Skip to content

Bump the dependencies group across 1 directory with 31 updates#2348

Open
dependabot[bot] wants to merge 1 commit intov2.6.xfrom
dependabot/maven/v2.6.x/dependencies-53695630ee
Open

Bump the dependencies group across 1 directory with 31 updates#2348
dependabot[bot] wants to merge 1 commit intov2.6.xfrom
dependabot/maven/v2.6.x/dependencies-53695630ee

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 20, 2026

Bumps the dependencies group with 30 updates in the / directory:

Package From To
ch.qos.logback:logback-classic 1.5.21 1.5.32
com.fasterxml.jackson.core:jackson-annotations 2.20 2.21
com.fasterxml.jackson.core:jackson-core 2.20.1 2.21.2
com.fasterxml.jackson.dataformat:jackson-dataformat-xml 2.20.1 2.21.2
com.github.dasniko:testcontainers-keycloak 4.0.0 4.2.0
com.google.guava:guava 33.5.0-jre 33.6.0-jre
io.prometheus:prometheus-metrics-bom 1.4.3 1.5.1
org.apache.commons:commons-dbcp2 2.13.0 2.14.0
org.apache.commons:commons-text 1.14.0 1.15.0
org.eclipse.jetty.ee10:jetty-ee10-servlet 12.1.4 12.1.8
org.jooq:jooq 3.20.9 3.21.2
org.jooq:jooq-codegen 3.20.9 3.21.2
org.jooq:jooq-meta 3.20.9 3.21.2
org.junit:junit-bom 6.0.1 6.0.3
org.junit.platform:junit-platform-suite 6.0.1 6.0.3
org.mariadb.jdbc:mariadb-java-client 3.5.6 3.5.8
org.postgresql:postgresql 42.7.8 42.7.10
org.testcontainers:testcontainers-bom 2.0.2 2.0.4
io.github.git-commit-id:git-commit-id-maven-plugin 9.0.2 10.0.0
org.apache.maven.plugins:maven-compiler-plugin 3.14.1 3.15.0
org.apache.maven.plugins:maven-dependency-plugin 3.9.0 3.10.0
org.apache.maven.plugins:maven-shade-plugin 3.6.1 3.6.2
org.codehaus.mojo:exec-maven-plugin 3.6.2 3.6.3
com.diffplug.spotless:spotless-maven-plugin 3.1.0 3.4.0
org.owasp:dependency-check-maven 12.1.9 12.2.1
org.apache.maven.plugins:maven-surefire-plugin 3.5.4 3.5.5
org.apache.maven.plugins:maven-release-plugin 3.2.0 3.3.1
org.sonatype.central:central-publishing-maven-plugin 0.9.0 0.10.0
de.fraunhofer.iosb.io.moquette:moquette-broker 0.18.3 0.18.4
de.fraunhofer.iosb.io.moquette:moquette-metrics-prometheus 0.18.3 0.18.4

Updates ch.qos.logback:logback-classic from 1.5.21 to 1.5.32

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.5.32

2026-02-16 Release of logback version 1.5.32

• In DefaultProcessor, fixed incorrect check for dependencies contained within a parent model. Previous only the direct children were scanned. This fixes logback-access/issues/34.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit e807335a67535b4eacce94e942c0bcb649665d93 associated with the tag v_1.5.32. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.31

2026-02-14 Release of logback version 1.5.31

• Fixed missing META-INF/services directory in logback-classic.jar. This issue rendered logback-classic version 1.5.30 unusable with SLF4J.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 168e42f9f9a18a3ffdf31eb2bfe80a71e33ecd8b associated with the tag v_1.5.31. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.30

2026-02-14 Release of logback version 1.5.30

• In this version, logback-classic.jar was missing the META-INF/services directory, making it unusable with SLF4J. Version 1.5.31 (released later on the same day) fixes this issue.

• Fix scanning issue when an included file becomes available at a later time. This problem was reported in issues/1021 by Sergey Nazarov.

• Standardized code for version checking across modules.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 44164f10ca3fb44ce0e68519f13564b87e3aca61 associated with the tag v_1.5.30. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.29

2026-02-09 Release of logback version 1.5.29

• In response to issues/1017, appender names and appender references are once again subject to variable substitution, reverting the change introduced in version 1.5.28.

Logback 1.5.28

2026-02-06 Release of logback version 1.5.28

• Appender names or appender references are no longer subject to variable substitution.

• Fixed issue with configurations with conditionals encompassing appenders. This was reported in issues/1016 reported by Sergey Sazonov.

• The element now admits a 'scan' attribute which can be used to override the 'scan' attribute in the element.

• Fixed NullPointerException thrown by VersionUtil.checkForVersionEquality method occurring with GraalVM Native Images. This issue was reported in issues/1014.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit e7a1855ab562bb102333f754603ff89359bf3cfc associated with the tag v_1.5.28. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.27

2026-01-30 Release of logback version 1.5.27

• Updated license to Eclipse Public License version 2.0 from version 1.0, retaining the GPL 2.1 dual-license.

• Fixed missing MDC data transmitted by SocketAppender reported in issues/1010 by Lars Vogel.

... (truncated)

Commits
  • e807335 prepare release 1.5.32
  • dc35d55 fix logback-access/issues/34 by checking if dependency is a sub-model of the ...
  • 8e32278 added simple test for appender definitiob via file inclusion
  • 834dbed start work on 1.5.32-SNAPSHOT
  • 168e42f add test to check that Logback SLF4J provider can be activated
  • ed45362 prepare release 1.5.31
  • 609dae7 fix missing META-INF directory
  • 7739739 start work on 1.5.31-SNAPSHOT
  • 44164f1 prepare release 1.5.30
  • 9874f06 test for top-file as a resource, introduced new module logback-classic-misc
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-annotations from 2.20 to 2.21

Commits

Updates com.fasterxml.jackson.core:jackson-core from 2.20.1 to 2.21.2

Commits

Updates com.fasterxml.jackson.dataformat:jackson-dataformat-xml from 2.20.1 to 2.21.2

Commits
  • 6bdc593 [maven-release-plugin] prepare release jackson-dataformat-xml-2.21.2
  • f15dce9 Prep for 2.21.2 release
  • 3503394 Post-release dep version bump
  • b19143d [maven-release-plugin] prepare for next development iteration
  • da4b3fc [maven-release-plugin] prepare release jackson-dataformat-xml-2.21.1
  • 4326690 Prep for 2.21.1 release
  • 035d3a4 Merge branch '2.20' into 2.21
  • d7b2cdc Merge branch '2.19' into 2.20
  • ed65237 Merge branch '2.18' into 2.19
  • ee8f476 Post-release dep version bump
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.20.1 to 2.21.2

Commits

Updates com.fasterxml.jackson.dataformat:jackson-dataformat-xml from 2.20.1 to 2.21.2

Commits
  • 6bdc593 [maven-release-plugin] prepare release jackson-dataformat-xml-2.21.2
  • f15dce9 Prep for 2.21.2 release
  • 3503394 Post-release dep version bump
  • b19143d [maven-release-plugin] prepare for next development iteration
  • da4b3fc [maven-release-plugin] prepare release jackson-dataformat-xml-2.21.1
  • 4326690 Prep for 2.21.1 release
  • 035d3a4 Merge branch '2.20' into 2.21
  • d7b2cdc Merge branch '2.19' into 2.20
  • ed65237 Merge branch '2.18' into 2.19
  • ee8f476 Post-release dep version bump
  • Additional commits viewable in compare view

Updates com.github.dasniko:testcontainers-keycloak from 4.0.0 to 4.2.0

Release notes

Sourced from com.github.dasniko:testcontainers-keycloak's releases.

v4.2.0

Noteable Changes

I've deprecated the default no-args constructor, as the behavior will most likely change in future (starting with KC v27). So, it's recommended that you always specify explicitly the image which you are running your tests against!

Additionally, I've also deprecated for removal some more-or-less internal methods (withNightly and getKeycloakDefaultVersion), they were never officially documented. Most likely they will be removed in the future.

What's Changed

Full Changelog: dasniko/testcontainers-keycloak@v4.1.1...v4.2.0

v4.1.1

What's Changed

  • Updated the keycloak-admin-client to 26.0.8, which is aligned to default server version 26.5.

Full Changelog: dasniko/testcontainers-keycloak@v4.1.0...v4.1.1

v4.1.0

What's New

Nothing new, just use Keycloak v26.5 as default container version.

What's Changed

New Contributors

Full Changelog: dasniko/testcontainers-keycloak@v4.0.1...v4.1.0

v4.0.1

Bugs

  • Set DEBUG_PORT to bind explicitly with "0.0.0.0" for debug compatibility (#260)

... (truncated)

Commits
  • f0d6de5 prepare for 4.2 release by updating keycloak dependencies and version
  • c3b1893 chore: bump testcontainers.version to 2.0.4
  • f1b3241 improve Maven deploy configuration
  • 2f0ca0c chore: bump crazy-max/ghaction-import-gpg from 6 to 7 (#290)
  • b9f52dd add pull request template
  • ce04109 add CONTRIBUTING.md
  • a687df5 add customizable image pull policy with 24h default refresh (#289)
  • be3b434 improve README SEO: richer intro and clearer feature flags heading
  • 269a9a1 fix image tag: use keycloak:26.4 instead of non-existent keycloak:26
  • df8f064 add Spring Boot and Quarkus integration guides
  • Additional commits viewable in compare view

Updates com.google.guava:guava from 33.5.0-jre to 33.6.0-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.6.0

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.6.0-jre</version>
  <!-- or, for Android: -->
  <version>33.6.0-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

  • Migrated some classes from finalize() to PhantomReference in preparation for the removal of finalization. (786b619dd6, 7c6b17c, aeef90988d)
  • cache: Deprecated CacheBuilder APIs that use TimeUnit in favor of those that use Duration. (73f8b0bb84)
  • collect: Added toImmutableSortedMap collectors that use the natural comparator. (64d70b9f94)
  • collect: Changed ConcurrentHashMultiset, ImmutableMap and TreeMultiset deserialization to avoid mutating final fields. In extremely unlikely scenarios in which an instance of that type contains an object that refers back to that instance, this could lead to a broken instance that throws NullPointerException when used. (8240c7e596, 046468055f)
  • graph: Removed @Beta from all APIs in the package. (dae9566b73)
  • graph: Added support to Graphs.transitiveClosure() for different strategies for adding self-loops. (2e13df25b2)
  • graph: Added an asNetwork() view to Graph and ValueGraph. (909c593c61)
  • hash: Added BloomFilter.serializedSize(). (df9bcc251a)
  • net: Added HttpHeaders.CDN_CACHE_CONTROL. (75331b5030)
Commits

Updates io.prometheus:prometheus-metrics-bom from 1.4.3 to 1.5.1

Release notes

Sourced from io.prometheus:prometheus-metrics-bom's releases.

v1.5.1

1.5.1 (2026-03-20)

Bug Fixes

  • deps: update dependency io.prometheus:prometheus-metrics-bom to v1.5.0 (#1877) (043fc57)
  • deps: update dependency org.springframework.boot:spring-boot-starter-parent to v4.0.3 (#1900) (0d800d0)
  • deps: update jetty monorepo to v12.1.7 (#1932) (5bd3b79)
  • deps: update junit-framework monorepo to v6.0.3 (#1880) (05ad751)
  • exclude standalone examples from mise run format (#1931) (537fb88)
  • fix release-please PR title pattern and permissions (#1978) (d737978)
  • Handle empty datapoints in otel exporter (#1898) (59c8552)
  • inline set-version logic in build-release.sh (#1884) (c050435)
  • reduce lychee retries to avoid compounding GitHub 429s (#1940) (cc17d6e)
  • remove version manipulation from build-release.sh (#1886) (93e2b6d)
  • trigger Maven deploy on release-please published events (#1966) (643d0e7)
  • use /tree/ instead of /blob/ for directory URL (#1944) (b81332e)
  • use maven release type for release-please (#1967) (ff3bd2d)

Documentation

  • document DCO sign-off requirement for contributions (#1937) (0860e77)

v1.5.0

Highlights

Performance

  • Improve histogram/summary performance under contention (#1794) by @​jack-berg — Significant throughput improvements for high-contention scenarios by striping observationCount across multiple instances. Benchmarks show prometheusClassic improving from ~5,126 ops/s to ~14,624 ops/s (~185% improvement) and prometheusNative from ~3,854 ops/s to ~7,406 ops/s (~92% improvement).

Configuration

  • Support environment variables in properties (#1828) by @​zeitlinger — Adds environment variable support for configuration (e.g., IO_PROMETHEUS_EXPORTER_HTTP_SERVER_PORT) while maintaining full backward compatibility. Also introduces snake_case property naming (recommended) while keeping camelCase working.

API

  • Allow metrics with the same name but different labels (#1800) by @​jaydeluca — Enables registration of metrics with the same name, with validation at both registration and scrape time.
  • Add stable Metrics class to decouple consumers from protobuf version (#1873) by @​zeitlinger — Introduces a stable Metrics class so consumer code no longer needs import updates on protobuf upgrades.

OpenTelemetry

  • Add OTel support module and make examples standalone (#1868) by @​zeitlinger — New prometheus-metrics-otel-support module that bundles the OTel SDK and Prometheus exporter as a single dependency. Examples are now standalone and can be copy-pasted directly.
  • Add docs and example for OTel JVM runtime metrics (#1861) by @​zeitlinger

Exporters

... (truncated)

Changelog

Sourced from io.prometheus:prometheus-metrics-bom's changelog.

1.5.1 (2026-03-20)

Bug Fixes

  • deps: update dependency io.prometheus:prometheus-metrics-bom to v1.5.0 (#1877) (043fc57)
  • deps: update dependency org.springframework.boot:spring-boot-starter-parent to v4.0.3 (#1900) (0d800d0)
  • deps: update jetty monorepo to v12.1.7 (#1932) (5bd3b79)
  • deps: update junit-framework monorepo to v6.0.3 (#1880) (05ad751)
  • exclude standalone examples from mise run format (#1931) (537fb88)
  • fix release-please PR title pattern and permissions (#1978) (d737978)
  • Handle empty datapoints in otel exporter (#1898) (59c8552)
  • inline set-version logic in build-release.sh (#1884) (c050435)
  • reduce lychee retries to avoid compounding GitHub 429s (#1940) (cc17d6e)
  • remove version manipulation from build-release.sh (#1886) (93e2b6d)
  • trigger Maven deploy on release-please published events (#1966) (643d0e7)
  • use /tree/ instead of /blob/ for directory URL (#1944) (b81332e)
  • use maven release type for release-please (#1967) (ff3bd2d)

Documentation

  • document DCO sign-off requirement for contributions (#1937) (0860e77)
Commits

Updates org.apache.commons:commons-dbcp2 from 2.13.0 to 2.14.0

Updates org.apache.commons:commons-text from 1.14.0 to 1.15.0

Changelog

Sourced from org.apache.commons:commons-text's changelog.

Apache Commons Text 1.15.0 Release Notes

The Apache Commons Text team is pleased to announce the release of Apache Commons Text 1.15.0.

Apache Commons Text is a set of utility functions and reusable components for processing and manipulating text in a Java environment.

Release 1.15.0. This is a feature and maintenance release. Java 8 or later is required.

New features

  •        Add experimental CycloneDX VEX file [#683](https://github.com/apache/commons-text/issues/683). Thanks to Piotr P. Karwasz, Gary Gregory.
  • TEXT-235: Add Damerau-Levenshtein distance #687. Thanks to LorgeN, Gary Gregory.
  •        Add unit tests to increase coverage [#719](https://github.com/apache/commons-text/issues/719). Thanks to Michael Hausegger, Gary Gregory.

  •        Add new test for CharSequenceTranslator#with() [#725](https://github.com/apache/commons-text/issues/725). Thanks to Michael Hausegger, Gary Gregory.

  •        Add tests and assertions to org.apache.commons.text.similarity to get to 100% code coverage [#727](https://github.com/apache/commons-text/issues/727), [#728](https://github.com/apache/commons-text/issues/728). Thanks to Michael Hausegger.

Fixed Bugs

  •        Fix exception message typo in XmlStringLookup.XmlStringLookup(Map, Path...). Thanks to Gary Gregory.
  • TEXT-236: Inserting at the end of a TextStringBuilder throws a StringIndexOutOfBoundsException. Thanks to Pierre Post, Sumit Bera, Alex Herbert, Gary Gregory.
  •        Fix TextStringBuilderTest.testAppendToCharBuffer() to use proper argument type [#724](https://github.com/apache/commons-text/issues/724). Thanks to Michael Hausegger.

  •        Fix Apache RAT plugin console warnings. Thanks to Gary Gregory.

  •        Fix site XML to use version 2.0.0 XML schema. Thanks to Gary Gregory.

  •        Removed unreachable threshold verification code in src/main/java/org/apache/commons/text/similarity [#730](https://github.com/apache/commons-text/issues/730). Thanks to Michael Hausegger.

  •        Enable secure processing for the XML parser in XmlStringLookup in case the underlying JAXP implementation doesn't [#729](https://github.com/apache/commons-text/issues/729). Thanks to 김민재 (minjas0507), Gary Gregory, Piotr Karwasz.

Changes

  •        Bump org.apache.commons:commons-parent from 85 to 93 [#704](https://github.com/apache/commons-text/issues/704), [#723](https://github.com/apache/commons-text/issues/723), [#726](https://github.com/apache/commons-text/issues/726). Thanks to Gary Gregory.

  •        Bump commons.bytebuddy.version from 1.17.6 to 1.18.2 [#696](https://github.com/apache/commons-text/issues/696), [#722](https://github.com/apache/commons-text/issues/722). Thanks to Gary Gregory.

  •        Bump graalvm.version from 24.2.2 to 25.0.1 [#703](https://github.com/apache/commons-text/issues/703), [#716](https://github.com/apache/commons-text/issues/716). Thanks to Gary Gregory, Dependabot.

  •        Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.20.0. Thanks to Gary Gregory.

  •        Bump commons-io:commons-io from 2.20.0 to 2.21.0. Thanks to Gary Gregory.

Historical list of changes: https://commons.apache.org/proper/commons-text/changes.html

For complete information on Apache Commons Text, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Text website:

https://commons.apache.org/proper/commons-text

Download page: https://commons.apache.org/proper/commons-text/download_text.cgi

... (truncated)

Commits
  • 04e9374 Prepare for the release candidate 1.15.0 RC1
  • 502c4c4 Prepare for the next release candidate
  • c6e17ec Use direct access
  • 58e1e12 Simplify XML FSP (#731)
  • b5052c9 Bump actions/setup-java from 5.0.0 to 5.1.0
  • 2e2d4bc Revert "Bump actions/setup-java from 5.0.0 to 5.1.0"
  • b0ddbd1 Bump actions/setup-java from 5.0.0 to 5.1.0
  • 1c2d382 Add tests with external DTD
  • ed3df4b Internal clean up
  • bb508f3 Bump actions/checkout from 6.0.0 to 6.0.1
  • Additional commits viewable in compare view

Updates org.eclipse.jetty.ee10:jetty-ee10-servlet from 12.1.4 to 12.1.8

Updates org.jooq:jooq from 3.20.9 to 3.21.2

Updates org.jooq:jooq-codegen from 3.20.9 to 3.21.2

Updates org.jooq:jooq-meta from 3.20.9 to 3.21.2

Updates org.jooq:jooq-codegen from 3.20.9 to 3.21.2

Updates org.jooq:jooq-meta from 3.20.9 to 3.21.2

Updates org.junit:junit-bom from 6.0.1 to 6.0.3

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 6.0.3 = Platform 6.0.3 + Jupiter 6.0.3 + Vintage 6.0.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.2...r6.0.3

JUnit 6.0.2 = Platform 6.0.2 + Jupiter 6.0.2 + Vintage 6.0.2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.1...r6.0.2

Commits
  • 36e3253 Release 6.0.3
  • 295561f Finalize 6.0.3 release notes
  • ea18076 Fix deadlock in NamespacedHierarchicalStore.computeIfAbsent() (#5348)
  • 869e232 Add 5.14.3 release notes
  • d4b34c4 Fix links to User Guide
  • 5c8fb0f Reliably support JRE.OTHER with @⁠EnabledOnJre and @⁠DisabledOnJre
  • febb13f Check out entire repo so switching to main branch works in last step
  • 71fba90 Install poppler-utils for pdfinfo
  • 740e9e0 Update API baseline
  • 2ba535f Use release branch of examples repo
  • Additional commits viewable in compare view

Updates org.junit.platform:junit-platform-suite from 6.0.1 to 6.0.3

Release notes

Sourced from org.junit.platform:junit-platform-suite's releases.

JUnit 6.0.3 = Platform 6.0.3 + Jupiter 6.0.3 + Vintage 6.0.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.2...r6.0.3

JUnit 6.0.2 = Platform 6.0.2 + Jupiter 6.0.2 + Vintage 6.0.2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.1...r6.0.2

Commits
  • 36e3253 Release 6.0.3
  • 295561f Finalize 6.0.3 release notes
  • ea18076 Fix deadlock in NamespacedHierarchicalStore.computeIfAbsent() (#5348)
  • 869e232 Add 5.14.3 release notes
  • d4b34c4 Fix links to User Guide
  • 5c8fb0f Reliably support JRE.OTHER with @⁠EnabledOnJre and @⁠DisabledOnJre
  • febb13f Check out entire repo so switching to main branch works in last step
  • 71fba90 Install poppler-utils for pdfinfo
  • 740e9e0 Update API baseline
  • 2ba535f Use release branch of examples repo
  • Additional commits viewable in compare view

Updates org.mariadb.jdbc:mariadb-java-client from 3.5.6 to 3.5.8

Release notes

Sourced from org.mariadb.jdbc:mariadb-java-client's releases.

MariaDB Connector/Java 3.5.8

3.5.8 (Apr 2026)

Full Changelog

Issues Resolved

  • CONJ-1305 - XAResource.isSameRM() incorrectly returns true when rewriteBatchedStatements differs between connections
  • CONJ-1303 - Statement.cancel() fails to kill running query during result streaming

Other

  • CONJ-1298 - Performance improvement: avoid decoding extended format

MariaDB Connector/Java 3.5.7

3.5.7 (Dec 2025)

Full Changelog

Key Enhancements

  • CONJ-1282 - Added TLS SNI (Server Name Indication) support
  • CONJ-1271 - Added MariaDbDataTruncation exception that includes MariaDB error code and error message

Issues Resolved

  • CONJ-1291 - Fixed ConnectionPoolDataSource incompatibility and connection leaks due to internal ConnectionEventListener in MariaDB Connector/J 3.5.x
  • CONJ-1286 - Fixed MariaDbPoolPinnedConnection thread-safety issue
  • CONJ-1283 - Fixed rewriteBatchedStatements introduced in 3.5.6 bug when having parentesis after VALUES parts
  • CONJ-1287 - Fixed authentication plugin multi-exchange prefix (0x01) handling introduced in MDEV-37554
  • CONJ-1290 - Fixed NullPointerException in MultiPrimaryReplicaClient
  • CONJ-1295 - Fixed MariaDbClob compilation with JDK 26+
Changelog

Sourced from org.mariadb.jdbc:mariadb-java-client's changelog.

3.5.8 (Apr 2026)

Full Changelog

Issues Resolved

  • CONJ-1305 - XAResource.isSameRM() incorrectly returns true when rewriteBatchedStatements differs between connections
  • CONJ-1303 - Statement.cancel() fails to kill running query during result streaming

Other

  • CONJ-1298 - Performance improvement: avoid decoding extended format

3.5.7 (Dec 2025)

Full Changelog

Key Enhancements

  • CONJ-1282 - Added TLS SNI (Server Name Indication) support
  • CONJ-1271 - Added MariaDbDataTruncation exception that includes MariaDB error code and error message

Issues Resolved

  • CONJ-1291 - Fixed ConnectionPoolDataSource incompatibility and connection leaks due to internal ConnectionEventListener in MariaDB Connector/J 3.5.x
  • CONJ-1286 - Fixed MariaDbPoolPinnedConnection thread-safety issue
  • CONJ-1283 - Fixed rewriteBatchedStatements introduced in 3.5.6 bug when having parentesis after VALUES parts
  • CONJ-1287 - Fixed authentication plugin multi-exchange prefix (0x01) handling introduced in MDEV-37554
  • CONJ-1290 - Fixed NullPointerException in MultiPrimaryReplicaClient
  • CONJ-1295 - Fixed MariaDbClob compilation with JDK 26+
Commits
  • 26b34a2 Merge branch 'develop'
  • 06d6efe bump CI actions/checkout@v5
  • a86a83c bump 3.5.8
  • 975f991 [misc] refactor TimestampCodec to implement Codec directly and extract shared...
  • 75bb509 [misc] code formatting cleanup
  • 4c0b6a0 [misc] refactor TimestampCodec to extend UtilDateCodec and extract common dat...
  • a5b7fb1 [misc] convert Reader and Writer from interfaces to final class implementatio...
  • d31eb06 [misc] convert ReadableByteBuf from interface to final class implementation, ...
  • 11d45a9 [misc] optimize binary row decoder null bitmap checks and simplify signed Big...
  • 5aad14c [misc] optimize BigInt column decoding and improve type safety in codec inter...
  • Additional commits viewable in compare view

Updates org.postgresql:postgresql from 42.7.8 to 42.7.10

Release notes

Sourced from org.postgresql:postgresql's releases.

v42.7.10

Changes

@dependabot
Bump the dependencies group across 1 directory with 31 updates
306c484 
Bumps the dependencies group with 30 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.21` | `1.5.32` |
| [com.fasterxml.jackson.core:jackson-annotations](https://github.com/FasterXML/jackson) | `2.20` | `2.21` |
| [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.20.1` | `2.21.2` |
| [com.fasterxml.jackson.dataformat:jackson-dataformat-xml](https://github.com/FasterXML/jackson-dataformat-xml) | `2.20.1` | `2.21.2` |
| [com.github.dasniko:testcontainers-keycloak](https://github.com/dasniko/testcontainers-keycloak) | `4.0.0` | `4.2.0` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.5.0-jre` | `33.6.0-jre` |
| [io.prometheus:prometheus-metrics-bom](https://github.com/prometheus/client_java) | `1.4.3` | `1.5.1` |
| org.apache.commons:commons-dbcp2 | `2.13.0` | `2.14.0` |
| [org.apache.commons:commons-text](https://github.com/apache/commons-text) | `1.14.0` | `1.15.0` |
| org.eclipse.jetty.ee10:jetty-ee10-servlet | `12.1.4` | `12.1.8` |
| org.jooq:jooq | `3.20.9` | `3.21.2` |
| org.jooq:jooq-codegen | `3.20.9` | `3.21.2` |
| org.jooq:jooq-meta | `3.20.9` | `3.21.2` |
| [org.junit:junit-bom](https://github.com/junit-team/junit-framework) | `6.0.1` | `6.0.3` |
| [org.junit.platform:junit-platform-suite](https://github.com/junit-team/junit-framework) | `6.0.1` | `6.0.3` |
| [org.mariadb.jdbc:mariadb-java-client](https://github.com/mariadb-corporation/mariadb-connector-j) | `3.5.6` | `3.5.8` |
| [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) | `42.7.8` | `42.7.10` |
| [org.testcontainers:testcontainers-bom](https://github.com/testcontainers/testcontainers-java) | `2.0.2` | `2.0.4` |
| [io.github.git-commit-id:git-commit-id-maven-plugin](https://github.com/git-commit-id/git-commit-id-maven-plugin) | `9.0.2` | `10.0.0` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.14.1` | `3.15.0` |
| [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) | `3.9.0` | `3.10.0` |
| [org.apache.maven.plugins:maven-shade-plugin](https://github.com/apache/maven-shade-plugin) | `3.6.1` | `3.6.2` |
| [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.6.2` | `3.6.3` |
| [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) | `3.1.0` | `3.4.0` |
| [org.owasp:dependency-check-maven](https://github.com/dependency-check/DependencyCheck) | `12.1.9` | `12.2.1` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.4` | `3.5.5` |
| [org.apache.maven.plugins:maven-release-plugin](https://github.com/apache/maven-release) | `3.2.0` | `3.3.1` |
| [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype/central-publishing-maven-plugin) | `0.9.0` | `0.10.0` |
| [de.fraunhofer.iosb.io.moquette:moquette-broker](https://github.com/FraunhoferIOSB/moquette) | `0.18.3` | `0.18.4` |
| de.fraunhofer.iosb.io.moquette:moquette-metrics-prometheus | `0.18.3` | `0.18.4` |



Updates `ch.qos.logback:logback-classic` from 1.5.21 to 1.5.32
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.21...v_1.5.32)

Updates `com.fasterxml.jackson.core:jackson-annotations` from 2.20 to 2.21
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.core:jackson-core` from 2.20.1 to 2.21.2
- [Commits](FasterXML/jackson-core@jackson-core-2.20.1...jackson-core-2.21.2)

Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-xml` from 2.20.1 to 2.21.2
- [Commits](FasterXML/jackson-dataformat-xml@jackson-dataformat-xml-2.20.1...jackson-dataformat-xml-2.21.2)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.20.1 to 2.21.2
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-xml` from 2.20.1 to 2.21.2
- [Commits](FasterXML/jackson-dataformat-xml@jackson-dataformat-xml-2.20.1...jackson-dataformat-xml-2.21.2)

Updates `com.github.dasniko:testcontainers-keycloak` from 4.0.0 to 4.2.0
- [Release notes](https://github.com/dasniko/testcontainers-keycloak/releases)
- [Commits](dasniko/testcontainers-keycloak@v4.0.0...v4.2.0)

Updates `com.google.guava:guava` from 33.5.0-jre to 33.6.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `io.prometheus:prometheus-metrics-bom` from 1.4.3 to 1.5.1
- [Release notes](https://github.com/prometheus/client_java/releases)
- [Changelog](https://github.com/prometheus/client_java/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_java@v1.4.3...v1.5.1)

Updates `org.apache.commons:commons-dbcp2` from 2.13.0 to 2.14.0

Updates `org.apache.commons:commons-text` from 1.14.0 to 1.15.0
- [Changelog](https://github.com/apache/commons-text/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-text@rel/commons-text-1.14.0...rel/commons-text-1.15.0)

Updates `org.eclipse.jetty.ee10:jetty-ee10-servlet` from 12.1.4 to 12.1.8

Updates `org.jooq:jooq` from 3.20.9 to 3.21.2

Updates `org.jooq:jooq-codegen` from 3.20.9 to 3.21.2

Updates `org.jooq:jooq-meta` from 3.20.9 to 3.21.2

Updates `org.jooq:jooq-codegen` from 3.20.9 to 3.21.2

Updates `org.jooq:jooq-meta` from 3.20.9 to 3.21.2

Updates `org.junit:junit-bom` from 6.0.1 to 6.0.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.0.1...r6.0.3)

Updates `org.junit.platform:junit-platform-suite` from 6.0.1 to 6.0.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.0.1...r6.0.3)

Updates `org.mariadb.jdbc:mariadb-java-client` from 3.5.6 to 3.5.8
- [Release notes](https://github.com/mariadb-corporation/mariadb-connector-j/releases)
- [Changelog](https://github.com/mariadb-corporation/mariadb-connector-j/blob/main/CHANGELOG.md)
- [Commits](mariadb-corporation/mariadb-connector-j@3.5.6...3.5.8)

Updates `org.postgresql:postgresql` from 42.7.8 to 42.7.10
- [Release notes](https://github.com/pgjdbc/pgjdbc/releases)
- [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md)
- [Commits](pgjdbc/pgjdbc@REL42.7.8...REL42.7.10)

Updates `org.testcontainers:testcontainers-bom` from 2.0.2 to 2.0.4
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@2.0.2...2.0.4)

Updates `io.github.git-commit-id:git-commit-id-maven-plugin` from 9.0.2 to 10.0.0
- [Release notes](https://github.com/git-commit-id/git-commit-id-maven-plugin/releases)
- [Commits](git-commit-id/git-commit-id-maven-plugin@v9.0.2...v10.0.0)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.14.1 to 3.15.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.14.1...maven-compiler-plugin-3.15.0)

Updates `org.apache.maven.plugins:maven-dependency-plugin` from 3.9.0 to 3.10.0
- [Release notes](https://github.com/apache/maven-dependency-plugin/releases)
- [Commits](apache/maven-dependency-plugin@maven-dependency-plugin-3.9.0...maven-dependency-plugin-3.10.0)

Updates `org.apache.maven.plugins:maven-shade-plugin` from 3.6.1 to 3.6.2
- [Release notes](https://github.com/apache/maven-shade-plugin/releases)
- [Commits](apache/maven-shade-plugin@maven-shade-plugin-3.6.1...maven-shade-plugin-3.6.2)

Updates `org.codehaus.mojo:exec-maven-plugin` from 3.6.2 to 3.6.3
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
- [Commits](mojohaus/exec-maven-plugin@3.6.2...3.6.3)

Updates `com.diffplug.spotless:spotless-maven-plugin` from 3.1.0 to 3.4.0
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@lib/3.1.0...maven/3.4.0)

Updates `org.owasp:dependency-check-maven` from 12.1.9 to 12.2.1
- [Release notes](https://github.com/dependency-check/DependencyCheck/releases)
- [Changelog](https://github.com/dependency-check/DependencyCheck/blob/main/CHANGELOG.md)
- [Commits](dependency-check/DependencyCheck@v12.1.9...v12.2.1)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.4 to 3.5.5
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.4...surefire-3.5.5)

Updates `org.apache.maven.plugins:maven-release-plugin` from 3.2.0 to 3.3.1
- [Release notes](https://github.com/apache/maven-release/releases)
- [Commits](apache/maven-release@maven-release-3.2.0...maven-release-3.3.1)

Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.9.0 to 0.10.0
- [Commits](https://github.com/sonatype/central-publishing-maven-plugin/commits)

Updates `de.fraunhofer.iosb.io.moquette:moquette-broker` from 0.18.3 to 0.18.4
- [Changelog](https://github.com/FraunhoferIOSB/moquette/blob/v0.18.x/ChangeLog.txt)
- [Commits](FraunhoferIOSB/moquette@v0.18.3...v0.18.4)

Updates `de.fraunhofer.iosb.io.moquette:moquette-metrics-prometheus` from 0.18.3 to 0.18.4

Updates `de.fraunhofer.iosb.io.moquette:moquette-metrics-prometheus` from 0.18.3 to 0.18.4

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: com.fasterxml.jackson.core:jackson-annotations
  dependency-version: '2.21'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: 2.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-xml
  dependency-version: 2.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-xml
  dependency-version: 2.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.github.dasniko:testcontainers-keycloak
  dependency-version: 4.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.google.guava:guava
  dependency-version: 33.6.0-jre
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.prometheus:prometheus-metrics-bom
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.commons:commons-dbcp2
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.commons:commons-text
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.eclipse.jetty.ee10:jetty-ee10-servlet
  dependency-version: 12.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.jooq:jooq
  dependency-version: 3.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.jooq:jooq-codegen
  dependency-version: 3.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.jooq:jooq-meta
  dependency-version: 3.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.jooq:jooq-codegen
  dependency-version: 3.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.jooq:jooq-meta
  dependency-version: 3.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.junit:junit-bom
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.junit.platform:junit-platform-suite
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.mariadb.jdbc:mariadb-java-client
  dependency-version: 3.5.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.postgresql:postgresql
  dependency-version: 42.7.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.testcontainers:testcontainers-bom
  dependency-version: 2.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.github.git-commit-id:git-commit-id-maven-plugin
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-dependency-plugin
  dependency-version: 3.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-shade-plugin
  dependency-version: 3.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.codehaus.mojo:exec-maven-plugin
  dependency-version: 3.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.owasp:dependency-check-maven
  dependency-version: 12.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-release-plugin
  dependency-version: 3.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.sonatype.central:central-publishing-maven-plugin
  dependency-version: 0.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: de.fraunhofer.iosb.io.moquette:moquette-broker
  dependency-version: 0.18.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: de.fraunhofer.iosb.io.moquette:moquette-metrics-prometheus
  dependency-version: 0.18.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: de.fraunhofer.iosb.io.moquette:moquette-metrics-prometheus
  dependency-version: 0.18.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Apr 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants