Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 2, 2025

Bumps the tools-java group with 9 updates in the /tools/java directory:

Package From To
org.apache.maven.plugins:maven-compiler-plugin 3.11.0 3.14.1
org.codehaus.mojo:build-helper-maven-plugin 3.4.0 3.6.1
com.google.protobuf:protobuf-java 3.25.5 4.33.1
org.apache.maven.plugins:maven-antrun-plugin 1.3 3.2.0
org.codehaus.mojo:exec-maven-plugin 3.1.0 3.6.2
org.apache.maven.plugins:maven-jar-plugin 3.3.0 3.5.0
com.google.auto.value:auto-value 1.11.0 1.11.1
com.google.auto.value:auto-value-annotations 1.11.0 1.11.1
com.google.guava:guava 33.3.0-jre 33.5.0-jre

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.11.0 to 3.14.1

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.14.1

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

3.14.0

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

👻 Maintenance

... (truncated)

Commits
  • 0df6940 [maven-release-plugin] prepare release maven-compiler-plugin-3.14.1
  • 1bf9e5a Enforce asm version used here, to not depend on brittle transitive (#964)
  • f5161c4 Bump mavenVersion from 3.9.10 to 3.9.11 (#952)
  • 63846f1 Improve DeltaList behavior for large projects (#335)
  • ab3f845 Bump org.apache.maven.plugins:maven-plugins from 44 to 45
  • 164bad4 Allow to not use --module-version for the Java compiler
  • 0b76ccd Bump mavenVersion from 3.9.9 to 3.9.10
  • 5dbc9c3 Bump org.codehaus.plexus:plexus-java from 1.4.0 to 1.5.0
  • 17949d1 Bump org.apache.maven.plugins:maven-plugins from 43 to 44 (#316)
  • d44d1be Add generatedSourcesPath back to the maven project
  • Additional commits viewable in compare view

Updates org.codehaus.mojo:build-helper-maven-plugin from 3.4.0 to 3.6.1

Release notes

Sourced from org.codehaus.mojo:build-helper-maven-plugin's releases.

3.6.1

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

3.6.0

Changes

🚀 New features and improvements

📦 Dependency updates

👻 Maintenance

🔧 Build

... (truncated)

Commits
  • 908df59 [maven-release-plugin] prepare release 3.6.1
  • faafd8f Use common release-drafter configuration
  • a91b402 Rename Goals to Plugin Documentation in the site menu
  • 1e9136d Bump org.codehaus.mojo:mojo-parent from 87 to 91
  • 8700ddc Bump org.apache.maven.shared:file-management from 3.1.0 to 3.2.0
  • ab2c635 Bump org.codehaus.mojo:mojo-parent from 86 to 87
  • 611ce40 Typos.
  • 02d2b8e Bump org.codehaus.mojo:mojo-parent from 85 to 86
  • d742e5c Update site.xml to Doxia 2
  • 80b89b8 Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2
  • Additional commits viewable in compare view

Updates com.google.protobuf:protobuf-java from 3.25.5 to 4.33.1

Commits

Updates org.apache.maven.plugins:maven-antrun-plugin from 1.3 to 3.2.0

Release notes

Sourced from org.apache.maven.plugins:maven-antrun-plugin's releases.

3.2.0

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

... (truncated)

Commits
  • d8a5220 [maven-release-plugin] prepare release maven-antrun-plugin-3.2.0
  • a049c4d Refresh download page, use site descriptor 2.0
  • 3e2fbe1 Add tag-template to release-drafter
  • 43af127 Add hacktoberfest label to project
  • cc0189a Run ci also with Maven 4
  • ff42558 Bump Maven to 3.9.11 and keep prerequisites at 3.6.3
  • 17c406c Bump version.xmlunit from 2.10.3 to 2.10.4 (#338)
  • a313597 feat: enable prevent branch protection rules
  • e0127c7 Bump org.apache.maven.plugins:maven-plugins from 44 to 45
  • 565754c fix
  • Additional commits viewable in compare view

Updates org.codehaus.mojo:exec-maven-plugin from 3.1.0 to 3.6.2

Release notes

Sourced from org.codehaus.mojo:exec-maven-plugin's releases.

3.6.2

🚀 New features and improvements

📦 Dependency updates

3.6.1

🐛 Bug Fixes

📦 Dependency updates

3.6.0

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

3.5.1

🐛 Bug Fixes

... (truncated)

Commits
  • 416fdf1 [maven-release-plugin] prepare release 3.6.2
  • 712e21d [maven-release-plugin] prepare release 3.1.2
  • 9d265a2 Add JPMS ServiceLoader Support with Multi-Release JAR (#500)
  • 1c26293 Bump asm.version from 9.8 to 9.9
  • 6525169 [maven-release-plugin] prepare for next development iteration
  • 53087eb [maven-release-plugin] prepare release 3.6.1
  • 02e72e2 Revert change from #480 - plugin dependencies must be resolved from plugin re...
  • 18a21ea Bump org.codehaus.mojo:mojo-parent from 93 to 94
  • 3b6b9c5 [maven-release-plugin] prepare for next development iteration
  • febfc6f [maven-release-plugin] prepare release 3.6.0
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-jar-plugin from 3.3.0 to 3.5.0

Release notes

Sourced from org.apache.maven.plugins:maven-jar-plugin's releases.

3.5.0

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

🔧 Build

📦 Dependency updates

3.4.2

🐛 Bug Fixes

... (truncated)

Commits
  • 68d00f1 [maven-release-plugin] prepare release maven-jar-plugin-3.5.0
  • 357b9bf Update site descriptor to 2.0.0
  • 340249c Fix detecting java version for toolchains and JDK 1.8
  • 06a6245 chore: remove junit3 references
  • d302b2c Bump commons-io:commons-io from 2.20.0 to 2.21.0
  • 6081bdb Bump org.codehaus.plexus:plexus-archiver from 4.10.3 to 4.10.4
  • ef8ed4c Migrate component injection to JSR-330
  • 704a35c Ignore stderr when parsing javac version from toolchain (#471)
  • 0beb969 Use maven-plugin-testing-harness version 3.4.0
  • c2624c8 Bump org.apache.maven.plugin-tools:maven-plugin-annotations (#488)
  • Additional commits viewable in compare view

Updates com.google.auto.value:auto-value from 1.11.0 to 1.11.1

Release notes

Sourced from com.google.auto.value:auto-value's releases.

AutoValue 1.11.1

  • Fixed a crash with @AutoValue.CopyAnnotations(exclude=Missing.class), where Missing is a class that does not exist.
  • Type-use annotations such as @Nullable are now better preserved in generated builder setter method parameters. Previously they could be lost in some circumstances, for example with @Nullable T.
  • An issue with @Nullable type-use annotations in AutoBuilder has been fixed.
  • Report a diagnostic for setters with boxed primitive types for primitive properties.
  • A bug with AutoBuilder and Kotlin data classes has been fixed. If there was a mix of required and optional parameters in a data class with a large number of properties, sometimes the generated code would not compile.
Commits
  • 4a03588 Set version number for auto-value-parent to 1.11.1.
  • c5c1ae5 Update do-not-publish configuration.
  • 6d41b70 [maven-release-plugin] prepare for next development iteration
  • 74d3d07 [maven-release-plugin] prepare release auto-value-parent-1.11.1
  • 82eb4f8 Bump the dependencies group in /value with 2 updates
  • d09c2d3 Bump the dependencies group in /value with 4 updates
  • 893034b Delete the WeakHashMap recommendation.
  • 4bcb6b9 Bump net.ltgt.gwt.maven:gwt-maven-plugin from 1.1.0 to 1.2.0 in /value in the...
  • 66a26da Slightly reword @​AutoOneOf docs
  • 7e5e3c8 Bump the dependencies group in /value with 2 updates
  • Additional commits viewable in compare view

Updates com.google.auto.value:auto-value-annotations from 1.11.0 to 1.11.1

Release notes

Sourced from com.google.auto.value:auto-value-annotations's releases.

AutoValue 1.11.1

  • Fixed a crash with @AutoValue.CopyAnnotations(exclude=Missing.class), where Missing is a class that does not exist.
  • Type-use annotations such as @Nullable are now better preserved in generated builder setter method parameters. Previously they could be lost in some circumstances, for example with @Nullable T.
  • An issue with @Nullable type-use annotations in AutoBuilder has been fixed.
  • Report a diagnostic for setters with boxed primitive types for primitive properties.
  • A bug with AutoBuilder and Kotlin data classes has been fixed. If there was a mix of required and optional parameters in a data class with a large number of properties, sometimes the generated code would not compile.
Commits
  • 4a03588 Set version number for auto-value-parent to 1.11.1.
  • c5c1ae5 Update do-not-publish configuration.
  • 6d41b70 [maven-release-plugin] prepare for next development iteration
  • 74d3d07 [maven-release-plugin] prepare release auto-value-parent-1.11.1
  • 82eb4f8 Bump the dependencies group in /value with 2 updates
  • d09c2d3 Bump the dependencies group in /value with 4 updates
  • 893034b Delete the WeakHashMap recommendation.
  • 4bcb6b9 Bump net.ltgt.gwt.maven:gwt-maven-plugin from 1.1.0 to 1.2.0 in /value in the...
  • 66a26da Slightly reword @​AutoOneOf docs
  • 7e5e3c8 Bump the dependencies group in /value with 2 updates
  • Additional commits viewable in compare view

Updates com.google.guava:guava from 33.3.0-jre to 33.5.0-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.5.0

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.5.0-jre</version>
  <!-- or, for Android: -->
  <version>33.5.0-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

  • Restored the Automatic-Module-Name to guava-android. (It, unlike, guava-jre, is not a proper module.) (7a04a8a955)
  • For users of guava-gwt: Google has moved off GWT internally. We plan to continue to release guava-gwt for users of GWT and J2CL, but the artifact is no longer tested for GWT-specific issues, and we have limited resources to fix any unexpected issues that might arise. While we do not anticipate any specific problems, we can't guarantee how long support will continue.
  • Increased our Android minSdkVersion to 23 (Marshmallow). This follows the minimum of Google's foundational Android libraries, and we expect it to have no practical impact on users. (5c23347cc1)
  • Listed the JSpecify annotations as an optional dependency in our OSGi metadata. (2dfd572981)
  • cache: Improved the handling of exceptions from compute functions in Cache.asMap(). (We do still recommend using Caffeine rather than com.google.common.cache.) (087f2c4a80)
  • collect: Improved Iterators.mergeSorted() to preserve stability for equal elements. (4dc93be9a8)
  • math: Added saturatedAbs methods to IntMath and LongMath. (ed0e518f20)
  • net: Added image/avif to MediaType. (53344caba6)
  • testing: Made CollectorTester available to Android users. (294c251079)
  • util.concurrent: Added Striped.custom. (1586eb271d)

33.4.8

Guava 33.4.8 fixes a problem that we introduced while starting to migrate guava-android off Unsafe in 33.4.7.

Even if you're not upgrading from Guava 33.4.0 or earlier, still read the release notes for Guava 33.4.1. Those release notes contain information about the effects of Guava 33.4.5 and higher on the module system.

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the tools-java group with 9 updates in the /tools/java directory:

| Package | From | To |
| --- | --- | --- |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.11.0` | `3.14.1` |
| [org.codehaus.mojo:build-helper-maven-plugin](https://github.com/mojohaus/build-helper-maven-plugin) | `3.4.0` | `3.6.1` |
| [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `3.25.5` | `4.33.1` |
| [org.apache.maven.plugins:maven-antrun-plugin](https://github.com/apache/maven-antrun-plugin) | `1.3` | `3.2.0` |
| [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.1.0` | `3.6.2` |
| [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) | `3.3.0` | `3.5.0` |
| [com.google.auto.value:auto-value](https://github.com/google/auto) | `1.11.0` | `1.11.1` |
| [com.google.auto.value:auto-value-annotations](https://github.com/google/auto) | `1.11.0` | `1.11.1` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.3.0-jre` | `33.5.0-jre` |



Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.11.0 to 3.14.1
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.11.0...maven-compiler-plugin-3.14.1)

Updates `org.codehaus.mojo:build-helper-maven-plugin` from 3.4.0 to 3.6.1
- [Release notes](https://github.com/mojohaus/build-helper-maven-plugin/releases)
- [Commits](mojohaus/build-helper-maven-plugin@3.4.0...3.6.1)

Updates `com.google.protobuf:protobuf-java` from 3.25.5 to 4.33.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `org.apache.maven.plugins:maven-antrun-plugin` from 1.3 to 3.2.0
- [Release notes](https://github.com/apache/maven-antrun-plugin/releases)
- [Commits](apache/maven-antrun-plugin@maven-antrun-plugin-1.3...maven-antrun-plugin-3.2.0)

Updates `org.codehaus.mojo:exec-maven-plugin` from 3.1.0 to 3.6.2
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
- [Commits](mojohaus/exec-maven-plugin@exec-maven-plugin-3.1.0...3.6.2)

Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.3.0 to 3.5.0
- [Release notes](https://github.com/apache/maven-jar-plugin/releases)
- [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.3.0...maven-jar-plugin-3.5.0)

Updates `com.google.auto.value:auto-value` from 1.11.0 to 1.11.1
- [Release notes](https://github.com/google/auto/releases)
- [Commits](google/auto@auto-value-1.11.0...auto-value-1.11.1)

Updates `com.google.auto.value:auto-value-annotations` from 1.11.0 to 1.11.1
- [Release notes](https://github.com/google/auto/releases)
- [Commits](google/auto@auto-value-1.11.0...auto-value-1.11.1)

Updates `com.google.guava:guava` from 33.3.0-jre to 33.5.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: tools-java
- dependency-name: org.codehaus.mojo:build-helper-maven-plugin
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: tools-java
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 4.33.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: tools-java
- dependency-name: org.apache.maven.plugins:maven-antrun-plugin
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: tools-java
- dependency-name: org.codehaus.mojo:exec-maven-plugin
  dependency-version: 3.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: tools-java
- dependency-name: org.apache.maven.plugins:maven-jar-plugin
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: tools-java
- dependency-name: com.google.auto.value:auto-value
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tools-java
- dependency-name: com.google.auto.value:auto-value-annotations
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tools-java
- dependency-name: com.google.guava:guava
  dependency-version: 33.5.0-jre
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: tools-java
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Dec 2, 2025
@dependabot dependabot bot requested a review from a team as a code owner December 2, 2025 01:51
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Dec 2, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant