Skip to content

Bump the gradle-dependencies group across 14 directories with 16 updates - #2400

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/gradle-dependencies-457493f4ba
Open

Bump the gradle-dependencies group across 14 directories with 16 updates#2400
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/gradle-dependencies-457493f4ba

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 20, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the gradle-dependencies group with 14 updates in the / directory:

Package From To
com.puppycrawl.tools:checkstyle 9.0 9.3
com.google.errorprone:error_prone_core 2.43.0 2.50.0
junit:junit 4.11 4.13.2
net.ltgt.errorprone 4.2.0 4.4.0
org.openjdk.jmh:jmh-core 1.33 1.37
biz.aQute.bnd.builder 7.1.0 7.3.0
com.yubico.yubikit:openpgp 3.1.0 3.2.0
com.google.protobuf:protoc 3.22.3 3.25.9
io.grpc:protoc-gen-grpc-java 1.58.0 1.83.1
com.google.protobuf 0.9.4 0.10.0
javax.mail:mail 1.4 1.4.7
jakarta.mail:jakarta.mail-api 2.0.1 2.1.5
jakarta.activation:jakarta.activation-api 2.0.0 2.1.4
gradle-wrapper 9.1.0 9.7.0

Bumps the gradle-dependencies group with 1 update in the /core directory: org.openjdk.jmh:jmh-core.
Bumps the gradle-dependencies group with 3 updates in the /jmail directory: biz.aQute.bnd.builder, jakarta.mail:jakarta.mail-api and jakarta.activation:jakarta.activation-api.
Bumps the gradle-dependencies group with 2 updates in the /mail directory: biz.aQute.bnd.builder and javax.mail:mail.
Bumps the gradle-dependencies group with 1 update in the /misc directory: javax.mail:mail.
Bumps the gradle-dependencies group with 4 updates in the /mls directory: biz.aQute.bnd.builder, com.google.protobuf:protoc, io.grpc:protoc-gen-grpc-java and com.google.protobuf.
Bumps the gradle-dependencies group with 1 update in the /pg directory: biz.aQute.bnd.builder.
Bumps the gradle-dependencies group with 2 updates in the /pgsc directory: biz.aQute.bnd.builder and com.yubico.yubikit:openpgp.
Bumps the gradle-dependencies group with 1 update in the /pkix directory: biz.aQute.bnd.builder.
Bumps the gradle-dependencies group with 1 update in the /prov directory: biz.aQute.bnd.builder.
Bumps the gradle-dependencies group with 1 update in the /test directory: junit:junit.
Bumps the gradle-dependencies group with 1 update in the /tls directory: biz.aQute.bnd.builder.
Bumps the gradle-dependencies group with 1 update in the /tls-klog directory: biz.aQute.bnd.builder.
Bumps the gradle-dependencies group with 2 updates in the /util directory: junit:junit and biz.aQute.bnd.builder.

Updates com.puppycrawl.tools:checkstyle from 9.0 to 9.3

Release notes

Sourced from com.puppycrawl.tools:checkstyle's releases.

checkstyle-9.3

https://checkstyle.org/releasenotes.html#Release_9.3

checkstyle-9.2.1

https://checkstyle.org/releasenotes.html#Release_9.2.1

checkstyle-9.2

https://checkstyle.org/releasenotes.html#Release_9.2

checkstyle-9.1

https://checkstyle.org/releasenotes.html#Release_9.1

checkstyle-9.0.1

https://checkstyle.org/releasenotes.html#Release_9.0.1

Commits
  • 5c19037 [maven-release-plugin] prepare release checkstyle-9.3
  • c4b2862 doc: release notes 9.3
  • ef2ac6c dependency: bump taglist-maven-plugin from 2.4 to 3.0.0
  • e12eee4 minor: Specified violation messages in SeparatorWrapCheck
  • 645262f Issue #11091: Fail test execution when input file hasn't specified violation ...
  • 2372df1 infra: disable equalsverifier until https://github.com/jqno/equalsverifier/is...
  • b37ec9c Issue #6320: Kill surviving mutations for REMOVE_CONDITIONALS in UnusedLocalV...
  • 7cd807c Issue #11220: False positive in MissingSwitchDefault with pattern in switch l...
  • 7124ab9 Issue #11187: OperatorWrapCheck throws NPE on guarded patterns
  • 8a93900 infra: use master branch for no-error-xwiki execution
  • Additional commits viewable in compare view

Updates com.google.errorprone:error_prone_core from 2.43.0 to 2.50.0

Release notes

Sourced from com.google.errorprone:error_prone_core's releases.

Error Prone 2.50.0

New checks:

Closed issues: #5553, #5649, #5778

Full changelog: google/error-prone@v2.49.0...v2.50.0

Error Prone 2.49.0

This release includes several changes to Matcher APIs, and removed some deprecated or problematic APIs:

  • Remove deprecated MethodMatchers.withSignature API, which relies on fragile toString behaviour. Alternatives for matching on method signatures with varargs and type parameters were added in google/error-prone@a98a1c5.
  • Removed variableType(Matcher) API. Matchers.variableType(Matcher) uses VariableTree#getType to match variable types, which own't work for lambda parameters with inferred types after JDK-8268850. The recommended replacement is variableType(TypePredicate).
  • Make enclosingPackage return an optional. Module elements are not enclosed by a package, checks using enclosingPackage shouldn't assume an enclosing package exists when processing arbitrary elements.
  • New FieldMatchers API, similar to MethodMatchers (google/error-prone@1dd9c3a).

New checks:

Closed issues: #2283, #3503, #5210, #5289, #5548, #5548, #5554, #5609, #5614, #5656

Full changelog: google/error-prone@v2.48.0...v2.49.0

Error Prone 2.48.0

Changes:

New checks:

Closed issues: #5529, #5537, #5522, #5521

Full changelog: google/error-prone@v2.47.0...v2.48.0

... (truncated)

Commits
  • d802cff Release Error Prone 2.50.0
  • b12b5f2 In StringCharset, move the description from explanation to summary.
  • a7ca02a Update AssertThrowsUtils to emit var thrown = assertThrows(...) instead o...
  • 6b56517 Fix handling of nested tags in UnrecognisedJavadocTag
  • d36e74f Remove translation of the fail() message into assertThrows(). We already ...
  • c3581e9 Fix JavacFileManager compiler crash during speculative recompiles in modular ...
  • da1f32b Remove assignments from assertThrows() lambdas. A large percentage of remai...
  • dee62f7 Update AssertThrowsBlockToExpression to re-write single VariableTrees int...
  • 4939448 Only hoist the last statement into the assertThrows() lambda.
  • 30fd05a refactor: Rename JavaLangClash bug pattern to AvoidCommonTypeNames
  • Additional commits viewable in compare view

Updates junit:junit from 4.11 to 4.13.2

Release notes

Sourced from junit:junit's releases.

JUnit 4.13.2

Please refer to the release notes for details.

JUnit 4.13.1

Please refer to the release notes for details.

JUnit 4.13

Please refer to the release notes for details.

JUnit 4.13 RC 2

Please refer to the release notes for details.

JUnit 4.13 RC 1

Please refer to the release notes for details.

JUnit 4.13 Beta 3

Please refer to the release notes for details.

JUnit 4.13 Beta 2

Please refer to the release notes for details.

JUnit 4.13 Beta 1

Please refer to the release notes for details.

JUnit 4.12

Please refer to the release notes for details.

JUnit 4.12 Beta 3

Please refer to the release notes for details.

JUnit 4.12 Beta 2

No release notes provided.

JUnit 4.12 Beta 1

No release notes provided.

Commits
  • 05fe2a6 [maven-release-plugin] prepare release r4.13.2
  • ff57344 Add build for JDK 17-ea
  • 02aaa01 Improve check that thread is stopped
  • e9a75f4 Merge test for exception type and message
  • d27ad52 Rename DelegateStatement to DelegatingStatement
  • b83dc2e Better name for test that stops statement
  • 527f3a3 Replace InfiniteLoop with RunForASecond
  • 2db6394 Tidy up FailOnTimeoutTest
  • 64634e1 Update 4.13.2 release notes to document pull 1654
  • f8ee412 Fix serialization of AssumptionViolatedException (#1654)
  • Additional commits viewable in compare view

Updates net.ltgt.errorprone from 4.2.0 to 4.4.0

Updates org.openjdk.jmh:jmh-core from 1.33 to 1.37

Commits
  • 2effa2c JMH v1.37.
  • 09c78d5 7903508: JMH: Remove the Unicode dot prefix from secondary results
  • 843f641 7903510: JMH: Add core performance checking tests
  • 8bc325b 7903511: JMH: Add score stability performance tests
  • 6b09724 7903450: JMH: Improve -prof perfnorm accuracy with robust estimations
  • d88f901 7903504: JMH: Fix new Sonar warnings
  • 47f651b 7903498: JMH: Reset worker interrupt status after iteration
  • 482561a 7903492: JMH: Infrastructure code should yield occasionally for virtual execu...
  • 9a97557 7903490: JMH: The interrupt to time-outing benchmark can be delivered to work...
  • bf8db38 7903487: JMH: Make sure JMH profilers work on all tested configurations
  • Additional commits viewable in compare view

Updates org.openjdk.jmh:jmh-generator-annprocess from 1.33 to 1.37

Commits
  • 2effa2c JMH v1.37.
  • 09c78d5 7903508: JMH: Remove the Unicode dot prefix from secondary results
  • 843f641 7903510: JMH: Add core performance checking tests
  • 8bc325b 7903511: JMH: Add score stability performance tests
  • 6b09724 7903450: JMH: Improve -prof perfnorm accuracy with robust estimations
  • d88f901 7903504: JMH: Fix new Sonar warnings
  • 47f651b 7903498: JMH: Reset worker interrupt status after iteration
  • 482561a 7903492: JMH: Infrastructure code should yield occasionally for virtual execu...
  • 9a97557 7903490: JMH: The interrupt to time-outing benchmark can be delivered to work...
  • bf8db38 7903487: JMH: Make sure JMH profilers work on all tested configurations
  • Additional commits viewable in compare view

Updates biz.aQute.bnd.builder from 7.1.0 to 7.3.0

Release notes

Sourced from biz.aQute.bnd.builder's releases.

Bnd/Bndtools 7.3.0

See Release Notes

Bnd/Bndtools 7.2.3

This release fixes a mistake of previous 7.2.2. It does not contain any functional changes, but only a deprecation warning in the build if you are using the Sonatype Publishing feature. Other than that it is equal to 7.2.1

See Release Notes.

Full Changelog: bndtools/bnd@7.2.2...7.2.3

Bnd/Bndtools 7.2.2

Please ignore this release. We made a mistake, which we corrected in the next one.

See Release Notes.

Full Changelog: bndtools/bnd@7.2.1...7.2.2

Bnd/Bndtools 7.2.1

See Release Notes.

Full Changelog: bndtools/bnd@7.2.0...7.2.1

Bnd/Bndtools 7.2.0

See Release Notes.

What's Changed

... (truncated)

Commits
  • bf5b578 build: Build Release 7.3.0
  • 86529ea docs: auto-generated content
  • 02de52f Docs: Add HTTP headers override section
  • 002a72e Set explicit headers before defaults and refine logging
  • caa5827 Do not overwrite existing request properties
  • d9e8e96 fix build and Sonatype upload issues
  • 90e8d8b Merge pull request #7216 from kwin/patch-8
  • 0c7dfa4 Fix heading level
  • 72b494a Merge pull request #7212 from bndtools/dependabot/github_actions/ruby/setup-r...
  • 77fe017 Merge pull request #7213 from bndtools/dependabot/maven/maven-plugins/org.apa...
  • Additional commits viewable in compare view

Updates com.yubico.yubikit:openpgp from 3.1.0 to 3.2.0

Release notes

Sourced from com.yubico.yubikit:openpgp's releases.

YubiKit 3.2.0

This release focuses on the fido-android-ui module — a responsive UI redesign with adaptive layouts, NFC antenna hints, and screen-capture protection — along with WebAuthn extension and spec-compliance fixes and build tooling updates.

New in this release:

  • fido-android-ui module:
    • Redesigned UI with adaptive layouts across portrait, landscape and full-screen presentations, including refreshed screens, titles/subtitles and PIN forms, and clearer display of the requesting app label and RP name / rpId (#330)
    • Added public NfcAntennaHint composable and supportsNfcAntennaHint() to display the device's physical NFC antenna locations (API 34+) (#330)
    • Apply FLAG_SECURE in non-debug builds and hide overlay windows during FIDO operations (#330)
    • Surface terminal extension errors in the UI (#344)
    • Hardened UI lifecycle: keep result on late key removal, prevent result-delivery races, guard continuation resume on cancel, handle NFC tag-lost, and preserve PIN input across rotation (#330)
    • Consistent "security key" terminology, clarified PIN-required policy, and landscape insets / orientation handling (#330)
  • fido module:
    • Pre-validate WebAuthn extension inputs (#344)
    • Aligned WebAuthn extension errors to the spec, classify hard failures, and isolate client extension failures (#339, #344)
    • Respect uv=discouraged for non-discoverable / non-resident-key credentials (#330, #334)
    • Use callingApp origin in native clientData (#330)
  • management module:
    • Read DeviceInfo pages by TAG_MORE_DATA count (#338)
  • core module:
    • Use getProductId in USB device filter (#327)
  • build system:
    • Upgraded to AGP 9.2.1 (#330)
    • Bumped compileSdk/targetSdk to 37 (#332)
    • Upgraded ktlint to 1.8.0 (#331)
    • Removed SpotBugs annotations from bytecode (#326)
    • Updated dependencies and pinned GitHub Actions to latest versions (#332, #342, #346)

Full Changelog: 3.1.0...3.2.0

Changelog

Sourced from com.yubico.yubikit:openpgp's changelog.

  • Version 3.2.0 (released 2026-07-07) ** new:
    • fido-ui: new UI host with support for adaptive layouts, adjusting across phone portrait, landscape and full-screen presentations; screens now show the requesting app label and emphasize the RP name / rpId, with refreshed titles, subtitles and PIN forms
    • fido-ui: surface terminal extension errors in the UI
    • fido-ui: added public NfcAntennaHint API and supportsNfcAntennaHint() to detect and hint antenna location
    • fido-ui: apply FLAG_SECURE in non-debug builds and HIDE_OVERLAY_WINDOWS on the FIDO UI activity
    • fido: pre-validate WebAuthn extension inputs
    • management: read DeviceInfo pages by TAG_MORE_DATA count ** fixes & improvements:
    • fido: aligned WebAuthn extension errors to the spec, classify hard failures and isolate client extension failures
    • fido: respect uv=discouraged for non-discoverable / non-resident-key credentials
    • fido: use callingApp origin in native clientData
    • fido-ui: hardened UI lifecycle — keep result on late key removal, prevent result-delivery races, guard continuation resume on cancel, handle NFC tag-lost, and preserve PIN input across rotation
    • fido-ui: consistent "security key" terminology, clarified PIN-required policy, and landscape insets / orientation handling
    • core: use getProductId in USB device filter
    • build: upgraded to AGP 9.2.1, compileSdk/targetSdk 37, ktlint 1.8.0
    • build: updated dependencies and pinned GitHub Actions to latest versions
Commits

Updates com.yubico.yubikit:desktop from 3.1.0 to 3.2.0

Release notes

Sourced from com.yubico.yubikit:desktop's releases.

YubiKit 3.2.0

This release focuses on the fido-android-ui module — a responsive UI redesign with adaptive layouts, NFC antenna hints, and screen-capture protection — along with WebAuthn extension and spec-compliance fixes and build tooling updates.

New in this release:

  • fido-android-ui module:
    • Redesigned UI with adaptive layouts across portrait, landscape and full-screen presentations, including refreshed screens, titles/subtitles and PIN forms, and clearer display of the requesting app label and RP name / rpId (#330)
    • Added public NfcAntennaHint composable and supportsNfcAntennaHint() to display the device's physical NFC antenna locations (API 34+) (#330)
    • Apply FLAG_SECURE in non-debug builds and hide overlay windows during FIDO operations (#330)
    • Surface terminal extension errors in the UI (#344)
    • Hardened UI lifecycle: keep result on late key removal, prevent result-delivery races, guard continuation resume on cancel, handle NFC tag-lost, and preserve PIN input across rotation (#330)
    • Consistent "security key" terminology, clarified PIN-required policy, and landscape insets / orientation handling (#330)
  • fido module:
    • Pre-validate WebAuthn extension inputs (#344)
    • Aligned WebAuthn extension errors to the spec, classify hard failures, and isolate client extension failures (#339, #344)
    • Respect uv=discouraged for non-discoverable / non-resident-key credentials (#330, #334)
    • Use callingApp origin in native clientData (#330)
  • management module:
    • Read DeviceInfo pages by TAG_MORE_DATA count (#338)
  • core module:
    • Use getProductId in USB device filter (#327)
  • build system:
    • Upgraded to AGP 9.2.1 (#330)
    • Bumped compileSdk/targetSdk to 37 (#332)
    • Upgraded ktlint to 1.8.0 (#331)
    • Removed SpotBugs annotations from bytecode (#326)
    • Updated dependencies and pinned GitHub Actions to latest versions (#332, #342, #346)

Full Changelog: 3.1.0...3.2.0

Changelog

Sourced from com.yubico.yubikit:desktop's changelog.

  • Version 3.2.0 (released 2026-07-07) ** new:
    • fido-ui: new UI host with support for adaptive layouts, adjusting across phone portrait, landscape and full-screen presentations; screens now show the requesting app label and emphasize the RP name / rpId, with refreshed titles, subtitles and PIN forms
    • fido-ui: surface terminal extension errors in the UI
    • fido-ui: added public NfcAntennaHint API and supportsNfcAntennaHint() to detect and hint antenna location
    • fido-ui: apply FLAG_SECURE in non-debug builds and HIDE_OVERLAY_WINDOWS on the FIDO UI activity
    • fido: pre-validate WebAuthn extension inputs
    • management: read DeviceInfo pages by TAG_MORE_DATA count ** fixes & improvements:
    • fido: aligned WebAuthn extension errors to the spec, classify hard failures and isolate client extension failures
    • fido: respect uv=discouraged for non-discoverable / non-resident-key credentials
    • fido: use callingApp origin in native clientData
    • fido-ui: hardened UI lifecycle — keep result on late key removal, prevent result-delivery races, guard continuation resume on cancel, handle NFC tag-lost, and preserve PIN input across rotation
    • fido-ui: consistent "security key" terminology, clarified PIN-required policy, and landscape insets / orientation handling
    • core: use getProductId in USB device filter
    • build: upgraded to AGP 9.2.1, compileSdk/targetSdk 37, ktlint 1.8.0
    • build: updated dependencies and pinned GitHub Actions to latest versions
Commits

Updates com.google.protobuf:protoc from 3.22.3 to 3.25.9

Commits

Updates io.grpc:protoc-gen-grpc-java from 1.58.0 to 1.83.1

Release notes

Sourced from io.grpc:protoc-gen-grpc-java's releases.

v1.83.1

gRPC Java 1.83.1 Release Notes

Improvements

  • netty: Fix client-initiated stream limit bypass in NettyServerHandler (#12942). Enforces the limit proactively at startup without waiting for SETTINGS_ACK
  • core: Coalesce Contiguous Small Buffers for ReadableBuffer (#12944)

v1.83.0

gRPC Java 1.83.0 Release Notes

API Changes

  • api: Turn on RFC 3986 parsing by default and update javadoc. (4456721328)
  • api: Add Grpc.newChannelBuilder accepting NameResolverRegistry (#11901) (2b86f8f42f). This allows users to explicitly provide a NameResolverRegistry during channel creation rather than relying on the global registry, offering better isolation and control over name resolution per-channel.

Behavior Changes

  • okhttp: enable TLS 1.3 for servers on Android (3018ce341c). v1.82.0 enabled TLS 1.3 for clients; this does the same for servers
  • xds: enable orca to lrs propagation by default (#12836) (1e85674a40) Enables xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports as per gRFC A85
  • xds: Use leaf cluster name for backend service label in metrics, instead of aggregate cluster name (#12882) (c8079eed98). This only has an effect when using aggregate clusters
  • xds: Hold parsed service config in CdsUpdate (3db3235ebd). Previously, modifications to LoadBalancerRegistry could cause failures in the LB tree
  • xds: Revert "xds: reuse connections to the control plane across channels" added in 1.81.0 (d49c0b15d8). If using xds heavily with many targets, then MAX_CONCURRENT_STREAMS to the control plane could be exceeded. This then prevents loading resources for new targets, which causes those channels to hang on name resolution. RPCs would see the nondescript "DEADLINE_EXCEEDED: Deadline Context was exceeded after Xs" or "DEADLINE_EXCEEDED: Deadline CallOptions was exceeded after Xs"

Improvements

  • api: Move attributes to the end of ResolvedAddresses.toString(), for better legibility (103bd4b852)
  • core: normalize service config number values (#12826) (663c505dbd) This updates default service config validation to accept numeric values represented as Number, not only Double. Common JSON parsers may deserialize integer-looking JSON values such as maxAttempts: 4 and backoffMultiplier: 2 as Integer, which previously caused defaultServiceConfig() to fail with IllegalArgumentException. The values are normalized to Double when copied into the validated service config, preserving the existing internal representation expected by the service config parsing code.
  • core: DEADLINE_EXCEEDED before initial name resolution completes will now mention “name_resolver” in the error description (56d2b25eb5). Previously there was not a hint as to what gRPC was delayed on when the deadline was exceeded.
  • netty: Reduce TcpMetrics log from INFO to FINE (4ec83df1eb). This removes unnecessary log noise
  • core: Enable child channel plugins (#12578) (89aef90d52). This introduces the ChildChannelConfigurer API to allow intercepting and customizing the configuration (such as injecting interceptors or modifying credentials) of child channels created dynamically by load balancers.

Dependencies

  • Upgrade to Netty 4.2.15 (66c6ab1da6). If you need Netty 4.1 support, please file an issue
  • Upgrade codegen plugin to C++ Protobuf 35.1 (#12876) (c886f0a06b)
  • Upgrade various dependencies (064272c61d):
    • gson to 2.14.0
    • guava to 33.6.0
    • cel-java to 0.13.0
    • protobuf-java to 3.25.9
    • error-prone-annotations to 2.50.0
    • opentelemetry to 1.63.0

Documentation

  • Document how to build with Bazel and introduce bazel support for building android and binder (#12811) (f94574eff7)

Thanks to

... (truncated)

Commits
  • 8f621c0 Bump version to 1.83.1
  • 2bafe5e Update README etc to reference 1.83.1
  • e1f2dbd netty: Fix client-initiated stream limit bypass in NettyServerHandler (v1.83....
  • ee8232f core: Coalesce Contiguous Small Buffers for ReadableBuffer (v1.83.x backport)...
  • b4ca099 Fix docker tagging failure in upload_artifacts by using stable tag name (#12922)
  • b4fb7f4 build: Allow downloading pkgconfiglite with empty checksum
  • 1fbfa86 Bump version to 1.83.1-SNAPSHOT
  • 8ab6e0a Bump version to 1.83.0
  • 33ad6a4 Update README etc to reference 1.83.0
  • 17d5bd6 Revert "enable child channel plugins (#12578)" (v1.83.x backport) (#12913)
  • Additional commits viewable in compare view

Updates com.google.protobuf from 0.9.4 to 0.10.0

Updates javax.mail:mail from 1.4 to 1.4.7

Updates jakarta.mail:jakarta.mail-api from 2.0.1 to 2.1.5

Release notes

Sourced from jakarta.mail:jakarta.mail-api's releases.

Jakarta Mail 2.1.5 Final Release

The 2.1.5 release is a bug fix release of 2.1.x (Jakarta EE 10).

Following changes are included:

Full Changelog: jakartaee/mail-api@2.1.4...2.1.5

Jakarta Mail 2.1.4 Final Release

The 2.1.4 release is a bug fix release of 2.1.x (Jakarta EE 10).

Following changes are included:

Full Changelog: jakartaee/mail-api@2.1.3...2.1.4

Jakarta Mail 2.1.3 Final Release

The 2.1.3 release is a bug fix release of 2.1.x (Jakarta EE 10).

Following changes are included:

New Contributors

Full Changelog: jakartaee/mail-api@2.1.2...2.1.3

Jakarta Mail 2.1.2 Final Release

The 2.1.2 release is a bug fix release of 2.1.x (Jakarta EE 10).

Following changes are included:

Full Changelog: jakartaee/mail-api@2.1.1...2.1.2

... (truncated)

Commits
  • e187321 Prepare release jakarta.mail:jakarta.mail-api:2.1.5
  • ef7483e Revert "Multipart performs blocking call in every instantiation #699 (#716)"
  • abe990f Reviews changes
  • a10a173 Improve MimeMessage UTF8 handling
  • 7a53112 Improve MimeMessage UTF8 handling
  • 1736520 Drop references to the Reference implementation
  • f2e6da3 Bump nokogiri from 1.16.5 to 1.18.9 in /www
  • 5488a7c #708 Add missing javadoc for supporting ServiceLoader mechanism (#726)
  • ccbe84b Bump webrick from 1.8.1 to 1.8.2 in /www
  • 34f8e9b ISSUE-721 - add full Markdown for URLs since Jekyll action doesn't autolink t...
  • Additional commits viewable in compare view

Updates jakarta.activation:jakarta.activation-api from 2.0.0 to 2.1.4

Release notes

Sourced from jakarta.activation:jakarta.activation-api's releases.

Jakarta Activation 2.1.4 Final Release

The 2.1.4 release is a bug fix release of 2.1.x (Jakarta EE 10, Jakarta EE 11).

Following changes are included:

  • moves resource file names from javax to jakarta namespace

Full Changelog: jakartaee/jaf-api@2.1.3...2.1.4

Jakarta Activation 2.1.3 Final Release

The 2.1.3 release is a bug fix release of 2.1.x (Jakarta EE 10).

Following changes are included:

  • fixes erroneous assumption about classes being loaded from Thread.getContextClassLoader
  • allows reproducible build

Full Changelog: jakartaee/jaf-api@2.1.2...2.1.3

Jakarta Activation 2.1.2 Final Release

The 2.1.2 release is a bug fix release of 2.1.x (Jakarta EE 10).

Following changes are included:

  • fix wrong class f...

    Description has been truncated

@dependabot
Bump the gradle-dependencies group across 14 directories with 16 updates
779876f 
Bumps the gradle-dependencies group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) | `9.0` | `9.3` |
| [com.google.errorprone:error_prone_core](https://github.com/google/error-prone) | `2.43.0` | `2.50.0` |
| [junit:junit](https://github.com/junit-team/junit4) | `4.11` | `4.13.2` |
| net.ltgt.errorprone | `4.2.0` | `4.4.0` |
| [org.openjdk.jmh:jmh-core](https://github.com/openjdk/jmh) | `1.33` | `1.37` |
| [biz.aQute.bnd.builder](https://github.com/bndtools/bnd) | `7.1.0` | `7.3.0` |
| [com.yubico.yubikit:openpgp](https://github.com/Yubico/yubikit-android) | `3.1.0` | `3.2.0` |
| [com.google.protobuf:protoc](https://github.com/protocolbuffers/protobuf) | `3.22.3` | `3.25.9` |
| [io.grpc:protoc-gen-grpc-java](https://github.com/grpc/grpc-java) | `1.58.0` | `1.83.1` |
| com.google.protobuf | `0.9.4` | `0.10.0` |
| javax.mail:mail | `1.4` | `1.4.7` |
| [jakarta.mail:jakarta.mail-api](https://github.com/jakartaee/mail-api) | `2.0.1` | `2.1.5` |
| [jakarta.activation:jakarta.activation-api](https://github.com/jakartaee/jaf-api) | `2.0.0` | `2.1.4` |
| [gradle-wrapper](https://github.com/gradle/gradle) | `9.1.0` | `9.7.0` |

Bumps the gradle-dependencies group with 1 update in the /core directory: [org.openjdk.jmh:jmh-core](https://github.com/openjdk/jmh).
Bumps the gradle-dependencies group with 3 updates in the /jmail directory: [biz.aQute.bnd.builder](https://github.com/bndtools/bnd), [jakarta.mail:jakarta.mail-api](https://github.com/jakartaee/mail-api) and [jakarta.activation:jakarta.activation-api](https://github.com/jakartaee/jaf-api).
Bumps the gradle-dependencies group with 2 updates in the /mail directory: [biz.aQute.bnd.builder](https://github.com/bndtools/bnd) and javax.mail:mail.
Bumps the gradle-dependencies group with 1 update in the /misc directory: javax.mail:mail.
Bumps the gradle-dependencies group with 4 updates in the /mls directory: [biz.aQute.bnd.builder](https://github.com/bndtools/bnd), [com.google.protobuf:protoc](https://github.com/protocolbuffers/protobuf), [io.grpc:protoc-gen-grpc-java](https://github.com/grpc/grpc-java) and com.google.protobuf.
Bumps the gradle-dependencies group with 1 update in the /pg directory: [biz.aQute.bnd.builder](https://github.com/bndtools/bnd).
Bumps the gradle-dependencies group with 2 updates in the /pgsc directory: [biz.aQute.bnd.builder](https://github.com/bndtools/bnd) and [com.yubico.yubikit:openpgp](https://github.com/Yubico/yubikit-android).
Bumps the gradle-dependencies group with 1 update in the /pkix directory: [biz.aQute.bnd.builder](https://github.com/bndtools/bnd).
Bumps the gradle-dependencies group with 1 update in the /prov directory: [biz.aQute.bnd.builder](https://github.com/bndtools/bnd).
Bumps the gradle-dependencies group with 1 update in the /test directory: [junit:junit](https://github.com/junit-team/junit4).
Bumps the gradle-dependencies group with 1 update in the /tls directory: [biz.aQute.bnd.builder](https://github.com/bndtools/bnd).
Bumps the gradle-dependencies group with 1 update in the /tls-klog directory: [biz.aQute.bnd.builder](https://github.com/bndtools/bnd).
Bumps the gradle-dependencies group with 2 updates in the /util directory: [junit:junit](https://github.com/junit-team/junit4) and [biz.aQute.bnd.builder](https://github.com/bndtools/bnd).


Updates `com.puppycrawl.tools:checkstyle` from 9.0 to 9.3
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](checkstyle/checkstyle@checkstyle-9.0...checkstyle-9.3)

Updates `com.google.errorprone:error_prone_core` from 2.43.0 to 2.50.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.43.0...v2.50.0)

Updates `junit:junit` from 4.11 to 4.13.2
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.2)

Updates `net.ltgt.errorprone` from 4.2.0 to 4.4.0

Updates `org.openjdk.jmh:jmh-core` from 1.33 to 1.37
- [Commits](openjdk/jmh@1.33...1.37)

Updates `org.openjdk.jmh:jmh-generator-annprocess` from 1.33 to 1.37
- [Commits](openjdk/jmh@1.33...1.37)

Updates `biz.aQute.bnd.builder` from 7.1.0 to 7.3.0
- [Release notes](https://github.com/bndtools/bnd/releases)
- [Commits](bndtools/bnd@7.1.0...7.3.0)

Updates `com.yubico.yubikit:openpgp` from 3.1.0 to 3.2.0
- [Release notes](https://github.com/Yubico/yubikit-android/releases)
- [Changelog](https://github.com/Yubico/yubikit-android/blob/main/NEWS)
- [Commits](Yubico/yubikit-android@3.1.0...3.2.0)

Updates `com.yubico.yubikit:desktop` from 3.1.0 to 3.2.0
- [Release notes](https://github.com/Yubico/yubikit-android/releases)
- [Changelog](https://github.com/Yubico/yubikit-android/blob/main/NEWS)
- [Commits](Yubico/yubikit-android@3.1.0...3.2.0)

Updates `com.google.protobuf:protoc` from 3.22.3 to 3.25.9
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `io.grpc:protoc-gen-grpc-java` from 1.58.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.58.0...v1.83.1)

Updates `com.google.protobuf` from 0.9.4 to 0.10.0

Updates `javax.mail:mail` from 1.4 to 1.4.7

Updates `jakarta.mail:jakarta.mail-api` from 2.0.1 to 2.1.5
- [Release notes](https://github.com/jakartaee/mail-api/releases)
- [Commits](jakartaee/mail-api@2.0.1...2.1.5)

Updates `jakarta.activation:jakarta.activation-api` from 2.0.0 to 2.1.4
- [Release notes](https://github.com/jakartaee/jaf-api/releases)
- [Commits](jakartaee/jaf-api@2.0.0...2.1.4)

Updates `gradle-wrapper` from 9.1.0 to 9.7.0
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v9.1.0...v9.7.0)

Updates `org.openjdk.jmh:jmh-core` from 1.33 to 1.37
- [Commits](openjdk/jmh@1.33...1.37)

Updates `org.openjdk.jmh:jmh-generator-annprocess` from 1.33 to 1.37
- [Commits](openjdk/jmh@1.33...1.37)

Updates `biz.aQute.bnd.builder` from 7.1.0 to 7.3.0
- [Release notes](https://github.com/bndtools/bnd/releases)
- [Commits](bndtools/bnd@7.1.0...7.3.0)

Updates `jakarta.mail:jakarta.mail-api` from 2.0.1 to 2.1.5
- [Release notes](https://github.com/jakartaee/mail-api/releases)
- [Commits](jakartaee/mail-api@2.0.1...2.1.5)

Updates `jakarta.activation:jakarta.activation-api` from 2.0.0 to 2.1.4
- [Release notes](https://github.com/jakartaee/jaf-api/releases)
- [Commits](jakartaee/jaf-api@2.0.0...2.1.4)

Updates `biz.aQute.bnd.builder` from 7.1.0 to 7.3.0
- [Release notes](https://github.com/bndtools/bnd/releases)
- [Commits](bndtools/bnd@7.1.0...7.3.0)

Updates `javax.mail:mail` from 1.4 to 1.4.7

Updates `javax.mail:mail` from 1.4 to 1.4.7

Updates `biz.aQute.bnd.builder` from 7.1.0 to 7.3.0
- [Release notes](https://github.com/bndtools/bnd/releases)
- [Commits](bndtools/bnd@7.1.0...7.3.0)

Updates `com.google.protobuf:protoc` from 3.22.3 to 3.25.9
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `io.grpc:protoc-gen-grpc-java` from 1.58.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.58.0...v1.83.1)

Updates `com.google.protobuf` from 0.9.4 to 0.10.0

Updates `biz.aQute.bnd.builder` from 7.1.0 to 7.3.0
- [Release notes](https://github.com/bndtools/bnd/releases)
- [Commits](bndtools/bnd@7.1.0...7.3.0)

Updates `biz.aQute.bnd.builder` from 7.1.0 to 7.3.0
- [Release notes](https://github.com/bndtools/bnd/releases)
- [Commits](bndtools/bnd@7.1.0...7.3.0)

Updates `com.yubico.yubikit:openpgp` from 3.1.0 to 3.2.0
- [Release notes](https://github.com/Yubico/yubikit-android/releases)
- [Changelog](https://github.com/Yubico/yubikit-android/blob/main/NEWS)
- [Commits](Yubico/yubikit-android@3.1.0...3.2.0)

Updates `com.yubico.yubikit:desktop` from 3.1.0 to 3.2.0
- [Release notes](https://github.com/Yubico/yubikit-android/releases)
- [Changelog](https://github.com/Yubico/yubikit-android/blob/main/NEWS)
- [Commits](Yubico/yubikit-android@3.1.0...3.2.0)

Updates `biz.aQute.bnd.builder` from 7.1.0 to 7.3.0
- [Release notes](https://github.com/bndtools/bnd/releases)
- [Commits](bndtools/bnd@7.1.0...7.3.0)

Updates `biz.aQute.bnd.builder` from 7.1.0 to 7.3.0
- [Release notes](https://github.com/bndtools/bnd/releases)
- [Commits](bndtools/bnd@7.1.0...7.3.0)

Updates `junit:junit` from 4.11 to 4.13.2
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.2)

Updates `biz.aQute.bnd.builder` from 7.1.0 to 7.3.0
- [Release notes](https://github.com/bndtools/bnd/releases)
- [Commits](bndtools/bnd@7.1.0...7.3.0)

Updates `biz.aQute.bnd.builder` from 7.1.0 to 7.3.0
- [Release notes](https://github.com/bndtools/bnd/releases)
- [Commits](bndtools/bnd@7.1.0...7.3.0)

Updates `junit:junit` from 4.11 to 4.13.2
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.2)

Updates `biz.aQute.bnd.builder` from 7.1.0 to 7.3.0
- [Release notes](https://github.com/bndtools/bnd/releases)
- [Commits](bndtools/bnd@7.1.0...7.3.0)

---
updated-dependencies:
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: '9.3'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: com.google.errorprone:error_prone_core
  dependency-version: 2.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: junit:junit
  dependency-version: 4.13.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: net.ltgt.errorprone
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: org.openjdk.jmh:jmh-core
  dependency-version: '1.37'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: org.openjdk.jmh:jmh-generator-annprocess
  dependency-version: '1.37'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: biz.aQute.bnd.builder
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: com.yubico.yubikit:openpgp
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: com.yubico.yubikit:desktop
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: com.google.protobuf:protoc
  dependency-version: 3.25.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: io.grpc:protoc-gen-grpc-java
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: com.google.protobuf
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: javax.mail:mail
  dependency-version: 1.4.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: jakarta.mail:jakarta.mail-api
  dependency-version: 2.1.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: jakarta.activation:jakarta.activation-api
  dependency-version: 2.1.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: gradle-wrapper
  dependency-version: 9.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: org.openjdk.jmh:jmh-core
  dependency-version: '1.37'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: org.openjdk.jmh:jmh-generator-annprocess
  dependency-version: '1.37'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: biz.aQute.bnd.builder
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: jakarta.mail:jakarta.mail-api
  dependency-version: 2.1.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: jakarta.activation:jakarta.activation-api
  dependency-version: 2.1.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: biz.aQute.bnd.builder
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: javax.mail:mail
  dependency-version: 1.4.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: javax.mail:mail
  dependency-version: 1.4.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: biz.aQute.bnd.builder
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: com.google.protobuf:protoc
  dependency-version: 3.25.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: io.grpc:protoc-gen-grpc-java
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: com.google.protobuf
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: biz.aQute.bnd.builder
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: biz.aQute.bnd.builder
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: com.yubico.yubikit:openpgp
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: com.yubico.yubikit:desktop
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: biz.aQute.bnd.builder
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: biz.aQute.bnd.builder
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: junit:junit
  dependency-version: 4.13.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: biz.aQute.bnd.builder
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: biz.aQute.bnd.builder
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: junit:junit
  dependency-version: 4.13.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: biz.aQute.bnd.builder
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 20, 2026
@hubot
hubot deleted the dependabot/gradle/gradle-dependencies-457493f4ba branch August 20, 2026 04:30
@dghgit dghgit self-assigned this Aug 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@dghgit dghgit

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@dghgit