Update dependency net.bytebuddy:byte-buddy to v1.18.11

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence
net.bytebuddy:byte-buddy (source)	1.18.10 → 1.18.11

---

Release Notes

raphw/byte-buddy (net.bytebuddy:byte-buddy)

v1.18.11

• Add SBOM to published artifacts.
• Check for traversable paths injected into class files as a rather hypothetical attack vector.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[gemini-code-assist]

Code Review

This pull request updates the dependency net.bytebuddy:byte-buddy to version 1.18.11 in MODULE.bazel. Feedback highlights that the maven_install.json lockfile must be updated to avoid build failures, and suggests upgrading net.bytebuddy:byte-buddy-agent to the same version to ensure runtime compatibility.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[gemini-code-assist]

The maven_install.json lockfile has not been updated to reflect the new version of net.bytebuddy:byte-buddy. Since fail_if_repin_required = True is enabled in MODULE.bazel (line 106), the build will fail.

Please run the following command to update the lockfile:

REPIN=1 bazel run @maven//:pin

Additionally, please update net.bytebuddy:byte-buddy-agent to 1.18.11 to keep it in sync with byte-buddy and prevent potential runtime compatibility issues.

[forking-renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (1.18.11). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.