Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 9 updates - #338

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/platform-fisco/minor-and-patch-4aecc95e92
Open

chore(deps): bump the minor-and-patch group across 1 directory with 9 updates#338
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/platform-fisco/minor-and-patch-4aecc95e92

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 9 updates in the /platform-fisco directory:

Package From To
org.apache.skywalking:apm-toolkit-logback-1.x 9.6.0 9.7.0
org.bouncycastle:bcprov-jdk18on 1.84 1.85.2
com.google.protobuf:protobuf-java 4.34.1 4.35.1
com.google.protobuf:protobuf-java-util 4.34.1 4.35.1
io.netty:netty-bom 4.2.16.Final 4.2.17.Final
tools.jackson.core:jackson-core 3.1.5 3.2.1
tools.jackson.core:jackson-databind 3.1.5 3.2.1
com.squareup.okio:okio 3.17.0 3.18.1
org.apache.maven.plugins:maven-enforcer-plugin 3.6.2 3.6.3

Updates org.apache.skywalking:apm-toolkit-logback-1.x from 9.6.0 to 9.7.0

Updates org.bouncycastle:bcprov-jdk18on from 1.84 to 1.85.2

Changelog

Sourced from org.bouncycastle:bcprov-jdk18on's changelog.

... (truncated)

Commits

Updates com.google.protobuf:protobuf-java from 4.34.1 to 4.35.1

Commits

Updates com.google.protobuf:protobuf-java-util from 4.34.1 to 4.35.1

Updates com.google.protobuf:protobuf-java-util from 4.34.1 to 4.35.1

Updates io.netty:netty-bom from 4.2.16.Final to 4.2.17.Final

Release notes

Sourced from io.netty:netty-bom's releases.

netty-4.2.17.Final

What's Changed

New Contributors

... (truncated)

Commits
  • e0789d3 [maven-release-plugin] prepare release netty-4.2.17.Final
  • 1b5abc6 Merge changes from forks (#17213)
  • 36fbf57 Update surefire plugin to latest version (#17210)
  • a96226c Add .editorconfig to enforce consistent coding style (#17052)
  • 14a4e6a OpenSSL: Allow to obtain used named group via OpenSslSession (#17058)
  • 26255b1 Weakly reference engines from the OpenSSL engine map (#17199)
  • ae41417 HttpServerCodec: do not consume the method queue for 1xx interim responses ...
  • 41f1db5 Do not write WebSocket handshake response to the tail of the pipeline (#17192)
  • 035d76e Update compress-lzf to 1.2.1 (#17194)
  • 7681aff Fix JdkZlibDecompressor losing the tail of highly compressible streams (#17191)
  • Additional commits viewable in compare view

Updates tools.jackson.core:jackson-core from 3.1.5 to 3.2.1

Commits

Updates tools.jackson.core:jackson-databind from 3.1.5 to 3.2.1

Commits

Updates com.squareup.okio:okio from 3.17.0 to 3.18.1

Changelog

Sourced from com.squareup.okio:okio's changelog.

Version 3.18.1

2026-07-28

  • Fix: Restore binary-compatibility with Okio 3.17.x for Kotlin/Native users. When we introduced the new base64() function, we inadvertently changed the binary signature! Ugh! This is now fixed and we've automated binary-compatibility checking for Kotlin/Native going forward.

Version 3.18.0

2026-07-21

  • Fix: Use wide character APIs to better support of non-UTF-8 filesystems on Windows.
  • Fix: Don't crash in AssetFileSystem.exists() when the underlying storage throws a FileNotFoundException.
  • Fix: Load WASI paths relative to their preopen. The platform behavior recently changed in NodeJS, causing our WasiFileSystem to be unable to access files!
  • New: Optionally ignore whitespace when decoding hexadecimal.
  • New: Optionally omit padding when encoding Base64.
  • New: BufferedSource.readUInt(), BufferedSink.writeUInt(), and similar functions for UByte, UShort and ULong. Also add support for unsigned and little-endian.
  • New: BufferedSink.utf8Appendable(). Use this to adapt an Okio sink to an Appendable.
  • New: Source.limit() returns a wrapped source with a strict limit on how many bytes are returned.
  • New: ByteString.equals(other, constantTime) for subtle defense against timing attacks.
Commits

Updates org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3

Release notes

Sourced from org.apache.maven.plugins:maven-enforcer-plugin's releases.

3.6.3

🚀 New features and improvements

  • Make bannedDependencies report root and transitive dependency in case both are banned. (#940) @​hvoynov
  • Add enforceBytecodeVersion rule based on mojohaus (#968) @​cstamas
  • Improve formatting of deprecated API warning (#951) @​mthmulders

🐛 Bug Fixes

📝 Documentation updates

  • Document the banMavenDefaults option for the requirePluginVersions rule. (#936) @​rpkrajewski

👻 Maintenance

📦 Dependency updates

Commits
  • c7daff3 [maven-release-plugin] prepare release enforcer-3.6.3
  • ee46e78 Make bannedDependencies report root and transitive dependency in case both ar...
  • 0806924 Document the banMavenDefaults option for the requirePluginVersions rule. (#936)
  • 8e4f5b9 Add better enforceBytecodeVersion rule based on mojohaus (#968)
  • fd4b148 Add fix for 21.0.10.0.1 issue (#967)
  • f32d597 Deps: Parent POM 48 and align deps (#979)
  • df0f2a6 Bump commons-codec:commons-codec from 1.21.0 to 1.22.0 (#976)
  • 2da7a68 Add null checks for modelId in PluginWrapper
  • 91eb4d9 Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#975)
  • b622245 Bump mavenVersion from 3.9.14 to 3.9.15 (#973)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates

Bumps the minor-and-patch group with 9 updates in the /platform-fisco directory:

| Package | From | To |
| --- | --- | --- |
| org.apache.skywalking:apm-toolkit-logback-1.x | `9.6.0` | `9.7.0` |
| [org.bouncycastle:bcprov-jdk18on](https://github.com/bcgit/bc-java) | `1.84` | `1.85.2` |
| [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `4.34.1` | `4.35.1` |
| com.google.protobuf:protobuf-java-util | `4.34.1` | `4.35.1` |
| [io.netty:netty-bom](https://github.com/netty/netty) | `4.2.16.Final` | `4.2.17.Final` |
| [tools.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `3.1.5` | `3.2.1` |
| [tools.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `3.1.5` | `3.2.1` |
| [com.squareup.okio:okio](https://github.com/lysine-dev/okio) | `3.17.0` | `3.18.1` |
| [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.6.2` | `3.6.3` |



Updates `org.apache.skywalking:apm-toolkit-logback-1.x` from 9.6.0 to 9.7.0

Updates `org.bouncycastle:bcprov-jdk18on` from 1.84 to 1.85.2
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `com.google.protobuf:protobuf-java` from 4.34.1 to 4.35.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `com.google.protobuf:protobuf-java-util` from 4.34.1 to 4.35.1

Updates `com.google.protobuf:protobuf-java-util` from 4.34.1 to 4.35.1

Updates `io.netty:netty-bom` from 4.2.16.Final to 4.2.17.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.16.Final...netty-4.2.17.Final)

Updates `tools.jackson.core:jackson-core` from 3.1.5 to 3.2.1
- [Commits](FasterXML/jackson-core@jackson-core-3.1.5...jackson-core-3.2.1)

Updates `tools.jackson.core:jackson-databind` from 3.1.5 to 3.2.1
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.squareup.okio:okio` from 3.17.0 to 3.18.1
- [Changelog](https://github.com/lysine-dev/okio/blob/main/CHANGELOG.md)
- [Commits](lysine-dev/okio@parent-3.17.0...parent-3.18.1)

Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.6.2 to 3.6.3
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](apache/maven-enforcer@enforcer-3.6.2...enforcer-3.6.3)

---
updated-dependencies:
- dependency-name: org.apache.skywalking:apm-toolkit-logback-1.x
  dependency-version: 9.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: org.bouncycastle:bcprov-jdk18on
  dependency-version: 1.85.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 4.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: com.google.protobuf:protobuf-java-util
  dependency-version: 4.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: com.google.protobuf:protobuf-java-util
  dependency-version: 4.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: io.netty:netty-bom
  dependency-version: 4.2.17.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: tools.jackson.core:jackson-core
  dependency-version: 3.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tools.jackson.core:jackson-databind
  dependency-version: 3.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: com.squareup.okio:okio
  dependency-version: 3.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
  dependency-version: 3.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 17, 2026
@codecov

codecov Bot commented Aug 17, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants