Skip to content

build(deps): bump the maven-minor-and-patch group in /openfeature-provider/java with 25 updates - #556

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/openfeature-provider/java/maven-minor-and-patch-16b39ffa0c
Open

build(deps): bump the maven-minor-and-patch group in /openfeature-provider/java with 25 updates#556
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/openfeature-provider/java/maven-minor-and-patch-16b39ffa0c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the maven-minor-and-patch group in /openfeature-provider/java with 25 updates:

Package From To
org.slf4j:slf4j-api 2.0.13 2.0.18
com.google.guava:guava 33.2.1-jre 33.7.1-jre
com.dylibso.chicory:wasm 1.4.0 1.7.5
io.grpc:grpc-api 1.75.0 1.83.1
io.grpc:grpc-protobuf 1.75.0 1.83.1
io.grpc:grpc-netty-shaded 1.75.0 1.83.1
io.grpc:grpc-stub 1.75.0 1.83.1
io.grpc:grpc-testing 1.75.0 1.83.1
ch.qos.logback:logback-classic 1.5.6 1.6.3
com.dylibso.chicory:runtime 1.4.0 1.7.5
org.mockito:mockito-core 5.12.0 5.23.0
net.bytebuddy:byte-buddy 1.17.6 1.18.12
org.awaitility:awaitility 4.2.0 4.3.0
org.apache.commons:commons-lang3 3.18.0 3.20.0
dev.openfeature:sdk 1.20.2 1.22.1
org.codehaus.mojo:build-helper-maven-plugin 3.5.0 3.6.1
com.dylibso.chicory:chicory-compiler-maven-plugin 1.4.0 1.7.5
org.apache.maven.plugins:maven-surefire-plugin 3.2.5 3.5.6
org.apache.maven.plugins:maven-failsafe-plugin 3.2.5 3.5.6
org.apache.maven.plugins:maven-source-plugin 3.3.0 3.4.0
org.apache.maven.plugins:maven-javadoc-plugin 3.6.0 3.12.0
org.sonatype.central:central-publishing-maven-plugin 0.8.0 0.11.0
com.spotify.fmt:fmt-maven-plugin 2.25 2.29
org.apache.maven.plugins:maven-dependency-plugin 3.8.1 3.11.0
org.apache.maven.plugins:maven-shade-plugin 3.6.0 3.6.2

Updates org.slf4j:slf4j-api from 2.0.13 to 2.0.18

Updates com.google.guava:guava from 33.2.1-jre to 33.7.1-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.7.1

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.1-jre</version>
  <!-- or, for Android: -->
  <version>33.7.1-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

Guava 33.7.1 removes the Multi-Release line from our jar manifest, fixing an issue under Java 9 and 10 that was introduced to guava-jre in version 33.7.0. Sorry for the trouble.

33.7.0

Newly introduced problem for Java 9 and Java 10 only

Guava 33.7.0 includes a Multi-Release line in its jar manifest, even though it is no longer a multi-release jar. This causes some problems with tools from Java 9 and Java 10. The issue is fixed in version 33.7.1. Sorry for the trouble.

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.0-jre</version>
  <!-- or, for Android: -->
</tr></table>

... (truncated)

Commits

Updates com.dylibso.chicory:wasm from 1.4.0 to 1.7.5

Release notes

Sourced from com.dylibso.chicory:wasm's releases.

1.7.5

No release notes provided.

1.7.3

No release notes provided.

1.7.2

No release notes provided.

1.7.0

No release notes provided.

1.6.1

No release notes provided.

1.6.0

No release notes provided.

1.5.3

No release notes provided.

1.5.2

What's Changed

... (truncated)

Commits
  • 181f617 Release version update 1.7.5
  • d9ff6a9 Increase release timeout (#1253)
  • 3d32ba1 Snapshot version update
  • 4469eb1 Release version update 1.7.4
  • 3b1d78a Extract codegen-common module to improve compile-time compiler DX (#1252)
  • 5f4915e Make Global and Table creation configurable in Instance (#1249)
  • 5fa487f Added separate class + function for (only) wasm module validation (#1250)
  • 0d402e9 chore(deps): bump gradle/actions from 5 to 6 (#1251)
  • b7a71bb Compile large WASM modules: call_indirect bridge splitting and try_table stac...
  • cfde471 chore(deps): bump com.diffplug.spotless:spotless-maven-plugin from 3.3.0 to 3...
  • Additional commits viewable in compare view

Updates io.grpc:grpc-api from 1.75.0 to 1.83.1

Release notes

Sourced from io.grpc:grpc-api's releases.

v1.83.1

gRPC Java 1.83.1 Release Notes

Improvements

  • netty: Fix client-initiated stream limit bypass in NettyServerHandler (#12942). Enforces the limit proactively at startup without waiting for SETTINGS_ACK
  • core: Coalesce Contiguous Small Buffers for ReadableBuffer (#12944)

v1.83.0

gRPC Java 1.83.0 Release Notes

API Changes

  • api: Turn on RFC 3986 parsing by default and update javadoc. (4456721328)
  • api: Add Grpc.newChannelBuilder accepting NameResolverRegistry (#11901) (2b86f8f42f). This allows users to explicitly provide a NameResolverRegistry during channel creation rather than relying on the global registry, offering better isolation and control over name resolution per-channel.

Behavior Changes

  • okhttp: enable TLS 1.3 for servers on Android (3018ce341c). v1.82.0 enabled TLS 1.3 for clients; this does the same for servers
  • xds: enable orca to lrs propagation by default (#12836) (1e85674a40) Enables xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports as per gRFC A85
  • xds: Use leaf cluster name for backend service label in metrics, instead of aggregate cluster name (#12882) (c8079eed98). This only has an effect when using aggregate clusters
  • xds: Hold parsed service config in CdsUpdate (3db3235ebd). Previously, modifications to LoadBalancerRegistry could cause failures in the LB tree
  • xds: Revert "xds: reuse connections to the control plane across channels" added in 1.81.0 (d49c0b15d8). If using xds heavily with many targets, then MAX_CONCURRENT_STREAMS to the control plane could be exceeded. This then prevents loading resources for new targets, which causes those channels to hang on name resolution. RPCs would see the nondescript "DEADLINE_EXCEEDED: Deadline Context was exceeded after Xs" or "DEADLINE_EXCEEDED: Deadline CallOptions was exceeded after Xs"

Improvements

  • api: Move attributes to the end of ResolvedAddresses.toString(), for better legibility (103bd4b852)
  • core: normalize service config number values (#12826) (663c505dbd) This updates default service config validation to accept numeric values represented as Number, not only Double. Common JSON parsers may deserialize integer-looking JSON values such as maxAttempts: 4 and backoffMultiplier: 2 as Integer, which previously caused defaultServiceConfig() to fail with IllegalArgumentException. The values are normalized to Double when copied into the validated service config, preserving the existing internal representation expected by the service config parsing code.
  • core: DEADLINE_EXCEEDED before initial name resolution completes will now mention “name_resolver” in the error description (56d2b25eb5). Previously there was not a hint as to what gRPC was delayed on when the deadline was exceeded.
  • netty: Reduce TcpMetrics log from INFO to FINE (4ec83df1eb). This removes unnecessary log noise
  • core: Enable child channel plugins (#12578) (89aef90d52). This introduces the ChildChannelConfigurer API to allow intercepting and customizing the configuration (such as injecting interceptors or modifying credentials) of child channels created dynamically by load balancers.

Dependencies

  • Upgrade to Netty 4.2.15 (66c6ab1da6). If you need Netty 4.1 support, please file an issue
  • Upgrade codegen plugin to C++ Protobuf 35.1 (#12876) (c886f0a06b)
  • Upgrade various dependencies (064272c61d):
    • gson to 2.14.0
    • guava to 33.6.0
    • cel-java to 0.13.0
    • protobuf-java to 3.25.9
    • error-prone-annotations to 2.50.0
    • opentelemetry to 1.63.0

Documentation

  • Document how to build with Bazel and introduce bazel support for building android and binder (#12811) (f94574eff7)

Thanks to

... (truncated)

Commits
  • 8f621c0 Bump version to 1.83.1
  • 2bafe5e Update README etc to reference 1.83.1
  • e1f2dbd netty: Fix client-initiated stream limit bypass in NettyServerHandler (v1.83....
  • ee8232f core: Coalesce Contiguous Small Buffers for ReadableBuffer (v1.83.x backport)...
  • b4ca099 Fix docker tagging failure in upload_artifacts by using stable tag name (#12922)
  • b4fb7f4 build: Allow downloading pkgconfiglite with empty checksum
  • 1fbfa86 Bump version to 1.83.1-SNAPSHOT
  • 8ab6e0a Bump version to 1.83.0
  • 33ad6a4 Update README etc to reference 1.83.0
  • 17d5bd6 Revert "enable child channel plugins (#12578)" (v1.83.x backport) (#12913)
  • Additional commits viewable in compare view

Updates io.grpc:grpc-protobuf from 1.75.0 to 1.83.1

Release notes

Sourced from io.grpc:grpc-protobuf's releases.

v1.83.1

gRPC Java 1.83.1 Release Notes

Improvements

  • netty: Fix client-initiated stream limit bypass in NettyServerHandler (#12942). Enforces the limit proactively at startup without waiting for SETTINGS_ACK
  • core: Coalesce Contiguous Small Buffers for ReadableBuffer (#12944)

v1.83.0

gRPC Java 1.83.0 Release Notes

API Changes

  • api: Turn on RFC 3986 parsing by default and update javadoc. (4456721328)
  • api: Add Grpc.newChannelBuilder accepting NameResolverRegistry (#11901) (2b86f8f42f). This allows users to explicitly provide a NameResolverRegistry during channel creation rather than relying on the global registry, offering better isolation and control over name resolution per-channel.

Behavior Changes

  • okhttp: enable TLS 1.3 for servers on Android (3018ce341c). v1.82.0 enabled TLS 1.3 for clients; this does the same for servers
  • xds: enable orca to lrs propagation by default (#12836) (1e85674a40) Enables xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports as per gRFC A85
  • xds: Use leaf cluster name for backend service label in metrics, instead of aggregate cluster name (#12882) (c8079eed98). This only has an effect when using aggregate clusters
  • xds: Hold parsed service config in CdsUpdate (3db3235ebd). Previously, modifications to LoadBalancerRegistry could cause failures in the LB tree
  • xds: Revert "xds: reuse connections to the control plane across channels" added in 1.81.0 (d49c0b15d8). If using xds heavily with many targets, then MAX_CONCURRENT_STREAMS to the control plane could be exceeded. This then prevents loading resources for new targets, which causes those channels to hang on name resolution. RPCs would see the nondescript "DEADLINE_EXCEEDED: Deadline Context was exceeded after Xs" or "DEADLINE_EXCEEDED: Deadline CallOptions was exceeded after Xs"

Improvements

  • api: Move attributes to the end of ResolvedAddresses.toString(), for better legibility (103bd4b852)
  • core: normalize service config number values (#12826) (663c505dbd) This updates default service config validation to accept numeric values represented as Number, not only Double. Common JSON parsers may deserialize integer-looking JSON values such as maxAttempts: 4 and backoffMultiplier: 2 as Integer, which previously caused defaultServiceConfig() to fail with IllegalArgumentException. The values are normalized to Double when copied into the validated service config, preserving the existing internal representation expected by the service config parsing code.
  • core: DEADLINE_EXCEEDED before initial name resolution completes will now mention “name_resolver” in the error description (56d2b25eb5). Previously there was not a hint as to what gRPC was delayed on when the deadline was exceeded.
  • netty: Reduce TcpMetrics log from INFO to FINE (4ec83df1eb). This removes unnecessary log noise
  • core: Enable child channel plugins (#12578) (89aef90d52). This introduces the ChildChannelConfigurer API to allow intercepting and customizing the configuration (such as injecting interceptors or modifying credentials) of child channels created dynamically by load balancers.

Dependencies

  • Upgrade to Netty 4.2.15 (66c6ab1da6). If you need Netty 4.1 support, please file an issue
  • Upgrade codegen plugin to C++ Protobuf 35.1 (#12876) (c886f0a06b)
  • Upgrade various dependencies (064272c61d):
    • gson to 2.14.0
    • guava to 33.6.0
    • cel-java to 0.13.0
    • protobuf-java to 3.25.9
    • error-prone-annotations to 2.50.0
    • opentelemetry to 1.63.0

Documentation

  • Document how to build with Bazel and introduce bazel support for building android and binder (#12811) (f94574eff7)

Thanks to

... (truncated)

Commits
  • 8f621c0 Bump version to 1.83.1
  • 2bafe5e Update README etc to reference 1.83.1
  • e1f2dbd netty: Fix client-initiated stream limit bypass in NettyServerHandler (v1.83....
  • ee8232f core: Coalesce Contiguous Small Buffers for ReadableBuffer (v1.83.x backport)...
  • b4ca099 Fix docker tagging failure in upload_artifacts by using stable tag name (#12922)
  • b4fb7f4 build: Allow downloading pkgconfiglite with empty checksum
  • 1fbfa86 Bump version to 1.83.1-SNAPSHOT
  • 8ab6e0a Bump version to 1.83.0
  • 33ad6a4 Update README etc to reference 1.83.0
  • 17d5bd6 Revert "enable child channel plugins (#12578)" (v1.83.x backport) (#12913)
  • Additional commits viewable in compare view

Updates io.grpc:grpc-netty-shaded from 1.75.0 to 1.83.1

Release notes

Sourced from io.grpc:grpc-netty-shaded's releases.

v1.83.1

gRPC Java 1.83.1 Release Notes

Improvements

  • netty: Fix client-initiated stream limit bypass in NettyServerHandler (#12942). Enforces the limit proactively at startup without waiting for SETTINGS_ACK
  • core: Coalesce Contiguous Small Buffers for ReadableBuffer (#12944)

v1.83.0

gRPC Java 1.83.0 Release Notes

API Changes

  • api: Turn on RFC 3986 parsing by default and update javadoc. (4456721328)
  • api: Add Grpc.newChannelBuilder accepting NameResolverRegistry (#11901) (2b86f8f42f). This allows users to explicitly provide a NameResolverRegistry during channel creation rather than relying on the global registry, offering better isolation and control over name resolution per-channel.

Behavior Changes

  • okhttp: enable TLS 1.3 for servers on Android (3018ce341c). v1.82.0 enabled TLS 1.3 for clients; this does the same for servers
  • xds: enable orca to lrs propagation by default (#12836) (1e85674a40) Enables xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports as per gRFC A85
  • xds: Use leaf cluster name for backend service label in metrics, instead of aggregate cluster name (#12882) (c8079eed98). This only has an effect when using aggregate clusters
  • xds: Hold parsed service config in CdsUpdate (3db3235ebd). Previously, modifications to LoadBalancerRegistry could cause failures in the LB tree
  • xds: Revert "xds: reuse connections to the control plane across channels" added in 1.81.0 (d49c0b15d8). If using xds heavily with many targets, then MAX_CONCURRENT_STREAMS to the control plane could be exceeded. This then prevents loading resources for new targets, which causes those channels to hang on name resolution. RPCs would see the nondescript "DEADLINE_EXCEEDED: Deadline Context was exceeded after Xs" or "DEADLINE_EXCEEDED: Deadline CallOptions was exceeded after Xs"

Improvements

  • api: Move attributes to the end of ResolvedAddresses.toString(), for better legibility (103bd4b852)
  • core: normalize service config number values (#12826) (663c505dbd) This updates default service config validation to accept numeric values represented as Number, not only Double. Common JSON parsers may deserialize integer-looking JSON values such as maxAttempts: 4 and backoffMultiplier: 2 as Integer, which previously caused defaultServiceConfig() to fail with IllegalArgumentException. The values are normalized to Double when copied into the validated service config, preserving the existing internal representation expected by the service config parsing code.
  • core: DEADLINE_EXCEEDED before initial name resolution completes will now mention “name_resolver” in the error description (56d2b25eb5). Previously there was not a hint as to what gRPC was delayed on when the deadline was exceeded.
  • netty: Reduce TcpMetrics log from INFO to FINE (4ec83df1eb). This removes unnecessary log noise
  • core: Enable child channel plugins (#12578) (89aef90d52). This introduces the ChildChannelConfigurer API to allow intercepting and customizing the configuration (such as injecting interceptors or modifying credentials) of child channels created dynamically by load balancers.

Dependencies

  • Upgrade to Netty 4.2.15 (66c6ab1da6). If you need Netty 4.1 support, please file an issue
  • Upgrade codegen plugin to C++ Protobuf 35.1 (#12876) (c886f0a06b)
  • Upgrade various dependencies (064272c61d):
    • gson to 2.14.0
    • guava to 33.6.0
    • cel-java to 0.13.0
    • protobuf-java to 3.25.9
    • error-prone-annotations to 2.50.0
    • opentelemetry to 1.63.0

Documentation

  • Document how to build with Bazel and introduce bazel support for building android and binder (#12811) (f94574eff7)

Thanks to

... (truncated)

Commits
  • 8f621c0 Bump version to 1.83.1
  • 2bafe5e Update README etc to reference 1.83.1
  • e1f2dbd netty: Fix client-initiated stream limit bypass in NettyServerHandler (v1.83....
  • ee8232f core: Coalesce Contiguous Small Buffers for ReadableBuffer (v1.83.x backport)...
  • b4ca099 Fix docker tagging failure in upload_artifacts by using stable tag name (#12922)
  • b4fb7f4 build: Allow downloading pkgconfiglite with empty checksum
  • 1fbfa86 Bump version to 1.83.1-SNAPSHOT
  • 8ab6e0a Bump version to 1.83.0
  • 33ad6a4 Update README etc to reference 1.83.0
  • 17d5bd6 Revert "enable child channel plugins (#12578)" (v1.83.x backport) (#12913)
  • Additional commits viewable in compare view

Updates io.grpc:grpc-stub from 1.75.0 to 1.83.1

Release notes

Sourced from io.grpc:grpc-stub's releases.

v1.83.1

gRPC Java 1.83.1 Release Notes

Improvements

  • netty: Fix client-initiated stream limit bypass in NettyServerHandler (#12942). Enforces the limit proactively at startup without waiting for SETTINGS_ACK
  • core: Coalesce Contiguous Small Buffers for ReadableBuffer (#12944)

v1.83.0

gRPC Java 1.83.0 Release Notes

API Changes

  • api: Turn on RFC 3986 parsing by default and update javadoc. (4456721328)
  • api: Add Grpc.newChannelBuilder accepting NameResolverRegistry (#11901) (2b86f8f42f). This allows users to explicitly provide a NameResolverRegistry during channel creation rather than relying on the global registry, offering better isolation and control over name resolution per-channel.

Behavior Changes

  • okhttp: enable TLS 1.3 for servers on Android (3018ce341c). v1.82.0 enabled TLS 1.3 for clients; this does the same for servers
  • xds: enable orca to lrs propagation by default (#12836) (1e85674a40) Enables xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports as per gRFC A85
  • xds: Use leaf cluster name for backend service label in metrics, instead of aggregate cluster name (#12882) (c8079eed98). This only has an effect when using aggregate clusters
  • xds: Hold parsed service config in CdsUpdate (3db3235ebd). Previously, modifications to LoadBalancerRegistry could cause failures in the LB tree
  • xds: Revert "xds: reuse connections to the control plane across channels" added in 1.81.0 (d49c0b15d8). If using xds heavily with many targets, then MAX_CONCURRENT_STREAMS to the control plane could be exceeded. This then prevents loading resources for new targets, which causes those channels to hang on name resolution. RPCs would see the nondescript "DEADLINE_EXCEEDED: Deadline Context was exceeded after Xs" or "DEADLINE_EXCEEDED: Deadline CallOptions was exceeded after Xs"

Improvements

  • api: Move attributes to the end of ResolvedAddresses.toString(), for better legibility (103bd4b852)
  • core: normalize service config number values (#12826) (663c505dbd) This updates default service config validation to accept numeric values represented as Number, not only Double. Common JSON parsers may deserialize integer-looking JSON values such as maxAttempts: 4 and backoffMultiplier: 2 as Integer, which previously caused defaultServiceConfig() to fail with IllegalArgumentException. The values are normalized to Double when copied into the validated service config, preserving the existing internal representation expected by the service config parsing code.
  • core: DEADLINE_EXCEEDED before initial name resolution completes will now mention “name_resolver” in the error description (56d2b25eb5). Previously there was not a hint as to what gRPC was delayed on when the deadline was exceeded.
  • netty: Reduce TcpMetrics log from INFO to FINE (4ec83df1eb). This removes unnecessary log noise
  • core: Enable child channel plugins (#12578) (89aef90d52). This introduces the ChildChannelConfigurer API to allow intercepting and customizing the configuration (such as injecting interceptors or modifying credentials) of child channels created dynamically by load balancers.

Dependencies

  • Upgrade to Netty 4.2.15 (66c6ab1da6). If you need Netty 4.1 support, please file an issue
  • Upgrade codegen plugin to C++ Protobuf 35.1 (#12876) (c886f0a06b)
  • Upgrade various dependencies (064272c61d):
    • gson to 2.14.0
    • guava to 33.6.0
    • cel-java to 0.13.0
    • protobuf-java to 3.25.9
    • error-prone-annotations to 2.50.0
    • opentelemetry to 1.63.0

Documentation

  • Document how to build with Bazel and introduce bazel support for building android and binder (#12811) (f94574eff7)

Thanks to

... (truncated)

Commits
  • 8f621c0 Bump version to 1.83.1
  • 2bafe5e Update README etc to reference 1.83.1
  • e1f2dbd netty: Fix client-initiated stream limit bypass in NettyServerHandler (v1.83....
  • ee8232f core: Coalesce Contiguous Small Buffers for ReadableBuffer (v1.83.x backport)...
  • b4ca099 Fix docker tagging failure in upload_artifacts by using stable tag name (#12922)
  • b4fb7f4 build: Allow downloading pkgconfiglite with empty checksum
  • 1fbfa86 Bump version to 1.83.1-SNAPSHOT
  • 8ab6e0a Bump version to 1.83.0
  • 33ad6a4 Update README etc to reference 1.83.0
  • 17d5bd6 Revert "enable child channel plugins (#12578)" (v1.83.x backport) (#12913)
  • Additional commits viewable in compare view

Updates io.grpc:grpc-testing from 1.75.0 to 1.83.1

Release notes

Sourced from io.grpc:grpc-testing's releases.

v1.83.1

gRPC Java 1.83.1 Release Notes

Improvements

  • netty: Fix client-initiated stream limit bypass in NettyServerHandler (#12942). Enforces the limit proactively at startup without waiting for SETTINGS_ACK
  • core: Coalesce Contiguous Small Buffers for ReadableBuffer (#12944)

v1.83.0

gRPC Java 1.83.0 Release Notes

API Changes

  • api: Turn on RFC 3986 parsing by default and update javadoc. (4456721328)
  • api: Add Grpc.newChannelBuilder accepting NameResolverRegistry (#11901) (2b86f8f42f). This allows users to explicitly provide a NameResolverRegistry during channel creation rather than relying on the global registry, offering better isolation and control over name resolution per-channel.

Behavior Changes

  • okhttp: enable TLS 1.3 for servers on Android (3018ce341c). v1.82.0 enabled TLS 1.3 for clients; this does the same for servers
  • xds: enable orca to lrs propagation by default (#12836) (1e85674a40) Enables xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports as per gRFC A85
  • xds: Use leaf cluster name for backend service label in metrics, instead of aggregate cluster name (#12882) (c8079eed98). This only has an effect when using aggregate clusters
  • xds: Hold parsed service config in CdsUpdate (3db3235ebd). Previously, modifications to LoadBalancerRegistry could cause failures in the LB tree
  • xds: Revert "xds: reuse connections to the control plane across channels" added in 1.81.0 (d49c0b15d8). If using xds heavily with many targets, then MAX_CONCURRENT_STREAMS to the control plane could be exceeded. This then prevents loading resources for new targets, which causes those channels to hang on name resolution. RPCs would see the nondescript "DEADLINE_EXCEEDED: Deadline Context was exceeded after Xs" or "DEADLINE_EXCEEDED: Deadline CallOptions was exceeded after Xs"

Improvements

  • api: Move attributes to the end of ResolvedAddresses.toString(), for better legibility (103bd4b852)
  • core: normalize service config number values (#12826) (663c505dbd) This updates default service config validation to accept numeric values represented as Number, not only Double. Common JSON parsers may deserialize integer-looking JSON values such as maxAttempts: 4 and backoffMultiplier: 2 as Integer, which previously caused defaultServiceConfig() to fail with IllegalArgumentException. The values are normalized to Double when copied into the validated service config, preserving the existing internal representation expected by the service config parsing code.
  • core: DEADLINE_EXCEEDED before initial name resolution completes will now mention “name_resolver” in the error description (56d2b25eb5). Previously there was not a hint as to what gRPC was delayed on when the deadline was exceeded.
  • netty: Reduce TcpMetrics log from INFO to FINE (4ec83df1eb). This removes unnecessary log noise
  • core: Enable child channel plugins (#12578) (89aef90d52). This introduces the ChildChannelConfigurer API to allow intercepting and customizing the configuration (such as injecting interceptors or modifying credentials) of child channels created dynamically by load balancers.

Dependencies

  • Upgrade to Netty 4.2.15 (66c6ab1da6). If you need Netty 4.1 support, please file an issue
  • Upgrade codegen plugin to C++ Protobuf 35.1 (#12876) (c886f0a06b)
  • Upgrade various dependencies (064272c61d):
    • gson to 2.14.0
    • guava to 33.6.0
    • cel-java to 0.13.0
    • protobuf-java to 3.25.9
    • error-prone-annotations to 2.50.0
    • opentelemetry to 1.63.0

Documentation

  • Document how to build with Bazel and introduce bazel support for building android and binder (#12811) (f94574eff7)

Thanks to

... (truncated)

Commits
  • 8f621c0 Bump version to 1.83.1
  • 2bafe5e Update README etc to reference 1.83.1
  • e1f2dbd netty: Fix client-initiated stream limit bypass in NettyServerHandler (v1.83....
  • ee8232f core: Coalesce Contiguous Small Buffers for ReadableBuffer (v1.83.x backport)...
  • b4ca099 Fix docker tagging failure in upload_artifacts by using stable tag name (#12922)
  • b4fb7f4 build: Allow downloading pkgconfiglite with empty checksum
  • 1fbfa86 Bump version to 1.83.1-SNAPSHOT
  • 8ab6e0a Bump version to 1.83.0
  • 33ad6a4 Update README etc to reference 1.83.0
  • 17d5bd6 Revert "enable child channel plugins (#12578)" (v1.83.x backport) (#12913)
  • Additional commits viewable in compare view

Updates io.grpc:grpc-protobuf from 1.75.0 to 1.83.1

Release notes

Sourced from io.grpc:grpc-protobuf's releases.

v1.83.1

gRPC Java 1.83.1 Release Notes

Improvements

  • netty: Fix client-initiated stream limit bypass in NettyServerHandler (#12942). Enforces the limit proactively at startup without waiting for SETTINGS_ACK
  • core: Coalesce Contiguous Small Buffers for ReadableBuffer (#12944)

v1.83.0

gRPC Java 1.83.0 Release Notes

API Changes

  • api: Turn on RFC 3986 parsing by default and update javadoc. (4456721328)
  • api: Add Grpc.newChannelBuilder accepting NameResolverRegistry (#11901) (2b86f8f42f). This allows users to explicitly provide a NameResolverRegistry during channel creation rather than relying on the global registry, offering better isolation and control over name resolution per-channel.

Behavior Changes

  • okhttp: enable TLS 1.3 for servers on Android (3018ce341c). v1.82.0 enabled TLS 1.3 for clients; this does the same for servers
  • xds: enable orca to lrs propagation by default (#12836) (1e85674a40) Enables xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports as per gRFC A85
  • xds: Use leaf cluster name for backend service label in metrics, instead of aggregate cluster name (#12882) (c8079eed98). This only has an effect when using aggregate clusters
  • xds: Hold parsed service config in CdsUpdate (3db3235ebd). Previously, modifications to LoadBalancerRegistry could cause failures in the LB tree
  • xds: Revert "xds: reuse connections to the control plane across channels" added in 1.81.0 (d49c0b15d8). If using xds heavily with many targets, then MAX_CONCURRENT_STREAMS to the control plane could be exceeded. This then prevents loading resources for new targets, which causes those channels to hang on name resolution. RPCs would see the nondescript "DEADLINE_EXCEEDED: Deadline Context was exceeded after Xs" or "DEADLINE_EXCEEDED: Deadline CallOptions was exceeded after Xs"

Improvements

  • api: Move attributes to the end of ResolvedAddresses.toString(), for better legibility (103bd4b852)
  • core: normalize service config number values (#12826) (663c505dbd) This updates default service config validation to accept numeric values represented as Number, not only Double. Common JSON parsers may deserialize integer-looking JSON values such as maxAttempts: 4 and backoffMultiplier: 2 as Integer, which previously caused defaultServiceConfig() to fail with IllegalArgumentException. The values are normalized to Double when copied into the validated service config, preserving the existing internal representation expected by the service config parsing code.
  • core: DEADLINE_EXCEEDED before initial name resolution completes will now mention “name_resolver” in the error description (56d2b25eb5). Previously there was not a hint as to what gRPC was delayed on when the deadline was exceeded.
  • netty: Reduce TcpMetrics log from INFO to FINE (4ec83df1eb). This removes unnecessary log noise
  • core: Enable child channel plugins (#12578) (89aef90d52). This introduces the ChildChannelConfigurer API to allow intercepting and customizing the configuration (such as injecting interceptors or modifying credentials) of child channels created dynamically by load balancers.

Dependencies

  • Upgrade to Netty 4.2.15 (66c6ab1da6). If you need Netty 4.1 support, please file an issue
  • Upgrade codegen plugin to C++ Protobuf 35.1 (#12876) (c886f0a06b)
  • Upgrade various dependencies (064272c61d):
    • gson to 2.14.0
    • guava to 33.6.0
    • cel-java to 0.13.0
    • protobuf-java to 3.25.9
    • error-prone-annotations to 2.50.0
    • opentelemetry to 1.63.0

Documentation

  • Document how to build with Bazel and introduce bazel support for building android and binder (#12811) (f94574eff7)

Thanks to

... (truncated)

Commits
  • 8f621c0 Bump version to 1.83.1
  • 2bafe5e Update README etc to reference 1.83.1
  • e1f2dbd netty: Fix client-initiated stream limit bypass in NettyServerHandler (v1.83....
  • ee8232f core: Coalesce Contiguous Small Buffers for ReadableBuffer (v1.83.x backport)...
  • b4ca099 Fix docker tagging failure in upload_artifacts by using stable tag name (#12922)
  • b4fb7f4 build: Allow downloading pkgconfiglite with empty checksum
  • 1fbfa86 Bump version to 1.83.1-SNAPSHOT
  • 8ab6e0a Bump version to 1.83.0
  • 33ad6a4 Update README etc to reference 1.83.0
  • 17d5bd6 Revert "enable child channel plugins (#12578)" (v1.83.x backport) (#12913)
  • Additional commits viewable in compare view

Updates io.grpc:grpc-netty-shaded from 1.75.0 to 1.83.1

Release notes

Sourced from io.grpc:grpc-netty-shaded's releases.

v1.83.1

gRPC Java 1.83.1 Release Notes

Improvements

  • netty: Fix client-initiated stream limit bypass in NettyServerHandler (#12942). Enforces the limit proactively at startup without waiting for SETTINGS_ACK
  • core: Coalesce Contiguous Small Buffers for ReadableBuffer (#12944)

v1.83.0

gRPC Java 1.83.0 Release Notes

API Changes

  • api: Turn on RFC 3986 parsing by default and update javadoc. (4456721328)
  • api: Add Grpc.newChannelBuilder accepting NameResolverRegistry (#11901) (2b86f8f42f). This allows users to explicitly provide a NameResolverRegistry during channel creation rather than relying on the global registry, offering better isolation and control over name resolution per-channel.

Behavior Changes

  • okhttp: enable TLS 1.3 for servers on Android (3018ce341c). v1.82.0 enabled TLS 1.3 for clients; this does the same for servers
  • xds: enable orca to lrs propagation by default (#12836) (1e85674a40) Enables xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports as per gRFC A85
  • xds: Use leaf cluster name for backend service label in metrics, instead of aggregate cluster name (#12882) (c8079eed98). This only has an effect when using aggregate clusters
  • xds: Hold parsed service config in CdsUpdate (3db3235ebd). Previously, modifications to LoadBalancerRegistry could cause failures in the LB tree
  • xds: Revert "xds: reuse connections to the control plane across channels" added in 1.81.0 (d49c0b15d8). If using xds heavily with many targets, then MAX_CONCURRENT_STREAMS to the control plane could be exceeded. This then prevents loading resources for new targets, which causes those channels to hang on name resolution. RPCs would see the nondescript "DEADLINE_EXCEEDED: Deadline Context was exceeded after Xs" or "DEADLINE_EXCEEDED: Deadline CallOptions was exceeded after Xs"

Improvements

  • api: Move attributes to the end of ResolvedAddresses.toString(), for better legibility (103bd4b852)
  • core: normalize service config number values (#12826) (663c505dbd) This updates default service config validation to accept numeric values represented as Number, not only Double. Common JSON parsers may deserialize integer-looking JSON values such as maxAttempts: 4 and backoffMultiplier: 2 as Integer, which previously caused defaultServiceConfig() to fail with IllegalArgumentException. The values are normalized to Double when copied into the validated service config, preserving the existing internal representation expected by the service config parsing code.
  • core: DEADLINE_EXCEEDED before initial name resolution completes will now mention “name_resolver” in the error description (56d2b25eb5). Previously there was not a hint as to what gRPC was delayed on when the deadline was exceeded.
  • netty: Reduce TcpMetrics log from INFO to FINE (4ec83df1eb). This removes unnecessary log noise
  • core: Enable child channel plugins (#12578) (89aef90d52). This introduces the ChildChannelConfigurer API to allow intercepting and customizing the configuration (such as injecting interceptors or modifying credentials) of child channels created dynamically by load balancers.

Dependencies

  • Upgrade to Netty 4.2.15 (66c6ab1da6). If you need Netty 4.1 support, please file an issue
  • Upgrade codegen plugin to C++ Protobuf 35.1 (#12876) (c886f0a06b)
  • Upgrade various dependencies (064272c61d):
    • gson to 2.14.0
    • guava to 33.6.0
    • cel-java to 0.13.0
    • protobuf-java to 3.25.9
    • error-prone-annotations to 2.50.0
    • opentelemetry to 1.63.0

Documentation

  • Document how to build with Bazel and introduce bazel support for building android and binder (#12811) (f94574eff7)

Thanks to

... (truncated)

Commits
  • 8f621c0 Bump version to 1.83.1
  • 2bafe5e Update README etc to reference 1.83.1
  • e1f2dbd netty: Fix client-initiated stream limit bypass in NettyServerHandler (v1.83....
  • ee8232f core: Coalesce Contiguous Small Buffers for ReadableBuffer (v1.83.x backport)...
  • b4ca099 Fix docker tagging failure in upload_artifacts by using stable tag name (#12922)
  • b4fb7f4 build: Allow downloading pkgconfiglite with empty checksum
  • 1fbfa86 Bump version to 1.83.1-SNAPSHOT
  • 8ab6e0a Bump version to 1.83.0
  • 33ad6a4 Update README etc to reference 1.83.0
  • 17d5bd6 Revert "enable child channel plugins (#12578)" (v1.83.x backport) (#12913)
  • Additional commits viewable in compare view

Updates io.grpc:grpc-stub from 1.75.0 to 1.83.1

Release notes

Sourced from io.grpc:grpc-stub's releases.

v1.83.1

gRPC Java 1.83.1 Release Notes

Improvements

  • netty: Fix client-initiated stream limit bypass in Net...

    Description has been truncated

@dependabot
build(deps): bump the maven-minor-and-patch group
ccef560 
Bumps the maven-minor-and-patch group in /openfeature-provider/java with 25 updates:

| Package | From | To |
| --- | --- | --- |
| org.slf4j:slf4j-api | `2.0.13` | `2.0.18` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.2.1-jre` | `33.7.1-jre` |
| [com.dylibso.chicory:wasm](https://github.com/dylibso/chicory) | `1.4.0` | `1.7.5` |
| [io.grpc:grpc-api](https://github.com/grpc/grpc-java) | `1.75.0` | `1.83.1` |
| [io.grpc:grpc-protobuf](https://github.com/grpc/grpc-java) | `1.75.0` | `1.83.1` |
| [io.grpc:grpc-netty-shaded](https://github.com/grpc/grpc-java) | `1.75.0` | `1.83.1` |
| [io.grpc:grpc-stub](https://github.com/grpc/grpc-java) | `1.75.0` | `1.83.1` |
| [io.grpc:grpc-testing](https://github.com/grpc/grpc-java) | `1.75.0` | `1.83.1` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.6` | `1.6.3` |
| [com.dylibso.chicory:runtime](https://github.com/dylibso/chicory) | `1.4.0` | `1.7.5` |
| [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.12.0` | `5.23.0` |
| [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) | `1.17.6` | `1.18.12` |
| [org.awaitility:awaitility](https://github.com/awaitility/awaitility) | `4.2.0` | `4.3.0` |
| org.apache.commons:commons-lang3 | `3.18.0` | `3.20.0` |
| [dev.openfeature:sdk](https://github.com/open-feature/java-sdk) | `1.20.2` | `1.22.1` |
| [org.codehaus.mojo:build-helper-maven-plugin](https://github.com/mojohaus/build-helper-maven-plugin) | `3.5.0` | `3.6.1` |
| [com.dylibso.chicory:chicory-compiler-maven-plugin](https://github.com/dylibso/chicory) | `1.4.0` | `1.7.5` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.2.5` | `3.5.6` |
| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.2.5` | `3.5.6` |
| [org.apache.maven.plugins:maven-source-plugin](https://github.com/apache/maven-source-plugin) | `3.3.0` | `3.4.0` |
| [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) | `3.6.0` | `3.12.0` |
| [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype/central-publishing-maven-plugin) | `0.8.0` | `0.11.0` |
| [com.spotify.fmt:fmt-maven-plugin](https://github.com/spotify/fmt-maven-plugin) | `2.25` | `2.29` |
| [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) | `3.8.1` | `3.11.0` |
| [org.apache.maven.plugins:maven-shade-plugin](https://github.com/apache/maven-shade-plugin) | `3.6.0` | `3.6.2` |


Updates `org.slf4j:slf4j-api` from 2.0.13 to 2.0.18

Updates `com.google.guava:guava` from 33.2.1-jre to 33.7.1-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.dylibso.chicory:wasm` from 1.4.0 to 1.7.5
- [Release notes](https://github.com/dylibso/chicory/releases)
- [Commits](dylibso/chicory@1.4.0...1.7.5)

Updates `io.grpc:grpc-api` from 1.75.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.75.0...v1.83.1)

Updates `io.grpc:grpc-protobuf` from 1.75.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.75.0...v1.83.1)

Updates `io.grpc:grpc-netty-shaded` from 1.75.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.75.0...v1.83.1)

Updates `io.grpc:grpc-stub` from 1.75.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.75.0...v1.83.1)

Updates `io.grpc:grpc-testing` from 1.75.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.75.0...v1.83.1)

Updates `io.grpc:grpc-protobuf` from 1.75.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.75.0...v1.83.1)

Updates `io.grpc:grpc-netty-shaded` from 1.75.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.75.0...v1.83.1)

Updates `io.grpc:grpc-stub` from 1.75.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.75.0...v1.83.1)

Updates `ch.qos.logback:logback-classic` from 1.5.6 to 1.6.3
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.6...v_1.6.3)

Updates `com.dylibso.chicory:runtime` from 1.4.0 to 1.7.5
- [Release notes](https://github.com/dylibso/chicory/releases)
- [Commits](dylibso/chicory@1.4.0...1.7.5)

Updates `org.mockito:mockito-core` from 5.12.0 to 5.23.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.12.0...v5.23.0)

Updates `io.grpc:grpc-testing` from 1.75.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.75.0...v1.83.1)

Updates `net.bytebuddy:byte-buddy` from 1.17.6 to 1.18.12
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.17.6...byte-buddy-1.18.12)

Updates `org.awaitility:awaitility` from 4.2.0 to 4.3.0
- [Changelog](https://github.com/awaitility/awaitility/blob/master/changelog.txt)
- [Commits](awaitility/awaitility@awaitility-4.2.0...awaitility-4.3.0)

Updates `org.apache.commons:commons-lang3` from 3.18.0 to 3.20.0

Updates `dev.openfeature:sdk` from 1.20.2 to 1.22.1
- [Release notes](https://github.com/open-feature/java-sdk/releases)
- [Changelog](https://github.com/open-feature/java-sdk/blob/main/CHANGELOG.md)
- [Commits](open-feature/java-sdk@v1.20.2...v1.22.1)

Updates `org.codehaus.mojo:build-helper-maven-plugin` from 3.5.0 to 3.6.1
- [Release notes](https://github.com/mojohaus/build-helper-maven-plugin/releases)
- [Commits](mojohaus/build-helper-maven-plugin@3.5.0...3.6.1)

Updates `com.dylibso.chicory:chicory-compiler-maven-plugin` from 1.4.0 to 1.7.5
- [Release notes](https://github.com/dylibso/chicory/releases)
- [Commits](dylibso/chicory@1.4.0...1.7.5)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.2.5 to 3.5.6
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.2.5...surefire-3.5.6)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.2.5 to 3.5.6
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.2.5...surefire-3.5.6)

Updates `org.apache.maven.plugins:maven-source-plugin` from 3.3.0 to 3.4.0
- [Release notes](https://github.com/apache/maven-source-plugin/releases)
- [Commits](apache/maven-source-plugin@maven-source-plugin-3.3.0...maven-source-plugin-3.4.0)

Updates `org.apache.maven.plugins:maven-javadoc-plugin` from 3.6.0 to 3.12.0
- [Release notes](https://github.com/apache/maven-javadoc-plugin/releases)
- [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.6.0...maven-javadoc-plugin-3.12.0)

Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.8.0 to 0.11.0
- [Commits](https://github.com/sonatype/central-publishing-maven-plugin/commits)

Updates `com.spotify.fmt:fmt-maven-plugin` from 2.25 to 2.29
- [Release notes](https://github.com/spotify/fmt-maven-plugin/releases)
- [Commits](spotify/fmt-maven-plugin@2.25...2.29.0)

Updates `org.apache.maven.plugins:maven-dependency-plugin` from 3.8.1 to 3.11.0
- [Release notes](https://github.com/apache/maven-dependency-plugin/releases)
- [Commits](apache/maven-dependency-plugin@maven-dependency-plugin-3.8.1...maven-dependency-plugin-3.11.0)

Updates `org.apache.maven.plugins:maven-shade-plugin` from 3.6.0 to 3.6.2
- [Release notes](https://github.com/apache/maven-shade-plugin/releases)
- [Commits](apache/maven-shade-plugin@maven-shade-plugin-3.6.0...maven-shade-plugin-3.6.2)

---
updated-dependencies:
- dependency-name: org.slf4j:slf4j-api
  dependency-version: 2.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-and-patch
- dependency-name: com.google.guava:guava
  dependency-version: 33.7.1-jre
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: com.dylibso.chicory:wasm
  dependency-version: 1.7.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: io.grpc:grpc-api
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: io.grpc:grpc-protobuf
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: io.grpc:grpc-netty-shaded
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: io.grpc:grpc-stub
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: io.grpc:grpc-testing
  dependency-version: 1.83.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: io.grpc:grpc-protobuf
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: io.grpc:grpc-netty-shaded
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: io.grpc:grpc-stub
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: com.dylibso.chicory:runtime
  dependency-version: 1.7.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: org.mockito:mockito-core
  dependency-version: 5.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: io.grpc:grpc-testing
  dependency-version: 1.83.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: net.bytebuddy:byte-buddy
  dependency-version: 1.18.12
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: org.awaitility:awaitility
  dependency-version: 4.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.20.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: dev.openfeature:sdk
  dependency-version: 1.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: org.codehaus.mojo:build-helper-maven-plugin
  dependency-version: 3.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: com.dylibso.chicory:chicory-compiler-maven-plugin
  dependency-version: 1.7.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.5.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: org.apache.maven.plugins:maven-source-plugin
  dependency-version: 3.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: org.apache.maven.plugins:maven-javadoc-plugin
  dependency-version: 3.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: org.sonatype.central:central-publishing-maven-plugin
  dependency-version: 0.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: com.spotify.fmt:fmt-maven-plugin
  dependency-version: '2.29'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: org.apache.maven.plugins:maven-dependency-plugin
  dependency-version: 3.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: org.apache.maven.plugins:maven-shade-plugin
  dependency-version: 3.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants