Bump the gradle-dependencies group with 7 updates #898

dependabot · 2025-09-22T16:25:04Z

Bumps the gradle-dependencies group with 7 updates:

Package	From	To
com.google.code.gson:gson	`2.13.1`	`2.13.2`
com.squareup.okhttp3:okhttp	`4.12.0`	`5.1.0`
org.junit:junit-bom	`5.13.0`	`5.13.4`
org.junit.jupiter:junit-jupiter	`5.13.0`	`5.13.4`
com.squareup.okio:okio	`3.12.0`	`3.16.0`
com.fasterxml.jackson.core:jackson-databind	`2.19.0`	`2.20.0`
org.projectlombok:lombok	`1.18.38`	`1.18.42`

Updates com.google.code.gson:gson from 2.13.1 to 2.13.2

Release notes

Sourced from com.google.code.gson:gson's releases.

Gson 2.13.2

The main changes in this release are just newer dependencies.

What's Changed

Improved packaging of JPMS module declaration in Gson jar
This fixes an issue where Eclipse and VS Code users could not refer to the Gson module name com.google.gson. See issue google/gson#2679.

Remove internal class GsonPreconditions by @Marcono1234 in google/gson#2879

Switch to using central-publishing-maven-plugin by @eamonnmcmanus in google/gson#2900

New Contributors

@MukjepScarlet made their first contribution in google/gson#2852

@ChrisCraik made their first contribution in google/gson#2856

Full Changelog: google/gson@gson-parent-2.13.1...gson-parent-2.13.2

Commits

686fad7 [maven-release-plugin] prepare release gson-parent-2.13.2
c2d252a Switch to using central-publishing-maven-plugin. (#2900)
69cb755 Bump the github-actions group with 5 updates (#2894)
ea552c2 Bump the maven group across 1 directory with 3 updates (#2898)
fdc616d Set top-level permissions for CodeQL workflow (#2889)
9334715 Create scorecard.yml (#2888)
f7de5c2 Bump the maven group with 8 updates (#2885)
8c23cd3 Update sources to satisfy a new Error Prone check. (#2887)
5eab3ed Bump the github-actions group with 2 updates (#2886)
5f5c200 Bump the maven group across 1 directory with 10 updates (#2872)
Additional commits viewable in compare view

Updates com.squareup.okhttp3:okhttp from 4.12.0 to 5.1.0

Changelog

Sourced from com.squareup.okhttp3:okhttp's changelog.

Version 5.1.0

2025-07-07

New: Response.peekTrailers(). When we changed Response.trailers() to block instead of throwing in 5.0.0, we inadvertently removed the ability for callers to peek the trailers (by catching the IllegalStateException if they weren't available). This new API restores that capability.

Fix: Don't crash on trailers() if the response doesn't have a body. We broke [Retrofit] users who read the trailers on the raw() OkHttp response, after its body was decoded.

Version 5.0.0

2025-07-02

This is our first stable release of OkHttp since 2023. Here's the highlights if you're upgrading from OkHttp 4.x:

OkHttp is now packaged as separate JVM and Android artifacts. This allows us to offer platform-specific features and optimizations. If your build system handles [Gradle module metadata], this change should be automatic.

MockWebServer has a new coordinate and package name. We didn’t like that our old artifact depends on JUnit 4 so the new one doesn’t. It also has a better API built on immutable values. (We intend to continue publishing the old okhttp3.mockwebserver artifact so there’s no urgency to migrate.)

Coordinate Package Name Description

com.squareup.okhttp3:mockwebserver3:5.0.0 mockwebserver3 Core module. No JUnit dependency!

com.squareup.okhttp3:mockwebserver3-junit4:5.0.0 mockwebserver3.junit4 Optional JUnit 4 integration.

com.squareup.okhttp3:mockwebserver3-junit5:5.0.0 mockwebserver3.junit5 Optional JUnit 5 integration.

com.squareup.okhttp3:mockwebserver:5.0.0 okhttp3.mockwebserver Obsolete. Depends on JUnit 4.

OkHttp now supports Happy Eyeballs ([RFC 8305][rfc_8305]) for IPv4+IPv6 networks. It attempts both IPv6 and IPv4 connections concurrently, keeping whichever connects first.

We’ve improved our Kotlin APIs. You can skip the builder:
val request = Request(
  url = "https://cash.app/".toHttpUrl(),
)
OkHttp now supports [GraalVM].

Here’s what has changed since 5.0.0-alpha.17:

... (truncated)

Commits

d2dd180 Prepare for release 5.1.0.
61a8735 New Response.peekTrailers() API (#8921)
6684401 Update dependency gradle to v8.14.3 (#8915)
7adb2b6 Update junit-framework monorepo (#8914)
e41ff18 Link to new mockwebserver artifacts (#8911)
0ff8751 Remove Graal init tracing (#8909)
b9a2560 Run graal on master (#8907)
8339524 Remove ExperimentalOkHttpApi references (#8908)
ce29ef6 Fix graal tests (#8906)
8579689 Don't force a response body read on all trailers (#8904)
Additional commits viewable in compare view

Updates org.junit:junit-bom from 5.13.0 to 5.13.4

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 5.13.4 = Platform 1.13.4 + Jupiter 5.13.4 + Vintage 5.13.4

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.3...r5.13.4

JUnit 5.13.3 = Platform 1.13.3 + Jupiter 5.13.3 + Vintage 5.13.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.2...r5.13.3

JUnit 5.13.2 = Platform 1.13.2 + Jupiter 5.13.2 + Vintage 5.13.2

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.1...r5.13.2

JUnit 5.13.1 = Platform 1.13.1 + Jupiter 5.13.1 + Vintage 5.13.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.0...r5.13.1

Commits

8a21048 Release 5.13.4
9a38789 Finalize 5.13.4 release notes
458325c Log only once per implementation type for CloseableResource types
976a110 Protect against potential problems when converting file-based selectors
e94f728 Allow default package for PackageSource
b60fecf Fail on classpath resource names that are blank after removing leading /
6378c88 Remove java.* packages from Import-Package headers in all jars (#4738)
1a360f3 Create initial 5.13.4 release notes from template
806fc9a Document #4689 in release notes
1653839 Document #4686 in release notes
Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter from 5.13.0 to 5.13.4

Release notes

Sourced from org.junit.jupiter:junit-jupiter's releases.

JUnit 5.13.4 = Platform 1.13.4 + Jupiter 5.13.4 + Vintage 5.13.4

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.3...r5.13.4

JUnit 5.13.3 = Platform 1.13.3 + Jupiter 5.13.3 + Vintage 5.13.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.2...r5.13.3

JUnit 5.13.2 = Platform 1.13.2 + Jupiter 5.13.2 + Vintage 5.13.2

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.1...r5.13.2

JUnit 5.13.1 = Platform 1.13.1 + Jupiter 5.13.1 + Vintage 5.13.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.0...r5.13.1

Commits

8a21048 Release 5.13.4
9a38789 Finalize 5.13.4 release notes
458325c Log only once per implementation type for CloseableResource types
976a110 Protect against potential problems when converting file-based selectors
e94f728 Allow default package for PackageSource
b60fecf Fail on classpath resource names that are blank after removing leading /
6378c88 Remove java.* packages from Import-Package headers in all jars (#4738)
1a360f3 Create initial 5.13.4 release notes from template
806fc9a Document #4689 in release notes
1653839 Document #4686 in release notes
Additional commits viewable in compare view

Updates com.squareup.okio:okio from 3.12.0 to 3.16.0

Changelog

Sourced from com.squareup.okio:okio's changelog.

Version 3.16.0

2025-07-29

Fix: Change Socket.asOkioSocket() to resolve its source InputStream and OutputStream eagerly. This will throw a SocketException immediately if the socket isn’t connected. This behavior is consistent with our similar APIs, Socket.source() and Socket.sink().

Fix: Optimize AsyncTimeout on systems with a very large number of active timeouts. This class originally kept active timeouts in a linked list; with this update the internal data structure is a binary heap. The old runtime was 𝑂(𝑛²) to activate 𝑛 timeouts; with this optimization the runtime is 𝑂(𝑛 log 𝑛).

Upgrade: [Kotlin 2.2.0][kotlin_2_2_0].

Version 3.15.0

2025-07-01

Upgrade: [kotlinx-datetime 0.7.0-0.6.x-compat][datetime_0_7_0_compat]. The previous 3.14.0 release, FakeFileSystem broke binary-compatibility for calls to FakeFileSystem(). This restores that compatibility.

Breaking: Change FakeFileSystem.clock from a JVM field to a property. This avoids a crash running Okio in a Gradle 8.x plugin. This change is not binary-compatible.

Version 3.14.0

2025-06-28

Upgrade: [kotlinx-datetime 0.7.0][datetime_0_7_0]. This impacts the okio-fakefilesystem artifact only. This is a binary-incompatible backwards-incompatible change that cannot co-exist with previous releases of okio-fakefilesystem! If you observe a NoSuchMethodError calling FakeFileSystem.init, update the calling code to this release (or newer) and recompile. We don't like imposing backwards-incompatible changes like this on you and do so regretfully.

Version 3.13.0

2025-06-13

New: okio.Socket interface. This is a first step towards low-level streaming networking support for Kotlin/Multiplatform. This release provides two JVM-only implementations: asOkioSocket() adapts a java.net.Socket to our new interface, and inMemorySocketPair() returns a pair of mutually-connected sockets. We also anticipate that this interface will be a useful abstraction for proxies and tunnels.

New: In-development snapshots are now published to the [Central Portal Snapshots repository].

Commits

8259b1d Prepare for release 3.16.0.
a0d0c5e Upgrade to Kotlin 2.2.0 (#1670)
9e25e03 Get Socket.inputStream and outputStream eagerly (#1669)
0e48b0d Add heap implementation for AsyncTimeout (#1658)
d9e59b6 Update dependency com.diffplug.spotless:spotless-plugin-gradle to v7.2.1 (#1667)
0cccd61 Update dependency com.diffplug.spotless:spotless-plugin-gradle to v7.2.0 (#1665)
5355bcc Update dependency com.vanniktech:gradle-maven-publish-plugin to v0.34.0 (#1659)
4e88847 Update dependency com.google.jimfs:jimfs to v1.3.1 (#1657)
7edbfd3 Update dependency com.android.tools.build:gradle to v8.11.1 (#1655)
a96af6f Update dependency org.jetbrains.kotlinx.binary-compatibility-validator:org.je...
Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.19.0 to 2.20.0

Commits

See full diff in compare view

Updates org.projectlombok:lombok from 1.18.38 to 1.18.42

Changelog

Sourced from org.projectlombok:lombok's changelog.

v1.18.42 (September 18th, 2025)

FEATURE: All the various @Log annotations now allow you to change their access level (they still default to private). #2280. Thanks to new contributor Liam Pace!

BUGFIX: Javadoc parsing was broken in Netbeans and ErrorProne for JDK25 #3940.

v1.18.40 (September 4th, 2025)

PLATFORM: JDK25 support added #3859.

BUGFIX: Recent versions of eclipse (or the eclipse-based java lang server for VSCode) caused java.lang.IllegalArgumentException: Document does not match the AST. [Issue #3886](projectlombok/lombok#3886).

PERFORMANCE: @ExtensionMethod is now significantly faster [Issue #3866](projectlombok/lombok#3866).

BUGFIX: the command line config tool would emit incorrect output for nullity annotations. [Issue #3931](projectlombok/lombok#3931).

FEATURE: @Jacksonized @Accessors(fluent=true) automatically creates the relevant annotations such that Jackson correctly identifies fluent accessors. [Issue #3265](projectlombok/lombok#3265), [Issue #3270](projectlombok/lombok#3270).

IMPROBABLE BREAKING CHANGE: From versions 1.18.16 to 1.18.38, lombok automatically copies certain Jackson annotations (e.g., @JsonProperty) from fields to the corresponding accessors (getters/setters). However, it turned out to be harmful in certain situations. Thus, Lombok does not automatically copy those annotations any more. You can restore the old behavior using the config key lombok.copyJacksonAnnotationsToAccessors = true.

Commits

2031eb0 [release] pre-release version bump for v1.18.42
c95a6c1 Merge branch 'logger-access'
71d85ca #2280 Add delivery of this 'access for logging' to the changelog.
99ba3e3 [trivial] Slightly reworded the javadoc on each @Log annotation's `access()...
e9cf11e [trivial][style]
a6d5568 [deprecation] Marked AccessLevel.MODULE as deprecated. It was written for a...
492011d Refactored to use Javac/Eclipse utility function
c1f7f66 Update copyright in logger files
f63f40a Add myself to AUTHORS
9152c34 Fix failing tests
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

coderabbitai · 2025-09-22T16:25:16Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

Bumps the gradle-dependencies group with 7 updates: | Package | From | To | | --- | --- | --- | | [com.google.code.gson:gson](https://github.com/google/gson) | `2.13.1` | `2.13.2` | | [com.squareup.okhttp3:okhttp](https://github.com/square/okhttp) | `4.12.0` | `5.1.0` | | [org.junit:junit-bom](https://github.com/junit-team/junit-framework) | `5.13.0` | `5.13.4` | | [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework) | `5.13.0` | `5.13.4` | | [com.squareup.okio:okio](https://github.com/square/okio) | `3.12.0` | `3.16.0` | | [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.19.0` | `2.20.0` | | [org.projectlombok:lombok](https://github.com/projectlombok/lombok) | `1.18.38` | `1.18.42` | Updates `com.google.code.gson:gson` from 2.13.1 to 2.13.2 - [Release notes](https://github.com/google/gson/releases) - [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md) - [Commits](google/gson@gson-parent-2.13.1...gson-parent-2.13.2) Updates `com.squareup.okhttp3:okhttp` from 4.12.0 to 5.1.0 - [Changelog](https://github.com/square/okhttp/blob/master/CHANGELOG.md) - [Commits](square/okhttp@parent-4.12.0...parent-5.1.0) Updates `org.junit:junit-bom` from 5.13.0 to 5.13.4 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r5.13.0...r5.13.4) Updates `org.junit.jupiter:junit-jupiter` from 5.13.0 to 5.13.4 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r5.13.0...r5.13.4) Updates `com.squareup.okio:okio` from 3.12.0 to 3.16.0 - [Changelog](https://github.com/square/okio/blob/master/CHANGELOG.md) - [Commits](square/okio@parent-3.12.0...parent-3.16.0) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.19.0 to 2.20.0 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `org.projectlombok:lombok` from 1.18.38 to 1.18.42 - [Changelog](https://github.com/projectlombok/lombok/blob/master/doc/changelog.markdown) - [Commits](projectlombok/lombok@v1.18.38...v1.18.42) --- updated-dependencies: - dependency-name: com.google.code.gson:gson dependency-version: 2.13.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-dependencies - dependency-name: com.squareup.okhttp3:okhttp dependency-version: 5.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: gradle-dependencies - dependency-name: org.junit:junit-bom dependency-version: 5.13.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-dependencies - dependency-name: org.junit.jupiter:junit-jupiter dependency-version: 5.13.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-dependencies - dependency-name: com.squareup.okio:okio dependency-version: 3.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies - dependency-name: org.projectlombok:lombok dependency-version: 1.18.42 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

curquiza

bors merge

meili-bors · 2025-11-21T10:08:33Z

Build succeeded:

dependabot bot added the dependencies Pull requests that update a dependency file label Sep 22, 2025

dependabot bot force-pushed the dependabot/gradle/gradle-dependencies-6131b219f8 branch from 30d2beb to 2c02611 Compare November 1, 2025 04:01

curquiza approved these changes Nov 21, 2025

View reviewed changes

meili-bors bot merged commit ae4b2f3 into main Nov 21, 2025
4 checks passed

meili-bors bot deleted the dependabot/gradle/gradle-dependencies-6131b219f8 branch November 21, 2025 10:08

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the gradle-dependencies group with 7 updates #898

Bump the gradle-dependencies group with 7 updates #898

Uh oh!

dependabot bot commented on behalf of github Sep 22, 2025 •

edited

Loading

Uh oh!

coderabbitai bot commented Sep 22, 2025

Review skipped

Uh oh!

curquiza left a comment

Uh oh!

meili-bors bot commented Nov 21, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Coordinate	Package Name	Description
com.squareup.okhttp3:mockwebserver3:5.0.0	mockwebserver3	Core module. No JUnit dependency!
com.squareup.okhttp3:mockwebserver3-junit4:5.0.0	mockwebserver3.junit4	Optional JUnit 4 integration.
com.squareup.okhttp3:mockwebserver3-junit5:5.0.0	mockwebserver3.junit5	Optional JUnit 5 integration.
com.squareup.okhttp3:mockwebserver:5.0.0	okhttp3.mockwebserver	Obsolete. Depends on JUnit 4.

Bump the gradle-dependencies group with 7 updates #898

Bump the gradle-dependencies group with 7 updates #898

Uh oh!

Conversation

dependabot bot commented on behalf of github Sep 22, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Gson 2.13.2

What's Changed

New Contributors

Version 5.1.0

Version 5.0.0

Version 3.16.0

Version 3.15.0

Version 3.14.0

Version 3.13.0

v1.18.42 (September 18th, 2025)

v1.18.40 (September 4th, 2025)

Uh oh!

coderabbitai bot commented Sep 22, 2025

Review skipped

Uh oh!

curquiza left a comment

Choose a reason for hiding this comment

Uh oh!

meili-bors bot commented Nov 21, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot bot commented on behalf of github Sep 22, 2025 •

edited

Loading