COMP-1422 Upgrade third-party dependencies to latest stable versions#998
Open
cristianrcv wants to merge 3 commits intomasterfrom
Open
COMP-1422 Upgrade third-party dependencies to latest stable versions#998cristianrcv wants to merge 3 commits intomasterfrom
cristianrcv wants to merge 3 commits intomasterfrom
Conversation
cristianrcv
force-pushed
the
feat/COMP-1422-upgrade-dependencies
branch
from
8feb30a to
d6a46ef
Compare
Base automatically changed from
feat/COMP-1422-update-gradle-version
to
feat/COMP-1422-create-toml-version-file
March 19, 2026 17:11
Base automatically changed from
feat/COMP-1422-create-toml-version-file
to
master
March 20, 2026 08:09
| Dependency | Old | New | |-------------------------|------------------|------------------| | byte-buddy | 1.14.17 | 1.17.5 | | caffeine | 3.1.8 | 3.2.0 | | commons-compress | 1.27.1 | 1.28.0 | | commons-lang3 | 3.18.0 | 3.20.0 | | failsafe | 3.1.0 | 3.3.2 | | gson | 2.10.1 | 2.13.1 | | guava | 33.3.1-jre | 33.4.8-jre | | jakarta-persistence-api | 3.0.0 | 3.2.0 | | jedis | 5.1.3 | 6.0.0 | | jib (plugin) | 3.4.5 | 3.5.3 | | logback | 1.5.20 | 1.5.32 | | netty-tcnative | 2.0.0.Final | 2.0.71.Final | | resilience4j | 0.17.0 | 2.3.0 | | slf4j | 2.0.16 | 2.0.17 | | snakeyaml | 2.2 | 2.4 | | spock | 2.3-groovy-4.0 | 2.4-groovy-4.0 | Unchanged (already latest or no newer stable release): foojay, jaxb-api, kubernetes-client, luaj, moshi, netty-bom, objenesis, postgresql, spillway Micronaut framework and Seqera internal libraries are intentionally excluded. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
failsafe 3.3.x introduced a binary-incompatible change to RetryPolicyBuilder.handleIf(Predicate) that causes a NoSuchMethodError at runtime because the Seqera lib-retry JAR was compiled against 3.1.0: NoSuchMethodError: 'Object dev.failsafe.RetryPolicyBuilder.handleIf(Predicate)' Pin failsafe back to 3.1.0 until lib-retry is updated to target 3.3.x. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Both upgrades introduced binary incompatibilities with pre-compiled Seqera internal libraries and the Micronaut Data layer respectively. jedis 6.0.0 — same pattern as failsafe: All Seqera internal JARs (lib-jedis-pool, jedis-lock, lib-cache-tiered-redis, lib-data-store-*-redis, …) were compiled against jedis 5.1.4. Forcing 6.0.0 caused silent auth-cache failures that broke every test going through the registry proxy. jakarta-persistence-api 3.2.0 — Micronaut Data compiled against 3.1.0: JPA 3.2 added new abstract methods to core interfaces. Micronaut Data JDBC (compiled against 3.1.0) throws AbstractMethodError at runtime, breaking DB-backed token creation and therefore all registry proxy tests that depend on it. The Micronaut BOM manages this at 3.1.0; our explicit 3.2.0 was overriding that constraint. Both are pinned to the versions the pre-compiled JARs expect until the upstream libraries are updated to support the newer major versions. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
cristianrcv
force-pushed
the
feat/COMP-1422-upgrade-dependencies
branch
from
4411d5b to
bb4583e
Compare
munishchouhan
approved these changes
Mar 20, 2026
Member
|
succesfully tested builds and security scan locally 
|
jonmarti
approved these changes
Mar 20, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Bumps all third-party dependencies to their latest stable releases. Micronaut framework and Seqera internal libraries are intentionally left unchanged.
Unchanged (already at latest stable):
foojay,jaxb-api,kubernetes-client,luaj,moshi,netty-bom,objenesis,postgresql,spillwayNotable major version bumps
./gradlew assemblepasses cleanly with no source changes required.Test plan
./gradlew assemblepasses locally./gradlew testpasses in CI🤖 Generated with Claude Code