Skip to content

Bump the gradle-dependencies group across 1 directory with 19 updates - #2465

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/gradle-dependencies-96baa60d4d
Open

Bump the gradle-dependencies group across 1 directory with 19 updates#2465
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/gradle-dependencies-96baa60d4d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 24, 2026

Copy link
Copy Markdown

Bumps the gradle-dependencies group with 19 updates in the / directory:

Package From To
com.puppycrawl.tools:checkstyle 9.0 9.3
com.google.errorprone:error_prone_core 2.43.0 2.50.0
junit:junit 4.11 4.13.2
net.ltgt.errorprone 4.2.0 4.4.0
org.openjdk.jmh:jmh-core 1.33 1.37
org.openjdk.jmh:jmh-generator-annprocess 1.33 1.37
biz.aQute.bnd.builder 7.1.0 7.4.0
com.yubico.yubikit:openpgp 3.2.0 3.2.1
com.yubico.yubikit:desktop 3.2.0 3.2.1
javax.mail:mail 1.4 1.4.7
jakarta.mail:jakarta.mail-api 2.0.1 2.1.5
jakarta.activation:jakarta.activation-api 2.0.0 2.1.4
io.grpc:grpc-protobuf 1.83.1 1.84.0
io.grpc:grpc-stub 1.83.1 1.84.0
io.grpc:grpc-services 1.83.1 1.84.0
io.grpc:grpc-netty-shaded 1.83.1 1.84.0
io.grpc:protoc-gen-grpc-java 1.83.1 1.84.0
io.grpc:grpc-stub 1.83.1 1.84.0
io.grpc:grpc-services 1.83.1 1.84.0
io.grpc:grpc-netty-shaded 1.83.1 1.84.0
io.grpc:protoc-gen-grpc-java 1.83.1 1.84.0
com.google.protobuf 0.9.4 0.10.0
gradle-wrapper 9.1.0 9.7.1

Updates com.puppycrawl.tools:checkstyle from 9.0 to 9.3

Release notes

Sourced from com.puppycrawl.tools:checkstyle's releases.

checkstyle-9.3

https://checkstyle.org/releasenotes.html#Release_9.3

checkstyle-9.2.1

https://checkstyle.org/releasenotes.html#Release_9.2.1

checkstyle-9.2

https://checkstyle.org/releasenotes.html#Release_9.2

checkstyle-9.1

https://checkstyle.org/releasenotes.html#Release_9.1

checkstyle-9.0.1

https://checkstyle.org/releasenotes.html#Release_9.0.1

Commits
  • 5c19037 [maven-release-plugin] prepare release checkstyle-9.3
  • c4b2862 doc: release notes 9.3
  • ef2ac6c dependency: bump taglist-maven-plugin from 2.4 to 3.0.0
  • e12eee4 minor: Specified violation messages in SeparatorWrapCheck
  • 645262f Issue #11091: Fail test execution when input file hasn't specified violation ...
  • 2372df1 infra: disable equalsverifier until https://github.com/jqno/equalsverifier/is...
  • b37ec9c Issue #6320: Kill surviving mutations for REMOVE_CONDITIONALS in UnusedLocalV...
  • 7cd807c Issue #11220: False positive in MissingSwitchDefault with pattern in switch l...
  • 7124ab9 Issue #11187: OperatorWrapCheck throws NPE on guarded patterns
  • 8a93900 infra: use master branch for no-error-xwiki execution
  • Additional commits viewable in compare view

Updates com.google.errorprone:error_prone_core from 2.43.0 to 2.50.0

Release notes

Sourced from com.google.errorprone:error_prone_core's releases.

Error Prone 2.50.0

New checks:

Closed issues: #5553, #5649, #5778

Full changelog: google/error-prone@v2.49.0...v2.50.0

Error Prone 2.49.0

This release includes several changes to Matcher APIs, and removed some deprecated or problematic APIs:

  • Remove deprecated MethodMatchers.withSignature API, which relies on fragile toString behaviour. Alternatives for matching on method signatures with varargs and type parameters were added in google/error-prone@a98a1c5.
  • Removed variableType(Matcher) API. Matchers.variableType(Matcher) uses VariableTree#getType to match variable types, which own't work for lambda parameters with inferred types after JDK-8268850. The recommended replacement is variableType(TypePredicate).
  • Make enclosingPackage return an optional. Module elements are not enclosed by a package, checks using enclosingPackage shouldn't assume an enclosing package exists when processing arbitrary elements.
  • New FieldMatchers API, similar to MethodMatchers (google/error-prone@1dd9c3a).

New checks:

Closed issues: #2283, #3503, #5210, #5289, #5548, #5548, #5554, #5609, #5614, #5656

Full changelog: google/error-prone@v2.48.0...v2.49.0

Error Prone 2.48.0

Changes:

New checks:

Closed issues: #5529, #5537, #5522, #5521

Full changelog: google/error-prone@v2.47.0...v2.48.0

... (truncated)

Commits
  • d802cff Release Error Prone 2.50.0
  • b12b5f2 In StringCharset, move the description from explanation to summary.
  • a7ca02a Update AssertThrowsUtils to emit var thrown = assertThrows(...) instead o...
  • 6b56517 Fix handling of nested tags in UnrecognisedJavadocTag
  • d36e74f Remove translation of the fail() message into assertThrows(). We already ...
  • c3581e9 Fix JavacFileManager compiler crash during speculative recompiles in modular ...
  • da1f32b Remove assignments from assertThrows() lambdas. A large percentage of remai...
  • dee62f7 Update AssertThrowsBlockToExpression to re-write single VariableTrees int...
  • 4939448 Only hoist the last statement into the assertThrows() lambda.
  • 30fd05a refactor: Rename JavaLangClash bug pattern to AvoidCommonTypeNames
  • Additional commits viewable in compare view

Updates junit:junit from 4.11 to 4.13.2

Release notes

Sourced from junit:junit's releases.

JUnit 4.13.2

Please refer to the release notes for details.

JUnit 4.13.1

Please refer to the release notes for details.

JUnit 4.13

Please refer to the release notes for details.

JUnit 4.13 RC 2

Please refer to the release notes for details.

JUnit 4.13 RC 1

Please refer to the release notes for details.

JUnit 4.13 Beta 3

Please refer to the release notes for details.

JUnit 4.13 Beta 2

Please refer to the release notes for details.

JUnit 4.13 Beta 1

Please refer to the release notes for details.

JUnit 4.12

Please refer to the release notes for details.

JUnit 4.12 Beta 3

Please refer to the release notes for details.

JUnit 4.12 Beta 2

No release notes provided.

JUnit 4.12 Beta 1

No release notes provided.

Commits
  • 05fe2a6 [maven-release-plugin] prepare release r4.13.2
  • ff57344 Add build for JDK 17-ea
  • 02aaa01 Improve check that thread is stopped
  • e9a75f4 Merge test for exception type and message
  • d27ad52 Rename DelegateStatement to DelegatingStatement
  • b83dc2e Better name for test that stops statement
  • 527f3a3 Replace InfiniteLoop with RunForASecond
  • 2db6394 Tidy up FailOnTimeoutTest
  • 64634e1 Update 4.13.2 release notes to document pull 1654
  • f8ee412 Fix serialization of AssumptionViolatedException (#1654)
  • Additional commits viewable in compare view

Updates net.ltgt.errorprone from 4.2.0 to 4.4.0

Updates org.openjdk.jmh:jmh-core from 1.33 to 1.37

Commits
  • 2effa2c JMH v1.37.
  • 09c78d5 7903508: JMH: Remove the Unicode dot prefix from secondary results
  • 843f641 7903510: JMH: Add core performance checking tests
  • 8bc325b 7903511: JMH: Add score stability performance tests
  • 6b09724 7903450: JMH: Improve -prof perfnorm accuracy with robust estimations
  • d88f901 7903504: JMH: Fix new Sonar warnings
  • 47f651b 7903498: JMH: Reset worker interrupt status after iteration
  • 482561a 7903492: JMH: Infrastructure code should yield occasionally for virtual execu...
  • 9a97557 7903490: JMH: The interrupt to time-outing benchmark can be delivered to work...
  • bf8db38 7903487: JMH: Make sure JMH profilers work on all tested configurations
  • Additional commits viewable in compare view

Updates org.openjdk.jmh:jmh-generator-annprocess from 1.33 to 1.37

Commits
  • 2effa2c JMH v1.37.
  • 09c78d5 7903508: JMH: Remove the Unicode dot prefix from secondary results
  • 843f641 7903510: JMH: Add core performance checking tests
  • 8bc325b 7903511: JMH: Add score stability performance tests
  • 6b09724 7903450: JMH: Improve -prof perfnorm accuracy with robust estimations
  • d88f901 7903504: JMH: Fix new Sonar warnings
  • 47f651b 7903498: JMH: Reset worker interrupt status after iteration
  • 482561a 7903492: JMH: Infrastructure code should yield occasionally for virtual execu...
  • 9a97557 7903490: JMH: The interrupt to time-outing benchmark can be delivered to work...
  • bf8db38 7903487: JMH: Make sure JMH profilers work on all tested configurations
  • Additional commits viewable in compare view

Updates biz.aQute.bnd.builder from 7.1.0 to 7.4.0

Release notes

Sourced from biz.aQute.bnd.builder's releases.

Bnd/Bndtools 7.4.0

See Release Notes

What's Changed

... (truncated)

Commits
  • 2046c36 build: Build Release 7.4.0
  • aab8519 build: Build Release 7.4.0.RC3
  • 606a199 build: Build Release 7.4.0.RC2
  • afdf547 missing files
  • 9074a7a build: Build Release 7.4.0.RC1
  • b5c4c58 Revert "Eclipse feature support for buildpath"
  • 4fd8e4a Eclipse feature support for buildpath
  • a6ba530 Merge pull request #7336 from chrisrueger/7214-fix-deadlock-junit-tee
  • 0fda33a Fix thread-safety in Tee class
  • 061b7fd Merge pull request #7325 from bndtools/dependabot/github_actions/actions/chec...
  • Additional commits viewable in compare view

Updates com.yubico.yubikit:openpgp from 3.2.0 to 3.2.1

Release notes

Sourced from com.yubico.yubikit:openpgp's releases.

YubiKit 3.2.1

A patch release with correctness and robustness fixes across fido, core and piv.

Fixes:

  • fido module:
    • Decode COSE EC2 coordinates as unsigned (#362)
    • Made Ctap2Session.InfoData.getFirmwareVersion() public (#357)
  • core module:
    • Bound TLV and CBOR parsing before allocating (#368)
    • Replaced the SLF4J fluent API with isXEnabled()-guarded calls, which crashed apps declaring minSdk < 24 (#366)
  • piv module:
    • Fix RSA keys throwing IncompatibleClassChangeError on Java 24+
  • fido-android-ui module:
    • Reuse isFormValid in the PIN submit guard (#367)
  • test infrastructure:
    • The instrumented test APK installs on API 21 again (#365)
    • Test-run failures are no longer silent (#363, #364)
  • build system:
    • Updated dependencies and pinned GitHub Actions to full commit SHAs (#370)

Improvements:

  • fido module:
    • Build CTAP1 authenticator data without ByteBuffer.rewind()
  • build system:
    • Pinned AGP to 9.3.2

Full Changelog: 3.2.0...3.2.1

Changelog

Sourced from com.yubico.yubikit:openpgp's changelog.

  • Version 3.2.1 (released 2026-09-08) ** fixes & improvements:
    • fido: decode COSE EC2 coordinates as unsigned
    • fido: made Ctap2Session.InfoData.getFirmwareVersion() public
    • core: bound TLV and CBOR parsing before allocating
    • core: replaced the SLF4J fluent API with isXEnabled()-guarded calls
    • piv: fix key params on Java 24+
    • fido-ui: reuse isFormValid in the PIN submit guard
    • testing: instrumented test APK installs on API 21 again
    • build: updated dependencies and pinned GitHub Actions to full commit SHAs
Commits

Updates com.yubico.yubikit:desktop from 3.2.0 to 3.2.1

Release notes

Sourced from com.yubico.yubikit:desktop's releases.

YubiKit 3.2.1

A patch release with correctness and robustness fixes across fido, core and piv.

Fixes:

  • fido module:
    • Decode COSE EC2 coordinates as unsigned (#362)
    • Made Ctap2Session.InfoData.getFirmwareVersion() public (#357)
  • core module:
    • Bound TLV and CBOR parsing before allocating (#368)
    • Replaced the SLF4J fluent API with isXEnabled()-guarded calls, which crashed apps declaring minSdk < 24 (#366)
  • piv module:
    • Fix RSA keys throwing IncompatibleClassChangeError on Java 24+
  • fido-android-ui module:
    • Reuse isFormValid in the PIN submit guard (#367)
  • test infrastructure:
    • The instrumented test APK installs on API 21 again (#365)
    • Test-run failures are no longer silent (#363, #364)
  • build system:
    • Updated dependencies and pinned GitHub Actions to full commit SHAs (#370)

Improvements:

  • fido module:
    • Build CTAP1 authenticator data without ByteBuffer.rewind()
  • build system:
    • Pinned AGP to 9.3.2

Full Changelog: 3.2.0...3.2.1

Changelog

Sourced from com.yubico.yubikit:desktop's changelog.

  • Version 3.2.1 (released 2026-09-08) ** fixes & improvements:
    • fido: decode COSE EC2 coordinates as unsigned
    • fido: made Ctap2Session.InfoData.getFirmwareVersion() public
    • core: bound TLV and CBOR parsing before allocating
    • core: replaced the SLF4J fluent API with isXEnabled()-guarded calls
    • piv: fix key params on Java 24+
    • fido-ui: reuse isFormValid in the PIN submit guard
    • testing: instrumented test APK installs on API 21 again
    • build: updated dependencies and pinned GitHub Actions to full commit SHAs
Commits

Updates javax.mail:mail from 1.4 to 1.4.7

Updates jakarta.mail:jakarta.mail-api from 2.0.1 to 2.1.5

Release notes

Sourced from jakarta.mail:jakarta.mail-api's releases.

Jakarta Mail 2.1.5 Final Release

The 2.1.5 release is a bug fix release of 2.1.x (Jakarta EE 10).

Following changes are included:

Full Changelog: jakartaee/mail-api@2.1.4...2.1.5

Jakarta Mail 2.1.4 Final Release

The 2.1.4 release is a bug fix release of 2.1.x (Jakarta EE 10).

Following changes are included:

Full Changelog: jakartaee/mail-api@2.1.3...2.1.4

Jakarta Mail 2.1.3 Final Release

The 2.1.3 release is a bug fix release of 2.1.x (Jakarta EE 10).

Following changes are included:

New Contributors

Full Changelog: jakartaee/mail-api@2.1.2...2.1.3

Jakarta Mail 2.1.2 Final Release

The 2.1.2 release is a bug fix release of 2.1.x (Jakarta EE 10).

Following changes are included:

Full Changelog: jakartaee/mail-api@2.1.1...2.1.2

... (truncated)

Commits
  • e187321 Prepare release jakarta.mail:jakarta.mail-api:2.1.5
  • ef7483e Revert "Multipart performs blocking call in every instantiation #699 (#716)"
  • abe990f Reviews changes
  • a10a173 Improve MimeMessage UTF8 handling
  • 7a53112 Improve MimeMessage UTF8 handling
  • 1736520 Drop references to the Reference implementation
  • f2e6da3 Bump nokogiri from 1.16.5 to 1.18.9 in /www
  • 5488a7c #708 Add missing javadoc for supporting ServiceLoader mechanism (#726)
  • ccbe84b Bump webrick from 1.8.1 to 1.8.2 in /www
  • 34f8e9b ISSUE-721 - add full Markdown for URLs since Jekyll action doesn't autolink t...
  • Additional commits viewable in compare view

Updates jakarta.activation:jakarta.activation-api from 2.0.0 to 2.1.4

Release notes

Sourced from jakarta.activation:jakarta.activation-api's releases.

Jakarta Activation 2.1.4 Final Release

The 2.1.4 release is a bug fix release of 2.1.x (Jakarta EE 10, Jakarta EE 11).

Following changes are included:

  • moves resource file names from javax to jakarta namespace

Full Changelog: jakartaee/jaf-api@2.1.3...2.1.4

Jakarta Activation 2.1.3 Final Release

The 2.1.3 release is a bug fix release of 2.1.x (Jakarta EE 10).

Following changes are included:

  • fixes erroneous assumption about classes being loaded from Thread.getContextClassLoader
  • allows reproducible build

Full Changelog: jakartaee/jaf-api@2.1.2...2.1.3

Jakarta Activation 2.1.2 Final Release

The 2.1.2 release is a bug fix release of 2.1.x (Jakarta EE 10).

Following changes are included:

  • fix wrong class file version for package-info
  • add missing javadoc description for MimeTypeEntry getters

Full Changelog: jakartaee/jaf-api@2.1.1...2.1.2

Jakarta Activation 2.1.1 Final Release

The 2.1.1 release is a bug fix release of 2.1.0.

Following changes are included:

New Contributors

Full Changelog: jakartaee/jaf-api@2.1.0...2.1.1

Jakarta Activation 2.1.0 Final Release

The 2.1.0 release provides API module only.

The implementation has been moved out from this project to the new Eclipse Angus project and lives in its own repository - https://github.com/eclipse-ee4j/angus-activation

Project Board: https://github.com/eclipse-ee4j/jaf/projects/1 Full Changelog: jakartaee/jaf-api@2.0.1...2.1.0

... (truncated)

Commits
  • 3dad341 Prepare release jakarta.activation:jakarta.activation-api:2.1.4
  • 5f213b8 Rename resources so javax and jakarta can live in same classpath #174
  • 510208a Merge pull request #155 from jakartaee/2.1.3-RELEASE
  • e709bef Prepare next development cycle for 2.2.0-SNAPSHOT
  • 7f7d358 Prepare release jakarta.activation:jakarta.activation-api:2.1.3
  • 6126e90 update GH action build
  • efc28c8 Use latest parent
  • 4b8e7a1 allow reproducible build
  • ce3e704 Jakarta Activation erroneously assumes that classes can be loaded from Thread...
  • 80cb0f8 publish 2.1.2 release
  • Additional commits viewable in compare view

Updates io.grpc:grpc-protobuf from 1.83.1 to 1.84.0

Release notes

Sourced from io.grpc:grpc-protobuf's releases.

V1.84.0

In this release we drop support for Android API level 23 or lower (Marshmallow or earlier), following Google Play Service’s now requiring a minimum of API level 24 (Android 7.0 Nougat).

API Changes

  • xds: Supports injecting custom LDS Resource Name Resolvers (#12925) (ac02c6f37)
  • xds: Add support for creating XdsServerBuilder with SocketAddresses (#12925) (ac02c6f37)
  • api: Add a Supplier overload to Context (#12935) (696653600)

Behavior Changes

  • core: update SPIFFE certificate extraction to comply with X509-SVID spec (#12961) (96807d898)
    Ignore all but the first certificate if the x5c JWK parameter contains multiple values.
    Skip the JWK entry instead of stopping execution or throwing when x5c is missing or contains an empty list, complying with the requirement that entries without x5c must be ignored.

Bug Fixes

  • core: reference-count shared transport factory for OOB channels (#12985) (72c6e5f91)
    Fixes a bug whereby an OOB channel shutdown incorrectly shut down the shared transport factory with the main channel, and the main channel was unable to create subchannels anymore and faced an exception in doing so.
  • xds: Fix shutdownNow() becoming a no-op after shutdown() (#12982) (3cb700719)
  • xds: Add Http11ProxyUpstreamTransport to MessagePrinter (#12971) (d49a589f4)
  • core, xds: Append child channel configurators instead of overwriting (#12921) (296c007c1) Chains multiple childChannelConfigurator() calls instead of overwriting them in ManagedChannelImplBuilder and XdsServerBuilder, ensuring all configurators are preserved and executed when child channels are created.
  • rls: Implement stale_header_data caching and propagation in RLS (#12972) (7843bd437) Caches header_data received in RouteLookupResponse and sends it back as stale_header_data in RouteLookupRequest when refreshing stale cache entries, complying with the RLS specification.

Improvements

  • netty: Fix client-initiated stream limit bypass in NettyServerHandler (#12933) (56205f91c) Configure max active streams limit directly upon DefaultHttp2Connection initialization. Because NettyServerHandler instantiates DefaultHttp2Connection directly rather than using Netty's AbstractHttp2ConnectionHandlerBuilder, it missed Netty's built-in CVE-2026-47244 patch. This left a pre-handshake window where the server's local connection allowed up to Integer.MAX_VALUE active client-initiated streams until a SETTINGS_ACK was received. Enforcing the limit proactively at startup closes this vulnerability window and prevents client-initiated stream floods / resource exhaustion.
  • servlet: AsyncServletOutputStreamWriter detect and handle write when not ready (#12732) (46f308051) In highly concurrent scenarios, cached servlet container ready to write state can become stale. The servlet container may have already transitioned to a 'not ready' state, but the corresponding callback has not yet updated gRPC's internal state. This fix makes the ready state to be evaluated explicitly before attempting to write directly to the servlet output stream.
  • okhttp: Move connection window update before stream termination logic (#12990) (0f859c3bb) By RFC 9113, section 6.9, receivers must take frames into account for flow control even if they're errored. This change moves the stream error response logic after connection window updates
  • core: Coalesce Contiguous Small Buffers for ReadableBuffer to prevent OOM (#12924) (0585d481a)
  • s2a: Default to Post Quantum Cryptography key exchange group (#12894) (bc01994b7)
  • binder: Let servers load their SecurityPolicy asynchronously (9fdef96dc)
  • binder: normalize failed auth future status message (9ffa1e1b7)

Dependencies

  • compiler: Update maximum supported edition to EDITION_2026 (#12945) (6ccd0658e). Update the maximum supported edition in the Java gRPC compiler plugin to EDITION_2026 when compiling against Protobuf version 7.35.0 (v35.0) or later.
  • api: Bump Context to JDK 8 (5d0a012fa)
  • netty: Upgrade Netty to 4.2.16 and netty-...

    Description has been truncated

@dependabot
Bump the gradle-dependencies group across 1 directory with 19 updates
8dde914 
Bumps the gradle-dependencies group with 19 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) | `9.0` | `9.3` |
| [com.google.errorprone:error_prone_core](https://github.com/google/error-prone) | `2.43.0` | `2.50.0` |
| [junit:junit](https://github.com/junit-team/junit4) | `4.11` | `4.13.2` |
| net.ltgt.errorprone | `4.2.0` | `4.4.0` |
| [org.openjdk.jmh:jmh-core](https://github.com/openjdk/jmh) | `1.33` | `1.37` |
| [org.openjdk.jmh:jmh-generator-annprocess](https://github.com/openjdk/jmh) | `1.33` | `1.37` |
| [biz.aQute.bnd.builder](https://github.com/bndtools/bnd) | `7.1.0` | `7.4.0` |
| [com.yubico.yubikit:openpgp](https://github.com/Yubico/yubikit-android) | `3.2.0` | `3.2.1` |
| [com.yubico.yubikit:desktop](https://github.com/Yubico/yubikit-android) | `3.2.0` | `3.2.1` |
| javax.mail:mail | `1.4` | `1.4.7` |
| [jakarta.mail:jakarta.mail-api](https://github.com/jakartaee/mail-api) | `2.0.1` | `2.1.5` |
| [jakarta.activation:jakarta.activation-api](https://github.com/jakartaee/jaf-api) | `2.0.0` | `2.1.4` |
| [io.grpc:grpc-protobuf](https://github.com/grpc/grpc-java) | `1.83.1` | `1.84.0` |
| [io.grpc:grpc-stub](https://github.com/grpc/grpc-java) | `1.83.1` | `1.84.0` |
| [io.grpc:grpc-services](https://github.com/grpc/grpc-java) | `1.83.1` | `1.84.0` |
| [io.grpc:grpc-netty-shaded](https://github.com/grpc/grpc-java) | `1.83.1` | `1.84.0` |
| [io.grpc:protoc-gen-grpc-java](https://github.com/grpc/grpc-java) | `1.83.1` | `1.84.0` |
| [io.grpc:grpc-stub](https://github.com/grpc/grpc-java) | `1.83.1` | `1.84.0` |
| [io.grpc:grpc-services](https://github.com/grpc/grpc-java) | `1.83.1` | `1.84.0` |
| [io.grpc:grpc-netty-shaded](https://github.com/grpc/grpc-java) | `1.83.1` | `1.84.0` |
| [io.grpc:protoc-gen-grpc-java](https://github.com/grpc/grpc-java) | `1.83.1` | `1.84.0` |
| com.google.protobuf | `0.9.4` | `0.10.0` |
| [gradle-wrapper](https://github.com/gradle/gradle) | `9.1.0` | `9.7.1` |



Updates `com.puppycrawl.tools:checkstyle` from 9.0 to 9.3
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](checkstyle/checkstyle@checkstyle-9.0...checkstyle-9.3)

Updates `com.google.errorprone:error_prone_core` from 2.43.0 to 2.50.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.43.0...v2.50.0)

Updates `junit:junit` from 4.11 to 4.13.2
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.2)

Updates `net.ltgt.errorprone` from 4.2.0 to 4.4.0

Updates `org.openjdk.jmh:jmh-core` from 1.33 to 1.37
- [Commits](openjdk/jmh@1.33...1.37)

Updates `org.openjdk.jmh:jmh-generator-annprocess` from 1.33 to 1.37
- [Commits](openjdk/jmh@1.33...1.37)

Updates `biz.aQute.bnd.builder` from 7.1.0 to 7.4.0
- [Release notes](https://github.com/bndtools/bnd/releases)
- [Commits](bndtools/bnd@7.1.0...7.4.0)

Updates `com.yubico.yubikit:openpgp` from 3.2.0 to 3.2.1
- [Release notes](https://github.com/Yubico/yubikit-android/releases)
- [Changelog](https://github.com/Yubico/yubikit-android/blob/main/NEWS)
- [Commits](Yubico/yubikit-android@3.2.0...3.2.1)

Updates `com.yubico.yubikit:desktop` from 3.2.0 to 3.2.1
- [Release notes](https://github.com/Yubico/yubikit-android/releases)
- [Changelog](https://github.com/Yubico/yubikit-android/blob/main/NEWS)
- [Commits](Yubico/yubikit-android@3.2.0...3.2.1)

Updates `javax.mail:mail` from 1.4 to 1.4.7

Updates `jakarta.mail:jakarta.mail-api` from 2.0.1 to 2.1.5
- [Release notes](https://github.com/jakartaee/mail-api/releases)
- [Commits](jakartaee/mail-api@2.0.1...2.1.5)

Updates `jakarta.activation:jakarta.activation-api` from 2.0.0 to 2.1.4
- [Release notes](https://github.com/jakartaee/jaf-api/releases)
- [Commits](jakartaee/jaf-api@2.0.0...2.1.4)

Updates `io.grpc:grpc-protobuf` from 1.83.1 to 1.84.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.83.1...v1.84.0)

Updates `io.grpc:grpc-stub` from 1.83.1 to 1.84.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.83.1...v1.84.0)

Updates `io.grpc:grpc-services` from 1.83.1 to 1.84.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.83.1...v1.84.0)

Updates `io.grpc:grpc-netty-shaded` from 1.83.1 to 1.84.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.83.1...v1.84.0)

Updates `io.grpc:protoc-gen-grpc-java` from 1.83.1 to 1.84.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.83.1...v1.84.0)

Updates `io.grpc:grpc-stub` from 1.83.1 to 1.84.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.83.1...v1.84.0)

Updates `io.grpc:grpc-services` from 1.83.1 to 1.84.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.83.1...v1.84.0)

Updates `io.grpc:grpc-netty-shaded` from 1.83.1 to 1.84.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.83.1...v1.84.0)

Updates `io.grpc:protoc-gen-grpc-java` from 1.83.1 to 1.84.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.83.1...v1.84.0)

Updates `com.google.protobuf` from 0.9.4 to 0.10.0

Updates `gradle-wrapper` from 9.1.0 to 9.7.1
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v9.1.0...v9.7.1)

---
updated-dependencies:
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: '9.3'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: com.google.errorprone:error_prone_core
  dependency-version: 2.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: junit:junit
  dependency-version: 4.13.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: net.ltgt.errorprone
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: org.openjdk.jmh:jmh-core
  dependency-version: '1.37'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: org.openjdk.jmh:jmh-generator-annprocess
  dependency-version: '1.37'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: biz.aQute.bnd.builder
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: com.yubico.yubikit:openpgp
  dependency-version: 3.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: com.yubico.yubikit:desktop
  dependency-version: 3.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: javax.mail:mail
  dependency-version: 1.4.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: jakarta.mail:jakarta.mail-api
  dependency-version: 2.1.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: jakarta.activation:jakarta.activation-api
  dependency-version: 2.1.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: io.grpc:grpc-protobuf
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: io.grpc:grpc-stub
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: io.grpc:grpc-services
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: io.grpc:grpc-netty-shaded
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: io.grpc:protoc-gen-grpc-java
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: io.grpc:grpc-stub
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: io.grpc:grpc-services
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: io.grpc:grpc-netty-shaded
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: io.grpc:protoc-gen-grpc-java
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: com.google.protobuf
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: gradle-wrapper
  dependency-version: 9.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 24, 2026
@hubot
hubot deleted the dependabot/gradle/gradle-dependencies-96baa60d4d branch September 24, 2026 09:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants