From 58f1763495a39067c438ecc6d69320b9a42bd337 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Thu, 20 Aug 2026 09:18:08 +0000 Subject: [PATCH] fix(deps): update all dependencies --- .github/workflows/codeql.yml | 6 +++--- .github/workflows/semgrep.yml | 2 +- build.gradle | 2 +- commercetools/commercetools-graphql-api/build.gradle | 8 ++++---- .../commercetools-monitoring-datadog/build.gradle | 6 +++--- commercetools/commercetools-okhttp-client5/build.gradle | 2 +- .../commercetools-reactornetty-client/build.gradle | 4 ++-- commercetools/commercetools-sdk-java-api/build.gradle | 2 +- .../commercetools-sdk-java-checkout/build.gradle | 2 +- commercetools/commercetools-sdk-java-history/build.gradle | 2 +- .../commercetools-sdk-java-importapi/build.gradle | 2 +- commercetools/internal-docs/build.gradle | 8 ++++---- common-plugins/build.gradle | 2 +- common-plugins/javaparser/build.gradle | 4 ++-- gradle/wrapper/gradle-wrapper.properties | 2 +- rmf/rmf-java-base/build.gradle | 4 ++-- 16 files changed, 29 insertions(+), 29 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index eb9fb8e6c2..ac19b35cad 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -54,7 +54,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 + uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -68,7 +68,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 + uses: github/codeql-action/autobuild@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 # ℹī¸ Command-line programs to run using the OS shell. # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun @@ -81,6 +81,6 @@ jobs: # ./location_of_script_within_repo/buildscript.sh - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 + uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml index a4acfc36ad..cf6b8d6c31 100644 --- a/.github/workflows/semgrep.yml +++ b/.github/workflows/semgrep.yml @@ -36,7 +36,7 @@ jobs: - name: Run Semgrep run: semgrep scan --sarif --output=semgrep.sarif --config=p/auto --config=p/dockerfile --config=p/typescript --config=p/javascript --config=p/java --metrics=off --verbose - name: Upload SARIF file for GitHub Advanced Security Dashboard - uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 + uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 with: sarif_file: semgrep.sarif if: always() diff --git a/build.gradle b/build.gradle index c667b855bc..9811d5d056 100644 --- a/build.gradle +++ b/build.gradle @@ -78,7 +78,7 @@ allprojects { dependencies { taglet 'com.commercetools.build.taglets:commercetools-taglets:3.6.3' - taglet 'com.google.guava:guava:33.6.0-jre' + taglet 'com.google.guava:guava:33.7.1-jre' taglet 'org.jdrupes.taglets:plantuml-taglet:3.1.0' } } diff --git a/commercetools/commercetools-graphql-api/build.gradle b/commercetools/commercetools-graphql-api/build.gradle index 9b652ce2b4..b0fbdfe9be 100644 --- a/commercetools/commercetools-graphql-api/build.gradle +++ b/commercetools/commercetools-graphql-api/build.gradle @@ -33,15 +33,15 @@ dependencies { implementation 'com.google.code.findbugs:jsr305:3.0.2' implementation 'jakarta.validation:jakarta.validation-api:3.1.1' api 'com.graphql-java:graphql-java:19.11' - api 'tools.jackson.core:jackson-databind:3.1.5' - api 'tools.jackson.core:jackson-core:3.2.1' + api 'tools.jackson.core:jackson-databind:3.2.2' + api 'tools.jackson.core:jackson-core:3.2.2' //api jackson_core.datatype api 'com.netflix.graphql.dgs.codegen:graphql-dgs-codegen-shared-core:8.6.0' constraints { - implementation("com.fasterxml.jackson.core:jackson-core:2.22.1") { + implementation("com.fasterxml.jackson.core:jackson-core:2.22.2") { because("security update") } - implementation("com.fasterxml.jackson.core:jackson-databind:2.22.1") { + implementation("com.fasterxml.jackson.core:jackson-databind:2.22.2") { because("security update") } } diff --git a/commercetools/commercetools-monitoring-datadog/build.gradle b/commercetools/commercetools-monitoring-datadog/build.gradle index 1c04a9d933..a445170f7f 100644 --- a/commercetools/commercetools-monitoring-datadog/build.gradle +++ b/commercetools/commercetools-monitoring-datadog/build.gradle @@ -1,12 +1,12 @@ dependencies { api project(":rmf:rmf-java-base") implementation "com.datadoghq:java-dogstatsd-client:4.4.5" - implementation "com.datadoghq:datadog-api-client:2.56.0" + implementation "com.datadoghq:datadog-api-client:2.59.0" constraints { - implementation("com.fasterxml.jackson.core:jackson-core:2.22.1") { + implementation("com.fasterxml.jackson.core:jackson-core:2.22.2") { because("security update") } - implementation("com.fasterxml.jackson.core:jackson-databind:2.22.1") { + implementation("com.fasterxml.jackson.core:jackson-databind:2.22.2") { because("security update") } } diff --git a/commercetools/commercetools-okhttp-client5/build.gradle b/commercetools/commercetools-okhttp-client5/build.gradle index 8e18e14224..2a57b9fdd2 100644 --- a/commercetools/commercetools-okhttp-client5/build.gradle +++ b/commercetools/commercetools-okhttp-client5/build.gradle @@ -11,7 +11,7 @@ jmh { dependencies { api project(":rmf:rmf-java-base") - api "com.squareup.okhttp3:okhttp:5.4.0" version { + api "com.squareup.okhttp3:okhttp:5.5.0" version { strictly '[5.0,5.99999]' prefer "5.4.0" } diff --git a/commercetools/commercetools-reactornetty-client/build.gradle b/commercetools/commercetools-reactornetty-client/build.gradle index 3dd177b53f..f146173b09 100644 --- a/commercetools/commercetools-reactornetty-client/build.gradle +++ b/commercetools/commercetools-reactornetty-client/build.gradle @@ -2,8 +2,8 @@ dependencies { api project(":rmf:rmf-java-base") - api "io.projectreactor.netty:reactor-netty-http:1.3.6" - api "io.projectreactor.netty:reactor-netty-core:1.3.6" + api "io.projectreactor.netty:reactor-netty-http:1.3.7" + api "io.projectreactor.netty:reactor-netty-core:1.3.7" implementation 'jakarta.validation:jakarta.validation-api:3.1.1' } diff --git a/commercetools/commercetools-sdk-java-api/build.gradle b/commercetools/commercetools-sdk-java-api/build.gradle index 2db5fe7076..6f45afc23b 100644 --- a/commercetools/commercetools-sdk-java-api/build.gradle +++ b/commercetools/commercetools-sdk-java-api/build.gradle @@ -3,7 +3,7 @@ dependencies { api project(':rmf:rmf-java-base') api project(':commercetools:commercetools-money') api 'com.fasterxml.jackson.core:jackson-annotations:2.22' - api 'tools.jackson.core:jackson-databind:3.1.5' + api 'tools.jackson.core:jackson-databind:3.2.2' implementation 'com.google.code.findbugs:jsr305:3.0.2' implementation 'jakarta.validation:jakarta.validation-api:3.1.1' api 'org.apache.commons:commons-lang3:3.20.0' diff --git a/commercetools/commercetools-sdk-java-checkout/build.gradle b/commercetools/commercetools-sdk-java-checkout/build.gradle index fb0b22bcfd..9d28aa3416 100644 --- a/commercetools/commercetools-sdk-java-checkout/build.gradle +++ b/commercetools/commercetools-sdk-java-checkout/build.gradle @@ -2,7 +2,7 @@ dependencies { api project(':rmf:rmf-java-base') api 'com.fasterxml.jackson.core:jackson-annotations:2.22' - api 'tools.jackson.core:jackson-databind:3.1.5' + api 'tools.jackson.core:jackson-databind:3.2.2' implementation 'com.google.code.findbugs:jsr305:3.0.2' implementation 'jakarta.validation:jakarta.validation-api:3.1.1' api 'org.apache.commons:commons-lang3:3.20.0' diff --git a/commercetools/commercetools-sdk-java-history/build.gradle b/commercetools/commercetools-sdk-java-history/build.gradle index 296ee71bb2..eadf81a7c4 100644 --- a/commercetools/commercetools-sdk-java-history/build.gradle +++ b/commercetools/commercetools-sdk-java-history/build.gradle @@ -2,7 +2,7 @@ dependencies { api project(':rmf:rmf-java-base') api 'com.fasterxml.jackson.core:jackson-annotations:2.22' - api 'tools.jackson.core:jackson-databind:3.1.5' + api 'tools.jackson.core:jackson-databind:3.2.2' implementation 'com.google.code.findbugs:jsr305:3.0.2' implementation 'jakarta.validation:jakarta.validation-api:3.1.1' api 'org.apache.commons:commons-lang3:3.20.0' diff --git a/commercetools/commercetools-sdk-java-importapi/build.gradle b/commercetools/commercetools-sdk-java-importapi/build.gradle index fb0b22bcfd..9d28aa3416 100644 --- a/commercetools/commercetools-sdk-java-importapi/build.gradle +++ b/commercetools/commercetools-sdk-java-importapi/build.gradle @@ -2,7 +2,7 @@ dependencies { api project(':rmf:rmf-java-base') api 'com.fasterxml.jackson.core:jackson-annotations:2.22' - api 'tools.jackson.core:jackson-databind:3.1.5' + api 'tools.jackson.core:jackson-databind:3.2.2' implementation 'com.google.code.findbugs:jsr305:3.0.2' implementation 'jakarta.validation:jakarta.validation-api:3.1.1' api 'org.apache.commons:commons-lang3:3.20.0' diff --git a/commercetools/internal-docs/build.gradle b/commercetools/internal-docs/build.gradle index 3c80bf9a19..aaedf5b493 100644 --- a/commercetools/internal-docs/build.gradle +++ b/commercetools/internal-docs/build.gradle @@ -14,16 +14,16 @@ dependencies { testImplementation project(path: ':commercetools:commercetools-graphql-api', configuration: 'integrationTestArtifacts') testImplementation 'com.commercetools.sdk.jvm.core:commercetools-models:2.16.0' constraints { - implementation("com.fasterxml.jackson.core:jackson-core:2.22.1") { + implementation("com.fasterxml.jackson.core:jackson-core:2.22.2") { because("security update") } - testImplementation("com.fasterxml.jackson.core:jackson-core:2.22.1") { + testImplementation("com.fasterxml.jackson.core:jackson-core:2.22.2") { because("security update") } - implementation("com.fasterxml.jackson.core:jackson-databind:2.22.1") { + implementation("com.fasterxml.jackson.core:jackson-databind:2.22.2") { because("security update") } - testImplementation("com.fasterxml.jackson.core:jackson-core:2.22.1") { + testImplementation("com.fasterxml.jackson.core:jackson-core:2.22.2") { because("security update") } } diff --git a/common-plugins/build.gradle b/common-plugins/build.gradle index 8dfd7f65b6..f68dd080cb 100644 --- a/common-plugins/build.gradle +++ b/common-plugins/build.gradle @@ -32,5 +32,5 @@ dependencies { implementation project(path: ':javaparser', configuration: 'shadow') implementation "com.google.code.gson:gson:2.14.0" implementation 'com.squareup:javapoet:1.13.0' - implementation 'com.google.guava:guava:33.6.0-jre' + implementation 'com.google.guava:guava:33.7.1-jre' } diff --git a/common-plugins/javaparser/build.gradle b/common-plugins/javaparser/build.gradle index cda11da253..c0dc325e43 100644 --- a/common-plugins/javaparser/build.gradle +++ b/common-plugins/javaparser/build.gradle @@ -1,6 +1,6 @@ plugins { id 'java' - id 'com.gradleup.shadow' version '9.2.2' + id 'com.gradleup.shadow' version '9.6.1' } group = 'com.commercetools.sdk.plugins' @@ -16,5 +16,5 @@ shadowJar { dependencies { implementation 'com.github.javaparser:javaparser-core:3.28.2' - implementation 'org.codehaus.plexus:plexus-utils:4.0.3' + implementation 'org.codehaus.plexus:plexus-utils:4.1.0' } diff --git a/gradle/wrapper/gradle-wrapper.properties b/gradle/wrapper/gradle-wrapper.properties index 1e922f4074..c42672d95b 100644 --- a/gradle/wrapper/gradle-wrapper.properties +++ b/gradle/wrapper/gradle-wrapper.properties @@ -1,6 +1,6 @@ distributionBase=GRADLE_USER_HOME distributionPath=wrapper/dists -distributionUrl=https\://services.gradle.org/distributions/gradle-9.7.0-bin.zip +distributionUrl=https\://services.gradle.org/distributions/gradle-9.7.1-bin.zip networkTimeout=10000 validateDistributionUrl=true zipStoreBase=GRADLE_USER_HOME diff --git a/rmf/rmf-java-base/build.gradle b/rmf/rmf-java-base/build.gradle index fd557f8a39..f46a08f23b 100644 --- a/rmf/rmf-java-base/build.gradle +++ b/rmf/rmf-java-base/build.gradle @@ -1,8 +1,8 @@ dependencies { implementation 'com.google.code.findbugs:jsr305:3.0.2' - api 'tools.jackson.core:jackson-databind:3.1.5' - api 'tools.jackson.core:jackson-core:3.2.1' + api 'tools.jackson.core:jackson-databind:3.2.2' + api 'tools.jackson.core:jackson-core:3.2.2' // api jackson_core.datatype api 'org.apache.commons:commons-lang3:3.20.0' api 'org.slf4j:slf4j-api:2.0.18'