Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 20, 2025

Bumps the maven-dependencies group with 5 updates:

Package From To
commons-io:commons-io 2.19.0 2.20.0
io.projectreactor:reactor-core 3.7.7 3.7.8
io.projectreactor:reactor-test 3.7.7 3.7.8
org.apache.maven.plugins:maven-enforcer-plugin 3.6.0 3.6.1
com.fasterxml.jackson.module:jackson-module-kotlin 2.19.1 2.19.2

Updates commons-io:commons-io from 2.19.0 to 2.20.0

Changelog

Sourced from commons-io:commons-io's changelog.

Apache Commons IO 2.20.0 Release Notes

The Apache Commons IO team is pleased to announce the release of Apache Commons IO 2.20.0.

Introduction

The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.

Version 2.19.1: Java 8 or later is required.

New features

o IO-875: Add org.apache.commons.io.file.CountingPathVisitor.accept(Path, BasicFileAttributes) #743. Thanks to Pierre Baumard, Gary Gregory. o Add org.apache.commons.io.Charsets.isAlias(Charset, String). Thanks to Gary Gregory. o Add org.apache.commons.io.Charsets.isUTF8(Charset). Thanks to Gary Gregory. o Add org.apache.commons.io.Charsets.toCharsetDefault(String, Charset). Thanks to Gary Gregory. o IO-279: Add Tailer ignoreTouch option #757. Thanks to Joerg Budischewski, Gary Gregory.

Fixed Bugs

o [javadoc] Rename parameter of ProxyOutputStream.write(int) #740. Thanks to Jesse Glick. o IO-875: CopyDirectoryVisitor ignores fileFilter #743. Thanks to Pierre Baumard, Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.getReader(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.AbstractRandomAccessFileOrigin.getReader(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.ByeArrayOrigin.getReader(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.InputStreamOrigin.getReader(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.getWriter(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.AbstractRandomAccessFileOrigin.getWriter(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.OutputStreamOrigin.getWriter(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o FileUtils.readLines(File, Charset) now maps a null Charset to the default Charset #744. Thanks to Ryan Kurtz, Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atSlashCr" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.WindowsLineEndingInputStream, org.apache.commons.io.input.WindowsLineEndingInputStream] At WindowsLineEndingInputStream.java:[line 77]Another occurrence at WindowsLineEndingInputStream.java:[line 81] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atSlashCr" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.WindowsLineEndingInputStream] At WindowsLineEndingInputStream.java:[line 112] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atSlashLf" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.WindowsLineEndingInputStream] At WindowsLineEndingInputStream.java:[line 113] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atSlashLf" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.UnixLineEndingInputStream] At UnixLineEndingInputStream.java:[line 75] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atEos" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.UnixLineEndingInputStream] At UnixLineEndingInputStream.java:[line 120] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atSlashCr" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.UnixLineEndingInputStream] At UnixLineEndingInputStream.java:[line 124] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atSlashLf" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.UnixLineEndingInputStream] At UnixLineEndingInputStream.java:[line 125] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "closed" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.ProxyInputStream] At ProxyInputStream.java:[line 233] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "propagateClose" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.BoundedInputStream] At BoundedInputStream.java:[line 555] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o QueueInputStream reads all but the first byte without waiting. #748. Thanks to maxxedev, Piotr P. Karwasz, Gary Gregory. o Javadoc fixes and improvements. Thanks to Gary Gregory. o Avoid NPE in org.apache.commons.io.filefilter.WildcardFilter.accept(File). Thanks to Gary Gregory. o IO-874: FileUtils.forceDelete can delete a broken symlink again #756. Thanks to Andy Russell, Joerg Budischewski. o Fix infinite loop in AbstractByteArrayOutputStream. #758. Thanks to Alex Benusovich.

... (truncated)

Commits

Updates io.projectreactor:reactor-core from 3.7.7 to 3.7.8

Release notes

Sourced from io.projectreactor:reactor-core's releases.

v3.7.8

Reactor Core 3.7.8 is part of the 2024.0.8 Release Train.

What's Changed

✨ New features and improvements

🐞 Bug fixes

New Contributors

Full Changelog: reactor/reactor-core@v3.7.7...v3.7.8

Commits
  • 5630334 [release] Prepare and release 3.7.8
  • 23d4de5 [test] Fix SinksTest.OptimisticEmitFailureHandlerTest#shouldRetryOptimistical...
  • cd881ce Fix RetryBackoffSpec multiplier handling of fractional values (#4048)
  • d358fb1 [build] Include GitHub Actions in CodeQL checks (#4047)
  • 1f3f015 [build] Adjust GitHub Actions permissions
  • 4c7b244 Remove dependencies.gradle and finish migration to catalog (#4045)
  • ff9874e Bump JUnit from 5.13.1 to 5.13.2
  • cb21512 Bump com.gradleup.shadow from 8.3.6 to 8.3.7 (#4043)
  • 1f0a4fa Bump byteBuddyVersion from 1.17.5 to 1.17.6 (#4040)
  • beffae2 Bump ruby/setup-ruby from 1.176.0 to 1.245.0 in /.github/workflows (#4039)
  • Additional commits viewable in compare view

Updates io.projectreactor:reactor-test from 3.7.7 to 3.7.8

Release notes

Sourced from io.projectreactor:reactor-test's releases.

v3.7.8

Reactor Core 3.7.8 is part of the 2024.0.8 Release Train.

What's Changed

✨ New features and improvements

🐞 Bug fixes

New Contributors

Full Changelog: reactor/reactor-core@v3.7.7...v3.7.8

Commits
  • 5630334 [release] Prepare and release 3.7.8
  • 23d4de5 [test] Fix SinksTest.OptimisticEmitFailureHandlerTest#shouldRetryOptimistical...
  • cd881ce Fix RetryBackoffSpec multiplier handling of fractional values (#4048)
  • d358fb1 [build] Include GitHub Actions in CodeQL checks (#4047)
  • 1f3f015 [build] Adjust GitHub Actions permissions
  • 4c7b244 Remove dependencies.gradle and finish migration to catalog (#4045)
  • ff9874e Bump JUnit from 5.13.1 to 5.13.2
  • cb21512 Bump com.gradleup.shadow from 8.3.6 to 8.3.7 (#4043)
  • 1f0a4fa Bump byteBuddyVersion from 1.17.5 to 1.17.6 (#4040)
  • beffae2 Bump ruby/setup-ruby from 1.176.0 to 1.245.0 in /.github/workflows (#4039)
  • Additional commits viewable in compare view

Updates io.projectreactor:reactor-test from 3.7.7 to 3.7.8

Release notes

Sourced from io.projectreactor:reactor-test's releases.

v3.7.8

Reactor Core 3.7.8 is part of the 2024.0.8 Release Train.

What's Changed

✨ New features and improvements

🐞 Bug fixes

New Contributors

Full Changelog: reactor/reactor-core@v3.7.7...v3.7.8

Commits
  • 5630334 [release] Prepare and release 3.7.8
  • 23d4de5 [test] Fix SinksTest.OptimisticEmitFailureHandlerTest#shouldRetryOptimistical...
  • cd881ce Fix RetryBackoffSpec multiplier handling of fractional values (#4048)
  • d358fb1 [build] Include GitHub Actions in CodeQL checks (#4047)
  • 1f3f015 [build] Adjust GitHub Actions permissions
  • 4c7b244 Remove dependencies.gradle and finish migration to catalog (#4045)
  • ff9874e Bump JUnit from 5.13.1 to 5.13.2
  • cb21512 Bump com.gradleup.shadow from 8.3.6 to 8.3.7 (#4043)
  • 1f0a4fa Bump byteBuddyVersion from 1.17.5 to 1.17.6 (#4040)
  • beffae2 Bump ruby/setup-ruby from 1.176.0 to 1.245.0 in /.github/workflows (#4039)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-enforcer-plugin from 3.6.0 to 3.6.1

Release notes

Sourced from org.apache.maven.plugins:maven-enforcer-plugin's releases.

3.6.1

🚀 New features and improvements

🐛 Bug Fixes

  • Fix NPE when a classifier part is specified in bannedDependencies (#905) @​harrisric

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • 9b9b705 [maven-release-plugin] prepare release enforcer-3.6.1
  • 469f45c Move contributing information into README - fix cla link
  • fec424a Move contributing information into README
  • 3abe11d Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 (#910)
  • d58be76 Improve performance of transitive dependency checks (#904)
  • 1f7ac3c null analysis (#907)
  • 3bfbff8 Fix some typos
  • 8da0311 Remove unused javax.annotations dependency (#899)
  • 06bcf29 Remove unused methods (#900)
  • b25c800 Fix NPE when a classifier part is specified but an artifact classifier is nul...
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.module:jackson-module-kotlin from 2.19.1 to 2.19.2

Commits
  • a569a18 [maven-release-plugin] prepare release jackson-module-kotlin-2.19.2
  • 84923e3 Prep for 2.19.2
  • 524e8da Merge pull request #1014 from k163377/update-japicmp
  • ba7620c Update japicmp
  • 61ea671 Merge pull request #1009 from k163377/porting-tests
  • 605e34c Add exhaustive tests for JsonValue and JsonKey usage in value class
  • 4f69cfa Back to snapshot dep
  • 7855492 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven-dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [commons-io:commons-io](https://github.com/apache/commons-io) | `2.19.0` | `2.20.0` |
| [io.projectreactor:reactor-core](https://github.com/reactor/reactor-core) | `3.7.7` | `3.7.8` |
| [io.projectreactor:reactor-test](https://github.com/reactor/reactor-core) | `3.7.7` | `3.7.8` |
| [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.6.0` | `3.6.1` |
| [com.fasterxml.jackson.module:jackson-module-kotlin](https://github.com/FasterXML/jackson-module-kotlin) | `2.19.1` | `2.19.2` |


Updates `commons-io:commons-io` from 2.19.0 to 2.20.0
- [Changelog](https://github.com/apache/commons-io/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-io@rel/commons-io-2.19.0...rel/commons-io-2.20.0)

Updates `io.projectreactor:reactor-core` from 3.7.7 to 3.7.8
- [Release notes](https://github.com/reactor/reactor-core/releases)
- [Commits](reactor/reactor-core@v3.7.7...v3.7.8)

Updates `io.projectreactor:reactor-test` from 3.7.7 to 3.7.8
- [Release notes](https://github.com/reactor/reactor-core/releases)
- [Commits](reactor/reactor-core@v3.7.7...v3.7.8)

Updates `io.projectreactor:reactor-test` from 3.7.7 to 3.7.8
- [Release notes](https://github.com/reactor/reactor-core/releases)
- [Commits](reactor/reactor-core@v3.7.7...v3.7.8)

Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](apache/maven-enforcer@enforcer-3.6.0...enforcer-3.6.1)

Updates `com.fasterxml.jackson.module:jackson-module-kotlin` from 2.19.1 to 2.19.2
- [Commits](FasterXML/jackson-module-kotlin@jackson-module-kotlin-2.19.1...jackson-module-kotlin-2.19.2)

---
updated-dependencies:
- dependency-name: commons-io:commons-io
  dependency-version: 2.20.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: io.projectreactor:reactor-core
  dependency-version: 3.7.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: io.projectreactor:reactor-test
  dependency-version: 3.7.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: io.projectreactor:reactor-test
  dependency-version: 3.7.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: com.fasterxml.jackson.module:jackson-module-kotlin
  dependency-version: 2.19.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added this to the Release 4.11.1 milestone Jul 20, 2025
@dependabot dependabot bot requested a review from a team as a code owner July 20, 2025 04:32
@dependabot dependabot bot requested review from MateuszNaKodach, abuijze and smcvb and removed request for a team July 20, 2025 04:32
@github-actions github-actions bot enabled auto-merge July 20, 2025 04:32
Copy link

@github-actions github-actions bot merged commit 79ff6ce into master Jul 20, 2025
9 checks passed
@dependabot dependabot bot deleted the dependabot/maven/maven-dependencies-2f53ad43f5 branch July 20, 2025 04:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants