Skip to content

fix(deps): update java dependencies to 4.0.16, 0.8.16, 1.4.3, 4.0.9, 4.0.5, 5.14.4, 2.4.4.final, 3.21.0, 2.10.0, 1.14.1, 2.22.0, 4.8.199, 33.8.0, 21.24.0.0, 1.18.48, 1.6.3, 3.16.0 - #130

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/java
Open

fix(deps): update java dependencies to 4.0.16, 0.8.16, 1.4.3, 4.0.9, 4.0.5, 5.14.4, 2.4.4.final, 3.21.0, 2.10.0, 1.14.1, 2.22.0, 4.8.199, 33.8.0, 21.24.0.0, 1.18.48, 1.6.3, 3.16.0#130
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/java

Conversation

@renovate

@renovate renovate Bot commented Oct 31, 2026 •
edited by github-actions Bot
Loading

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
org.jvnet.jaxb:jaxb-maven-plugin 4.0.8 → 4.0.16 age confidence
org.jacoco:jacoco-maven-plugin (source) 0.8.12 → 0.8.16 age confidence
org.locationtech.proj4j:proj4j-epsg 1.4.0 → 1.4.3 age confidence
org.locationtech.proj4j:proj4j 1.4.0 → 1.4.3 age confidence
org.glassfish.jaxb:jaxb-runtime (source) 4.0.5 → 4.0.9 age confidence
jakarta.xml.bind:jakarta.xml.bind-api 4.0.2 → 4.0.5 age confidence
org.junit.jupiter:junit-jupiter-params (source) 5.9.2 → 5.14.4 age confidence
io.undertow:undertow-core (source) 2.4.0.Beta1 → 2.4.4.Final age confidence
org.apache.commons:commons-lang3 (source) 3.20.0 → 3.21.0 age confidence
org.springdoc:springdoc-openapi-starter-webmvc-ui (source) 2.8.9 → 2.10.0 age confidence
org.apache.commons:commons-csv (source) 1.11.0 → 1.14.1 age confidence
commons-io:commons-io (source) 2.16.1 → 2.22.0 age confidence
io.github.classgraph:classgraph 4.8.146 → 4.8.199 age confidence
com.google.guava:guava 33.7.2-jre → 33.8.0-jre age confidence
com.oracle.database.jdbc:ojdbc11 (source) 21.3.0.0 → 21.24.0.0 age confidence
org.projectlombok:lombok (source) 1.18.30 → 1.18.48 age confidence
org.mapstruct:mapstruct-processor (source) 1.5.3.Final → 1.6.3 age confidence
org.mapstruct:mapstruct (source) 1.5.3.Final → 1.6.3 age confidence
org.apache.maven.plugins:maven-compiler-plugin (source) 3.10.1 → 3.16.0 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

highsource/jaxb-tools (org.jvnet.jaxb:jaxb-maven-plugin)

v4.0.16

Compare Source

What's Changed

This is a maintenance release of jaxb-tools, with bugfixes.

🐞 Bugfixes

Full Changelog: highsource/jaxb-tools@4.0.15...4.0.16

v4.0.15

Compare Source

What's Changed

This is a maintenance release of jaxb-tools, with bugfixes and dependency upgrades.

🐞 Bugfixes

🔨 Dependency Upgrades and Other

Full Changelog: highsource/jaxb-tools@4.0.14...4.0.15

v4.0.14

Compare Source

What's Changed

Full Changelog: highsource/jaxb-tools@4.0.13...4.0.14

v4.0.13

Compare Source

What's Changed

New Contributors

Full Changelog: highsource/jaxb-tools@4.0.12...4.0.13

v4.0.12

Compare Source

What's Changed

This is a maintenance release of jaxb-tools, with bugfixes and dependency upgrades.

Even if this version is based on latest jaxb-api 4.0.4 and jaxb-ri 4.0.6, you can still use previous jaxb-api and runtime in projects (jaxb-api 4.0.3 and 4.0.4 has issue with base64 parsing : jakartaee/jaxb-api#325)

🐞 Bugfixes

🔨 Dependency Upgrades and Other

Full Changelog: highsource/jaxb-tools@4.0.11...4.0.12

v4.0.11

Compare Source

What's Changed

This is a maintenance release of jaxb-tools, with regression fix.

🐞 Bugfixes

Full Changelog: highsource/jaxb-tools@4.0.10...4.0.11

v4.0.10

Compare Source

What's Changed

This is a maintenance release of jaxb-tools, with plugin updates and dependency upgrades.

⭐ New features

🐞 Bugfixes

🔨 Dependency Upgrades and Other

New Contributors

Full Changelog: highsource/jaxb-tools@4.0.9...4.0.10

v4.0.9

Compare Source

What's Changed

This is a maintenance release of jaxb-tools, with plugin updates and dependency upgrades.

⭐ New features

📖 Documentation

🔨 Dependency Upgrades and Other

Full Changelog: highsource/jaxb-tools@4.0.8...4.0.9

jacoco/jacoco (org.jacoco:jacoco-maven-plugin)

v0.8.16: 0.8.16

Compare Source

New Features

  • JaCoCo now officially supports Java 27 (GitHub #​2287).
  • Experimental support for Java 28 class files (GitHub #​2170, #​2189).
  • To instrument classes loaded by the platform class loader, introduced in JDK 9 by JEP 261, the agent option inclbootstrapclasses=true is required (GitHub #​2155).

Non-functional Changes

v0.8.15: 0.8.15

Compare Source

New Features

  • JaCoCo now officially supports Java 26 (GitHub #​2076).
  • Experimental support for Java 27 class files (GitHub #​2004).
  • Compatibility methods generated by Kotlin compiler for functions defined in interfaces are filtered out during generation of report (GitHub #​1905).
  • Compatibility methods generated by Kotlin compiler for exposed boxed inline value classes (JvmExposeBoxed annotation) are filtered out during generation of report (GitHub #​1944).
  • Methods generated by the Kotlin compiler for functions with JvmStatic annotation are filtered out during generation of report (GitHub #​2097).
  • Improved filtering of bytecode generated by Kotlin compiler for when expressions and statements with kotlin.String subject where first branch condition contains string with largest hash (GitHub #​2098).
  • Part of bytecode that javac versions from 24 to 26 generate for switch statements and expressions with selector expression of type java.lang.String inside lambdas is filtered out during generation of report (GitHub #​2023).
  • Improved performance of Kotlin files analysis by parsing SMAPs only once per class (GitHub #​2114).
  • For better performance agent output methods tcpclient and tcpserver use BufferedOutputStream to write execution data to socket. Maven plugin, Ant tasks, CLI, API usage examples, and ExecDumpClient API use BufferedInputStream to read execution data from socket. Third-party integrations should do the same to benefit from this change in agent (GitHub #​2089).

Fixed bugs

  • Fixed processing of Kotlin SMAP in synthetic classes (GitHub #​1985).
  • Multiple JaCoCo runtimes within one JVM writing to the same output file should not cause data corruption when running on JDK versions from 6 to 10 affected by JDK-8166253 (GitHub #​2065, #​2074).
  • For better performance agent writes to output file via BufferedOutputStream, this fixes regression introduced in version 0.6.2 (GitHub #​2073).
  • Fixed NullPointerException when JaCoCo agent is loaded by non system class loader, for example when loaded by JBoss Modules (GitHub #​1651).

Non-functional Changes

  • JaCoCo now depends on ASM 9.10.1 (GitHub #​2134).

v0.8.14: 0.8.14

Compare Source

New Features

  • JaCoCo now officially supports Java 25 (GitHub #​1950).
  • Experimental support for Java 26 class files (GitHub #​1870).
  • Branches added by the Kotlin compiler for default argument number 33 or higher are filtered out during generation of report (GitHub #​1655).
  • Part of bytecode generated by the Kotlin compiler for elvis operator that follows safe call operator is filtered out during generation of report (GitHub #​1814, #​1954).
  • Part of bytecode generated by the Kotlin compiler for more cases of chained safe call operators is filtered out during generation of report (GitHub #​1956).
  • Part of bytecode generated by the Kotlin compiler for invocations of suspendCoroutineUninterceptedOrReturn intrinsic is filtered out during generation of report (GitHub #​1929).
  • Part of bytecode generated by the Kotlin compiler for suspending lambdas with parameters is filtered out during generation of report (GitHub #​1945).
  • Part of bytecode generated by the Kotlin compiler for suspending functions and lambdas with suspension points that return inline value class is filtered out during generation of report (GitHub #​1871).
  • Part of bytecode generated by the Kotlin Compose compiler plugin for pausable composition is filtered out during generation of report (GitHub #​1911).
  • Methods generated by the Kotlin serialization compiler plugin are filtered out (GitHub #​1885, #​1970, #​1971).

Fixed bugs

  • Fixed handling of implicit else clause of when with String subject in Kotlin (GitHub #​1813, #​1940).
  • Fixed handling of implicit default clause of switch by String in Java when compiled by ECJ (GitHub #​1813, #​1940).
    Fixed handling of exceptions in chains of safe call operators in Kotlin (GitHub #​1819).

Non-functional Changes

  • JaCoCo now depends on ASM 9.9 (GitHub #​1965).

v0.8.13: 0.8.13

Compare Source

New Features

  • JaCoCo now officially supports Java 23 and Java 24 (GitHub #​1757, #​1631, #​1867).
  • Experimental support for Java 25 class files (GitHub #​1807).
  • Calculation of line coverage for Kotlin inline functions (GitHub #​1670).
  • Calculation of line coverage for Kotlin inline functions with reified type parameter (GitHub #​1670, #​1700).
  • Calculation of coverage for Kotlin JvmSynthetic functions (GitHub #​1700).
  • Part of bytecode generated by the Kotlin Compose compiler plugin is filtered out during generation of report (GitHub #​1616).
  • Part of bytecode generated by the Kotlin compiler for inline value classes is filtered out during generation of report (GitHub #​1475).
  • Part of bytecode generated by the Kotlin compiler for suspending lambdas without suspension points is filtered out during generation of report (GitHub #​1283).
  • Part of bytecode generated by the Kotlin compiler for when expressions and statements with nullable enum subject is filtered out during generation of report (GitHub #​1774).
  • Part of bytecode generated by the Kotlin compiler for when expressions and statements with nullable String subject is filtered out during generation of report (GitHub #​1769).
  • Part of bytecode generated by the Kotlin compiler for chains of safe call operators is filtered out during generation of report (GitHub #​1810, #​1818).
  • Method getEntries generated by the Kotlin compiler for enum classes is filtered out during generation of report (GitHub #​1625).
  • Methods generated by the Kotlin compiler for constructors and functions with JvmOverloads annotation are filtered out (GitHub #​1768).

Fixed bugs

  • Fixed interpretation of Kotlin SMAP (GitHub #​1525).
  • File extensions are preserved in HTML report in case of clashes of normalized file names (GitHub #​1660).

Non-functional Changes

  • JaCoCo build now uses Maven Wrapper and requires at least Maven 3.9.9 (GitHub #​1708, #​1707, #​1681).
  • JaCoCo now depends on ASM 9.8 (GitHub #​1862).
  • More context information when IllegalArgumentException occurs during reading of zip file (GitHub #​1833).
locationtech/proj4j (org.locationtech.proj4j:proj4j-epsg)

v1.4.3

Compare Source

Added
  • JPMS Automatic-Module-Name to the core and epsg JAR manifests #​129

v1.4.2

Compare Source

Fixed
  • Transformation one projection to another in one step should not skip the datum shift #​128
  • GRS80 should be recognized as a WGS84 transformation type #​127
Added
  • JPMS Automatic-Module-Name to JAR manifest #​123

v1.4.1

Compare Source

Fixed
  • External GridDefinition read fix #​121
jakartaee/jaxb-api (jakarta.xml.bind:jakarta.xml.bind-api)

v4.0.5: Jakarta XML Binding API 4.0.5

Compare Source

What's Changed

Full Changelog: jakartaee/jaxb-api@4.0.4...4.0.5

v4.0.4: Jakarta XML Binding API 4.0.4

Compare Source

What's Changed
New Contributors

Full Changelog: jakartaee/jaxb-api@4.0.3...4.0.4

v4.0.3: Jakarta XML Binding API 4.0.3

Compare Source

What's Changed
New Contributors

Full Changelog: jakartaee/jaxb-api@4.0.2...4.0.3

undertow-io/undertow (io.undertow:undertow-core)

v2.4.4.Final

Compare Source

v2.4.3.Final

Compare Source

v2.4.2.Final

Compare Source

v2.4.1.Final: v.2.4.1.Final

Compare Source

Release 2.4.1.Final
Full list of Jiras: view in Jira

Release notes - Undertow - 2.4.1.Final

Bug

UNDERTOW-2763 As per RFC9112 reason-phrase is optional in HTTP 1.1 responses

Enhancement

UNDERTOW-2759 Enable testing in JDK25

UNDERTOW-2767 [2.4.x] UndertowMessages at core uses the wrong message id for fixes in new parser

v2.4.0.Final: v.2.4.0.Final

Compare Source

Release 2.4.0.Final Fixes CVE-2026-28367 CVE-2026-28368 CVE-2026-28369
Full list of Jiras: view in Jira

Release notes - Undertow - 2.4.0.Final

Feature Request

UNDERTOW-1593 Track processing time of in flight requests

UNDERTOW-1748 provide a way to "comment" a line in predicate language

UNDERTOW-1870 Hard-coded timeout for asynchronous HTTP requests - add async context timeout undertow option

UNDERTOW-1880 Undertow should support HTTP/2 connection management, wrt GOAWAY frame

UNDERTOW-1881 Add a new exchange attribute for SSL/TLS protocol version

UNDERTOW-2010 Provide method to invalidate all paths in CachingResourceManager

UNDERTOW-2242 Add UndertowOptions.ALLOW_ID_LESS_MATRIX_PARAMETERS

UNDERTOW-2273 Exchange Attribute parser doesn't handle nested attributes

UNDERTOW-2301 HTTP/2 cannot be configured on a per-listener basis

UNDERTOW-2319 Move io.undertow.multipart.minsize property to UndertowOptions

UNDERTOW-2553 Add rewriteHostHeader to ModCluster

UNDERTOW-2580 Support SameSite and custom cookie attributes

UNDERTOW-2696 Allow PathHandler to check for registered prefixes

UNDERTOW-2706 Add UndertowOptions_WEB_SOCKETS_READ_TIMEOUT

Component Upgrade

UNDERTOW-2584 Upgrade JBoss Threads to 3.9.1

UNDERTOW-2644 Upgrade wildfly openssl to 2.2.5.Final

Enhancement

UNDERTOW-1901 Add multipart support methods to ManagedServlet and HttpServerExchange signatures

UNDERTOW-1904 HttpSessionImpl use exception driven control

UNDERTOW-2110 Allow line breaks in predicates

UNDERTOW-2231 Test Flakiness occurs for io.undertow.server.handlers.proxy.LoadBalancingProxyTestCase#testLoadSharedWithServerShutdown

UNDERTOW-2249 HttpClientConnection.sendRequest on a closed connection should result in a ClosedChannelException

UNDERTOW-2254 Include the HttpServerExchange in the HostSelector

UNDERTOW-2288 Ignore line breaks inside of predicate and handlers for better readability

UNDERTOW-2325 secure-cookie() handler doesn't pick up directly-added set-cookie headers

UNDERTOW-2335 Add an example of the PredicatesHandler and specifically the predicate handler parser

UNDERTOW-2404 Directory listing has no sort

UNDERTOW-2634 Add mime mappings for mp4, webm, flac, weba, csv and webp

UNDERTOW-2645 Remove uses of javax.security.cert

UNDERTOW-2660 Add RoutingHandler usage example

UNDERTOW-2714 Refactor Session.getSessionManager() -> SessionReference

UNDERTOW-2717 DirectyByteBufferDeallocator should avoid using ThreadLocal

UNDERTOW-2738 Move UndertowOptions to Cookies and clean up method signatures

Bug

UNDERTOW-1794 DefaultAccessLogReceiver violates Closeable contract

UNDERTOW-1874 ProxyForwardedTestCase and ProxyXForwardedTestCase should check results with DefaultServer.getDefaultServerAddress() instead of Socket.getLocalAddress()

UNDERTOW-2157 UndertowOutputStream.transferFrom appears to have a broken signature

UNDERTOW-2194 Cookie parsing/assembling does not work 100% correctly.

UNDERTOW-2269 Encode Query string on forward/include and properly handle merging

[UNDERTOW-23

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone America/Vancouver)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Thanks for the PR!

Deployments, as required, will be available below:

Please create PRs in draft mode. Mark as ready to enable:

After merge, new images are deployed in:

@renovate
fix(deps): update java dependencies to 4.0.16, 0.8.15, 1.4.3, 4.0.9, …
786b3a5 
…4.0.5, 5.14.4, 2.4.4.final, 3.21.0, 2.9.1, 1.14.1, 2.22.0, 4.8.199, 21.23.0.0, 1.18.48, 1.6.3, 3.16.0
@renovate renovate Bot changed the title fix(deps): update java dependencies to 4.0.16, 0.8.15, 1.4.3, 4.0.9, 4.0.5, 5.14.4, 2.4.4.final, 3.21.0, 2.9.1, 1.14.1, 2.22.0, 4.8.199, 21.23.0.0, 1.18.48, 1.6.3, 3.16.0 fix(deps): update java dependencies to 4.0.16, 0.8.15, 1.4.3, 4.0.9, 4.0.5, 5.14.4, 2.4.4.final, 3.21.0, 2.10.0, 1.14.1, 2.22.0, 4.8.199, 21.23.0.0, 1.18.48, 1.6.3, 3.16.0 Nov 1, 2026
@renovate renovate Bot changed the title fix(deps): update java dependencies to 4.0.16, 0.8.15, 1.4.3, 4.0.9, 4.0.5, 5.14.4, 2.4.4.final, 3.21.0, 2.10.0, 1.14.1, 2.22.0, 4.8.199, 21.23.0.0, 1.18.48, 1.6.3, 3.16.0 fix(deps): update java dependencies to 4.0.16, 0.8.16, 1.4.3, 4.0.9, 4.0.5, 5.14.4, 2.4.4.final, 3.21.0, 2.10.0, 1.14.1, 2.22.0, 4.8.199, 21.23.0.0, 1.18.48, 1.6.3, 3.16.0 Nov 2, 2026
@renovate renovate Bot changed the title fix(deps): update java dependencies to 4.0.16, 0.8.16, 1.4.3, 4.0.9, 4.0.5, 5.14.4, 2.4.4.final, 3.21.0, 2.10.0, 1.14.1, 2.22.0, 4.8.199, 21.23.0.0, 1.18.48, 1.6.3, 3.16.0 fix(deps): update java dependencies to 4.0.16, 0.8.16, 1.4.3, 4.0.9, 4.0.5, 5.14.4, 2.4.4.final, 3.21.0, 2.10.0, 1.14.1, 2.22.0, 4.8.199, 21.24.0.0, 1.18.48, 1.6.3, 3.16.0 Nov 5, 2026
@renovate renovate Bot changed the title fix(deps): update java dependencies to 4.0.16, 0.8.16, 1.4.3, 4.0.9, 4.0.5, 5.14.4, 2.4.4.final, 3.21.0, 2.10.0, 1.14.1, 2.22.0, 4.8.199, 21.24.0.0, 1.18.48, 1.6.3, 3.16.0 fix(deps): update java dependencies to 4.0.16, 0.8.16, 1.4.3, 4.0.9, 4.0.5, 5.14.4, 2.4.4.final, 3.21.0, 2.10.0, 1.14.1, 2.22.0, 4.8.199, 33.8.0, 21.24.0.0, 1.18.48, 1.6.3, 3.16.0 Nov 9, 2026

This branch had an error being deployed

1 failed deployment
dev — 786b3a50 Deployed Oct 31, 2026 by renovate[bot] via Deploys (130) / Deploy (backend) #116
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@renovate-approve renovate-approve[bot] renovate-approve[bot] approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants