Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 1, 2025

Bumps the maven group with 9 updates:

Package From To
com.google.errorprone:error_prone_core 2.43.0 2.44.0
org.apache.maven.plugins:maven-jar-plugin 3.4.2 3.5.0
org.apache.maven.plugins:maven-release-plugin 3.1.1 3.2.0
com.google.errorprone:error_prone_annotations 2.43.0 2.44.0
com.guardsquare:proguard-base 7.8.0 7.8.1
org.junit:junit-bom 6.0.0 6.0.1
org.graalvm.buildtools:native-maven-plugin 0.11.2 0.11.3
com.android.tools:r8 8.11.18 8.13.17
com.google.protobuf:protobuf-java 4.33.0 4.33.1

Updates com.google.errorprone:error_prone_core from 2.43.0 to 2.44.0

Release notes

Sourced from com.google.errorprone:error_prone_core's releases.

Error Prone 2.44.0

Changes

Closed issues: #5218, #5278

Full changelog: google/error-prone@v2.43.0...v2.44.0

Commits
  • 4016e04 Release Error Prone 2.44.0
  • 8255d1e Avoid overlaps in UnnecessaryAsync fixes
  • 4c0f01b Report InvalidLink diagnostics for links that are so invalid they crash javac
  • b5690c9 Refresh Java8ApiChecker diff
  • 54ed3d8 Finalise removing GuardedByFlags.
  • bc26f7b TruthConstantAsserts: treat static identifiers as constants.
  • 7692fb4 Rollforward of google/error-prone@3272246036db6fc15...
  • 9c5f725 Optimize snippet logic
  • b063711 Improve TruthConstantAsserts to detect more constant-like expressions.
  • de35cc9 Automated rollback of commit 09c78e01573334cee793b67346ca0f3175fd47a3.
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-jar-plugin from 3.4.2 to 3.5.0

Release notes

Sourced from org.apache.maven.plugins:maven-jar-plugin's releases.

3.5.0

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

🔧 Build

📦 Dependency updates

Commits
  • 68d00f1 [maven-release-plugin] prepare release maven-jar-plugin-3.5.0
  • 357b9bf Update site descriptor to 2.0.0
  • 340249c Fix detecting java version for toolchains and JDK 1.8
  • 06a6245 chore: remove junit3 references
  • d302b2c Bump commons-io:commons-io from 2.20.0 to 2.21.0
  • 6081bdb Bump org.codehaus.plexus:plexus-archiver from 4.10.3 to 4.10.4
  • ef8ed4c Migrate component injection to JSR-330
  • 704a35c Ignore stderr when parsing javac version from toolchain (#471)
  • 0beb969 Use maven-plugin-testing-harness version 3.4.0
  • c2624c8 Bump org.apache.maven.plugin-tools:maven-plugin-annotations (#488)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-release-plugin from 3.1.1 to 3.2.0

Release notes

Sourced from org.apache.maven.plugins:maven-release-plugin's releases.

3.2.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • 167c489 [maven-release-plugin] prepare release maven-release-3.2.0
  • 0ab10be Improve javadoc for parameter "pushChanges"
  • f06aaa2 Add links to Javadocs for SCM authentication
  • bf44cbe Site: Convert APT to Markdown
  • 71db7e5 Move to match target converter format MARKDOWN with doxia-converter
  • 46a6026 PlexusFileUtils Refaster recipes (#1403)
  • b3d49dc PlexusStringUtils Refaster recipes (#1404)
  • ce76e9f Update site descriptor to 2.0.0
  • 0ef78fd Bump parent from 42 to 45
  • dfe917c Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0 (#1392)
  • Additional commits viewable in compare view

Updates com.google.errorprone:error_prone_annotations from 2.43.0 to 2.44.0

Release notes

Sourced from com.google.errorprone:error_prone_annotations's releases.

Error Prone 2.44.0

Changes

Closed issues: #5218, #5278

Full changelog: google/error-prone@v2.43.0...v2.44.0

Commits
  • 4016e04 Release Error Prone 2.44.0
  • 8255d1e Avoid overlaps in UnnecessaryAsync fixes
  • 4c0f01b Report InvalidLink diagnostics for links that are so invalid they crash javac
  • b5690c9 Refresh Java8ApiChecker diff
  • 54ed3d8 Finalise removing GuardedByFlags.
  • bc26f7b TruthConstantAsserts: treat static identifiers as constants.
  • 7692fb4 Rollforward of google/error-prone@3272246036db6fc15...
  • 9c5f725 Optimize snippet logic
  • b063711 Improve TruthConstantAsserts to detect more constant-like expressions.
  • de35cc9 Automated rollback of commit 09c78e01573334cee793b67346ca0f3175fd47a3.
  • Additional commits viewable in compare view

Updates com.guardsquare:proguard-base from 7.8.0 to 7.8.1

Release notes

Sourced from com.guardsquare:proguard-base's releases.

v7.8.1

Bugfixes

  • Prevent java.lang.IncompatibleClassChangeError when shrinking is enabled and sealed interfaces are used (#501).
  • Prevent java.lang.ClassCastException when inlining (#505).
Commits
  • 7a76843 Add release note
  • d2170ba Use StructuredLineNumberInfo in LineNumberLinearizer
  • 6dfd878 Run InterfaceUsageMarker before NestUsageMarker to prevent missing marking of...
  • See full diff in compare view

Updates org.junit:junit-bom from 6.0.0 to 6.0.1

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 6.0.1 = Platform 6.0.1 + Jupiter 6.0.1 + Vintage 6.0.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0...r6.0.1

Commits

Updates org.graalvm.buildtools:native-maven-plugin from 0.11.2 to 0.11.3

Release notes

Sourced from org.graalvm.buildtools:native-maven-plugin's releases.

0.11.3

What's Changed

Full Changelog: graalvm/native-build-tools@0.11.2...0.11.3

Commits
  • 212108a Release 0.11.3
  • 95d4795 Merge pull request #796 from graalvm/update-metadata-to-0.3.30
  • 048d00a Update reachability metadata to 0.3.30
  • 3ba3c7e Merge pull request #789 from graalvm/bump-version-to-0.11.3-SNAPSHOT
  • b37d020 bump version to 0.11.3 SNAPSHOT
  • ceffc6e Merge pull request #786 from graalvm/release/0.11.2
  • See full diff in compare view

Updates com.android.tools:r8 from 8.11.18 to 8.13.17

Updates com.google.protobuf:protobuf-java from 4.33.0 to 4.33.1

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [com.google.errorprone:error_prone_core](https://github.com/google/error-prone) | `2.43.0` | `2.44.0` |
| [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) | `3.4.2` | `3.5.0` |
| [org.apache.maven.plugins:maven-release-plugin](https://github.com/apache/maven-release) | `3.1.1` | `3.2.0` |
| [com.google.errorprone:error_prone_annotations](https://github.com/google/error-prone) | `2.43.0` | `2.44.0` |
| [com.guardsquare:proguard-base](https://github.com/Guardsquare/proguard) | `7.8.0` | `7.8.1` |
| [org.junit:junit-bom](https://github.com/junit-team/junit-framework) | `6.0.0` | `6.0.1` |
| [org.graalvm.buildtools:native-maven-plugin](https://github.com/graalvm/native-build-tools) | `0.11.2` | `0.11.3` |
| com.android.tools:r8 | `8.11.18` | `8.13.17` |
| [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `4.33.0` | `4.33.1` |


Updates `com.google.errorprone:error_prone_core` from 2.43.0 to 2.44.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.43.0...v2.44.0)

Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.4.2 to 3.5.0
- [Release notes](https://github.com/apache/maven-jar-plugin/releases)
- [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.4.2...maven-jar-plugin-3.5.0)

Updates `org.apache.maven.plugins:maven-release-plugin` from 3.1.1 to 3.2.0
- [Release notes](https://github.com/apache/maven-release/releases)
- [Commits](apache/maven-release@maven-release-3.1.1...maven-release-3.2.0)

Updates `com.google.errorprone:error_prone_annotations` from 2.43.0 to 2.44.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.43.0...v2.44.0)

Updates `com.guardsquare:proguard-base` from 7.8.0 to 7.8.1
- [Release notes](https://github.com/Guardsquare/proguard/releases)
- [Commits](Guardsquare/proguard@v7.8...v7.8.1)

Updates `org.junit:junit-bom` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.0.0...r6.0.1)

Updates `org.graalvm.buildtools:native-maven-plugin` from 0.11.2 to 0.11.3
- [Release notes](https://github.com/graalvm/native-build-tools/releases)
- [Commits](graalvm/native-build-tools@0.11.2...0.11.3)

Updates `com.android.tools:r8` from 8.11.18 to 8.13.17

Updates `com.google.protobuf:protobuf-java` from 4.33.0 to 4.33.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

---
updated-dependencies:
- dependency-name: com.google.errorprone:error_prone_core
  dependency-version: 2.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: org.apache.maven.plugins:maven-jar-plugin
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: org.apache.maven.plugins:maven-release-plugin
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: com.google.errorprone:error_prone_annotations
  dependency-version: 2.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: com.guardsquare:proguard-base
  dependency-version: 7.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: org.junit:junit-bom
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: org.graalvm.buildtools:native-maven-plugin
  dependency-version: 0.11.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: com.android.tools:r8
  dependency-version: 8.13.17
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 4.33.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Dec 1, 2025
@Marcono1234
Copy link
Contributor

Marcono1234 commented Dec 1, 2025

Regarding the build failures:

So these are the same issues as for the Dependabot PR last month. Unfortunately at least in this case the Dependabot cooldown of 14 days did not help that much (but it did help last month), and that was not the only purpose of the cooldown anyway.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant