build(deps): bump the java group in /java with 2 updates - #20800
Merged
Conversation
Bumps the java group in /java with 2 updates: [io.netty:netty-tcnative-boringssl-static](https://github.com/netty/netty-tcnative) and [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin). Updates `io.netty:netty-tcnative-boringssl-static` from 2.0.80.Final to 2.0.81.Final - [Release notes](https://github.com/netty/netty-tcnative/releases) - [Commits](netty/netty-tcnative@netty-tcnative-parent-2.0.80.Final...netty-tcnative-parent-2.0.81.Final) Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.5.0 to 3.5.1 - [Release notes](https://github.com/apache/maven-jar-plugin/releases) - [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.5.0...maven-jar-plugin-3.5.1) --- updated-dependencies: - dependency-name: io.netty:netty-tcnative-boringssl-static dependency-version: 2.0.81.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: java - dependency-name: org.apache.maven.plugins:maven-jar-plugin dependency-version: 3.5.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: java ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
|
Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits. |
Contributor
There was a problem hiding this comment.
Pull request overview
Note
Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.
Updates Maven-managed dependency/plugin versions in the Java build to pick up newer releases.
Changes:
- Bumped
netty-tcnative-boringssl-staticversion property. - Bumped
maven-jar-pluginversion in the Java client module.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| java/pom.xml | Updates the shared tcnative.boring.ssl version property used across Java modules. |
| java/client/pom.xml | Updates the maven-jar-plugin version for the client module build. |
vitess-bot
Bot
added
NeedsWebsiteDocsUpdate
Contributor
Review ChecklistHello reviewers! 👋 Please follow this checklist when reviewing this Pull Request. General
Tests
Documentation
New flags
If a workflow is added or modified:
Backward compatibility
|
github-actions
Bot
added
Component: Java
timvaillancourt
removed
NeedsDescriptionUpdate
timvaillancourt
approved these changes
Aug 5, 2026
mattlord
approved these changes
Aug 5, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the java group in /java with 2 updates: io.netty:netty-tcnative-boringssl-static and org.apache.maven.plugins:maven-jar-plugin.
Updates
io.netty:netty-tcnative-boringssl-staticfrom 2.0.80.Final to 2.0.81.FinalCommits
402d9c3[maven-release-plugin] prepare release netty-tcnative-parent-2.0.81.Finalf44fcb9Add SSL.getGroupName(...) which returns the name of the used by ssl's most re...81ca0c5[maven-release-plugin] prepare for next development iterationUpdates
org.apache.maven.plugins:maven-jar-pluginfrom 3.5.0 to 3.5.1Release notes
Sourced from org.apache.maven.plugins:maven-jar-plugin's releases.
Commits
b0cd63d[maven-release-plugin] prepare release maven-jar-plugin-3.5.15318a4fAdd AGENTS.md + SECURITY.md security-model pointer for scanner discoverability8e0b9bbBump org.apache.maven.plugins:maven-plugins from 48 to 49 (#547)d5a438bFix javadoc774fac9Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0b71f403Bump mavenVersion from 3.9.15 to 3.9.16 (#536)9f2a001Use plugin version properties (3.x) (#535)68a978fBump org.apache.maven.plugins:maven-plugins from 47 to 48 (#534)e105821Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#529)953dc1aBump mavenVersion from 3.9.14 to 3.9.15 (#528)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions