Upgrade deps for 1.40.0

[jrhee17]

• Apache MINA SSHD 2.17.1 -> 2.18.0
• Armeria 1.39.0 -> 1.40.0
• controlplane 1.0.52 -> 1.0.53
• gRPC-Java 1.81.0 -> 1.82.0
• Jackson 2.21.3 -> 2.22.0
• Logback 1.5.32 -> 1.5.34
• Micrometer 1.16.5 -> 1.17.0
• Nimbus JOSE+JWT 10.9 -> 10.9.1
• Prometheus Metrics 1.6.1 -> 1.8.0
• Protocol Buffers 3.25.8 -> 3.25.9
• SLF4J 2.0.17 -> 2.0.18
• Spring Boot 3 3.5.10 -> 3.5.15
• Spring Boot 4 4.0.6 -> 4.1.0
• zstd-jni 1.5.7-8 -> 1.5.7-11
• Build
  • Checkstyle 10.3.3 -> 13.6.0
  • Dropwizard Metrics 4.2.38 -> 4.2.39
  • JUnit 5 5.14.2 -> 5.14.4
  • ProGuard 7.8.1 -> 7.9.1
  • protobuf-gradle-plugin 0.9.5 -> 0.10.0
  • Shadow 8.3.9 -> 9.4.2

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 4958c6ce-e437-4959-a8e3-eb7701343ec0

📥 Commits

Reviewing files that changed from the base of the PR and between 47cba83 and 0457a55.

📒 Files selected for processing (1)

• dependencies.toml

---

📝 Walkthrough

Walkthrough

Updates 19 dependency version constants in dependencies.toml's [versions] block. Upgrades span libraries including armeria, grpc-java, jackson, micrometer, spring-boot3, spring-boot4, shadow-gradle-plugin, protobuf-gradle-plugin, and others. No code or public API changes are involved.

Changes

Dependency Version Bumps

Layer / File(s)

Summary

All version constant updates dependencies.toml

Updates 19 version literals: armeria (1.39.0→1.40.0), controlplane (1.0.52→1.0.53), dropwizard-metrics (4.2.38→4.2.39), grpc-java (1.81.0→1.82.0), jackson (2.21.3→2.22.0), junit5 (5.14.2→5.14.4), logback15 (1.5.32→1.5.34), micrometer (1.16.5→1.17.0), mina-sshd (2.17.1→2.18.0), nimbus-jose-jwt (10.9→10.9.1), proguard (7.8.1→7.9.1), prometheus-metrics (1.6.1→1.8.0), protobuf (3.25.8→3.25.9), protobuf-gradle-plugin (0.9.5→0.10.0), shadow-gradle-plugin (8.3.9→9.4.2), slf4j2 (2.0.17→2.0.18), spring-boot3 (3.5.10→3.5.15), spring-boot4 (4.0.6→4.1.0), and zstd (1.5.7-8→1.5.7-11).

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~5 minutes

Possibly related PRs

• line/centraldogma#1238: Modifies the same dependencies.toml [versions] block, bumping overlapping constants including armeria and grpc-java.
• line/centraldogma#1274: Bumps overlapping version constants in dependencies.toml including armeria, grpc-java, jackson, and micrometer.
• line/centraldogma#1304: Updates the same dependencies.toml [versions] block with overlapping dependency version constants.

Suggested reviewers

• trustin
• ikhoon
• minwoox

Poem

🐇 Hop, hop, versions leap ahead,
New numbers dancing in TOML's bed,
From Armeria to Spring Boot's door,
Each bump brings libraries up once more!
The rabbit stamps each version right — hooray! 🎉

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'Upgrade deps for 1.40.0' accurately reflects the main objective of the pull request to upgrade multiple dependencies for Central Dogma version 1.40.0.
Description check	✅ Passed	The description provides a detailed list of all dependency upgrades made in the pull request, directly corresponding to the changes in dependencies.toml.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@dependencies.toml`:
- Line 11: The checkstyle dependency version 13.6.0 requires Java 21 as a
minimum, but this requirement is not communicated to local developers who may
still be using Java 19 or below, causing build failures during checkstyle
verification. Document the Java 21 minimum requirement by updating build
documentation or configuration files such as .tool-versions or similar local
development setup files to ensure all developers are aware of and enforce this
requirement in their local environment before attempting builds.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: d2b3cc8e-53e6-49ff-a55d-fd198574fe92

📥 Commits

Reviewing files that changed from the base of the PR and between c192d6b and 47cba83.

📒 Files selected for processing (1)

• dependencies.toml

[minwoox]

👍 👍