Skip to content

Bump the maven group across 17 directories with 14 updates#1

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/examples/cloud-datafusion-functions-plugins/maven-2e8808e601
Open

Bump the maven group across 17 directories with 14 updates#1
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/examples/cloud-datafusion-functions-plugins/maven-2e8808e601

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github May 9, 2025

Bumps the maven group with 6 updates in the /examples/cloud-datafusion-functions-plugins directory:

Package From To
com.google.protobuf:protobuf-java 3.7.1 3.25.5
com.google.guava:guava 28.0-jre 32.0.0-jre
com.fasterxml.jackson.core:jackson-databind 2.9.7 2.12.7.1
org.apache.hadoop:hadoop-common 2.8.0 3.4.0
org.codehaus.plexus:plexus-utils 1.5.7 3.0.24
junit:junit 4.11 4.13.1

Bumps the maven group with 1 update in the /examples/dataflow-dlp-hash-pipeline directory: junit:junit.
Bumps the maven group with 3 updates in the /examples/dataflow-elasticsearch-indexer/ElasticIndexer directory: com.google.protobuf:protobuf-java, com.google.guava:guava and org.json:json.
Bumps the maven group with 2 updates in the /examples/dataflow-streaming-benchmark directory: junit:junit and com.puppycrawl.tools:checkstyle.
Bumps the maven group with 1 update in the /examples/dataflow-xmlio-to-bq directory: org.apache.logging.log4j:log4j-core.
Bumps the maven group with 3 updates in the /examples/e2e-test-dataflow directory: junit:junit, org.apache.logging.log4j:log4j-core and commons-io:commons-io.
Bumps the maven group with 4 updates in the /examples/iot-nirvana directory: junit:junit, commons-io:commons-io, com.google.code.gson:gson and org.eclipse.paho:org.eclipse.paho.client.mqttv3.
Bumps the maven group with 4 updates in the /examples/iot-nirvana/app-engine directory: com.google.guava:guava, junit:junit, commons-io:commons-io and com.google.code.gson:gson.
Bumps the maven group with 3 updates in the /examples/iot-nirvana/client directory: junit:junit, com.google.code.gson:gson and org.eclipse.paho:org.eclipse.paho.client.mqttv3.
Bumps the maven group with 2 updates in the /examples/iot-nirvana/common directory: junit:junit and com.google.code.gson:gson.
Bumps the maven group with 2 updates in the /examples/iot-nirvana/pipeline directory: junit:junit and com.google.code.gson:gson.
Bumps the maven group with 1 update in the /examples/kubeflow-pipelines-sentiment-analysis/sentiment-analysis directory: org.json:json.
Bumps the maven group with 2 updates in the /examples/pubsub-publish-avro-example directory: junit:junit and org.apache.avro:avro.
Bumps the maven group with 2 updates in the /tools/apachebeam-throttling directory: junit:junit and com.puppycrawl.tools:checkstyle.
Bumps the maven group with 2 updates in the /tools/maven-archetype-dataflow/src/main/resources/archetype-resources directory: junit:junit and com.puppycrawl.tools:checkstyle.
Bumps the maven group with 1 update in the /tools/quota-monitoring-alerting/java/quota-scan directory: com.google.code.gson:gson.
Bumps the maven group with 3 updates in the /tools/secret-manager-helper directory: junit:junit, com.puppycrawl.tools:checkstyle and org.apache.commons:commons-text.

Updates com.google.protobuf:protobuf-java from 3.7.1 to 3.25.5

Release notes

Sourced from com.google.protobuf:protobuf-java's releases.

Protocol Buffers v3.20.3

Java

  • Refactoring java full runtime to reuse sub-message builders and prepare to migrate parsing logic from parse constructor to builder.
  • Move proto wireformat parsing functionality from the private "parsing constructor" to the Builder class.
  • Change the Lite runtime to prefer merging from the wireformat into mutable messages rather than building up a new immutable object before merging. This way results in fewer allocations and copy operations.
  • Make message-type extensions merge from wire-format instead of building up instances and merging afterwards. This has much better performance.
  • Fix TextFormat parser to build up recurring (but supposedly not repeated) sub-messages directly from text rather than building a new sub-message and merging the fully formed message into the existing field.
  • This release addresses a Security Advisory for Java users

Protocol Buffers v3.20.2

C++

Protocol Buffers v3.20.1

PHP

  • Fix building packaged PHP extension (#9727)
  • Fixed composer.json to only advertise compatibility with PHP 7.0+. (#9819)

Ruby

  • Disable the aarch64 build on macOS until it can be fixed. (#9816)

Other

  • Fix versioning issues in 3.20.0

Protocol Buffers v3.20.1-rc1

PHP

  • Fix building packaged PHP extension (#9727)

Other

  • Fix versioning issues in 3.20.0

Protocol Buffers v3.20.0

2022-03-25 version 3.20.0 (C++/Java/Python/PHP/Objective-C/C#/Ruby/JavaScript)

Ruby

  • Dropped Ruby 2.3 and 2.4 support for CI and releases. (#9311)
  • Added Ruby 3.1 support for CI and releases (#9566).
  • Message.decode/encode: Add recursion_limit option (#9218/#9486)
  • Allocate with xrealloc()/xfree() so message allocation is visible to the Ruby GC. In certain tests this leads to much lower memory usage due to more frequent GC runs (#9586).
  • Fix conversion of singleton classes in Ruby (#9342)

... (truncated)

Commits
  • 9d0ec0f Updating version.json and repo version numbers to: 25.5
  • 4a197e7 Merge pull request #18387 from protocolbuffers/cp-lp-25
  • b5a7cf7 Remove RecursiveGroup test case which doesn't exist in 25.x pre-Editions
  • f000b7e Fix merge conflict by adding optional label to proto2 unittest_lite.proto
  • 4728531 Add recursion check when parsing unknown fields in Java.
  • 850fcce Internal change
  • b704498 Internal change
  • e673479 Fix cord handling in DynamicMessage and oneofs. (#18375)
  • 8a60b65 Merge pull request #17704 from protocolbuffers/cp-segv
  • 94a2663 Fixed a SEGV when deep copying a non-reified sub-message.
  • Additional commits viewable in compare view

Updates com.google.guava:guava from 28.0-jre to 32.0.0-jre

Release notes

Sourced from com.google.guava:guava's releases.

32.0.0

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>32.0.0-jre</version>
  <!-- or, for Android: -->
  <version>32.0.0-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

Security fixes

While CVE-2020-8908 was officially closed when we deprecated Files.createTempDir in Guava 30.0, we've heard from users that even recent versions of Guava have been listed as vulnerable in other databases of security vulnerabilities. In response, we've reimplemented the method (and the very rarely used FileBackedOutputStream class, which had a similar issue) to eliminate the insecure behavior entirely. This change could technically affect users in a number of different ways (discussed under "Incompatible changes" below), but in practice, the only problem users are likely to encounter is with Windows. If you are using those APIs under Windows, you should skip 32.0.0 and go straight to 32.0.1 which fixes the problem. (Unfortunately, we didn't think of the Windows problem until after the release. And while we warn that common.io in particular may not work under Windows, we didn't intend to regress support.) Sorry for the trouble.

Incompatible changes

Although this release bumps Guava's major version number, it makes no binary-incompatible changes to the guava artifact.

One change could cause issues for Widows users, and a few other changes could cause issues for users in more usual situations:

  • The new implementations of Files.createTempDir and FileBackedOutputStream throw an exception under Windows. This is fixed in 32.0.1. Sorry for the trouble.
  • guava-gwt now requires GWT 2.10.0.
  • This release makes a binary-incompatible change to a @Beta API in the separate artifact guava-testlib. Specifically, we changed the return type of TestingExecutors.sameThreadScheduledExecutor to ListeningScheduledExecutorService. The old return type was a package-private class, which caused the Kotlin compiler to produce warnings. (dafaa3e435)

... (truncated)

Commits

Updates com.fasterxml.jackson.core:jackson-databind from 2.9.7 to 2.12.7.1

Commits

Updates org.apache.hadoop:hadoop-common from 2.8.0 to 3.4.0

Updates org.codehaus.plexus:plexus-utils from 1.5.7 to 3.0.24

Commits
  • fd36d8b [maven-release-plugin] prepare release plexus-utils-3.0.24
  • 33a2853 o Updated to guard against directory traversal issues.
  • f933e5e o Updated to remove '<!--' and '-->' from XML comments to guard against XML
  • fcd94e5 o Updated to stop detecting Windows systems as family DOS.
  • 2644af5 o Updated to guard against 'NullPointerException's.
  • ba1c194 o Updated class 'PropertyUtils' to stop silently dropping exceptions.
  • 8399a2e [maven-release-plugin] prepare for next development iteration
  • 6176f91 [maven-release-plugin] prepare release plexus-utils-3.0.23
  • 5d94a60 Merge pull request #9 from ChristianSchulte/master
  • 05df14e o Updated to stop suppressing exception's thrown when closing streams.
  • Additional commits viewable in compare view

Updates junit:junit from 4.11 to 4.13.1

Release notes

Sourced from junit:junit's releases.

JUnit 4.13.1

Please refer to the release notes for details.

JUnit 4.13

Please refer to the release notes for details.

JUnit 4.13 RC 2

Please refer to the release notes for details.

JUnit 4.13 RC 1

Please refer to the release notes for details.

JUnit 4.13 Beta 3

Please refer to the release notes for details.

JUnit 4.13 Beta 2

Please refer to the release notes for details.

JUnit 4.13 Beta 1

Please refer to the release notes for details.

JUnit 4.12

Please refer to the release notes for details.

JUnit 4.12 Beta 3

Please refer to the release notes for details.

JUnit 4.12 Beta 2

No release notes provided.

JUnit 4.12 Beta 1

No release notes provided.

Commits

Updates junit:junit from 4.12 to 4.13.1

Release notes

Sourced from junit:junit's releases.

JUnit 4.13.1

Please refer to the release notes for details.

JUnit 4.13

Please refer to the release notes for details.

JUnit 4.13 RC 2

Please refer to the release notes for details.

JUnit 4.13 RC 1

Please refer to the release notes for details.

JUnit 4.13 Beta 3

Please refer to the release notes for details.

JUnit 4.13 Beta 2

Please refer to the release notes for details.

JUnit 4.13 Beta 1

Please refer to the release notes for details.

JUnit 4.12

Please refer to the release notes for details.

JUnit 4.12 Beta 3

Please refer to the release notes for details.

JUnit 4.12 Beta 2

No release notes provided.

JUnit 4.12 Beta 1

No release notes provided.

Commits

Updates com.google.protobuf:protobuf-java from 3.6.0 to 3.25.5

Release notes

Sourced from com.google.protobuf:protobuf-java's releases.

Protocol Buffers v3.20.3

Java

  • Refactoring java full runtime to reuse sub-message builders and prepare to migrate parsing logic from parse constructor to builder.
  • Move proto wireformat parsing functionality from the private "parsing constructor" to the Builder class.
  • Change the Lite runtime to prefer merging from the wireformat into mutable messages rather than building up a new immutable object before merging. This way results in fewer allocations and copy operations.
  • Make message-type extensions merge from wire-format instead of building up instances and merging afterwards. This has much better performance.
  • Fix TextFormat parser to build up recurring (but supposedly not repeated) sub-messages directly from text rather than building a new sub-message and merging the fully formed message into the existing field.
  • This release addresses a Security Advisory for Java users

Protocol Buffers v3.20.2

C++

Protocol Buffers v3.20.1

PHP

  • Fix building packaged PHP extension (#9727)
  • Fixed composer.json to only advertise compatibility with PHP 7.0+. (#9819)

Ruby

  • Disable the aarch64 build on macOS until it can be fixed. (#9816)

Other

  • Fix versioning issues in 3.20.0

Protocol Buffers v3.20.1-rc1

PHP

  • Fix building packaged PHP extension (#9727)

Other

  • Fix versioning issues in 3.20.0

Protocol Buffers v3.20.0

2022-03-25 version 3.20.0 (C++/Java/Python/PHP/Objective-C/C#/Ruby/JavaScript)

Ruby

  • Dropped Ruby 2.3 and 2.4 support for CI and releases. (#9311)
  • Added Ruby 3.1 support for CI and releases (#9566).
  • Message.decode/encode: Add recursion_limit option (#9218/#9486)
  • Allocate with xrealloc()/xfree() so message allocation is visible to the Ruby GC. In certain tests this leads to much lower memory usage due to more frequent GC runs (#9586).
  • Fix conversion of singleton classes in Ruby (#9342)

... (truncated)

Commits
  • 9d0ec0f Updating version.json and repo version numbers to: 25.5
  • 4a197e7 Merge pull request #18387 from protocolbuffers/cp-lp-25
  • b5a7cf7 Remove RecursiveGroup test case which doesn't exist in 25.x pre-Editions
  • f000b7e Fix merge conflict by adding optional label to proto2 unittest_lite.proto
  • 4728531 Add recursion check when parsing unknown fields in Java.
  • 850fcce Internal change
  • b704498 Internal change
  • e673479 Fix cord handling in DynamicMessage and oneofs. (#18375)
  • 8a60b65 Merge pull request #17704 from protocolbuffers/cp-segv
  • 94a2663 Fixed a SEGV when deep copying a non-reified sub-message.
  • Additional commits viewable in compare view

Updates com.google.guava:guava from 25.1-jre to 32.0.0-jre

Release notes

Sourced from com.google.guava:guava's releases.

32.0.0

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>32.0.0-jre</version>
  <!-- or, for Android: -->
  <version>32.0.0-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

Security fixes

While CVE-2020-8908 was officially closed when we deprecated Files.createTempDir in Guava 30.0, we've heard from users that even recent versions of Guava have been listed as vulnerable in other databases of security vulnerabilities. In response, we've reimplemented the method (and the very rarely used FileBackedOutputStream class, which had a similar issue) to eliminate the insecure behavior entirely. This change could technically affect users in a number of different ways (discussed under "Incompatible changes" below), but in practice, the only problem users are likely to encounter is with Windows. If you are using those APIs under Windows, you should skip 32.0.0 and go straight to 32.0.1 which fixes the problem. (Unfortunately, we didn't think of the Windows problem until after the release. And while we warn that common.io in particular may not work under Windows, we didn't intend to regress support.) Sorry for the trouble.

Incompatible changes

Although this release bumps Guava's major version number, it makes no binary-incompatible changes to the guava artifact.

One change could cause issues for Widows users, and a few other changes could cause issues for users in more usual situations:

  • The new implementations of Files.createTempDir and FileBackedOutputStream throw an exception under Windows. This is fixed in 32.0.1. Sorry for the trouble.
  • guava-gwt now requires GWT 2.10.0.
  • This release makes a binary-incompatible change to a @Beta API in the separate artifact guava-testlib. Specifically, we changed the return type of TestingExecutors.sameThreadScheduledExecutor to ListeningScheduledExecutorService. The old return type was a package-private class, which caused the Kotlin compiler to produce warnings. (dafaa3e435)

... (truncated)

Commits

Updates org.json:json from 20180813 to 20231013

Release notes

Sourced from org.json:json's releases.

20231013

Pull Request Description
#793 Reverted #761
#792 update the docs for release 20231013
#783 optLong vs getLong inconsistencies
#782 Fix XMLTest.testIndentComplicatedJsonObjectWithArrayAndWithConfig() for Windows
#779 add validity check for JSONObject constructors
#778 Fix XMLTest.testIndentComplicatedJsonObjectWithArrayAndWithConfig() for Windows
#776 Update [JUnit to version 4.13.2
#774 Removing unneeded synchronization
#773 Add optJSONArray method to JSONObject with a default value
#772 Disallow nested objects and arrays as keys in objects
#779 Unit test cleanup
#769 Addressed Java 17 compile warnings
#764 Update CodeQL action version
#761 Add module-info
#759 JSON parsing should detect embedded 
#753 Updated new object methods
#752 Fixes possible unit test bug when compiling/testing on Windows

20230618

Pull Request Description
#749 Prep for release 20230618
#740 Fixed Flaky Tests Caused by JSON permutations
#734 Fixed Flaky Tests Caused by JSON permutations
#733 JSONTokener implemented java.io.Closeable
#731 Removing commented out code in JSONObject optDouble()
#729 Refactor ParserConfiguration class hierarchy

20230227

Pull Request Description
#723 Protect JSONML from stack overflow exceptions caused by recursion
#720 Limit the XML nesting depth for CVE-2022-45688
#711 Revert pull 707 - interviewbit spam
#704 Move javadoc comments above the interface definition to make it visible
#703 Update Releases.md for JSONObject(Map): Throws NPE if key is null
#696 Update JSONPointerTest for NonDex compatibility
#694 Pretty print XML
#692 Example.md syntax highlight and indentation
#691 Create unit tests for various number formats

20220924

Pull Request Description
#688 Update copyright to Public Domain
#687 Fix a typo
#685 JSONObject map type unit tests

... (truncated)

Changelog

Sourced from org.json:json's changelog.

20231013 First release with minimum Java version 1.8. Recent commits, including fixes for CVE-2023-5072.

20230618 Final release with Java 1.6 compatibility. Future releases will require Java 1.8 or greater.

20230227 Fix for CVE-2022-45688 and recent commits

20220924 New License - public domain, and some minor updates

20220320 Wrap StackOverflow with JSONException

20211205 Recent commits and some bug fixes for similar()

20210307 Recent commits and potentially breaking fix to JSONPointer

20201115 Recent commits and first release after project structure change

20200518 Recent commits and snapshot before project structure change

20190722 Recent commits

Commits

Updates junit:junit from 4.12 to 4.13.1

Release notes

Sourced from junit:junit's releases.

JUnit 4.13.1

Please refer to the release notes for details.

JUnit 4.13

Please refer to the release notes for details.

JUnit 4.13 RC 2

Please refer to the release notes for details.

JUnit 4.13 RC 1

Please refer to the release notes for details.

JUnit 4.13 Beta 3

Please refer to the release notes for details.

JUnit 4.13 Beta 2

Please refer to the release notes for details.

JUnit 4.13 Beta 1

Please refer to the release notes for details.

JUnit 4.12

Please refer to the release notes for details.

JUnit 4.12 Beta 3

Please refer to the release notes for details.

JUnit 4.12 Beta 2

No release notes provided.

JUnit 4.12 Beta 1

No release notes provided.

Commits

Updates com.puppycrawl.tools:checkstyle from 8.29 to 10.23.1

Release notes

Sourced from com.puppycrawl.tools:checkstyle's releases.

checkstyle-10.23.1

Checkstyle 10.23.1 - https://checkstyle.org/releasenotes.html#Release_10.23.1

Bug fixes:

#16630 - JavadocParagraph false violation when <p> is inside of <div>``</div> #15769 - google_checks.xml: remove xpath suppression and false-positive indentation violations for block codes #15792 - Fix false-negatives regarding LITERAL_CATCH to detect K&R Blocks in google_checks.xml #11641 - SuppressWarningsHolder should allow usage of simple name of Checks in aliasList

checkstyle-10.23.0

Checkstyle 10.23.0 - https://checkstyle.org/releasenotes.html#Release_10.23.0

... (truncated)

Commits
  • 8761e2b [maven-release-plugin] prepare release checkstyle-10.23.1
  • c9be144 doc: release notes for 10.23.1
  • 4b1908d doc: remove outdated note about ANTLR versions in Javadoc vs Java grammar exp...
  • 0743036 Issue #15456: Specify violation messages for CovariantEqualsCheck
  • c784535 dependency: bump pmd.version from 7.12.0 to 7.13.0
  • 578a262 Issue #16869: Added missing test for InputIndentationInvalidArrayInitIndent.java
  • 3e81a4a Issue #16738: Update SuppressionCommentFilterExamplesTest methods to use veri...
  • 5d33265 Issue #14019: update SuppressFilterElement constructor and remove unused methods
  • bb12f5f dependency: bump info.picocli:picocli from 4.7.6 to 4.7.7
  • 01e0891 Issue #16903: disallow import of java.util.concurrent.atomic.AtomicInteger
  • Additional commits viewable in compare view

Updates org.apache.logging.log4j:log4j-core from 2.14.0 to 2.17.1

Updates junit:junit from 4.12 to 4.13.1

Release notes

Sourced from junit:junit's releases.

JUnit 4.13.1

Please refer to the release notes for details.

JUnit 4.13

Please refer to the release notes for details.

JUnit 4.13 RC 2

Please refer to the release notes for details.

JUnit 4.13 RC 1

Please refer to the release notes for details.

JUnit 4.13 Beta 3

Please refer to the release notes for details.

JUnit 4.13 Beta 2

Please refer to the release notes for details.

JUnit 4.13 Beta 1

Please refer to the release notes for details.

JUnit 4.12

Please refer to the release notes for details.

JUnit 4.12 Beta 3

Please refer to the release notes for details.

JUnit 4.12 Beta 2

No release notes provided.

JUnit 4.12 Beta 1

No release notes provided.

Commits

Updates org.apache.logging.log4j:log4j-core from 2.13.0 to 2.17.1

Updates commons-io:commons-io from 2.6 to 2.14.0

Updates junit:junit from 4.10 to 4.13.1

Release notes

Sourced from junit:junit's releases.

JUnit 4.13.1

Please refer to the release notes for details.

JUnit 4.13

Please refer to the release notes for details.

JUnit 4.13 RC 2

Please refer to the release notes for details.

JUnit 4.13 RC 1

Please refer to the release notes for details.

JUnit 4.13 Beta 3

Please refer to the release notes for details.

JUnit 4.13 Beta 2

Please refer to the release notes for details.

JUnit 4.13 Beta 1

Please refer to the release notes for details.

JUnit 4.12

Please refer to the release notes for details.

JUnit 4.12 Beta 3

Please refer to the release notes for details.

JUnit 4.12 Beta 2

No release notes provided.

JUnit 4.12 Beta 1

No release notes provided.

Commits

Updates commons-io:commons-io from 2.5 to 2.14.0

Updates com.google.code.gson:gson from 2.3.1 to 2.8.9

Release notes

Sourced from com.google.code.gson:gson's releases.

Gson 2.8.9

  • Make OSGi bundle's dependency on sun.misc optional (#1993).
  • Deprecate Gson.excluder() exposing internal Excluder class (#1986).
  • Prevent Java deserialization of internal classes (#1991).
  • Improve number strategy implementation (#1987).
  • Fix LongSerializationPolicy null handling being inconsistent with Gson (#1990).
  • Support arbitrary Number implementation for Object and Number deserialization (#1290).
  • Bump proguard-maven-plugin from 2.4.0 to 2.5.1 (#1980).
  • Don't exclude static local classes (#1969).
  • Fix RuntimeTypeAdapterFactory depending on internal Streams class (#1959).
  • Improve Maven build (#1964).
  • Make dependency on java.sql optional (#1707).

Gson 2.8.8

  • Fixed issue with recursive types (#1390).
  • Better behaviour with Java 9+ and Unsafe if there is a security manager (#1712).
  • EnumTypeAdapter now works better when ProGuard has obfuscated enum fields (#1495).
Changelog

Sourced from com.google.code.gson:gson's changelog.

Version 2.8.9

Version 2.8.8

  • Fixed issue with recursive types (google/gson#1390).
  • Better behaviour with Java 9+ and Unsafe if there is a security manager (google/gson#1712).
  • EnumTypeAdapter now works better when ProGuard has obfuscated enum fields (google/gson#1495).

Version 2.8.7

  • Fixed ISO8601UtilsTest failing on systems with UTC+X.
  • Improved javadoc for JsonStreamParser.
  • Updated proguard.cfg (google/gson#1693).
  • Fixed IllegalStateException in JsonTreeWriter (google/gson#1592).
  • Added JsonArray.isEmpty() (<...

    Description has been truncated

@dependabot
Bump the maven group across 17 directories with 14 updates
982d6a5 
Bumps the maven group with 6 updates in the /examples/cloud-datafusion-functions-plugins directory:

| Package | From | To |
| --- | --- | --- |
| [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `3.7.1` | `3.25.5` |
| [com.google.guava:guava](https://github.com/google/guava) | `28.0-jre` | `32.0.0-jre` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.9.7` | `2.12.7.1` |
| org.apache.hadoop:hadoop-common | `2.8.0` | `3.4.0` |
| [org.codehaus.plexus:plexus-utils](https://github.com/codehaus-plexus/plexus-utils) | `1.5.7` | `3.0.24` |
| [junit:junit](https://github.com/junit-team/junit4) | `4.11` | `4.13.1` |

Bumps the maven group with 1 update in the /examples/dataflow-dlp-hash-pipeline directory: [junit:junit](https://github.com/junit-team/junit4).
Bumps the maven group with 3 updates in the /examples/dataflow-elasticsearch-indexer/ElasticIndexer directory: [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf), [com.google.guava:guava](https://github.com/google/guava) and [org.json:json](https://github.com/douglascrockford/JSON-java).
Bumps the maven group with 2 updates in the /examples/dataflow-streaming-benchmark directory: [junit:junit](https://github.com/junit-team/junit4) and [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle).
Bumps the maven group with 1 update in the /examples/dataflow-xmlio-to-bq directory: org.apache.logging.log4j:log4j-core.
Bumps the maven group with 3 updates in the /examples/e2e-test-dataflow directory: [junit:junit](https://github.com/junit-team/junit4), org.apache.logging.log4j:log4j-core and commons-io:commons-io.
Bumps the maven group with 4 updates in the /examples/iot-nirvana directory: [junit:junit](https://github.com/junit-team/junit4), commons-io:commons-io, [com.google.code.gson:gson](https://github.com/google/gson) and org.eclipse.paho:org.eclipse.paho.client.mqttv3.
Bumps the maven group with 4 updates in the /examples/iot-nirvana/app-engine directory: [com.google.guava:guava](https://github.com/google/guava), [junit:junit](https://github.com/junit-team/junit4), commons-io:commons-io and [com.google.code.gson:gson](https://github.com/google/gson).
Bumps the maven group with 3 updates in the /examples/iot-nirvana/client directory: [junit:junit](https://github.com/junit-team/junit4), [com.google.code.gson:gson](https://github.com/google/gson) and org.eclipse.paho:org.eclipse.paho.client.mqttv3.
Bumps the maven group with 2 updates in the /examples/iot-nirvana/common directory: [junit:junit](https://github.com/junit-team/junit4) and [com.google.code.gson:gson](https://github.com/google/gson).
Bumps the maven group with 2 updates in the /examples/iot-nirvana/pipeline directory: [junit:junit](https://github.com/junit-team/junit4) and [com.google.code.gson:gson](https://github.com/google/gson).
Bumps the maven group with 1 update in the /examples/kubeflow-pipelines-sentiment-analysis/sentiment-analysis directory: [org.json:json](https://github.com/douglascrockford/JSON-java).
Bumps the maven group with 2 updates in the /examples/pubsub-publish-avro-example directory: [junit:junit](https://github.com/junit-team/junit4) and org.apache.avro:avro.
Bumps the maven group with 2 updates in the /tools/apachebeam-throttling directory: [junit:junit](https://github.com/junit-team/junit4) and [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle).
Bumps the maven group with 2 updates in the /tools/maven-archetype-dataflow/src/main/resources/archetype-resources directory: [junit:junit](https://github.com/junit-team/junit4) and [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle).
Bumps the maven group with 1 update in the /tools/quota-monitoring-alerting/java/quota-scan directory: [com.google.code.gson:gson](https://github.com/google/gson).
Bumps the maven group with 3 updates in the /tools/secret-manager-helper directory: [junit:junit](https://github.com/junit-team/junit4), [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) and org.apache.commons:commons-text.


Updates `com.google.protobuf:protobuf-java` from 3.7.1 to 3.25.5
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](protocolbuffers/protobuf@v3.7.1...v3.25.5)

Updates `com.google.guava:guava` from 28.0-jre to 32.0.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.9.7 to 2.12.7.1
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `org.apache.hadoop:hadoop-common` from 2.8.0 to 3.4.0

Updates `org.codehaus.plexus:plexus-utils` from 1.5.7 to 3.0.24
- [Release notes](https://github.com/codehaus-plexus/plexus-utils/releases)
- [Commits](codehaus-plexus/plexus-utils@plexus-utils-1.5.7...plexus-utils-3.0.24)

Updates `junit:junit` from 4.11 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.1)

Updates `junit:junit` from 4.12 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.1)

Updates `com.google.protobuf:protobuf-java` from 3.6.0 to 3.25.5
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](protocolbuffers/protobuf@v3.7.1...v3.25.5)

Updates `com.google.guava:guava` from 25.1-jre to 32.0.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `org.json:json` from 20180813 to 20231013
- [Release notes](https://github.com/douglascrockford/JSON-java/releases)
- [Changelog](https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md)
- [Commits](https://github.com/douglascrockford/JSON-java/commits)

Updates `junit:junit` from 4.12 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.1)

Updates `com.puppycrawl.tools:checkstyle` from 8.29 to 10.23.1
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](checkstyle/checkstyle@checkstyle-8.29...checkstyle-10.23.1)

Updates `org.apache.logging.log4j:log4j-core` from 2.14.0 to 2.17.1

Updates `junit:junit` from 4.12 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.1)

Updates `org.apache.logging.log4j:log4j-core` from 2.13.0 to 2.17.1

Updates `commons-io:commons-io` from 2.6 to 2.14.0

Updates `junit:junit` from 4.10 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.1)

Updates `commons-io:commons-io` from 2.5 to 2.14.0

Updates `com.google.code.gson:gson` from 2.3.1 to 2.8.9
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-2.3.1...gson-parent-2.8.9)

Updates `org.eclipse.paho:org.eclipse.paho.client.mqttv3` from 1.2.0 to 1.2.1

Updates `com.google.guava:guava` from 24.1.1-jre to 32.0.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `junit:junit` from 4.10 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.1)

Updates `commons-io:commons-io` from 2.5 to 2.14.0

Updates `com.google.code.gson:gson` from 2.8.2 to 2.8.9
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-2.3.1...gson-parent-2.8.9)

Updates `junit:junit` from 4.10 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.1)

Updates `com.google.code.gson:gson` from 2.3.1 to 2.8.9
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-2.3.1...gson-parent-2.8.9)

Updates `org.eclipse.paho:org.eclipse.paho.client.mqttv3` from 1.2.0 to 1.2.1

Updates `junit:junit` from 4.10 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.1)

Updates `com.google.code.gson:gson` from 2.8.0 to 2.8.9
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-2.3.1...gson-parent-2.8.9)

Updates `junit:junit` from 4.10 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.1)

Updates `com.google.code.gson:gson` from 2.8.0 to 2.8.9
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-2.3.1...gson-parent-2.8.9)

Updates `org.json:json` from 20180813 to 20231013
- [Release notes](https://github.com/douglascrockford/JSON-java/releases)
- [Changelog](https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md)
- [Commits](https://github.com/douglascrockford/JSON-java/commits)

Updates `junit:junit` from 4.12 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.1)

Updates `org.apache.avro:avro` from 1.8.2 to 1.11.4

Updates `junit:junit` from 4.12 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.1)

Updates `com.puppycrawl.tools:checkstyle` from 8.11 to 8.29
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](checkstyle/checkstyle@checkstyle-8.29...checkstyle-10.23.1)

Updates `junit:junit` from 4.13 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.1)

Updates `com.puppycrawl.tools:checkstyle` from 8.30 to 10.23.1
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](checkstyle/checkstyle@checkstyle-8.29...checkstyle-10.23.1)

Updates `com.google.code.gson:gson` from 2.8.6 to 2.8.9
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-2.3.1...gson-parent-2.8.9)

Updates `junit:junit` from 4.10 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.1)

Updates `com.puppycrawl.tools:checkstyle` from 8.27 to 8.29
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](checkstyle/checkstyle@checkstyle-8.29...checkstyle-10.23.1)

Updates `org.apache.commons:commons-text` from 1.9 to 1.10.0

---
updated-dependencies:
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 3.25.5
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.guava:guava
  dependency-version: 32.0.0-jre
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.12.7.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.hadoop:hadoop-common
  dependency-version: 3.4.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.codehaus.plexus:plexus-utils
  dependency-version: 3.0.24
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 3.25.5
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.guava:guava
  dependency-version: 32.0.0-jre
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.json:json
  dependency-version: '20231013'
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: 10.23.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.17.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.17.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: commons-io:commons-io
  dependency-version: 2.14.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: commons-io:commons-io
  dependency-version: 2.14.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.8.9
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.eclipse.paho:org.eclipse.paho.client.mqttv3
  dependency-version: 1.2.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.guava:guava
  dependency-version: 32.0.0-jre
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: commons-io:commons-io
  dependency-version: 2.14.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.8.9
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.8.9
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.eclipse.paho:org.eclipse.paho.client.mqttv3
  dependency-version: 1.2.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.8.9
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.8.9
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.json:json
  dependency-version: '20231013'
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: org.apache.avro:avro
  dependency-version: 1.11.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: '8.29'
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: 10.23.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.8.9
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: '8.29'
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.commons:commons-text
  dependency-version: 1.10.0
  dependency-type: direct:production
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels May 9, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants