Skip to content

fix(deps): update all dependencies #984

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(deps): update all dependencies #984

wants to merge 1 commit into from
+27 −27

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 15, 2025 •
edited
Loading

This PR contains the following updates:

Package Type Update Change Age Confidence
actions/download-artifact action major v5 -> v6 age confidence
actions/upload-artifact action major v4 -> v5 age confidence
apple_support bazel_dep patch 1.24.1 -> 1.24.3 age confidence
bazel major 7.6.2 -> 8.4.2 age confidence
contrib_rules_jvm bazel_dep minor 0.27.0 -> 0.30.0 age confidence
ubuntu github-runner major 22.04 -> 24.04 age confidence
org.jacoco:jacoco-maven-plugin (source) build patch 0.8.11 -> 0.8.14 age confidence
com.code-intelligence:cifuzz-maven-extension (source) build minor 1.7.0 -> 1.15.0 age confidence
com.google.protobuf:protobuf-java (source) compile major 3.25.5 -> 4.33.0 age confidence
com.google.truth:truth test patch 1.4.0 -> 1.4.5 age confidence
org.junit.platform:junit-platform-launcher (source) test major 1.10.2 -> 6.0.0 age confidence
org.junit.platform:junit-platform-commons (source) test major 1.10.2 -> 6.0.0 age confidence
org.junit.jupiter:junit-jupiter-params (source) test major 5.10.2 -> 6.0.0 age confidence
org.junit.jupiter:junit-jupiter-api (source) test major 5.10.2 -> 6.0.0 age confidence
org.junit.jupiter:junit-jupiter-engine (source) test major 5.10.2 -> 6.0.0 age confidence

Release Notes

actions/download-artifact (actions/download-artifact)

v6

Compare Source

actions/upload-artifact (actions/upload-artifact)

v5

Compare Source

bazelbuild/apple_support (apple_support)

v1.24.3

Compare Source

What's Changed

Full Changelog: bazelbuild/apple_support@1.24.2...1.24.3

This release is compatible with 7.x LTS, 8.x LTS, and rolling releases.

MODULE.bazel Snippet
bazel_dep(name = "apple_support", version = "1.24.3", repo_name = "build_bazel_apple_support")
Workspace Snippet
load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "build_bazel_apple_support",
    sha256 = "85a7dc13e370f355bf00381238d1cba56450d3e598566b8c52d90ddf301c5dfb",
    url = "https://github.com/bazelbuild/apple_support/releases/download/1.24.3/apple_support.1.24.3.tar.gz",
)

load(
    "@​build_bazel_apple_support//lib:repositories.bzl",
    "apple_support_dependencies",
)

apple_support_dependencies()

load("@​bazel_features//:deps.bzl", "bazel_features_deps")

bazel_features_deps()

v1.24.2

Compare Source

What's Changed

Full Changelog: bazelbuild/apple_support@1.24.1...1.24.2

This release is compatible with 7.x LTS, 8.x LTS, and rolling releases.

MODULE.bazel Snippet
bazel_dep(name = "apple_support", version = "1.24.2", repo_name = "build_bazel_apple_support")
Workspace Snippet
load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "build_bazel_apple_support",
    sha256 = "8625cc7b7b2952e38101e17b4a9e7c043b3a79f55d26e4772819891998725e16",
    url = "https://github.com/bazelbuild/apple_support/releases/download/1.24.2/apple_support.1.24.2.tar.gz",
)

load(
    "@​build_bazel_apple_support//lib:repositories.bzl",
    "apple_support_dependencies",
)

apple_support_dependencies()

load("@​bazel_features//:deps.bzl", "bazel_features_deps")

bazel_features_deps()
bazelbuild/bazel (bazel)

v8.4.2

Compare Source


Release Notes:

v8.4.1

Compare Source


Release Notes:

v8.4.0

Compare Source


Release Notes:

v8.3.1

Compare Source

[!NOTE]
If you are looking for rolling releases, please visit this page.

Release 8.3.1 (2025-06-30)

Bazel 8.3.1 is a patch LTS release. It is fully backward compatible with Bazel 8.0 and contains selected changes by the Bazel community and Google engineers.

  • Removed the "overwrote runfiles" warning related to rules_shell. (#​26374)
  • Reverted the change to move the Bash runfiles library out of Bazel. This will be delayed until 9.0. (#​26372)
  • Fixed hang with force fetching + repo contents cache (#​26412)

Refer to the full list of commits for more details.

Notice: Bazel installers contain binaries licensed under the GPLv2 with Classpath exception. Those installers should always be redistributed along with the source code.

Some versions of Bazel contain a bundled version of OpenJDK. The license of the bundled OpenJDK and other open-source components can be displayed by running the command bazel license. The vendor and version information of the bundled OpenJDK can be displayed by running the command bazel info java-runtime. The binaries and source-code of the bundled OpenJDK can be downloaded from our mirror server.

Security: All our binaries are signed with our public key 3D5919B.

v8.3.0

Compare Source


Release Notes:

v8.2.1

Compare Source


Release Notes:

v8.2.0

Compare Source


Release Notes:

v8.1.1

Compare Source


Release Notes:

v8.1.0

Compare Source


Release Notes:

v8.0.1

Compare Source


Release Notes:

v8.0.0

Compare Source


Release Notes:
bazel-contrib/rules_jvm (contrib_rules_jvm)

v0.30.0

contrib_rules_jvm only supports bzlmod-enabled builds

Module Setup

In your MODULE.bazel:

bazel_dep(name = "contrib_rules_jvm", version = "0.30.0")

Important Changes

  • This release changes how the JUnit5 runner reports test names to better support parameterised and other custom tests.
  • The java gazelle plugin will now respect java_export targets. Targets will depend on these rather than individual constituent java_library targets to ensure that each java_library target is only included in one java_export

What's Changed

New Contributors

Full Changelog: bazel-contrib/rules_jvm@v0.29.0...v0.30.0

v0.29.0

WORKSPACE snippet:

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "contrib_rules_jvm",
    sha256 = "44c4946567adb9f7218b1eea7ad512e0af7189f66673c3ebe94b484ac5c246a7",
    strip_prefix = "rules_jvm-0.29.0",
    url = "https://github.com/bazel-contrib/rules_jvm/releases/download/v0.29.0/rules_jvm-v0.29.0.tar.gz",
)

# Fetches the contrib_rules_jvm dependencies.

# If you want to have a different version of some dependency,
# you should fetch it *before* calling this.
load("@​contrib_rules_jvm//:repositories.bzl", "contrib_rules_jvm_deps")

contrib_rules_jvm_deps()

# Now ensure that the downloaded deps are properly configured
load("@​contrib_rules_jvm//:setup.bzl", "contrib_rules_jvm_setup")

contrib_rules_jvm_setup()

What's Changed

New Contributors

Full Changelog: bazel-contrib/rules_jvm@v0.28.0...v0.29.0

v0.28.0

contrib_rules_jvm only supports bzlmod-enabled builds

Module setup

In your MODULE.bazel

bazel_dep(name = "contrib_rules_jvm", version = "0.28.0")

What's Changed

  • Drop support for workspace-based builds (#​321)
  • Bump lowest supported Java version to 8 in our build files (#​307)
  • Allow passing empty 'package' to 'java_test_suite' (#​312)
  • Add support for @​AfterAll in XML report (#​300)
  • Bump pmd to 7.7.0 (#​309)
  • Add support for transforming Checkstyle XML output to JUnit XML (#​283)
  • Optimize junit dependencies for each test target (#​303)
  • Gazelle: detect any directory with /test in path as test package (#​297)
  • Add timestamp and hostname to testsuite xml (#​294)
  • Escape invalid XML chars in testCase and testSuite names (#​284)

Full Changelog: bazel-contrib/rules_jvm@v0.27.0...v0.28.0

jacoco/jacoco (org.jacoco:jacoco-maven-plugin)

v0.8.14: 0.8.14

Compare Source

New Features

  • JaCoCo now officially supports Java 25 (GitHub #​1950).
  • Experimental support for Java 26 class files (GitHub #​1870).
  • Branches added by the Kotlin compiler for default argument number 33 or higher are filtered out during generation of report (GitHub #​1655).
  • Part of bytecode generated by the Kotlin compiler for elvis operator that follows safe call operator is filtered out during generation of report (GitHub #​1814, #​1954).
  • Part of bytecode generated by the Kotlin compiler for more cases of chained safe call operators is filtered out during generation of report (GitHub #​1956).
  • Part of bytecode generated by the Kotlin compiler for invocations of suspendCoroutineUninterceptedOrReturn intrinsic is filtered out during generation of report (GitHub #​1929).
  • Part of bytecode generated by the Kotlin compiler for suspending lambdas with parameters is filtered out during generation of report (GitHub #​1945).
  • Part of bytecode generated by the Kotlin compiler for suspending functions and lambdas with suspension points that return inline value class is filtered out during generation of report (GitHub #​1871).
  • Part of bytecode generated by the Kotlin Compose compiler plugin for pausable composition is filtered out during generation of report (GitHub #​1911).
  • Methods generated by the Kotlin serialization compiler plugin are filtered out (GitHub #​1885, #​1970, #​1971).

Fixed bugs

  • Fixed handling of implicit else clause of when with String subject in Kotlin (GitHub #​1813, #​1940).
  • Fixed handling of implicit default clause of switch by String in Java when compiled by ECJ (GitHub #​1813, #​1940).
    Fixed handling of exceptions in chains of safe call operators in Kotlin (GitHub #​1819).

Non-functional Changes

  • JaCoCo now depends on ASM 9.9 (GitHub #​1965).

v0.8.13: 0.8.13

Compare Source

New Features

  • JaCoCo now officially supports Java 23 and Java 24 (GitHub #​1757, #​1631, #​1867).
  • Experimental support for Java 25 class files (GitHub #​1807).
  • Calculation of line coverage for Kotlin inline functions (GitHub #​1670).
  • Calculation of line coverage for Kotlin inline functions with reified type parameter (GitHub #​1670, #​1700).
  • Calculation of coverage for Kotlin JvmSynthetic functions (GitHub #​1700).
  • Part of bytecode generated by the Kotlin Compose compiler plugin is filtered out during generation of report (GitHub #​1616).
  • Part of bytecode generated by the Kotlin compiler for inline value classes is filtered out during generation of report (GitHub #​1475).
  • Part of bytecode generated by the Kotlin compiler for suspending lambdas without suspension points is filtered out during generation of report (GitHub #​1283).
  • Part of bytecode generated by the Kotlin compiler for when expressions and statements with nullable enum subject is filtered out during generation of report (GitHub #​1774).
  • Part of bytecode generated by the Kotlin compiler for when expressions and statements with nullable String subject is filtered out during generation of report (GitHub #​1769).
  • Part of bytecode generated by the Kotlin compiler for chains of safe call operators is filtered out during generation of report (GitHub #​1810, #​1818).
  • Method getEntries generated by the Kotlin compiler for enum classes is filtered out during generation of report (GitHub #​1625).
  • Methods generated by the Kotlin compiler for constructors and functions with JvmOverloads annotation are filtered out (GitHub #​1768).

Fixed bugs

  • Fixed interpretation of Kotlin SMAP (GitHub #​1525).
  • File extensions are preserved in HTML report in case of clashes of normalized file names (GitHub #​1660).

Non-functional Changes

  • JaCoCo build now uses Maven Wrapper and requires at least Maven 3.9.9 (GitHub #​1708, #​1707, #​1681).
  • JaCoCo now depends on ASM 9.8 (GitHub #​1862).
  • More context information when IllegalArgumentException occurs during reading of zip file (GitHub #​1833).

v0.8.12: 0.8.12

Compare Source

New Features

  • JaCoCo now officially supports Java 22 (GitHub #​1596).
  • Experimental support for Java 23 class files (GitHub #​1553).

Fixed bugs

  • Branches added by the Kotlin compiler for functions with default arguments and having more than 32 parameters are filtered out during generation of report (GitHub #​1556).
  • Branch added by the Kotlin compiler version 1.5.0 and above for reading from lateinit property is filtered out during generation of report (GitHub #​1568).

Non-functional Changes

  • JaCoCo now depends on ASM 9.7 (GitHub #​1600).
protocolbuffers/protobuf (com.google.protobuf:protobuf-java)

v4.31.1

Compare Source

v4.31.0

Compare Source

v4.30.2

Compare Source

v4.30.1

Compare Source

v3.25.8

v3.25.7

v3.25.6

google/truth (com.google.truth:truth)

v1.4.5: 1.4.5

Compare Source

  • Changed assertions like assertThat(nullMap).isEmpty() to fail with a useful failure message instead of throwing NullPointerException (and similarly for other "bogus" values, such as negative sizes). (da5d6e9)
  • Made Kotlin's isInstanceOf(Int::class.java) (and Java's isInstanceOf(int.class)) a valid way to check for Int/Integer instances. (974ef19)
  • Improved isWithin to pretty-print numbers in its failure messages. (de78553, 07318c2)
  • Improved some assertions that print class names to print simpler names (e.g., Integer instead of java.lang.Integer). (0ba72d6)
  • Changed ExpectFailure to never generate "value of" lines based on bytecode. This slightly simplifies writing new tests with ExpectFailure and prevents future behavior changes in some ExpectFailure tests that already exist. However, it may also require changes to other existing ExpectFailure tests to remove or change any assertions about the "value of" line. (3caa0e8)
  • Our Android minSdkVersion is now 23 (Marshmallow). This follows the minimum of Google's foundational Android libraries, and we expect it to have no practical impact on users. (c85c75c)
  • Changed our GWT/J2CL artifact to omit usages of @NullMarked. This was making all our types non-null in those environments, since we don't yet use @Nullable in the GWT/J2CL artifact. (6392d37)

v1.4.4

Compare Source

  • Annotated the rest of the main package for nullness, and moved the @NullMarked annotation from individual classes up to the package to avoid a warning under --release 8. (e107aea)
  • Improved the failure message for matches to conditionally suggest using containsMatch. (7e9fc7a)

v1.4.3: 1.4.3

Compare Source

Known Issue for at least some builds targeting Java 8, fixed in 1.4.4: "unknown enum constant ElementType.MODULE": #​1320. As far as we know, this is only a warning, so it should cause practical problems only if you use -Werror or you perform reflection on @NullMarked under a Java 8 runtime.

  • Added more nullness information to our APIs (in the form of JSpecify annotations). This could lead to additional warnings (or even errors) for users of Kotlin and other nullness checkers. Please report any problems. (ee680cb)
  • Deprecated Subject.Factory methods for Java 8 types. We won't remove them, but you can simplify your code by migrating off them: Just replace assertAbout(foos()).that(foo) with assertThat(foo) (or about(foos()).that(foo) with that(foo)). (59e7a50)

v1.4.2: 1.4.2

Compare Source

This release is the final step of copying all our methods from Truth8 to Truth. If you have not already migrated your usages from Truth8 to Truth, you may see build errors:

OptionalSubjectTest.java:39: error: reference to assertThat is ambiguous
    assertThat(Optional.of("foo")).isPresent();
    ^
  both method assertThat(@&#8203;org.checkerframework.checker.nullness.qual.Nullable Optional<?>) in Truth8 and method assertThat(@&#8203;org.checkerframework.checker.nullness.qual.Nullable Optional<?>) in Truth match

In most cases, you can migrate your whole project mechanically: git grep -l Truth8 | xargs perl -pi -e 's/\bTruth8\b/Truth/g;'. (You can make that change before upgrading to Truth 1.4.2 or as part of the same commit.)

If you instead need to migrate your project incrementally (for example, because it is very large), you may want to upgrade your version of Truth incrementally, too, following our instructions for 1.3.0 and 1.4.0.

For help

Please feel welcome to open an issue to report problems or request help.

Changelog

  • Removed temporary type parameters from Truth.assertThat(Stream) and Truth.assertThat(Optional). This can create build errors, which you can fix by replacing all your references to Truth8 with references to Truth. (45782bd)

v1.4.1: 1.4.1

Compare Source

This release deprecates Truth8.

All its methods have become available on the main Truth class. In most cases, you can migrate your whole project mechanically: git grep -l Truth8 | xargs perl -pi -e 's/\bTruth8\b/Truth/g;'

While we do not plan to delete Truth8, we recommend migrating off it, at least if you static import assertThat: If you do not migrate, such static imports become ambiguous in Truth 1.4.2, breaking your build.

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/all branch 11 times, most recently from d3e5dc1 to cdfb453 Compare October 20, 2025 09:58
@renovate renovate bot force-pushed the renovate/all branch 11 times, most recently from 72c309f to e5f5be2 Compare October 28, 2025 09:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant