Skip to content

chore(deps): bump the gradle-dependencies group with 7 updates#890

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/gradle/gradle-dependencies-08eaff1a26
Open

chore(deps): bump the gradle-dependencies group with 7 updates#890
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/gradle/gradle-dependencies-08eaff1a26

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 13, 2026

Copy link
Copy Markdown
Contributor

Bumps the gradle-dependencies group with 7 updates:

Package From To
org.joml:joml 1.10.8 1.10.9
io.netty:netty-transport-classes-epoll 4.2.14.Final 4.2.15.Final
io.netty:netty-transport-classes-kqueue 4.2.14.Final 4.2.15.Final
com.github.oshi:oshi-core 7.2.1 7.3.1
com.jetbrains.intellij.java:java-gui-forms-rt 261.24374.191 261.25134.147
io.sentry:sentry-log4j2 8.43.0 8.43.2
com.gorylenko.gradle-git-properties 3.0.3 4.0.1

Updates org.joml:joml from 1.10.8 to 1.10.9

Release notes

Sourced from org.joml:joml's releases.

1.10.9

Additions

Fixes

Miscellaneous

Commits
  • faf9eef New release version 1.10.9
  • 9cd019f Bump actions/checkout from 6.0.2 to 6.0.3 (#397)
  • e5048ab fix: Matrix4.perspectiveFrustumSlice()
  • 7ea233f Bump zizmorcore/zizmor-action from 0.5.3 to 0.5.6 (#396)
  • fdb98a7 Fix: Matrix4.normalOrthonormal()
  • 92d64dc Fix: Matrix4x3.pick()
  • 3f63dc2 Fix: Matrix4x3.rotateAroundAffine() aliasing bug
  • daead21 Fix: RayAabIntersection.test()
  • 55b478a Add JSpecify Nullable marks (#387)
  • 3ac7c75 Fix Quaternion.rotationTo/rotateTo()
  • Additional commits viewable in compare view

Updates io.netty:netty-transport-classes-epoll from 4.2.14.Final to 4.2.15.Final

Release notes

Sourced from io.netty:netty-transport-classes-epoll's releases.

netty-4.2.15.Final

Security fixes

  • CVE-2026-48059: memory exhaustion in io.netty:netty-codec-haproxy (high).
  • CVE-2026-47691: DNS cache poisoning in io.netty:netty-resolver-dns (high).
  • CVE-2026-50560: DDoS in io.netty:netty-codec-http2.
  • CVE-2026-50011: memory exhaustion in io.netty:netty-codec-redis (high).
  • CVE-2026-44250: memory exhaustion in io.netty:netty-codec-redis (high).
  • CVE-2026-44890: memory exhaustion in io.netty:netty-codec-redis (high).
  • CVE-2026-50009: information disclosure and denial of service in io.netty:netty-codec-classes-quic.
  • CVE-2026-44249: IPv6 subnet filter bypass in io.netty:netty-handler (high).
  • CVE-2026-50020: request smuggling in io.netty:netty-codec-http.
  • CVE-2026-44892: memory exhaustion in io.netty:netty-codec-http3 (high).
  • CVE-2026-44893: memory leak in io.netty:netty-codec-haproxy (high).
  • CVE-2026-44894: traffic amplification in io.netty:netty-codec-classes-quic (high).
  • CVE-2026-50010: TLS hostname verification accidentally disabled in io.netty:netty-handler (high).
  • CVE-2026-45673: DNS cache poisoning in io.netty:netty-resolver-dns.
  • CVE-2026-45416: excessive memory usage from SNIHandler in io.netty:netty-handler (high).
  • CVE-2026-45536: file descriptor leak in io.netty:netty-transport-native-epoll and io.netty:netty-transport-native-kqueue.
  • CVE-2026-45674: DNS cache poisoning in io.netty:netty-resolver-dns (high).
  • CVE-2026-46340: memory exhaustion in io.netty:netty-transport-sctp (high).
  • CVE-2026-47244: denial of service in io.netty:netty-codec-http2.
  • CVE-2026-48006: memory exhaustion in io.netty:netty-codec-redis (high).
  • CVE-2026-48748: memory exhaustion in io.netty:netty-codec-http3 (high).
  • CVE-2026-48043: memory exhaustion in io.netty:netty-codec-http2.

What's Changed

New Contributors

Full Changelog: netty/netty@netty-4.2.14.Final...netty-4.2.15.Final

Commits
  • a41f7b2 [maven-release-plugin] prepare release netty-4.2.15.Final
  • 2394530 Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...
  • 0bd1657 Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (#16850)
  • 76291f5 Fix SCTP and Redis tests (#16893)
  • e067b6e Fix revapi warnings (#16885)
  • 5a52600 Pass maxAllocation to Brotli and Zstd decoders (#16844)
  • 541add0 Merge commit from fork
  • 270800e Merge commit from fork
  • 3d45a1e Merge commit from fork
  • 75127ca Merge commit from fork
  • Additional commits viewable in compare view

Updates io.netty:netty-transport-classes-kqueue from 4.2.14.Final to 4.2.15.Final

Release notes

Sourced from io.netty:netty-transport-classes-kqueue's releases.

netty-4.2.15.Final

Security fixes

  • CVE-2026-48059: memory exhaustion in io.netty:netty-codec-haproxy (high).
  • CVE-2026-47691: DNS cache poisoning in io.netty:netty-resolver-dns (high).
  • CVE-2026-50560: DDoS in io.netty:netty-codec-http2.
  • CVE-2026-50011: memory exhaustion in io.netty:netty-codec-redis (high).
  • CVE-2026-44250: memory exhaustion in io.netty:netty-codec-redis (high).
  • CVE-2026-44890: memory exhaustion in io.netty:netty-codec-redis (high).
  • CVE-2026-50009: information disclosure and denial of service in io.netty:netty-codec-classes-quic.
  • CVE-2026-44249: IPv6 subnet filter bypass in io.netty:netty-handler (high).
  • CVE-2026-50020: request smuggling in io.netty:netty-codec-http.
  • CVE-2026-44892: memory exhaustion in io.netty:netty-codec-http3 (high).
  • CVE-2026-44893: memory leak in io.netty:netty-codec-haproxy (high).
  • CVE-2026-44894: traffic amplification in io.netty:netty-codec-classes-quic (high).
  • CVE-2026-50010: TLS hostname verification accidentally disabled in io.netty:netty-handler (high).
  • CVE-2026-45673: DNS cache poisoning in io.netty:netty-resolver-dns.
  • CVE-2026-45416: excessive memory usage from SNIHandler in io.netty:netty-handler (high).
  • CVE-2026-45536: file descriptor leak in io.netty:netty-transport-native-epoll and io.netty:netty-transport-native-kqueue.
  • CVE-2026-45674: DNS cache poisoning in io.netty:netty-resolver-dns (high).
  • CVE-2026-46340: memory exhaustion in io.netty:netty-transport-sctp (high).
  • CVE-2026-47244: denial of service in io.netty:netty-codec-http2.
  • CVE-2026-48006: memory exhaustion in io.netty:netty-codec-redis (high).
  • CVE-2026-48748: memory exhaustion in io.netty:netty-codec-http3 (high).
  • CVE-2026-48043: memory exhaustion in io.netty:netty-codec-http2.

What's Changed

New Contributors

Full Changelog: netty/netty@netty-4.2.14.Final...netty-4.2.15.Final

Commits
  • a41f7b2 [maven-release-plugin] prepare release netty-4.2.15.Final
  • 2394530 Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...
  • 0bd1657 Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (#16850)
  • 76291f5 Fix SCTP and Redis tests (#16893)
  • e067b6e Fix revapi warnings (#16885)
  • 5a52600 Pass maxAllocation to Brotli and Zstd decoders (#16844)
  • 541add0 Merge commit from fork
  • 270800e Merge commit from fork
  • 3d45a1e Merge commit from fork
  • 75127ca Merge commit from fork
  • Additional commits viewable in compare view

Updates io.netty:netty-transport-classes-kqueue from 4.2.14.Final to 4.2.15.Final

Release notes

Sourced from io.netty:netty-transport-classes-kqueue's releases.

netty-4.2.15.Final

Security fixes

  • CVE-2026-48059: memory exhaustion in io.netty:netty-codec-haproxy (high).
  • CVE-2026-47691: DNS cache poisoning in io.netty:netty-resolver-dns (high).
  • CVE-2026-50560: DDoS in io.netty:netty-codec-http2.
  • CVE-2026-50011: memory exhaustion in io.netty:netty-codec-redis (high).
  • CVE-2026-44250: memory exhaustion in io.netty:netty-codec-redis (high).
  • CVE-2026-44890: memory exhaustion in io.netty:netty-codec-redis (high).
  • CVE-2026-50009: information disclosure and denial of service in io.netty:netty-codec-classes-quic.
  • CVE-2026-44249: IPv6 subnet filter bypass in io.netty:netty-handler (high).
  • CVE-2026-50020: request smuggling in io.netty:netty-codec-http.
  • CVE-2026-44892: memory exhaustion in io.netty:netty-codec-http3 (high).
  • CVE-2026-44893: memory leak in io.netty:netty-codec-haproxy (high).
  • CVE-2026-44894: traffic amplification in io.netty:netty-codec-classes-quic (high).
  • CVE-2026-50010: TLS hostname verification accidentally disabled in io.netty:netty-handler (high).
  • CVE-2026-45673: DNS cache poisoning in io.netty:netty-resolver-dns.
  • CVE-2026-45416: excessive memory usage from SNIHandler in io.netty:netty-handler (high).
  • CVE-2026-45536: file descriptor leak in io.netty:netty-transport-native-epoll and io.netty:netty-transport-native-kqueue.
  • CVE-2026-45674: DNS cache poisoning in io.netty:netty-resolver-dns (high).
  • CVE-2026-46340: memory exhaustion in io.netty:netty-transport-sctp (high).
  • CVE-2026-47244: denial of service in io.netty:netty-codec-http2.
  • CVE-2026-48006: memory exhaustion in io.netty:netty-codec-redis (high).
  • CVE-2026-48748: memory exhaustion in io.netty:netty-codec-http3 (high).
  • CVE-2026-48043: memory exhaustion in io.netty:netty-codec-http2.

What's Changed

New Contributors

Full Changelog: netty/netty@netty-4.2.14.Final...netty-4.2.15.Final

Commits
  • a41f7b2 [maven-release-plugin] prepare release netty-4.2.15.Final
  • 2394530 Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...
  • 0bd1657 Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (#16850)
  • 76291f5 Fix SCTP and Redis tests (#16893)
  • e067b6e Fix revapi warnings (#16885)
  • 5a52600 Pass maxAllocation to Brotli and Zstd decoders (#16844)
  • 541add0 Merge commit from fork
  • 270800e Merge commit from fork
  • 3d45a1e Merge commit from fork
  • 75127ca Merge commit from fork
  • Additional commits viewable in compare view

Updates com.github.oshi:oshi-core from 7.2.1 to 7.3.1

Release notes

Sourced from com.github.oshi:oshi-core's releases.

Release 7.3.1

New Features
  • #3350: Add AIX support to the FFM (oshi-core-ffm) implementation - @​dbwiddis.
  • #3360: Add NetBSD support to the FFM (oshi-core-ffm) implementation - @​dbwiddis.
  • #3362: Add DragonFly BSD support to the FFM (oshi-core-ffm) implementation - @​dbwiddis.
Bug Fixes and Improvements
  • #3349: Fix AIX Uptime.queryUpTime() regex to accept the mins suffix that appears in the first hour past each day boundary - @​dbwiddis.
  • #3358: Add macOS 27 (Golden Gate) codename mapping - @​dbwiddis.
  • #3365: Allow SystemInfoProvider SPI discovery on the class path - @​dbwiddis.
  • #3373: Export the oshi package from oshi-core in the OSGi bundle so the documented new oshi.SystemInfo() entry point is usable in OSGi environments - @​dbwiddis.

Full change log

Release 7.3.0

New Features
Bug Fixes and Improvements

Full change log

Changelog

Sourced from com.github.oshi:oshi-core's changelog.

7.3.0 (2026-06-06), 7.3.1 (2026-06-11)

New Features
Bug Fixes and Improvements
  • #3320: Update to JNA 5.19.0 - @​dbwiddis.
  • #3349: Fix AIX Uptime.queryUpTime() regex to accept the mins suffix that appears in the first hour past each day boundary - @​dbwiddis.
  • #3358: Add macOS 27 (Golden Gate) codename mapping - @​dbwiddis.
  • #3365: Allow SystemInfoProvider SPI discovery on the class path - @​dbwiddis.
  • #3373: Export the oshi package from oshi-core in the OSGi bundle so the documented new oshi.SystemInfo() entry point is usable in OSGi environments - @​dbwiddis.
Commits
  • 6cc9fb1 [maven-release-plugin] prepare release oshi-parent-7.3.1
  • e46b719 7.3.1 Release
  • ad9fc5f Export oshi package from oshi-core OSGi bundle (#3373)
  • 68bf11a Unify ps-based BSD OSProcess parsing onto a shared BsdOSProcess base (#3372)
  • bddf85f Extract a shared BsdOSProcess base to de-duplicate the BSD OSProcess classes ...
  • 67a4a27 Extract Solaris PowerSource common base (JNA/FFM parity, part 3) (#3369)
  • 49441fd Extract Solaris hardware common abstract bases (JNA/FFM parity, part 2) (#3368)
  • 6e7edc8 Extract Solaris common abstract bases for JNA/FFM parity (#3367)
  • 5b99f86 Mechanical Sonar sweep: try-with-resources, unnamed patterns, Stream.toList()...
  • fef03c6 Allow SystemInfoProvider SPI discovery on the class path (#3365)
  • Additional commits viewable in compare view

Updates com.jetbrains.intellij.java:java-gui-forms-rt from 261.24374.191 to 261.25134.147

Commits

Updates io.sentry:sentry-log4j2 from 8.43.0 to 8.43.2

Release notes

Sourced from io.sentry:sentry-log4j2's releases.

8.43.2

Improvements

  • Improve SDK init performance by replacing java.net.URI with custom string parsing for DSN (#5448)
  • Remove unnecessary boxing to improve performance (#5520)

Fixes

  • Session Replay: Fix VerifyError in Compose masking under DexGuard/R8 obfuscation (#5507)
  • Session Replay: Fix Compose view masking not working on obfuscated/minified builds (#5503)

8.43.1

Fixes

  • Session Replay: Fix replay recording freezing on screens with continuous animations (#5489)
  • Session Replay: Populate trace_ids in replay events to enable searching replays by trace ID (#5473)
Changelog

Sourced from io.sentry:sentry-log4j2's changelog.

8.43.2

Improvements

  • Improve SDK init performance by replacing java.net.URI with custom string parsing for DSN (#5448)
  • Remove unnecessary boxing to improve performance (#5520)

Fixes

  • Session Replay: Fix VerifyError in Compose masking under DexGuard/R8 obfuscation (#5507)
  • Session Replay: Fix Compose view masking not working on obfuscated/minified builds (#5503)

8.43.1

Fixes

  • Session Replay: Fix replay recording freezing on screens with continuous animations (#5489)
  • Session Replay: Populate trace_ids in replay events to enable searching replays by trace ID (#5473)
Commits
  • b88ded9 release: 8.43.2
  • 3594cd9 ref(core): Reduce unnecessary boxing and redundant null checks (JAVA-554) (#5...
  • 0456f5c chore(deps): bump the github-actions group across 1 directory with 3 updates ...
  • 887fd58 ci(spring-matrix): Replace sed hacks with targeted Gradle builds (#5397)
  • 29f120b perf: Replace java.net.URI with custom string parsing in Dsn (#5448)
  • 105d667 fix(license): Attribute vendored AndroidX Compose UI code in Session Replay (...
  • 80199f8 docs(ai): Refresh AGENTS.md module list and fix coding.mdc command (#5517)
  • 8c7718c fix(replay): Fix VerifyError in Compose masking under DexGuard/R8 obfuscation...
  • abcd889 fix(replay): Fix Compose masking on obfuscated/minified builds (#5503)
  • b936425 chore(deps): bump the github-actions group with 3 updates (#5498)
  • Additional commits viewable in compare view

Updates com.gorylenko.gradle-git-properties from 3.0.3 to 4.0.1

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gradle-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [org.joml:joml](https://github.com/JOML-CI/JOML) | `1.10.8` | `1.10.9` |
| [io.netty:netty-transport-classes-epoll](https://github.com/netty/netty) | `4.2.14.Final` | `4.2.15.Final` |
| [io.netty:netty-transport-classes-kqueue](https://github.com/netty/netty) | `4.2.14.Final` | `4.2.15.Final` |
| [com.github.oshi:oshi-core](https://github.com/oshi/oshi) | `7.2.1` | `7.3.1` |
| [com.jetbrains.intellij.java:java-gui-forms-rt](https://github.com/JetBrains/intellij-community) | `261.24374.191` | `261.25134.147` |
| [io.sentry:sentry-log4j2](https://github.com/getsentry/sentry-java) | `8.43.0` | `8.43.2` |
| com.gorylenko.gradle-git-properties | `3.0.3` | `4.0.1` |


Updates `org.joml:joml` from 1.10.8 to 1.10.9
- [Release notes](https://github.com/JOML-CI/JOML/releases)
- [Commits](JOML-CI/JOML@1.10.8...1.10.9)

Updates `io.netty:netty-transport-classes-epoll` from 4.2.14.Final to 4.2.15.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.14.Final...netty-4.2.15.Final)

Updates `io.netty:netty-transport-classes-kqueue` from 4.2.14.Final to 4.2.15.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.14.Final...netty-4.2.15.Final)

Updates `io.netty:netty-transport-classes-kqueue` from 4.2.14.Final to 4.2.15.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.14.Final...netty-4.2.15.Final)

Updates `com.github.oshi:oshi-core` from 7.2.1 to 7.3.1
- [Release notes](https://github.com/oshi/oshi/releases)
- [Changelog](https://github.com/oshi/oshi/blob/master/CHANGELOG.md)
- [Commits](oshi/oshi@oshi-parent-7.2.1...oshi-parent-7.3.1)

Updates `com.jetbrains.intellij.java:java-gui-forms-rt` from 261.24374.191 to 261.25134.147
- [Release notes](https://github.com/JetBrains/intellij-community/releases)
- [Commits](https://github.com/JetBrains/intellij-community/commits)

Updates `io.sentry:sentry-log4j2` from 8.43.0 to 8.43.2
- [Release notes](https://github.com/getsentry/sentry-java/releases)
- [Changelog](https://github.com/getsentry/sentry-java/blob/main/CHANGELOG.md)
- [Commits](getsentry/sentry-java@8.43.0...8.43.2)

Updates `com.gorylenko.gradle-git-properties` from 3.0.3 to 4.0.1

---
updated-dependencies:
- dependency-name: org.joml:joml
  dependency-version: 1.10.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: io.netty:netty-transport-classes-epoll
  dependency-version: 4.2.15.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: io.netty:netty-transport-classes-kqueue
  dependency-version: 4.2.15.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: io.netty:netty-transport-classes-kqueue
  dependency-version: 4.2.15.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: com.github.oshi:oshi-core
  dependency-version: 7.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: com.jetbrains.intellij.java:java-gui-forms-rt
  dependency-version: 261.25134.147
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: io.sentry:sentry-log4j2
  dependency-version: 8.43.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: com.gorylenko.gradle-git-properties
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gradle-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jun 13, 2026
@codacy-production

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants