Skip to content

fix(deps): update mend: high confidence minor and patch dependency updates #5

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
mend-for-github.zerozr99.workers.dev wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(deps): update mend: high confidence minor and patch dependency updates #5

mend-for-github.zerozr99.workers.dev wants to merge 1 commit into from

Conversation

@mend-for-github.zerozr99.workers.dev
Copy link

@mend-for-github.zerozr99.workers.dev mend-for-github.zerozr99.workers.dev bot commented May 20, 2025 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
com.autonomousapps:dependency-analysis-gradle-plugin 2.6.1 → 2.19.0 age adoption passing confidence
org.mockito:mockito-junit-jupiter 5.14.2 → 5.21.0 age adoption passing confidence
org.mockito:mockito-core 5.14.2 → 5.21.0 age adoption passing confidence
org.assertj:assertj-core (source) 3.27.0 → 3.27.7 age adoption passing confidence
org.testng:testng (source) 7.5.1 → 7.12.0 age adoption passing confidence
org.junit:junit-bom (source) 5.11.4 → 5.14.2 age adoption passing confidence
me.champeau.jmh 0.7.2 → 0.7.3 age adoption passing confidence
com.google.api.grpc:proto-google-common-protos 2.29.0 → 2.65.1 age adoption passing confidence
com.google.protobuf:protobuf-java (source) 3.25.5 → 3.25.8 age adoption passing confidence
com.google.protobuf:protobuf-java-util (source) 3.25.5 → 3.25.8 age adoption passing confidence
com.google.protobuf:protobuf-bom (source) 3.25.5 → 3.25.8 age adoption passing confidence
com.google.protobuf 0.9.4 → 0.9.6 age adoption passing confidence
com.google.protobuf:protobuf-gradle-plugin 0.9.4 → 0.9.6 age adoption passing confidence
jakarta.xml.bind:jakarta.xml.bind-api 4.0.2 → 4.0.5 age adoption passing confidence
jakarta.activation:jakarta.activation-api 2.1.3 → 2.1.4 age adoption passing confidence
jakarta.annotation:jakarta.annotation-api (source) 2.0.0 → 2.1.1 age adoption passing confidence
com.sun.xml.bind:jaxb-impl (source) 2.3.3 → 2.3.9 age adoption passing confidence
org.apache.logging.log4j:log4j-slf4j-impl (source) 2.23.1 → 2.25.3 age adoption passing confidence
org.apache.logging.log4j:log4j-bom (source) 2.23.1 → 2.25.3 age adoption passing confidence
io.netty:netty-bom (source) 4.1.121.Final → 4.2.10.Final age adoption passing confidence
com.github.node-gradle.node 3.2.1 → 3.6.0 age adoption passing confidence
org.apache.maven.plugins:maven-compiler-plugin (source) 3.8.1 → 3.15.0 age adoption passing confidence
org.jsoup:jsoup (source) 1.14.3 → 1.22.1 age adoption passing confidence
kr.motd.maven:os-maven-plugin 1.6.0 → 1.7.1 age adoption passing confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

autonomousapps/dependency-analysis-android-gradle-plugin (com.autonomousapps:dependency-analysis-gradle-plugin)

v2.19.0

  • [Feat]: support advices for Android test fixtures source sets
  • [Feat]: support typesafe project accessors in IssueHandler
  • [Fix]: bump kotlin-metadata-jvm to 2.1.21 to support K2.2 projects.
  • [Chore]: move publishing to new central.sonatype.com repo.

v2.18.0

  • [Breaking]: update min support AGP version to 8.3.
  • [Feat]: Allow excluding violations by regex patterns.
  • [Feat]: add ProviderConvertible support.
  • [Feat]: add support for Activity theme in AndroidManifest.xml
  • [Feat]: Android merged manifests are now treated as runtime (not compile-time) requirements.
  • [Feat]: detect code source files that live outside of src/main as an AGP feature being used.
  • [Fix]: detect class references in the base package.
  • [Fix]: detect constants defined in Kotlin companion objects.
  • [Fix]: detect androidTest source set as a test source-set.
  • [Fix]: set android dependencies weight to 100.
  • [Fix]: also check for com.android.test.
  • [Chore]: use Gradle 8.14.
  • [Chore]: kotlin.metadata.jvm no longer needs to be non-transitive, since bumping to K2 for this project.
  • [Chore]: fix snapshot publishing by making task dependency more lazy.
  • [Chore]: update badge to point to actual workflow.

v2.17.0

  • [Fix]: duplicate class warning doesn't warn about multiple dependencies with same GAV.
  • [Fix]: ensure all capabilities are internally sorted; also synthesized dependencies.
  • [Fix]: ensure all dependencies are internally sorted.
  • [Fix]: ensure output of GraphViewTask is fully sorted (therefore deterministic).
  • [Fix]: intermediate android res classes must have meaningful hashCode() functions.
  • [Fix]: improve sorting of various build outputs to ensure determinism.

v2.16.0

  • [Feat]: support com.android.test projects.
  • [Feat]: support typesafe project accessors with opt-in.
dependencyAnalysis {
  useTypesafeProjectAccessors(true) // false by default
}

v2.15.0

  • [Feat]: superclass analysis is now opt-in. This is a breaking change since 2.7.0, when that feature was introduced.
dependencyAnalysis {
  usage {
    analysis {
      checkSuperClasses(true) // false by default 
    }
  }
}

v2.14.0

  • [Feat]: add temporary flag to test opting-out of superclass analysis.
  • [Fix]: @InputFiles is redundant next to @Classpath.

v2.13.3

  • [Fix]: check java/main in addition to kotlin/main to find correct artifact folder
  • [Fix]: use projectPath, not identityPath, for included build coordinates.

v2.13.2

  • [Fix]: detect usages of SAM interfaces.
  • [Fix]: binaryClassAccesses uses sorted keys.

v2.13.1

  • [Fix]: differentiate between main and other variants when rewriting dependencies with Kotlin DSL.

v2.13.0

  • [Feat]: computeResolvedDependencies to also generate a version catalog file
  • [Feat]: experimenting with compressing intermediates, starting with exploded-jars.json.
  • [Chore]: remove unused moshi functions.

v2.12.0

  • [Feat]: detect dependencies that provide dylibs for use on macOS.
  • [Test]: incorrect attribution of so files to Android deps.

v2.11.0

  • [Feat]: new task (:computeAllDependencies) for producing a version catalog file containing all dependencies.
  • [Fix]: kotlin-reflect must be on the compile classpath.
  • [Test]: Update AGP 8.9.0 stable.
  • [Test]: conditional signing.

v2.10.1

  • [Fix]: BuildHealthException extends VerificationException.
  • [Fix]: module advice must be 'actionable' to be 'not empty'.

v2.10.0

  • [Feat]: new dependencyAnalysis.reporting.printBuildHealth DSL option.
  • [Fix]: support colorizing multiline strings.

v2.9.0

  • [Feat]: if buildHealth contains only warnings, adjust message to be less severe.
  • [Feat]: provide way to opt-out of printing postscript if it only contains warnings.
  • [Feat]: improve console output with colors and smarter vertical spacing.
  • [Fix]: improve comparability of Declaration.
  • [Fix]: dependency model classes are now fully Comparable.
  • [Fix]: Source is fully Comparable.
  • [Fix]: ExplodingBytecode is fully Comparable.
  • [Perf]: improve performance of isForMissingSuperclass (again).
  • [Chore]: update to Kotlin 2.0.21.
  • [Chore]: test against AGP 8.9 and 8.10
dependencyAnalysis {
  reporting {
    onlyOnFailure(false) // when true, only prints postscript when there are failure-level issues.
    postscript(/* Some text to help out end users who may not be build engineers. */)
  }
}

v2.8.2

  • [Fix]: generate supergraph just once per variant (source set).

v2.8.1

  • [Fix]: cache SuperClassGraph. No need to recompute for each dependency.
  • [Fix]: use less heap by using empty singleton collections.
  • [Fix]: trade metaspace for heap by interning strings.

v2.8.0

  • [Feat]: support reasoning about multiple pieces of advice.
  • [Fix]: compute/printDuplicateDependencies works even when not all projects apply this plugin.
  • [Fix]: do not filter out advice to add to testImplementation if there is conflicting advice to downgrade from implementation.
  • [Fix]: compileOnly dependencies are not visible to the test compile classpath.
  • [Build]: use Gradle 8.12.1
  • [Chore]: update to AGP 8.8.0
  • [Refactor]: use DependencyHandler.project() instead of Project.project().
  • [Test]: only run functionalTest against latest combination of AGP and Gradle.
  • [Test]: don't forward stdout on CI.

v2.7.0

  • [Feat]: can set severity and filter duplicate class warnings.
  • [Feat]: don't recommend removing implementation dependency on necessary superclass.
  • [Chore]: use non-deprecated method when available.
  • [Chore]: update various dependencies, including antlr.

New DSL option for configuring duplicate class warnings:

// root build.gradle[.kts]
dependencyAnalysis {
  issues {
    all {
      onDuplicateClassWarnings {
        severity(<"fail"|"warn"|"ignore">)
        // Fully-qualified class reference to exclude, slash- or dot-delimited
        exclude("org/jetbrains/annotations/NotNull", "org.jetbrains.annotations.Nullable")
      }
    }
  }
}
mockito/mockito (org.mockito:mockito-junit-jupiter)

v5.21.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.21.0
  • 2025-12-09 - 17 commit(s) by Giulio Longfils, Joshua Selbo, Woongi9, Zylox, dependabot[bot]
  • Bump graalvm/setup-graalvm from 1.4.3 to 1.4.4 (#​3768)
  • Bump graalvm/setup-graalvm from 1.4.2 to 1.4.3 (#​3767)
  • Bump actions/checkout from 5 to 6 (#​3765)
  • Adds output of matchers to potential mismatch; Fixes #​2468 (#​3760)
  • Forbid mocking WeakReference with inline mock maker (#​3759)
  • StackOverflowError when mocking WeakReference (#​3758)
  • Bump actions/upload-artifact from 4 to 5 (#​3756)
  • Bump graalvm/setup-graalvm from 1.4.1 to 1.4.2 (#​3755)
  • Support primitives in GenericArrayReturnType. (#​3753)
  • ClassNotFoundException when stubbing array of primitive type on Android (#​3752)
  • Bump graalvm/setup-graalvm from 1.4.0 to 1.4.1 (#​3744)
  • Bump gradle/actions from 4 to 5 (#​3743)
  • Bump org.graalvm.buildtools.native from 0.11.0 to 0.11.1 (#​3738)
  • Bump com.diffplug.spotless:spotless-plugin-gradle from 7.2.1 to 8.0.0 (#​3735)
  • Bump graalvm/setup-graalvm from 1.3.7 to 1.4.0 (#​3734)
  • Bump org.assertj:assertj-core from 3.27.5 to 3.27.6 (#​3733)
  • Bump errorprone from 2.41.0 to 2.42.0 (#​3732)
  • Feat: automatically detect class to mock in mockStatic and mockConstruction (#​3731)
  • Return completed futures for unstubbed Future/CompletionStage in ReturnsEmptyValues (#​3727)
  • automatically detect class to mock (#​2779)
  • Incorrect "has following stubbing(s) with different arguments" message when using Argument Matchers (#​2468)

v5.20.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.20.0
  • 2025-09-20 - 11 commit(s) by Adrian-Kim, Giulio Longfils, Rafael Winterhalter, dependabot[bot]
  • Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 (#​3730)
  • Introducing the Ability to Mock Construction of Generic Types (#​2401) (#​3729)
  • Bump com.gradle.develocity from 4.1.1 to 4.2 (#​3726)
  • Bump graalvm/setup-graalvm from 1.3.6 to 1.3.7 (#​3725)
  • Bump org.eclipse.platform:org.eclipse.osgi from 3.23.100 to 3.23.200 (#​3720)
  • Bump graalvm/setup-graalvm from 1.3.5 to 1.3.6 (#​3719)
  • Bump actions/setup-java from 4 to 5 (#​3715)
  • Bump com.gradle.develocity from 4.1 to 4.1.1 (#​3713)
  • Bump bytebuddy from 1.17.6 to 1.17.7 (#​3712)
  • test: Use Assume.assumeThat for SequencedCollection tests (#​3711)
  • Fix #​3709 (#​3710)
  • feat: Add support for JDK21 Sequenced Collections. (#​3708)
  • Introducing the Ability to Mock Construction of Generic Types (#​2401)

v5.19.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.19.0
  • 2025-08-15 - 37 commit(s) by Adrian-Kim, Tim van der Lippe, Tran Ngoc Nhan, dependabot[bot], juyeop
  • feat: Add support for JDK21 Sequenced Collections. (#​3708)
  • Bump actions/checkout from 4 to 5 (#​3707)
  • build: Allow overriding 'Created-By' for reproducible builds (#​3704)
  • Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#​3703)
  • Bump androidx.test:runner from 1.6.2 to 1.7.0 (#​3697)
  • Bump org.junit.platform:junit-platform-launcher from 1.13.3 to 1.13.4 (#​3694)
  • Bump com.diffplug.spotless:spotless-plugin-gradle from 7.1.0 to 7.2.1 (#​3693)
  • Bump junit-jupiter from 5.13.3 to 5.13.4 (#​3691)
  • Bump com.gradle.develocity from 4.0.2 to 4.1 (#​3689)
  • Bump com.google.googlejavaformat:google-java-format from 1.27.0 to 1.28.0 (#​3688)
  • Bump com.google.googlejavaformat:google-java-format from 1.25.2 to 1.27.0 (#​3686)
  • Bump com.diffplug.spotless:spotless-plugin-gradle from 7.0.4 to 7.1.0 (#​3685)
  • Bump junit-jupiter from 5.13.2 to 5.13.3 (#​3684)
  • Bump org.shipkit:shipkit-auto-version from 2.1.0 to 2.1.2 (#​3683)
  • Bump com.diffplug.spotless:spotless-plugin-gradle from 7.0.2 to 7.0.4 (#​3682)
  • Only run release after both Java and Android tests have finished
    (#​3681)
  • Bump org.junit.platform:junit-platform-launcher from 1.12.2 to 1.13.3 (#​3680)
  • Bump org.codehaus.groovy:groovy from 3.0.24 to 3.0.25 (#​3679)
  • Bump org.eclipse.platform:org.eclipse.osgi from 3.23.0 to 3.23.100 (#​3678)
  • Can no longer publish snapshot releases (#​3677)
  • Update Gradle to 8.14.2 (#​3676)
  • Bump errorprone from 2.23.0 to 2.39.0 (#​3674)
  • Correct Junit docs link (#​3672)
  • Bump net.ltgt.gradle:gradle-errorprone-plugin from 4.1.0 to 4.3.0 (#​3670)
  • Bump junit-jupiter from 5.13.1 to 5.13.2 (#​3669)
  • Bump bytebuddy from 1.17.5 to 1.17.6 (#​3668)
  • Bump junit-jupiter from 5.12.2 to 5.13.1 (#​3666)
  • Bump org.jetbrains.kotlin:kotlin-stdlib from 2.0.21 to 2.2.0 (#​3665)
  • Bump org.gradle.toolchains.foojay-resolver-convention from 0.9.0 to 1.0.0 (#​3661)
  • Bump org.junit.platform:junit-platform-launcher from 1.11.4 to 1.12.2 (#​3660)
  • Add JDK21 sequenced collections for ReturnsEmptyValues (#​3659)
  • Bump com.gradle.develocity from 3.19.1 to 4.0.2 (#​3658)
  • Bump ru.vyarus:gradle-animalsniffer-plugin from 1.7.2 to 2.0.1 (#​3657)
  • Bump org.eclipse.platform:org.eclipse.osgi from 3.22.0 to 3.23.0 (#​3656)
  • Bump org.codehaus.groovy:groovy from 3.0.23 to 3.0.24 (#​3655)
  • Bump junit-jupiter from 5.11.4 to 5.12.2 (#​3653)
  • Reproducible Build: need to inject JDK distribution details to rebuild (#​3563)

v5.18.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.18.0
  • 2025-05-20 - 5 commit(s) by Eugene Platonov, Patrick Doyle, Tim van der Lippe, dependabot[bot]
  • Make vararg checks Scala friendly (for mockito-scala) (#​3651)
  • For UnfinishedStubbingException, suggest the possibility of another thread (#​3636)
  • UnfinishedStubbingException ought to suggest the possibility of another thread (#​3635)

v5.17.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.17.0
  • 2025-04-04 - 7 commit(s) by Adrian Roos, Andre Kurait, Jan Ouwens, Rafael Winterhalter, Taeik Lim, Thach Le, Tim van der Lippe
  • Fixes #​3631: Fix broken banner image link (#​3632)
  • Banner image is broken (#​3631)
  • Update exception message with mockito-inline (#​3628)
  • Clarify structure of commit messages (#​3626)
  • Fixes #​3622: MockitoExtension fails cleanup when aborted before setup (#​3623)
  • MockitoExtension fails cleanup when aborted before setup (#​3622)
  • Since mockito-inline has been removed, the exception messages with mockito-inline should be modified. (#​3621)
  • Fixes #​3171: Fall back to Throwable Location strategy on Android (#​3619)
  • Fixes #​3615 : broken links to javadoc.io (#​3616)
  • Broken links to javadoc.io (#​3615)
  • Mocks are not working on particular devices after update Android SDK from 33 to 34 (#​3171)

v5.16.1

Changelog generated by Shipkit Changelog Gradle Plugin

5.16.1
  • 2025-03-15 - 3 commit(s) by Adrian Roos, Jérôme Prinet, Rafael Winterhalter
  • Remove Arrays.asList from critical stubbing path in GenericMetadataSu… (#​3610)
  • Rework of injection strategy in the context of modules (#​3608)
  • Adjust inline mocking snippet to allow task relocatability (#​3606)
  • Inline mocking configuration snippet for Gradle should allow task relocatability (#​3605)

v5.16.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.16.0
  • 2025-03-03 - 10 commit(s) by Brice Dutheil, Rafael Winterhalter, TDL, dependabot[bot]
  • Add support for including module-info in Mockito. (#​3597)
  • Bump com.gradle.develocity from 3.19 to 3.19.1 (#​3579)
  • Bump org.assertj:assertj-core from 3.27.2 to 3.27.3 (#​3577)
  • Bump com.diffplug.spotless:spotless-plugin-gradle from 7.0.1 to 7.0.2 (#​3574)
  • Bump com.diffplug.spotless:spotless-plugin-gradle from 6.25.0 to 7.0.1 (#​3571)
  • Bump org.assertj:assertj-core from 3.27.1 to 3.27.2 (#​3569)
  • Tweaks documentation on mockito agent config for maven (#​3568)
  • Adds --info to diagnose closeAndReleaseStagingRepositories issues (#​3567)
  • Refine reflection when calling management factory (#​3566)
  • Avoid warning when dynamic attach is enabled (#​3551)

v5.15.2

Changelog generated by Shipkit Changelog Gradle Plugin

5.15.2
testng-team/testng (org.testng:testng)

v7.12.0

Compare Source

What's Changed

New Contributors

Full Changelog: testng-team/testng@7.11.0...7.12.0

v7.11.0

Compare Source

What's Changed

New Contributors

Full Changelog: testng-team/testng@7.10.2...7.11.0

v7.10.2: TestNG v7.10.2

Compare Source

What's Changed

Full Changelog: testng-team/testng@7.10.1...7.10.2

v7.10.1: TestNG v7.10.1

Compare Source

What's Changed

Full Changelog: testng-team/testng@7.10.0...7.10.1

v7.10.0: TestNG v7.10.0

Compare Source

What's Changed

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

@mend-for-github.zerozr99.workers.dev mend-for-github.zerozr99.workers.dev bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 5 times, most recently from a766ff6 to 56be45d Compare May 27, 2025 08:41
@mend-for-github.zerozr99.workers.dev mend-for-github.zerozr99.workers.dev bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 6 times, most recently from 8576b23 to 4d88cec Compare June 6, 2025 15:23
@mend-for-github.zerozr99.workers.dev mend-for-github.zerozr99.workers.dev bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 6 times, most recently from 63601c0 to e2d3822 Compare June 14, 2025 13:36
@mend-for-github.zerozr99.workers.dev mend-for-github.zerozr99.workers.dev bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 8 times, most recently from 6224005 to 3561304 Compare June 21, 2025 14:08
@mend-for-github.zerozr99.workers.dev mend-for-github.zerozr99.workers.dev bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 5 times, most recently from a91e5bf to e59e0f4 Compare June 26, 2025 18:46
@mend-for-github.zerozr99.workers.dev mend-for-github.zerozr99.workers.dev bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 6 times, most recently from 13739a0 to b2a5b31 Compare January 8, 2026 10:08
@mend-for-github.zerozr99.workers.dev mend-for-github.zerozr99.workers.dev bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 6 times, most recently from c948255 to 6f60676 Compare January 16, 2026 18:02
@mend-for-github.zerozr99.workers.dev mend-for-github.zerozr99.workers.dev bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 4 times, most recently from e078263 to a1ae47c Compare January 22, 2026 10:33
@mend-for-github.zerozr99.workers.dev mend-for-github.zerozr99.workers.dev bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 4 times, most recently from 3aa0e7d to de8b253 Compare January 30, 2026 10:32
@mend-for-github.zerozr99.workers.dev mend-for-github.zerozr99.workers.dev bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 7 times, most recently from ff36304 to b71c9b5 Compare February 7, 2026 09:57
@mend-for-github.zerozr99.workers.dev mend-for-github.zerozr99.workers.dev bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch from b71c9b5 to f2d5c2f Compare February 9, 2026 10:03
@mend-for-github.zerozr99.workers.dev mend-for-github.zerozr99.workers.dev bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch from f2d5c2f to 2e10ae1 Compare February 10, 2026 10:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants