Skip to content

build(deps): bump pac4j.version from 5.7.10 to 6.5.5 - #19936

Open
dependabot[bot] wants to merge 4 commits into
masterfrom
dependabot/maven/pac4j.version-6.5.5
Open

build(deps): bump pac4j.version from 5.7.10 to 6.5.5#19936
dependabot[bot] wants to merge 4 commits into
masterfrom
dependabot/maven/pac4j.version-6.5.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 8, 2026

Copy link
Copy Markdown
Contributor

Bumps pac4j.version from 5.7.10 to 6.5.5.
Updates org.pac4j:pac4j-oidc from 5.7.10 to 6.5.5

Commits
  • 4510666 [maven-release-plugin] prepare release pac4j-parent-6.5.5
  • 0215d75 Merge pull request #3958 from pac4j/renovate/aws-java-sdk-v2-monorepo
  • a0b0435 Update dependency software.amazon.awssdk:s3 to v2.48.3
  • 51adb8e Merge pull request #3957 from pac4j/renovate/aws-java-sdk-v2-monorepo
  • cecc62f Update dependency software.amazon.awssdk:s3 to v2.48.2
  • 3cd71d6 Merge pull request #3956 from pac4j/renovate/actions-setup-java-digest
  • 44e5e50 Update actions/setup-java digest to 03ad4de
  • 658b143 Merge pull request #3955 from pac4j/renovate/aws-java-sdk-v2-monorepo
  • f23fa01 Update dependency software.amazon.awssdk:s3 to v2.48.1
  • bdda777 optional JWKS for trust anchors in OIDC Federation
  • Additional commits viewable in compare view

Updates org.pac4j:pac4j-javaee from 5.7.10 to 6.5.5

Commits
  • 4510666 [maven-release-plugin] prepare release pac4j-parent-6.5.5
  • 0215d75 Merge pull request #3958 from pac4j/renovate/aws-java-sdk-v2-monorepo
  • a0b0435 Update dependency software.amazon.awssdk:s3 to v2.48.3
  • 51adb8e Merge pull request #3957 from pac4j/renovate/aws-java-sdk-v2-monorepo
  • cecc62f Update dependency software.amazon.awssdk:s3 to v2.48.2
  • 3cd71d6 Merge pull request #3956 from pac4j/renovate/actions-setup-java-digest
  • 44e5e50 Update actions/setup-java digest to 03ad4de
  • 658b143 Merge pull request #3955 from pac4j/renovate/aws-java-sdk-v2-monorepo
  • f23fa01 Update dependency software.amazon.awssdk:s3 to v2.48.1
  • bdda777 optional JWKS for trust anchors in OIDC Federation
  • Additional commits viewable in compare view

Updates org.pac4j:pac4j-core from 5.7.10 to 6.5.5

Commits
  • 4510666 [maven-release-plugin] prepare release pac4j-parent-6.5.5
  • 0215d75 Merge pull request #3958 from pac4j/renovate/aws-java-sdk-v2-monorepo
  • a0b0435 Update dependency software.amazon.awssdk:s3 to v2.48.3
  • 51adb8e Merge pull request #3957 from pac4j/renovate/aws-java-sdk-v2-monorepo
  • cecc62f Update dependency software.amazon.awssdk:s3 to v2.48.2
  • 3cd71d6 Merge pull request #3956 from pac4j/renovate/actions-setup-java-digest
  • 44e5e50 Update actions/setup-java digest to 03ad4de
  • 658b143 Merge pull request #3955 from pac4j/renovate/aws-java-sdk-v2-monorepo
  • f23fa01 Update dependency software.amazon.awssdk:s3 to v2.48.1
  • bdda777 optional JWKS for trust anchors in OIDC Federation
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps `pac4j.version` from 5.7.10 to 6.5.5.

Updates `org.pac4j:pac4j-oidc` from 5.7.10 to 6.5.5
- [Commits](pac4j/pac4j@pac4j-parent-5.7.10...pac4j-parent-6.5.5)

Updates `org.pac4j:pac4j-javaee` from 5.7.10 to 6.5.5
- [Commits](pac4j/pac4j@pac4j-parent-5.7.10...pac4j-parent-6.5.5)

Updates `org.pac4j:pac4j-core` from 5.7.10 to 6.5.5
- [Commits](pac4j/pac4j@pac4j-parent-5.7.10...pac4j-parent-6.5.5)

---
updated-dependencies:
- dependency-name: org.pac4j:pac4j-oidc
  dependency-version: 6.5.5
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.pac4j:pac4j-javaee
  dependency-version: 6.5.5
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.pac4j:pac4j-core
  dependency-version: 6.5.5
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 8, 2026
@FrankChen021

Copy link
Copy Markdown
Member

Codex triage update at the verified head dd11b30f03b21d67759a6de76b3d3ba7903925fa.

The pac4j upgrade is 5.7.10 -> 6.5.5. The source migration and focused tests are in place, but pac4j 6 changes profile/session serialization; during a rolling upgrade, existing session cookies may become invalid and users may need to authenticate again. See the pac4j 6 release notes.

The current CI run is terminal with 25 successful checks, 1 failure, and 2 skipped checks. The failed K/E/W/Z/Y/X unit job reports an unrelated KafkaMultiSupervisorTest UnknownTopicOrPartitionException; the coverage job was skipped because of that failure.

Local focused coverage passed, but this upgrade still requires a full human test in a real Druid test cluster covering OIDC/JWT callbacks, session cookies, deployment behavior, clients, and rolling upgrades. I am not approving or merging this PR, and I am stopping automated work on it pending that validation and CI disposition.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Area - Dependencies Area - Documentation dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant