build(deps): bump the maven-dependencies group across 1 directory with 9 updates by dependabot[bot] · Pull Request #4972 · kubernetes-client/java

dependabot · 2026-11-02T02:03:21Z

Bumps the maven-dependencies group with 9 updates in the / directory:

Package	From	To
software.amazon.awssdk:sts	`2.57.3`	`2.57.7`
software.amazon.awssdk:auth	`2.57.3`	`2.57.7`
software.amazon.awssdk:http-auth-aws	`2.57.3`	`2.57.7`
software.amazon.awssdk:http-auth-spi	`2.57.3`	`2.57.7`
software.amazon.awssdk:http-client-spi	`2.57.3`	`2.57.7`
software.amazon.awssdk:utils	`2.57.3`	`2.57.7`
software.amazon.awssdk:auth	`2.57.3`	`2.57.7`
software.amazon.awssdk:http-auth-aws	`2.57.3`	`2.57.7`
software.amazon.awssdk:http-auth-spi	`2.57.3`	`2.57.7`
software.amazon.awssdk:http-client-spi	`2.57.3`	`2.57.7`
software.amazon.awssdk:utils	`2.57.3`	`2.57.7`
com.google.auth:google-auth-library-oauth2-http	`1.54.0`	`1.55.0`
org.jacoco:jacoco-maven-plugin	`0.8.15`	`0.8.16`
org.apache.maven.plugins:maven-enforcer-plugin	`3.6.3`	`3.7.0`

Updates software.amazon.awssdk:sts from 2.57.3 to 2.57.7

Updates software.amazon.awssdk:auth from 2.57.3 to 2.57.7

Updates software.amazon.awssdk:http-auth-aws from 2.57.3 to 2.57.7

Updates software.amazon.awssdk:http-auth-spi from 2.57.3 to 2.57.7

Updates software.amazon.awssdk:http-client-spi from 2.57.3 to 2.57.7

Updates software.amazon.awssdk:utils from 2.57.3 to 2.57.7

Updates software.amazon.awssdk:auth from 2.57.3 to 2.57.7

Updates software.amazon.awssdk:http-auth-aws from 2.57.3 to 2.57.7

Updates software.amazon.awssdk:http-auth-spi from 2.57.3 to 2.57.7

Updates software.amazon.awssdk:http-client-spi from 2.57.3 to 2.57.7

Updates software.amazon.awssdk:utils from 2.57.3 to 2.57.7

Updates com.google.auth:google-auth-library-oauth2-http from 1.54.0 to 1.55.0

Updates org.jacoco:jacoco-maven-plugin from 0.8.15 to 0.8.16

Release notes

Sourced from org.jacoco:jacoco-maven-plugin's releases.

0.8.16

New Features

JaCoCo now officially supports Java 27 (GitHub #2287).

Experimental support for Java 28 class files (GitHub #2170, #2189).

To instrument classes loaded by the platform class loader, introduced in JDK 9 by JEP 261, the agent option inclbootstrapclasses=true is required (GitHub #2155).

Non-functional Changes

JaCoCo now depends on ASM 9.11.1 (GitHub #2299, #2304).

Commits

466838a Prepare release 0.8.16
64d0ef7 Upgrade ASM to 9.11.1 (#2304)
fdaaab7 Upgrade ASM to 9.11 (#2299)
d2571ae Upgrade Kotlin to 2.4.21 (#2302)
2f76394 Improve Renovate commit messages and PR titles (#2301)
e9f2936 Use Ubuntu 26.04 (#2291)
4ffe9f0 Upgrade actions/upload-artifact to 7.0.2 (#2295)
aaede90 Upgrade Maven to 3.10.0 (#2292)
f638499 Enable comment-based updates in pom.xml and html files (#2294)
2e115bb Happy birthday Java 27! (#2287)
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-enforcer-plugin from 3.6.3 to 3.7.0

Release notes

Sourced from org.apache.maven.plugins:maven-enforcer-plugin's releases.

3.7.0

⚠️ Deprecated

Name enforcer 4.0.0 as the release that removes the legacy rule API (#1047) @slachiewicz

Deprecate the evaluateBeanshell rule (#1034) @slachiewicz

🚀 New features and improvements

Improve RequireUpperBoundDeps error message (#1059) @Sambuddha-Jana

[MENFORCER-433] - Add banPropertyPrefix rule to ban Maven properties by configured prefixes (#1039) @juliojgd

Improve RequireUpperBoundDeps error message (#1022) @dhruv9b

[ENFORCER-939] - Support enforcer.skip without a POM (#1021) @dhruv9b

🐛 Bug Fixes

Fix RequireUpperBoundDeps with test-scope mediation (#1064) @efegokdemir

Fix EnforcerRuleCache concurrency across plugin realms (#1057) @efegokdemir

Resolve plugins on copies of the model plugins (#1046) @slachiewicz

[MENFORCER-517] - RequireReleaseDeps checks now also for optional dependencies (#1025) @schwarfl

fix: avoid misleading legacy warning for unknown rules (#1037) @efegokdemir

requireFilesExist should accept a symbolic link (#1031) @slawekjaranowski

Fix/916 require same versions for managed report plugins (#1024) @dhruv9b

fix: correct enforceBytecodeVersion excludes filtering (#990) @w3lld1

Fix: support custom output for 9 enforcer rules that ignored getMessage() (#1004) @btpka3

RequireFilesExist should accept a file reached through .. (#977) (#1011) @AzazelSensei

📝 Documentation updates

Deprecate the evaluateBeanshell rule (#1034) @slachiewicz

javadoc grammar (#1013) @elharo

Restore the common wording on the download page (#1008) @slachiewicz

Use <a id> rather than <a name> for the FAQ anchors (#1010) @slachiewicz

Convert the FAQ from FML to Markdown (#1009) @slachiewicz

Remove obsolete note, clean up typos (#1001) @scordio

Add enforceBytecodeVersion to rules index (#983) @omribz156

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#989) @potiuk

👻 Maintenance

Ignore SLF4J 2.x in Dependabot (#1062) @slachiewicz

Remove redundant rat configuration (#1061) @slawekjaranowski

Fix ATR project name (#1060) @slawekjaranowski

Use push for PR Automation (#1058) @slawekjaranowski

Use workflow_run for PR check (#1056) @slawekjaranowski

Add project metadata for ATR (#1044) @slawekjaranowski

Use ReaderInputStream builder in RequireTextFileChecksum (#1052) @slawekjaranowski

Use Resolver RemoteRepository in BannedRepositories (#1051) @slawekjaranowski

Add PR check workflow (#1053) @slawekjaranowski

Replace plexus-utils StringUtils with commons-lang3 in enforcer-rules (#1048) @slachiewicz

... (truncated)

Commits

465ebf2 [maven-release-plugin] prepare release enforcer-3.7.0
b24b05c Fix test-scope mediation in RequireUpperBoundDeps
2b75dd3 Improve RequireUpperBoundDeps error message (#1059)
b519cd0 Fix EnforcerRuleCache concurrency across plugin realms (#1055)
f622234 Ignore SLF4J 2.x in Dependabot
5a9ebca Remove redundant rat configuration
e8512d0 Fix ATR project name
08605b2 Use push for PR Automation
fbe1ae5 Use workflow_run for PR check (#1056)
b1d59aa Bump commons-codec:commons-codec from 1.22.1 to 1.23.0
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…h 9 updates Bumps the maven-dependencies group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | software.amazon.awssdk:sts | `2.57.3` | `2.57.7` | | software.amazon.awssdk:auth | `2.57.3` | `2.57.7` | | software.amazon.awssdk:http-auth-aws | `2.57.3` | `2.57.7` | | software.amazon.awssdk:http-auth-spi | `2.57.3` | `2.57.7` | | software.amazon.awssdk:http-client-spi | `2.57.3` | `2.57.7` | | software.amazon.awssdk:utils | `2.57.3` | `2.57.7` | | software.amazon.awssdk:auth | `2.57.3` | `2.57.7` | | software.amazon.awssdk:http-auth-aws | `2.57.3` | `2.57.7` | | software.amazon.awssdk:http-auth-spi | `2.57.3` | `2.57.7` | | software.amazon.awssdk:http-client-spi | `2.57.3` | `2.57.7` | | software.amazon.awssdk:utils | `2.57.3` | `2.57.7` | | com.google.auth:google-auth-library-oauth2-http | `1.54.0` | `1.55.0` | | [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.15` | `0.8.16` | | [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.6.3` | `3.7.0` | Updates `software.amazon.awssdk:sts` from 2.57.3 to 2.57.7 Updates `software.amazon.awssdk:auth` from 2.57.3 to 2.57.7 Updates `software.amazon.awssdk:http-auth-aws` from 2.57.3 to 2.57.7 Updates `software.amazon.awssdk:http-auth-spi` from 2.57.3 to 2.57.7 Updates `software.amazon.awssdk:http-client-spi` from 2.57.3 to 2.57.7 Updates `software.amazon.awssdk:utils` from 2.57.3 to 2.57.7 Updates `software.amazon.awssdk:auth` from 2.57.3 to 2.57.7 Updates `software.amazon.awssdk:http-auth-aws` from 2.57.3 to 2.57.7 Updates `software.amazon.awssdk:http-auth-spi` from 2.57.3 to 2.57.7 Updates `software.amazon.awssdk:http-client-spi` from 2.57.3 to 2.57.7 Updates `software.amazon.awssdk:utils` from 2.57.3 to 2.57.7 Updates `com.google.auth:google-auth-library-oauth2-http` from 1.54.0 to 1.55.0 Updates `org.jacoco:jacoco-maven-plugin` from 0.8.15 to 0.8.16 - [Release notes](https://github.com/jacoco/jacoco/releases) - [Commits](jacoco/jacoco@v0.8.15...v0.8.16) Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.6.3 to 3.7.0 - [Release notes](https://github.com/apache/maven-enforcer/releases) - [Commits](apache/maven-enforcer@enforcer-3.6.3...enforcer-3.7.0) --- updated-dependencies: - dependency-name: software.amazon.awssdk:sts dependency-version: 2.57.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: software.amazon.awssdk:auth dependency-version: 2.57.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: software.amazon.awssdk:http-auth-aws dependency-version: 2.57.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: software.amazon.awssdk:http-auth-spi dependency-version: 2.57.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: software.amazon.awssdk:http-client-spi dependency-version: 2.57.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: software.amazon.awssdk:utils dependency-version: 2.57.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: software.amazon.awssdk:auth dependency-version: 2.57.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: software.amazon.awssdk:http-auth-aws dependency-version: 2.57.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: software.amazon.awssdk:http-auth-spi dependency-version: 2.57.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: software.amazon.awssdk:http-client-spi dependency-version: 2.57.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: software.amazon.awssdk:utils dependency-version: 2.57.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: com.google.auth:google-auth-library-oauth2-http dependency-version: 1.55.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-dependencies - dependency-name: org.jacoco:jacoco-maven-plugin dependency-version: 0.8.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: org.apache.maven.plugins:maven-enforcer-plugin dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

brendandburns · 2026-11-03T17:46:10Z

/lgtm
/approve

kubernetes-prow · 2026-11-03T17:47:38Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: brendandburns, dependabot[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

~~OWNERS~~ [brendandburns]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 2, 2026

kubernetes-prow Bot requested review from brendandburns and yue9944882 November 2, 2026 02:03

kubernetes-prow Bot added cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Nov 2, 2026

Sync Bazel dependencies for Dependabot update

3a17be0

kubernetes-prow Bot added size/L Denotes a PR that changes 100-499 lines, ignoring generated files. and removed size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Nov 2, 2026

kubernetes-prow Bot assigned brendandburns Nov 3, 2026

kubernetes-prow Bot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Nov 3, 2026

kubernetes-prow Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Nov 3, 2026

kubernetes-prow Bot merged commit 24bb6aa into master Nov 5, 2026
22 of 23 checks passed

dependabot Bot deleted the dependabot/maven/maven-dependencies-dc329f93f4 branch November 5, 2026 04:25

Navigation Menu

Repository navigation

build(deps): bump the maven-dependencies group across 1 directory with 9 updates - #4972

build(deps): bump the maven-dependencies group across 1 directory with 9 updates#4972
kubernetes-prow[bot] merged 2 commits into
masterfrom
dependabot/maven/maven-dependencies-dc329f93f4

dependabot Bot commented on behalf of github Nov 2, 2026 •

edited

Loading

Uh oh!

brendandburns commented Nov 3, 2026

Uh oh!

kubernetes-prow Bot commented Nov 3, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Nov 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

0.8.16

New Features

Non-functional Changes

3.7.0

⚠️ Deprecated

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

Uh oh!

brendandburns commented Nov 3, 2026

Uh oh!

kubernetes-prow Bot commented Nov 3, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Nov 2, 2026 •

edited

Loading