Skip to content

Bump the minor-patch group across 1 directory with 7 updates - #878

Merged
lisajulia merged 1 commit into
mainfrom
dependabot/maven/minor-patch-4b507d3e38
Aug 19, 2026
Merged

Bump the minor-patch group across 1 directory with 7 updates#878
lisajulia merged 1 commit into
mainfrom
dependabot/maven/minor-patch-4b507d3e38

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 18, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-patch group with 7 updates in the / directory:

Package From To
com.sap.cds:cds-services-bom 5.0.1 5.0.2
com.sap.cds:cds-maven-plugin 5.0.1 5.0.2
io.netty:netty-bom 4.2.16.Final 4.2.17.Final
com.sap.cloud.sdk:sdk-bom 5.32.0 5.33.0
org.junit:junit-bom 6.1.2 6.1.3
ch.qos.logback:logback-classic 1.6.1 1.6.2
software.amazon.awssdk:s3 2.50.3 2.51.4

Updates com.sap.cds:cds-services-bom from 5.0.1 to 5.0.2

Updates com.sap.cds:cds-maven-plugin from 5.0.1 to 5.0.2

Updates io.netty:netty-bom from 4.2.16.Final to 4.2.17.Final

Release notes

Sourced from io.netty:netty-bom's releases.

netty-4.2.17.Final

What's Changed

New Contributors

... (truncated)

Commits
  • e0789d3 [maven-release-plugin] prepare release netty-4.2.17.Final
  • 1b5abc6 Merge changes from forks (#17213)
  • 36fbf57 Update surefire plugin to latest version (#17210)
  • a96226c Add .editorconfig to enforce consistent coding style (#17052)
  • 14a4e6a OpenSSL: Allow to obtain used named group via OpenSslSession (#17058)
  • 26255b1 Weakly reference engines from the OpenSSL engine map (#17199)
  • ae41417 HttpServerCodec: do not consume the method queue for 1xx interim responses ...
  • 41f1db5 Do not write WebSocket handshake response to the tail of the pipeline (#17192)
  • 035d76e Update compress-lzf to 1.2.1 (#17194)
  • 7681aff Fix JdkZlibDecompressor losing the tail of highly compressible streams (#17191)
  • Additional commits viewable in compare view

Updates com.sap.cloud.sdk:sdk-bom from 5.32.0 to 5.33.0

Release notes

Sourced from com.sap.cloud.sdk:sdk-bom's releases.

Release 5.33.0

5.33.0 - August 05, 2026

All Release Changes

✨ New Functionality

  • [OpenAPI] Added experimental support for generating clients from OpenAPI 3.1 specifications

All Commits

New Contributors

Full Changelog: https://github.com/SAP/cloud-sdk-java/commits/rel/5.33.0

Commits
  • dd8ab69 Update to version 5.33.0
  • 2b397df chore: [DevOps] bump the production-minor-patch group with 5 updates (#1244)
  • b9b8311 chore: [DevOps] bump org.codehaus.mojo:flatten-maven-plugin from 1.7.3 to 1.8...
  • f2168d2 feat: Support OpenAPI 3.1.x (#1231)
  • a5af7d1 chore: [DevOps] Move commons-cli fix up one pom level (#1242)
  • d1f6624 chore: [DevOps] bump the github-actions group with 2 updates (#1241)
  • d6aa82f chore: [DevOps] Update outdated commons-cli dependency (#1240)
  • 1e1f148 chore: [DevOps] bump io.grpc:grpc-bom from 1.82.2 to 1.83.0 in the production...
  • acc4863 chore: [DevOps] Handle CVE-2026-55760 (#1233)
  • c178bf9 chore: [DevOps] bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to ...
  • Additional commits viewable in compare view

Updates org.junit:junit-bom from 6.1.2 to 6.1.3

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 6.1.3 = Platform 6.1.3 + Jupiter 6.1.3 + Vintage 6.1.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.2...r6.1.3

Commits
  • f59f60d Release 6.1.3
  • cd8ec92 Finalize 6.1.3 release notes
  • c8729f2 Restore compatibility with GraalVM 25 (#5901)
  • ddc9e74 Update graalvm/setup-graalvm action to v1.6.4 (#5959)
  • fe2c52a Update plugin org.graalvm.buildtools.native to v1.1.7 (#5923)
  • 62afc02 Delay GraalVM plugin updates for 3 days
  • 0cc2902 Skip graalVmTest task if GraalVM env vars are not set
  • f6bbfc5 Move GraalVM tests to separate test task (#5903)
  • e87e052 Update plugin org.graalvm.buildtools.native to v1.1.6 (#5899)
  • 1cd56df Update plugin org.graalvm.buildtools.native to v1.1.5 (#5880)
  • Additional commits viewable in compare view

Updates com.sap.cds:cds-maven-plugin from 5.0.1 to 5.0.2

Updates ch.qos.logback:logback-classic from 1.6.1 to 1.6.2

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.2

clean.full.1.6.2.mp4

2026-08-10 Release of logback version 1.6.2

  • Configuration analysis now detects contradictory caller-data inclusion instructions. For example, an AsyncAppender, SocketAppender or SMTPAppender with includeCallerData left at the default false is incompatible with a layout or encoder pattern that uses a caller-data converter such as %C, %M, %L, %F, %l or %caller. At runtime those converters would print question marks and still incur extraction cost on a worker thread. Logback now emits a configuration-time warning when such instructions disagree. See codes.html#callerContradiction for details. This issue was reported in issues/1059 by leeychee. The initial analysis was contributed by seonwoo_jung.

  • Caller-contradiction analysis can be turned off by setting the logback.skipCallerContradictionAnalysis variable to true, either as a system property (-Dlogback.skipCallerContradictionAnalysis=true) or as a property in the configuration file:

    <property name="logback.skipCallerContradictionAnalysis" value="true"/>

  • SimpleSocketServer and SimpleSSLSocketServer now require an explicit client IP whitelist. On the command line, pass one or more allowed addresses (single IPs or CIDR ranges) after the configuration file. An empty whitelist means no clients are accepted. When embedding the server programmatically, register allowed addresses with addAllowedClientAddress(String) or setAllowedClientAddresses(Collection) before clients connect. See the documentation on restricting client access.

  • Added ThrowableProxyVOBuilder for assembling a ThrowableProxyVO field by field, with a corresponding ThrowableProxyVO.builder() entry point.

  • Dependency analysis handlers now run their postHandle method after child models have been processed, so checks that depend on nested appenders (such as caller-contradiction analysis) see a complete picture.

  • Updated several dependencies, including Angus Mail to 2.0.4 and Jetty (test) to 12.1.12.

  • A bit-wise identical binary of this version can be reproduced by building from source code at commit e3d78330ad1ba024fd987fd00c3ffb9cfcdb07dc associated with the tag v_1.6.2. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • e3d7833 prepare release 1.6.2
  • 919127d test for skipping contradiction analysis
  • 67dcd40 allow skipping caller contradiction analysis
  • 2619c6d remove unused message string in CallerContradictionWarnAnalyser
  • 22cfade add support for SMTPAppender in caller data contradiction analysis
  • 656fb6d minor javadoc change in SMTPAppenderBase
  • efb1ce2 cover SocketAppender in caller contradiction analysis
  • d3a01f8 more tests for caller contradiction analysis
  • b1a80d6 more complete logic in caller contradiction analysis
  • 0678954 SimpleSocketServer and SLLSimpleSocketServer now accept whitelisted
  • Additional commits viewable in compare view

Updates software.amazon.awssdk:s3 from 2.50.3 to 2.51.4

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the minor-patch group across 1 directory with 7 updates
1bf6128 
Bumps the minor-patch group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| com.sap.cds:cds-services-bom | `5.0.1` | `5.0.2` |
| com.sap.cds:cds-maven-plugin | `5.0.1` | `5.0.2` |
| [io.netty:netty-bom](https://github.com/netty/netty) | `4.2.16.Final` | `4.2.17.Final` |
| [com.sap.cloud.sdk:sdk-bom](https://github.com/SAP/cloud-sdk-java) | `5.32.0` | `5.33.0` |
| [org.junit:junit-bom](https://github.com/junit-team/junit-framework) | `6.1.2` | `6.1.3` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.6.1` | `1.6.2` |
| software.amazon.awssdk:s3 | `2.50.3` | `2.51.4` |



Updates `com.sap.cds:cds-services-bom` from 5.0.1 to 5.0.2

Updates `com.sap.cds:cds-maven-plugin` from 5.0.1 to 5.0.2

Updates `io.netty:netty-bom` from 4.2.16.Final to 4.2.17.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.16.Final...netty-4.2.17.Final)

Updates `com.sap.cloud.sdk:sdk-bom` from 5.32.0 to 5.33.0
- [Release notes](https://github.com/SAP/cloud-sdk-java/releases)
- [Changelog](https://github.com/SAP/cloud-sdk-java/blob/main/release_notes.md)
- [Commits](SAP/cloud-sdk-java@rel/5.32.0...rel/5.33.0)

Updates `org.junit:junit-bom` from 6.1.2 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.1.2...r6.1.3)

Updates `com.sap.cds:cds-maven-plugin` from 5.0.1 to 5.0.2

Updates `ch.qos.logback:logback-classic` from 1.6.1 to 1.6.2
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.6.1...v_1.6.2)

Updates `software.amazon.awssdk:s3` from 2.50.3 to 2.51.4

---
updated-dependencies:
- dependency-name: com.sap.cds:cds-services-bom
  dependency-version: 5.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: com.sap.cds:cds-maven-plugin
  dependency-version: 5.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: io.netty:netty-bom
  dependency-version: 4.2.17.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: com.sap.cloud.sdk:sdk-bom
  dependency-version: 5.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: org.junit:junit-bom
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: com.sap.cds:cds-maven-plugin
  dependency-version: 5.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: software.amazon.awssdk:s3
  dependency-version: 2.51.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 18, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 18, 2026 15:53
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 18, 2026
@lisajulia
lisajulia merged commit cedfff6 into main Aug 19, 2026
38 of 39 checks passed
@lisajulia
lisajulia deleted the dependabot/maven/minor-patch-4b507d3e38 branch August 19, 2026 06:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@lisajulia lisajulia lisajulia approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@lisajulia