Skip to content

Bump the maven group across 18 directories with 16 updates#8

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/examples/bigtable-change-key/maven-f46c59f3dc
Open

Bump the maven group across 18 directories with 16 updates#8
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/examples/bigtable-change-key/maven-f46c59f3dc

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 20, 2026

Bumps the maven group with 2 updates in the /examples/bigtable-change-key directory: org.apache.commons:commons-lang3 and com.google.guava:guava.
Bumps the maven group with 9 updates in the /examples/cloud-datafusion-functions-plugins directory:

Package From To
org.apache.commons:commons-lang3 3.9 3.18.0
junit:junit 4.11 4.13.1
com.google.guava:guava 28.0-jre 32.0.0-jre
com.google.protobuf:protobuf-java 3.7.1 3.25.5
com.fasterxml.jackson.core:jackson-core 2.9.7 2.15.0
com.fasterxml.jackson.core:jackson-databind 2.9.7 2.12.7.1
org.apache.hadoop:hadoop-common 2.8.0 3.4.0
org.codehaus.plexus:plexus-utils 1.5.7 3.0.24
com.squareup.okhttp3:okhttp 4.2.1 4.9.2

Bumps the maven group with 1 update in the /examples/dataflow-dlp-hash-pipeline directory: junit:junit.
Bumps the maven group with 3 updates in the /examples/dataflow-elasticsearch-indexer/ElasticIndexer directory: com.google.guava:guava, com.google.protobuf:protobuf-java and org.json:json.
Bumps the maven group with 1 update in the /examples/dataflow-streaming-benchmark directory: junit:junit.
Bumps the maven group with 1 update in the /examples/dataflow-xmlio-to-bq directory: org.apache.logging.log4j:log4j-core.
Bumps the maven group with 3 updates in the /examples/e2e-test-dataflow directory: junit:junit, org.apache.logging.log4j:log4j-core and commons-io:commons-io.
Bumps the maven group with 3 updates in the /examples/iot-nirvana directory: junit:junit, commons-io:commons-io and com.google.code.gson:gson.
Bumps the maven group with 4 updates in the /examples/iot-nirvana/app-engine directory: junit:junit, com.google.guava:guava, commons-io:commons-io and com.google.code.gson:gson.
Bumps the maven group with 2 updates in the /examples/iot-nirvana/client directory: junit:junit and com.google.code.gson:gson.
Bumps the maven group with 2 updates in the /examples/iot-nirvana/common directory: junit:junit and com.google.code.gson:gson.
Bumps the maven group with 2 updates in the /examples/iot-nirvana/pipeline directory: junit:junit and com.google.code.gson:gson.
Bumps the maven group with 1 update in the /examples/kubeflow-pipelines-sentiment-analysis/sentiment-analysis directory: org.json:json.
Bumps the maven group with 2 updates in the /examples/pubsub-publish-avro-example directory: junit:junit and org.apache.avro:avro.
Bumps the maven group with 1 update in the /tools/apachebeam-throttling directory: junit:junit.
Bumps the maven group with 1 update in the /tools/maven-archetype-dataflow/src/main/resources/archetype-resources directory: junit:junit.
Bumps the maven group with 1 update in the /tools/quota-monitoring-alerting/java/quota-scan directory: com.google.code.gson:gson.
Bumps the maven group with 2 updates in the /tools/secret-manager-helper directory: junit:junit and org.apache.commons:commons-text.

Updates org.apache.commons:commons-lang3 from 3.12.0 to 3.18.0

Updates com.google.guava:guava from 30.1-jre to 32.0.0-jre

Release notes

Sourced from com.google.guava:guava's releases.

32.0.0

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>32.0.0-jre</version>
  <!-- or, for Android: -->
  <version>32.0.0-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

Security fixes

While CVE-2020-8908 was officially closed when we deprecated Files.createTempDir in Guava 30.0, we've heard from users that even recent versions of Guava have been listed as vulnerable in other databases of security vulnerabilities. In response, we've reimplemented the method (and the very rarely used FileBackedOutputStream class, which had a similar issue) to eliminate the insecure behavior entirely. This change could technically affect users in a number of different ways (discussed under "Incompatible changes" below), but in practice, the only problem users are likely to encounter is with Windows. If you are using those APIs under Windows, you should skip 32.0.0 and go straight to 32.0.1 which fixes the problem. (Unfortunately, we didn't think of the Windows problem until after the release. And while we warn that common.io in particular may not work under Windows, we didn't intend to regress support.) Sorry for the trouble.

Incompatible changes

Although this release bumps Guava's major version number, it makes no binary-incompatible changes to the guava artifact.

One change could cause issues for Widows users, and a few other changes could cause issues for users in more usual situations:

  • The new implementations of Files.createTempDir and FileBackedOutputStream throw an exception under Windows. This is fixed in 32.0.1. Sorry for the trouble.
  • guava-gwt now requires GWT 2.10.0.
  • This release makes a binary-incompatible change to a @Beta API in the separate artifact guava-testlib. Specifically, we changed the return type of TestingExecutors.sameThreadScheduledExecutor to ListeningScheduledExecutorService. The old return type was a package-private class, which caused the Kotlin compiler to produce warnings. (dafaa3e435)

... (truncated)

Commits

Updates org.apache.commons:commons-lang3 from 3.9 to 3.18.0

Updates junit:junit from 4.11 to 4.13.1

Release notes

Sourced from junit:junit's releases.

JUnit 4.13.1

Please refer to the release notes for details.

JUnit 4.13

Please refer to the release notes for details.

JUnit 4.13 RC 2

Please refer to the release notes for details.

JUnit 4.13 RC 1

Please refer to the release notes for details.

JUnit 4.13 Beta 3

Please refer to the release notes for details.

JUnit 4.13 Beta 2

Please refer to the release notes for details.

JUnit 4.13 Beta 1

Please refer to the release notes for details.

JUnit 4.12

Please refer to the release notes for details.

JUnit 4.12 Beta 3

Please refer to the release notes for details.

JUnit 4.12 Beta 2

No release notes provided.

JUnit 4.12 Beta 1

No release notes provided.

Commits

Updates com.google.guava:guava from 28.0-jre to 32.0.0-jre

Release notes

Sourced from com.google.guava:guava's releases.

32.0.0

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>32.0.0-jre</version>
  <!-- or, for Android: -->
  <version>32.0.0-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

Security fixes

While CVE-2020-8908 was officially closed when we deprecated Files.createTempDir in Guava 30.0, we've heard from users that even recent versions of Guava have been listed as vulnerable in other databases of security vulnerabilities. In response, we've reimplemented the method (and the very rarely used FileBackedOutputStream class, which had a similar issue) to eliminate the insecure behavior entirely. This change could technically affect users in a number of different ways (discussed under "Incompatible changes" below), but in practice, the only problem users are likely to encounter is with Windows. If you are using those APIs under Windows, you should skip 32.0.0 and go straight to 32.0.1 which fixes the problem. (Unfortunately, we didn't think of the Windows problem until after the release. And while we warn that common.io in particular may not work under Windows, we didn't intend to regress support.) Sorry for the trouble.

Incompatible changes

Although this release bumps Guava's major version number, it makes no binary-incompatible changes to the guava artifact.

One change could cause issues for Widows users, and a few other changes could cause issues for users in more usual situations:

  • The new implementations of Files.createTempDir and FileBackedOutputStream throw an exception under Windows. This is fixed in 32.0.1. Sorry for the trouble.
  • guava-gwt now requires GWT 2.10.0.
  • This release makes a binary-incompatible change to a @Beta API in the separate artifact guava-testlib. Specifically, we changed the return type of TestingExecutors.sameThreadScheduledExecutor to ListeningScheduledExecutorService. The old return type was a package-private class, which caused the Kotlin compiler to produce warnings. (dafaa3e435)

... (truncated)

Commits

Updates com.google.protobuf:protobuf-java from 3.7.1 to 3.25.5

Release notes

Sourced from com.google.protobuf:protobuf-java's releases.

Protocol Buffers v3.20.3

Java

  • Refactoring java full runtime to reuse sub-message builders and prepare to migrate parsing logic from parse constructor to builder.
  • Move proto wireformat parsing functionality from the private "parsing constructor" to the Builder class.
  • Change the Lite runtime to prefer merging from the wireformat into mutable messages rather than building up a new immutable object before merging. This way results in fewer allocations and copy operations.
  • Make message-type extensions merge from wire-format instead of building up instances and merging afterwards. This has much better performance.
  • Fix TextFormat parser to build up recurring (but supposedly not repeated) sub-messages directly from text rather than building a new sub-message and merging the fully formed message into the existing field.
  • This release addresses a Security Advisory for Java users

Protocol Buffers v3.19.6

Java

  • Refactoring java full runtime to reuse sub-message builders and prepare to migrate parsing logic from parse constructor to builder.
  • Move proto wireformat parsing functionality from the private "parsing constructor" to the Builder class.
  • Change the Lite runtime to prefer merging from the wireformat into mutable messages rather than building up a new immutable object before merging. This way results in fewer allocations and copy operations.
  • Make message-type extensions merge from wire-format instead of building up instances and merging afterwards. This has much better performance.
  • Fix TextFormat parser to build up recurring (but supposedly not repeated) sub-messages directly from text rather than building a new sub-message and merging the fully formed message into the existing field.
  • This release addresses a Security Advisory for Java users

Protobuf Release v3.16.3

Java

  • Refactoring java full runtime to reuse sub-message builders and prepare to migrate parsing logic from parse constructor to builder.
  • Move proto wireformat parsing functionality from the private "parsing constructor" to the Builder class.
  • Change the Lite runtime to prefer merging from the wireformat into mutable messages rather than building up a new immutable object before merging. This way results in fewer allocations and copy operations.
  • Make message-type extensions merge from wire-format instead of building up instances and merging afterwards. This has much better performance.
  • Fix TextFormat parser to build up recurring (but supposedly not repeated) sub-messages directly from text rather than building a new sub-message and merging the fully formed message into the existing field.
  • This release addresses a Security Advisory for Java users
Commits
  • 9d0ec0f Updating version.json and repo version numbers to: 25.5
  • 4a197e7 Merge pull request #18387 from protocolbuffers/cp-lp-25
  • b5a7cf7 Remove RecursiveGroup test case which doesn't exist in 25.x pre-Editions
  • f000b7e Fix merge conflict by adding optional label to proto2 unittest_lite.proto
  • 4728531 Add recursion check when parsing unknown fields in Java.
  • 850fcce Internal change
  • b704498 Internal change
  • e673479 Fix cord handling in DynamicMessage and oneofs. (#18375)
  • 8a60b65 Merge pull request #17704 from protocolbuffers/cp-segv
  • 94a2663 Fixed a SEGV when deep copying a non-reified sub-message.
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-core from 2.9.7 to 2.15.0

Changelog

Sourced from com.fasterxml.jackson.core:jackson-core's changelog.

#release configuration #Sun Apr 23 14:19:10 PDT 2023 scm.commentPrefix=[maven-release-plugin] exec.pomFileName=pom.xml pushChanges=false releaseStrategyId=default project.dev.com.fasterxml.jackson.core:jackson-core=2.15.1-SNAPSHOT project.scm.com.fasterxml.jackson.core:jackson-core.connection=scm:git:git@github.com:FasterXML/jackson-core.git scm.tag=jackson-core-2.15.0 remoteTagging=true project.scm.com.fasterxml.jackson.core:jackson-core.developerConnection=scm:git:git@github.com:FasterXML/jackson-core.git exec.additionalArguments=-Prelease scm.branchCommitComment=@{prefix} prepare branch @{releaseLabel} projectVersionPolicyId=default scm.url=scm:git:git@github.com:FasterXML/jackson-core.git scm.tagNameFormat=@{project.artifactId}-@{project.version} project.scm.com.fasterxml.jackson.core:jackson-core.tag=HEAD pinExternals=false project.rel.com.fasterxml.jackson.core:jackson-core=2.15.0 preparationGoals=clean verify scm.releaseCommitComment=@{prefix} prepare release @{releaseLabel} exec.snapshotReleasePluginAllowed=false project.scm.com.fasterxml.jackson.core:jackson-core.url=https://github.com/FasterXML/jackson-core scm.developmentCommitComment=@{prefix} prepare for next development iteration scm.rollbackCommitComment=@{prefix} rollback the release of @{releaseLabel} completedPhase=end-release

Commits
  • a2c0bdc [maven-release-plugin] prepare release jackson-core-2.15.0
  • 180027a Prepare for 2.15.0 release
  • 2b41925 ...
  • 85340aa Merge branch '2.14' into 2.15
  • ed846d9 ...
  • 94ea208 Update release notes wrt #990
  • a4f2086 [2.14 only] backport removal of BigDecimal to BigInt conversion (#990)
  • 1976c0d Try to get Release workflow working wrt SLSA provenance (fix #844) (#989)
  • 0ee3ad8 ...
  • 163540e [maven-release-plugin] prepare for next development iteration
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.9.7 to 2.12.7.1

Commits

Updates org.apache.hadoop:hadoop-common from 2.8.0 to 3.4.0

Updates org.codehaus.plexus:plexus-utils from 1.5.7 to 3.0.24

Commits
  • fd36d8b [maven-release-plugin] prepare release plexus-utils-3.0.24
  • 33a2853 o Updated to guard against directory traversal issues.
  • f933e5e o Updated to remove '<!--' and '-->' from XML comments to guard against XML
  • fcd94e5 o Updated to stop detecting Windows systems as family DOS.
  • 2644af5 o Updated to guard against 'NullPointerException's.
  • ba1c194 o Updated class 'PropertyUtils' to stop silently dropping exceptions.
  • 8399a2e [maven-release-plugin] prepare for next development iteration
  • 6176f91 [maven-release-plugin] prepare release plexus-utils-3.0.23
  • 5d94a60 Merge pull request #9 from ChristianSchulte/master
  • 05df14e o Updated to stop suppressing exception's thrown when closing streams.
  • Additional commits viewable in compare view

Updates com.squareup.okhttp3:okhttp from 4.2.1 to 4.9.2

Commits

Updates junit:junit from 4.12 to 4.13.1

Release notes

Sourced from junit:junit's releases.

JUnit 4.13.1

Please refer to the release notes for details.

JUnit 4.13

Please refer to the release notes for details.

JUnit 4.13 RC 2

Please refer to the release notes for details.

JUnit 4.13 RC 1

Please refer to the release notes for details.

JUnit 4.13 Beta 3

Please refer to the release notes for details.

JUnit 4.13 Beta 2

Please refer to the release notes for details.

JUnit 4.13 Beta 1

Please refer to the release notes for details.

JUnit 4.12

Please refer to the release notes for details.

JUnit 4.12 Beta 3

Please refer to the release notes for details.

JUnit 4.12 Beta 2

No release notes provided.

JUnit 4.12 Beta 1

No release notes provided.

Commits

Updates com.google.guava:guava from 25.1-jre to 32.0.0-jre

Release notes

Sourced from com.google.guava:guava's releases.

32.0.0

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>32.0.0-jre</version>
  <!-- or, for Android: -->
  <version>32.0.0-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

Security fixes

While CVE-2020-8908 was officially closed when we deprecated Files.createTempDir in Guava 30.0, we've heard from users that even recent versions of Guava have been listed as vulnerable in other databases of security vulnerabilities. In response, we've reimplemented the method (and the very rarely used FileBackedOutputStream class, which had a similar issue) to eliminate the insecure behavior entirely. This change could technically affect users in a number of different ways (discussed under "Incompatible changes" below), but in practice, the only problem users are likely to encounter is with Windows. If you are using those APIs under Windows, you should skip 32.0.0 and go straight to 32.0.1 which fixes the problem. (Unfortunately, we didn't think of the Windows problem until after the release. And while we warn that common.io in particular may not work under Windows, we didn't intend to regress support.) Sorry for the trouble.

Incompatible changes

Although this release bumps Guava's major version number, it makes no binary-incompatible changes to the guava artifact.

One change could cause issues for Widows users, and a few other changes could cause issues for users in more usual situations:

  • The new implementations of Files.createTempDir and FileBackedOutputStream throw an exception under Windows. This is fixed in 32.0.1. Sorry for the trouble.
  • guava-gwt now requires GWT 2.10.0.
  • This release makes a binary-incompatible change to a @Beta API in the separate artifact guava-testlib. Specifically, we changed the return type of TestingExecutors.sameThreadScheduledExecutor to ListeningScheduledExecutorService. The old return type was a package-private class, which caused the Kotlin compiler to produce warnings. (dafaa3e435)

... (truncated)

Commits

Updates com.google.protobuf:protobuf-java from 3.6.0 to 3.25.5

Release notes

Sourced from com.google.protobuf:protobuf-java's releases.

Protocol Buffers v3.20.3

Java

  • Refactoring java full runtime to reuse sub-message builders and prepare to migrate parsing logic from parse constructor to builder.
  • Move proto wireformat parsing functionality from the private "parsing constructor" to the Builder class.
  • Change the Lite runtime to prefer merging from the wireformat into mutable messages rather than building up a new immutable object before merging. This way results in fewer allocations and copy operations.
  • Make message-type extensions merge from wire-format instead of building up instances and merging afterwards. This has much better performance.
  • Fix TextFormat parser to build up recurring (but supposedly not repeated) sub-messages directly from text rather than building a new sub-message and merging the fully formed message into the existing field.
  • This release addresses a Security Advisory for Java users

Protocol Buffers v3.19.6

Java

  • Refactoring java full runtime to reuse sub-message builders and prepare to migrate parsing logic from parse constructor to builder.
  • Move proto wireformat parsing functionality from the private "parsing constructor" to the Builder class.
  • Change the Lite runtime to prefer merging from the wireformat into mutable messages rather than building up a new immutable object before merging. This way results in fewer allocations and copy operations.
  • Make message-type extensions merge from wire-format instead of building up instances and merging afterwards. This has much better performance.
  • Fix TextFormat parser to build up recurring (but supposedly not repeated) sub-messages directly from text rather than building a new sub-message and merging the fully formed message into the existing field.
  • This release addresses a Security Advisory for Java users

Protobuf Release v3.16.3

Java

  • Refactoring java full runtime to reuse sub-message builders and prepare to migrate parsing logic from parse constructor to builder.
  • Move proto wireformat parsing functionality from the private "parsing constructor" to the Builder class.
  • Change the Lite runtime to prefer merging from the wireformat into mutable messages rather than building up a new immutable object before merging. This way results in fewer allocations and copy operations.
  • Make message-type extensions merge from wire-format instead of building up instances and merging afterwards. This has much better performance.
  • Fix TextFormat parser to build up recurring (but supposedly not repeated) sub-messages directly from text rather than building a new sub-message and merging the fully formed message into the existing field.
  • This release addresses a Security Advisory for Java users
Commits
  • 9d0ec0f Updating version.json and repo version numbers to: 25.5
  • 4a197e7 Merge pull request #18387 from protocolbuffers/cp-lp-25
  • b5a7cf7 Remove RecursiveGroup test case which doesn't exist in 25.x pre-Editions
  • f000b7e Fix merge conflict by adding optional label to proto2 unittest_lite.proto
  • 4728531 Add recursion check when parsing unknown fields in Java.
  • 850fcce Internal change
  • b704498 Internal change
  • e673479 Fix cord handling in DynamicMessage and oneofs. (#18375)
  • 8a60b65 Merge pull request #17704 from protocolbuffers/cp-segv
  • 94a2663 Fixed a SEGV when deep copying a non-reified sub-message.
  • Additional commits viewable in compare view

Updates org.json:json from 20180813 to 20231013

Release notes

Sourced from org.json:json's releases.

20231013

Pull Request Description
#793 Reverted #761
#792 update the docs for release 20231013
#783 optLong vs getLong inconsistencies
#782 Fix XMLTest.testIndentComplicatedJsonObjectWithArrayAndWithConfig() for Windows
#779 add validity check for JSONObject constructors
#778 Fix XMLTest.testIndentComplicatedJsonObjectWithArrayAndWithConfig() for Windows
#776 Update [JUnit to version 4.13.2
#774 Removing unneeded synchronization
#773 Add optJSONArray method to JSONObject with a default value
#772 Disallow nested objects and arrays as keys in objects
#779 Unit test cleanup
#769 Addressed Java 17 compile warnings
#764 Update CodeQL action version
#761 Add module-info
#759 JSON parsing should detect embedded 
#753 Updated new object methods
#752 Fixes possible unit test bug when compiling/testing on Windows

20230618

Pull Request Description
#749 Prep for release 20230618
#740 Fixed Flaky Tests Caused by JSON permutations
#734 Fixed Flaky Tests Caused by JSON permutations
#733 JSONTokener implemented java.io.Closeable
#731 Removing commented out code in JSONObject optDouble()
#729 Refactor ParserConfiguration class hierarchy

20230227

Pull Request Description
#723 Protect JSONML from stack overflow exceptions caused by recursion
#720 Limit the XML nesting depth for CVE-2022-45688
#711 Revert pull 707 - interviewbit spam
#704 Move javadoc comments above the interface definition to make it visible
#703 Update Releases.md for JSONObject(Map): Throws NPE if key is null
#696 Update JSONPointerTest for NonDex compatibility
#694 Pretty print XML
#692 Example.md syntax highlight and indentation
#691 Create unit tests for various number formats

20220924

Pull Request Description
#688 Update copyright to Public Domain
#687 Fix a typo
#685 JSONObject map type unit tests

... (truncated)

Changelog

Sourced from org.json:json's changelog.

20231013 First release with minimum Java version 1.8. Recent commits, including fixes for CVE-2023-5072.

20230618 Final release with Java 1.6 compatibility. Future releases will require Java 1.8 or greater.

20230227 Fix for CVE-2022-45688 and recent commits

20220924 New License - public domain, and some minor updates

20220320 Wrap StackOverflow with JSONException

20211205 Recent commits and some bug fixes for similar()

20210307 Recent commits and potentially breaking fix to JSONPointer

20201115 Recent commits and first release after project structure change

20200518 Recent commits and snapshot before project structure change

20190722 Recent commits

Commits

Updates junit:junit from 4.12 to 4.13.1

Release notes

Sourced from junit:junit's releases.

JUnit 4.13.1

Please refer to the release notes for details.

JUnit 4.13

Please refer to the release notes for details.

JUnit 4.13 RC 2

Please refer to the release notes for details.

JUnit 4.13 RC 1

Please refer to the release notes for details.

JUnit 4.13 Beta 3

Please refer to the release notes for details.

JUnit 4.13 Beta 2

Please refer to the release notes for details.

JUnit 4.13 Beta 1

Please refer to the release notes for details.

JUnit 4.12

Please refer to the release notes for details.

JUnit 4.12 Beta 3

Please refer to the release notes for details.

JUnit 4.12 Beta 2

No release notes provided.

JUnit 4.12 Beta 1

No release notes provided.

Commits

Updates org.apache.logging.log4j:log4j-core from 2.14.0 to 2.25.3

Updates junit:junit from 4.12 to 4.13.1

Release notes

Sourced from junit:junit's releases.

JUnit 4.13.1

Please refer to the release notes for details.

JUnit 4.13

Please refer to the release notes for details.

JUnit 4.13 RC 2

Please refer to the release notes for details.

JUnit 4.13 RC 1

Please refer to the release notes for details.

JUnit 4.13 Beta 3

Please refer to the release notes for details.

JUnit 4.13 Beta 2

Please refer to the release notes for details.

JUnit 4.13 Beta 1

Please refer to the release notes for details.

JUnit 4.12

Please refer to the release notes for details.

JUnit 4.12 Beta 3

Please refer to the release notes for details.

JUnit 4.12 Beta 2

No release notes provided.

JUnit 4.12 Beta 1

No release notes provided.

Commits

Updates org.apache.logging.log4j:log4j-core from 2.13.0 to 2.25.3

Updates commons-io:commons-io from 2.6 to 2.14.0

Updates junit:junit from 4.10 to 4.13.1

Release notes

Sourced from junit:junit's releases.

JUnit 4.13.1

Please refer to the release notes for details.

JUnit 4.13

Please refer to the release notes for details.

JUnit 4.13 RC 2

Please refer to the release notes for details.

JUnit 4.13 RC 1

Please refer to the release notes for details.

JUnit 4.13 Beta 3

Please refer to the release notes for details.

JUnit 4.13 Beta 2

Please refer to the release notes for details.

JUnit 4.13 Beta 1

Please refer to the release notes for details.

JUnit 4.12

Please refer to the release notes for details.

JUnit 4.12 Beta 3

Please refer to the release notes for details.

JUnit 4.12 Beta 2

No release notes provided.

JUnit 4.12 Beta 1

No release notes provided.

Commits

@dependabot
Bump the maven group across 18 directories with 16 updates
4c5bbce 
Bumps the maven group with 2 updates in the /examples/bigtable-change-key directory: org.apache.commons:commons-lang3 and [com.google.guava:guava](https://github.com/google/guava).
Bumps the maven group with 9 updates in the /examples/cloud-datafusion-functions-plugins directory:

| Package | From | To |
| --- | --- | --- |
| org.apache.commons:commons-lang3 | `3.9` | `3.18.0` |
| [junit:junit](https://github.com/junit-team/junit4) | `4.11` | `4.13.1` |
| [com.google.guava:guava](https://github.com/google/guava) | `28.0-jre` | `32.0.0-jre` |
| [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `3.7.1` | `3.25.5` |
| [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.9.7` | `2.15.0` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.9.7` | `2.12.7.1` |
| org.apache.hadoop:hadoop-common | `2.8.0` | `3.4.0` |
| [org.codehaus.plexus:plexus-utils](https://github.com/codehaus-plexus/plexus-utils) | `1.5.7` | `3.0.24` |
| [com.squareup.okhttp3:okhttp](https://github.com/square/okhttp) | `4.2.1` | `4.9.2` |

Bumps the maven group with 1 update in the /examples/dataflow-dlp-hash-pipeline directory: [junit:junit](https://github.com/junit-team/junit4).
Bumps the maven group with 3 updates in the /examples/dataflow-elasticsearch-indexer/ElasticIndexer directory: [com.google.guava:guava](https://github.com/google/guava), [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) and [org.json:json](https://github.com/douglascrockford/JSON-java).
Bumps the maven group with 1 update in the /examples/dataflow-streaming-benchmark directory: [junit:junit](https://github.com/junit-team/junit4).
Bumps the maven group with 1 update in the /examples/dataflow-xmlio-to-bq directory: org.apache.logging.log4j:log4j-core.
Bumps the maven group with 3 updates in the /examples/e2e-test-dataflow directory: [junit:junit](https://github.com/junit-team/junit4), org.apache.logging.log4j:log4j-core and commons-io:commons-io.
Bumps the maven group with 3 updates in the /examples/iot-nirvana directory: [junit:junit](https://github.com/junit-team/junit4), commons-io:commons-io and [com.google.code.gson:gson](https://github.com/google/gson).
Bumps the maven group with 4 updates in the /examples/iot-nirvana/app-engine directory: [junit:junit](https://github.com/junit-team/junit4), [com.google.guava:guava](https://github.com/google/guava), commons-io:commons-io and [com.google.code.gson:gson](https://github.com/google/gson).
Bumps the maven group with 2 updates in the /examples/iot-nirvana/client directory: [junit:junit](https://github.com/junit-team/junit4) and [com.google.code.gson:gson](https://github.com/google/gson).
Bumps the maven group with 2 updates in the /examples/iot-nirvana/common directory: [junit:junit](https://github.com/junit-team/junit4) and [com.google.code.gson:gson](https://github.com/google/gson).
Bumps the maven group with 2 updates in the /examples/iot-nirvana/pipeline directory: [junit:junit](https://github.com/junit-team/junit4) and [com.google.code.gson:gson](https://github.com/google/gson).
Bumps the maven group with 1 update in the /examples/kubeflow-pipelines-sentiment-analysis/sentiment-analysis directory: [org.json:json](https://github.com/douglascrockford/JSON-java).
Bumps the maven group with 2 updates in the /examples/pubsub-publish-avro-example directory: [junit:junit](https://github.com/junit-team/junit4) and org.apache.avro:avro.
Bumps the maven group with 1 update in the /tools/apachebeam-throttling directory: [junit:junit](https://github.com/junit-team/junit4).
Bumps the maven group with 1 update in the /tools/maven-archetype-dataflow/src/main/resources/archetype-resources directory: [junit:junit](https://github.com/junit-team/junit4).
Bumps the maven group with 1 update in the /tools/quota-monitoring-alerting/java/quota-scan directory: [com.google.code.gson:gson](https://github.com/google/gson).
Bumps the maven group with 2 updates in the /tools/secret-manager-helper directory: [junit:junit](https://github.com/junit-team/junit4) and org.apache.commons:commons-text.


Updates `org.apache.commons:commons-lang3` from 3.12.0 to 3.18.0

Updates `com.google.guava:guava` from 30.1-jre to 32.0.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `org.apache.commons:commons-lang3` from 3.9 to 3.18.0

Updates `junit:junit` from 4.11 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.1)

Updates `com.google.guava:guava` from 28.0-jre to 32.0.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.google.protobuf:protobuf-java` from 3.7.1 to 3.25.5
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](protocolbuffers/protobuf@v3.7.1...v3.25.5)

Updates `com.fasterxml.jackson.core:jackson-core` from 2.9.7 to 2.15.0
- [Changelog](https://github.com/FasterXML/jackson-core/blob/jackson-core-2.15.0/release.properties)
- [Commits](FasterXML/jackson-core@jackson-core-2.9.7...jackson-core-2.15.0)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.9.7 to 2.12.7.1
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `org.apache.hadoop:hadoop-common` from 2.8.0 to 3.4.0

Updates `org.codehaus.plexus:plexus-utils` from 1.5.7 to 3.0.24
- [Release notes](https://github.com/codehaus-plexus/plexus-utils/releases)
- [Commits](codehaus-plexus/plexus-utils@plexus-utils-1.5.7...plexus-utils-3.0.24)

Updates `com.squareup.okhttp3:okhttp` from 4.2.1 to 4.9.2
- [Changelog](https://github.com/square/okhttp/blob/master/CHANGELOG.md)
- [Commits](square/okhttp@parent-4.2.1...parent-4.9.2)

Updates `junit:junit` from 4.12 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.1)

Updates `com.google.guava:guava` from 25.1-jre to 32.0.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.google.protobuf:protobuf-java` from 3.6.0 to 3.25.5
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](protocolbuffers/protobuf@v3.7.1...v3.25.5)

Updates `org.json:json` from 20180813 to 20231013
- [Release notes](https://github.com/douglascrockford/JSON-java/releases)
- [Changelog](https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md)
- [Commits](https://github.com/douglascrockford/JSON-java/commits)

Updates `junit:junit` from 4.12 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.1)

Updates `org.apache.logging.log4j:log4j-core` from 2.14.0 to 2.25.3

Updates `junit:junit` from 4.12 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.1)

Updates `org.apache.logging.log4j:log4j-core` from 2.13.0 to 2.25.3

Updates `commons-io:commons-io` from 2.6 to 2.14.0

Updates `junit:junit` from 4.10 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.1)

Updates `commons-io:commons-io` from 2.5 to 2.14.0

Updates `com.google.code.gson:gson` from 2.3.1 to 2.8.9
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-2.3.1...gson-parent-2.8.9)

Updates `junit:junit` from 4.10 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.1)

Updates `com.google.guava:guava` from 24.1.1-jre to 32.0.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `commons-io:commons-io` from 2.5 to 2.14.0

Updates `com.google.code.gson:gson` from 2.8.2 to 2.8.9
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-2.3.1...gson-parent-2.8.9)

Updates `junit:junit` from 4.10 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.1)

Updates `com.google.code.gson:gson` from 2.3.1 to 2.8.9
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-2.3.1...gson-parent-2.8.9)

Updates `junit:junit` from 4.10 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.1)

Updates `com.google.code.gson:gson` from 2.8.0 to 2.8.9
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-2.3.1...gson-parent-2.8.9)

Updates `junit:junit` from 4.10 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.1)

Updates `com.google.code.gson:gson` from 2.8.0 to 2.8.9
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-2.3.1...gson-parent-2.8.9)

Updates `org.json:json` from 20180813 to 20231013
- [Release notes](https://github.com/douglascrockford/JSON-java/releases)
- [Changelog](https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md)
- [Commits](https://github.com/douglascrockford/JSON-java/commits)

Updates `junit:junit` from 4.12 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.1)

Updates `org.apache.avro:avro` from 1.8.2 to 1.11.4

Updates `org.apache.avro:avro-compiler` from 1.8.2 to 1.11.4

Updates `junit:junit` from 4.12 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.1)

Updates `junit:junit` from 4.13 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.1)

Updates `com.google.code.gson:gson` from 2.8.6 to 2.8.9
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-2.3.1...gson-parent-2.8.9)

Updates `junit:junit` from 4.10 to 4.13.1
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.11.md)
- [Commits](junit-team/junit4@r4.11...r4.13.1)

Updates `org.apache.commons:commons-text` from 1.9 to 1.10.0

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.18.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.guava:guava
  dependency-version: 32.0.0-jre
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.18.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.guava:guava
  dependency-version: 32.0.0-jre
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 3.25.5
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: 2.15.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.12.7.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.hadoop:hadoop-common
  dependency-version: 3.4.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.codehaus.plexus:plexus-utils
  dependency-version: 3.0.24
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.squareup.okhttp3:okhttp
  dependency-version: 4.9.2
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: com.google.guava:guava
  dependency-version: 32.0.0-jre
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 3.25.5
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.json:json
  dependency-version: '20231013'
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.3
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.3
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: commons-io:commons-io
  dependency-version: 2.14.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: commons-io:commons-io
  dependency-version: 2.14.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.8.9
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: com.google.guava:guava
  dependency-version: 32.0.0-jre
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: commons-io:commons-io
  dependency-version: 2.14.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.8.9
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.8.9
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.8.9
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.8.9
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.json:json
  dependency-version: '20231013'
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: org.apache.avro:avro
  dependency-version: 1.11.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.avro:avro-compiler
  dependency-version: 1.11.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.8.9
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: junit:junit
  dependency-version: 4.13.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: org.apache.commons:commons-text
  dependency-version: 1.10.0
  dependency-type: direct:production
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Feb 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants