Skip to content

fix(deps): update all dependencies #984

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(deps): update all dependencies #984

wants to merge 1 commit into from
+18 −18

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 15, 2025 •
edited
Loading

This PR contains the following updates:

Package Type Update Change Age Confidence
buildifier_prebuilt bazel_dep patch 8.2.0.2 -> 8.2.1 age confidence
contrib_rules_jvm bazel_dep minor 0.27.0 -> 0.30.0 age confidence
googletest bazel_dep patch 1.17.0.bcr.1 -> 1.17.0.bcr.2 age confidence
rules_java bazel_dep major 8.16.1 -> 9.0.0 age confidence
ubuntu github-runner major 22.04 -> 24.04 age confidence
org.jacoco:jacoco-maven-plugin (source) build patch 0.8.11 -> 0.8.14 age confidence
com.code-intelligence:cifuzz-maven-extension (source) build minor 1.7.0 -> 1.15.0 age confidence
com.google.protobuf:protobuf-java (source) compile major 3.25.5 -> 4.33.0 age confidence
com.google.truth:truth test patch 1.4.0 -> 1.4.5 age confidence
org.junit.platform:junit-platform-launcher (source) test major 1.10.2 -> 6.0.1 age confidence
org.junit.platform:junit-platform-commons (source) test major 1.10.2 -> 6.0.1 age confidence
org.junit.jupiter:junit-jupiter-params (source) test major 5.10.2 -> 6.0.1 age confidence
org.junit.jupiter:junit-jupiter-api (source) test major 5.10.2 -> 6.0.1 age confidence
org.junit.jupiter:junit-jupiter-engine (source) test major 5.10.2 -> 6.0.1 age confidence

Release Notes

keith/buildifier-prebuilt (buildifier_prebuilt)

v8.2.1

Compare Source

What's Changed

New Contributors

Full Changelog: keith/buildifier-prebuilt@8.2.0.2...8.2.1

Bazel Module Snippet

bazel_dep(
    name = "buildifier_prebuilt",
    version = "8.2.1",
    dev_dependency = True,
)

Workspace Snippet

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "buildifier_prebuilt",
    sha256 = "b0434d14d8ca6eb87ae1d0e71911aeb83ffa3096c6b81db7e26c1698fd980d42",
    strip_prefix = "buildifier-prebuilt-8.2.1",
    urls = [
        "http://github.com/keith/buildifier-prebuilt/archive/8.2.1.tar.gz",
    ],
)

load("@​buildifier_prebuilt//:deps.bzl", "buildifier_prebuilt_deps")

buildifier_prebuilt_deps()

load("@​bazel_skylib//:workspace.bzl", "bazel_skylib_workspace")

bazel_skylib_workspace()

load("@​buildifier_prebuilt//:defs.bzl", "buildifier_prebuilt_register_toolchains")

buildifier_prebuilt_register_toolchains()
bazel-contrib/rules_jvm (contrib_rules_jvm)

v0.30.0

contrib_rules_jvm only supports bzlmod-enabled builds

Module Setup

In your MODULE.bazel:

bazel_dep(name = "contrib_rules_jvm", version = "0.30.0")

Important Changes

  • This release changes how the JUnit5 runner reports test names to better support parameterised and other custom tests.
  • The java gazelle plugin will now respect java_export targets. Targets will depend on these rather than individual constituent java_library targets to ensure that each java_library target is only included in one java_export

What's Changed

New Contributors

Full Changelog: bazel-contrib/rules_jvm@v0.29.0...v0.30.0

v0.29.0

WORKSPACE snippet:

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "contrib_rules_jvm",
    sha256 = "44c4946567adb9f7218b1eea7ad512e0af7189f66673c3ebe94b484ac5c246a7",
    strip_prefix = "rules_jvm-0.29.0",
    url = "https://github.com/bazel-contrib/rules_jvm/releases/download/v0.29.0/rules_jvm-v0.29.0.tar.gz",
)

# Fetches the contrib_rules_jvm dependencies.

# If you want to have a different version of some dependency,
# you should fetch it *before* calling this.
load("@​contrib_rules_jvm//:repositories.bzl", "contrib_rules_jvm_deps")

contrib_rules_jvm_deps()

# Now ensure that the downloaded deps are properly configured
load("@​contrib_rules_jvm//:setup.bzl", "contrib_rules_jvm_setup")

contrib_rules_jvm_setup()

What's Changed

New Contributors

Full Changelog: bazel-contrib/rules_jvm@v0.28.0...v0.29.0

v0.28.0

contrib_rules_jvm only supports bzlmod-enabled builds

Module setup

In your MODULE.bazel

bazel_dep(name = "contrib_rules_jvm", version = "0.28.0")

What's Changed

  • Drop support for workspace-based builds (#​321)
  • Bump lowest supported Java version to 8 in our build files (#​307)
  • Allow passing empty 'package' to 'java_test_suite' (#​312)
  • Add support for @​AfterAll in XML report (#​300)
  • Bump pmd to 7.7.0 (#​309)
  • Add support for transforming Checkstyle XML output to JUnit XML (#​283)
  • Optimize junit dependencies for each test target (#​303)
  • Gazelle: detect any directory with /test in path as test package (#​297)
  • Add timestamp and hostname to testsuite xml (#​294)
  • Escape invalid XML chars in testCase and testSuite names (#​284)

Full Changelog: bazel-contrib/rules_jvm@v0.27.0...v0.28.0

bazelbuild/rules_java (rules_java)

v9.0.0

Compare Source

Changes since 8.16.1
a27004a Update JDKs to latest patch releases (#​335)
76212e6 Include the srcjar (if there is one) in the _validation output group so blaze will check whether the srcjar file actually exists.
402b184 upgrade java_tools to 17.0 and wire up linux aarch64 prebuilts (#​334)
36264e4 Update zulu JDKs to latest patch release (#​327) (#​328)
7ff9193 Fix test class determination error message (#​326)
1ed307b Increase maxwarns to -1 (#​291)
3257e83 Re-enable ReturnValueIgnored error prone check
6a30ab8 Run the bootclasspath through ijar (#​324)
3cbc18e Update abseil-cpp to remove override (#​322)

MODULE.bazel setup

bazel_dep(name = "rules_java", version = "9.0.0")

WORKSPACE setup

With Bazel 8.0.0 and before 8.3.0, add the following to your file:


### https://github.com/bazelbuild/bazel/pull/26119
common --repositories_without_autoloads=bazel_features_version,bazel_features_globals

In all cases, add the following to your file:

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "rules_java",
    urls = [
        "https://github.com/bazelbuild/rules_java/releases/download/9.0.0/rules_java-9.0.0.tar.gz",
    ],
    sha256 = "19008f8a85125c9476ef37b6ad945f665d7178aaab3746f7962917ccd87d2477",
)

http_archive(
    name = "bazel_features",
    sha256 = "a660027f5a87f13224ab54b8dc6e191693c554f2692fcca46e8e29ee7dabc43b",
    strip_prefix = "bazel_features-1.30.0",
    url = "https://github.com/bazel-contrib/bazel_features/releases/download/v1.30.0/bazel_features-v1.30.0.tar.gz",
)

load("@​bazel_features//:deps.bzl", "bazel_features_deps")
bazel_features_deps()

load("@​rules_java//java:rules_java_deps.bzl", "rules_java_dependencies")
rules_java_dependencies()

### note that the following line is what is minimally required from protobuf for the java rules
### consider using the protobuf_deps() public API from @​com_google_protobuf//:protobuf_deps.bzl
load("@​com_google_protobuf//bazel/private:proto_bazel_features.bzl", "proto_bazel_features")  # buildifier: disable=bzl-visibility
proto_bazel_features(name = "proto_bazel_features")

### register toolchains
load("@​rules_java//java:repositories.bzl", "rules_java_toolchains")
rules_java_toolchains()

Using the rules
See the source.

jacoco/jacoco (org.jacoco:jacoco-maven-plugin)

v0.8.14: 0.8.14

Compare Source

New Features

  • JaCoCo now officially supports Java 25 (GitHub #​1950).
  • Experimental support for Java 26 class files (GitHub #​1870).
  • Branches added by the Kotlin compiler for default argument number 33 or higher are filtered out during generation of report (GitHub #​1655).
  • Part of bytecode generated by the Kotlin compiler for elvis operator that follows safe call operator is filtered out during generation of report (GitHub #​1814, #​1954).
  • Part of bytecode generated by the Kotlin compiler for more cases of chained safe call operators is filtered out during generation of report (GitHub #​1956).
  • Part of bytecode generated by the Kotlin compiler for invocations of suspendCoroutineUninterceptedOrReturn intrinsic is filtered out during generation of report (GitHub #​1929).
  • Part of bytecode generated by the Kotlin compiler for suspending lambdas with parameters is filtered out during generation of report (GitHub #​1945).
  • Part of bytecode generated by the Kotlin compiler for suspending functions and lambdas with suspension points that return inline value class is filtered out during generation of report (GitHub #​1871).
  • Part of bytecode generated by the Kotlin Compose compiler plugin for pausable composition is filtered out during generation of report (GitHub #​1911).
  • Methods generated by the Kotlin serialization compiler plugin are filtered out (GitHub #​1885, #​1970, #​1971).

Fixed bugs

  • Fixed handling of implicit else clause of when with String subject in Kotlin (GitHub #​1813, #​1940).
  • Fixed handling of implicit default clause of switch by String in Java when compiled by ECJ (GitHub #​1813, #​1940).
    Fixed handling of exceptions in chains of safe call operators in Kotlin (GitHub #​1819).

Non-functional Changes

  • JaCoCo now depends on ASM 9.9 (GitHub #​1965).

v0.8.13: 0.8.13

Compare Source

New Features

  • JaCoCo now officially supports Java 23 and Java 24 (GitHub #​1757, #​1631, #​1867).
  • Experimental support for Java 25 class files (GitHub #​1807).
  • Calculation of line coverage for Kotlin inline functions (GitHub #​1670).
  • Calculation of line coverage for Kotlin inline functions with reified type parameter (GitHub #​1670, #​1700).
  • Calculation of coverage for Kotlin JvmSynthetic functions (GitHub #​1700).
  • Part of bytecode generated by the Kotlin Compose compiler plugin is filtered out during generation of report (GitHub #​1616).
  • Part of bytecode generated by the Kotlin compiler for inline value classes is filtered out during generation of report (GitHub #​1475).
  • Part of bytecode generated by the Kotlin compiler for suspending lambdas without suspension points is filtered out during generation of report (GitHub #​1283).
  • Part of bytecode generated by the Kotlin compiler for when expressions and statements with nullable enum subject is filtered out during generation of report (GitHub #​1774).
  • Part of bytecode generated by the Kotlin compiler for when expressions and statements with nullable String subject is filtered out during generation of report (GitHub #​1769).
  • Part of bytecode generated by the Kotlin compiler for chains of safe call operators is filtered out during generation of report (GitHub #​1810, #​1818).
  • Method getEntries generated by the Kotlin compiler for enum classes is filtered out during generation of report (GitHub #​1625).
  • Methods generated by the Kotlin compiler for constructors and functions with JvmOverloads annotation are filtered out (GitHub #​1768).

Fixed bugs

  • Fixed interpretation of Kotlin SMAP (GitHub #​1525).
  • File extensions are preserved in HTML report in case of clashes of normalized file names (GitHub #​1660).

Non-functional Changes

  • JaCoCo build now uses Maven Wrapper and requires at least Maven 3.9.9 (GitHub #​1708, #​1707, #​1681).
  • JaCoCo now depends on ASM 9.8 (GitHub #​1862).
  • More context information when IllegalArgumentException occurs during reading of zip file (GitHub #​1833).

v0.8.12: 0.8.12

Compare Source

New Features

  • JaCoCo now officially supports Java 22 (GitHub #​1596).
  • Experimental support for Java 23 class files (GitHub #​1553).

Fixed bugs

  • Branches added by the Kotlin compiler for functions with default arguments and having more than 32 parameters are filtered out during generation of report (GitHub #​1556).
  • Branch added by the Kotlin compiler version 1.5.0 and above for reading from lateinit property is filtered out during generation of report (GitHub #​1568).

Non-functional Changes

  • JaCoCo now depends on ASM 9.7 (GitHub #​1600).
protocolbuffers/protobuf (com.google.protobuf:protobuf-java)

v4.31.1

Compare Source

v4.31.0

Compare Source

v4.30.2

Compare Source

v4.30.1

Compare Source

v3.25.8

Compare Source

v3.25.7

Compare Source

v3.25.6

Compare Source

google/truth (com.google.truth:truth)

v1.4.5: 1.4.5

Compare Source

  • Changed assertions like assertThat(nullMap).isEmpty() to fail with a useful failure message instead of throwing NullPointerException (and similarly for other "bogus" values, such as negative sizes). (da5d6e9)
  • Made Kotlin's isInstanceOf(Int::class.java) (and Java's isInstanceOf(int.class)) a valid way to check for Int/Integer instances. (974ef19)
  • Improved isWithin to pretty-print numbers in its failure messages. (de78553, 07318c2)
  • Improved some assertions that print class names to print simpler names (e.g., Integer instead of java.lang.Integer). (0ba72d6)
  • Changed ExpectFailure to never generate "value of" lines based on bytecode. This slightly simplifies writing new tests with ExpectFailure and prevents future behavior changes in some ExpectFailure tests that already exist. However, it may also require changes to other existing ExpectFailure tests to remove or change any assertions about the "value of" line. (3caa0e8)
  • Our Android minSdkVersion is now 23 (Marshmallow). This follows the minimum of Google's foundational Android libraries, and we expect it to have no practical impact on users. (c85c75c)
  • Changed our GWT/J2CL artifact to omit usages of @NullMarked. This was making all our types non-null in those environments, since we don't yet use @Nullable in the GWT/J2CL artifact. (6392d37)

v1.4.4

Compare Source

  • Annotated the rest of the main package for nullness, and moved the @NullMarked annotation from individual classes up to the package to avoid a warning under --release 8. (e107aea)
  • Improved the failure message for matches to conditionally suggest using containsMatch. (7e9fc7a)

v1.4.3: 1.4.3

Compare Source

Known Issue for at least some builds targeting Java 8, fixed in 1.4.4: "unknown enum constant ElementType.MODULE": #​1320. As far as we know, this is only a warning, so it should cause practical problems only if you use -Werror or you perform reflection on @NullMarked under a Java 8 runtime.

  • Added more nullness information to our APIs (in the form of JSpecify annotations). This could lead to additional warnings (or even errors) for users of Kotlin and other nullness checkers. Please report any problems. (ee680cb)
  • Deprecated Subject.Factory methods for Java 8 types. We won't remove them, but you can simplify your code by migrating off them: Just replace assertAbout(foos()).that(foo) with assertThat(foo) (or about(foos()).that(foo) with that(foo)). (59e7a50)

v1.4.2: 1.4.2

Compare Source

This release is the final step of copying all our methods from Truth8 to Truth. If you have not already migrated your usages from Truth8 to Truth, you may see build errors:

OptionalSubjectTest.java:39: error: reference to assertThat is ambiguous
    assertThat(Optional.of("foo")).isPresent();
    ^
  both method assertThat(@&#8203;org.checkerframework.checker.nullness.qual.Nullable Optional<?>) in Truth8 and method assertThat(@&#8203;org.checkerframework.checker.nullness.qual.Nullable Optional<?>) in Truth match

In most cases, you can migrate your whole project mechanically: git grep -l Truth8 | xargs perl -pi -e 's/\bTruth8\b/Truth/g;'. (You can make that change before upgrading to Truth 1.4.2 or as part of the same commit.)

If you instead need to migrate your project incrementally (for example, because it is very large), you may want to upgrade your version of Truth incrementally, too, following our instructions for 1.3.0 and 1.4.0.

For help

Please feel welcome to open an issue to report problems or request help.

Changelog
  • Removed temporary type parameters from Truth.assertThat(Stream) and Truth.assertThat(Optional). This can create build errors, which you can fix by replacing all your references to Truth8 with references to Truth. (45782bd)

v1.4.1: 1.4.1

Compare Source

This release deprecates Truth8.

All its methods have become available on the main Truth class. In most cases, you can migrate your whole project mechanically: git grep -l Truth8 | xargs perl -pi -e 's/\bTruth8\b/Truth/g;'

While we do not plan to delete Truth8, we recommend migrating off it, at least if you static import assertThat: If you do not migrate, such static imports become ambiguous in Truth 1.4.2, breaking your build.

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/all branch 11 times, most recently from d3e5dc1 to cdfb453 Compare October 20, 2025 09:58
@renovate renovate bot force-pushed the renovate/all branch 13 times, most recently from e573657 to 0965f21 Compare October 29, 2025 13:08
@renovate renovate bot force-pushed the renovate/all branch 6 times, most recently from 019e199 to 094c16e Compare October 31, 2025 11:22
@renovate renovate bot force-pushed the renovate/all branch 5 times, most recently from c2a32c3 to 9fb22c2 Compare November 4, 2025 11:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant