Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 5, 2026

Bumps io.github.ascopes:protobuf-maven-plugin from 4.1.1 to 4.1.2.

Release notes

Sourced from io.github.ascopes:protobuf-maven-plugin's releases.

v4.1.2

  • Configure JVM-based protoc plugins to use ParallelGC by default unless overridden, since this is optimal for short-lived processes.
  • Fixes to internal CDI scoping.
  • Add missing metadata to internal CDI components.
  • Optimisations for path-based executable discovery on both Windows and POSIX-compliant systems.
  • Adjusted license headers for 2026 and beyond.
  • Dependency updates for internals including com.google.protobuf:protobuf-bom and org.json:json.
  • Build on Maven 3.9.12 and Maven 4.0.0-rc-5.
Commits
  • b96e886 [maven-release-plugin] prepare release v4.1.2
  • 048e1f5 Merge pull request #910 from ascopes/dependabot/maven/protobuf-maven-plugin/s...
  • 6ab42b9 Merge pull request #909 from ascopes/dependabot/maven/main/org.json-json-2025...
  • 12e99cb Bump io.grpc:grpc-bom in /protobuf-maven-plugin/src/it/setup
  • df79ab7 Bump org.json:json from 20250517 to 20251224
  • 0749801 Fix logger in AbstractGenerateMojo
  • 42d5555 Inline constants in AbstractGenerateMojo
  • 364f374 Update Maven to 3.9.12 and 4.0.0-rc-5
  • ffea51d Merge pull request #907 from ascopes/task/tune-protoc-plugin-gc
  • 9054445 Further tune protoc plugins in nested JVMs to use parallel GC
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [io.github.ascopes:protobuf-maven-plugin](https://github.com/ascopes/protobuf-maven-plugin) from 4.1.1 to 4.1.2.
- [Release notes](https://github.com/ascopes/protobuf-maven-plugin/releases)
- [Commits](ascopes/protobuf-maven-plugin@v4.1.1...v4.1.2)

---
updated-dependencies:
- dependency-name: io.github.ascopes:protobuf-maven-plugin
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jan 5, 2026
@owasp-dt-bot
Copy link

Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@codacy-production
Copy link

Coverage summary from Codacy

See diff coverage on Codacy

Coverage variation Diff coverage
+0.00% (target: -1.00%) (target: 70.00%)
Coverage variation details
Coverable lines Covered lines Coverage
Common ancestor commit (07f104a) 24511 19939 81.35%
Head commit (43eef9f) 24511 (+0) 19939 (+0) 81.35% (+0.00%)

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details
Coverable lines Covered lines Diff coverage
Pull request (#5658) 0 0 ∅ (not applicable)

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

See your quality gate settings    Change summary preferences

@nscuro nscuro added this to the 4.14.0 milestone Jan 5, 2026
@nscuro nscuro merged commit 1eb177b into master Jan 5, 2026
11 checks passed
@nscuro nscuro deleted the dependabot/maven/io.github.ascopes-protobuf-maven-plugin-4.1.2 branch January 5, 2026 11:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants