Bump the minor-patch group across 1 directory with 7 updates #703

dependabot · 2025-12-15T15:20:41Z

Bumps the minor-patch group with 7 updates in the / directory:

Package	From	To
com.sap.cds:cds-services-bom	`3.10.5`	`3.10.7`
com.sap.cds:cds-maven-plugin	`3.10.5`	`3.10.7`
org.mockito:mockito-bom	`5.20.0`	`5.21.0`
ch.qos.logback:logback-classic	`1.5.21`	`1.5.22`
software.amazon.awssdk:s3	`2.39.6`	`2.40.8`
software.amazon.awssdk.crt:aws-crt	`0.40.1`	`0.41.0`
com.google.cloud:google-cloud-storage	`2.60.0`	`2.61.0`

Updates com.sap.cds:cds-services-bom from 3.10.5 to 3.10.7

Updates com.sap.cds:cds-maven-plugin from 3.10.5 to 3.10.7

Updates org.mockito:mockito-bom from 5.20.0 to 5.21.0

Release notes

Sourced from org.mockito:mockito-bom's releases.

v5.21.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.21.0

2025-12-09 - 17 commit(s) by Giulio Longfils, Joshua Selbo, Woongi9, Zylox, dependabot[bot]

Bump graalvm/setup-graalvm from 1.4.3 to 1.4.4 [(#3768)](mockito/mockito#3768)

Bump graalvm/setup-graalvm from 1.4.2 to 1.4.3 [(#3767)](mockito/mockito#3767)

Bump actions/checkout from 5 to 6 [(#3765)](mockito/mockito#3765)

Adds output of matchers to potential mismatch; Fixes #2468 [(#3760)](mockito/mockito#3760)

Forbid mocking WeakReference with inline mock maker [(#3759)](mockito/mockito#3759)

StackOverflowError when mocking WeakReference [(#3758)](mockito/mockito#3758)

Bump actions/upload-artifact from 4 to 5 [(#3756)](mockito/mockito#3756)

Bump graalvm/setup-graalvm from 1.4.1 to 1.4.2 [(#3755)](mockito/mockito#3755)

Support primitives in GenericArrayReturnType. [(#3753)](mockito/mockito#3753)

ClassNotFoundException when stubbing array of primitive type on Android [(#3752)](mockito/mockito#3752)

Bump graalvm/setup-graalvm from 1.4.0 to 1.4.1 [(#3744)](mockito/mockito#3744)

Bump gradle/actions from 4 to 5 [(#3743)](mockito/mockito#3743)

Bump org.graalvm.buildtools.native from 0.11.0 to 0.11.1 [(#3738)](mockito/mockito#3738)

Bump com.diffplug.spotless:spotless-plugin-gradle from 7.2.1 to 8.0.0 [(#3735)](mockito/mockito#3735)

Bump graalvm/setup-graalvm from 1.3.7 to 1.4.0 [(#3734)](mockito/mockito#3734)

Bump org.assertj:assertj-core from 3.27.5 to 3.27.6 [(#3733)](mockito/mockito#3733)

Bump errorprone from 2.41.0 to 2.42.0 [(#3732)](mockito/mockito#3732)

Feat: automatically detect class to mock in mockStatic and mockConstruction [(#3731)](mockito/mockito#3731)

Return completed futures for unstubbed Future/CompletionStage in ReturnsEmptyValues [(#3727)](mockito/mockito#3727)

automatically detect class to mock [(#2779)](mockito/mockito#2779)

Incorrect "has following stubbing(s) with different arguments" message when using Argument Matchers [(#2468)](mockito/mockito#2468)

Commits

09d2230 Bump graalvm/setup-graalvm from 1.4.3 to 1.4.4 (#3768)
df3e0cc Bump graalvm/setup-graalvm from 1.4.2 to 1.4.3 (#3767)
04a6e9f Bump actions/checkout from 5 to 6 (#3765)
756a3cf Add description of matchers to potential mismatch (#3760)
58ba445 Forbid mocking WeakReference with inline mock maker (#3759)
966d600 Bump actions/upload-artifact from 4 to 5 (#3756)
632bf7b Bump graalvm/setup-graalvm from 1.4.1 to 1.4.2 (#3755)
8564b43 Fix primitives support in GenericArrayReturnType for Android (#3753)
bf3a809 Bump graalvm/setup-graalvm from 1.4.0 to 1.4.1 (#3744)
cffddd4 Bump gradle/actions from 4 to 5 (#3743)
Additional commits viewable in compare view

Updates ch.qos.logback:logback-classic from 1.5.21 to 1.5.22

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.5.22

2025-12-11 Release of logback version 1.5.22

• In order to prevent involuntary information leakage, Logback will no longer output the value of a substituted variable, if the variable name contains any of the case-insensitive strings "password", "secret" or "confidential". This problem was reported by Chintan Rohila in issues/986.

• Logback now takes the overridden toString() method of Throwable subclasses into account when printing stack traces. This issue was reported in LOGBACK-543 by Alvin Chee, with a fix provided in PR 404 by Brett Kail.

• Instead of limit-counting guard, Logback now uses a tumbling-window guard to rate limit internal error messages.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 572379aabd2f672b49593e4020696c624541e5b0 associated with the tag v_1.5.22. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits

572379a prepare release 1.5.22
39d17ea fix status printing of variable substitution when the variable name contains ...
75509a9 fix PR 404, LOGBACK-543
8eb9356 remove unused import
6131a3a use a slightly more sophisticated guard for printing status messages
9efca21 add no-args constructor to support various serialization frameworks
1bea580 minor comment edits
bd07fdd update angus, greenmail versions
aef993c start work on 1.5.22-SNAPSHOT
See full diff in compare view

Updates com.sap.cds:cds-maven-plugin from 3.10.5 to 3.10.7

Updates software.amazon.awssdk:s3 from 2.39.6 to 2.40.8

Updates software.amazon.awssdk.crt:aws-crt from 0.40.1 to 0.41.0

Release notes

Sourced from software.amazon.awssdk.crt:aws-crt's releases.

v0.41.0

What's Changed

Support dispatch queue by @sfod in awslabs/aws-crt-java#935

Cleanup log and fix one flakey test by @TingDaoK in awslabs/aws-crt-java#954

Update submodules by @sfod in awslabs/aws-crt-java#955

Migrate to dispatch queue on macos by @sfod in awslabs/aws-crt-java#956

With the update to aws-c-io v0.24.0 macOS will now use Apple's Dispatch Queue, Network Framework, and Secitem to handle network connections and TLS negotiation.

Full Changelog: awslabs/aws-crt-java@v0.40.3...v0.41.0

Fix memory leaks in S3 client and http2 stream manager

What's Changed

Fix memory leaks in S3 client and http2 stream manager by @TingDaoK in awslabs/aws-crt-java#948

Full Changelog: awslabs/aws-crt-java@v0.40.2...v0.40.3

Pick up the fix for the wrong assert

What's Changed

Detach only external threads by @sfod in awslabs/aws-crt-java#940

pick up fix by @TingDaoK in awslabs/aws-crt-java#951

Full Changelog: awslabs/aws-crt-java@v0.40.1...v0.40.2

Commits

32b30eb Migrate to dispatch queue on macos (#956)
b479fa4 Update submodules (#955)
4f98762 Cleanup log and fix one flakey test (#954)
4ad14f2 Support dispatch queue (#935)
c134074 Fix memory leaks in S3 client and http2 stream manager (#948)
4a1675d Pick up the fix for the wrong assert (#951)
f9cb644 Detach only external threads (#940)
See full diff in compare view

Updates com.google.cloud:google-cloud-storage from 2.60.0 to 2.61.0

Release notes

Sourced from com.google.cloud:google-cloud-storage's releases.

v2.61.0

2.61.0 (2025-12-15)

Features

Add support for partial success in ListBuckets for json (#3415) (37ef7f3)

Modifying getters and setters to be more inline with s3 interface. (0a8bbea)

mpu: Breaking change modifying getters and setters in MPU to be more inline with s3 interface. (66d54e2)

Bug Fixes

deps: Update the Java code generator (gapic-generator-java) to 2.64.1 (511ff51)

Dependencies

Update actions/checkout action to v6 (d934ad9)

Update actions/checkout action to v6 (d99dd53)

Update dependency com.google.apis:google-api-services-storage to v1-rev20251118-2.0.0 (f48fa3f)

Update dependency com.google.apis:google-api-services-storage to v1-rev20251118-2.0.0 (#3427) (4612e72)

Update dependency com.google.cloud:sdk-platform-java-config to v3.54.2 (90a71be)

Update dependency com.google.cloud:sdk-platform-java-config to v3.54.2 (#3424) (c989dc3)

Update gcr.io/cloud-devrel-public-resources/storage-testbench docker tag to v0.59.0 (f5d8337)

Update gcr.io/cloud-devrel-public-resources/storage-testbench docker tag to v0.59.0 (5480ce3)

Update googleapis/sdk-platform-java action to v2.64.2 (23494d7)

Update googleapis/sdk-platform-java action to v2.64.2 (#3425) (fad2d7a)

Changelog

Sourced from com.google.cloud:google-cloud-storage's changelog.

2.61.0 (2025-12-15)

Features

Add support for partial success in ListBuckets for json (#3415) (37ef7f3)

Modifying getters and setters to be more inline with s3 interface. (0a8bbea)

mpu: Breaking change modifying getters and setters in MPU to be more inline with s3 interface. (66d54e2)

Bug Fixes

deps: Update the Java code generator (gapic-generator-java) to 2.64.1 (511ff51)

Dependencies

Update actions/checkout action to v6 (d934ad9)

Update actions/checkout action to v6 (d99dd53)

Update dependency com.google.apis:google-api-services-storage to v1-rev20251118-2.0.0 (f48fa3f)

Update dependency com.google.apis:google-api-services-storage to v1-rev20251118-2.0.0 (#3427) (4612e72)

Update dependency com.google.cloud:sdk-platform-java-config to v3.54.2 (90a71be)

Update dependency com.google.cloud:sdk-platform-java-config to v3.54.2 (#3424) (c989dc3)

Update gcr.io/cloud-devrel-public-resources/storage-testbench docker tag to v0.59.0 (f5d8337)

Update gcr.io/cloud-devrel-public-resources/storage-testbench docker tag to v0.59.0 (5480ce3)

Update googleapis/sdk-platform-java action to v2.64.2 (23494d7)

Update googleapis/sdk-platform-java action to v2.64.2 (#3425) (fad2d7a)

Commits

a49751c chore(main): release 2.61.0 (#3392)
d4814af chore: generate libraries at Mon Dec 15 12:16:48 UTC 2025
73f5807 chore(main): release 2.61.0
c5156b8 chore: modifying getters and setters in MPU (#3431)
e3f9638 chore: modifying getters and setters in MPU
4612e72 deps: update dependency com.google.apis:google-api-services-storage to v1-rev...
fad2d7a deps: update googleapis/sdk-platform-java action to v2.64.2 (#3425)
c989dc3 deps: update dependency com.google.cloud:sdk-platform-java-config to v3.54.2 ...
f48fa3f deps: update dependency com.google.apis:google-api-services-storage to v1-rev...
23494d7 deps: update googleapis/sdk-platform-java action to v2.64.2
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-patch group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | com.sap.cds:cds-services-bom | `3.10.5` | `3.10.7` | | com.sap.cds:cds-maven-plugin | `3.10.5` | `3.10.7` | | [org.mockito:mockito-bom](https://github.com/mockito/mockito) | `5.20.0` | `5.21.0` | | [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.21` | `1.5.22` | | software.amazon.awssdk:s3 | `2.39.6` | `2.40.8` | | [software.amazon.awssdk.crt:aws-crt](https://github.com/awslabs/aws-crt-java) | `0.40.1` | `0.41.0` | | [com.google.cloud:google-cloud-storage](https://github.com/googleapis/java-storage) | `2.60.0` | `2.61.0` | Updates `com.sap.cds:cds-services-bom` from 3.10.5 to 3.10.7 Updates `com.sap.cds:cds-maven-plugin` from 3.10.5 to 3.10.7 Updates `org.mockito:mockito-bom` from 5.20.0 to 5.21.0 - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](mockito/mockito@v5.20.0...v5.21.0) Updates `ch.qos.logback:logback-classic` from 1.5.21 to 1.5.22 - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](qos-ch/logback@v_1.5.21...v_1.5.22) Updates `com.sap.cds:cds-maven-plugin` from 3.10.5 to 3.10.7 Updates `software.amazon.awssdk:s3` from 2.39.6 to 2.40.8 Updates `software.amazon.awssdk.crt:aws-crt` from 0.40.1 to 0.41.0 - [Release notes](https://github.com/awslabs/aws-crt-java/releases) - [Commits](awslabs/aws-crt-java@v0.40.1...v0.41.0) Updates `com.google.cloud:google-cloud-storage` from 2.60.0 to 2.61.0 - [Release notes](https://github.com/googleapis/java-storage/releases) - [Changelog](https://github.com/googleapis/java-storage/blob/main/CHANGELOG.md) - [Commits](googleapis/java-storage@v2.60.0...v2.61.0) --- updated-dependencies: - dependency-name: com.sap.cds:cds-services-bom dependency-version: 3.10.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: com.sap.cds:cds-maven-plugin dependency-version: 3.10.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: org.mockito:mockito-bom dependency-version: 5.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: ch.qos.logback:logback-classic dependency-version: 1.5.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: com.sap.cds:cds-maven-plugin dependency-version: 3.10.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: software.amazon.awssdk:s3 dependency-version: 2.40.8 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: software.amazon.awssdk.crt:aws-crt dependency-version: 0.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: com.google.cloud:google-cloud-storage dependency-version: 2.61.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Dec 15, 2025

Merge branch 'main' into dependabot/maven/minor-patch-18cfd1ff0a

977aadb

Schmarvinius temporarily deployed to pr-approval December 18, 2025 14:54 — with GitHub Actions Inactive

Merge branch 'main' into dependabot/maven/minor-patch-18cfd1ff0a

9f15f5e

Schmarvinius temporarily deployed to pr-approval December 18, 2025 15:11 — with GitHub Actions Inactive

Schmarvinius approved these changes Dec 18, 2025

View reviewed changes

Merge branch 'main' into dependabot/maven/minor-patch-18cfd1ff0a

561a56d

Schmarvinius temporarily deployed to pr-approval December 18, 2025 15:17 — with GitHub Actions Inactive

Schmarvinius merged commit c400b0d into main Dec 18, 2025
10 checks passed

Schmarvinius deleted the dependabot/maven/minor-patch-18cfd1ff0a branch December 18, 2025 15:40

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the minor-patch group across 1 directory with 7 updates #703

Bump the minor-patch group across 1 directory with 7 updates #703

Uh oh!

dependabot bot commented on behalf of github Dec 15, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Bump the minor-patch group across 1 directory with 7 updates #703

Bump the minor-patch group across 1 directory with 7 updates #703

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 15, 2025

v5.21.0

5.21.0

Logback 1.5.22

v0.41.0

What's Changed

Fix memory leaks in S3 client and http2 stream manager

What's Changed

Pick up the fix for the wrong assert

What's Changed

v2.61.0

2.61.0 (2025-12-15)

Features

Bug Fixes

Dependencies

2.61.0 (2025-12-15)

Features

Bug Fixes

Dependencies

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants