Skip to content

Bump the metadata group across 1 directory with 10 updates #3852

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Bump the metadata group across 1 directory with 10 updates #3852

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 1, 2025 •
edited
Loading

Bumps the metadata group with 10 updates in the /metadata directory:

Package From To
com.google.guava:guava 32.1.2-jre 33.4.8-jre
commons-io:commons-io 2.18.0 2.19.0
com.ibm.icu:icu4j 73.2 77.1
com.google.protobuf:protobuf-java 3.25.5 4.30.2
com.google.auto.value:auto-value 1.10.2 1.11.0
com.google.auto.value:auto-value-annotations 1.10.2 1.11.0
com.google.truth:truth 1.1.5 1.4.4
com.google.truth.extensions:truth-java8-extension 1.0.1 1.4.4
org.apache.maven.plugins:maven-compiler-plugin 3.8.1 3.14.0
org.apache.maven.plugins:maven-javadoc-plugin 3.5.0 3.11.2

Updates com.google.guava:guava from 32.1.2-jre to 33.4.8-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.4.8

Guava 33.4.8 fixes a problem that we introduced while starting to migrate guava-android off Unsafe in 33.4.7.

Even if you're not upgrading from Guava 33.4.0 or earlier, still read the release notes for Guava 33.4.1. Those release notes contain information about the effects of Guava 33.4.5 and higher on the module system.

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.4.8-jre</version>
  <!-- or, for Android: -->
  <version>33.4.8-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

  • util.concurrent: Removed our VarHandle code from guava-android. While the code was never used at runtime under Android, it was causing problems under the Android Gradle Plugin with a minSdkVersion below 26. To continue to avoid sun.misc.Unsafe under the JVM, guava-android will now always use AtomicReferenceFieldUpdater when run there. (75da92419a)

33.4.7

Prefer to upgrade straight to 33.4.8: 33.4.7 breaks the build of Android apps with a minSdkVersion below 26. We will publish a fixed version soon. This problem is fixed in 33.4.8.

Guava 33.4.7, like 33.4.6, fixes two problems that we introduced while modularizing Guava and migrating off Unsafe in 33.4.5.

Even if you're not upgrading from Guava 33.4.0 or earlier, still read the release notes for Guava 33.4.1. Those release notes contain information about the effects of Guava 33.4.5 and higher on the module system.

Maven

... (truncated)

Commits

Updates commons-io:commons-io from 2.18.0 to 2.19.0

Updates com.ibm.icu:icu4j from 73.2 to 77.1

Release notes

Sourced from com.ibm.icu:icu4j's releases.

ICU 77.1

We are pleased to announce the release of Unicode® ICU 77. It updates to CLDR 47 (beta blog) locale data with new locales, and various additions and corrections.

ICU 77 is mostly focused on bug fixes, segmentation conformance, and other refinements.

The Java technology preview implementation of the CLDR MessageFormat 2.0 specification has been updated to incorporate the CLDR 46.1 spec plus most but not all of the CLDR 47 changes. The C++ technology preview implementation of MessageFormat 2.0 is not yet quite up to date with CLDR 46.1.

Please note that for ICU 78 (2025-oct) we are planning to (a) upgrade from Java 8 to Java 11, and (b) remove the ICU4J Locale Service Provider. See the ICU 77 page for details.

ICU 77 RC

We are pleased to announce the release candidate for Unicode® ICU 77. It updates to CLDR 47 (alpha blog) locale data with new locales, and various additions and corrections.

ICU 77 is mostly focused on bug fixes, segmentation conformance, and other refinements.

The Java technology preview implementation of the CLDR MessageFormat 2.0 specification has been updated to incorporate the CLDR 46.1 spec plus most but not all of the CLDR 47 changes. The C++ technology preview implementation of MessageFormat 2.0 is not yet quite up to date with CLDR 46.1.

For details, please see https://unicode-org.github.io/icu/download/77.html.

Please test this release candidate on your platforms and report bugs and regressions by Monday, 2025-mar-10, via the icu-support mailing list, and/or please find/submit error reports.

Please do not use this release candidate in production.

The preliminary API reference documents are published on unicode-org.github.io/icu-docs/ – follow the “Dev” links there.

ICU 76.1

ICU 76 updates to Unicode 16 (blog), including new characters and scripts, emoji, collation & IDNA changes, and corresponding APIs and implementations. It also updates to CLDR 46 (beta blog) locale data with new locales, significant updates to existing locales, and various additions and corrections. For example, the CLDR and Unicode default sort orders are now very nearly the same.

Most of the java.time (Temporal) types can now be formatted directly using the existing ICU4J date/time formatting classes.

There are some new APIs to make ICU easier to use with modern C++ and Java patterns. Most of the C/C++ APIs added for this purpose are implemented as C++ header-only APIs, and usable on top of binary stable C APIs, which is a first for ICU.

The Java and C++ technology preview implementations of the (also in tech preview) CLDR MessageFormat 2.0 specification have been updated to match recent changes.

ICU 76 and CLDR 46 are major releases, including a new version of Unicode and major locale data improvements.

For details, please see https://unicode-org.github.io/icu/download/76.html.

ICU 76 RC

We are pleased to announce the release candidate for Unicode® ICU 76. It updates to Unicode 16 (blog), including new characters and scripts, emoji, collation & IDNA changes, and corresponding APIs and implementations. It also updates to CLDR 46 (beta blog) locale data with new locales, significant updates to existing locales, and various additions and corrections. For example, the CLDR and Unicode default sort orders are now very nearly the same.

Most of the java.time (Temporal) types can now be formatted directly using the existing ICU4J date/time formatting classes.

There are some new APIs to make ICU easier to use with modern C++ and Java patterns. Most of the C/C++ APIs added for this purpose are implemented as C++ header-only APIs, and usable on top of binary stable C APIs, which is a first for ICU.

The Java and C++ technology preview implementations of the (also in tech preview) CLDR MessageFormat 2.0 specification have been updated to match recent changes.

... (truncated)

Commits

Updates com.google.protobuf:protobuf-java from 3.25.5 to 4.30.2

Commits
  • 43e1626 Updating version.json and repo version numbers to: 30.2
  • 7a4c63b Fix lite classes in the protobuf-java Maven release to be JDK8 compatible. (#...
  • 7831669 Remove dllexport attribute on variable definition. (#20833)
  • da9cadc Restore JDK8 compatibility in Bazel for libraries with dependencies from Mave...
  • 09b5078 Add protobuf_maven artifacts to protobuf_maven_dev as well so they can still ...
  • b7f06f1 Add volatile to featuresResolved (#20766)
  • b69f653 Restore generator headers in cmake install until the next breaking C++ releas...
  • f4b0a79 Restore custom protobuf maven namespaces to avoid polluting main maven namesp...
  • 2dc9f35 Fix Java concurrency issue in feature resolution for old <=3.25.x gencode usi...
  • 221b2a0 Change how we decide which empty string implementation to use. (#20708)
  • Additional commits viewable in compare view

Updates com.google.auto.value:auto-value from 1.10.2 to 1.11.0

Release notes

Sourced from com.google.auto.value:auto-value's releases.

AutoValue 1.11.0

What's Changed

  • AutoValue (including AutoBuilder) no longer bundles the Kotlin metadata API. This may require adding an explicit dependency on org.jetbrains.kotlinx:kotlinx-metadata-jvm:0.9.0 or org.jetbrains.kotlin:kotlin-metadata-jvm:2.0.0 to client code that uses AutoBuilder to build Kotlin classes. The metadata API has changed from kotlinx.metadata to kotlin.metadata, but AutoBuilder uses reflection to function with either. (260b61ec7)
  • Support for generating Java 7 code has been removed from AutoValue, AutoAnnotation, and AutoBuilder. You must be on at least Java 8, or an Android version with desugaring that allows it to pass for Java 8. 1.10.4 is the last AutoValue version with support for Java 7. (b9142b7cd)
  • AutoBuilder now reports an error if it encounters a @Nullable primitive parameter. Primitive types cannot be null, and should not be annotated for nullness. (7cbdeb43b)
  • Annotations on type parameters, like abstract @Nullable T foo(), are now better propagated to fields and constructor parameters. (92d881ed9)
  • The generated toBuilder() method now says new AutoValue_Foo.Builder(this) rather than just new Builder(this), to do the right thing if an extension generates its own subclass of Builder. (324470ba2)
  • The "copy constructor" in a generated Builder is no longer private. (6730615c9)
  • Added support for extending AutoValue.Builder with abstract methods. (7d4b020dd)
  • The annotation processors now support all kinds of resource URLs when loading template resources. This change only affects the case where the AutoValue (etc) processors are being invoked in an unusual environment, for example from a GraalVM app. It does not affect code that is merely being compiled for such an environment. (80b0ada75)

Full Changelog: google/auto@auto-value-1.10.4...auto-value-1.11.0

AutoValue 1.10.4

  • A workaround for a JDK bug with reading jar resources has been extended so it always applies, rather than just as a fallback. See #1572. (3f69cd255)
  • If an AutoValue property method is @Nullable, the corresponding field in the generated class will be too. This was already the case for TYPE_USE @Nullable or if the method had @CopyAnnotations, but now @Nullable will be copied in other cases too. (4506804f1)

AutoValue 1.10.3

  • An "incompatible version" issue with Kotlin compilation has been fixed. See #1574. (b21c7f4fb)
  • A warning is now produced if a setX method in a Builder or its return type is marked @Nullable. Those methods always return the Builder instance, which is never null. (e5b4b5484)
Commits
  • 5e02d64 Set version number for auto-value-parent to 1.11.0.
  • 80b0ada Support all kinds of resource URLs when loading template resources.
  • 260b61e Use reflection to avoid referencing the Kotlin metadata API directly.
  • 76be89a Bump org.apache.maven.plugins:maven-invoker-plugin from 3.6.1 to 3.7.0 in /fa...
  • c11484e Bump org.apache.maven.plugins:maven-invoker-plugin from 3.6.1 to 3.7.0 in /value
  • b21d69d Bump kotlin.version from 1.9.24 to 2.0.0 in /value
  • e55e60a Update AutoValue to reflect recent Kotlin Metadata API changes.
  • 29f739b Bump actions/checkout from 4.1.5 to 4.1.6
  • 199a727 Bump kotlin.version from 1.9.23 to 1.9.24 in /value
  • f2b22e3 Bump actions/checkout from 4.1.4 to 4.1.5
  • Additional commits viewable in compare view

Updates com.google.auto.value:auto-value-annotations from 1.10.2 to 1.11.0

Release notes

Sourced from com.google.auto.value:auto-value-annotations's releases.

AutoValue 1.11.0

What's Changed

  • AutoValue (including AutoBuilder) no longer bundles the Kotlin metadata API. This may require adding an explicit dependency on org.jetbrains.kotlinx:kotlinx-metadata-jvm:0.9.0 or org.jetbrains.kotlin:kotlin-metadata-jvm:2.0.0 to client code that uses AutoBuilder to build Kotlin classes. The metadata API has changed from kotlinx.metadata to kotlin.metadata, but AutoBuilder uses reflection to function with either. (260b61ec7)
  • Support for generating Java 7 code has been removed from AutoValue, AutoAnnotation, and AutoBuilder. You must be on at least Java 8, or an Android version with desugaring that allows it to pass for Java 8. 1.10.4 is the last AutoValue version with support for Java 7. (b9142b7cd)
  • AutoBuilder now reports an error if it encounters a @Nullable primitive parameter. Primitive types cannot be null, and should not be annotated for nullness. (7cbdeb43b)
  • Annotations on type parameters, like abstract @Nullable T foo(), are now better propagated to fields and constructor parameters. (92d881ed9)
  • The generated toBuilder() method now says new AutoValue_Foo.Builder(this) rather than just new Builder(this), to do the right thing if an extension generates its own subclass of Builder. (324470ba2)
  • The "copy constructor" in a generated Builder is no longer private. (6730615c9)
  • Added support for extending AutoValue.Builder with abstract methods. (7d4b020dd)
  • The annotation processors now support all kinds of resource URLs when loading template resources. This change only affects the case where the AutoValue (etc) processors are being invoked in an unusual environment, for example from a GraalVM app. It does not affect code that is merely being compiled for such an environment. (80b0ada75)

Full Changelog: google/auto@auto-value-1.10.4...auto-value-1.11.0

AutoValue 1.10.4

  • A workaround for a JDK bug with reading jar resources has been extended so it always applies, rather than just as a fallback. See #1572. (3f69cd255)
  • If an AutoValue property method is @Nullable, the corresponding field in the generated class will be too. This was already the case for TYPE_USE @Nullable or if the method had @CopyAnnotations, but now @Nullable will be copied in other cases too. (4506804f1)

AutoValue 1.10.3

  • An "incompatible version" issue with Kotlin compilation has been fixed. See #1574. (b21c7f4fb)
  • A warning is now produced if a setX method in a Builder or its return type is marked @Nullable. Those methods always return the Builder instance, which is never null. (e5b4b5484)
Commits
  • 5e02d64 Set version number for auto-value-parent to 1.11.0.
  • 80b0ada Support all kinds of resource URLs when loading template resources.
  • 260b61e Use reflection to avoid referencing the Kotlin metadata API directly.
  • 76be89a Bump org.apache.maven.plugins:maven-invoker-plugin from 3.6.1 to 3.7.0 in /fa...
  • c11484e Bump org.apache.maven.plugins:maven-invoker-plugin from 3.6.1 to 3.7.0 in /value
  • b21d69d Bump kotlin.version from 1.9.24 to 2.0.0 in /value
  • e55e60a Update AutoValue to reflect recent Kotlin Metadata API changes.
  • 29f739b Bump actions/checkout from 4.1.5 to 4.1.6
  • 199a727 Bump kotlin.version from 1.9.23 to 1.9.24 in /value
  • f2b22e3 Bump actions/checkout from 4.1.4 to 4.1.5
  • Additional commits viewable in compare view

Updates com.google.truth:truth from 1.1.5 to 1.4.4

Release notes

Sourced from com.google.truth:truth's releases.

v1.4.4

  • Annotated the rest of the main package for nullness, and moved the @NullMarked annotation from individual classes up to the package to avoid a warning under --release 8. (e107aeadc)
  • Improved the failure message for matches to conditionally suggest using containsMatch. (7e9fc7aec)

1.4.3

Known Issue for at least some builds targeting Java 8, fixed in 1.4.4: "unknown enum constant ElementType.MODULE": google/truth#1320. As far as we know, this is only a warning, so it should cause practical problems only if you use -Werror or you perform reflection on @NullMarked under a Java 8 runtime.

  • Added more nullness information to our APIs (in the form of JSpecify annotations). This could lead to additional warnings (or even errors) for users of Kotlin and other nullness checkers. Please report any problems. (ee680cbaf)
  • Deprecated Subject.Factory methods for Java 8 types. We won't remove them, but you can simplify your code by migrating off them: Just replace assertAbout(foos()).that(foo) with assertThat(foo) (or about(foos()).that(foo) with that(foo)). (59e7a5065)

1.4.2

This release is the final step of copying all our methods from Truth8 to Truth. If you have not already migrated your usages from Truth8 to Truth, you may see build errors:

OptionalSubjectTest.java:39: error: reference to assertThat is ambiguous
    assertThat(Optional.of("foo")).isPresent();
    ^
  both method assertThat(@org.checkerframework.checker.nullness.qual.Nullable Optional<?>) in Truth8 and method assertThat(@org.checkerframework.checker.nullness.qual.Nullable Optional<?>) in Truth match

In most cases, you can migrate your whole project mechanically: git grep -l Truth8 | xargs perl -pi -e 's/\bTruth8\b/Truth/g;'. (You can make that change before upgrading to Truth 1.4.2 or as part of the same commit.)

If you instead need to migrate your project incrementally (for example, because it is very large), you may want to upgrade your version of Truth incrementally, too, following our instructions for 1.3.0 and 1.4.0.

For help

Please feel welcome to open an issue to report problems or request help.

Changelog

  • Removed temporary type parameters from Truth.assertThat(Stream) and Truth.assertThat(Optional). This can create build errors, which you can fix by replacing all your references to Truth8 with references to Truth. (45782bd0e)

1.4.1

This release deprecates Truth8.

All its methods have become available on the main Truth class. In most cases, you can migrate your whole project mechanically: git grep -l Truth8 | xargs perl -pi -e 's/\bTruth8\b/Truth/g;'

While we do not plan to delete Truth8, we recommend migrating off it, at least if you static import assertThat: If you do not migrate, such static imports will become ambiguous in Truth 1.4.2, breaking your build.

1.4.0

In this release, our assertions on Java 8 types continue to move from the Truth8 class to the main Truth class. This change should not break compatibility for any supported JDK or Android version, even users who test under old versions of Android without API desugaring. Additionally, we will never break binary compatibility, though some users will have to make changes to their source code in order for it to compile against newer versions.

This release is likely to lead to more build failures than 1.3.0 did. However, those failures should be straightforward to fix.

Example build failure

Foo.java:152: error: reference to assertThat is ambiguous
    assertThat(repo.findFileWithName("foo")).isNull();
</tr></table>

... (truncated)

Commits
  • ddeaa0c Set version number for truth-parent to 1.4.4.
  • e107aea Annotate the rest of the main package (basically just the Java 8 subjects) fo...
  • 8ac91a6 Document that truth-java8-extension is obsolete.
  • 99af8be Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.23 to 1.24 in the d...
  • 54e548c Bump the dependencies group with 2 updates
  • 2183a14 Migrate from legacy com.google.gwt to org.gwtproject.
  • 7e9fc7a Make StringSubject.matches suggest using containsMatch if matches(x) fails bu...
  • af140d6 Fix grammar in Javadoc comments.
  • afda443 Annotate formattingDiffsUsing methods as supporting nullable element/value ...
  • ee680cb Use JSpecify annotations in the public release.
  • Additional commits viewable in compare view

Updates com.google.truth.extensions:truth-java8-extension from 1.0.1 to 1.4.4

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.8.1 to 3.14.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.14.0

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

👻 Maintenance

🔧 Build

3.13.0

🚀 New features and improvements

📦 Dependency updates

... (truncated)

Commits
  • b5e7d9b [maven-release-plugin] prepare release maven-compiler-plugin-3.14.0
  • 9134f12 Enable GitHub Issues
  • 19b8b12 Update scm tag according to branch
  • 09dce4e [MCOMPILER-579] allow module-version configuration (#273)
  • f7c3c5f Bump org.codehaus.plexus:plexus-java from 1.2.0 to 1.4.0
  • 764a54b [MNGSITE-529] Rename "Goals" to "Plugin Documentation"
  • cfacbc1 PR Automation only on close event
  • 5c26bba Use JUnit version from parent
  • 5449407 [MCOMPILER-529] Update docs about version schema (Maven 3)
  • 01d5b88 Bump mavenVersion from 3.6.3 to 3.9.9 (#283)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-javadoc-plugin from 3.5.0 to 3.11.2

Release notes

Sourced from org.apache.maven.plugins:maven-javadoc-plugin's releases.

3.11.2

🚀 New features and improvements

📦 Dependency updates

👻 Maintenance

maven-javadoc-plugin-3.11.1

What's Changed

Full Changelog: apache/maven-javadoc-plugin@maven-javadoc-plugin-3.11.0...maven-javadoc-plugin-3.11.1

maven-javadoc-plugin-3.10.1

What's Changed

Full Changelog: apache/maven-javadoc-plugin@maven-javadoc-plugin-3.10.0...maven-javadoc-plugin-3.10.1

maven-javadoc-plugin-3.10.0

❗ NOTICE

Due to Doxia 2.x stack maven-site-plugin 3.20+ is requred.

What's Changed

... (truncated)

Commits
  • 44cbab7 [maven-release-plugin] prepare release maven-javadoc-plugin-3.11.2
  • 3de45d8 use github for scm
  • 45ccf06 Bump com.thoughtworks.qdox:qdox from 2.1.0 to 2.2.0
  • 530fa01 [MJAVADOC-823] legacyMode keeps using module-info.java (-sourcedirectory stil...
  • 3a16d92 Bump commons-io:commons-io from 2.17.0 to 2.18.0
  • 69c1ba7 Migrate from Plexus to Sisu Guice (#341)
  • 39857ea Remove usages of deprecated ReaderFactory class (#339)
  • 314203a [MJAVADOC-814] handle parameters such packages with multi lines (#337)
  • 3bb982d refactor: Replace Plexus AbstractLogEnabled with SLF4J (#338)
  • 76826c8 [MJAVADOC-822] skippedModules should be more scalable and support regex (#336)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels May 1, 2025
@dependabot dependabot bot requested a review from a team as a code owner May 1, 2025 22:44
@dependabot dependabot bot force-pushed the dependabot/maven/metadata/metadata-cb08cbc899 branch from 172bde6 to 475f45a Compare June 1, 2025 22:19
@dependabot dependabot bot force-pushed the dependabot/maven/metadata/metadata-cb08cbc899 branch from 475f45a to 46ff430 Compare July 1, 2025 22:52
@dependabot dependabot bot force-pushed the dependabot/maven/metadata/metadata-cb08cbc899 branch from 46ff430 to f566758 Compare August 1, 2025 22:23
@dependabot dependabot bot force-pushed the dependabot/maven/metadata/metadata-cb08cbc899 branch from f566758 to c953133 Compare October 1, 2025 22:03
@dependabot dependabot bot force-pushed the dependabot/maven/metadata/metadata-cb08cbc899 branch from c953133 to 20f58de Compare November 1, 2025 22:02
@dependabot
Bump the metadata group across 1 directory with 10 updates
a700c37 
Bumps the metadata group with 10 updates in the /metadata directory:

| Package | From | To |
| --- | --- | --- |
| [com.google.guava:guava](https://github.com/google/guava) | `32.1.2-jre` | `33.4.8-jre` |
| commons-io:commons-io | `2.18.0` | `2.19.0` |
| [com.ibm.icu:icu4j](https://github.com/unicode-org/icu) | `73.2` | `77.1` |
| [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `3.25.5` | `4.30.2` |
| [com.google.auto.value:auto-value](https://github.com/google/auto) | `1.10.2` | `1.11.0` |
| [com.google.auto.value:auto-value-annotations](https://github.com/google/auto) | `1.10.2` | `1.11.0` |
| [com.google.truth:truth](https://github.com/google/truth) | `1.1.5` | `1.4.4` |
| com.google.truth.extensions:truth-java8-extension | `1.0.1` | `1.4.4` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.8.1` | `3.14.0` |
| [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) | `3.5.0` | `3.11.2` |



Updates `com.google.guava:guava` from 32.1.2-jre to 33.4.8-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `commons-io:commons-io` from 2.18.0 to 2.19.0

Updates `com.ibm.icu:icu4j` from 73.2 to 77.1
- [Release notes](https://github.com/unicode-org/icu/releases)
- [Commits](https://github.com/unicode-org/icu/commits)

Updates `com.google.protobuf:protobuf-java` from 3.25.5 to 4.30.2
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](protocolbuffers/protobuf@v3.25.5...v4.30.2)

Updates `com.google.auto.value:auto-value` from 1.10.2 to 1.11.0
- [Release notes](https://github.com/google/auto/releases)
- [Commits](google/auto@auto-value-1.10.2...auto-value-1.11.0)

Updates `com.google.auto.value:auto-value-annotations` from 1.10.2 to 1.11.0
- [Release notes](https://github.com/google/auto/releases)
- [Commits](google/auto@auto-value-1.10.2...auto-value-1.11.0)

Updates `com.google.truth:truth` from 1.1.5 to 1.4.4
- [Release notes](https://github.com/google/truth/releases)
- [Commits](google/truth@v1.1.5...v1.4.4)

Updates `com.google.truth.extensions:truth-java8-extension` from 1.0.1 to 1.4.4

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.8.1 to 3.14.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.8.1...maven-compiler-plugin-3.14.0)

Updates `org.apache.maven.plugins:maven-javadoc-plugin` from 3.5.0 to 3.11.2
- [Release notes](https://github.com/apache/maven-javadoc-plugin/releases)
- [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.5.0...maven-javadoc-plugin-3.11.2)

---
updated-dependencies:
- dependency-name: com.google.guava:guava
  dependency-version: 33.4.8-jre
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: metadata
- dependency-name: commons-io:commons-io
  dependency-version: 2.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: metadata
- dependency-name: com.ibm.icu:icu4j
  dependency-version: '77.1'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: metadata
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 4.30.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: metadata
- dependency-name: com.google.auto.value:auto-value
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: metadata
- dependency-name: com.google.auto.value:auto-value-annotations
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: metadata
- dependency-name: com.google.truth:truth
  dependency-version: 1.4.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: metadata
- dependency-name: com.google.truth.extensions:truth-java8-extension
  dependency-version: 1.4.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: metadata
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: metadata
- dependency-name: org.apache.maven.plugins:maven-javadoc-plugin
  dependency-version: 3.11.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: metadata
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/maven/metadata/metadata-cb08cbc899 branch from 20f58de to a700c37 Compare December 2, 2025 01:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants