Skip to content

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Sep 29, 2025

Bumps the major group with 8 updates in the /data-plane directory:

Package From To
org.apache.kafka:kafka-clients 3.9.0 4.1.0
org.apache.kafka:kafka_2.13 3.9.0 4.1.0
com.squareup.okhttp3:mockwebserver 4.12.0 5.1.0
com.google.protobuf:protobuf-java 3.25.5 4.32.1
com.google.protobuf:protobuf-java-util 3.25.5 4.32.1
com.github.vladimir-bukhtoyarov:bucket4j-core 7.6.0 8.0.1
com.mycila:license-maven-plugin 4.1 5.0.0
com.diffplug.spotless:spotless-maven-plugin 2.38.0 3.0.0

Updates org.apache.kafka:kafka-clients from 3.9.0 to 4.1.0

Updates org.apache.kafka:kafka_2.13 from 3.9.0 to 4.1.0

Updates com.squareup.okhttp3:mockwebserver from 4.12.0 to 5.1.0

Changelog

Sourced from com.squareup.okhttp3:mockwebserver's changelog.

Version 5.1.0

2025-07-07

  • New: Response.peekTrailers(). When we changed Response.trailers() to block instead of throwing in 5.0.0, we inadvertently removed the ability for callers to peek the trailers (by catching the IllegalStateException if they weren't available). This new API restores that capability.

  • Fix: Don't crash on trailers() if the response doesn't have a body. We broke [Retrofit] users who read the trailers on the raw() OkHttp response, after its body was decoded.

Version 5.0.0

2025-07-02

This is our first stable release of OkHttp since 2023. Here's the highlights if you're upgrading from OkHttp 4.x:

OkHttp is now packaged as separate JVM and Android artifacts. This allows us to offer platform-specific features and optimizations. If your build system handles [Gradle module metadata], this change should be automatic.

MockWebServer has a new coordinate and package name. We didn’t like that our old artifact depends on JUnit 4 so the new one doesn’t. It also has a better API built on immutable values. (We intend to continue publishing the old okhttp3.mockwebserver artifact so there’s no urgency to migrate.)

Coordinate Package Name Description
com.squareup.okhttp3:mockwebserver3:5.0.0 mockwebserver3 Core module. No JUnit dependency!
com.squareup.okhttp3:mockwebserver3-junit4:5.0.0 mockwebserver3.junit4 Optional JUnit 4 integration.
com.squareup.okhttp3:mockwebserver3-junit5:5.0.0 mockwebserver3.junit5 Optional JUnit 5 integration.
com.squareup.okhttp3:mockwebserver:5.0.0 okhttp3.mockwebserver Obsolete. Depends on JUnit 4.

OkHttp now supports Happy Eyeballs ([RFC 8305][rfc_8305]) for IPv4+IPv6 networks. It attempts both IPv6 and IPv4 connections concurrently, keeping whichever connects first.

We’ve improved our Kotlin APIs. You can skip the builder:

val request = Request(
  url = "https://cash.app/".toHttpUrl(),
)

OkHttp now supports [GraalVM].

Here’s what has changed since 5.0.0-alpha.17:

... (truncated)

Commits

Updates com.google.protobuf:protobuf-java from 3.25.5 to 4.32.1

Commits

Updates com.google.protobuf:protobuf-java-util from 3.25.5 to 4.32.1

Updates com.google.protobuf:protobuf-java-util from 3.25.5 to 4.32.1

Updates com.github.vladimir-bukhtoyarov:bucket4j-core from 7.6.0 to 8.0.1

Release notes

Sourced from com.github.vladimir-bukhtoyarov:bucket4j-core's releases.

8.0.1

https://bucket4j.com/7.6.0/release-notes.html

The features in release scope are following:

Commits
  • 2232d84 8.0.1 release documentation
  • e24fe8e #279 increase version
  • 4c3ea89 #279 fix VerboseCommand for cases of none-caching implementation of MutableBu...
  • 04b39c5 moving main line to java 11
  • 9f977fe moving main line to java 11
  • b186489 moving main line to java 11
  • 4ddc3f4 Merge branch '8.0_jdk8' into java_11
  • 785c56d changing groupId from com.github.vladimir-bukhtoyarov to com.bucket4j + movin...
  • dcab47c Merge branch 'master' into 8.0_jdk8
  • See full diff in compare view

Updates org.apache.kafka:kafka_2.13 from 3.9.0 to 4.1.0

Updates com.mycila:license-maven-plugin from 4.1 to 5.0.0

Release notes

Sourced from com.mycila:license-maven-plugin's releases.

v5.0.0

What's Changed

... (truncated)

Commits
  • 57aa95f [maven-release-plugin] prepare release v5.0.0
  • de4e5d9 Merge pull request #921 from mathieucarbou/dependabot/maven/org.mockito-mocki...
  • 1fd530b Bump org.mockito:mockito-bom from 5.16.0 to 5.16.1
  • 0229bcf Merge pull request #920 from mathieucarbou/dependabot/maven/junit.version-5.12.1
  • 34c9cb3 Bump junit.version from 5.12.0 to 5.12.1
  • 8d11e9c Merge pull request #918 from mathieucarbou/dependabot/maven/com.puppycrawl.to...
  • 04794f5 Bump com.puppycrawl.tools:checkstyle from 10.21.3 to 10.21.4
  • b2243d7 Merge pull request #917 from mathieucarbou/dependabot/maven/org.mockito-mocki...
  • 915c373 Bump org.mockito:mockito-bom from 5.15.2 to 5.16.0
  • ff4b1d6 Merge pull request #915 from mathieucarbou/dependabot/maven/org.apache.maven....
  • Additional commits viewable in compare view

Updates com.diffplug.spotless:spotless-maven-plugin from 2.38.0 to 3.0.0

Release notes

Sourced from com.diffplug.spotless:spotless-maven-plugin's releases.

Lib v3.0.0

Headline changes

  • All steps now support roundtrip serialization (end of #987).
  • Spotless now supports linting in addition to formatting.

Changed

  • Allow setting Eclipse config from a string, not only from files (#2337)
  • Bump default ktlint version to latest 1.3.0 -> 1.4.0. (#2314)
  • Add Sort Members feature based on Eclipse JDT implementation. (#2312)
  • Bump default jackson version to latest 2.18.0 -> 2.18.1. (#2319)
  • Bump default ktfmt version to latest 0.52 -> 0.53. (#2320)
  • Bump default ktlint version to latest 1.4.0 -> 1.5.0. (#2354)
  • Bump minimum eclipse-cdt version to 11.0 (removed support for 10.7). (#2373)
  • Bump default eclipse version to latest 4.32 -> 4.34. (#2381)

Fixed

  • You can now use removeUnusedImports and googleJavaFormat at the same time again. (fixes #2159)
  • The default list of type annotations used by formatAnnotations now includes Jakarta Validation's Valid and constraints validations (fixes #2334)

Maven Plugin v3.0.0

Changes

  • BREAKING Bump the required Java to 17. (#2375, #2540)
  • BREAKING Renamed removeWildcardImports to forbidWildcardImports. (#2633)
  • BREAKING spotless:install-git-pre-push-hook task is now always installed in the root .git/hooks directory by resolving the top-level project base directory. (#2570)
  • Bump JGit from 6.10.1 to 7.3.0 (#2257)
    • Adds support for worktrees (fixes #1765)
  • Bump default google-java-format version to latest 1.24.0 -> 1.28.0. (#2345)
  • Bump default gson version to latest 2.13.1 -> 2.13.2. (#2615)
  • Bump default jackson version to latest 2.19.2 -> 2.20.0. (#2606)
  • Bump default ktfmt version to latest 0.53 -> 0.58 (#2613)
    • BREAKING use TrailingCommaManagementStrategy enum instead of manageTrailingCommas boolean configuration option
  • Bump default ktlint version to latest 1.5.0 -> 1.7.1. (#2555)
  • Bump default palantir-java-format version to latest 2.57.0 -> 2.71.0.

Fixed

  • Fix spaceBeforeSeparator in Jackson formatter. (#2103)

Added

  • <lintSupressions> API (#2309)
  • There is now a forbidRegex(String name, String searchRegex, String lintDetail) which throws a lint anytime the regex matches. (#2633)

Lib v3.0.0.BETA4

Added

  • APIs to support linting. (implemented in #2148, #2149, #2307)
    • Spotless is still primarily a formatter, not a linter. But when formatting fails, it's more flexible to model those failures as lints so that the formatting can continue and ideally we can also capture the line numbers causing the failure.
    • Lint models a single change. A FormatterStep can create a lint by:
      • throwing an exception during formatting, ideally throw Lint.atLine(127, "code", "Well what happened was...")
      • or by implementing the List<Lint> lint(String content, File file) method to create multiple of them
  • Support for line ending policy PRESERVE which just takes the first line ending of every given file as setting (no matter if \n, \r\n or \r) (#2304)

Changes

  • BREAKING Moved PaddedCell.DirtyState to its own top-level class with new methods. (#2148)
    • BREAKING Removed isClean, applyTo, and applyToAndReturnResultIfDirty from Formatter because users should instead use DirtyState.

Fixed

... (truncated)

Changelog

Sourced from com.diffplug.spotless:spotless-maven-plugin's changelog.

[3.0.0] - 2025-01-06

Headline changes

  • All steps now support roundtrip serialization (end of #987).
  • Spotless now supports linting in addition to formatting.

Changed

  • Allow setting Eclipse config from a string, not only from files (#2337)
  • Bump default ktlint version to latest 1.3.0 -> 1.4.0. (#2314)
  • Add Sort Members feature based on Eclipse JDT implementation. (#2312)
  • Bump default jackson version to latest 2.18.0 -> 2.18.1. (#2319)
  • Bump default ktfmt version to latest 0.52 -> 0.53. (#2320)
  • Bump default ktlint version to latest 1.4.0 -> 1.5.0. (#2354)
  • Bump minimum eclipse-cdt version to 11.0 (removed support for 10.7). (#2373)
  • Bump default eclipse version to latest 4.32 -> 4.34. (#2381)

Fixed

  • You can now use removeUnusedImports and googleJavaFormat at the same time again. (fixes #2159)
  • The default list of type annotations used by formatAnnotations now includes Jakarta Validation's Valid and constraints validations (fixes #2334)

[3.0.0.BETA4] - 2024-10-24

Added

  • APIs to support linting. (implemented in #2148, #2149, #2307)
    • Spotless is still primarily a formatter, not a linter. But when formatting fails, it's more flexible to model those failures as lints so that the formatting can continue and ideally we can also capture the line numbers causing the failure.
    • Lint models a single change. A FormatterStep can create a lint by:
      • throwing an exception during formatting, ideally throw Lint.atLine(127, "code", "Well what happened was...")
      • or by implementing the List<Lint> lint(String content, File file) method to create multiple of them
  • Support for line ending policy PRESERVE which just takes the first line ending of every given file as setting (no matter if \n, \r\n or \r) (#2304)

Changed

  • BREAKING Moved PaddedCell.DirtyState to its own top-level class with new methods. (#2148)
    • BREAKING Removed isClean, applyTo, and applyToAndReturnResultIfDirty from Formatter because users should instead use DirtyState.
  • FenceStep now uses ConfigurationCacheHack. (#2378 fixes #2317)

Fixed

  • ktlint steps now read from the string instead of the file so they don't clobber earlier steps. (fixes #1599)

[3.0.0.BETA3] - 2024-10-15

Added

  • Support for rdf (#2261)
  • Support for buf on maven plugin (#2291)
  • ConfigurationCacheHack so we can support Gradle's configuration cache and remote build cache at the same time. (#2298 fixes #2168)

Changed

  • Support configuring the Equo P2 cache. (#2238)
  • Add explicit support for JSONC / CSS via biome, via the file extensions .css and .jsonc. (#2259)
  • Bump default buf version to latest 1.24.0 -> 1.44.0. (#2291)
  • Bump default google-java-format version to latest 1.23.0 -> 1.24.0. (#2294)
  • Bump default jackson version to latest 2.17.2 -> 2.18.0. (#2279)
  • Bump default cleanthat version to latest 2.21 -> 2.22. (#2296)

Fixed

  • Java import order, ignore duplicate group entries. (#2293)

... (truncated)

Commits
  • 1c2435b Published lib/3.0.0
  • 771b628 Update changelogs.
  • 719f9a4 update default versions for Eclipse Java and Groovy formatters (#2381)
  • 83bc8f3 Update changelogs.
  • 1b8dd4e Revert the Greclipse version bump.
  • 9507db3 Merge branch 'main' into update-greclipse
  • bd03fa0 Prepare to publish non-beta. Huzzah!
  • ea71030 fix gradle custom step with closure and configuration cache (#2376 fixes #2...
  • 7a985fb Add an explanatory comment on why we are zeroing out the global .gitconfig.
  • 922c7ea Update changelog.
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…8 updates

Bumps the major group with 8 updates in the /data-plane directory:

| Package | From | To |
| --- | --- | --- |
| org.apache.kafka:kafka-clients | `3.9.0` | `4.1.0` |
| org.apache.kafka:kafka_2.13 | `3.9.0` | `4.1.0` |
| [com.squareup.okhttp3:mockwebserver](https://github.com/square/okhttp) | `4.12.0` | `5.1.0` |
| [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `3.25.5` | `4.32.1` |
| com.google.protobuf:protobuf-java-util | `3.25.5` | `4.32.1` |
| [com.github.vladimir-bukhtoyarov:bucket4j-core](https://github.com/vladimir-bukhtoyarov/bucket4j) | `7.6.0` | `8.0.1` |
| [com.mycila:license-maven-plugin](https://github.com/mathieucarbou/license-maven-plugin) | `4.1` | `5.0.0` |
| [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) | `2.38.0` | `3.0.0` |



Updates `org.apache.kafka:kafka-clients` from 3.9.0 to 4.1.0

Updates `org.apache.kafka:kafka_2.13` from 3.9.0 to 4.1.0

Updates `com.squareup.okhttp3:mockwebserver` from 4.12.0 to 5.1.0
- [Changelog](https://github.com/square/okhttp/blob/master/CHANGELOG.md)
- [Commits](square/okhttp@parent-4.12.0...parent-5.1.0)

Updates `com.google.protobuf:protobuf-java` from 3.25.5 to 4.32.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `com.google.protobuf:protobuf-java-util` from 3.25.5 to 4.32.1

Updates `com.google.protobuf:protobuf-java-util` from 3.25.5 to 4.32.1

Updates `com.github.vladimir-bukhtoyarov:bucket4j-core` from 7.6.0 to 8.0.1
- [Release notes](https://github.com/vladimir-bukhtoyarov/bucket4j/releases)
- [Commits](bucket4j/bucket4j@7.6.0...8.0.1)

Updates `org.apache.kafka:kafka_2.13` from 3.9.0 to 4.1.0

Updates `com.mycila:license-maven-plugin` from 4.1 to 5.0.0
- [Release notes](https://github.com/mathieucarbou/license-maven-plugin/releases)
- [Commits](mathieucarbou/license-maven-plugin@license-maven-plugin-4.1...v5.0.0)

Updates `com.diffplug.spotless:spotless-maven-plugin` from 2.38.0 to 3.0.0
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@lib/2.38.0...lib/3.0.0)

---
updated-dependencies:
- dependency-name: org.apache.kafka:kafka-clients
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: org.apache.kafka:kafka_2.13
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: com.squareup.okhttp3:mockwebserver
  dependency-version: 5.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 4.32.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: com.google.protobuf:protobuf-java-util
  dependency-version: 4.32.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: com.google.protobuf:protobuf-java-util
  dependency-version: 4.32.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: com.github.vladimir-bukhtoyarov:bucket4j-core
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: org.apache.kafka:kafka_2.13
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: com.mycila:license-maven-plugin
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 29, 2025
@openshift-ci openshift-ci bot requested review from lberk and matzew September 29, 2025 01:32
Copy link

openshift-ci bot commented Sep 29, 2025

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign matzew for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Copy link

openshift-ci bot commented Sep 29, 2025

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift-knative member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

Copy link
Author

dependabot bot commented on behalf of github Oct 6, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Oct 6, 2025
@dependabot dependabot bot deleted the dependabot/maven/data-plane/release-v1.18/major-716e8b4ab9 branch October 6, 2025 01:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code needs-ok-to-test

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants