Skip to content

chore(deps): bump the java-dependencies group with 7 updates#34

Merged
AlphaSudo merged 1 commit intomasterfrom
dependabot/gradle/java-dependencies-3718363a07
Mar 23, 2026
Merged

chore(deps): bump the java-dependencies group with 7 updates#34
AlphaSudo merged 1 commit intomasterfrom
dependabot/gradle/java-dependencies-3718363a07

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 23, 2026

Bumps the java-dependencies group with 7 updates:

Package From To
net.logstash.logback:logstash-logback-encoder 8.1 9.0
com.fasterxml.jackson.core:jackson-databind 2.21.1 2.21.2
com.fasterxml.jackson.dataformat:jackson-dataformat-yaml 2.21.1 2.21.2
com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.21.1 2.21.2
io.micrometer:micrometer-core 1.15.0 1.16.4
io.micrometer:micrometer-registry-prometheus 1.15.0 1.16.4
com.gradleup.shadow 8.3.6 9.4.0

Updates net.logstash.logback:logstash-logback-encoder from 8.1 to 9.0

Release notes

Sourced from net.logstash.logback:logstash-logback-encoder's releases.

logstash-logback-encoder-9.0

This major release migrates to Jackson 3, and bumps the minimum Java version to 17.

The migration to Jackson 3 introduced some backwards incompatibilities. See #1095 for upgrade details.

Special thanks to new contributors @​tommyulfsparre, @​patrickjbarry, and @​maxxedev!

What's Changed

⚠️ Update considerations and deprecations

✨ New features and improvements

🐞 Bug fixes

📖 Documentation, Tests and Build

🆙 Dependency Upgrades

New Contributors

Full Changelog: logfellow/logstash-logback-encoder@logstash-logback-encoder-8.1...logstash-logback-encoder-9.0

Commits
  • e8a1c8e [maven-release-plugin] prepare release logstash-logback-encoder-9.0
  • eecb205 Add link to discussions in contributing.md
  • 572543c fix build badge in readme
  • c64b998 Use alert at top of readme
  • f74c821 Make it possible to pretty print throwables as array of strings. (#1043)
  • 358f644 Document Thread and ThreadLocal cleanup (#1105)
  • 0d553cf Add ability to suppress messages from stacktrace (#1104)
  • c9318cd Bump maven to 3.9.11 (#1103)
  • ef58694 Bump codeql action to v3 (#1102)
  • 3059741 Bump logback-core.version from 1.5.19 to 1.5.20 (#1097)
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.21.1 to 2.21.2

Commits

Updates com.fasterxml.jackson.dataformat:jackson-dataformat-yaml from 2.21.1 to 2.21.2

Commits
  • 5639ffe [maven-release-plugin] prepare release jackson-dataformats-text-2.21.2
  • c6aa953 Prep for 2.21.2 release
  • 3406e8a Merge branch '2.20' into 2.21
  • d52ce35 Merge branch '2.19' into 2.20
  • 9150ee8 update release notes for 2.19.5
  • d8738d6 Merge branch '2.20' into 2.21
  • 3b4a0ce Merge branch '2.19' into 2.20
  • 56270df Merge branch '2.18' into 2.19
  • a9c1032 Backport #615 fix in 2.18 (#617)
  • efb186c Post-release dep version bump
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.21.1 to 2.21.2

Updates io.micrometer:micrometer-core from 1.15.0 to 1.16.4

Release notes

Sourced from io.micrometer:micrometer-core's releases.

1.16.4

🐞 Bug Fixes

  • Using context-propagation with a no-op Observation corrupts the current Observation #7200

📔 Documentation

  • Document (Default)MeterObservationHandler #6361
  • Document Jakarta Mail instrumentation #6485
  • Document statsd UDS config #5730

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​izeye, @​kangdaeun1022, and @​seonghyeoklee

1.16.3

🐞 Bug Fixes

  • Add immutable noop Observation.Context #7133
  • OSGi test isn't reporting failures #7060

📔 Documentation

  • Docs: Align AsciiDoc callout syntax #7148
  • Improve documentation of ExecutorServiceMetrics #7083

🔨 Dependency Upgrades

  • Bump ch.qos.logback:logback-classic from 1.5.24 to 1.5.26 #7125
  • Bump com.hazelcast:hazelcast from 5.3.8 to 5.6.0 #6802
  • Bump com.netflix.spectator:spectator-reg-atlas from 1.9.3 to 1.9.4 #7166
  • Bump dropwizard-metrics from 4.2.37 to 4.2.38 #7120
  • Bump gradle-wrapper from 8.14.3 to 8.14.4 #7112
  • Bump grpc from 1.76.2 to 1.76.3 #7137
  • Bump io.dropwizard.metrics5:metrics-core from 5.0.5 to 5.0.6 #7124
  • Bump io.freefair.aspectj.post-compile-weaving from 8.14.3 to 8.14.4 #7070
  • Bump io.spring.develocity.conventions from 0.0.24 to 0.0.25 #7101
  • Bump org.assertj:assertj-core from 3.27.6 to 3.27.7 #7126

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​izeye, @​mateusz-nalepa, and @​tkmsaaaam

1.16.2

🐞 Bug Fixes

... (truncated)

Commits

Updates io.micrometer:micrometer-registry-prometheus from 1.15.0 to 1.16.4

Release notes

Sourced from io.micrometer:micrometer-registry-prometheus's releases.

1.16.4

🐞 Bug Fixes

  • Using context-propagation with a no-op Observation corrupts the current Observation #7200

📔 Documentation

  • Document (Default)MeterObservationHandler #6361
  • Document Jakarta Mail instrumentation #6485
  • Document statsd UDS config #5730

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​izeye, @​kangdaeun1022, and @​seonghyeoklee

1.16.3

🐞 Bug Fixes

  • Add immutable noop Observation.Context #7133
  • OSGi test isn't reporting failures #7060

📔 Documentation

  • Docs: Align AsciiDoc callout syntax #7148
  • Improve documentation of ExecutorServiceMetrics #7083

🔨 Dependency Upgrades

  • Bump ch.qos.logback:logback-classic from 1.5.24 to 1.5.26 #7125
  • Bump com.hazelcast:hazelcast from 5.3.8 to 5.6.0 #6802
  • Bump com.netflix.spectator:spectator-reg-atlas from 1.9.3 to 1.9.4 #7166
  • Bump dropwizard-metrics from 4.2.37 to 4.2.38 #7120
  • Bump gradle-wrapper from 8.14.3 to 8.14.4 #7112
  • Bump grpc from 1.76.2 to 1.76.3 #7137
  • Bump io.dropwizard.metrics5:metrics-core from 5.0.5 to 5.0.6 #7124
  • Bump io.freefair.aspectj.post-compile-weaving from 8.14.3 to 8.14.4 #7070
  • Bump io.spring.develocity.conventions from 0.0.24 to 0.0.25 #7101
  • Bump org.assertj:assertj-core from 3.27.6 to 3.27.7 #7126

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​izeye, @​mateusz-nalepa, and @​tkmsaaaam

1.16.2

🐞 Bug Fixes

... (truncated)

Commits

Updates com.gradleup.shadow from 8.3.6 to 9.4.0

Release notes

Sourced from com.gradleup.shadow's releases.

9.4.0

Added

  • Support Isolated Projects. (#1139)

Changed

  • Allow opting out of adding shadowJar into assemble lifecycle. (#1939) 
    shadow {
  // Disable making `assemble` task depend on `shadowJar`. This is enabled by default.
  addShadowJarToAssembleLifecycle = false
}
  • Stop catching ZipException when writing entries. (#1970)

Fixed

  • Fix interaction with Gradle artifact transforms. (#1345)
  • Fix skipStringConstants per-relocator behavior in mapName. (#1968)
  • Fix failing for non-existent class directories. (#1976)

9.3.2

Changed

  • Stop moving gradleApi dependency from api to compileOnly for Gradle 9.4+. (#1919)
  • Log warnings for duplicates in the final JAR. (#1931)

Fixed

  • Fix relocation patterns not included in task fingerprint. (#1933)

9.3.1

Fixed

  • Use ASM from jdependency embedded. (#1898)
    This fixes potential classpath conflicts when using Shadow with other plugins that also use ASM.

9.3.0

Added

  • Add PatternFilterableResourceTransformer to simplify pattern based ResourceTransformers. (#1849)
  • Expose patternSet of ServiceFileTransformer as public. (#1849)
  • Expose patternSet of ApacheLicenseResourceTransformer as public. (#1850)
  • Expose patternSet of ApacheNoticeResourceTransformer as public. (#1850)
  • Expose patternSet of PreserveFirstFoundResourceTransformer as public. (#1855)
  • Support overriding output path of ApacheNoticeResourceTransformer. (#1851)
  • Add new merge strategy Fail to PropertiesFileTransformer. (#1856)
  • Add FindResourceInClasspath task to help with debugging issues with merged duplicate resources. (#1860)
  • Add MergeLicenseResourceTransformer. (#1858)

... (truncated)

Commits
  • e51f3e7 Prepare version 9.4.0
  • cf531d4 Prefer parameterized logging (#1977)
  • 85ba389 Fix failing for non-existent class directories (#1976)
  • 3a24369 Update dependency org.apache.maven:maven-model to v3.9.14 (#1973)
  • 6e3dfb5 Use removePrefix instead of replace for multi-release prefix removal (#1972)
  • 49f8c31 Reuse most logic for writing entries (#1971)
  • ed47d0c Update README.md for clarity and formatting
  • d73d94a Stop catching ZipException when writing entries (#1970)
  • 0564cae Fix skipStringConstants per-relocator behavior: use continue instead of retur...
  • 8d995b2 Split relocators remapping (#1967)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the java-dependencies group with 7 updates
acca75c 
Bumps the java-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [net.logstash.logback:logstash-logback-encoder](https://github.com/logfellow/logstash-logback-encoder) | `8.1` | `9.0` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.21.1` | `2.21.2` |
| [com.fasterxml.jackson.dataformat:jackson-dataformat-yaml](https://github.com/FasterXML/jackson-dataformats-text) | `2.21.1` | `2.21.2` |
| com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.21.1` | `2.21.2` |
| [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer) | `1.15.0` | `1.16.4` |
| [io.micrometer:micrometer-registry-prometheus](https://github.com/micrometer-metrics/micrometer) | `1.15.0` | `1.16.4` |
| [com.gradleup.shadow](https://github.com/GradleUp/shadow) | `8.3.6` | `9.4.0` |


Updates `net.logstash.logback:logstash-logback-encoder` from 8.1 to 9.0
- [Release notes](https://github.com/logfellow/logstash-logback-encoder/releases)
- [Commits](logfellow/logstash-logback-encoder@logstash-logback-encoder-8.1...logstash-logback-encoder-9.0)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.21.1 to 2.21.2
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-yaml` from 2.21.1 to 2.21.2
- [Commits](FasterXML/jackson-dataformats-text@jackson-dataformats-text-2.21.1...jackson-dataformats-text-2.21.2)

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.21.1 to 2.21.2

Updates `io.micrometer:micrometer-core` from 1.15.0 to 1.16.4
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.15.0...v1.16.4)

Updates `io.micrometer:micrometer-registry-prometheus` from 1.15.0 to 1.16.4
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.15.0...v1.16.4)

Updates `com.gradleup.shadow` from 8.3.6 to 9.4.0
- [Release notes](https://github.com/GradleUp/shadow/releases)
- [Commits](GradleUp/shadow@8.3.6...9.4.0)

---
updated-dependencies:
- dependency-name: net.logstash.logback:logstash-logback-encoder
  dependency-version: '9.0'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: java-dependencies
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.21.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java-dependencies
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-yaml
  dependency-version: 2.21.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java-dependencies
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-version: 2.21.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java-dependencies
- dependency-name: io.micrometer:micrometer-core
  dependency-version: 1.16.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java-dependencies
- dependency-name: io.micrometer:micrometer-registry-prometheus
  dependency-version: 1.16.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java-dependencies
- dependency-name: com.gradleup.shadow
  dependency-version: 9.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: java-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 23, 2026
@AlphaSudo AlphaSudo merged commit ba7b584 into master Mar 23, 2026
5 checks passed
@dependabot dependabot Bot deleted the dependabot/gradle/java-dependencies-3718363a07 branch March 23, 2026 16:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@AlphaSudo