Bump the "dependencies" group with 17 updates across multiple ecosystems

[dependabot]

Bumps the dependencies group with 3 updates: com.gradleup.shadow, com.gradle:develocity-gradle-plugin and com.gradle:common-custom-user-data-gradle-plugin.

Updates com.gradleup.shadow from 8.3.9 to 8.3.11

Updates com.gradle:develocity-gradle-plugin from 4.4.1 to 4.5.0

Updates com.gradle:common-custom-user-data-gradle-plugin from 2.6.0 to 2.8.0

Release notes

Sourced from com.gradle:common-custom-user-data-gradle-plugin's releases.

2.8.0

• [NEW] Detect Copilot via the COPILOT_CLI and COPILOT_AGENT environment variables, capturing the AI tag and AI agent value Copilot

2.7.0

• [NEW] Capture Cursor as an AI agent via the CURSOR_AGENT environment variable
• [NEW] Capture Gemini in Android Studio as an AI agent via the ANDROID_STUDIO_AGENT environment variable
• [FIX] Changes to AI agent metadata invalidate the configuration cache

Commits

• 94f998b Merge pull request #533 from gradle/cj/copilot-vscode-detection
• d25afee Update release note for Copilot
• 4d1ead2 Detect GitHub Copilot as an AI agent
• 2c096a6 Merge pull request #531 from gradle/chore/renovate-track-gradle-plugin-javadoc
• 5a49a5c Merge pull request #532 from ryandens/copilot-cli-detection
• 85dcaa5 Link Develocity Gradle plugin API reference instead of pinned Javadoc
• b250480 [Renovate Bot] Update plugin com.gradleup.shadow to v9.6.1 (#530)
• 620e932 Detect GitHub Copilot CLI as an AI agent
• 8b6f6e8 Merge pull request #528 from gradle/rebrand/gradle-com-to-develocity-ai
• d579eda Drop trailing slash on bare develocity.ai URLs
• Additional commits viewable in compare view

Bumps the dependencies group in /core with 6 updates:

Package	From	To
com.fasterxml.jackson.core:jackson-databind	2.18.4	2.22.2
com.google.guava:guava	33.3.1-jre	33.7.1-jre
org.yaml:snakeyaml	2.6	2.7
org.junit.platform:junit-platform-launcher	1.14.3	1.14.4
org.junit.jupiter:junit-jupiter	5.13.4	5.14.4
redis.clients:jedis	7.4.1	8.0.1

Updates com.fasterxml.jackson.core:jackson-databind from 2.18.4 to 2.22.2

Commits

• 25b2a22 [maven-release-plugin] prepare release jackson-databind-2.22.2
• bab1c1a Prep for 2.22.2 release
• bc03cf8 Merge branch '2.21' into 2.22
• 83379fb Merge branch '2.20' into 2.21
• 0d400c9 Merge branch '2.19' into 2.20
• ce36a27 Merge branch '2.18' into 2.19
• 7a209e1 Post-release dep version bump
• a432707 [maven-release-plugin] prepare for next development iteration
• 176df1d [maven-release-plugin] prepare release jackson-databind-2.18.10
• 7785f5f Prep for 2.18.10 release
• Additional commits viewable in compare view

Updates com.google.guava:guava from 33.3.1-jre to 33.7.1-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.7.1

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.1-jre</version>
  <!-- or, for Android: -->
  <version>33.7.1-android</version>
</dependency>

Jar files

• 33.7.1-jre.jar
• 33.7.1-android.jar

Guava requires one runtime dependency, which you can download here:

• failureaccess-1.0.3.jar

Javadoc

• 33.7.1-jre
• 33.7.1-android

JDiff

• 33.7.1-jre vs. 33.7.0-jre
• 33.7.1-android vs. 33.7.0-android
• 33.7.1-android vs. 33.7.1-jre

Changelog

Guava 33.7.1 removes the Multi-Release line from our jar manifest, fixing an issue under Java 9 and 10 that was introduced to guava-jre in version 33.7.0. Sorry for the trouble.

33.7.0

Newly introduced problem for Java 9 and Java 10 only

Guava 33.7.0 includes a Multi-Release line in its jar manifest, even though it is no longer a multi-release jar. This causes some problems with tools from Java 9 and Java 10. The issue is fixed in version 33.7.1. Sorry for the trouble.

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.0-jre</version>
  <!-- or, for Android: -->
</tr></table> 

... (truncated)

Commits

• See full diff in compare view

Updates org.yaml:snakeyaml from 2.6 to 2.7

Updates org.junit.platform:junit-platform-launcher from 1.14.3 to 1.14.4

Commits

• See full diff in compare view

Updates org.junit.jupiter:junit-jupiter from 5.13.4 to 5.14.4

Release notes

Sourced from org.junit.jupiter:junit-jupiter's releases.

JUnit 5.14.4 = Platform 1.14.4 + Jupiter 5.14.4 + Vintage 5.14.4

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.14.3...r5.14.4

JUnit 5.14.3 = Platform 1.14.3 + Jupiter 5.14.3 + Vintage 5.14.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.14.2...r5.14.3

JUnit 5.14.2 = Platform 1.14.2 + Jupiter 5.14.2 + Vintage 5.14.2

See Release Notes.

New Contributors

• @​uglide made their first contribution in junit-team/junit-framework#5245

Full Changelog: junit-team/junit-framework@r5.14.1...r5.14.2

JUnit 5.14.1 = Platform 1.14.1 + Jupiter 5.14.1 + Vintage 5.14.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.14.0...r5.14.1

JUnit 5.14.0 = Platform 1.14.0 + Jupiter 5.14.0 + Vintage 5.14.0

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.4...r5.14.0

JUnit 5.14.0-RC1 = Platform 1.14.0-RC1 + Jupiter 5.14.0-RC1 + Vintage 5.14.0-RC1

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.4...r5.14.0-RC1

Commits

• 096fd69 Release 5.14.4
• 11fd02b Remove JDK 24 (EOL)
• 5b7f023 Fix integration tests on JDK 27
• 18f842a Test against JDK 26 (GA) and JDK 27 (EA)
• a5bf336 Polish 5.14.4 release notes
• 7667c14 Fix race condition in NodeTestTask (#5427)
• ac01f2d Include full display name in legacy XML reports (#5524)
• fbd4a8e Include class template invocation index in legacy reporting names
• 7d6f0c0 Only check PDF for GA releases
• 14f534d Test 5.14.x against JDK 25 ga (#5623)
• Additional commits viewable in compare view

Updates redis.clients:jedis from 7.4.1 to 8.0.1

Release notes

Sourced from redis.clients:jedis's releases.

8.0.1

Jedis 8.0.1 is a maintenance release for the 8.0 line, fixing stale cluster topology after failover in JedisCluster.

Changes

🐛 Bug Fixes

• Refresh primaryNodesCache in JedisClusterInfoCache.discoverClusterSlots (#4692, backported in #4694)

Contributors

We'd like to thank all the contributors who worked on this release!

@​insaf021

Full Changelog: redis/jedis@v8.0.0...v8.0.1

8.0.0

Jedis 8.0.0 completes the client class consolidation started in 7.0.0, modernizes protocol defaults, tightens security defaults, and adds command coverage for Redis 8.8 and the Redis 8.10 preview.

• RESP3 auto-negotiation on by default for all UnifiedJedis-based clients (with graceful RESP2 fallback)
• Final removal of legacy JedisPooled / JedisSentineled classes in favor of the RedisClient family introduced in 7.0.0
• Removal of deprecated UnifiedJedis public constructors
• Internal refactoring that affects users of low-level extension points (custom CommandExecutor, Transaction subclasses, ClusterPipeline, CommandObjects) — protocol and connection wiring is now explicit at construction time
• Search modernization — the low-level cursor APIs are superseded by ftAggregateIterator(), and the manual broadcast API is removed (Redis 8.0+ broadcasts FT.CREATE server-side)
• TLS hostname verification enforced by default in DefaultJedisSocketFactory
• New Redis 8.8 command coverage — XNACK, JSON.SET FPHA, Array commands, INCREX, COUNT aggregator on ZINTER / ZUNION(STORE) and their *STORE variants, multi-aggregator TS.RANGE / TS.MRANGE, plus an experimental COLLECT parameter for FT.AGGREGATE
• Redis 8.10 command coverage — HIMPORT (Hinted Hash Templates), FT.ALIASLIST, MAXCOUNT / MAXSIZE on XREAD and XREADGROUP, SUNIONCARD / SDIFFCARD, LMOVEM / BLMOVEM, TS.READ, TS.NRANGE / TS.NREVRANGE, TS.QUERYLABELS, and EXCLUDEEMPTY on TS.MRANGE / TS.MREVRANGE

For step-by-step upgrade instructions, see the v7 → v8 migration guide: https://redis.github.io/jedis/migration-guides/v7-to-v8/

Changes

🔥 Breaking Changes

• Remove unusable aclLogBinary() methods (#4580)
• Tighten Connection.initializeFromClientConfig() visibility to package-private (#4548)
• CommandObjects refactoring : Enforce protocol (#4515, #4514, #4513)
• Bump org.apache.commons:commons-pool2 from 2.12.1 to 2.13.1 (#4409)
• Fix Connection Close Exception Handling for commons-pool2 2.13.1 (#4439)
• Switch to RESP3 as default protocol version (#4468)
• Drop deprecated classes and constructors (#4488)
• Align Search APIs and behaviour with Redis 8.0+ (#4173)
• refactor: decouple Transaction from Jedis (#4440)
• Introduce request & response policy support (#4411)
• Remove unused leftovers from JedisSharding (#4348)

🧪 Experimental Features

• Add new COLLECT parameter for FT.AGGREGATE (#4534)

... (truncated)

Commits

• 50ec1c8 Backport #4692 to 8.0.x: refresh primaryNodesCache in JedisClusterInfoCache.d...
• 36135a0 Point snapshot example at 8.0.1-SNAPSHOT on the 8.x branch
• 2de1a6d List Redis 8.6, 8.8 and 8.10 as supported in README
• fcf59cd Update version references in README and docs for 8.0.0
• 8d539c0 Bump snapshot version to 8.0.1
• 8e393b9 Fix FTSearchParams.params(Map) dropping values when parameters are already se...
• 9bcb5c6 Pin SDR integration tests to redis:8.6.2 on PR runs (#4676)
• d2f4d5d [Redis 8.10] Add HIMPORT (Hinted Hash Templates) support (#4667)
• f2fe13e Add SECURITY.md with vulnerability reporting policy (#4673)
• 0dca44c decode ScanParams.match with SafeEncoder, not the JVM default charset (#4661)
• Additional commits viewable in compare view

Bumps the dependencies group with 2 updates in the /modules/activemq directory: org.apache.activemq:activemq-client and org.apache.activemq:artemis-jakarta-client.
Bumps the dependencies group with 2 updates in the /modules/azure directory: com.squareup.okhttp3:okhttp and com.azure:azure-sdk-bom.
Bumps the dependencies group with 1 update in the /modules/clickhouse directory: com.clickhouse:client-v2.
Bumps the dependencies group with 1 update in the /modules/cockroachdb directory: org.postgresql:postgresql.
Bumps the dependencies group with 1 update in the /modules/couchbase directory: com.couchbase.client:java-client.
Bumps the dependencies group with 1 update in the /modules/cratedb directory: org.postgresql:postgresql.
Bumps the dependencies group with 1 update in the /modules/databend directory: com.databend:databend-jdbc.
Bumps the dependencies group with 1 update in the /modules/elasticsearch directory: org.elasticsearch.client:elasticsearch-rest-client.
Bumps the dependencies group with 1 update in the /modules/gcloud directory: com.google.cloud:libraries-bom.
Bumps the dependencies group with 5 updates in the /modules/hivemq directory:

Package	From	To
commons-io:commons-io	2.21.0	2.22.0
org.javassist:javassist	3.32.0-GA	3.33.0-GA
com.hivemq:hivemq-extension-sdk	4.50.0	4.55.0
com.hivemq:hivemq-mqtt-client	1.3.15	1.4.0
ch.qos.logback:logback-classic	1.5.37	1.6.3

Bumps the dependencies group with 1 update in the /modules/localstack directory: software.amazon.awssdk:bom.
Bumps the dependencies group with 1 update in the /modules/milvus directory: io.milvus:milvus-sdk-java.
Bumps the dependencies group with 1 update in the /modules/mongodb directory: org.mongodb:mongodb-driver-sync.
Bumps the dependencies group with 1 update in the /modules/mssqlserver directory: io.r2dbc:r2dbc-mssql.
Bumps the dependencies group with 2 updates in the /modules/mysql directory: io.asyncer:r2dbc-mysql and com.mysql:mysql-connector-j.
Bumps the dependencies group with 1 update in the /modules/oceanbase directory: com.mysql:mysql-connector-j.
Bumps the dependencies group with 1 update in the /modules/openfga directory: dev.openfga:openfga-sdk.
Bumps the dependencies group with 1 update in the /modules/oracle-free directory: com.oracle.database.jdbc:ojdbc11.
Bumps the dependencies group with 1 update in the /modules/oracle-xe directory: com.oracle.database.jdbc:ojdbc11.
Bumps the dependencies group with 1 update in the /modules/orientdb directory: com.orientechnologies:orientdb-client.
Bumps the dependencies group with 1 update in the /modules/postgresql directory: org.postgresql:postgresql.
Bumps the dependencies group with 2 updates in the /modules/qdrant directory: io.qdrant:client and io.grpc:grpc-bom.
Bumps the dependencies group with 2 updates in the /modules/questdb directory: org.postgresql:postgresql and org.questdb:questdb.
Bumps the dependencies group with 1 update in the /modules/rabbitmq directory: com.rabbitmq:amqp-client.
Bumps the dependencies group with 2 updates in the /modules/scylladb directory: com.scylladb:java-driver-core and software.amazon.awssdk:dynamodb.
Bumps the dependencies group with 1 update in the /modules/tidb directory: com.mysql:mysql-connector-j.
Bumps the dependencies group with 1 update in the /modules/toxiproxy directory: redis.clients:jedis.
Bumps the dependencies group with 1 update in the /modules/weaviate directory: io.weaviate:client6.

Updates org.apache.activemq:activemq-client from 6.2.4 to 6.3.1

Release notes

Sourced from org.apache.activemq:activemq-client's releases.

Apache ActiveMQ 6.3.1

What's Changed

• [6.3.x] Bootstrap activemq-6.3.x branch (#2245) by @​cshannon in apache/activemq#2262
• [6.3.x] Fix AMQP Object message decompression (#2256) by @​cshannon in apache/activemq#2260
• [6.3.x] Upgrade to Eclipse Temurin 25 for docker image by @​jbonofre in apache/activemq#2258
• [6.3.x] Fix dependabot yml typo (#2284) by @​cshannon in apache/activemq#2285
• [6.3.x] bump jakarta.el:jakarta.el-api from 6.0.0 to 6.0.1 by @​dependabot[bot] in apache/activemq#2345
• [6.3.x] bump commons-codec:commons-codec from 1.22.0 to 1.22.1 by @​dependabot[bot] in apache/activemq#2324
• [6.3.x] bump org.apache.groovy:groovy-ant from 5.0.7 to 5.0.8 by @​dependabot[bot] in apache/activemq#2318
• [6.3.x] bump org.apache.groovy:groovy from 5.0.7 to 5.0.8 by @​dependabot[bot] in apache/activemq#2314
• [6.3.x] bump org.codehaus.jettison:jettison from 1.5.6 to 1.5.7 by @​dependabot[bot] in apache/activemq#2333
• [6.3.x] bump org.apache.qpid:proton-j from 0.34.1 to 0.35.0 by @​dependabot[bot] in apache/activemq#2327
• [6.3.x] bump org.codehaus.mojo:flatten-maven-plugin from 1.7.3 to 1.8.0 by @​dependabot[bot] in apache/activemq#2302
• [6.3.x] bump org.apache.felix:maven-bundle-plugin from 6.0.2 to 6.1.0 by @​dependabot[bot] in apache/activemq#2308
• #2271 Update Producer getDeliveryDelay() to always return zero (0) … by @​mattrpav in apache/activemq#2403
• [6.3.x] #2398 FutureBrokerInfoTimeout is missed due to logic operator error (#2399) by @​cshannon in apache/activemq#2409
• [6.3.x] #2282 Drop redundant sequence generator monitor in RegionBroker by @​mattrpav in apache/activemq#2412
• [6.3.x] #2406 Guard against null region subscriptions in duplicate suppression by @​mattrpav in apache/activemq#2417
• [6.3.x] Improve performance of IntSequenceGenerator (#2408) by @​cshannon in apache/activemq#2420
• Bump version to 6.3.1-SNAPSHOT by @​cshannon in apache/activemq#2424

Full Changelog: apache/activemq@activemq-6.3.0...activemq-6.3.1

Apache ActiveMQ 6.3.0

What's Changed

• NO-JIRA: update repo meta-data to drop 'classic' mentions by @​gemmellr in apache/activemq#1545
• AMQ-9810 - Add additional validation for MQTT control packets by @​cshannon in apache/activemq#1546
• AMQ-9810 - Add additional validation for MQTT wireformat by @​cshannon in apache/activemq#1547
• AMQ-9813 - fix wrong QueueSize for non-persistent message with TTL by @​lenoch7 in apache/activemq#1551
• AMQ-9813 - Minor updates by @​cshannon in apache/activemq#1553
• Bump to 6.3.0-SNAPSHOT by @​jbonofre in apache/activemq#1548
• AMQ-8525: TransactedStoreUsageSuspendResumeTest slow fix by @​jeanouii in apache/activemq#1539
• [NO-JIRA] Jenkinsfile: Update with parallelTests flag by @​mattrpav in apache/activemq#1559
• AMQ-9808: Dead lock when using CRON schedule with AMQ_SCHEDULED_REPEAT by @​jeanouii in apache/activemq#1536
• AMQ-9809: org.apache.activemq.perf.InactiveDurableTopicTest hanging by @​jeanouii in apache/activemq#1537
• [AMQ-9817] Fix long running KahaDBOffsetRecoveryListenerTest on CI by @​jeanouii in apache/activemq#1555
• [AMQ-9818] JournalCorruptionEofIndexRecoveryTest failing with OOME by @​jeanouii in apache/activemq#1561
• AMQ-8525: improve stomp module performances by @​jeanouii in apache/activemq#1540
• AMQ-8525 Improve execution of unit tests module by @​jeanouii in apache/activemq#1542
• [AMQ-9820]: closed connections leaking into the pool when reconnectOnException is used by @​jeanouii in apache/activemq#1564
• AMQ-9819 - Rework Rest test fix by @​cshannon in apache/activemq#1565
• AMQ-9823 - properly clear ack set from ackAndPreparedMap by @​cshannon in apache/activemq#1566
• Bump org.apache.logging.log4j:log4j-core from 2.25.2 to 2.25.3 by @​dependabot[bot] in apache/activemq#1568
• AMQ-8525 Improve performance of amqp + kahadb store modules by @​jeanouii in apache/activemq#1544
• AMQ-9824 - Cleanup code in KahaDB classes by @​cshannon in apache/activemq#1567
• Use of GitHub Actions, and enable dependabot by @​jbonofre in apache/activemq#1497
• Update the check context to use CI Quick by @​jbonofre in apache/activemq#1606
• [AMQ-9815] Add additional attributes to ConnectorView by @​mattrpav in apache/activemq#1556
• Bump org.apache.geronimo.specs:geronimo-atinject_1.0_spec from 1.0 to 1.2 by @​dependabot[bot] in apache/activemq#1602

... (truncated)

Commits

• 81d7cc2 [maven-release-plugin] prepare release activemq-6.3.1
• 801f1b1 Bump version to 6.3.1-SNAPSHOT (#2424)
• c5e38fb Improve performance of IntSequenceGenerator (#2408) (#2420)
• 666c24a #2406 Guard against null region subscriptions in duplicate suppression (#2417)
• 918bcfb #2275 Drop redundant sequence generator monitor in RegionBroker (#2412)
• 07db885 #2398 FutureBrokerInfoTimeout is missed due to logic operator error (#2399)...
• d5a80f6 #2271 Update Producer getDeliveryDelay() to always return zero (0) (#2272) ...
• a68893d [6.3.x] bump org.apache.felix:maven-bundle-plugin from 6.0.2 to 6.1.0 (#2308)
• 5f0797c [6.3.x] bump org.codehaus.mojo:flatten-maven-plugin from 1.7.3 to 1.8.0 (#2302)
• 5c6a3e7 [6.3.x] bump org.apache.qpid:proton-j from 0.34.1 to 0.35.0 (#2327)
• Additional commits viewable in compare view

Updates org.apache.activemq:artemis-jakarta-client from 2.55.0 to 2.56.0

Updates com.squareup.okhttp3:okhttp from 5.4.0 to 5.5.0

Changelog

Sourced from com.squareup.okhttp3:okhttp's changelog.

Version 5.5.0

2026-08-16

This release introduces opt-in support for [Encrypted Client Hello (ECH)]. This new feature improves user privacy by encrypting domain names in transit. With regular TLS, your coffee shop’s Wi-Fi router can see that you’re visiting wikipedia.com, but it cannot see which page you’re looking at. With ECH, the router observes only the IP address. This additional privacy is most effective on sites hosted by big CDNs because the IP address doesn’t imply a particular website.

This requires ECH support in the platform’s TLS stack. Today this is only Android 17 (API 37, released June 2026). When other TLS stacks add ECH support, we'll integrate them.

ECH took a lot of work to implement because the encryption keys are published over DNS in the [HTTPS resource record], and we needed to write new code to fetch these records. This release includes a major update to OkHttp’s DNS API: it now supports multiple resource record types (not just IP addresses!), asynchronous streaming results, and in-memory caching.

To opt in, you can use DnsOverHttps:

// DnsOverHttps itself uses OkHttpClient. Build both clients upon the
// same bootstrap client so they share a connection pool and dispatcher.
val bootstrapClient = OkHttpClient()
// This sample uses Cloudflare's 1.1.1.1 DnsOverHttps service.
val client = bootstrapClient.newBuilder()
.dns(DnsOverHttps.Builder()
.client(bootstrapClient)
.url("https://1.1.1.1/dns-query".toHttpUrl())
.build())
.build()

You could also opt in with our new AndroidDns API. Unfortunately, the privacy benefits of ECH are thwarted because its DNS queries are not encrypted by default.

// AndroidDns fetches the HTTPS DNS resource records necessary for ECH.
val client = OkHttpClient.Builder()
  .dns(AndroidDns())
  .build()

• New: OkHttp artifacts are now signed with our [new signing key]. This project and three sibling projects ([Retrofit], [Okio], and [SQLDelight]) recently joined [the Commonhaus Foundation].
• Fix: MockWebServer’s @StartStop annotation now supports @Nested JUnit 5 tests.
• Fix: Our default TLS hostname verifier now reject hosts that fail IP canonicalization.
• Fix: Closing a multipart part's sink no longer closes the entire request body.
• Fix: Flush HTTP/1 request bodies before detaching the timeout. We had a bug where timeouts

... (truncated)

Commits

• a94bdf1 Prepare for release 5.5.0.
• ecc3b05 Use a fixed size for DoH request body (#9687)
• 9926082 Revert "Use a fixed size for DoH request body" (#9686)
• 0070c2e Use a fixed size for DoH request body
• 1576453 Order ServiceMetadata records per the spec (#9683)
• fb582e9 Flip wiring of Dns.SYSTEM (#9682)
• 4e884ab retryOnConnectionFailure doesn't impact ECH retries (#9681)
• 0433cee Only one contributing.md doc (#9678)
• a2cf5aa Don't recover after an ECH public_name fails to verify (#9680)
• 5410de9 Test ECH + HTTP proxy (#9671)
• Additional commits viewable in compare view

Updates com.azure:azure-sdk-bom from 1.2.32 to 1.3.8

Commits

• c443b1e Update changelog, prepare for release (#34539)
• ec9f1fb Increment package versions for iothub releases (#34532)
• 61a14e0 [Automation] Generate Fluent Lite from postgresql#package-flexibleserver-2022...
• bf7ae0d Java: 'Release for iothub 2022-11-15-preivew' #3974 by lihong at 20230418 124...
• 9178513 Increment package versions for newrelicobservability releases (#34528)
• ff27e9e [Automation] Generate Fluent Lite from newrelic#package-2022-07-01 (#34524)
• ff5ef52 Increment package versions for elastic releases (#34523)
• 8225dfc Increment package versions for qumulo releases (#34522)
• d99baaf Increment package versions for security releases (#34521)
• 059967c Increment package versions for confidentialledger releases (#34520)
• Additional commits viewable in compare view

Updates com.clickhouse:client-v2 from 0.9.8 to 0.10.0

Release notes

Sourced from com.clickhouse:client-v2's releases.

Release v0.10.0

Release Migration Guide

Breaking Changes

• [jdbc-v2] The driver no longer hardcodes the server settings async_insert=0 and wait_end_of_query=0 on every JDBC connection. This unblocks two scenarios that previously did not work: overriding these settings per connection or per statement, and using the driver against read-only profiles that disallow SETTINGS overrides. There are two consequences:

  • The driver now follows the server-side defaults for these settings (note: starting with ClickHouse 26.3, async_insert defaults to 1). Removing the explicit wait_end_of_query=0 is a no-op against server defaults but lets users opt in to wait_end_of_query=1.
  • The row count returned by java.sql.Statement.executeUpdate(java.lang.String) (and the matching PreparedStatement method) is no longer guaranteed to be accurate for INSERT statements when the server runs them asynchronously, and parsing/data errors in the INSERT body may not surface synchronously as a SQLException. Previously these were accurate because inserts were forced to be synchronous (see also ClickHouse/ClickHouse#57768). To restore the previous behavior, set async_insert=0 (or wait_for_async_insert=1) per connection as server setting. Read more about asynchronous insert: https://clickhouse.com/docs/optimize/asynchronous-inserts.

  (ClickHouse/clickhouse-java#2652, ClickHouse/clickhouse-java#2825)

• [client-v2] Client.Builder#build() now throws ClientMisconfigurationException instead of IllegalArgumentException for authentication and SSL misconfiguration (missing credentials, conflicting authentication methods, missing client certificate when SSL authentication is enabled, and trust store used together with a client certificate). Callers that relied on catching IllegalArgumentException from build() for these cases must catch ClientMisconfigurationException (which extends RuntimeException via ClientException). (ClickHouse/clickhouse-java#2812)

• [client-v2] Combining setUsername(...) + setPassword(...) with a custom Authorization HTTP header ( httpHeader(HttpHeaders.AUTHORIZATION, ...)) now fails at Client.Builder#build() with ClientMisconfigurationException unless HTTP Basic authentication is explicitly disabled via useHTTPBasicAuth(false). Previously this combination was accepted and the custom Authorization header overrode the user/password at request time. (ClickHouse/clickhouse-java#2812)

• [client-v2] The access_token configuration property (set via Client.Builder#setAccessToken(String) or directly through setOption) is now actually applied to outgoing requests as the Authorization HTTP header value verbatim. Previously the value was stored under access_token but never sent on the wire, so providing it alone had no effect on authentication. Callers must include the scheme prefix themselves (e.g. setAccessToken("Bearer <token>")), or use useBearerTokenAuth(String) which prepends Bearer automatically. (ClickHouse/clickhouse-java#2812)

• [client-v2] Client.Builder#useBearerTokenAuth(String) now stores the bearer token under the access_token configuration key (with the Bearer prefix) instead of writing it directly into http_header_authorization. The HTTP wire format is unchanged, but the token is no longer observable through Client#getReadOnlyConfig() under the http_header_authorization key. (ClickHouse/clickhouse-java#2812)

• [client-v2] Fixed inconsistent use of executionTimeout parameter in Client component. The timeout was previously set in milliseconds but mistakenly retrieved and used in seconds in some places. Now it correctly uses milliseconds consistently. (ClickHouse/clickhouse-java#2358)

• [client-v2] The public ClickHouseBinaryFormatWriter interface gained two methods, setString(String, byte[]) and setString(int, byte[]), for writing raw String/FixedString bytes. Code that only uses the interface is unaffected, but any third party that implements ClickHouseBinaryFormatWriter directly is source- and binary-incompatible until it adds these methods (recompiling against the new version is required; otherwise an AbstractMethodError can occur at runtime).

• [client-v2] HTTP 503 Service Unavailable responses are now surfaced as a connection-style failure (

... (truncated)

Changelog

Sourced from com.clickhouse:client-v2's changelog.

0.10.0,

Release Migration Guide

Breaking Changes

• [jdbc-v2] The driver no longer hardcodes the server settings async_insert=0 and wait_end_of_query=0 on every JDBC connection. This unblocks two scenarios that previously did not work: overriding these settings per connection or per statement, and using the driver against read-only profiles that disallow SETTINGS overrides. There are two consequences:

  • The driver now follows the server-side defaults for these settings (note: starting with ClickHouse 26.3, async_insert defaults to 1). Removing the explicit wait_end_of_query=0 is a no-op against server defaults but lets users opt in to wait_end_of_query=1.
  • The row count returned by java.sql.Statement.executeUpdate(java.lang.String) (and the matching PreparedStatement method) is no longer guaranteed to be accurate for INSERT statements when the server runs them asynchronously, and parsing/data errors in the INSERT body may not surface synchronously as a SQLException. Previously these were accurate because inserts were forced to be synchronous (see also ClickHouse/ClickHouse#57768). To restore the previous behavior, set async_insert=0 (or wait_for_async_insert=1) per connection as server setting. Read more about asynchronous insert: https://clickhouse.com/docs/optimize/asynchronous-inserts.

  (ClickHouse/clickhouse-java#2652, ClickHouse/clickhouse-java#2825)

• [client-v2] Client.Builder#build() now throws ClientMisconfigurationException instead of IllegalArgumentException for authentication and SSL misconfiguration (missing credentials, conflicting authentication methods, missing client certificate when SSL authentication is enabled, and trust store used together with a client certificate). Callers that relied on catching IllegalArgumentException from build() for these cases must catch ClientMisconfigurationException (which extends RuntimeException via ClientException). (ClickHouse/clickhouse-java#2812)

• [client-v2] Combining setUsername(...) + setPassword(...) with a custom Authorization HTTP header ( httpHeader(HttpHeaders.AUTHORIZATION, ...)) now fails at Client.Builder#build() with ClientMisconfigurationException unless HTTP Basic authentication is explicitly disabled via useHTTPBasicAuth(false). Previously this combination was accepted and the custom Authorization header overrode the user/password at request time. (ClickHouse/clickhouse-java#2812)

• [client-v2] The access_token configuration property (set via Client.Builder#setAccessToken(String) or directly through setOption) is now actually applied to outgoing requests as the Authorization HTTP header value verbatim. Previously the value was stored under access_token but never sent on the wire, so providing it alone had no effect on authentication. Callers must include the scheme prefix themselves (e.g. setAccessToken("Bearer <token>")), or use useBearerTokenAuth(String) which prepends Bearer automatically. (ClickHouse/clickhouse-java#2812)

• [client-v2] Client.Builder#useBearerTokenAuth(String) now stores the bearer token under the access_token configuration key (with the Bearer prefix) instead of writing it directly into http_header_authorization. The HTTP wire format is unchanged, but the token is no longer observable through Client#getReadOnlyConfig() under the http_header_authorization key. (ClickHouse/clickhouse-java#2812)

• [client-v2] Fixed inconsistent use of executionTimeout parameter in Client component. The timeout was previously set in milliseconds but mistakenly retrieved and used in seconds in some places. Now it correctly uses milliseconds consistently. (ClickHouse/clickhouse-java#2358)

• [client-v2] The public ClickHouseBinaryFormatWriter interface gained two methods, setString(String, byte[]) and setString(int, byte[]), for writing raw String/FixedString bytes. Code that only uses the interface is

... (truncated)

Commits

• 57aacb1 Merge pull request #3044 from ClickHouse/pre_0.10.0
• abcabfb pre_0.10.0
• c811085 Merge pull request #2951 from ClickHouse/pre_0.10.0-rc2
• 412b1ac pick: added new engines
• 0e38b94 pick: added missing SQL keywords
• 4ef6989 Updated version to 0.10.0-rc
• 62feee4 Update VERSION
• 9dd3229 Merge pull request #2911 from ClickHouse/07/06/26/binary_string_support
• 69cc780 Merge branch 'v0.10.0' into 07/06/26/binary_string_support
• 035d69d Merge pull request #2912 from ClickHouse/07/06/26/cance_http_request
• Additional commits viewable in compare view

Updates com.clickhouse:clickhouse-r2dbc from 0.9.8 to 0.10.0

Release notes

Sourced from com.clickhouse:clickhouse-r2dbc's releases.

Release v0.10.0

Release Migration Guide

Breaking Changes

• [jdbc-v2] The driver no longer hardcodes the server settings async_insert=0 and wait_end_of_query=0 on every JDBC connection. This unblocks two scenarios that previously did not work: overriding these settings per connection or per statement, and using the driver against read-only profiles that disallow SETTINGS overrides. There are two consequences:

  • The driver now follows the server-side defaults for these settings (note: starting with ClickHouse 26.3, async_insert defaults to 1). Removing the explicit wait_end_of_query=0Description has been truncated