This is an automated email from the ASF dual-hosted git repository.

FrankChen021 pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/druid.git


The following commit(s) were added to refs/heads/master by this push:
     new a934afa8bb4 build(deps): bump the maven-minor-patch group with 9 
updates (#20765)
a934afa8bb4 is described below

commit a934afa8bb48a0882b693366bee34998ced40a3f
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Thu Oct 29 21:55:17 2026 +0800

    build(deps): bump the maven-minor-patch group with 9 updates (#20765)
    
    * build(deps): bump the maven-minor-patch group with 14 updates
    
    Bumps the maven-minor-patch group with 14 updates:
    
    | Package | From | To |
    | --- | --- | --- |
    | [org.tukaani:xz](https://github.com/tukaani-project/xz-java) | `1.9` | 
`1.12` |
    | 
[org.hibernate.validator:hibernate-validator](https://github.com/hibernate/hibernate-validator)
 | `9.1.4.Final` | `9.1.5.Final` |
    | [it.unimi.dsi:fastutil](https://github.com/vigna/fastutil) | `8.5.4` | 
`8.5.19` |
    | [it.unimi.dsi:fastutil-core](https://github.com/vigna/fastutil) | `8.5.4` 
| `8.5.19` |
    | 
[com.github.ben-manes.caffeine:caffeine](https://github.com/ben-manes/caffeine) 
| `3.3.0` | `3.3.1` |
    | [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) | 
`1.18.14` | `1.18.15` |
    | [net.bytebuddy:byte-buddy-agent](https://github.com/raphw/byte-buddy) | 
`1.18.14` | `1.18.15` |
    | 
[com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin)
 | `4.10.4.1` | `4.10.5.0` |
    | org.codehaus.mojo:javacc-maven-plugin | `2.4` | `2.6` |
    | org.apache.kafka:kafka-clients | `4.3.1` | `4.4.0` |
    | [com.tdunning:t-digest](https://github.com/tdunning/t-digest) | `3.2` | 
`3.3` |
    | [io.grpc:grpc-bom](https://github.com/grpc/grpc-java) | `1.84.2` | 
`1.84.3` |
    | [io.grpc:grpc-stub](https://github.com/grpc/grpc-java) | `1.84.2` | 
`1.84.3` |
    | [io.grpc:grpc-netty-shaded](https://github.com/grpc/grpc-java) | `1.84.2` 
| `1.84.3` |
    
    
    Updates `org.tukaani:xz` from 1.9 to 1.12
    - [Release notes](https://github.com/tukaani-project/xz-java/releases)
    - 
[Changelog](https://github.com/tukaani-project/xz-java/blob/master/NEWS.md)
    - [Commits](https://github.com/tukaani-project/xz-java/compare/v1.9...v1.12)
    
    Updates `org.hibernate.validator:hibernate-validator` from 9.1.4.Final to 
9.1.5.Final
    - [Release notes](https://github.com/hibernate/hibernate-validator/releases)
    - 
[Changelog](https://github.com/hibernate/hibernate-validator/blob/9.1.5.Final/changelog.md)
    - 
[Commits](https://github.com/hibernate/hibernate-validator/compare/9.1.4.Final...9.1.5.Final)
    
    Updates `it.unimi.dsi:fastutil` from 8.5.4 to 8.5.19
    - [Changelog](https://github.com/vigna/fastutil/blob/master/CHANGES)
    - [Commits](https://github.com/vigna/fastutil/compare/8.5.4...8.5.19)
    
    Updates `it.unimi.dsi:fastutil-core` from 8.5.4 to 8.5.19
    - [Changelog](https://github.com/vigna/fastutil/blob/master/CHANGES)
    - [Commits](https://github.com/vigna/fastutil/compare/8.5.4...8.5.19)
    
    Updates `it.unimi.dsi:fastutil-core` from 8.5.4 to 8.5.19
    - [Changelog](https://github.com/vigna/fastutil/blob/master/CHANGES)
    - [Commits](https://github.com/vigna/fastutil/compare/8.5.4...8.5.19)
    
    Updates `com.github.ben-manes.caffeine:caffeine` from 3.3.0 to 3.3.1
    - [Release notes](https://github.com/ben-manes/caffeine/releases)
    - [Commits](https://github.com/ben-manes/caffeine/compare/v3.3.0...v3.3.1)
    
    Updates `net.bytebuddy:byte-buddy` from 1.18.14 to 1.18.15
    - [Release notes](https://github.com/raphw/byte-buddy/releases)
    - 
[Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
    - 
[Commits](https://github.com/raphw/byte-buddy/compare/byte-buddy-1.18.14...byte-buddy-1.18.15)
    
    Updates `net.bytebuddy:byte-buddy-agent` from 1.18.14 to 1.18.15
    - [Release notes](https://github.com/raphw/byte-buddy/releases)
    - 
[Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
    - 
[Commits](https://github.com/raphw/byte-buddy/compare/byte-buddy-1.18.14...byte-buddy-1.18.15)
    
    Updates `net.bytebuddy:byte-buddy-agent` from 1.18.14 to 1.18.15
    - [Release notes](https://github.com/raphw/byte-buddy/releases)
    - 
[Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
    - 
[Commits](https://github.com/raphw/byte-buddy/compare/byte-buddy-1.18.14...byte-buddy-1.18.15)
    
    Updates `com.github.spotbugs:spotbugs-maven-plugin` from 4.10.4.1 to 
4.10.5.0
    - [Release 
notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
    - 
[Commits](https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-4.10.4.1...spotbugs-maven-plugin-4.10.5.0)
    
    Updates `org.codehaus.mojo:javacc-maven-plugin` from 2.4 to 2.6
    
    Updates `org.apache.kafka:kafka-clients` from 4.3.1 to 4.4.0
    
    Updates `com.tdunning:t-digest` from 3.2 to 3.3
    - 
[Changelog](https://github.com/tdunning/t-digest/blob/main/RELEASE-NOTES.md)
    - [Commits](https://github.com/tdunning/t-digest/commits)
    
    Updates `io.grpc:grpc-bom` from 1.84.2 to 1.84.3
    - [Release notes](https://github.com/grpc/grpc-java/releases)
    - [Commits](https://github.com/grpc/grpc-java/compare/v1.84.2...v1.84.3)
    
    Updates `io.grpc:grpc-stub` from 1.84.2 to 1.84.3
    - [Release notes](https://github.com/grpc/grpc-java/releases)
    - [Commits](https://github.com/grpc/grpc-java/compare/v1.84.2...v1.84.3)
    
    Updates `io.grpc:grpc-netty-shaded` from 1.84.2 to 1.84.3
    - [Release notes](https://github.com/grpc/grpc-java/releases)
    - [Commits](https://github.com/grpc/grpc-java/compare/v1.84.2...v1.84.3)
    
    Updates `io.grpc:grpc-stub` from 1.84.2 to 1.84.3
    - [Release notes](https://github.com/grpc/grpc-java/releases)
    - [Commits](https://github.com/grpc/grpc-java/compare/v1.84.2...v1.84.3)
    
    Updates `io.grpc:grpc-netty-shaded` from 1.84.2 to 1.84.3
    - [Release notes](https://github.com/grpc/grpc-java/releases)
    - [Commits](https://github.com/grpc/grpc-java/compare/v1.84.2...v1.84.3)
    
    ---
    updated-dependencies:
    - dependency-name: org.tukaani:xz
      dependency-version: '1.12'
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: maven-minor-patch
    - dependency-name: org.hibernate.validator:hibernate-validator
      dependency-version: 9.1.5.Final
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: maven-minor-patch
    - dependency-name: it.unimi.dsi:fastutil
      dependency-version: 8.5.19
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: maven-minor-patch
    - dependency-name: it.unimi.dsi:fastutil-core
      dependency-version: 8.5.19
      dependency-type: direct:development
      update-type: version-update:semver-patch
      dependency-group: maven-minor-patch
    - dependency-name: it.unimi.dsi:fastutil-core
      dependency-version: 8.5.19
      dependency-type: direct:development
      update-type: version-update:semver-patch
      dependency-group: maven-minor-patch
    - dependency-name: com.github.ben-manes.caffeine:caffeine
      dependency-version: 3.3.1
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: maven-minor-patch
    - dependency-name: net.bytebuddy:byte-buddy
      dependency-version: 1.18.15
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: maven-minor-patch
    - dependency-name: net.bytebuddy:byte-buddy-agent
      dependency-version: 1.18.15
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: maven-minor-patch
    - dependency-name: net.bytebuddy:byte-buddy-agent
      dependency-version: 1.18.15
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: maven-minor-patch
    - dependency-name: com.github.spotbugs:spotbugs-maven-plugin
      dependency-version: 4.10.5.0
      dependency-type: direct:development
      update-type: version-update:semver-patch
      dependency-group: maven-minor-patch
    - dependency-name: org.codehaus.mojo:javacc-maven-plugin
      dependency-version: '2.6'
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: maven-minor-patch
    - dependency-name: org.apache.kafka:kafka-clients
      dependency-version: 4.4.0
      dependency-type: direct:development
      update-type: version-update:semver-minor
      dependency-group: maven-minor-patch
    - dependency-name: com.tdunning:t-digest
      dependency-version: '3.3'
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: maven-minor-patch
    - dependency-name: io.grpc:grpc-bom
      dependency-version: 1.84.3
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: maven-minor-patch
    - dependency-name: io.grpc:grpc-stub
      dependency-version: 1.84.3
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: maven-minor-patch
    - dependency-name: io.grpc:grpc-netty-shaded
      dependency-version: 1.84.3
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: maven-minor-patch
    - dependency-name: io.grpc:grpc-stub
      dependency-version: 1.84.3
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: maven-minor-patch
    - dependency-name: io.grpc:grpc-netty-shaded
      dependency-version: 1.84.3
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: maven-minor-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    
    * fix: avoid fastutil grow override conflict
    
    * build: align zstd with kafka client
    
    * build: update dependency license registry
    
    * build: declare fastutil in server
    
    * build: align indexing service fastutil dependency
    
    * build: align sql fastutil dependency
    
    * build: align datasketches fastutil dependency
    
    * build: align histogram fastutil dependency
    
    * build: align benchmark fastutil dependency
    
    * build: align lookups fastutil dependency
    
    * build: align S3 fastutil dependency
    
    * fix: handle null dictionary values with fastutil 8.5.19
    
    * fix: declare fastutil dependency for tdigestsketch
    
    * fix: declare fastutil dependency for ddsketch
    
    * build: replace fastutil-core with fastutil in remaining modules
    
    fastutil 8.5.19 ships all classes in the fastutil jar and no longer
    depends on fastutil-core, so modules declaring fastutil-core fail
    dependency:analyze. Also drop the copy of IntArrayList#grow from
    DruidIntList now that fastutil exposes it publicly.
    
    * build: exclude kafka-clients, javacc-maven-plugin and 
spotbugs-maven-plugin upgrades
    
    - kafka-clients 4.4.0 requires zstd-jni 1.5.7-17, which cannot decode legacy
      zstd frames; keep kafka-clients 4.3.1 and zstd-jni 1.5.7-11.
    - javacc-maven-plugin 2.6 (JavaCC 5) changes SQL parse error messages.
    - spotbugs-maven-plugin 4.10.5.0 reports false UUF_UNUSED_FIELD bugs.
    
    * test: update t-digest 3.3 expectations
    
    * fix: support null array overlap constants
    
    * build: move the fastutil upgrade to a separate PR
    
    Keeps fastutil and fastutil-core at 8.5.4 here and restores the code and
    module dependency changes that the 8.5.19 upgrade required. The upgrade
    is handled on its own branch.
    
    Co-Authored-By: Claude Opus 5.5 <[email protected]>
    
    * fix: update t-digest intermediate size estimate for 3.3
    
    t-digest 3.3 sizes the MergingDigest temp buffer as 5 * size instead of
    5 * compression, so the old estimate undercounted on-heap memory per row.
    Add a test that checks the estimate against the arrays the library 
allocates.
    
    ---------
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] 
<49699333+dependabot[bot]@users.noreply.github.com>
    Co-authored-by: Frank Chen <[email protected]>
    Co-authored-by: Claude Opus 5.5 <[email protected]>
---
 extensions-contrib/opentelemetry-emitter/pom.xml   |  2 +-
 extensions-contrib/tdigestsketch/pom.xml           |  2 +-
 .../tdigestsketch/TDigestSketchUtils.java          | 12 ++++---
 .../TDigestSketchAggregatorFactoryTest.java        | 38 ++++++++++++++++++++++
 .../sql/TDigestSketchSqlAggregatorTest.java        | 14 ++++----
 licenses.yaml                                      |  6 ++--
 pom.xml                                            |  8 ++---
 7 files changed, 62 insertions(+), 20 deletions(-)

diff --git a/extensions-contrib/opentelemetry-emitter/pom.xml 
b/extensions-contrib/opentelemetry-emitter/pom.xml
index 45335d65e4f..5395aa29de3 100644
--- a/extensions-contrib/opentelemetry-emitter/pom.xml
+++ b/extensions-contrib/opentelemetry-emitter/pom.xml
@@ -39,7 +39,7 @@
     <!-- These guava and grpc versions are used only in the 
opentelemetry-extension.
       Look at build section for more details about shading. -->
     <shade.guava.version>33.7.2-jre</shade.guava.version>
-    <shade.grpc.version>1.84.2</shade.grpc.version>
+    <shade.grpc.version>1.84.3</shade.grpc.version>
   </properties>
   <dependencyManagement>
     <dependencies>
diff --git a/extensions-contrib/tdigestsketch/pom.xml 
b/extensions-contrib/tdigestsketch/pom.xml
index e476fd2ffa4..1b528736159 100644
--- a/extensions-contrib/tdigestsketch/pom.xml
+++ b/extensions-contrib/tdigestsketch/pom.xml
@@ -56,7 +56,7 @@
     <dependency>
       <groupId>com.tdunning</groupId>
       <artifactId>t-digest</artifactId>
-      <version>3.2</version>
+      <version>3.3</version>
     </dependency>
     <dependency>
       <groupId>com.google.guava</groupId>
diff --git 
a/extensions-contrib/tdigestsketch/src/main/java/org/apache/druid/query/aggregation/tdigestsketch/TDigestSketchUtils.java
 
b/extensions-contrib/tdigestsketch/src/main/java/org/apache/druid/query/aggregation/tdigestsketch/TDigestSketchUtils.java
index 8d27659dbc1..efb2ad3cff9 100644
--- 
a/extensions-contrib/tdigestsketch/src/main/java/org/apache/druid/query/aggregation/tdigestsketch/TDigestSketchUtils.java
+++ 
b/extensions-contrib/tdigestsketch/src/main/java/org/apache/druid/query/aggregation/tdigestsketch/TDigestSketchUtils.java
@@ -62,15 +62,19 @@ public class TDigestSketchUtils
    * This method computes an estimate of the max intermediate size of a {@link 
MergingDigest}.
    * Since there is no utility available in the T-Digest library to compute 
this size,
    * the below code is inspired by looking at
-   * {@link MergingDigest#MergingDigest(double, int, int)}
-   * This method is current as of 3.2 version and many need to change in 
future.
+   * {@link MergingDigest#MergingDigest(double, int, int)} with default buffer 
and centroid sizes.
+   * This method is current as of t-digest 3.3. 
TDigestSketchAggregatorFactoryTest checks this estimate
+   * against the arrays the library allocates, so it fails if a future version 
changes the sizing.
    */
   static int getMaxIntermdiateTDigestSize(int compression)
   {
+    // MergingDigest raises compression to at least 10 and adds extra centroid 
room for small compressions
+    final int effectiveCompression = Math.max(compression, 10);
+    final int sizeFudge = effectiveCompression < 30 ? 30 : 10;
+    final int centroidArraySize = 2 * effectiveCompression + sizeFudge;
+    final int tempBufferSize = 5 * centroidArraySize;
     int intermediateSize = 0;
-    int centroidArraySize = (int) (2 * Math.ceil(compression)) + 10;
     intermediateSize += 2 * centroidArraySize * Double.BYTES;
-    int tempBufferSize = (int) (5 * Math.ceil(compression));
     intermediateSize += 2 * tempBufferSize * Double.BYTES;
     intermediateSize += tempBufferSize * Integer.BYTES;
     // Adding an extra buffer of 1K for overhead
diff --git 
a/extensions-contrib/tdigestsketch/src/test/java/org/apache/druid/query/aggregation/tdigestsketch/TDigestSketchAggregatorFactoryTest.java
 
b/extensions-contrib/tdigestsketch/src/test/java/org/apache/druid/query/aggregation/tdigestsketch/TDigestSketchAggregatorFactoryTest.java
index 1e618d48ff5..91ad55a179b 100644
--- 
a/extensions-contrib/tdigestsketch/src/test/java/org/apache/druid/query/aggregation/tdigestsketch/TDigestSketchAggregatorFactoryTest.java
+++ 
b/extensions-contrib/tdigestsketch/src/test/java/org/apache/druid/query/aggregation/tdigestsketch/TDigestSketchAggregatorFactoryTest.java
@@ -19,6 +19,7 @@
 
 package org.apache.druid.query.aggregation.tdigestsketch;
 
+import com.tdunning.math.stats.MergingDigest;
 import org.apache.druid.java.util.common.granularity.Granularities;
 import org.apache.druid.query.Druids;
 import org.apache.druid.query.aggregation.CountAggregatorFactory;
@@ -31,6 +32,10 @@ import org.apache.druid.segment.column.RowSignature;
 import org.junit.jupiter.api.Assertions;
 import org.junit.jupiter.api.Test;
 
+import java.lang.reflect.Array;
+import java.lang.reflect.Field;
+import java.lang.reflect.Modifier;
+
 public class TDigestSketchAggregatorFactoryTest
 {
   @Test
@@ -86,4 +91,37 @@ public class TDigestSketchAggregatorFactoryTest
     TDigestSketchAggregatorFactory factory = new 
TDigestSketchAggregatorFactory("tdigest", "col", 100, config);
     Assertions.assertEquals(100, factory.getCompression());
   }
+
+  /**
+   * Guards {@link TDigestSketchUtils#getMaxIntermdiateTDigestSize} against 
changes in the t-digest library.
+   * The estimate is used for on-heap memory accounting during ingestion, so 
if it is smaller than what a
+   * {@link MergingDigest} really allocates, ingestion persists later than 
maxBytesInMemory intends.
+   */
+  @Test
+  public void testMaxIntermediateSizeCoversDigestBuffers() throws 
IllegalAccessException
+  {
+    // Raise the cap so the factory doesn't reduce the larger compressions 
below
+    final TDigestConfig config = 
TDigestConfig.builder().maxCompression(1000).build();
+    // 5 is raised to the library minimum of 10; 29 and 30 sit on either side 
of the extra centroid room below 30
+    for (int compression : new int[]{5, 10, 29, 30, 100, 200, 1000}) {
+      final MergingDigest digest = new MergingDigest(compression);
+      // Sum the sizes of the digest's instance arrays (centroids and temp 
buffers), which dominate its footprint
+      long arrayBytes = 0;
+      for (Field field : MergingDigest.class.getDeclaredFields()) {
+        if (field.getType().isArray() && 
!Modifier.isStatic(field.getModifiers())) {
+          field.setAccessible(true);
+          final Object array = field.get(digest);
+          if (array != null) {
+            final int elementBytes = field.getType().getComponentType() == 
double.class ? Double.BYTES : Integer.BYTES;
+            arrayBytes += (long) Array.getLength(array) * elementBytes;
+          }
+        }
+      }
+      final TDigestSketchAggregatorFactory factory = new 
TDigestSketchAggregatorFactory("sketch", "col", compression, config);
+      Assertions.assertTrue(
+          factory.getMaxIntermediateSize() >= arrayBytes,
+          "compression " + compression + ": estimate " + 
factory.getMaxIntermediateSize() + " < allocated " + arrayBytes
+      );
+    }
+  }
 }
diff --git 
a/extensions-contrib/tdigestsketch/src/test/java/org/apache/druid/query/aggregation/tdigestsketch/sql/TDigestSketchSqlAggregatorTest.java
 
b/extensions-contrib/tdigestsketch/src/test/java/org/apache/druid/query/aggregation/tdigestsketch/sql/TDigestSketchSqlAggregatorTest.java
index c18d0ad7f43..0b87eb56066 100644
--- 
a/extensions-contrib/tdigestsketch/src/test/java/org/apache/druid/query/aggregation/tdigestsketch/sql/TDigestSketchSqlAggregatorTest.java
+++ 
b/extensions-contrib/tdigestsketch/src/test/java/org/apache/druid/query/aggregation/tdigestsketch/sql/TDigestSketchSqlAggregatorTest.java
@@ -182,7 +182,7 @@ public class TDigestSketchSqlAggregatorTest extends 
BaseCalciteQueryTest
         ),
         ResultMatchMode.EQUALS_EPS,
         ImmutableList.of(
-            new Object[]{1.0, 3.5, 6.0}
+            new Object[]{1.0, 4.0, 6.0}
         )
     );
   }
@@ -287,9 +287,9 @@ public class TDigestSketchSqlAggregatorTest extends 
BaseCalciteQueryTest
 
     final List<Object[]> expectedResults = ImmutableList.of(
         new Object[]{
-            1.1,
-            2.9,
-            5.3,
+            1.0,
+            3.0,
+            5.0,
             6.0
         }
     );
@@ -331,7 +331,7 @@ public class TDigestSketchSqlAggregatorTest extends 
BaseCalciteQueryTest
     final List<Object[]> expectedResults = ImmutableList.of(
         new Object[]{
             1.0,
-            3.5,
+            4.0,
             6.0
         }
     );
@@ -387,7 +387,7 @@ public class TDigestSketchSqlAggregatorTest extends 
BaseCalciteQueryTest
     final List<Object[]> expectedResults = ImmutableList.of(
         new Object[]{
             1.0,
-            3.5,
+            4.0,
             6.0
         }
     );
@@ -451,7 +451,7 @@ public class TDigestSketchSqlAggregatorTest extends 
BaseCalciteQueryTest
         ),
         ResultMatchMode.EQUALS_EPS,
         ImmutableList.of(
-            new Object[]{1.0, 3.5, 6.0}
+            new Object[]{1.0, 4.0, 6.0}
         )
     );
   }
diff --git a/licenses.yaml b/licenses.yaml
index 8c91cc5d8a5..ca076a1bbc9 100644
--- a/licenses.yaml
+++ b/licenses.yaml
@@ -458,7 +458,7 @@ name: Caffeine
 license_category: binary
 module: java-core
 license_name: Apache License version 2.0
-version: 3.3.0
+version: 3.3.1
 libraries:
   - com.github.ben-manes.caffeine: caffeine
 
@@ -2588,7 +2588,7 @@ name: Hibernate Validator
 license_category: binary
 module: java-core
 license_name: Apache License version 2.0
-version: 9.1.4.Final
+version: 9.1.5.Final
 libraries:
   - org.hibernate.validator: hibernate-validator
 
@@ -4013,7 +4013,7 @@ name: XZ
 license_category: binary
 module: java-core
 license_name: Public Domain
-version: 1.9
+version: 1.12
 libraries:
   - org.tukaani: xz
 
diff --git a/pom.xml b/pom.xml
index 1455bb0b1a7..fd0b3748f7b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -85,7 +85,7 @@
         <avatica.version>1.29.0</avatica.version>
         <avro.version>1.12.2</avro.version>
         <parquet.version>1.18.1</parquet.version>
-        <bytebuddy.version>1.18.14</bytebuddy.version>
+        <bytebuddy.version>1.18.15</bytebuddy.version>
         <!--
             The base calcite parser was copied into the project; when updating 
Calcite run dev/upgrade-calcite-parser to adopt upstream changes
           -->
@@ -128,10 +128,10 @@
         <aws.sdk.v1.version>1.12.797</aws.sdk.v1.version>
         <aws.sdk.v2.version>2.55.6</aws.sdk.v2.version>
         <aws.msk.iam.auth.version>2.3.9</aws.msk.iam.auth.version>
-        <caffeine.version>3.3.0</caffeine.version>
+        <caffeine.version>3.3.1</caffeine.version>
         <jacoco.version>0.8.15</jacoco.version>
         <testcontainers.version>2.0.5</testcontainers.version>
-        <hibernate-validator.version>9.1.4.Final</hibernate-validator.version>
+        <hibernate-validator.version>9.1.5.Final</hibernate-validator.version>
         <httpclient.version>4.5.14</httpclient.version>
         <okhttp.version>5.5.0</okhttp.version>
         <kubernetes.client.version>25.0.0-legacy</kubernetes.client.version>
@@ -726,7 +726,7 @@
             <dependency>
                 <groupId>org.tukaani</groupId>
                 <artifactId>xz</artifactId>
-                <version>1.9</version>
+                <version>1.12</version>
             </dependency>
             <dependency>
                 <groupId>com.github.luben</groupId>


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to