Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 15 updates - #342

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/platform-storage/minor-and-patch-e62ef9c021
Open

chore(deps): bump the minor-and-patch group across 1 directory with 15 updates#342
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/platform-storage/minor-and-patch-e62ef9c021

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 15 updates in the /platform-storage directory:

Package From To
org.apache.skywalking:apm-toolkit-logback-1.x 9.6.0 9.7.0
com.google.protobuf:protobuf-java 4.34.1 4.36.0
com.google.protobuf:protobuf-java-util 4.34.1 4.36.0
com.google.guava:guava 33.6.0-jre 33.7.1-jre
software.amazon.awssdk:s3 2.44.4 2.54.1
software.amazon.awssdk:apache-client 2.44.4 2.54.1
cn.hutool:hutool-all 5.8.44 5.8.47
org.redisson:redisson-spring-boot-starter 4.3.1 4.7.0
com.alibaba.cloud:spring-cloud-alibaba-dependencies 2025.0.0.0 2025.1.0.0
tools.jackson.core:jackson-core 3.1.5 3.2.2
tools.jackson.core:jackson-databind 3.1.5 3.2.2
io.netty:netty-bom 4.2.16.Final 4.2.17.Final
org.bouncycastle:bcprov-jdk18on 1.84 1.85.2
org.apache.maven.plugins:maven-enforcer-plugin 3.6.2 3.6.3
org.apache.maven.plugins:maven-failsafe-plugin 3.5.5 3.5.6

Updates org.apache.skywalking:apm-toolkit-logback-1.x from 9.6.0 to 9.7.0

Updates com.google.protobuf:protobuf-java from 4.34.1 to 4.36.0

Commits

Updates com.google.protobuf:protobuf-java-util from 4.34.1 to 4.36.0

Updates com.google.protobuf:protobuf-java-util from 4.34.1 to 4.36.0

Updates com.google.guava:guava from 33.6.0-jre to 33.7.1-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.7.1

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.1-jre</version>
  <!-- or, for Android: -->
  <version>33.7.1-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

Guava 33.7.1 removes the Multi-Release line from our jar manifest, fixing an issue under Java 9 and 10 that was introduced to guava-jre in version 33.7.0. Sorry for the trouble.

33.7.0

Newly introduced problem for Java 9 and Java 10 only

Guava 33.7.0 includes a Multi-Release line in its jar manifest, even though it is no longer a multi-release jar. This causes some problems with tools from Java 9 and Java 10. The issue is fixed in version 33.7.1. Sorry for the trouble.

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.0-jre</version>
  <!-- or, for Android: -->
</tr></table> 

... (truncated)

Commits

Updates software.amazon.awssdk:s3 from 2.44.4 to 2.54.1

Updates software.amazon.awssdk:apache-client from 2.44.4 to 2.54.1

Updates software.amazon.awssdk:apache-client from 2.44.4 to 2.54.1

Updates cn.hutool:hutool-all from 5.8.44 to 5.8.47

Release notes

Sourced from cn.hutool:hutool-all's releases.

5.8.47(2026-07-06) 🐣新特性 【core 】 EnumConverter变更规则,当用户自定义方法返回null时,调用默认valueOf(pr#4258@Github) 【core 】 DateUtilparseISO8601增加检查范围(pr#4275@Github) 【core 】 Guard FileMagicNumber AAC/M4A/AMR matchers against short byte arrays(pr#4278@Github) 【crypto 】 Reject empty cipherKey in Vigenere with a clear exception(pr#4279@Github) 【core 】 Return null from CsvRow.get for a negative index(pr#4280@Github) 【crypto 】 Reject too-short salt in BCrypt.hashpw with IllegalArgumentException(pr#4282@Github) 【crypto 】 Validate md5HexTo16 input length to avoid StringIndexOutOfBoundsException(pr#4283@Github) 🐞Bug修复 【core 】 修复HexUtil.format奇数位数输出错误问题(issue#4263@Github) 【core 】 修复CamelCaseLinkedMap顺序错乱问题(issue#IJV845@Gitee) 【core 】 修复AntPathMatchersubstring问题(pr#4276@Github) 【poi 】 修复Excel03SaxReader读取xls时最后一行数据丢失问题(pr#1442@Gitee) 【core 】 修复根据新版外国人永久居留身份证(18位)身份编号获取户籍省份编码的问题(pr#4288@Github) 【core 】 修复Record反序列化时字段null导致报错问题(issue#4269@Github)

v5.8.46

5.8.46(2026-05-25) 🐣新特性 【core 】 AnnotationUtil新增两级缓存架构,提升高频注解解析性能(pr#1434@Gitee) 【core 】 RegexPool.PLATE_NUMBER新增粤AP号段支持(issue#IJNDJR@Gitee) 🐞Bug修复 【db 】 修复Page和PageResult首页调用问题(issue#IH7A18@Gitee) 【ai 】 修复AI SPI classloader找不到实现问题(issue#4241@Github) 【extra 】 修复ExpressionEngine中SpELEngine、MVEL白名单无效问题(issue#4249@Github) 【core 】 修复JNDIUtil远程加载漏洞(issue#4249@Github) 【core 】 修复ValidateObjectInputStream白名单规则问题(issue#4249@Github) 【core 】 修复VersionUtil比对null时结果异常问题(issue#IJNFQZ@Gitee) 【core 】 修复BeanConverter和MapConverter源Bean判断问题(pr#4252@Github)

Changelog

Sourced from cn.hutool:hutool-all's changelog.

5.8.47(2026-07-06)

🐣新特性

  • 【core 】 EnumConverter变更规则,当用户自定义方法返回null时,调用默认valueOf(pr#4258@Github)
  • 【core 】 DateUtilparseISO8601增加检查范围(pr#4275@Github)
  • 【core 】 Guard FileMagicNumber AAC/M4A/AMR matchers against short byte arrays(pr#4278@Github)
  • 【crypto 】 Reject empty cipherKey in Vigenere with a clear exception(pr#4279@Github)
  • 【core 】 Return null from CsvRow.get for a negative index(pr#4280@Github)
  • 【crypto 】 Reject too-short salt in BCrypt.hashpw with IllegalArgumentException(pr#4282@Github)
  • 【crypto 】 Validate md5HexTo16 input length to avoid StringIndexOutOfBoundsException(pr#4283@Github)

🐞Bug修复

  • 【core 】 修复HexUtil.format奇数位数输出错误问题(issue#4263@Github)
  • 【core 】 修复CamelCaseLinkedMap顺序错乱问题(issue#IJV845@Gitee)
  • 【core 】 修复AntPathMatchersubstring问题(pr#4276@Github)
  • 【poi 】 修复Excel03SaxReader读取xls时最后一行数据丢失问题(pr#1442@Gitee)
  • 【core 】 修复根据新版外国人永久居留身份证(18位)身份编号获取户籍省份编码的问题(pr#4288@Github)
  • 【core 】 修复Record反序列化时字段null导致报错问题(issue#4269@Github)

5.8.46(2026-05-25)

🐣新特性

  • 【core 】 AnnotationUtil新增两级缓存架构,提升高频注解解析性能(pr#1434@Gitee)
  • 【core 】 RegexPool.PLATE_NUMBER新增粤AP号段支持(issue#IJNDJR@Gitee)

🐞Bug修复

  • 【db 】 修复PagePageResult首页调用问题(issue#IH7A18@Gitee)
  • 【ai 】 修复AI SPI classloader找不到实现问题(issue#4241@Github)
  • 【extra 】 修复ExpressionEngine中SpELEngine、MVEL白名单无效问题(issue#4249@Github)
  • 【core 】 修复JNDIUtil远程加载漏洞(issue#4249@Github)
  • 【core 】 修复ValidateObjectInputStream白名单规则问题(issue#4249@Github)
  • 【core 】 修复VersionUtil比对null时结果异常问题(issue#IJNFQZ@Gitee)
  • 【core 】 修复BeanConverterMapConverter源Bean判断问题(pr#4252@Github)

5.8.45(2026-05-19)

🐣新特性

  • 此版本发布出现问题,跳过!

🐞Bug修复


Commits
  • 8870454 Prepare release
  • 853c29f 🚀release5.8.47
  • eaa0641 fix test
  • 90fae33 fix test
  • c57da4d 修复Record反序列化时字段null导致报错问题(issue#4269@Github)
  • 212c796 修复根据新版外国人永久居留身份证(18位)身份编号获取户籍省份编码的问题(pr#4288@Github)
  • faa08a8 Merge pull request #4288 from YamMangoTea/v5-dev
  • 8290d30 Merge pull request #4284 from vasiliy-mikhailov/fix-condition-unwrapquote-whi...
  • 71e7957 Validate md5HexTo16 input length to avoid StringIndexOutOfBoundsException
  • 6cbc8f8 Merge pull request #4283 from vasiliy-mikhailov/fix-md5hexto16-short-input
  • Additional commits viewable in compare view

Updates org.redisson:redisson-spring-boot-starter from 4.3.1 to 4.7.0

Updates com.alibaba.cloud:spring-cloud-alibaba-dependencies from 2025.0.0.0 to 2025.1.0.0

Updates tools.jackson.core:jackson-core from 3.1.5 to 3.2.2

Commits
  • c817133 [maven-release-plugin] prepare release jackson-core-3.2.2
  • 456a612 Prep for 3.2.2 release
  • ebd18e4 UTF8JsonGenerator: writeNumber fast path that avoids extra String allocation ...
  • ab40035 Merge branch '3.1' into 3.2
  • 6a17da9 Post-release dep version bump
  • 69a8277 [maven-release-plugin] prepare for next development iteration
  • ddfa268 [maven-release-plugin] prepare release jackson-core-3.1.6
  • a8673b1 Prep for 3.1.6 release
  • 15aec16 Merge branch '3.1' into 3.2
  • fb3d338 Merge branch '2.x' into 3.1
  • Additional commits viewable in compare view

Updates tools.jackson.core:jackson-databind from 3.1.5 to 3.2.2

Commits

Updates io.netty:netty-bom from 4.2.16.Final to 4.2.17.Final

Release notes

Sourced from io.netty:netty-bom's releases.

netty-4.2.17.Final

What's Changed

New Contributors

... (truncated)

Commits
  • e0789d3 [maven-release-plugin] prepare release netty-4.2.17.Final
  • 1b5abc6 Merge changes from forks (#17213)
  • 36fbf57 Update surefire plugin to latest version (#17210)
  • a96226c Add .editorconfig to enforce consistent coding style (#17052)
  • 14a4e6a OpenSSL: Allow to obtain used named group via OpenSslSession (#17058)
  • 26255b1 Weakly reference engines from the OpenSSL engine map (#17199)
  • ae41417 HttpServerCodec: do not consume the method queue for 1xx interim responses ...
  • 41f1db5 Do not write WebSocket handshake response to the tail of the pipeline (#17192)
  • 035d76e Update compress-lzf to 1.2.1 (#17194)
  • 7681aff Fix JdkZlibDecompressor losing the tail of highly compressible streams (#17191)
  • Additional commits viewable in compare view

Updates org.bouncycastle:bcprov-jdk18on from 1.84 to 1.85.2

Changelog

Sourced from org.bouncycastle:bcprov-jdk18on's changelog.

... (truncated)

Commits

Updates org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3

Release notes

Sourced from org.apache.maven.plugins:maven-enforcer-plugin's releases.

3.6.3

🚀 New features and improvements

  • Make bannedDependencies report root and transitive dependency in case both are banned. (#940) @​hvoynov
  • Add enforceBytecodeVersion rule based on mojohaus (#968) @​cstamas
  • Improve formatting of deprecated API warning (#951) @​mthmulders

🐛 Bug Fixes

📝 Documentation updates

  • Document the banMavenDefaults option for the requirePluginVersions rule. (#936) @​rpkrajewski

👻 Maintenance

📦 Dependency updates

Commits
  • c7daff3 [maven-release-plugin] prepare release enforcer-3.6.3
  • ee46e78 Make bannedDependencies report root and transitive dependency in case both ar...
  • 0806924 Document the banMavenDefaults option for the requirePluginVersions rule. (#936)
  • 8e4f5b9 Add better enforceBytecodeVersion rule based on mojohaus (#968)
  • fd4b148 Add fix for 21.0.10.0.1 issue (#967)
  • f32d597 Deps: Parent POM 48 and align deps (#979)
  • df0f2a6 Bump commons-codec:commons-codec from 1.21.0 to 1.22.0 (#976)
  • 2da7a68 Add null checks for modelId in PluginWrapper
  • 91eb4d9 Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#975)
  • b622245 Bump mavenVersion from 3.9.14 to 3.9.15 (#973)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-failsafe-plugin from 3.5.5 to 3.5.6

Release notes

Sourced from org.apache.maven.plugins:maven-failsafe-plugin's releases.

3.5.6

🚀 New features and improvements

  • Introduce reportTestTimestamp option and include timestamp for test sets and test cases (#3261) (#3302) @​olamy

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • 25ea054 [maven-release-plugin] prepare release surefire-3.5.6
  • e5f374c Bump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3
  • dadd55b Issue #2613 Debugging failsafe tests: Message 'Listening for transport dt_soc...
  • 39dd250 Bump commons-io:commons-io from 2.21.0 to 2.22.0
  • 2774273 Ensure that the statistics filename is calculated only once. (#3326) (#3327)
  • 0d5df8a 3.5.x/bug/cherry pick embedded mode its (#3328)
  • 04ad9a2 Use surefire 3.5.5 by project itself for testing
  • 37e8f69 Add flakes attribute to use in testsuite report (#3306) (#3308)
  • a970fef Introduce reportTestTimestamp option and include timestamp for test sets and ...
  • e838393 deploy 3.5.x branch to nexus
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…5 updates

Bumps the minor-and-patch group with 15 updates in the /platform-storage directory:

| Package | From | To |
| --- | --- | --- |
| org.apache.skywalking:apm-toolkit-logback-1.x | `9.6.0` | `9.7.0` |
| [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `4.34.1` | `4.36.0` |
| com.google.protobuf:protobuf-java-util | `4.34.1` | `4.36.0` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.6.0-jre` | `33.7.1-jre` |
| software.amazon.awssdk:s3 | `2.44.4` | `2.54.1` |
| software.amazon.awssdk:apache-client | `2.44.4` | `2.54.1` |
| [cn.hutool:hutool-all](https://github.com/looly/hutool) | `5.8.44` | `5.8.47` |
| org.redisson:redisson-spring-boot-starter | `4.3.1` | `4.7.0` |
| com.alibaba.cloud:spring-cloud-alibaba-dependencies | `2025.0.0.0` | `2025.1.0.0` |
| [tools.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `3.1.5` | `3.2.2` |
| [tools.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `3.1.5` | `3.2.2` |
| [io.netty:netty-bom](https://github.com/netty/netty) | `4.2.16.Final` | `4.2.17.Final` |
| [org.bouncycastle:bcprov-jdk18on](https://github.com/bcgit/bc-java) | `1.84` | `1.85.2` |
| [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.6.2` | `3.6.3` |
| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.5.5` | `3.5.6` |



Updates `org.apache.skywalking:apm-toolkit-logback-1.x` from 9.6.0 to 9.7.0

Updates `com.google.protobuf:protobuf-java` from 4.34.1 to 4.36.0
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `com.google.protobuf:protobuf-java-util` from 4.34.1 to 4.36.0

Updates `com.google.protobuf:protobuf-java-util` from 4.34.1 to 4.36.0

Updates `com.google.guava:guava` from 33.6.0-jre to 33.7.1-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `software.amazon.awssdk:s3` from 2.44.4 to 2.54.1

Updates `software.amazon.awssdk:apache-client` from 2.44.4 to 2.54.1

Updates `software.amazon.awssdk:apache-client` from 2.44.4 to 2.54.1

Updates `cn.hutool:hutool-all` from 5.8.44 to 5.8.47
- [Release notes](https://github.com/looly/hutool/releases)
- [Changelog](https://github.com/chinabugotech/hutool/blob/v5-master/CHANGELOG.md)
- [Commits](chinabugotech/hutool@v5.8.44...5.8.47)

Updates `org.redisson:redisson-spring-boot-starter` from 4.3.1 to 4.7.0

Updates `com.alibaba.cloud:spring-cloud-alibaba-dependencies` from 2025.0.0.0 to 2025.1.0.0

Updates `tools.jackson.core:jackson-core` from 3.1.5 to 3.2.2
- [Commits](FasterXML/jackson-core@jackson-core-3.1.5...jackson-core-3.2.2)

Updates `tools.jackson.core:jackson-databind` from 3.1.5 to 3.2.2
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `io.netty:netty-bom` from 4.2.16.Final to 4.2.17.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.16.Final...netty-4.2.17.Final)

Updates `org.bouncycastle:bcprov-jdk18on` from 1.84 to 1.85.2
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.6.2 to 3.6.3
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](apache/maven-enforcer@enforcer-3.6.2...enforcer-3.6.3)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.5 to 3.5.6
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.5...surefire-3.5.6)

---
updated-dependencies:
- dependency-name: org.apache.skywalking:apm-toolkit-logback-1.x
  dependency-version: 9.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 4.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: com.google.protobuf:protobuf-java-util
  dependency-version: 4.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: com.google.protobuf:protobuf-java-util
  dependency-version: 4.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: com.google.guava:guava
  dependency-version: 33.7.1-jre
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: software.amazon.awssdk:s3
  dependency-version: 2.54.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: software.amazon.awssdk:apache-client
  dependency-version: 2.54.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: software.amazon.awssdk:apache-client
  dependency-version: 2.54.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: cn.hutool:hutool-all
  dependency-version: 5.8.47
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.redisson:redisson-spring-boot-starter
  dependency-version: 4.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: com.alibaba.cloud:spring-cloud-alibaba-dependencies
  dependency-version: 2025.1.0.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tools.jackson.core:jackson-core
  dependency-version: 3.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tools.jackson.core:jackson-databind
  dependency-version: 3.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: io.netty:netty-bom
  dependency-version: 4.2.17.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.bouncycastle:bcprov-jdk18on
  dependency-version: 1.85.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
  dependency-version: 3.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.5.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 24, 2026
@codecov

codecov Bot commented Aug 24, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants