Skip to content

Bump the minor-java-dependencies group with 6 updates - #1152

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/minor-java-dependencies-bdfe11c11a
Open

Bump the minor-java-dependencies group with 6 updates#1152
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/minor-java-dependencies-bdfe11c11a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-java-dependencies group with 6 updates:

Package From To
io.netty:netty-bom 4.1.136.Final 4.1.137.Final
io.netty:netty-tcnative-boringssl-static 2.0.81.Final 2.0.82.Final
io.dropwizard.metrics:metrics-core 4.2.39 4.2.40
io.micrometer:micrometer-core 1.17.0 1.17.1
org.apache.maven:apache-maven 3.9.6 3.9.16
org.apache.maven.wrapper:maven-wrapper 3.2.0 3.3.4

Updates io.netty:netty-bom from 4.1.136.Final to 4.1.137.Final

Release notes

Sourced from io.netty:netty-bom's releases.

netty-4.1.137.Final

What's Changed

Full Changelog: netty/netty@netty-4.1.136.Final...netty-4.1.137.Final

Commits

Updates io.netty:netty-tcnative-boringssl-static from 2.0.81.Final to 2.0.82.Final

Commits
  • 9ef1af7 [maven-release-plugin] prepare release netty-tcnative-parent-2.0.82.Final
  • 5575e03 Add NULL check to guard against SIGSERV (#999)
  • a4c20b5 Pin github actions to reduce risk (#1000)
  • bbe7446 Make the Linux artifacts loadable on musl (Alpine) again (#997)
  • 990751e Delete local references as soon as possible in callbacks (#996)
  • 2e39099 Delete local references while processing the loop to fill the singature algor...
  • 6ad94b7 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates io.dropwizard.metrics:metrics-core from 4.2.39 to 4.2.40

Release notes

Sourced from io.dropwizard.metrics:metrics-core's releases.

v4.2.40

What's Changed

Full Changelog: dropwizard/metrics@v4.2.39...v4.2.40

Commits
  • deca21f [maven-release-plugin] prepare release v4.2.40
  • adc06fc feat: add module for logback 1.6.x (#5370)
  • 7a8bae2 fix(deps): update jackson3 monorepo (release/4.2.x) (minor) (#5288)
  • c04e360 build: compile in-process rather than by forking javac (#5369)
  • 16f0efc fix(deps): update dependency com.rabbitmq:amqp-client to v5.35.0 (#5367)
  • 2f4a844 fix(deps): update dependency net.bytebuddy:byte-buddy to v1.18.12-jdk5 (#5361)
  • 9789a72 fix(deps): update jackson monorepo to v3.1.6 (#5362)
  • d8603c7 fix(deps): update dependency org.apache.httpcomponents.client5:httpclient5 to...
  • 75340bd fix(deps): update jetty monorepo to v12.1.12 (#5357)
  • d6fc38e fix(deps): update dependency org.apache.httpcomponents.client5:httpclient5 to...
  • Additional commits viewable in compare view

Updates io.micrometer:micrometer-core from 1.17.0 to 1.17.1

Commits

Updates org.apache.maven:apache-maven from 3.9.6 to 3.9.16

Updates org.apache.maven.wrapper:maven-wrapper from 3.2.0 to 3.3.4

Release notes

Sourced from org.apache.maven.wrapper:maven-wrapper's releases.

3.3.4

🐛 Bug Fixes

👻 Maintenance

  • Ensure Path Traversal is fully addressed in MavenWrapperDownloader (#363) @​hazendaz

3.3.3

💥 Breaking changes

🚀 New features and improvements

  • Fix Maven wrapper support for snapshot distributions (#335) @​gnodet

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

... (truncated)

Commits
  • 524486a [maven-release-plugin] prepare release maven-wrapper-3.3.4
  • 17c1ec9 Revert wrapper version removal (#365)
  • 366207f Ensure Path Traversal is fully addressed in MavenWrapperDownloader
  • 086b1c9 [maven-release-plugin] prepare for next development iteration
  • e2a0c81 [maven-release-plugin] prepare release maven-wrapper-3.3.3
  • 80952cd Clarify usage of MAVEN_USER_HOME
  • 08e7200 Remove wrapper lifecycle
  • 36886fa Support for snapshot distributions - fix (#352)
  • d02d845 Use invoker version from parent
  • af7671b Bump mavenVersion from 3.9.6 to 3.9.11 (#360)
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
io.netty:netty-bom [>= 4.2.a0, < 4.3]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-java-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [io.netty:netty-bom](https://github.com/netty/netty) | `4.1.136.Final` | `4.1.137.Final` |
| [io.netty:netty-tcnative-boringssl-static](https://github.com/netty/netty-tcnative) | `2.0.81.Final` | `2.0.82.Final` |
| [io.dropwizard.metrics:metrics-core](https://github.com/dropwizard/metrics) | `4.2.39` | `4.2.40` |
| [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer-commercial) | `1.17.0` | `1.17.1` |
| org.apache.maven:apache-maven | `3.9.6` | `3.9.16` |
| [org.apache.maven.wrapper:maven-wrapper](https://github.com/apache/maven-wrapper) | `3.2.0` | `3.3.4` |


Updates `io.netty:netty-bom` from 4.1.136.Final to 4.1.137.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.1.136.Final...netty-4.1.137.Final)

Updates `io.netty:netty-tcnative-boringssl-static` from 2.0.81.Final to 2.0.82.Final
- [Release notes](https://github.com/netty/netty-tcnative/releases)
- [Commits](netty/netty-tcnative@netty-tcnative-parent-2.0.81.Final...netty-tcnative-parent-2.0.82.Final)

Updates `io.dropwizard.metrics:metrics-core` from 4.2.39 to 4.2.40
- [Release notes](https://github.com/dropwizard/metrics/releases)
- [Commits](dropwizard/metrics@v4.2.39...v4.2.40)

Updates `io.micrometer:micrometer-core` from 1.17.0 to 1.17.1
- [Commits](https://github.com/micrometer-metrics/micrometer-commercial/commits)

Updates `org.apache.maven:apache-maven` from 3.9.6 to 3.9.16

Updates `org.apache.maven.wrapper:maven-wrapper` from 3.2.0 to 3.3.4
- [Release notes](https://github.com/apache/maven-wrapper/releases)
- [Commits](apache/maven-wrapper@maven-wrapper-3.2.0...maven-wrapper-3.3.4)

---
updated-dependencies:
- dependency-name: io.netty:netty-bom
  dependency-version: 4.1.137.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-java-dependencies
- dependency-name: io.netty:netty-tcnative-boringssl-static
  dependency-version: 2.0.82.Final
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-java-dependencies
- dependency-name: io.dropwizard.metrics:metrics-core
  dependency-version: 4.2.40
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-java-dependencies
- dependency-name: io.micrometer:micrometer-core
  dependency-version: 1.17.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-java-dependencies
- dependency-name: org.apache.maven:apache-maven
  dependency-version: 3.9.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-java-dependencies
- dependency-name: org.apache.maven.wrapper:maven-wrapper
  dependency-version: 3.3.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-java-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants