Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 15, 2025

Bumps the gradle-dependencies group with 10 updates in the / directory:

Package From To
commons-io:commons-io 2.19.0 2.21.0
com.squareup.okio:okio 3.11.0 3.16.4
org.spockframework:spock-core 2.3-groovy-3.0 2.4-groovy-5.0
org.spockframework:spock-junit4 2.3-groovy-3.0 2.4-groovy-5.0
org.junit.jupiter:junit-jupiter 5.12.2 6.0.1
org.codehaus.groovy:groovy-json 3.0.24 3.0.25
com.networknt:json-schema-validator 1.5.6 3.0.0
org.jetbrains:annotations 26.0.2 26.0.2-1
com.google.code.gson:gson 2.13.0 2.13.2
com.gradle.plugin-publish 1.3.1 2.0.0

Updates commons-io:commons-io from 2.19.0 to 2.21.0

Changelog

Sourced from commons-io:commons-io's changelog.

Apache Commons IO 2.21.0 Release Notes

The Apache Commons IO team is pleased to announce the release of Apache Commons IO 2.21.0.

Introduction

The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.

Version 2.21.0: Java 8 or later is required.

New features

o FileUtils#byteCountToDisplaySize() supports Zettabyte, Yottabyte, Ronnabyte and Quettabyte #763. Thanks to strangelookingnerd, Gary Gregory. o Add org.apache.commons.io.FileUtils.ONE_RB #763. Thanks to strangelookingnerd, Gary Gregory. o Add org.apache.commons.io.FileUtils.ONE_QB #763. Thanks to strangelookingnerd, Gary Gregory. o Add org.apache.commons.io.output.ProxyOutputStream.writeRepeat(byte[], int, int, long). Thanks to Gary Gregory. o Add org.apache.commons.io.output.ProxyOutputStream.writeRepeat(byte[], long). Thanks to Gary Gregory. o Add org.apache.commons.io.output.ProxyOutputStream.writeRepeat(int, long). Thanks to Gary Gregory. o Add length unit support in FileSystem limits. Thanks to Piotr P. Karwasz. o Add IOUtils.toByteArray(InputStream, int, int) for safer chunked reading with size validation. Thanks to Piotr P. Karwasz. o Add org.apache.commons.io.file.PathUtils.getPath(String, String). Thanks to Gary Gregory. o Add org.apache.commons.io.channels.ByteArraySeekableByteChannel. Thanks to Gary Gregory. o Add IOIterable.asIterable(). Thanks to Gary Gregory. o Add NIO channel support to AbstractStreamBuilder. Thanks to Piotr P. Karwasz. o Add CloseShieldChannel to close-shielded NIO Channels #786. Thanks to Piotr P. Karwasz. o Added IOUtils.checkFromIndexSize as a Java 8 backport of Objects.checkFromIndexSize #790. Thanks to Piotr P. Karwasz.

Fixed Bugs

o When testing on Java 21 and up, enable -XX:+EnableDynamicAgentLoading. Thanks to Gary Gregory. o When testing on Java 24 and up, don't fail FileUtilsListFilesTest for a different behavior in the JRE. Thanks to Gary Gregory. o ValidatingObjectInputStream does not validate dynamic proxy interfaces. Thanks to Stanislav Fort, Gary Gregory. o BoundedInputStream.getRemaining() now reports Long.MAX_VALUE instead of 0 when no limit is set. Thanks to Piotr P. Karwasz. o BoundedInputStream.available() correctly accounts for the maximum read limit. Thanks to Piotr P. Karwasz. o Deprecate IOUtils.readFully(InputStream, int) in favor of toByteArray(InputStream, int). Thanks to Gary Gregory, Piotr P. Karwasz. o IOUtils.toByteArray(InputStream) now throws IOException on byte array overflow. Thanks to Piotr P. Karwasz. o Javadoc general improvements. Thanks to Gary Gregory, Piotr P. Karwasz. o IOUtils.toByteArray() now throws EOFException when not enough data is available #796. Thanks to Piotr P. Karwasz. o Fix IOUtils.skip() usage in concurrent scenarios. Thanks to Piotr P. Karwasz. o [javadoc] Fix XmlStreamReader Javadoc to indicate the correct class that is built #806. Thanks to J Hawkins.

Changes

o Bump org.apache.commons:commons-parent from 85 to 91 #774, #783, #808. Thanks to Gary Gregory, Dependabot.

... (truncated)

Commits

Updates com.squareup.okio:okio from 3.11.0 to 3.16.4

Changelog

Sourced from com.squareup.okio:okio's changelog.

Version 3.16.4

2025-11-17

  • Fix: Don't delay triggering timeouts. In 3.16.0 we introduced a regression that caused timeouts to fire later than they were supposed to.

Version 3.16.3

2025-11-14

This release is the same as 3.16.2. We forgot to cherry-pick a commit before we released!

Version 3.16.2

2025-10-14

  • Fix: okio-assetfilesystem APIs now correctly restored as visible to Kotlin.

Version 3.16.1

2025-10-09

  • Fix: Don't crash when calling Socket.shutdownOutput() or shutdownInput() on an SSLSocket on Android API 21. This method throws an UnsupportedOperationException, so we now catch that and close the underlying stream instead.

Version 3.16.0

2025-07-29

  • Fix: Change Socket.asOkioSocket() to resolve its source InputStream and OutputStream eagerly. This will throw a SocketException immediately if the socket isn’t connected. This behavior is consistent with our similar APIs, Socket.source() and Socket.sink().

  • Fix: Optimize AsyncTimeout on systems with a very large number of active timeouts. This class originally kept active timeouts in a linked list; with this update the internal data structure is a binary heap. The old runtime was 𝑂(𝑛²) to activate 𝑛 timeouts; with this optimization the runtime is 𝑂(𝑛 log 𝑛).

  • Upgrade: [Kotlin 2.2.0][kotlin_2_2_0].

Version 3.15.0

2025-07-01

... (truncated)

Commits
  • 74b87c8 Prepare for release 3.16.4.
  • 5cffb11 Fix compareTo function for priority queue in Asynctimeout (#1738)
  • c869a7b Prepare next development version.
  • 06289cc Prepare for release 3.16.3.
  • 42ed971 Prepare version 3.16.2
  • 855f632 Update dependency com.android.tools.build:gradle to v9.0.0-alpha10 (#1715)
  • d8f54b5 Prepare next development version.
  • 6328c9c Prepare for release 3.16.1.
  • 3df8719 Recover from an SSLSocket crash (#1714)
  • d2897ad Update dependency com.android.tools.build:gradle to v9.0.0-alpha09 (#1713)
  • Additional commits viewable in compare view

Updates org.spockframework:spock-core from 2.3-groovy-3.0 to 2.4-groovy-5.0

Release notes

Sourced from org.spockframework:spock-core's releases.

Spock 2.4

https://spockframework.org/spock/docs/2.4/release_notes.html

Spock 2.4-M7

https://spockframework.org/spock/docs/2.4-M7/index.html

Spock 2.4-M6

https://spockframework.org/spock/docs/2.4-M6/index.html

Spock 2.4-M5

https://spockframework.org/spock/docs/2.4-M5/index.html

Spock 2.4-M4

https://spockframework.org/spock/docs/2.4-M4/index.html

Spock 2.4-M3

https://spockframework.org/spock/docs/2.4-M3/index.html

Spock 2.4-M2

https://spockframework.org/spock/docs/2.4-M2/release_notes.html

Spock 2.4-M1

https://spockframework.org/spock/docs/2.4-M1/release_notes.html

Commits

Updates org.spockframework:spock-junit4 from 2.3-groovy-3.0 to 2.4-groovy-5.0

Release notes

Sourced from org.spockframework:spock-junit4's releases.

Spock 2.4

https://spockframework.org/spock/docs/2.4/release_notes.html

Spock 2.4-M7

https://spockframework.org/spock/docs/2.4-M7/index.html

Spock 2.4-M6

https://spockframework.org/spock/docs/2.4-M6/index.html

Spock 2.4-M5

https://spockframework.org/spock/docs/2.4-M5/index.html

Spock 2.4-M4

https://spockframework.org/spock/docs/2.4-M4/index.html

Spock 2.4-M3

https://spockframework.org/spock/docs/2.4-M3/index.html

Spock 2.4-M2

https://spockframework.org/spock/docs/2.4-M2/release_notes.html

Spock 2.4-M1

https://spockframework.org/spock/docs/2.4-M1/release_notes.html

Commits

Updates org.junit.jupiter:junit-jupiter from 5.12.2 to 6.0.1

Release notes

Sourced from org.junit.jupiter:junit-jupiter's releases.

JUnit 6.0.1 = Platform 6.0.1 + Jupiter 6.0.1 + Vintage 6.0.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0...r6.0.1

JUnit 6.0.0 = Platform 6.0.0 + Jupiter 6.0.0 + Vintage 6.0.0

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r5.14.0...r6.0.0

JUnit 6.0.0-RC3 = Platform 6.0.0-RC3 + Jupiter 6.0.0-RC3 + Vintage 6.0.0-RC3

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r6.0.0-RC2...r6.0.0-RC3

JUnit 6.0.0-RC2 = Platform 6.0.0-RC2 + Jupiter 6.0.0-RC2 + Vintage 6.0.0-RC2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0-RC1...r6.0.0-RC2

JUnit 6.0.0-RC1 = Platform 6.0.0-RC1 + Jupiter 6.0.0-RC1 + Vintage 6.0.0-RC1

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r6.0.0-M2...r6.0.0-RC1

JUnit 6.0.0-M2 = Platform 6.0.0-M2 + Jupiter 6.0.0-M2 + Vintage 6.0.0-M2

See Release Notes.

... (truncated)

Commits

Updates org.codehaus.groovy:groovy-json from 3.0.24 to 3.0.25

Commits

Updates com.networknt:json-schema-validator from 1.5.6 to 3.0.0

Release notes

Sourced from com.networknt:json-schema-validator's releases.

3.0.0- 2025-12-13

Added

Changed

2.0.1- 2025-12-11

Added

Changed

2.0.0- 2025-10-25

Added

Changed

1.5.9- 2025-09-13

Added

Changed

1.5.8- 2025-06-27

... (truncated)

Changelog

Sourced from com.networknt:json-schema-validator's changelog.

Change Log

All notable changes to this project will be documented in this file.

This format is based on Keep a Changelog.

This project does not adhere to Semantic Versioning and minor version changes can have incompatible API changes. These incompatible API changes will largely affect those who have custom validator or walker implementations. Those who just use the library to validate using the standard JSON Schema Draft specifications may not need changes.

[Unreleased]

Added

Changed

Changed

3.0.0- 2025-12-13

Added

Changed

2.0.1- 2025-12-11

Added

Changed

2.0.0- 2025-10-25

Added

Changed

1.5.9- 2025-09-13

... (truncated)

Commits
  • 2621edc upgrade to 3.0.0 and update changelog
  • c485230 Upgrade to Jackson 3 and JDK 17 (#1219)
  • ad0f41b Merge branch 'master' of github.com:networknt/json-schema-validator
  • 54d1b71 upgrade to 2.0.1 and update changelog
  • b044361 Skip processing of properties keyword if not an object (#1217)
  • cbc4caa Allow for default dialect id not to be specified and throw an exception (#1212)
  • 3f419f4 Fix multipleOf error message for fractional digits greater than 3 (#1210)
  • 0dde00c upgrade to 2.0.0 and update changelog
  • b4abbc2 Fix ref with sibling id from 2019-09 (#1203)
  • 7bebfeb Refactor walk and update docs (#1202)
  • Additional commits viewable in compare view

Updates org.jetbrains:annotations from 26.0.2 to 26.0.2-1

Release notes

Sourced from org.jetbrains:annotations's releases.

26.0.2-1

A technical release to employ new Maven publishing machinery

Changelog

Sourced from org.jetbrains:annotations's changelog.

Version 26.0.2-1

Commits
  • 20ff2b3 Merge pull request #130 from DmPanov/dmpanov/allworknoplay
  • 21116cc the version is bumped to 26.0.2-1 to test the Maven Central publication
  • b44ce8d Maven Central artifacts task
  • 5fb050c legacy Sonatype publishing removed
  • 2a28eab Merge pull request #120 from JojOatXGME/override-only-static
  • dd44b5b OverrideOnly: Update documentation to exclude static methods
  • See full diff in compare view

Updates com.google.code.gson:gson from 2.13.0 to 2.13.2

Release notes

Sourced from com.google.code.gson:gson's releases.

Gson 2.13.2

The main changes in this release are just newer dependencies.

What's Changed

New Contributors

Full Changelog: google/gson@gson-parent-2.13.1...gson-parent-2.13.2

Gson 2.13.1

What's Changed

New Contributors

Full Changelog: google/gson@gson-parent-2.13.0...gson-parent-2.13.1

Commits
  • 686fad7 [maven-release-plugin] prepare release gson-parent-2.13.2
  • c2d252a Switch to using central-publishing-maven-plugin. (#2900)
  • 69cb755 Bump the github-actions group with 5 updates (#2894)
  • ea552c2 Bump the maven group across 1 directory with 3 updates (#2898)
  • fdc616d Set top-level permissions for CodeQL workflow (#2889)
  • 9334715 Create scorecard.yml (#2888)
  • f7de5c2 Bump the maven group with 8 updates (#2885)
  • 8c23cd3 Update sources to satisfy a new Error Prone check. (#2887)
  • 5eab3ed Bump the github-actions group with 2 updates (#2886)
  • 5f5c200 Bump the maven group across 1 directory with 10 updates (#2872)
  • Additional commits viewable in compare view

Updates com.gradle.plugin-publish from 1.3.1 to 2.0.0

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
org.spockframework:spock-core [>= 2.3-groovy-4.a, < 2.4]
org.spockframework:spock-junit4 [>= 2.3-groovy-4.a, < 2.4]
org.spockframework:spock-core [< 3, > 2.3-groovy-3.0]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gradle-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [commons-io:commons-io](https://github.com/apache/commons-io) | `2.19.0` | `2.21.0` |
| [com.squareup.okio:okio](https://github.com/square/okio) | `3.11.0` | `3.16.4` |
| [org.spockframework:spock-core](https://github.com/spockframework/spock) | `2.3-groovy-3.0` | `2.4-groovy-5.0` |
| [org.spockframework:spock-junit4](https://github.com/spockframework/spock) | `2.3-groovy-3.0` | `2.4-groovy-5.0` |
| [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework) | `5.12.2` | `6.0.1` |
| [org.codehaus.groovy:groovy-json](https://github.com/apache/groovy) | `3.0.24` | `3.0.25` |
| [com.networknt:json-schema-validator](https://github.com/networknt/json-schema-validator) | `1.5.6` | `3.0.0` |
| [org.jetbrains:annotations](https://github.com/JetBrains/java-annotations) | `26.0.2` | `26.0.2-1` |
| [com.google.code.gson:gson](https://github.com/google/gson) | `2.13.0` | `2.13.2` |
| com.gradle.plugin-publish | `1.3.1` | `2.0.0` |



Updates `commons-io:commons-io` from 2.19.0 to 2.21.0
- [Changelog](https://github.com/apache/commons-io/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-io@rel/commons-io-2.19.0...rel/commons-io-2.21.0)

Updates `com.squareup.okio:okio` from 3.11.0 to 3.16.4
- [Changelog](https://github.com/square/okio/blob/master/CHANGELOG.md)
- [Commits](square/okio@parent-3.11.0...parent-3.16.4)

Updates `org.spockframework:spock-core` from 2.3-groovy-3.0 to 2.4-groovy-5.0
- [Release notes](https://github.com/spockframework/spock/releases)
- [Changelog](https://github.com/spockframework/spock/blob/master/docs/release_notes.adoc)
- [Commits](https://github.com/spockframework/spock/commits)

Updates `org.spockframework:spock-junit4` from 2.3-groovy-3.0 to 2.4-groovy-5.0
- [Release notes](https://github.com/spockframework/spock/releases)
- [Changelog](https://github.com/spockframework/spock/blob/master/docs/release_notes.adoc)
- [Commits](https://github.com/spockframework/spock/commits)

Updates `org.junit.jupiter:junit-jupiter` from 5.12.2 to 6.0.1
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.12.2...r6.0.1)

Updates `org.codehaus.groovy:groovy-json` from 3.0.24 to 3.0.25
- [Commits](https://github.com/apache/groovy/commits)

Updates `com.networknt:json-schema-validator` from 1.5.6 to 3.0.0
- [Release notes](https://github.com/networknt/json-schema-validator/releases)
- [Changelog](https://github.com/networknt/json-schema-validator/blob/master/CHANGELOG.md)
- [Commits](networknt/json-schema-validator@1.5.6...3.0.0)

Updates `org.jetbrains:annotations` from 26.0.2 to 26.0.2-1
- [Release notes](https://github.com/JetBrains/java-annotations/releases)
- [Changelog](https://github.com/JetBrains/java-annotations/blob/master/CHANGELOG.md)
- [Commits](JetBrains/java-annotations@26.0.2...26.0.2-1)

Updates `com.google.code.gson:gson` from 2.13.0 to 2.13.2
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-parent-2.13.0...gson-parent-2.13.2)

Updates `com.gradle.plugin-publish` from 1.3.1 to 2.0.0

---
updated-dependencies:
- dependency-name: commons-io:commons-io
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: com.squareup.okio:okio
  dependency-version: 3.16.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: org.spockframework:spock-core
  dependency-version: 2.4-groovy-5.0
  dependency-type: direct:production
  dependency-group: gradle-dependencies
- dependency-name: org.spockframework:spock-junit4
  dependency-version: 2.4-groovy-5.0
  dependency-type: direct:production
  dependency-group: gradle-dependencies
- dependency-name: org.junit.jupiter:junit-jupiter
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gradle-dependencies
- dependency-name: org.codehaus.groovy:groovy-json
  dependency-version: 3.0.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: com.networknt:json-schema-validator
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gradle-dependencies
- dependency-name: org.jetbrains:annotations
  dependency-version: 26.0.2-1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: com.gradle.plugin-publish
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gradle-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Dec 15, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant