarta.json-api:2.1.3
    • jakarta.json.bind:jakarta.json.bind-api:2.0.0

Full Changelog: json-path/JsonPath@json-path-2.9.0...json-path-2.10.0

Commits

Updates com.google.protobuf:protobuf-java from 3.25.5 to 4.36.2

Commits

Updates net.minidev:json-smart from 2.5.2 to 2.6.0

Release notes

Sourced from net.minidev:json-smart's releases.

v2.6.0

What's Changed

New Contributors

Full Changelog: netplex/json-smart-v2@2.5.2...v2.6.0

Commits

Updates net.minidev:accessors-smart from 2.5.0 to 2.6.0

Release notes

Sourced from net.minidev:accessors-smart's releases.

v2.6.0

What's Changed

Bumps the other-deps group with 51 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| org.yaml:snakeyaml | `2.2` | `2.7` |
| org.slf4j:slf4j-api | `1.7.15` | `2.0.20` |
| org.apache.logging.log4j:log4j-api | `2.25.5` | `2.26.1` |
| org.apache.logging.log4j:log4j-core | `2.25.5` | `2.26.1` |
| org.apache.logging.log4j:log4j-1.2-api | `2.25.5` | `2.26.1` |
| org.apache.logging.log4j:log4j-slf4j-impl | `2.25.5` | `2.26.1` |
| org.apache.logging.log4j:log4j-core | `2.25.5` | `2.26.1` |
| org.apache.logging.log4j:log4j-1.2-api | `2.25.5` | `2.26.1` |
| org.apache.logging.log4j:log4j-slf4j-impl | `2.25.5` | `2.26.1` |
| [com.mysql:mysql-connector-j](https://github.com/mysql/mysql-connector-j) | `8.4.0` | `26.10.0` |
| org.apache.hadoop:hadoop-client | `3.3.6` | `3.5.0` |
| org.apache.hadoop:hadoop-common | `3.3.6` | `3.5.0` |
| org.apache.hadoop:hadoop-hdfs | `3.3.6` | `3.5.0` |
| org.apache.hadoop:hadoop-mapreduce-client-core | `3.3.6` | `3.5.0` |
| [com.alibaba.nacos:nacos-client](https://github.com/alibaba/nacos) | `2.1.2` | `3.3.0` |
| [com.alibaba:fastjson](https://github.com/alibaba/fastjson2) | `2.0.52` | `2.0.66` |
| [com.google.code.gson:gson](https://github.com/google/gson) | `2.14.0` | `2.15.0` |
| [com.jayway.jsonpath:json-path](https://github.com/jayway/JsonPath) | `2.9.0` | `3.0.0` |
| [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `3.25.5` | `4.36.2` |
| [net.minidev:json-smart](https://github.com/netplex/json-smart-v2) | `2.5.2` | `2.6.0` |
| [net.minidev:accessors-smart](https://github.com/netplex/json-smart-v2) | `2.5.0` | `2.6.0` |
| [commons-net:commons-net](https://github.com/apache/commons-net) | `3.10.0` | `3.13.0` |
| [com.squareup.okio:okio](https://github.com/lysine-dev/okio) | `3.4.0` | `3.18.2` |
| org.apache.zookeeper:zookeeper | `3.9.5` | `3.9.7` |
| [commons-cli:commons-cli](https://github.com/apache/commons-cli) | `1.5.0` | `1.11.0` |
| [dnsjava:dnsjava](https://github.com/dnsjava/dnsjava) | `3.6.0` | `3.7.0` |
| [org.codehaus.plexus:plexus-utils](https://github.com/codehaus-plexus/plexus-utils) | `3.6.1` | `4.1.0` |
| [at.yawk.lz4:lz4-java](https://github.com/yawkat/lz4-java) | `1.11.4` | `1.12.1` |
| [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) | `2.14.2` | `2.23.0` |
| [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.5.0` | `3.7.0` |
| [org.apache.maven.plugins:maven-pmd-plugin](https://github.com/apache/maven-pmd-plugin) | `3.21.0` | `3.28.0` |
| [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.12` | `0.8.16` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.10.0` | `3.16.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.0.0-M5` | `3.6.1` |
| [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) | `3.10.2` | `3.10.4` |
| [org.apache.maven.plugins:maven-checkstyle-plugin](https://github.com/apache/maven-checkstyle-plugin) | `3.1.2` | `3.6.0` |
| [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) | `4.8.6.6` | `4.10.5.0` |
| [org.apache.maven.plugins:maven-shade-plugin](https://github.com/apache/maven-shade-plugin) | `3.5.1` | `3.6.2` |
| [org.codehaus.mojo:build-helper-maven-plugin](https://github.com/mojohaus/build-helper-maven-plugin) | `3.6.0` | `3.6.2` |
| org.apache.avro:avro | `1.12.1` | `1.12.2` |
| [org.scala-lang:scala-library](https://github.com/scala/scala3) | `2.12.7` | `3.10.0` |
| org.apache.kafka:kafka-clients | `4.1.2` | `4.4.0` |
| [org.elasticsearch.client:elasticsearch-rest-high-level-client](https://github.com/elastic/elasticsearch) | `7.17.9` | `7.17.29` |
| org.apache.commons:commons-lang3 | `3.18.0` | `3.21.0` |
| [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) | `3.7.1` | `3.11.0` |
| [com.h2database:h2](https://github.com/h2database/h2database) | `2.2.224` | `2.5.252` |
| [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) | `10.0.2` | `10.10` |
| [org.apache.maven.plugins:maven-assembly-plugin](https://github.com/apache/maven-assembly-plugin) | `3.6.0` | `3.8.0` |
| [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) | `3.3.0` | `3.5.1` |
| org.apache.paimon:paimon-flink-1.20 | `1.4.1` | `1.4.2` |
| org.apache.paimon:paimon-flink-cdc | `1.4.1` | `1.4.2` |
| org.apache.paimon:paimon-flink-cdc | `1.4.1` | `1.4.2` |
| [org.mongodb:mongodb-driver-sync](https://github.com/mongodb/mongo-java-driver) | `4.11.1` | `5.14.0` |
| org.apache.hadoop:hadoop-common | `3.3.6` | `3.5.0` |
| org.apache.hadoop:hadoop-hdfs | `3.3.6` | `3.5.0` |
| org.apache.hadoop:hadoop-mapreduce-client-core | `3.3.6` | `3.5.0` |
| org.apache.kafka:connect-api | `3.6.1` | `4.4.0` |
| org.apache.maven:apache-maven | `3.9.9` | `3.10.0` |



Updates `org.yaml:snakeyaml` from 2.2 to 2.7

Updates `org.slf4j:slf4j-api` from 1.7.15 to 2.0.20

Updates `org.apache.logging.log4j:log4j-api` from 2.25.5 to 2.26.1

Updates `org.apache.logging.log4j:log4j-core` from 2.25.5 to 2.26.1

Updates `org.apache.logging.log4j:log4j-1.2-api` from 2.25.5 to 2.26.1

Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.25.5 to 2.26.1

Updates `org.apache.logging.log4j:log4j-core` from 2.25.5 to 2.26.1

Updates `org.apache.logging.log4j:log4j-1.2-api` from 2.25.5 to 2.26.1

Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.25.5 to 2.26.1

Updates `com.mysql:mysql-connector-j` from 8.4.0 to 26.10.0
- [Changelog](https://github.com/mysql/mysql-connector-j/blob/trunk/CHANGES)
- [Commits](mysql/mysql-connector-j@8.4.0...26.10.0)

Updates `org.apache.hadoop:hadoop-client` from 3.3.6 to 3.5.0

Updates `org.apache.hadoop:hadoop-common` from 3.3.6 to 3.5.0

Updates `org.apache.hadoop:hadoop-hdfs` from 3.3.6 to 3.5.0

Updates `org.apache.hadoop:hadoop-mapreduce-client-core` from 3.3.6 to 3.5.0

Updates `com.alibaba.nacos:nacos-client` from 2.1.2 to 3.3.0
- [Release notes](https://github.com/alibaba/nacos/releases)
- [Changelog](https://github.com/alibaba/nacos/blob/develop/CHANGELOG.md)
- [Commits](alibaba/nacos@2.1.2...3.3.0)

Updates `com.alibaba:fastjson` from 2.0.52 to 2.0.66
- [Release notes](https://github.com/alibaba/fastjson2/releases)
- [Commits](alibaba/fastjson2@2.0.52...2.0.66)

Updates `com.google.code.gson:gson` from 2.14.0 to 2.15.0
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-parent-2.14.0...gson-parent-2.15.0)

Updates `com.jayway.jsonpath:json-path` from 2.9.0 to 3.0.0
- [Release notes](https://github.com/jayway/JsonPath/releases)
- [Changelog](https://github.com/json-path/JsonPath/blob/master/changelog.md)
- [Commits](json-path/JsonPath@json-path-2.9.0...json-path-3.0.0)

Updates `com.google.protobuf:protobuf-java` from 3.25.5 to 4.36.2
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `net.minidev:json-smart` from 2.5.2 to 2.6.0
- [Release notes](https://github.com/netplex/json-smart-v2/releases)
- [Commits](netplex/json-smart-v2@2.5.2...v2.6.0)

Updates `net.minidev:accessors-smart` from 2.5.0 to 2.6.0
- [Release notes](https://github.com/netplex/json-smart-v2/releases)
- [Commits](netplex/json-smart-v2@2.5.0...v2.6.0)

Updates `commons-net:commons-net` from 3.10.0 to 3.13.0
- [Changelog](https://github.com/apache/commons-net/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-net@rel/commons-net-3.10.0...rel/commons-net-3.13.0)

Updates `com.squareup.okio:okio` from 3.4.0 to 3.18.2
- [Changelog](https://github.com/lysine-dev/okio/blob/main/CHANGELOG.md)
- [Commits](lysine-dev/okio@parent-3.4.0...parent-3.18.2)

Updates `org.apache.zookeeper:zookeeper` from 3.9.5 to 3.9.7

Updates `commons-cli:commons-cli` from 1.5.0 to 1.11.0
- [Changelog](https://github.com/apache/commons-cli/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-cli@commons-cli-1.5.0...rel/commons-cli-1.11.0)

Updates `dnsjava:dnsjava` from 3.6.0 to 3.7.0
- [Release notes](https://github.com/dnsjava/dnsjava/releases)
- [Changelog](https://github.com/dnsjava/dnsjava/blob/master/Changelog)
- [Commits](dnsjava/dnsjava@v3.6.0...v3.7.0)

Updates `org.codehaus.plexus:plexus-utils` from 3.6.1 to 4.1.0
- [Release notes](https://github.com/codehaus-plexus/plexus-utils/releases)
- [Commits](codehaus-plexus/plexus-utils@plexus-utils-3.6.1...plexus-utils-4.1.0)

Updates `at.yawk.lz4:lz4-java` from 1.11.4 to 1.12.1
- [Release notes](https://github.com/yawkat/lz4-java/releases)
- [Changelog](https://github.com/yawkat/lz4-java/blob/main/CHANGES.md)
- [Commits](yawkat/lz4-java@v1.11.4...v1.12.1)

Updates `org.codehaus.mojo:versions-maven-plugin` from 2.14.2 to 2.23.0
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](mojohaus/versions@2.14.2...2.23.0)

Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.5.0 to 3.7.0
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](apache/maven-enforcer@enforcer-3.5.0...enforcer-3.7.0)

Updates `org.apache.maven.plugins:maven-pmd-plugin` from 3.21.0 to 3.28.0
- [Release notes](https://github.com/apache/maven-pmd-plugin/releases)
- [Commits](apache/maven-pmd-plugin@maven-pmd-plugin-3.21.0...maven-pmd-plugin-3.28.0)

Updates `org.jacoco:jacoco-maven-plugin` from 0.8.12 to 0.8.16
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.12...v0.8.16)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.10.0 to 3.16.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.10.0...maven-compiler-plugin-3.16.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.0.0-M5 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.0.0-M5...surefire-3.6.1)

Updates `com.diffplug.spotless:spotless-maven-plugin` from 3.10.2 to 3.10.4
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@maven/3.10.2...maven/3.10.4)

Updates `org.apache.maven.plugins:maven-checkstyle-plugin` from 3.1.2 to 3.6.0
- [Release notes](https://github.com/apache/maven-checkstyle-plugin/releases)
- [Commits](apache/maven-checkstyle-plugin@maven-checkstyle-plugin-3.1.2...maven-checkstyle-plugin-3.6.0)

Updates `com.github.spotbugs:spotbugs-maven-plugin` from 4.8.6.6 to 4.10.5.0
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.8.6.6...spotbugs-maven-plugin-4.10.5.0)

Updates `org.apache.maven.plugins:maven-shade-plugin` from 3.5.1 to 3.6.2
- [Release notes](https://github.com/apache/maven-shade-plugin/releases)
- [Commits](apache/maven-shade-plugin@maven-shade-plugin-3.5.1...maven-shade-plugin-3.6.2)

Updates `org.codehaus.mojo:build-helper-maven-plugin` from 3.6.0 to 3.6.2
- [Release notes](https://github.com/mojohaus/build-helper-maven-plugin/releases)
- [Commits](mojohaus/build-helper-maven-plugin@3.6.0...3.6.2)

Updates `org.apache.avro:avro` from 1.12.1 to 1.12.2

Updates `org.scala-lang:scala-library` from 2.12.7 to 3.10.0
- [Release notes](https://github.com/scala/scala3/releases)
- [Commits](https://github.com/scala/scala3/commits/3.10.0)

Updates `org.apache.kafka:kafka-clients` from 4.1.2 to 4.4.0

Updates `org.elasticsearch.client:elasticsearch-rest-high-level-client` from 7.17.9 to 7.17.29
- [Release notes](https://github.com/elastic/elasticsearch/releases)
- [Changelog](https://github.com/elastic/elasticsearch/blob/main/docs/changelog.yml)
- [Commits](elastic/elasticsearch@v7.17.9...v7.17.29)

Updates `org.apache.commons:commons-lang3` from 3.18.0 to 3.21.0

Updates `org.apache.maven.plugins:maven-dependency-plugin` from 3.7.1 to 3.11.0
- [Release notes](https://github.com/apache/maven-dependency-plugin/releases)
- [Commits](apache/maven-dependency-plugin@maven-dependency-plugin-3.7.1...maven-dependency-plugin-3.11.0)

Updates `com.h2database:h2` from 2.2.224 to 2.5.252
- [Release notes](https://github.com/h2database/h2database/releases)
- [Commits](h2database/h2database@version-2.2.224...version-2.5.252)

Updates `com.nimbusds:nimbus-jose-jwt` from 10.0.2 to 10.10
- [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt)
- [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/10.10..10.0.2)

Updates `org.apache.maven.plugins:maven-assembly-plugin` from 3.6.0 to 3.8.0
- [Release notes](https://github.com/apache/maven-assembly-plugin/releases)
- [Commits](apache/maven-assembly-plugin@maven-assembly-plugin-3.6.0...maven-assembly-plugin-3.8.0)

Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.3.0 to 3.5.1
- [Release notes](https://github.com/apache/maven-jar-plugin/releases)
- [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.3.0...maven-jar-plugin-3.5.1)

Updates `org.apache.paimon:paimon-flink-1.20` from 1.4.1 to 1.4.2

Updates `org.apache.paimon:paimon-flink-cdc` from 1.4.1 to 1.4.2

Updates `org.apache.paimon:paimon-flink-cdc` from 1.4.1 to 1.4.2

Updates `org.mongodb:mongodb-driver-sync` from 4.11.1 to 5.14.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r4.11.1...r5.14.0)

Updates `org.apache.hadoop:hadoop-common` from 3.3.6 to 3.5.0

Updates `org.apache.hadoop:hadoop-hdfs` from 3.3.6 to 3.5.0

Updates `org.apache.hadoop:hadoop-mapreduce-client-core` from 3.3.6 to 3.5.0

Updates `org.apache.kafka:connect-api` from 3.6.1 to 4.4.0

Updates `org.apache.maven:apache-maven` from 3.9.9 to 3.10.0

---
updated-dependencies:
- dependency-name: org.yaml:snakeyaml
  dependency-version: '2.7'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.slf4j:slf4j-api
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: other-deps
- dependency-name: org.apache.logging.log4j:log4j-api
  dependency-version: 2.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.apache.logging.log4j:log4j-1.2-api
  dependency-version: 2.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.apache.logging.log4j:log4j-slf4j-impl
  dependency-version: 2.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.apache.logging.log4j:log4j-1.2-api
  dependency-version: 2.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.apache.logging.log4j:log4j-slf4j-impl
  dependency-version: 2.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: com.mysql:mysql-connector-j
  dependency-version: 26.10.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: other-deps
- dependency-name: org.apache.hadoop:hadoop-client
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.apache.hadoop:hadoop-common
  dependency-version: 3.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.apache.hadoop:hadoop-hdfs
  dependency-version: 3.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.apache.hadoop:hadoop-mapreduce-client-core
  dependency-version: 3.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: com.alibaba.nacos:nacos-client
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: other-deps
- dependency-name: com.alibaba:fastjson
  dependency-version: 2.0.66
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-deps
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: com.jayway.jsonpath:json-path
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: other-deps
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 4.36.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: other-deps
- dependency-name: net.minidev:json-smart
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: net.minidev:accessors-smart
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: commons-net:commons-net
  dependency-version: 3.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: com.squareup.okio:okio
  dependency-version: 3.18.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.apache.zookeeper:zookeeper
  dependency-version: 3.9.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-deps
- dependency-name: commons-cli:commons-cli
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: dnsjava:dnsjava
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.codehaus.plexus:plexus-utils
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: other-deps
- dependency-name: at.yawk.lz4:lz4-java
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-version: 2.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.apache.maven.plugins:maven-pmd-plugin
  dependency-version: 3.28.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: other-deps
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.10.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: other-deps
- dependency-name: org.apache.maven.plugins:maven-checkstyle-plugin
  dependency-version: 3.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-version: 4.10.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.apache.maven.plugins:maven-shade-plugin
  dependency-version: 3.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.codehaus.mojo:build-helper-maven-plugin
  dependency-version: 3.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: other-deps
- dependency-name: org.apache.avro:avro
  dependency-version: 1.12.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-deps
- dependency-name: org.scala-lang:scala-library
  dependency-version: 3.10.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: other-deps
- dependency-name: org.apache.kafka:kafka-clients
  dependency-version: 4.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.elasticsearch.client:elasticsearch-rest-high-level-client
  dependency-version: 7.17.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-deps
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.apache.maven.plugins:maven-dependency-plugin
  dependency-version: 3.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: com.h2database:h2
  dependency-version: 2.5.252
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: com.nimbusds:nimbus-jose-jwt
  dependency-version: '10.10'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.apache.maven.plugins:maven-assembly-plugin
  dependency-version: 3.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.apache.maven.plugins:maven-jar-plugin
  dependency-version: 3.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.apache.paimon:paimon-flink-1.20
  dependency-version: 1.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-deps
- dependency-name: org.apache.paimon:paimon-flink-cdc
  dependency-version: 1.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-deps
- dependency-name: org.apache.paimon:paimon-flink-cdc
  dependency-version: 1.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-deps
- dependency-name: org.mongodb:mongodb-driver-sync
  dependency-version: 5.14.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: other-deps
- dependency-name: org.apache.hadoop:hadoop-common
  dependency-version: 3.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.apache.hadoop:hadoop-hdfs
  dependency-version: 3.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.apache.hadoop:hadoop-mapreduce-client-core
  dependency-version: 3.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: other-deps
- dependency-name: org.apache.kafka:connect-api
  dependency-version: 4.4.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: other-deps
- dependency-name: org.apache.maven:apache-maven
  dependency-version: 3.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: automated. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

github-actions Bot commented Nov 2, 2026

Copy link
Copy Markdown

Thanks for opening this PR

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants