Skip to content

fix(deps): update all non-major dependencies #782

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jun 14, 2025

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jun 14, 2025

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
io.netty:netty-all (source) 4.2.1.Final -> 4.2.2.Final age adoption passing confidence
org.checkerframework:checker-qual (source) 3.49.3 -> 3.49.4 age adoption passing confidence
io.github.llamalad7:mixinextras-fabric 0.5.0-rc.2 -> 0.5.0-rc.3 age adoption passing confidence
org.slf4j:slf4j-api (source, changelog) 2.0.16 -> 2.0.17 age adoption passing confidence
org.lwjgl:lwjgl (source) 3.3.3 -> 3.3.6 age adoption passing confidence
org.lwjgl:lwjgl-tinyfd (source) 3.3.3 -> 3.3.6 age adoption passing confidence
org.lwjgl:lwjgl-stb (source) 3.3.3 -> 3.3.6 age adoption passing confidence
org.lwjgl:lwjgl-opengl (source) 3.3.3 -> 3.3.6 age adoption passing confidence
org.lwjgl:lwjgl-openal (source) 3.3.3 -> 3.3.6 age adoption passing confidence
org.lwjgl:lwjgl-jemalloc (source) 3.3.3 -> 3.3.6 age adoption passing confidence
org.lwjgl:lwjgl-glfw (source) 3.3.3 -> 3.3.6 age adoption passing confidence
org.lwjgl:lwjgl-freetype (source) 3.3.3 -> 3.3.6 age adoption passing confidence
net.minidev:json-smart (source) 2.5.1 -> 2.5.2 age adoption passing confidence
net.minidev:accessors-smart (source) 2.5.1 -> 2.5.2 age adoption passing confidence
net.java.dev.jna:jna 5.15.0 -> 5.17.0 age adoption passing confidence
net.java.dev.jna:jna-platform 5.15.0 -> 5.17.0 age adoption passing confidence
commons-logging:commons-logging (source) 1.3.4 -> 1.3.5 age adoption passing confidence
commons-io:commons-io (source) 2.17.0 -> 2.19.0 age adoption passing confidence
commons-codec:commons-codec (source) 1.17.1 -> 1.18.0 age adoption passing confidence
com.nimbusds:oauth2-oidc-sdk 11.18 -> 11.25 age adoption passing confidence
com.nimbusds:nimbus-jose-jwt 9.40 -> 9.48 age adoption passing confidence
com.microsoft.azure:msal4j 1.17.2 -> 1.21.0 age adoption passing confidence
com.google.guava:guava 33.3.1-jre -> 33.4.8-jre age adoption passing confidence
com.google.guava:failureaccess 1.0.2 -> 1.0.3 age adoption passing confidence
com.google.code.gson:gson 2.11.0 -> 2.13.1 age adoption passing confidence
com.github.oshi:oshi-core 6.6.5 -> 6.8.2 age adoption passing confidence
com.fasterxml.jackson.core:jackson-databind (source) 2.13.4.2 -> 2.19.1 age adoption passing confidence
com.fasterxml.jackson.core:jackson-core 2.13.4 -> 2.19.1 age adoption passing confidence
com.fasterxml.jackson.core:jackson-annotations (source) 2.13.4 -> 2.19.1 age adoption passing confidence
net.fabricmc:intermediary 1.21.5 -> 1.21.6-pre4 age adoption passing confidence
com.google.protobuf:protobuf-java-util (source) 4.30.2 -> 4.31.1 age adoption passing confidence
com.google.protobuf:protobuf-bom (source) 4.30.2 -> 4.31.1 age adoption passing confidence
io.grpc:grpc-netty 1.72.0 -> 1.73.0 age adoption passing confidence
io.grpc:grpc-stub 1.72.0 -> 1.73.0 age adoption passing confidence
io.grpc:grpc-services 1.72.0 -> 1.73.0 age adoption passing confidence
io.grpc:grpc-protobuf 1.72.0 -> 1.73.0 age adoption passing confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

LWJGL/lwjgl3 (org.lwjgl:lwjgl)

v3.3.6: LWJGL 3.3.6

Compare Source

Changes since 3.3.5:

Bindings
  • vma: Updated to 3.2.0 (up from 3.1.0)
  • Vulkan: Updated to 1.4.304 (up from 1.4.303)
  • xxhash: Updated to 0.8.3 (up from 0.8.2)
Fixes
  • GLFW: Library override paths with Unicode characters are now supported on Windows.
  • Windows: Reverted to MSVC in an attempt to fix #​1005.

v3.3.5: LWJGL 3.3.5

Compare Source

Changes since 3.3.4:

Bindings
  • Assimp: Updated to 5.4.3 (up from 5.4.2)
  • bgfx: Updated to API version 129 (up from 128)
  • FMOD: Updated to 2.03.04 (up from 2.02.21)
  • freetype: Updated to 2.13.3 (up from 2.13.2)
  • harfbuzz: Updated to 10.1.0 (up from 9.0.0)
  • hwloc: Updated to 2.11.2 (up from 2.11.1)
  • libdivide: Updated to 5.1 (up from 5.0)
    • Added MathUtil multi-release support for Long.divideUnsigned/Long.remainderUnsigned and Math.unsignedMultiplyHigh.
  • liburing: Updated to 2.8 (up from 2.6)
  • LLVM/Clang: Updated to 19.1.0 (up from 18.1.7)
  • lmdb: Updated to 0.9.33 (up from 0.9.32)
  • lz4: Updated to 1.10.0 (up from 1.9.4)
  • meshoptimizer: Updated to 0.22 (up from 0.21)
  • NativeFileDialog: Update to 1.2.1 (up from 1.2.0)
  • Nuklear: Updated to 4.12.3 (up from 4.12.1)
  • OpenAL Soft: Updated to 1.24.1 (up from 1.23.1)
    • Added ALC_SOFT_system_events extension.
    • Added AL_EXT_debug extension.
    • Added AL_EXT_direct_context extension.
    • macOS: 10.15+ is now required (up from 10.11).
  • OpenXR: Updated to 1.1.43 (up from 1.1.38)
  • Shaderc: Updated to 2024.4 (up from 2024.2)
  • SPIRV-Cross: Updated to 0.64.0 (up from 0.61.0)
  • stb
    • Updated stb_image_resize to 2.12 (up from 2.09)
  • Vulkan: Updated to 1.4.303 (up from 1.3.289)
    • Includes MoltenVK 1.2.11 (up from 1.2.10)
  • Yoga: Updated to 3.2.0 (up from 3.1.0)
Improvements
  • Core: Migrated jsr305 nullability annotations to JSpecify (https://jspecify.dev). (#​1008)
    • The org.jspecify:jspecify dependency remains optional.
  • Core: Added Configuration.DISABLE_HASH_CHECKS, a dynamic option that disables shared library hash checks. (#​1007)
  • FreeBSD: LWJGL now requires FreeBSD 13.3 or later. (up from 13.2)
  • OpenGL: Added Configuration.OPENGL_CONTEXT_API option to control the default OpenGL context management API.
  • OpenGL: The Configuration.OPENGL(ES)_CONTEXT_API options now support "OSMesa" as a value.
    • Similar to GLFW_OSMESA_CONTEXT_API, LWJGL will try to load libOSMesa when enabled, without having to change Configuration.OPENGL_LIBRARY_NAME.
  • OpenGL: The default context management API is now EGL when Wayland is detected.
  • msdfgen: Added support for glyph index based msdfgen-ext APIs. (#​1002)
Fixes
  • Core: Fixed support for va_list parameters.
Breaking Changes
  • Core: Replaced thread-local storage of errno/GetLastError() with virtual output parameters. (#​1003)
    • The LibCErrno.getErrno() and WinBase.getLastError() methods have been removed.
    • System calls in org.lwjgl.system.linux.*, org.lwjgl.system.windows.* and org.lwjgl.opengl.WGL now take an optional output parameter for the error code.
    • This approach is similar to Linker.Option.CaptureCallState in Project Panama's FFM API.
  • Core: Dropped support for non-LTS JDK versions earlier than the latest LTS version.
    • Supported JDK versions: 8, 11, 17, 21+
    • The module-info class and the first batch of multi-release overrides now live under META-INF/versions/11 instead of META-INF/versions/9.

v3.3.4: LWJGL 3.3.4

Compare Source

Changes since 3.3.3:

Bindings
  • Added msdfgen bindings.
  • Assimp: Updated to 5.4.2 (up from 5.2.5)
  • bgfx: Updated to API version 128 (up from 122)
    • Windows: support for the Direct3D 9 backend has been dropped.
  • CUDA: Updated to 12.5.1 (up from 12.1.0)
  • FMOD: Updated to 2.02.21 (up from 2.02.16)
  • glfw: Updated to 3.4 (up from 3.3.8)
    • Added GLFW_UNLIMITED_MOUSE_BUTTONS, GLFW_SCALE_FRAMEBUFFER, GLFW_WIN32_SHOWDEFAULT.
    • Added glfwGetWindowTitle, glfwGetCocoaView.
  • glfw: Added experimental support for IME. (#​946)
    • Added GLFW_SOFT_FULLSCREEN, GLFW_IME, GLFW_MANAGE_PREEDIT_CANDIDATE and GLFW_X11_ONTHESPOT.
    • Added glfwGetPreeditCursorRectangle, glfwSetPreeditCursorRectangle, glfwResetPreeditText, glfwGetPreeditCandidate.
    • Added glfwSetPreeditCallback, glfwSetIMEStatusCallback, glfwSetPreeditCandidateCallback.
  • harfbuzz: Updated to 9.0.0 (up from 8.2.0)
  • hwloc: Updated to 2.11.1 (up from 2.9.3)
  • KTX: Updated to 4.3.2 (up from 4.3.0-alpha3)
  • libffi: Updated to 3.4.6 (up from 3.4.4)
  • liburing: Updated to 2.6 (up from 2.4)
  • lmdb: Updated to 0.9.32 (up from 0.9.31)
  • LLVM/Clang: Updated to 18.1.7 (up from 16.0.0)
  • meshoptimizer: Updated to 0.21 (up from 0.19)
  • NativeFileDialog: Update to 1.2.0 (up from 1.1.0)
  • Nuklear: Updated to 4.12.1 (up from 4.10.6)
  • OpenVR: Updated to 2.5.1 (up from 1.26.7)
    • Added support for Linux ARM64
  • OpenXR: Updated to 1.1.38 (up from 1.0.29)
  • Opus: Updated to 1.5.2 (up from 1.4.0)
  • rpmalloc: Updated to 1.4.5 (up from 1.4.4)
  • Shaderc: Updated to 2024.2 (up from 2023.6)
  • SPIRV-Cross: Updated to 0.61.0 (up from 0.57.0)
  • stb
    • Updated stb_image to 2.30 (up from 2.28)
    • Updated stb_image_resize to 2.09 (up from 0.97)
  • tinyexr: Updated to 1.0.8 (up from 1.0.7)
  • tinyfiledialogs: Updated to 3.18.1 (up from 3.13.3)
  • vma: Updated to 3.1.0 (up from 3.0.1)
  • Vulkan: Updated to 1.3.289 (up from 1.3.264)
    • Includes MoltenVK 1.2.10 (up from 1.2.5)
  • Yoga: Updated to 3.1.0 (up from 2.0.0)
  • Zstd: Updated to 1.5.6 (up from 1.5.5)
Improvements
  • FreeBSD: Added support for the FreeBSD operating system, x64 architecture. (#​421)
    • Maven classifier: freebsd
  • Linux: Added support for the PowerPC 64 LE architecture. (#​495)
    • Maven classifier: linux-ppc64le
  • Linux: Added support for the RISC-V 64 architecture. (#​890)
    • Maven classifier: linux-riscv64
  • Linux: ARM/PowerPC/RISC-V shared libraries are now built with GCC 11 (up from GCC 7).
  • Windows: Shared libraries are now built with Clang/LLVM (clang-cl toolset) when possible.
  • Vulkan: Made VkMemoryRequirements mutable for the vmaAllocateMemory(Pages) functions. (#​937)
Fixes
  • Core: Fixed callback wrapper memory leak with the CHM closure registry. (#​927)
  • Core: The SharedLibraryLoader will now always test if System::load works before choosing the extract path. (#​987)
  • bgfx: Fixed bgfx_is_frame_buffer_valid to accept BGFXAttachment.Buffer. (#​993)
  • JAWT: Fixed JAWT_MACOSX_USE_CALAYER value.
  • LLVM: Fixed LLVMGetBufferStart to return ByteBuffer instead of String. (#​934)
  • LLVM: Fixed LookupIntrinsicID to return unsigned instead of void. (#​950)
  • Nuklear: Fixed auto-sizing of nk_stroke_polyline, nk_stroke_polygon, nk_fill_polygon buffers. (#​978)
  • tinyfd: The aDefaultPath parameter of tinyfd_selectFolderDialog is now nullable. (#​922)
Breaking Changes
  • Linux: ARM/PowerPC/RISC-V shared libraries now require GLIBC version 2.35 (up from 2.27)
  • macOS: LWJGL now requires macOS 10.11/El Capitan or later (up from 10.9/Mavericks)
  • meshoptimizer: Fixed autosizing issues. (#​981)
    • For consistency across the API, auto-sizing of some parameters was removed and the corresponding count parameters were made explicit.
    • Auto-sizing is now always based on input parameters, the destination buffers are only checked for enough capacity.
  • stb: stb_image_resize2.h replaced stb_image_resize.h with a new API.
netplex/json-smart-v2 (net.minidev:json-smart)

v2.5.2

Compare Source

About CVE-2024-57699

Thanks for @​ccudennec-otto Some remarks on the CVE, more discussions in #​236

  • as mentioned here it is quite unlikely that the vulnerability is exploited if you come here because of Spring Security / com.nimbusds:oauth2-oidc-sdk
  • the code changes for the upcoming release will "only" fix the default modes provided by JSONParser, e.g. MODE_RFC4627
  • if you create the JSONParser manually / with custom options, make sure you set option LIMIT_JSON_DEPTH
    • since that's what "connect2id" is doing in their library, they were responsible for fixing it. They've already provided a new 11.x release that fixes the JSONParser setup on their side, i.e. you rather need their fixed version and not version 2.5.2 of json-smart
    • as stated here, they would also need to backport the fix to the versions that Spring Security needs IMHO

What's Changed

New Contributors

Full Changelog: netplex/json-smart-v2@2.5.1...2.5.2

java-native-access/jna (net.java.dev.jna:jna)

v5.17.0

Compare Source

================

Features

Bug Fixes

v5.16.0

Compare Source

==============

Features

  • #​1626: Add caching of field list and field validation in Structure along with more efficient reentrant read-write locking instead of synchronized() blocks - @​BrettWooldridge

Bug Fixes

apache/commons-codec (commons-codec:commons-codec)

v1.18.0

The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.18.0.

The Apache Commons Codec component contains encoders and decoders for
formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
widely used encoders and decoders, the codec package also maintains a
collection of phonetic encoding utilities.

This is a feature and maintenance release. Java 8 or later is required.

v1.17.2

The Apache Commons Codec component contains encoders and decoders for
formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
widely used encoders and decoders, the codec package also maintains a
collection of phonetic encoding utilities.

This is a feature and maintenance release. Java 8 or later is required.

connect2id/oauth-2.0-sdk-with-openid-connect-extensions (com.nimbusds:oauth2-oidc-sdk)

v11.25

Compare Source

v11.24

Compare Source

v11.23.1

Compare Source

v11.23

Compare Source

v11.22.2

Compare Source

v11.22.1

Compare Source

v11.22

Compare Source

v11.21.3

Compare Source

v11.21.2

Compare Source

v11.21.1

Compare Source

v11.21

Compare Source

v11.20.2

Compare Source

v11.20.1

Compare Source

v11.20

Compare Source

v11.19.1

Compare Source

v11.19

Compare Source

connect2id/nimbus-jose-jwt (com.nimbusds:nimbus-jose-jwt)

v9.48

Compare Source

v9.47

Compare Source

v9.46

Compare Source

v9.45

Compare Source

v9.44

Compare Source

v9.43


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from AlexProgrammerDE as a code owner June 14, 2025 19:46
@AlexProgrammerDE AlexProgrammerDE merged commit 8e38366 into main Jun 14, 2025
2 of 3 checks passed
@renovate renovate bot deleted the renovate/all-minor-patch branch June 14, 2025 19:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant