Bump the gradle-dependencies group across 1 directory with 8 updates #86

dependabot · 2025-10-06T06:12:59Z

Bumps the gradle-dependencies group with 8 updates in the / directory:

Package	From	To
org.apache.commons:commons-lang3	`3.18.0`	`3.19.0`
commons-io:commons-io	`2.15.1`	`2.20.0`
org.apache.commons:commons-text	`1.11.0`	`1.14.0`
org.slf4j:slf4j-simple	`2.0.12`	`2.0.17`
org.freemarker:freemarker	`2.3.32`	`2.3.34`
com.fasterxml.jackson.dataformat:jackson-dataformat-yaml	`2.16.1`	`2.20.0`
com.fasterxml.jackson.core:jackson-databind	`2.16.1`	`2.20.0`
org.assertj:assertj-core	`3.25.3`	`3.27.6`

Updates org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0

Updates commons-io:commons-io from 2.15.1 to 2.20.0

Changelog

Sourced from commons-io:commons-io's changelog.

Apache Commons IO 2.20.0 Release Notes

The Apache Commons IO team is pleased to announce the release of Apache Commons IO 2.20.0.

Introduction

The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.

Version 2.19.1: Java 8 or later is required.

New features

o IO-875: Add org.apache.commons.io.file.CountingPathVisitor.accept(Path, BasicFileAttributes) #743. Thanks to Pierre Baumard, Gary Gregory. o Add org.apache.commons.io.Charsets.isAlias(Charset, String). Thanks to Gary Gregory. o Add org.apache.commons.io.Charsets.isUTF8(Charset). Thanks to Gary Gregory. o Add org.apache.commons.io.Charsets.toCharsetDefault(String, Charset). Thanks to Gary Gregory. o IO-279: Add Tailer ignoreTouch option #757. Thanks to Joerg Budischewski, Gary Gregory.

Fixed Bugs

o [javadoc] Rename parameter of ProxyOutputStream.write(int) #740. Thanks to Jesse Glick. o IO-875: CopyDirectoryVisitor ignores fileFilter #743. Thanks to Pierre Baumard, Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.getReader(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.AbstractRandomAccessFileOrigin.getReader(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.ByeArrayOrigin.getReader(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.InputStreamOrigin.getReader(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.getWriter(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.AbstractRandomAccessFileOrigin.getWriter(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.OutputStreamOrigin.getWriter(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o FileUtils.readLines(File, Charset) now maps a null Charset to the default Charset #744. Thanks to Ryan Kurtz, Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atSlashCr" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.WindowsLineEndingInputStream, org.apache.commons.io.input.WindowsLineEndingInputStream] At WindowsLineEndingInputStream.java:[line 77]Another occurrence at WindowsLineEndingInputStream.java:[line 81] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atSlashCr" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.WindowsLineEndingInputStream] At WindowsLineEndingInputStream.java:[line 112] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atSlashLf" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.WindowsLineEndingInputStream] At WindowsLineEndingInputStream.java:[line 113] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atSlashLf" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.UnixLineEndingInputStream] At UnixLineEndingInputStream.java:[line 75] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atEos" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.UnixLineEndingInputStream] At UnixLineEndingInputStream.java:[line 120] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atSlashCr" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.UnixLineEndingInputStream] At UnixLineEndingInputStream.java:[line 124] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atSlashLf" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.UnixLineEndingInputStream] At UnixLineEndingInputStream.java:[line 125] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "closed" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.ProxyInputStream] At ProxyInputStream.java:[line 233] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "propagateClose" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.BoundedInputStream] At BoundedInputStream.java:[line 555] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o QueueInputStream reads all but the first byte without waiting. #748. Thanks to maxxedev, Piotr P. Karwasz, Gary Gregory. o Javadoc fixes and improvements. Thanks to Gary Gregory. o Avoid NPE in org.apache.commons.io.filefilter.WildcardFilter.accept(File). Thanks to Gary Gregory. o IO-874: FileUtils.forceDelete can delete a broken symlink again #756. Thanks to Andy Russell, Joerg Budischewski. o Fix infinite loop in AbstractByteArrayOutputStream. #758. Thanks to Alex Benusovich.

... (truncated)

Commits

c224bce Prepare for the release candidate 2.20.0 RC1
8981a5c Remove workaround for
4ef481f Prepare for the next release candidate
d23228f Merge branch 'master' of https://github.com/apache/commons-io.git
5d2737f Add @SuppressWarnings
e5c80d6 Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 #761
2017ac0 Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 (#761)
07ce798 Javadoc
a828efa Add ciManagement element to POM
46bd1c2 Javadoc
Additional commits viewable in compare view

Updates org.apache.commons:commons-text from 1.11.0 to 1.14.0

Changelog

Sourced from org.apache.commons:commons-text's changelog.

Apache Commons Text 1.14.0 Release Notes

The Apache Commons Text team is pleased to announce the release of Apache Commons Text 1.14.0.

Apache Commons Text is a set of utility functions and reusable components for processing and manipulating text in a Java environment.

Release 1.14.0. Requires Java 8 or above.

New features

       Interface StringLookup now extends UnaryOperator<String>. Thanks to Gary Gregory.

       Interface TextRandomProvider extends IntUnaryOperator. Thanks to Gary Gregory.

       Add RandomStringGenerator.Builder.usingRandom(IntUnaryOperator). Thanks to Gary Gregory.

       Add PMD check to default Maven goal. Thanks to Gary Gregory.

       Add org.apache.commons.text.RandomStringGenerator.Builder.setAccumulate(boolean). Thanks to Gary Gregory.

Fixed Bugs

       Fix PMD UnnecessaryFullyQualifiedName in StringLookupFactory. Thanks to Gary Gregory.

       Fix PMD UnnecessaryFullyQualifiedName in DefaultStringLookupsHolder. Thanks to Gary Gregory.

       Fix PMD UnnecessaryFullyQualifiedName in PropertiesStringLookup. Thanks to Gary Gregory.

       Fix PMD UnnecessaryFullyQualifiedName in JavaPlatformStringLookup. Thanks to Gary Gregory.

       Fix PMD UnnecessaryFullyQualifiedName in StringSubstitutor. Thanks to Gary Gregory.

       Fix PMD UnnecessaryFullyQualifiedName in StrSubstitutor. Thanks to Gary Gregory.

       Fix PMD UnnecessaryFullyQualifiedName in AlphabetConverter. Thanks to Gary Gregory.

       Fix PMD AvoidBranchingStatementAsLastInLoop in TextStringBuilder. Thanks to Gary Gregory.

       Fix PMD AvoidBranchingStatementAsLastInLoop in StrBuilder. Thanks to Gary Gregory.

       org.apache.commons.text.translate.LookupTranslator.LookupTranslator(Map CharSequence>) now throws NullPointerException instead of java.security.InvalidParameterException. Thanks to Gary Gregory.

Changes

       Bump org.apache.commons:commons-parent from 81 to 85 [#668](https://github.com/apache/commons-text/issues/668). Thanks to Dependabot, Gary Gregory.

       Bump commons-io:commons-io from 2.18.0 to 2.20.0. Thanks to Gary Gregory.

       Bump graalvm.version from 24.2.0 to 24.2.2 [#665](https://github.com/apache/commons-text/issues/665), [#681](https://github.com/apache/commons-text/issues/681). Thanks to Dependabot, Gary Gregory.

       Bump commons.bytebuddy.version from 1.17.5 to 1.17.6 ([#677](https://github.com/apache/commons-text/issues/677)). Thanks to Dependabot.

       Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 [#680](https://github.com/apache/commons-text/issues/680). Thanks to Dependabot.

Historical list of changes: https://commons.apache.org/proper/commons-text/changes.html

For complete information on Apache Commons Text, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Text website:

https://commons.apache.org/proper/commons-text

... (truncated)

Commits

0a343ae Update the GitHub pull request template for AI
2c9212a Merge branch 'master' into release
f7b8d46 Javadoc
5fea6e2 Javadoc
2f50c4f Javadoc
2afc236 Javadoc
c819ed7 Javadoc
74e54ee Javadoc
a1f3288 Javadoc
1d7b5ca Javadoc
Additional commits viewable in compare view

Updates org.slf4j:slf4j-simple from 2.0.12 to 2.0.17

Updates org.freemarker:freemarker from 2.3.32 to 2.3.34

Updates com.fasterxml.jackson.dataformat:jackson-dataformat-yaml from 2.16.1 to 2.20.0

Commits

fc3fb76 [maven-release-plugin] prepare release jackson-dataformats-text-2.20.0
c40bf7a Prep for 2.20.0
93dfc70 Bump actions/setup-java from 4.7.1 to 5.0.0 (#574)
609da3c Bump codecov/codecov-action from 5.4.3 to 5.5.0 (#575)
06413b9 Bump actions/checkout from 4.2.2 to 5.0.0 (#573)
aa3003d Drop rc2 from version
88cb341 Add deprecations wrt core/1462
519d495 Fix #497 wrt TOML too (last one) (#572)
d729b2c Fix #497 for YAML too (CSV fixed in 2.19.0) (#571)
cab1e79 Yet more tweaking for #497/YAML test
Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.16.1 to 2.20.0

Commits

See full diff in compare view

Updates org.assertj:assertj-core from 3.25.3 to 3.27.6

Release notes

Sourced from org.assertj:assertj-core's releases.

v3.27.6

🐛 Bug Fixes

Core

Add missing export for org.assertj.core.annotation #3951

❤️ Contributors

Thanks to all the contributors who worked on this release:

@duponter

v3.27.5

⚡ Improvements

Core

ByteBuddy in AssertJ 3.27.4 not compatible with Java 25 #3946

🔨 Dependency Upgrades

Core

Upgrade to Byte Buddy 1.17.7 #3947

Upgrade to JUnit BOM 5.13.4 #3947

Guava

Upgrade to Guava 33.4.8-jre #3947

v3.27.4

🚫 Deprecated

Core

Deprecate org.assertj.core.annotations.Beta in favor of org.assertj.core.annotation.Beta

Deprecate org.assertj.core.util.CanIgnoreReturnValue in favor of org.assertj.core.annotation.CanIgnoreReturnValue

Deprecate org.assertj.core.util.CheckReturnValue in favor of org.assertj.core.annotation.CheckReturnValue

🐛 Bug Fixes

Core

Fix thread-safety in AbstractDateAssert #3874

⚡ Improvements

Migrate to the Central Publisher Portal, enable snapshot publishing #3881

... (truncated)

Commits

716b1e0 [maven-release-plugin] prepare release assertj-build-3.27.6
e189652 Add missing export for org.assertj.core.annotation (#3951)
0cb489e Update Maven Central URL
7286309 [maven-release-plugin] prepare for next development iteration
dd4cc1d [maven-release-plugin] prepare release assertj-build-3.27.5
1d0defc Add missing permission to release workflow
844d5d0 Add missing GitHub Actions pinning to CodeQL workflow
bdd7106 Add CodeQL custom workflow
a93d7e6 Remove EOL Java 24
26ea866 Update production dependencies (#3947)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gradle-dependencies group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | org.apache.commons:commons-lang3 | `3.18.0` | `3.19.0` | | [commons-io:commons-io](https://github.com/apache/commons-io) | `2.15.1` | `2.20.0` | | [org.apache.commons:commons-text](https://github.com/apache/commons-text) | `1.11.0` | `1.14.0` | | org.slf4j:slf4j-simple | `2.0.12` | `2.0.17` | | org.freemarker:freemarker | `2.3.32` | `2.3.34` | | [com.fasterxml.jackson.dataformat:jackson-dataformat-yaml](https://github.com/FasterXML/jackson-dataformats-text) | `2.16.1` | `2.20.0` | | [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.16.1` | `2.20.0` | | [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.25.3` | `3.27.6` | Updates `org.apache.commons:commons-lang3` from 3.18.0 to 3.19.0 Updates `commons-io:commons-io` from 2.15.1 to 2.20.0 - [Changelog](https://github.com/apache/commons-io/blob/master/RELEASE-NOTES.txt) - [Commits](apache/commons-io@rel/commons-io-2.15.1...rel/commons-io-2.20.0) Updates `org.apache.commons:commons-text` from 1.11.0 to 1.14.0 - [Changelog](https://github.com/apache/commons-text/blob/master/RELEASE-NOTES.txt) - [Commits](apache/commons-text@rel/commons-text-1.11.0...rel/commons-text-1.14.0) Updates `org.slf4j:slf4j-simple` from 2.0.12 to 2.0.17 Updates `org.freemarker:freemarker` from 2.3.32 to 2.3.34 Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-yaml` from 2.16.1 to 2.20.0 - [Commits](FasterXML/jackson-dataformats-text@jackson-dataformats-text-2.16.1...jackson-dataformats-text-2.20.0) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.16.1 to 2.20.0 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `org.assertj:assertj-core` from 3.25.3 to 3.27.6 - [Release notes](https://github.com/assertj/assertj/releases) - [Commits](assertj/assertj@assertj-build-3.25.3...assertj-build-3.27.6) --- updated-dependencies: - dependency-name: org.apache.commons:commons-lang3 dependency-version: 3.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies - dependency-name: commons-io:commons-io dependency-version: 2.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies - dependency-name: org.apache.commons:commons-text dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies - dependency-name: org.slf4j:slf4j-simple dependency-version: 2.0.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-dependencies - dependency-name: org.freemarker:freemarker dependency-version: 2.3.34 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-dependencies - dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-yaml dependency-version: 2.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies - dependency-name: org.assertj:assertj-core dependency-version: 3.27.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 6, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the gradle-dependencies group across 1 directory with 8 updates #86

Bump the gradle-dependencies group across 1 directory with 8 updates #86

Uh oh!

dependabot bot commented on behalf of github Oct 6, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the gradle-dependencies group across 1 directory with 8 updates #86

Are you sure you want to change the base?

Bump the gradle-dependencies group across 1 directory with 8 updates #86

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Introduction

New features

Fixed Bugs

Apache Commons Text 1.14.0 Release Notes

New features

Fixed Bugs

Changes

v3.27.6

🐛 Bug Fixes

Core

❤️ Contributors

v3.27.5

⚡ Improvements

Core

🔨 Dependency Upgrades

Core

Guava

v3.27.4

🚫 Deprecated

Core

🐛 Bug Fixes

Core

⚡ Improvements

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Oct 6, 2025 •

edited

Loading