Skip to content

chore(deps): bump the maven-minor group with 5 updates - #561

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-minor-3312d8540d
Closed

chore(deps): bump the maven-minor group with 5 updates#561
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-minor-3312d8540d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2025

Copy link
Copy Markdown
Contributor

Bumps the maven-minor group with 5 updates:

Package From To
org.mariadb.jdbc:mariadb-java-client 3.5.4 3.5.5
com.zaxxer:HikariCP 7.0.0 7.0.1
org.flywaydb:flyway-core 11.10.5 11.11.0
org.flywaydb:flyway-mysql 11.10.5 11.11.0
io.sentry:sentry-log4j2 8.18.0 8.19.0

Updates org.mariadb.jdbc:mariadb-java-client from 3.5.4 to 3.5.5

Release notes

Sourced from org.mariadb.jdbc:mariadb-java-client's releases.

MariaDB Connector/Java 3.5.5

3.5.5 (Aug 2025)

Full Changelog

Issues Resolved

  • CONJ-1265 - ensure rollback and release savepoint operation to be sent to server, even when there is no transaction in progress
  • CONJ-1270 - forceConnectionTimeZoneToSession doesn't always set the timezone to server
Changelog

Sourced from org.mariadb.jdbc:mariadb-java-client's changelog.

Commits
  • 547ae48 bump 3.5.5
  • e961ff4 [CONJ-1265] ensure rollback and release savepoint operation to be send to server
  • 6e76e31 [CONJ-1270] forceConnectionTimeZoneToSession doesn't always set timezone to s...
  • 74f8a76 [misc] bump 3.5.5-SNAPSHOT version
  • e3b419f [misc] client side parsing removing "//" single line comment
  • See full diff in compare view

Updates com.zaxxer:HikariCP from 7.0.0 to 7.0.1

Changelog

Sourced from com.zaxxer:HikariCP's changelog.

HikariCP Changes

Changes in 7.0.1

  • merged #2346 fix regression with setSchema behavior

  • decrease thread yield frequency in ConcurrentBag.requite()

Changes in 7.0.0

  • merged #2340 NoSuchMethodException error that is thrown when setting a metric registry, fixes to UtilityElf reflection code to use the correct method signature.

  • fixed #1294 add support for HikariCredentialsProvider class

  • fixed #2265 bail out of the pool filling loop if the thread is interrupted

Changes in 6.3.2

  • fixed #2342 restore module-info.class to jar file, which was lost in 6.3.1

  • fixed #2256 add support for legacy override of getUsername()/getPassword() of HikariDataSource. See project page for documentation of system property com.zaxxer.hikari.legacy.supportUserPassDataSourceOverride.

  • fixed #2323 right or wrong (wrt driver behavior) return to previous Connection.get/setSchema behavior

  • fixed #2288 upgrade dependencies and fix build warnings

Changes in 6.3.1

  • fixed #2315 source jar contains also binary .class files and missing some .java files

  • fixed #2307 remove improper hardcoded timout, use validationTimeout

  • fixed #2305 keep properties key and values as is rather than forcing stringification. Also fixes #2286 and #2304

  • upgraded various maven plugin dependencies to latest versions

Changes in 6.3.0

  • increase keepaliveTime variance from 10% to 20%

  • merged #2266 support duration values for configuration from properties, such as 10ms, 20s, 30m, 40h or 50d

  • merged #2284 align logs from HikariPool.logPoolState()

  • merged #2285 set default value for maxIdle in HikariConfig constructor (no functional change)

  • merged #2294 Allow setting String[] and int[] properties (useful for pgjdbc HA configuration)

... (truncated)

Commits
  • 217bcc8 [maven-release-plugin] prepare release HikariCP-7.0.1
  • 29ad2f4 update changes log
  • b81bbc9 fixes #2323 always reset schema upon connection retrieval (#2346)
  • ee5328d decrease yield() frequency during direct hand-off attempts
  • 1da3a33 Update README.md
  • 17c4b33 Update README.md
  • 1053fdf Update README.md for v7.0.0
  • 65afe27 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates org.flywaydb:flyway-core from 11.10.5 to 11.11.0

Release notes

Sourced from org.flywaydb:flyway-core's releases.

Flyway 11.11.0

See release notes here

Commits

Updates org.flywaydb:flyway-mysql from 11.10.5 to 11.11.0

Updates org.flywaydb:flyway-mysql from 11.10.5 to 11.11.0

Updates io.sentry:sentry-log4j2 from 8.18.0 to 8.19.0

Release notes

Sourced from io.sentry:sentry-log4j2's releases.

8.19.0

Features

  • Add a isEnableSystemEventBreadcrumbsExtras option to disable reporting system events extras for breadcrumbs (#4625)

Improvements

  • Session Replay: Use main thread looper to schedule replay capture (#4542)
  • Use single LifecycleObserver and multi-cast it to the integrations interested in lifecycle states (#4567)
  • Add sentry.origin attribute to logs (#4618)
    • This helps identify which integration captured a log event
  • Prewarm SentryExecutorService for better performance at runtime (#4606)

Fixes

  • Cache network capabilities and status to reduce IPC calls (#4560)
  • Deduplicate battery breadcrumbs (#4561)
  • Remove unused method in ManifestMetadataReader (#4585)
  • Have single NetworkCallback registered at a time to reduce IPC calls (#4562)
  • Do not register for SystemEvents and NetworkCallbacks immediately when launched with non-foreground importance (#4579)
  • Limit ProGuard keep rules for native methods within sentry-android-ndk to the io.sentry.** namespace. (#4427)
    • If you relied on the Sentry SDK to keep native method names for JNI compatibility within your namespace, please review your ProGuard rules and ensure the configuration still works. Especially when you're not consuming any of the default Android proguard rules (proguard-android.txt or proguard-android-optimize.txt) the following config should be present:
    -keepclasseswithmembernames class * {
      native <methods>;
    }
    
  • Fix abstract method error in SentrySupportSQLiteDatabase (#4597)
  • Ensure frame metrics listeners are registered/unregistered on the main thread (#4582)
  • Do not report cached events as lost (#4575)
    • Previously events were recorded as lost early despite being retried later through the cache
  • Move and flush unfinished previous session on init (#4624)
    • This removes the need for unnecessary blocking our background queue for 15 seconds in the case of a background app start
  • Switch to compileOnly dependency for compose-ui-material (#4630)
    • This fixes StackOverflowError when using OSS Licenses plugin

Dependencies

Changelog

Sourced from io.sentry:sentry-log4j2's changelog.

8.19.0

Features

  • Add a isEnableSystemEventBreadcrumbsExtras option to disable reporting system events extras for breadcrumbs (#4625)

Improvements

  • Session Replay: Use main thread looper to schedule replay capture (#4542)
  • Use single LifecycleObserver and multi-cast it to the integrations interested in lifecycle states (#4567)
  • Add sentry.origin attribute to logs (#4618)
    • This helps identify which integration captured a log event
  • Prewarm SentryExecutorService for better performance at runtime (#4606)

Fixes

  • Cache network capabilities and status to reduce IPC calls (#4560)
  • Deduplicate battery breadcrumbs (#4561)
  • Remove unused method in ManifestMetadataReader (#4585)
  • Have single NetworkCallback registered at a time to reduce IPC calls (#4562)
  • Do not register for SystemEvents and NetworkCallbacks immediately when launched with non-foreground importance (#4579)
  • Limit ProGuard keep rules for native methods within sentry-android-ndk to the io.sentry.** namespace. (#4427)
    • If you relied on the Sentry SDK to keep native method names for JNI compatibility within your namespace, please review your ProGuard rules and ensure the configuration still works. Especially when you're not consuming any of the default Android proguard rules (proguard-android.txt or proguard-android-optimize.txt) the following config should be present:
    -keepclasseswithmembernames class * {
      native <methods>;
    }
    
  • Fix abstract method error in SentrySupportSQLiteDatabase (#4597)
  • Ensure frame metrics listeners are registered/unregistered on the main thread (#4582)
  • Do not report cached events as lost (#4575)
    • Previously events were recorded as lost early despite being retried later through the cache
  • Move and flush unfinished previous session on init (#4624)
    • This removes the need for unnecessary blocking our background queue for 15 seconds in the case of a background app start
  • Switch to compileOnly dependency for compose-ui-material (#4630)
    • This fixes StackOverflowError when using OSS Licenses plugin

Dependencies

Commits
  • b160f57 release: 8.19.0
  • 73a2923 chore(breadcrumbs): Add an option to disable reporting system events extras f...
  • 5625283 fix(sessions): Move and flush unfinished previous session on init (#4624)
  • 7f16a2c fix(compose): Switch to compileOnly dependency for compose-ui-material (#4630)
  • 4d4e343 chore: update scripts/update-sentry-native-ndk.sh to 0.10.0 (#4623)
  • 33a1039 build(deps): bump gradle/actions from 4.4.1 to 4.4.2 (#4629)
  • b2f3b49 build(deps): bump actions/create-github-app-token from 2.0.6 to 2.1.0 (#4628)
  • 6e82189 build(deps): bump github/codeql-action from 3.29.2 to 3.29.8 (#4627)
  • 8fe8644 build(deps): bump actions/download-artifact from 4 to 5 (#4626)
  • e2b7f44 Do not report cached events as lost (#4575)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven-minor group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [org.mariadb.jdbc:mariadb-java-client](https://github.com/mariadb-corporation/mariadb-connector-j) | `3.5.4` | `3.5.5` |
| [com.zaxxer:HikariCP](https://github.com/brettwooldridge/HikariCP) | `7.0.0` | `7.0.1` |
| [org.flywaydb:flyway-core](https://github.com/flyway/flyway) | `11.10.5` | `11.11.0` |
| org.flywaydb:flyway-mysql | `11.10.5` | `11.11.0` |
| [io.sentry:sentry-log4j2](https://github.com/getsentry/sentry-java) | `8.18.0` | `8.19.0` |


Updates `org.mariadb.jdbc:mariadb-java-client` from 3.5.4 to 3.5.5
- [Release notes](https://github.com/mariadb-corporation/mariadb-connector-j/releases)
- [Changelog](https://github.com/mariadb-corporation/mariadb-connector-j/blob/main/CHANGELOG.md)
- [Commits](mariadb-corporation/mariadb-connector-j@3.5.4...3.5.5)

Updates `com.zaxxer:HikariCP` from 7.0.0 to 7.0.1
- [Changelog](https://github.com/brettwooldridge/HikariCP/blob/dev/CHANGES)
- [Commits](brettwooldridge/HikariCP@HikariCP-7.0.0...HikariCP-7.0.1)

Updates `org.flywaydb:flyway-core` from 11.10.5 to 11.11.0
- [Release notes](https://github.com/flyway/flyway/releases)
- [Commits](flyway/flyway@flyway-11.10.5...flyway-11.11.0)

Updates `org.flywaydb:flyway-mysql` from 11.10.5 to 11.11.0

Updates `org.flywaydb:flyway-mysql` from 11.10.5 to 11.11.0

Updates `io.sentry:sentry-log4j2` from 8.18.0 to 8.19.0
- [Release notes](https://github.com/getsentry/sentry-java/releases)
- [Changelog](https://github.com/getsentry/sentry-java/blob/main/CHANGELOG.md)
- [Commits](getsentry/sentry-java@8.18.0...8.19.0)

---
updated-dependencies:
- dependency-name: org.mariadb.jdbc:mariadb-java-client
  dependency-version: 3.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor
- dependency-name: com.zaxxer:HikariCP
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor
- dependency-name: org.flywaydb:flyway-core
  dependency-version: 11.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor
- dependency-name: org.flywaydb:flyway-mysql
  dependency-version: 11.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor
- dependency-name: org.flywaydb:flyway-mysql
  dependency-version: 11.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor
- dependency-name: io.sentry:sentry-log4j2
  dependency-version: 8.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 12, 2025
@dependabot @github

dependabot Bot commented on behalf of github Aug 18, 2025

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 18, 2025
@dependabot
dependabot Bot deleted the dependabot/maven/maven-minor-3312d8540d branch August 18, 2025 22:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants