[dependabot]

Bumps the dependencies group in /core with 6 updates:

Package	From	To
com.google.guava:guava	33.3.1-jre	33.7.2-jre
org.yaml:snakeyaml	2.6	2.7
org.junit.platform:junit-platform-launcher	1.14.3	1.14.4
org.junit.jupiter:junit-jupiter	5.13.4	5.14.4
redis.clients:jedis	7.4.1	8.0.2
com.rabbitmq:amqp-client	5.35.0	5.37.0

Updates com.google.guava:guava from 33.3.1-jre to 33.7.2-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.7.2

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.2-jre</version>
  <!-- or, for Android: -->
  <version>33.7.2-android</version>
</dependency>

Jar files

• 33.7.2-jre.jar
• 33.7.2-android.jar

Guava requires one runtime dependency, which you can download here:

• failureaccess-1.0.3.jar

Javadoc

• 33.7.2-jre
• 33.7.2-android

JDiff

• 33.7.2-jre vs. 33.7.1-jre
• 33.7.2-android vs. 33.7.1-android
• 33.7.2-android vs. 33.7.2-jre

Changelog

• collect: Changed MapMaker, CompactHashMap, and CompactHashSet deserialization to avoid eagerly allocating as much memory as a serialization payload requests (CVE-2026-102554). (a0d0c36432)

33.7.1

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.1-jre</version>
  <!-- or, for Android: -->
  <version>33.7.1-android</version>
</dependency>

... (truncated)

Commits

• See full diff in compare view

Updates org.yaml:snakeyaml from 2.6 to 2.7

Updates org.junit.platform:junit-platform-launcher from 1.14.3 to 1.14.4

Commits

• See full diff in compare view

Updates org.junit.jupiter:junit-jupiter from 5.13.4 to 5.14.4

Release notes

Sourced from org.junit.jupiter:junit-jupiter's releases.

JUnit 5.14.4 = Platform 1.14.4 + Jupiter 5.14.4 + Vintage 5.14.4

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.14.3...r5.14.4

JUnit 5.14.3 = Platform 1.14.3 + Jupiter 5.14.3 + Vintage 5.14.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.14.2...r5.14.3

JUnit 5.14.2 = Platform 1.14.2 + Jupiter 5.14.2 + Vintage 5.14.2

See Release Notes.

New Contributors

• @​uglide made their first contribution in junit-team/junit-framework#5245

Full Changelog: junit-team/junit-framework@r5.14.1...r5.14.2

JUnit 5.14.1 = Platform 1.14.1 + Jupiter 5.14.1 + Vintage 5.14.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.14.0...r5.14.1

JUnit 5.14.0 = Platform 1.14.0 + Jupiter 5.14.0 + Vintage 5.14.0

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.4...r5.14.0

JUnit 5.14.0-RC1 = Platform 1.14.0-RC1 + Jupiter 5.14.0-RC1 + Vintage 5.14.0-RC1

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.4...r5.14.0-RC1

Commits

• 096fd69 Release 5.14.4
• 11fd02b Remove JDK 24 (EOL)
• 5b7f023 Fix integration tests on JDK 27
• 18f842a Test against JDK 26 (GA) and JDK 27 (EA)
• a5bf336 Polish 5.14.4 release notes
• 7667c14 Fix race condition in NodeTestTask (#5427)
• ac01f2d Include full display name in legacy XML reports (#5524)
• fbd4a8e Include class template invocation index in legacy reporting names
• 7d6f0c0 Only check PDF for GA releases
• 14f534d Test 5.14.x against JDK 25 ga (#5623)
• Additional commits viewable in compare view

Updates redis.clients:jedis from 7.4.1 to 8.0.2

Release notes

Sourced from redis.clients:jedis's releases.

8.0.2

Jedis 8.0.2 is a maintenance release for the 8.0 line, fixing MultiDbClient failover so it recovers to a healed database and keeps health checks running when no failover candidate is available.

Changes

🐛 Bug Fixes

• Fail over to a recovered database when the active one is inoperable (#4774)
• Keep MultiDbClient health checks alive when failover has no candidate (#4759)

🧰 Maintenance

• Document that automatic recovery is not guaranteed after the permanent failure (#4776)
• Update failover.md and some javadoc (#4772)

Contributors

We'd like to thank all the contributors who worked on this release!

@​ggivo

Full Changelog: redis/jedis@v8.0.1...v8.0.2

8.0.1

Jedis 8.0.1 is a maintenance release for the 8.0 line, fixing stale cluster topology after failover in JedisCluster.

Changes

🐛 Bug Fixes

• Refresh primaryNodesCache in JedisClusterInfoCache.discoverClusterSlots (#4692, backported in #4694)

Contributors

We'd like to thank all the contributors who worked on this release!

@​insaf021

Full Changelog: redis/jedis@v8.0.0...v8.0.1

8.0.0

Jedis 8.0.0 completes the client class consolidation started in 7.0.0, modernizes protocol defaults, tightens security defaults, and adds command coverage for Redis 8.8 and the Redis 8.10 preview.

• RESP3 auto-negotiation on by default for all UnifiedJedis-based clients (with graceful RESP2 fallback)
• Final removal of legacy JedisPooled / JedisSentineled classes in favor of the RedisClient family introduced in 7.0.0
• Removal of deprecated UnifiedJedis public constructors
• Internal refactoring that affects users of low-level extension points (custom CommandExecutor, Transaction subclasses, ClusterPipeline, CommandObjects) — protocol and connection wiring is now explicit at construction time
• Search modernization — the low-level cursor APIs are superseded by ftAggregateIterator(), and the manual broadcast API is removed (Redis 8.0+ broadcasts FT.CREATE server-side)
• TLS hostname verification enforced by default in DefaultJedisSocketFactory
• New Redis 8.8 command coverage — XNACK, JSON.SET FPHA, Array commands, INCREX, COUNT aggregator on ZINTER / ZUNION(STORE) and their *STORE variants, multi-aggregator TS.RANGE / TS.MRANGE, plus an experimental COLLECT parameter for FT.AGGREGATE
• Redis 8.10 command coverage — HIMPORT (Hinted Hash Templates), FT.ALIASLIST, MAXCOUNT / MAXSIZE on XREAD and XREADGROUP, SUNIONCARD / SDIFFCARD, LMOVEM / BLMOVEM, TS.READ, TS.NRANGE / TS.NREVRANGE, TS.QUERYLABELS, and EXCLUDEEMPTY on TS.MRANGE / TS.MREVRANGE

... (truncated)

Changelog

Sourced from redis.clients:jedis's changelog.

Release Process

Releases are drafted automatically by Release Drafter and deployed by the Release workflow when a draft is published.

Branches

Branch	Hosts	Example
master	next minor or major	8.1.0-SNAPSHOT
MAJOR.x	MAJOR.0.PATCH	7.x, 8.x
MAJOR.MINOR.x	MAJOR.MINOR.PATCH	7.5.x, 8.1.x

• Minor and major releases, including betas, are tagged on master.
• Patch releases are tagged on their maintenance branch, never on master.
• A maintenance branch is cut from the GA tag commit (8.1.x from v8.1.0).
• Fixes land on master first and are backported with a PR titled Backport #<pr> to <line>: <original title>, carrying the original labels.

How the draft is produced

On every push to master or a maintenance branch, Release Drafter updates one draft per branch:

• Version is derived from the nearest GA tag reachable from the branch, ignoring prerelease tags: patch bump on maintenance branches, minor bump on master. Example: 8.x at v8.0.1 drafts 8.0.2; master at v8.0.0 drafts 8.1.0.
• Changes are the pull requests merged to the branch since the latest GA release published from that branch. For the first patch after a branch is cut, the GA tag's commit date is used as the cutoff instead.
• Betas are prereleases and are not used as a base, so GA notes are cumulative since the previous GA.
• PRs labeled skip-changelog or churn are excluded. Unlabeled PRs appear uncategorized, so label backports.

Publishing

1. Review the draft on the Releases page and edit the notes if needed.
2. Publish from the draft. This keeps the release target on the right branch, which the next draft on that branch depends on. Do not create releases from the tag page.
3. For a patch of an older line, untick Set as the latest release.
4. Publishing creates the tag and triggers the Release workflow, which sets the Maven version from the tag and deploys to Maven Central.

Major releases and betas are not derived automatically. Run the workflow

... (truncated)

Commits

• eb8cd65 Backport #4777 to 8.0.x: Draft releases from maintenance branches (#4778)
• d18e256 Backport #4771 to 8.0.x: Document that automatic recovery is not guaranteed a...
• 53fecac Backport #4765 to 8.0.x: Fail over to a recovered database when the active on...
• b7f5067 Backport #4745 to 8.0.x: Update failover.md and some javadoc (#4772)
• af815c5 Backport #4756 to 8.0.x: Keep MultiDbClient health checks alive when failover...
• 96450d3 Bump snapshot version to 8.0.2 (#4715)
• 50ec1c8 Backport #4692 to 8.0.x: refresh primaryNodesCache in JedisClusterInfoCache.d...
• 36135a0 Point snapshot example at 8.0.1-SNAPSHOT on the 8.x branch
• 2de1a6d List Redis 8.6, 8.8 and 8.10 as supported in README
• fcf59cd Update version references in README and docs for 8.0.0
• Additional commits viewable in compare view

Updates com.rabbitmq:amqp-client from 5.35.0 to 5.37.0

Release notes

Sourced from com.rabbitmq:amqp-client's releases.

5.37.0

Changes between 5.36.0 and 5.37.0

This is a maintenance release with a bug fix, a usability improvement, and dependency upgrades. It is compatible with 5.36.0. All users are encouraged to upgrade.

Harden (deprecated) JSON reader

GitHub PR: #2100

Set preferred TLS protocol to version 1.3

GitHub issue: #2098

Bump dependencies

GitHub issue: #2093

Dependency

Maven

<dependency>
  <groupId>com.rabbitmq</groupId>
  <artifactId>amqp-client</artifactId>
  <version>5.37.0</version>
</dependency>

Gradle

compile 'com.rabbitmq:amqp-client:5.37.0'

5.36.0

Changes between 5.35.0 and 5.36.0

This is a maintenance release with bug fixes and dependency upgrades. It is compatible with 5.35.0. All users are encouraged to upgrade.

Do not enable hostname verification in useTlsWithNoVerification

GitHub PR: #2081

Be more defensive when parsing shortstr values in tables

GitHub PR: #2065

Bump dependencies

... (truncated)

Commits

• 0027775 [maven-release-plugin] prepare release v5.37.0
• 0f40842 Set release version to 5.37.0
• a93de83 Merge pull request #2107 from rabbitmq/dependabot/maven/v5.x/com.diffplug.spo...
• a544309 Bump com.diffplug.spotless:spotless-maven-plugin from 3.10.2 to 3.10.3
• b47f881 Merge pull request #2104 from rabbitmq/dependabot/maven/v5.x/org.mockito-mock...
• 50b27c5 Bump org.mockito:mockito-core from 5.23.0 to 5.24.0
• 2a374aa Merge pull request #2102 from rabbitmq/dependabot/maven/v5.x/com.fasterxml.ja...
• 2d7a009 Bump com.fasterxml.jackson.core:jackson-databind from 2.22.2 to 2.22.3
• a1f294a ci: use Erlang 28 alphas for 4.4
• b5572cf ci: test on Ubuntu 26.04
• Additional commits viewable in compare view

Bumps the dependencies group in /modules/jdbc-test with 5 updates:

Package	From	To
com.google.guava:guava	33.5.0-jre	33.7.2-jre
org.apache.commons:commons-lang3	3.20.0	3.21.0
org.apache.tomcat:tomcat-jdbc	11.0.23	11.0.27
com.mysql:mysql-connector-j	9.6.0	26.7.0
org.junit.jupiter:junit-jupiter	5.14.3	5.14.4

Updates com.google.guava:guava from 33.5.0-jre to 33.7.2-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.7.2

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.2-jre</version>
  <!-- or, for Android: -->
  <version>33.7.2-android</version>
</dependency>

Jar files

• 33.7.2-jre.jar
• 33.7.2-android.jar

Guava requires one runtime dependency, which you can download here:

• failureaccess-1.0.3.jar

Javadoc

• 33.7.2-jre
• 33.7.2-android

JDiff

• 33.7.2-jre vs. 33.7.1-jre
• 33.7.2-android vs. 33.7.1-android
• 33.7.2-android vs. 33.7.2-jre

Changelog

• collect: Changed MapMaker, CompactHashMap, and CompactHashSet deserialization to avoid eagerly allocating as much memory as a serialization payload requests (CVE-2026-102554). (a0d0c36432)

33.7.1

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.1-jre</version>
  <!-- or, for Android: -->
  <version>33.7.1-android</version>
</dependency>

... (truncated)

Commits

• See full diff in compare view

Updates org.apache.commons:commons-lang3 from 3.20.0 to 3.21.0

Updates org.apache.tomcat:tomcat-jdbc from 11.0.23 to 11.0.27

Updates com.mysql:mysql-connector-j from 9.6.0 to 26.7.0

Changelog

Sourced from com.mysql:mysql-connector-j's changelog.

Changelog

https://dev.mysql.com/doc/relnotes/connector-j/en/

Version 26.10.0

• Fix for Bug#39806615, Validate extension class names supplied through connection properties.

• WL#17343, Upgrade 3rd party libraries and tools.

• Fix for Bug#39449398, WebAuthn ClientDataJSON is not serialized correctly for relying party IDs containing special characters.

• Fix for Bug#39455455, Reported result set column counts are not properly validated.

Version 26.7.0

• Fix for Bug#39449361, LOAD DATA LOCAL INFILE accepts ambiguous Windows file URL path forms.

• Fix for Bug#39328305, X Protocol reader does not validate server-supplied frame length before allocation.

• Fix for Bug#39327277, Restrict SSL keystore loading to local file inputs.

• Fix for Bug#39320456, Unexpected behavior with LOAD DATA LOCAL INFILE and connection options.

• Fix for Bug#120227 (Bug#39204043), LOAD DATA LOCAL INFILE: missing EOF packet on IOException leaves server thread hanging.

• Fix for Bug#120096 (Bug#39125648), MysqlConnector/Java Connection Url CharacterEncoding bug. Thanks to Rahman Rejepov for his contribution.

Version 9.7.0

• Fix for Bug#119863 (Bug#38951042), Inaccurate decoding of negative TIME durations in Binary Protocol (Cursor Mode).

• WL#17215, Implement JDBC 4.3/4.5 Statement/Connection.enquote* methods.

• Fix for Bug#119245 (Bug#38599240), Select into fix breaks queries with 'into' in them. (reopened)

• Fix for Bug#119659 (Bug#38916595), BinaryResultsetReader fails to consume EOF packet after column definitions when EOF is not deprecated.

Version 9.6.0

• Fix for Bug#118002 (Bug#37843004), The setFetchSize() method in the Statement class may have a potential bug.

• Fix for Bug#113130 (Bug#36043125), getGeneratedKeys() returns a zero resultset with non-key-generating statements.

• Fix for Bug#113336 (Bug#36080226), Inconsistent getUpdateCount() Behavior with allowMultiQueries.

• Fix for Bug#118234 (Bug#37975837), A potential bugs in Mysql Connector/J.

• Fix for Bug#113413 (Bug#36107426), Connection.changeUser cannot be done after DriverManager.loginTimeout elapses. Thanks to Kazuhisa Kawashima for his contribution.

... (truncated)

Commits

• 559f62d Update for GPL license book.
• e2a58f7 Update for .gitignore with exclusion rules for codex files.
• 373584a Fix for Bug#39449361, LOAD DATA LOCAL INFILE accepts ambiguous Windows file U...
• 1ed6f37 Fix for Bug#39328305, X Protocol reader does not validate server-supplied fra...
• 55a2860 Fix for Bug#39327277, Restrict SSL keystore loading to local file inputs.
• 9ce460a Update for CalVer numbering scheme.
• 20e1e5d Update for README, README.md and CONTRIBUTING.md files.
• f40d3be Post-release version bump for CalVer numbering scheme.
• 61cf1f6 Fix for Bug#39320456, Unexpected behavior with LOAD DATA LOCAL INFILE and con...
• 2c2d139 Fix for Bug#120227 (Bug#39204043), LOAD DATA LOCAL INFILE: missing EOF packet...
• Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter from 5.14.3 to 5.14.4

Release notes

Sourced from org.junit.jupiter:junit-jupiter's releases.

JUnit 5.14.4 = Platform 1.14.4 + Jupiter 5.14.4 + Vintage 5.14.4

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.14.3...r5.14.4

Commits

• 096fd69 Release 5.14.4
• 11fd02b Remove JDK 24 (EOL)
• 5b7f023 Fix integration tests on JDK 27
• 18f842a Test against JDK 26 (GA) and JDK 27 (EA)
• a5bf336 Polish 5.14.4 release notes
• 7667c14 Fix race condition in NodeTestTask (#5427)
• ac01f2d Include full display name in legacy XML reports (#5524)
• fbd4a8e Include class template invocation index in legacy reporting names
• 7d6f0c0 Only check PDF for GA releases
• 14f534d Test 5.14.x against JDK 25 ga (#5623)
• Additional commits viewable in compare view

Bumps the dependencies group in /modules/k3s with 1 update: io.fabric8:kubernetes-client.

Updates io.fabric8:kubernetes-client from 7.8.0 to 8.0.0

Release notes

Sourced from io.fabric8:kubernetes-client's releases.

8.0.0 (2026-09-24)

Bugs

• Fix #8105: requests hanging when a retry action, retry decision, or response cleanup throws an exception.
• Fix #7374: (crd-generator) Generated CRDs no longer prune or reject what the client writes: Object, raw Map, List<Object>, raw collection, @JsonUnwrapped and polymorphic properties keep their content, and date and time types only declare a format their values match (Duration, LocalDateTime and the partial types lose date-time). Optional properties get their value type's schema instead of preserving unknown fields, see the migration guide
• Fix #6779: (httpclient-jetty) 401 responses without a WWW-Authenticate header, which is how the API server sends them, are returned with their body instead of failing with "HTTP protocol violation: Authentication challenge without WWW-Authenticate header"
• Fix #6779: (httpclient-jetty, httpclient-vertx, httpclient-vertx-5) A proxy password containing a colon, or a proxy URL with a user and no password, is now used to authenticate with the proxy, instead of falling back to a Proxy-Authorization request header that HTTPS requests carry through the proxy tunnel to the API server
• Fix #6779: A proxy username configured without a password is sent with an empty password instead of null, and a proxy URL with a user and no password as user: instead of user (RFC 7617)
• Fix #8134: (httpclient-jetty) A failed WebSocket handshake no longer calls the listener's onError, the returned future already fails with it. When the handshake was retried, this ended watches and exec/attach sessions before the retry could open them
• Fix #8134: (httpclient-jetty) Credentials for a SOCKS5 proxy are sent to it
• Fix #8134: (httpclient-jetty, httpclient-vertx) Proxy credentials that aren't Basic user:password are only added as a Proxy-Authorization header to the requests an HTTP proxy reads. HTTPS and WSS requests, WebSockets that Vert.x tunnels, and requests through a SOCKS proxy carried them to the API server
• Fix #8134: (httpclient-vertx-5) Proxy credentials that aren't Basic user:password are sent to the HTTP proxy by Vert.x, on the CONNECT too, so HTTPS and WebSocket requests through a proxy that requires them work, and they no longer reach the API server
• Fix #8134: (httpclient-okhttp) A 407 from the API server (through pods/proxy for example) is no longer answered with the proxy credentials, which went through the proxy tunnel to it, and credentials the proxy rejected aren't sent again
• Fix #8140: (httpclient-vertx-5) A request whose connection is closed before it could be written fails with an IOException, and is retried, instead of hanging until the request timeout (seen on Windows)
• Fix #8134: (httpclient-jetty) Cookies set by a response are no longer sent back on later requests and WebSocket upgrades, like with the other HttpClient implementations
• Fix #8109: A java.sql.Date written as yyyy-MM-dd is read as a local date instead of the previous day west of UTC. Year, Month, java.sql.Date and Locale keep their 7.x wire format, mappers you build yourself need the new Jackson2JdkTypesModule, see the migration guide
• Fix #8109: (crd-generator) byte[], ByteBuffer, char[], Year and java.sql.Date schemas match what the client writes (byte[] and ByteBuffer are format: byte strings), so the API server no longer rejects them. @PrinterColumn on a LocalDate is a string column instead of a date column that showed <invalid>
• Fix #8008: (httpclient-vertx-5) Requests with an InputStream body and Expect: 100-continue (binary builds) no longer hang, and an InputStream body of known length is sent with Content-Length instead of chunked
• Fix #8139: (httpclient-okhttp) WebSockets answer the server's Close frame even when the listener doesn't, so port forwarding and custom listeners release the connection instead of waiting for the server to drop it
• Fix #8152: (httpclient-vertx, httpclient-vertx-5, httpclient-jetty, httpclient-jdk) WebSockets send a ping every Config#websocketPingInterval (30s by default), like OkHttp already did, so load balancers that close idle connections no longer drop quiet watches

Improvements

• Fix #8109: (crd-generator) int/Integer and long/Long properties get format: int32 and format: int64, like controller-gen
• Fix #7987: (kubernetes-client-api) withShardSelector accepts a typed ShardSelector (ShardSelector.builder().addShard(0, 4).addShard(2, 4).build()) next to the raw expression String, so the shardRange(...) CEL grammar and its hexadecimal bounds don't have to be written by hand

Dependency Upgrade

• Fix #7374: Upgrade Jackson from 2.x to 3.2.1
• Fix #8096: bump cert-manager from 1.20.2 to 1.21.2
• Fix #8098: bump chaos-mesh api from 4db47f5 to d70b66a
• Fix #8086: bump cluster-api from 1.12.2 to 1.13.6
• Fix #8101: bump cluster-api from 1.13.6 to 1.14.2
• Fix #8101: bump cluster-api-provider-metal3 from 1.13.0 to 1.14.0
• Fix #8133: bump controller-runtime from 0.19.7 to 0.23.3
• Fix #8142: bump controller-runtime from 0.23.3 to 0.25.1
• Fix #8086: bump gateway-api from 1.6.1 to 1.6.2
• Fix #8127: bump istio.io/client-go from 1.30.0 to 1.31.0
• Fix #8148: bump openshift/api from 1cb53e3 (release-4.19) to 231177c (release-4.22)
• Fix #8148: bump openshift/cloud-credential-operator from 0e03b7a to 5c4a396
• Fix #8148: bump openshift/cluster-network-operator from 698e349 to 61de77e
• Fix #8148: bump openshift/cluster-node-tuning-operator from 2ed182b to 039bae9
• Fix #8148: bump openshift/hive/apis from 2d25383 to 8104fcf
• Fix #8148: bump openshift/installer from 1.4.21-pre to 1.4.22-ec5
• Fix #6779: bump Jetty from 11.0.26 to 12.1.13
• Fix #8086: bump k8s.io/api from 0.35.2 to 0.35.8
• Fix #8142: bump k8s.io/api from 0.35.8 to 0.37.0
• Fix #8086: bump k8s.io/apiextensions-apiserver from 0.36.1 to 0.37.0
• Fix #8086: bump k8s.io/apimachinery from 0.36.1 to 0.37.0
• Fix #8086: bump k8s.io/autoscaler/vertical-pod-autoscaler from 1.7.0 to 1.7.1
• Fix #8086: bump k8s.io/client-go from 0.35.2 to 0.35.8
• Fix #8142: bump k8s.io/client-go from 0.35.8 to 0.37.0
• Fix #8142: bump k8s.io/cloud-provider from 0.35.8 to 0.37.0

... (truncated)

Changelog

Sourced from io.fabric8:kubernetes-client's changelog.

8.0.0 (2026-09-24)

Bugs

• Fix #8105: requests hanging when a retry action, retry decision, or response cleanup throws an exception.
• Fix #7374: (crd-generator) Generated CRDs no longer prune or reject what the client writes: Object, raw Map, List<Object>, raw collection, @JsonUnwrapped and polymorphic properties keep their content, and date and time types only declare a format their values match (Duration, LocalDateTime and the partial types lose date-time). Optional properties get their value type's schema instead of preserving unknown fields, see the migration guide
• Fix #6779: (httpclient-jetty) 401 responses without a WWW-Authenticate header, which is how the API server sends them, are returned with their body instead of failing with "HTTP protocol violation: Authentication challenge without WWW-Authenticate header"
• Fix #6779: (httpclient-jetty, httpclient-vertx, httpclient-vertx-5) A proxy password containing a colon, or a proxy URL with a user and no password, is now used to authenticate with the proxy, instead of falling back to a Proxy-Authorization request header that HTTPS requests carry through the proxy tunnel to the API server
• Fix #6779: A proxy username configured without a password is sent with an empty password instead of null, and a proxy URL with a user and no password as user: instead of user (RFC 7617)
• Fix #8134: (httpclient-jetty) A failed WebSocket handshake no longer calls the listener's onError, the returned future already fails with it. When the handshake was retried, this ended watches and exec/attach sessions before the retry could open them
• Fix #8134: (httpclient-jetty) Credentials for a SOCKS5 proxy are sent to it
• Fix #8134: (httpclient-jetty, httpclient-vertx) Proxy credentials that aren't Basic user:password are only added as a Proxy-Authorization header to the requests an HTTP proxy reads. HTTPS and WSS requests, WebSockets that Vert.x tunnels, and requests through a SOCKS proxy carried them to the API server
• Fix #8134: (httpclient-vertx-5) Proxy credentials that aren't Basic user:password are sent to the HTTP proxy by Vert.x, on the CONNECT too, so HTTPS and WebSocket requests through a proxy that requires them work, and they no longer reach the API server
• Fix #8134: (httpclient-okhttp) A 407 from the API server (through pods/proxy for example) is no longer answered with the proxy credentials, which went through the proxy tunnel to it, and credentials the proxy rejected aren't sent again
• Fix #8140: (httpclient-vertx-5) A request whose connection is closed before it could be written fails with an IOException, and is retried, instead of hanging until the request timeout (seen on Windows)
• Fix #8134: (httpclient-jetty) Cookies set by a response are no longer sent back on later requests and WebSocket upgrades, like with the other HttpClient implementations
• Fix #8109: A java.sql.Date written as yyyy-MM-dd is read as a local date instead of the previous day west of UTC. Year, Month, java.sql.Date and Locale keep their 7.x wire format, mappers you build yourself need the new Jackson2JdkTypesModule, see the migration guide
• Fix #8109: (crd-generator) byte[], ByteBuffer, char[], Year and java.sql.Date schemas match what the client writes (byte[] and ByteBuffer are format: byte strings), so the API server no longer rejects them. @PrinterColumn on a LocalDate is a string column instead of a date column that showed <invalid>
• Fix #8008: (httpclient-vertx-5) Requests with an InputStream body and Expect: 100-continue (binary builds) no longer hang, and an InputStream body of known length is sent with Content-Length instead of chunked
• Fix #8139: (httpclient-okhttp) WebSockets answer the server's Close frame even when the listener doesn't, so port forwarding and custom listeners release the connection instead of waiting for the server to drop it
• Fix #8152: (httpclient-vertx, httpclient-vertx-5, httpclient-jetty, httpclient-jdk) WebSockets send a ping every Config#websocketPingInterval (30s by default), like OkHttp already did, so load balancers that close idle connections no longer drop quiet watches

Improvements

• Fix #8109: (crd-generator) int/Integer and long/Long properties get format: int32 and format: int64, like controller-gen
• Fix #7987: (kubernetes-client-api) withShardSelector accepts a typed ShardSelector (ShardSelector.builder().addShard(0, 4).addShard(2, 4).build()) next to the raw expression String, so the shardRange(...) CEL grammar and its hexadecimal bounds don't have to be written by hand

Dependency Upgrade

• Fix #7374: Upgrade Jackson from 2.x to 3.2.1
• Fix #8096: bump cert-manager from 1.20.2 to 1.21.2
• Fix #8098: bump chaos-mesh api from 4db47f5 to d70b66a
• Fix #8086: bump cluster-api from 1.12.2 to 1.13.6
• Fix #8101: bump cluster-api from 1.13.6 to 1.14.2
• Fix #8101: bump cluster-api-provider-metal3 from 1.13.0 to 1.14.0
• Fix #8133: bump controller-runtime from 0.19.7 to 0.23.3
• Fix #8142: bump controller-runtime from 0.23.3 to 0.25.1
• Fix #8086: bump gateway-api from 1.6.1 to 1.6.2
• Fix #8127: bump istio.io/client-go from 1.30.0 to 1.31.0
• Fix #8148: bump openshift/api from 1cb53e3 (release-4.19) to 231177c (release-4.22)
• Fix #8148: bump openshift/cloud-credential-operator from 0e03b7a to 5c4a396
• Fix #8148: bump openshift/cluster-network-operator from 698e349 to 61de77e
• Fix #8148: bump openshift/cluster-node-tuning-operator from 2ed182b to 039bae9
• Fix #8148: bump openshift/hive/apis from 2d25383 to 8104fcf
• Fix #8148: bump openshift/installer from 1.4.21-pre to 1.4.22-ec5
• Fix #6779: bump Jetty from 11.0.26 to 12.1.13
• Fix #8086: bump k8s.io/api from 0.35.2 to 0.35.8
• Fix #8142: bump k8s.io/api from 0.35.8 to 0.37.0
• Fix #8086: bump k8s.io/apiextensions-apiserver from 0.36.1 to 0.37.0
• Fix #8086: bump k8s.io/apimachinery from 0.36.1 to 0.37.0
• Fix #8086: bump k8s.io/autoscaler/vertical-pod-autoscaler from 1.7.0 to 1.7.1
• Fix #8086: bump k8s.io/client-go from 0.35.2 to 0.35.8
• Fix #8142: bump k8s.io/client-go from 0.35.8 to 0.37.0

... (truncated)

Commits

• 7527367 [RELEASE] Updated project version to v8.0.0
• d69ef45 fix(httpclient): send WebSocket pings at Config#websocketPingInterval
• 1381c91 feat(kubernetes-client-api)!: complete the Kubernetes 1.37 typed DSL (8151)
• 424b387 feat(kubernetes-client-api,kubernetes-client): add typed DSL accessor… (8042)
• cb86d62 chore(deps): update openshift (8148)
• 5acae27 chore(deps): update dependency org.apache.groovy:groovy-all from 5.1.2 to v5.1.3
• 0bb81e8 chore(deps): give k8s.io/kube-openapi its own monthly Renovate PR
• 0012338 chore(deps): update jackson
• 9730d15 chore(deps): update logging from 2.0.19 to v2.0.20
• 2afd413 chore(deps): update kubernetes (8142)
• Additional commits viewable in compare view

Bumps the dependencies group in /modules/cassandra with 1 update: com.datastax.cassandra:cassandra-driver-core.

Updates com.datastax.cassandra:cassandra-driver-core from 3.10.0 to 4.0.0

Release notes

Sourced from com.datastax.cassandra:cassandra-driver-core's releases.

3.13.0

Release announcement

Changelog:

• [bug] CASSJAVA-85: decode custom payload and warnings in correct order
• [improvement] CASSJAVA-128: Update Netty to 4.1.138 and migrate to Java8

3.12.1

Release announcement

Changelog:

• [improvement] CASSJAVA-55: Remove setting "Host" header for metadata requests.
• [bug] JAVA-3125: Match broadcast RPC for control connection and Astra events

3.12.0

Release announcement

Changelog:

• [improvement] CASSANDRA-18971: Switch all archs to netty-tcnative-boringssl-static
• [improvement] CASSJAVA-58: Update 3.x DRIVER_NAME to match 4.x Java driver

3.11.5

No release notes provided.

3.11.4

No release notes provided.

3.11.3

No release notes provided.

3.11.2

No release notes provided.

3.11.1

No release notes provided.

Commits

• 9bdb525 [maven-release-plugin] prepare release 4.0.0
• 8402f53 Update version in docs
• 3f5ce45 Clarify explanations on local datacenter
• 183cae4 Mention Maven coordinates in root readme
• f342ae9 Revisit upgrade guide
• 4bad94d JAVA-2192: Don't return generic types with wildcards
• 4c3aa93 JAVA-2081: Fix reference configuration page
• a0d7189 Fix flaky test for JAVA-2106
• 83babd3 JAVA-2148: Add examples
• 43ccaed Also remove oldArchive in test-infra's revapi.json
• Additional commits viewable in compare view

Bumps the dependencies group in /modules/neo4j with 1 update: org.neo4j.driver:neo4j-java-driver.

Updates org.neo4j.driver:neo4j-java-driver from 4.4.22 to 4.4.27

Release notes

Sourced from org.neo4j.driver:neo4j-java-driver's releases.

4.4.27

This is a refinement release that brings dependency updates.

4.4 API documentation

🔧 Dependency Management

---

• build(deps): update dependencies #1780

4.4.26

This is a refinement release built with Java 26 compiler while targeting Java 8. It includes Javadoc improvements introduced in latest Java versions.

4.4 API documentation

👏 Improvements

---

• build(java): build on Java 26 #1776

4.4.25

This is a refinement release that brings dependency updates.

4.4 API documentation

👏 Improvements

---

• docs: update procedure name in transaction metadata #1770

🔧 Dependency Management

---

• build(deps): update dependencies #1772

4.4.24

This is a refinement release that brings dependency updates.

4.4 API documentation

🔧 Dependency Management

---

• build(deps): update dependencies #1763

4.4.23

This is a refinement release that brings general improvements and dependency updates.

4.4 API documentation

... (truncated)

Commits

• 6f2b9e5 build(deps): update dependencies (#1780)
• 2b67ee0 build(java): build on Java 26 (

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Repository UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 7b9788dc-b49f-4bd3-97c5-27967ceca968

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}