Skip to content

chore(deps): bump the kestra-gradle-plugins group across 1 directory with 4 updates - #73

Merged
jymaire merged 1 commit into
mainfrom
dependabot/gradle/kestra-gradle-plugins-9acef39a9c
Jul 30, 2026
Merged

chore(deps): bump the kestra-gradle-plugins group across 1 directory with 4 updates#73
jymaire merged 1 commit into
mainfrom
dependabot/gradle/kestra-gradle-plugins-9acef39a9c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 15, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the kestra-gradle-plugins group with 4 updates in the / directory: io.kestra.gradle.repository-conventions, io.kestra.gradle.plugin-doc-lint, io.kestra.gradle.spotless-conventions and io.kestra.gradle.inject-bom-versions.

Updates io.kestra.gradle.repository-conventions from 1.2.5 to 1.2.6

Release notes

Sourced from io.kestra.gradle.repository-conventions's releases.

v1.2.6

Changelog

🐛 Bug Fixes

  • 8995dc4 bring back targetFile for Spotless
  • e7bc741 update to version 'v1.2.6'.
  • aa17a0a update snapshot version 'v1.2.6-SNAPSHOT'.

Contributors

We'd like to thank the following people for their contributions: Malay Dewangan, YannC.

Commits
  • e7bc741 update to version 'v1.2.6'.
  • 8995dc4 fix: bring back targetFile for Spotless
  • aa17a0a update snapshot version 'v1.2.6-SNAPSHOT'.
  • See full diff in compare view

Updates io.kestra.gradle.plugin-doc-lint from 1.2.5 to 1.2.6

Release notes

Sourced from io.kestra.gradle.plugin-doc-lint's releases.

v1.2.6

Changelog

🐛 Bug Fixes

  • 8995dc4 bring back targetFile for Spotless
  • e7bc741 update to version 'v1.2.6'.
  • aa17a0a update snapshot version 'v1.2.6-SNAPSHOT'.

Contributors

We'd like to thank the following people for their contributions: Malay Dewangan, YannC.

Commits
  • e7bc741 update to version 'v1.2.6'.
  • 8995dc4 fix: bring back targetFile for Spotless
  • aa17a0a update snapshot version 'v1.2.6-SNAPSHOT'.
  • See full diff in compare view

Updates io.kestra.gradle.spotless-conventions from 1.2.5 to 1.2.6

Release notes

Sourced from io.kestra.gradle.spotless-conventions's releases.

v1.2.6

Changelog

🐛 Bug Fixes

  • 8995dc4 bring back targetFile for Spotless
  • e7bc741 update to version 'v1.2.6'.
  • aa17a0a update snapshot version 'v1.2.6-SNAPSHOT'.

Contributors

We'd like to thank the following people for their contributions: Malay Dewangan, YannC.

Commits
  • e7bc741 update to version 'v1.2.6'.
  • 8995dc4 fix: bring back targetFile for Spotless
  • aa17a0a update snapshot version 'v1.2.6-SNAPSHOT'.
  • See full diff in compare view

Updates io.kestra.gradle.inject-bom-versions from 1.2.5 to 1.2.6

Release notes

Sourced from io.kestra.gradle.inject-bom-versions's releases.

v1.2.6

Changelog

🐛 Bug Fixes

  • 8995dc4 bring back targetFile for Spotless
  • e7bc741 update to version 'v1.2.6'.
  • aa17a0a update snapshot version 'v1.2.6-SNAPSHOT'.

Contributors

We'd like to thank the following people for their contributions: Malay Dewangan, YannC.

Commits
  • e7bc741 update to version 'v1.2.6'.
  • 8995dc4 fix: bring back targetFile for Spotless
  • aa17a0a update snapshot version 'v1.2.6-SNAPSHOT'.
  • See full diff in compare view

@dependabot dependabot Bot added the dependency-upgrade Dependency upgrade is needed label Jul 15, 2026
@github-actions

github-actions Bot commented Jul 15, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

📦 Artifacts

Name Size Updated Expiration
jar 214.69 MB Jul 29, 26, 6:37:14 AM UTC Aug 5, 26, 6:37:05 AM UTC

🛡 Trivy

Vulnerability in: Java

Vulnerability Severity Package Installed Version Fixed Version
GHSA-r7wm-3cxj-wff9 HIGH com.fasterxml.jackson.core:jackson-core 2.21.1 2.18.8, 2.21.4, 2.22.1
CVE-2026-54512 HIGH com.fasterxml.jackson.core:jackson-databind 2.21.1 2.18.8, 3.1.4, 2.21.4
CVE-2026-54513 HIGH com.fasterxml.jackson.core:jackson-databind 2.21.1 2.18.8, 2.21.4, 3.1.4
CVE-2026-54514 MEDIUM com.fasterxml.jackson.core:jackson-databind 2.21.1 2.18.8, 2.21.4, 3.1.4
CVE-2026-54515 MEDIUM com.fasterxml.jackson.core:jackson-databind 2.21.1 3.1.4, 2.18.9, 2.21.5, 2.22.1
CVE-2026-54516 MEDIUM com.fasterxml.jackson.core:jackson-databind 2.21.1 2.21.4, 3.1.4
CVE-2026-54517 MEDIUM com.fasterxml.jackson.core:jackson-databind 2.21.1 2.21.4, 3.1.4
CVE-2026-54518 MEDIUM com.fasterxml.jackson.core:jackson-databind 2.21.1 2.21.4
CVE-2026-59888 MEDIUM com.fasterxml.jackson.core:jackson-databind 2.21.1 2.18.8, 2.21.4
CVE-2026-59889 MEDIUM com.fasterxml.jackson.core:jackson-databind 2.21.1 2.21.5, 2.18.9, 2.22.1
GHSA-mhm7-754m-9p8w MEDIUM com.fasterxml.jackson.core:jackson-databind 2.21.1 2.18.9, 2.21.5
CVE-2026-42583 HIGH io.netty:netty-codec-compression 4.2.12.Final 4.2.13.Final
CVE-2026-59901 HIGH io.netty:netty-codec-compression 4.2.12.Final 4.2.16.Final
CVE-2026-42584 HIGH io.netty:netty-codec-http 4.2.12.Final 4.2.13.Final, 4.1.133.Final
CVE-2026-42587 HIGH io.netty:netty-codec-http 4.2.12.Final 4.2.13.Final, 4.1.133.Final
CVE-2026-55831 HIGH io.netty:netty-codec-http 4.2.12.Final 4.2.16.Final, 4.1.136.Final
CVE-2026-55833 HIGH io.netty:netty-codec-http 4.2.12.Final 4.2.16.Final, 4.1.136.Final
CVE-2026-56745 HIGH io.netty:netty-codec-http 4.2.12.Final 4.2.16.Final, 4.1.136.Final
CVE-2026-41417 MEDIUM io.netty:netty-codec-http 4.2.12.Final 4.1.133.Final, 4.2.13.Final
CVE-2026-42580 MEDIUM io.netty:netty-codec-http 4.2.12.Final 4.2.13.Final, 4.1.133.Final
CVE-2026-42581 MEDIUM io.netty:netty-codec-http 4.2.12.Final 4.2.13.Final, 4.1.133.Final
CVE-2026-42585 MEDIUM io.netty:netty-codec-http 4.2.12.Final 4.2.13.Final, 4.1.133.Final
CVE-2026-50020 MEDIUM io.netty:netty-codec-http 4.2.12.Final 4.2.15.Final, 4.1.135.Final
CVE-2026-56746 MEDIUM io.netty:netty-codec-http 4.2.12.Final 4.2.16.Final, 4.1.136.Final
CVE-2026-59898 MEDIUM io.netty:netty-codec-http 4.2.12.Final 4.2.16.Final, 4.1.136.Final
CVE-2026-59899 MEDIUM io.netty:netty-codec-http 4.2.12.Final 4.2.16.Final, 4.1.136.Final
CVE-2026-59921 MEDIUM io.netty:netty-codec-http 4.2.12.Final 4.2.16.Final, 4.1.136.Final
CVE-2026-42587 HIGH io.netty:netty-codec-http2 4.2.12.Final 4.2.13.Final, 4.1.133.Final
CVE-2026-47244 MEDIUM io.netty:netty-codec-http2 4.2.12.Final 4.2.15.Final, 4.1.135.Final
CVE-2026-48043 MEDIUM io.netty:netty-codec-http2 4.2.12.Final 4.1.135.Final, 4.2.15.Final
CVE-2026-50560 MEDIUM io.netty:netty-codec-http2 4.2.12.Final 4.2.15.Final, 4.1.135.Final
CVE-2026-59900 MEDIUM io.netty:netty-codec-http2 4.2.12.Final 4.2.16.Final, 4.1.136.Final
CVE-2026-44249 HIGH io.netty:netty-handler 4.2.12.Final 4.2.15.Final, 4.1.135.Final
CVE-2026-45416 HIGH io.netty:netty-handler 4.2.12.Final 4.2.15.Final, 4.1.135.Final
CVE-2026-50010 HIGH io.netty:netty-handler 4.2.12.Final 4.2.15.Final, 4.1.135.Final
CVE-2026-42578 LOW io.netty:netty-handler-proxy 4.2.12.Final 4.1.133.Final, 4.2.13.Final
CVE-2026-34479 MEDIUM org.apache.logging.log4j:log4j-1.2-api 2.25.3 2.25.4
CVE-2026-34477 MEDIUM org.apache.logging.log4j:log4j-core 2.25.3 2.25.4
CVE-2026-34478 MEDIUM org.apache.logging.log4j:log4j-core 2.25.3 2.25.4
CVE-2026-34480 MEDIUM org.apache.logging.log4j:log4j-core 2.25.3 2.25.4

🧪 Java Unit Tests

TestsPassed ✅Skipped ⚠️FailedTime ⏱
Java Tests Report6 ran4 ✅2 ⚠️0 ❌1m 11s 806ms

🔁 Unreleased Commits

1 commits since v1.2.3

SHA Title Author Date
b858d00 fix: renormalize gradlew.bat line endings François Delbrayelle Jul 23, 26, 1:01:55 PM UTC

@github-actions

github-actions Bot commented Jul 15, 2026

Copy link
Copy Markdown
Contributor

Tests report quick summary:

success ✅ > tests: 6, success: 4, skipped: 2, failed: 0

unfold for details
Project Status Success Skipped Failed
plugin-beam success ✅ 4 2 0

@dependabot
chore(deps): bump the kestra-gradle-plugins group across 1 directory …
c2ef814 
…with 4 updates

Bumps the kestra-gradle-plugins group with 4 updates in the / directory: [io.kestra.gradle.repository-conventions](https://github.com/kestra-io/gradle-plugin), [io.kestra.gradle.plugin-doc-lint](https://github.com/kestra-io/gradle-plugin), [io.kestra.gradle.spotless-conventions](https://github.com/kestra-io/gradle-plugin) and [io.kestra.gradle.inject-bom-versions](https://github.com/kestra-io/gradle-plugin).


Updates `io.kestra.gradle.repository-conventions` from 1.2.5 to 1.2.6
- [Release notes](https://github.com/kestra-io/gradle-plugin/releases)
- [Commits](kestra-io/gradle-plugin@v1.2.5...v1.2.6)

Updates `io.kestra.gradle.plugin-doc-lint` from 1.2.5 to 1.2.6
- [Release notes](https://github.com/kestra-io/gradle-plugin/releases)
- [Commits](kestra-io/gradle-plugin@v1.2.5...v1.2.6)

Updates `io.kestra.gradle.spotless-conventions` from 1.2.5 to 1.2.6
- [Release notes](https://github.com/kestra-io/gradle-plugin/releases)
- [Commits](kestra-io/gradle-plugin@v1.2.5...v1.2.6)

Updates `io.kestra.gradle.inject-bom-versions` from 1.2.5 to 1.2.6
- [Release notes](https://github.com/kestra-io/gradle-plugin/releases)
- [Commits](kestra-io/gradle-plugin@v1.2.5...v1.2.6)

---
updated-dependencies:
- dependency-name: io.kestra.gradle.inject-bom-versions
  dependency-version: 1.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kestra-gradle-plugins
- dependency-name: io.kestra.gradle.plugin-doc-lint
  dependency-version: 1.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kestra-gradle-plugins
- dependency-name: io.kestra.gradle.repository-conventions
  dependency-version: 1.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kestra-gradle-plugins
- dependency-name: io.kestra.gradle.spotless-conventions
  dependency-version: 1.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kestra-gradle-plugins
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the kestra-gradle-plugins group with 4 updates chore(deps): bump the kestra-gradle-plugins group across 1 directory with 4 updates Jul 29, 2026
@dependabot
dependabot Bot force-pushed the dependabot/gradle/kestra-gradle-plugins-9acef39a9c branch from 1eca18c to c2ef814 Compare July 29, 2026 06:33
@jymaire
jymaire merged commit 67aec68 into main Jul 30, 2026
4 checks passed
@jymaire
jymaire deleted the dependabot/gradle/kestra-gradle-plugins-9acef39a9c branch July 30, 2026 09:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jymaire jymaire jymaire approved these changes

Assignees

No one assigned

Labels

dependency-upgrade Dependency upgrade is needed

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jymaire