Skip to content

Bump the gradle-dependencies group across 1 directory with 20 updates - #23

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/gradle-dependencies-f796e46f2c
Open

Bump the gradle-dependencies group across 1 directory with 20 updates#23
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/gradle-dependencies-f796e46f2c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the gradle-dependencies group with 20 updates in the / directory:

Package From To
gradle-wrapper 9.6.1 9.7.1
org.jspecify:jspecify 1.0.0 1.0.1
tools.jackson.core:jackson-databind 3.2.1 3.2.2
tools.jackson.dataformat:jackson-dataformat-yaml 3.2.1 3.2.2
io.micrometer:micrometer-core 1.17.0 1.17.1
io.lettuce:lettuce-core 7.6.0.RELEASE 7.7.0.RELEASE
io.swagger.parser.v3:swagger-parser 2.1.22 2.1.47
com.diffplug.spotless:spotless-plugin-gradle 8.8.0 8.10.1
com.diffplug.spotless 8.8.0 8.10.1
net.ltgt.gradle:gradle-errorprone-plugin 5.1.0 5.1.1
net.ltgt.errorprone 5.1.0 5.1.1
org.junit.jupiter:junit-jupiter 6.1.2 6.1.3
org.junit.platform:junit-platform-launcher 6.1.2 6.1.3
ch.qos.logback:logback-classic 1.5.38 1.6.3
ch.qos.logback:logback-core 1.5.38 1.6.3
io.netty:netty-bom 4.2.15.Final 4.2.17.Final
com.fasterxml.jackson:jackson-bom 2.21.5 2.22.2
org.apache.commons:commons-compress 1.26.0 1.28.0
org.apache.commons:commons-lang3 3.18.0 3.20.0
org.mozilla:rhino 1.7.14.1 1.9.1

Updates gradle-wrapper from 9.6.1 to 9.7.1

Release notes

Sourced from gradle-wrapper's releases.

9.7.1

The Gradle team is excited to announce Gradle 9.7.1.

This is a patch release for 9.7.0. We recommend using 9.7.1 instead of 9.7.0.

Here are the highlights of 9.7.0 release:

  • Isolated Projects graduates to incubating
  • Broader Configuration Cache compatibility
  • Resilient Sync helps you fix broken builds
  • More source locations in problem reports

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Adam, Aman Gautam, Aman Kumar, Anton Dubrouski, Aurimas, gbhavya07, Josh Friend, nicklauslittle-gov, Pragati, project516, Qin Mi, Ravi, sk-reddy17, Suvrat Acharya, Yongshun Ye.

Upgrade instructions

Switch your build to use Gradle 9.7.1 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.7.1 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

9.7.0

The Gradle team is excited to announce Gradle 9.7.0.

... (truncated)

Commits

Updates org.jspecify:jspecify from 1.0.0 to 1.0.1

Release notes

Sourced from org.jspecify:jspecify's releases.

1.0.1

JSpecify 1.0.1 makes small changes to documentation and build setup but no semantic changes.

Artifacts

Changes since version 1.0.0

  • The JSpecify module-info.class is now present at the root of the jar instead of under a multi-release root. This prevents the jar from containing a file at META-INF/versions/9/OSGI-INF/MANIFEST.MF, which was causing trouble for some users, particularly on Android.
  • The JSpecify module-info.class now contains its version number.
  • We have made various improvements to our Javadoc. While the latest docs are always available at jspecify.dev/docs/api, this release makes our improvements visible in the source files in your IDE.
Commits
  • ce9bec0 Set version to 1.0.1.
  • 7c7f0cf Migrate to com.vanniktech.maven.publish.
  • 2789f67 Bump yaml from 1.10.2 to 1.10.3 in /docs (#853)
  • 1638ca0 Bump svgo from 3.3.2 to 3.3.4 in /docs (#852)
  • 4e80178 Place module-info in the root of the jar. (#809)
  • 5b679e0 Codex found a few more questions the FAQ already answers. (#848)
  • 2019899 Link to the new location of the design FAQ and to specific sections. (#845)
  • f01eac9 batch of javadoc revisions for clarity and completeness (#671)
  • c4eff31 Import the nullness design FAQ as Markdown. (#838)
  • 75fb9cf Bump websocket-driver from 0.7.4 to 0.7.5 in /docs (#835)
  • Additional commits viewable in compare view

Updates tools.jackson.core:jackson-databind from 3.2.1 to 3.2.2

Commits
  • 3fd4e6f [maven-release-plugin] prepare release jackson-databind-3.2.2
  • 92eb111 Prep for 3.2.2 release
  • 18f42f5 Merge branch '3.1' into 3.2
  • 831a9a6 Post-release dep version bump
  • 9b927c0 [maven-release-plugin] prepare for next development iteration
  • 1f824e3 [maven-release-plugin] prepare release jackson-databind-3.1.6
  • 1f9cb5d Prep for 3.1.6 release
  • c88982d Merge branch '3.1' into 3.2
  • bcef554 Merge branch '2.x' into 3.1
  • 2e7c04e Merge branch '2.22' into 2.x
  • Additional commits viewable in compare view

Updates tools.jackson.dataformat:jackson-dataformat-yaml from 3.2.1 to 3.2.2

Commits
  • 58dbc91 [maven-release-plugin] prepare release jackson-dataformats-text-3.2.2
  • df326ad Prep for 3.2.2 release
  • 49d8896 Merge branch '3.1' into 3.2
  • 5f8512d Post-release dep version bump
  • 1ebbbb1 [maven-release-plugin] prepare for next development iteration
  • 45e1b8f [maven-release-plugin] prepare release jackson-dataformats-text-3.1.6
  • e404e95 Prep for 3.1.6 release
  • b3b4dcc Fix compiler warnings
  • a43c361 ...
  • a18f36c Merge branch '3.1' into 3.2
  • Additional commits viewable in compare view

Updates tools.jackson.dataformat:jackson-dataformat-yaml from 3.2.1 to 3.2.2

Commits
  • 58dbc91 [maven-release-plugin] prepare release jackson-dataformats-text-3.2.2
  • df326ad Prep for 3.2.2 release
  • 49d8896 Merge branch '3.1' into 3.2
  • 5f8512d Post-release dep version bump
  • 1ebbbb1 [maven-release-plugin] prepare for next development iteration
  • 45e1b8f [maven-release-plugin] prepare release jackson-dataformats-text-3.1.6
  • e404e95 Prep for 3.1.6 release
  • b3b4dcc Fix compiler warnings
  • a43c361 ...
  • a18f36c Merge branch '3.1' into 3.2
  • Additional commits viewable in compare view

Updates io.micrometer:micrometer-core from 1.17.0 to 1.17.1

Commits

Updates io.lettuce:lettuce-core from 7.6.0.RELEASE to 7.7.0.RELEASE

Release notes

Sourced from io.lettuce:lettuce-core's releases.

7.7.0.RELEASE

The Lettuce team is pleased to announce the Lettuce 7.7.0 minor release!

✨ Highlights

Lettuce 7.7.0 introduces support for the new features from Redis OSS 8.10 release, such as:

  • New command: HIMPORT - high-throughput compact hash bulk insertion - user-guide
  • New commands: LMOVEM, BLMOVEM - move multiple elements between lists
  • New command: SUNIONCARD - get the cardinality of the union of multiple sets
  • New command: SDIFFCARD - get the cardinality of the difference between sets
  • XREAD, XREADGROUP - new MAXCOUNT and MAXSIZE arguments to cap the cumulative reply entries and size
  • New command: FT.ALIASLIST - get all aliases for the index
  • Stemmer support for Malay and Tagalog languages

Feature support for Probabilistic data structures in Redis:


Lettuce 7.7.0 supports Redis 2.6+ up to Redis 8.x. In terms of Java runtime, Lettuce requires at least Java 8 and works with Java 24. The driver is tested against Redis 8.10, Redis 8.8, Redis 8.6, Redis 8.4, Redis 8.2, Redis 8.0, Redis 7.4 and Redis 7.2.

Thanks to all contributors who made Lettuce 7.7.0.RELEASE possible.

📗 Links Reference documentation: https://lettuce.io/core/7.7.0.RELEASE

⭐ New Features

🐞 Bug Fixes

... (truncated)

Changelog

Sourced from io.lettuce:lettuce-core's changelog.

Lettuce 7.7.0 RELEASE NOTES

The Lettuce team is pleased to announce the Lettuce 7.7.0 minor release!

✨ Highlights

Lettuce 7.7.0 introduces support for the new features from Redis OSS 8.10 release, such as:

  • New command: HIMPORT - high-throughput compact hash bulk insertion - user-guide
  • New commands: LMOVEM, BLMOVEM - move multiple elements between lists
  • New command: SUNIONCARD - get the cardinality of the union of multiple sets
  • New command: SDIFFCARD - get the cardinality of the difference between sets
  • XREAD, XREADGROUP - new MAXCOUNT and MAXSIZE arguments to cap the cumulative reply entries and size
  • New command: FT.ALIASLIST - get all aliases for the index
  • Stemmer support for Malay and Tagalog languages

Feature support for Probabilistic data structures in Redis:


Lettuce 7.7.0 supports Redis 2.6+ up to Redis 8.x. In terms of Java runtime, Lettuce requires at least Java 8 and works with Java 24. The driver is tested against Redis 8.10, Redis 8.8, Redis 8.6, Redis 8.4, Redis 8.2, Redis 8.0, Redis 7.4 and Redis 7.2.

Thanks to all contributors who made Lettuce 7.7.0.RELEASE possible.

📗 Links Reference documentation: https://lettuce.io/core/7.7.0.RELEASE

⭐ New Features

🐞 Bug Fixes

... (truncated)

Commits
  • 1960d49 Release 7.7.0 (#3893)
  • 219a228 Revert "Deprecate Context utils (#3834)"
  • 781deec Fix/cluster reject commands pending future (#3782)
  • bec7cf5 add Benchmark (jmh) benchmark result for 5a7e25e649035cbc0131909866d10b240370...
  • 5a7e25e add Benchmark (jmh) benchmark result for 4943ae73ac7dd71119baaa301619191539ab...
  • 4943ae7 Revert "Add 'connection.commands(factory)' accessor and deprecate 'reactive()...
  • 8d6af65 Revert "Add connection.commands(factory) accessor and deprecate `reactive()...
  • 6185533 Revert "Fix connection pool support for new accessor (#3788)"
  • dd09a0b Revert "Fix backwards compatibility in connection interface (#3798)"
  • 21f3996 Revert "[reactor-optional] Deprecate reactive in TraceContextProvider (#3827)"
  • Additional commits viewable in compare view

Updates io.swagger.parser.v3:swagger-parser from 2.1.22 to 2.1.47

Release notes

Sourced from io.swagger.parser.v3:swagger-parser's releases.

Swagger-parser 2.1.47 released!

  • build(deps): bump org.testng:testng from 7.11.0 to 7.12.0 (#2371)
  • build(deps): bump org.slf4j:slf4j-simple from 2.0.9 to 2.0.18 (#2358)
  • build(deps-dev): bump org.apache.maven.plugins:maven-enforcer-plugin from 3.4.1 to 3.6.3 (#2351)
  • Resolve same-named schemas from different files as distinct components (fixes #2333) (#2349)
  • fix: resolve relative refs correctly from spring boot jars (#2080, #2298) (#2320)

Swagger-parser 2.1.46 released!

  • chore: introduce jackson bom and update to 2.22 line (#2368)

Swagger-parser 2.1.45 released!

  • bump swagger-core to 2.2.52 (#2359)
  • build(deps): bump org.yaml:snakeyaml from 2.4 to 2.6 (#2355)
  • build(deps-dev): bump org.sonatype.central:central-publishing-maven-plugin from 0.7.0 to 0.11.0 (#2354)
  • build(deps): bump swagger-core-version from 2.2.50 to 2.2.51 (#2353)
  • build(deps): bump com.fasterxml.jackson.core:jackson-databind from 2.21.1 to 2.22.0 (#2352)
  • build(deps-dev): bump org.apache.maven.plugins:maven-source-plugin from 3.3.0 to 3.4.0 (#2350)
  • chore: fix syntax error in next-snapshot workflow (#2347)
  • build(deps): bump org.apache.maven.plugins:maven-jar-plugin from 3.3.0 to 3.5.0 (#2329)
  • build(deps-dev): bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.3 to 3.12.0 (#2328)

Swagger-parser 2.1.44 released!

  • fix: Replace the unsafe Yaml instantiation in ReferenceVisitor.getYam… (#2344)

Swagger-parser 2.1.43 released!

  • fix: resolve refs within external schemas (#2338)

Swagger-parser 2.1.42 released!

  • Update swagger-core to 2.2.50 (#2334)
  • fix: use explicit prefix for array items with dotted property names (#2330)
  • chore: migrate from tibdex/github-app-token to actions/create-github-app-token (#2324)
  • build(deps): bump commons-io:commons-io from 2.20.0 to 2.22.0 (#2319)
  • build(deps): bump org.apache.commons:commons-lang3 from 3.18.0 to 3.20.0 (#2318)
  • build(deps): bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.5 to 3.5.5 (#2316)

Swagger-parser 2.1.41 released!

  • Bump org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.14 (#2317)
  • chore: update v2 parser to 1.0.76 (#2314)
  • Prevent StackOverflowError in ResolverFully (#2297)
  • Fix thread-safety bug in OpenAPIDereferencer31 (#2294)
  • fix(converter): keep x-nullable in shared $ref responses (#2276)

Swagger-parser 2.1.40 released!

... (truncated)

Commits
  • 6e50098 prepare release 2.1.47 (#2380)
  • eef1cd2 Resolve same-named schemas from different files as distinct components (fixes...
  • 35ada6a build(deps-dev): bump org.apache.maven.plugins:maven-enforcer-plugin (#2351)
  • 3ee75b3 build(deps): bump org.testng:testng from 7.11.0 to 7.12.0 (#2371)
  • 208ae7a build(deps): bump org.slf4j:slf4j-simple from 2.0.9 to 2.0.18 (#2358)
  • 0827c4a Normalize relative ref paths to avoid duplicating schemas (#2105)
  • 4b6e6b4 fix: support paths from non-default file systems (#2320)
  • 10e5b45 bump snapshot 2.1.47-SNAPSHOT (#2370)
  • 37d7afd prepare release 2.1.46 (#2369)
  • 70a592c chore: introduce jackson bom and update to 2.22 line (#2368)
  • Additional commits viewable in compare view

Updates com.diffplug.spotless:spotless-plugin-gradle from 8.8.0 to 8.10.1

Release notes

Sourced from com.diffplug.spotless:spotless-plugin-gradle's releases.

Gradle Plugin v8.10.1

Fixed

  • prettier() and other npm-based steps no longer fail to start on npm 12 (EUNKNOWNCONFIG from --scripts-prepend-node-path). (#3024)
  • spotlessInternalRegisterDependencies now writes its output under a build directory that is configured after the plugin is applied, instead of always under the default build/. (#2114)
  • targetExclude now accepts a Gradle Directory, DirectoryProperty, or Provider<Directory> and excludes the files under it. Previously the directory was treated as a single file, so excluding one silently did nothing. (#2667)

Gradle Plugin v8.10.0

Added

  • New shortenFullyQualifiedTypes() step for Java, which replaces fully-qualified type names with their simple names and adds the imports they need. Best combined with importOrder() and removeUnusedImports(). (#2945)
  • Add embedded lockfiles to Eclipse JDT for every supported version (4.9 through 4.40), so eclipse() resolves from Maven Central instead of querying a P2 update site. Versions without an embedded lockfile still fall back to P2 provisioning. (#1996)

Fixed

  • removeUnusedImports no longer fails on Java import module declarations. (#2890)
  • expandWildcardImports() now builds its type-solver classpath from each Java source set's compile classpath instead of every resolvable configuration. Unrelated configurations (for example generated-code or custom resolvable configs that are not ready yet) are no longer resolved. (#2998)
  • spotlessCheck violation message now suggests the correct composite/included-build task path (e.g. ./gradlew :my-utils:spotlessApply) instead of a bare spotlessApply / :spotlessApply that does not select included-build tasks. (#2421)
  • Parallel multi-project builds no longer intermittently fail with "Cannot fingerprint input property 'stepsInternalEquality': ConfigurationCacheHackList cannot be serialized" / "Failed to provision P2 dependencies" when using eclipse() (or other P2-backed steps). Subprojects now share one deduping P2 provisioner and P2 queries are serialized process-wide. (#3004)

Changes

  • Default google-java-format remains 1.28.0 on JVM 17; bumps to 1.30.0 on JVM 21+; require at least 1.30.0 on JVM 25+ for import module support.
  • Bump default eclipse version to latest 4.39 -> 4.40. (#1996)
  • Bump default adocfmt version 0.2.0 -> 0.3.1, which adds table formatting support (formatTables, tableLayout, tableMaxLineWidth, tableBlankLines).

Gradle Plugin v8.9.0

Added

Fixed

  • Prevent parallel Gradle input fingerprinting from failing when toggleOffOn() wraps a slow lazy formatter step with no matching target files. (#2994)

Changes

  • Bump default greclipse version to latest 4.39 -> 4.40. (#2989)
  • Bump default tabletest-formatter version 1.1.1 -> 1.1.2.
Commits
  • f2f2348 Published gradle/8.10.1
  • 4bc8980 Published lib/4.10.1
  • 6fedfd5 chore(deps): update plugin errorprone to v5.1.1 (#3035)
  • 5e10f0b chore(deps): update plugin errorprone to v5.1.1
  • 3aa82b5 fix: expand a directory passed to targetExclude into the files under it (#3032)
  • 68bddde shortenFullyQualifiedTypes: skip FQNs whose simple name clashes with types de...
  • 6f73ed3 fix(deps): update dependency org.codehaus.plexus:plexus-utils to v4.1.0 (#3030)
  • bdeafe7 docs: changelog entry for the targetExclude directory fix
  • 4187eb3 fix: expand a directory passed to targetExclude into the files under it
  • cd525f2 shortenFullyQualifiedTypes: skip FQNs clashing with types declared in the sam...
  • Additional commits viewable in compare view

Updates com.diffplug.spotless from 8.8.0 to 8.10.1

Updates net.ltgt.gradle:gradle-errorprone-plugin from 5.1.0 to 5.1.1

Release notes

Sourced from net.ltgt.gradle:gradle-errorprone-plugin's releases.

v5.1.1

Stop configuring Configuration.visible on the errorprone configuration (#188, eb7b2eff9ba4b04437edeeea5f13d228f136d3f2)

This release also no longer uses Kotlin to expose its Kotlin extension function/property, but now relies on the Gradle Kotlin Accessors Generator. This shouldn't have any side effect but is probably worth mentioning as a source of possible regressions in some specific setups.

Commits
  • eb7b2ef Stop configuring Configuration.visible
  • e043cef Update Gradle to 9.7.1
  • 83b5f77 Upgrade to Gradle Kotlin Accessors Generator 0.2.0
  • 4b16e4b Migrate from Kotlin to Gradle Kotlin Accessors Generator
  • 543d826 Bump com.diffplug.spotless from 8.9.0 to 8.10.0 in the all-minor group
  • 6e94a41 Bump org.junit.jupiter:junit-jupiter-api in the all-minor group
  • 9ad0210 Bump com.google.googlejavaformat:google-java-format
  • 4e859fe Bump com.diffplug.spotless from 8.8.0 to 8.9.0 in the all-minor group
  • e15f6f0 Bump com.uber.nullaway:nullaway in the all-minor group
  • 4b54655 Bump org.junit.jupiter:junit-jupiter-api in the all-minor group
  • Additional commits viewable in compare view

Updates net.ltgt.errorprone from 5.1.0 to 5.1.1

Updates org.junit.jupiter:junit-jupiter from 6.1.2 to 6.1.3

Release notes

Sourced from org.junit.jupiter:junit-jupiter's releases.

JUnit 6.1.3 = Platform 6.1.3 + Jupiter 6.1.3 + Vintage 6.1.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.2...r6.1.3

Commits
  • f59f60d Release 6.1.3
  • cd8ec92 Finalize 6.1.3 release notes
  • c8729f2 Restore compatibility with GraalVM 25 (#5901)
  • ddc9e74 Update graalvm/setup-graalvm action to v1.6.4 (#5959)
  • fe2c52a Update plugin org.graalvm.buildtools.native to v1.1.7 (#5923)
  • 62afc02 Delay GraalVM plugin updates for 3 days
  • 0cc2902 Skip graalVmTest task if GraalVM env vars are not set
  • f6bbfc5 Move GraalVM tests to separate test task (#5903)
  • e87e052 Update plugin org.graalvm.buildtools.native to v1.1.6 (#5899)
  • 1cd56df Update plugin org.graalvm.buildtools.native to v1.1.5 (#5880)
  • Additional commits viewable in compare view

Updates org.junit.platform:junit-platform-launcher from 6.1.2 to 6.1.3

Release notes

Sourced from org.junit.platform:junit-platform-launcher's releases.

JUnit 6.1.3 = Platform 6.1.3 + Jupiter 6.1.3 + Vintage 6.1.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.2...r6.1.3

Commits
  • f59f60d Release 6.1.3
  • cd8ec92 Finalize 6.1.3 release notes
  • c8729f2 Restore compatibility with GraalVM 25 (#5901)
  • ddc9e74 Update graalvm/setup-graalvm action to v1.6.4 (#5959)
  • fe2c52a Update plugin org.graalvm.buildtools.native to v1.1.7 (#5923)
  • 62afc02 Delay GraalVM plugin updates for 3 days
  • 0cc2902 Skip graalVmTest task if GraalVM env vars are not set
  • f6bbfc5 Move GraalVM tests to separate test task (#5903)
  • e87e052 Update plugin org.graalvm.buildtools.native to v1.1.6 (#5899)
  • 1cd56df Update plugin org.graalvm.buildtools.native to v1.1.5 (#5880)
  • Additional commits viewable in compare view

Updates org.junit.platform:junit-platform-launcher from 6.1.2 to 6.1.3

Release notes

Sourced from org.junit.platform:junit-platform-launcher's releases.

JUnit 6.1.3 = Platform 6.1.3 + Jupiter 6.1.3 + Vintage 6.1.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.2...r6.1.3

Commits
  • f59f60d Release 6.1.3
  • cd8ec92 Finalize 6.1.3 release notes
  • c8729f2 Restore compatibility with GraalVM 25 (#5901)
  • ddc9e74 Update graalvm/setup-graalvm action to v1.6.4 (#5959)
  • fe2c52a Update plugin org.graalvm.buildtools.native to v1.1.7 (#5923)
  • 62afc02 Delay GraalVM plugin updates for 3 days
  • 0cc2902 Skip graalVmTest task if GraalVM env vars are not set
  • f6bbfc5 Move GraalVM tests to separate test task (#5903)
  • e87e052 Update plugin org.graalvm.buildtools.native to v1.1.6 (#5899)
  • 1cd56df Update plugin org.graalvm.buildtools.native to v1.1.5 (#5880)
  • Additional commits viewable in compare view

Updates ch.qos.logback:logback-classic from 1.5.38 to 1.6.3

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.3

2026-08-14 Release of logback version 1.6.3

  • In response CVE-2026-19880, MDCBasedDiscriminator (used by SiftingAppender) now strips forward and backward slashes (/, \) from MDC values before they are used as discriminating keys. This prevents path segments from escaping into destinations controlled by an attacker. When sanitisation actually changes a value, a warning is emitted; the warning is rate-limited (a small batch, then a lull of about ten minutes).

  • Colour console support is split out into a dedicated JansiConsoleAppender. It wraps stdout or stderr with Jansi so ANSI escape sequences (for example coloured patterns) render correctly on terminals that need it, notably Windows. Prefer this class over the older path described next. See the appenders documentation.

  • The withJansi property on ConsoleAppender is deprecated. Existing configurations that still set <withJansi>true</withJansi> continue to work for compatibility, but new setups should use JansiConsoleAppender instead.

  • ConsoleAppender no longer treats the process console as an exclusive resource: stopping it does not close System.out / System.err. JansiConsoleAppender pairs each AnsiConsole.systemInstall() with systemUninstall() on stop, so repeated start/stop cycles do not leave Jansi installed or tear down streams shared with the rest of the JVM. Related behavior is covered by tests for issues/1063.

  • Invocation throttling helpers were reworked: SimpleInvocationGate is renamed FixedIntervalInvocationGate, and BatchedFixedIntervalInvocationGate allows a short burst of invocations before applying a fixed lull. The sanitisation warning above uses the batched gate.

  • The JPMS module-info for logback-core now exports the ch.qos.logback.core.property package, which had been missing from the module descriptor.

  • A bit-wise identical binary of this version can be reproduced by building from source code at commit e8e824dede022a6d7208b36cfa875b0d1b7772f3 associated with the tag v_1.6.3. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

-- Sponsoring SLF4J/logback/reload4j at https://github.com/sponsors/qos-ch

Logback 1.6.2

clean.full.1.6.2.mp4

2026-08-10 Release of logback version 1.6.2

  • Configuration analysis now detects contradictory caller-data inclusion instructions. For example, an AsyncAppender, SocketAppender or SMTPAppender with includeCallerData left at the default false is incompatible with a layout or encoder pattern that uses a caller-data converter such as %C, %M, %L, %F, %l or %caller. At runtime those converters would print question marks and still incur ex...

    Description has been truncated

Bumps the gradle-dependencies group with 20 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [gradle-wrapper](https://github.com/gradle/gradle) | `9.6.1` | `9.7.1` |
| [org.jspecify:jspecify](https://github.com/jspecify/jspecify) | `1.0.0` | `1.0.1` |
| [tools.jackson.core:jackson-databind](https://github.com/FasterXML/jackson-databind) | `3.2.1` | `3.2.2` |
| [tools.jackson.dataformat:jackson-dataformat-yaml](https://github.com/FasterXML/jackson-dataformats-text) | `3.2.1` | `3.2.2` |
| [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer-commercial) | `1.17.0` | `1.17.1` |
| [io.lettuce:lettuce-core](https://github.com/redis/lettuce) | `7.6.0.RELEASE` | `7.7.0.RELEASE` |
| [io.swagger.parser.v3:swagger-parser](https://github.com/swagger-api/swagger-parser) | `2.1.22` | `2.1.47` |
| [com.diffplug.spotless:spotless-plugin-gradle](https://github.com/diffplug/spotless) | `8.8.0` | `8.10.1` |
| com.diffplug.spotless | `8.8.0` | `8.10.1` |
| [net.ltgt.gradle:gradle-errorprone-plugin](https://github.com/tbroyer/gradle-errorprone-plugin) | `5.1.0` | `5.1.1` |
| net.ltgt.errorprone | `5.1.0` | `5.1.1` |
| [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework) | `6.1.2` | `6.1.3` |
| [org.junit.platform:junit-platform-launcher](https://github.com/junit-team/junit-framework) | `6.1.2` | `6.1.3` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.38` | `1.6.3` |
| [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) | `1.5.38` | `1.6.3` |
| [io.netty:netty-bom](https://github.com/netty/netty) | `4.2.15.Final` | `4.2.17.Final` |
| [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `2.21.5` | `2.22.2` |
| [org.apache.commons:commons-compress](https://github.com/apache/commons-compress) | `1.26.0` | `1.28.0` |
| org.apache.commons:commons-lang3 | `3.18.0` | `3.20.0` |
| [org.mozilla:rhino](https://github.com/mozilla/rhino) | `1.7.14.1` | `1.9.1` |



Updates `gradle-wrapper` from 9.6.1 to 9.7.1
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v9.6.1...v9.7.1)

Updates `org.jspecify:jspecify` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/jspecify/jspecify/releases)
- [Commits](jspecify/jspecify@v1.0.0...v1.0.1)

Updates `tools.jackson.core:jackson-databind` from 3.2.1 to 3.2.2
- [Commits](FasterXML/jackson-databind@jackson-databind-3.2.1...jackson-databind-3.2.2)

Updates `tools.jackson.dataformat:jackson-dataformat-yaml` from 3.2.1 to 3.2.2
- [Commits](FasterXML/jackson-dataformats-text@jackson-dataformats-text-3.2.1...jackson-dataformats-text-3.2.2)

Updates `tools.jackson.dataformat:jackson-dataformat-yaml` from 3.2.1 to 3.2.2
- [Commits](FasterXML/jackson-dataformats-text@jackson-dataformats-text-3.2.1...jackson-dataformats-text-3.2.2)

Updates `io.micrometer:micrometer-core` from 1.17.0 to 1.17.1
- [Commits](https://github.com/micrometer-metrics/micrometer-commercial/commits)

Updates `io.lettuce:lettuce-core` from 7.6.0.RELEASE to 7.7.0.RELEASE
- [Release notes](https://github.com/redis/lettuce/releases)
- [Changelog](https://github.com/redis/lettuce/blob/main/RELEASE-NOTES.md)
- [Commits](redis/lettuce@7.6.0.RELEASE...7.7.0.RELEASE)

Updates `io.swagger.parser.v3:swagger-parser` from 2.1.22 to 2.1.47
- [Release notes](https://github.com/swagger-api/swagger-parser/releases)
- [Commits](swagger-api/swagger-parser@v2.1.22...v2.1.47)

Updates `com.diffplug.spotless:spotless-plugin-gradle` from 8.8.0 to 8.10.1
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@gradle/8.8.0...gradle/8.10.1)

Updates `com.diffplug.spotless` from 8.8.0 to 8.10.1

Updates `net.ltgt.gradle:gradle-errorprone-plugin` from 5.1.0 to 5.1.1
- [Release notes](https://github.com/tbroyer/gradle-errorprone-plugin/releases)
- [Commits](tbroyer/gradle-errorprone-plugin@v5.1.0...v5.1.1)

Updates `net.ltgt.errorprone` from 5.1.0 to 5.1.1

Updates `org.junit.jupiter:junit-jupiter` from 6.1.2 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.1.2...r6.1.3)

Updates `org.junit.platform:junit-platform-launcher` from 6.1.2 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.1.2...r6.1.3)

Updates `org.junit.platform:junit-platform-launcher` from 6.1.2 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.1.2...r6.1.3)

Updates `ch.qos.logback:logback-classic` from 1.5.38 to 1.6.3
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.38...v_1.6.3)

Updates `ch.qos.logback:logback-core` from 1.5.38 to 1.6.3
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.38...v_1.6.3)

Updates `io.netty:netty-bom` from 4.2.15.Final to 4.2.17.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.15.Final...netty-4.2.17.Final)

Updates `com.fasterxml.jackson:jackson-bom` from 2.21.5 to 2.22.2
- [Commits](FasterXML/jackson-bom@jackson-bom-2.21.5...jackson-bom-2.22.2)

Updates `ch.qos.logback:logback-core` from 1.5.38 to 1.6.3
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.38...v_1.6.3)

Updates `org.apache.commons:commons-compress` from 1.26.0 to 1.28.0
- [Changelog](https://github.com/apache/commons-compress/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-compress@rel/commons-compress-1.26.0...rel/commons-compress-1.28.0)

Updates `org.apache.commons:commons-lang3` from 3.18.0 to 3.20.0

Updates `org.mozilla:rhino` from 1.7.14.1 to 1.9.1
- [Release notes](https://github.com/mozilla/rhino/releases)
- [Changelog](https://github.com/mozilla/rhino/blob/master/RELEASE-NOTES.md)
- [Commits](https://github.com/mozilla/rhino/commits)

Updates `com.diffplug.spotless` from 8.8.0 to 8.10.1

Updates `net.ltgt.errorprone` from 5.1.0 to 5.1.1

---
updated-dependencies:
- dependency-name: gradle-wrapper
  dependency-version: 9.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: org.jspecify:jspecify
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: tools.jackson.core:jackson-databind
  dependency-version: 3.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: tools.jackson.dataformat:jackson-dataformat-yaml
  dependency-version: 3.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: tools.jackson.dataformat:jackson-dataformat-yaml
  dependency-version: 3.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: io.micrometer:micrometer-core
  dependency-version: 1.17.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: io.lettuce:lettuce-core
  dependency-version: 7.7.0.RELEASE
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: io.swagger.parser.v3:swagger-parser
  dependency-version: 2.1.47
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: com.diffplug.spotless:spotless-plugin-gradle
  dependency-version: 8.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: com.diffplug.spotless
  dependency-version: 8.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: net.ltgt.gradle:gradle-errorprone-plugin
  dependency-version: 5.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: net.ltgt.errorprone
  dependency-version: 5.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: org.junit.jupiter:junit-jupiter
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: org.junit.platform:junit-platform-launcher
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: org.junit.platform:junit-platform-launcher
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: ch.qos.logback:logback-core
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: io.netty:netty-bom
  dependency-version: 4.2.17.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-version: 2.22.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: ch.qos.logback:logback-core
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: org.apache.commons:commons-compress
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: org.mozilla:rhino
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: com.diffplug.spotless
  dependency-version: 8.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: net.ltgt.errorprone
  dependency-version: 5.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 1, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) September 1, 2026 02:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants