rzo1 opened a new pull request, #9067: URL: https://github.com/apache/storm/pull/9067
Collects the currently open, green Dependabot version updates into a single branch so the full suite runs once over the combined set instead of once per PR. ### Maven | Dependency | From | To | PR | | --- | --- | --- | --- | | `activemq.version` | 6.3.0 | 6.3.1 | #9024 | | `byte-buddy.version` | 1.18.11 | 1.18.12 | #9018 | | `com.puppycrawl.tools:checkstyle` | 13.9.0 | 14.0.0 | #9039 | | `com.fasterxml.jackson:jackson-bom` | 2.22.1 | 2.22.2 | #9032 | | `com.fasterxml.jackson.core:jackson-databind` | 2.22.1 | 2.22.2 | #9026 | | `com.fasterxml.woodstox:woodstox-core` | 7.2.1 | 7.2.2 | #9028 | | `com.github.luben:zstd-jni` | 1.5.7-12 | 1.5.7-15 | #9034 | | `io.netty:netty-bom` | 4.2.16.Final | 4.2.17.Final | #9022 | | `jetty.version` | 12.1.11 | 12.1.12 | #9019 | | `metrics.version` | 4.2.39 | 4.2.40 | #9021 | | `netty-tcnative.version` | 2.0.81.Final | 2.0.82.Final | #9027 | | `org.apache.avro:avro` | 1.12.1 | 1.12.2 | #9020 | | `org.apache.commons:commons-collections4` | 4.5.0 | 4.6.0 | #9030 | | `org.apache.xbean:xbean-spring` | 4.31 | 5.0.0 | #9038 | | `org.jctools:jctools-core` | 4.0.6 | 4.0.7 | #9023 | | `org.junit:junit-bom` | 6.1.2 | 6.1.3 | #9031 | | `org.objenesis:objenesis` | 3.5 | 3.6 | #9025 | | `redis.clients:jedis` | 7.5.3 | 8.0.1 | #9033 | | `spring.version` | 7.0.8 | 7.0.9 | #9029 | ### npm (`storm-webapp`) | Dependency | From | To | PR | | --- | --- | --- | --- | | `cytoscape` | 3.34.0 | 3.34.2 | #9063 | | `cytoscape-dagre` | 4.0.0 | 4.0.1 | #9058 | | `datatables.net` | 3.0.0 | 3.0.2 | #9060 | | `datatables.net-bs5` | 3.0.0 | 3.0.2 | #9057 | | `datatables.net-dt` | 3.0.0 | 3.0.2 | #9055 | | `js-yaml` | 5.2.2 | 5.4.1 | #9059 | | `vis-data` | 8.0.4 | 8.0.5 | #9061 | | `vis-network` | 10.1.0 | 10.1.2 | #9056 | | `css-loader` (dev) | 7.1.4 | 7.1.5 | #9065 | | `cypress` (dev) | 15.19.0 | 15.21.1 | #9054 | | `start-server-and-test` (dev) | 3.0.11 | 3.0.12 | #9066 | | `webpack` (dev) | 5.109.2 | 5.110.1 | #9062 | | `webpack-cli` (dev) | 7.2.2 | 7.2.3 | #9064 | ### Not included - **Guava 33.6.0-jre → 33.7.1-jre** (#9036, #9052) — fails `dedup-libs` in the binary distribution: Guava 33.7.1 pulls in `jspecify` 1.0.1 while the daemon classpath still resolves `jspecify` 1.0.0, and the packaging step refuses to assemble shadowed jars. Needs `jspecify` aligned first, so it is kept out of this branch. ### Notes - The `/examples` Dependabot PRs (#9035, #9037, #9040–#9051, #9053) target the same properties in the root `pom.xml` as their counterparts above, so they are already covered here and can be closed once this lands. - The `datatables.net*` lockfile entries were merged by hand: with `datatables.net`, `-dt` and `-bs5` all at 3.0.2 the nested `node_modules/datatables.net*/node_modules/datatables.net` copies are redundant and were dropped, leaving a single hoisted 3.0.2 entry. - The build failure originally reported on #9057 was a Maven Central 502 while resolving `junit-jupiter-engine`, not a real breakage. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
