Skip to content

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Jun 19, 2025

Bumps io.smallrye:jandex from 3.1.2 to 3.3.1.

Release notes

Sourced from io.smallrye:jandex's releases.

3.3.1

  • #526 ClassInfo#simpleName() behaves inconsistently for nested/top-level classes with a dollar sign in name
  • #519 Add IndexView deprecated javadoc notices
  • #514 add module-info.class

3.3.0

  • #513 release 3.3.0
  • #512 Bump actions/create-github-app-token from 1 to 2
  • #511 add IndexView.getKnownDirectImplementations() and getAllKnownImplementations()
  • #510 add ClassInfo.enclosingClassAlways()
  • #509 allow figuring out the enclosing class of a local/anonymous class declared in a static/instance/field initializer
  • #508 Bump net.bytebuddy:byte-buddy from 1.17.4 to 1.17.5
  • #507 Bump net.bytebuddy:byte-buddy from 1.17.2 to 1.17.4
  • #506 Bump org.junit.jupiter:junit-jupiter from 5.12.0 to 5.12.1
  • #505 Bump net.bytebuddy:byte-buddy from 1.17.1 to 1.17.2
  • #504 Bump version.groovy from 4.0.25 to 4.0.26
  • #503 Bump org.apache.maven.plugins:maven-compiler-plugin from 3.13.0 to 3.14.0
  • #502 Bump org.junit.jupiter:junit-jupiter from 5.11.4 to 5.12.0

3.2.7

  • #500 release 3.2.7
  • #499 Bump net.bytebuddy:byte-buddy from 1.17.0 to 1.17.1
  • #498 Fix detection of Object type in AnnotationOverlayImpl#annotation
  • #497 AnnotationOverlayImpl#annotation does not detect Object properly when searching for inherited annotations

3.2.6

  • #496 release 3.2.6
  • #495 improve performance of the annotation overlay

3.2.5

  • #493 release 3.2.5
  • #492 fix losing type annotations with different visibility
  • #491 fix ClassInfo.canonicalRecordConstructor()

3.2.4

  • #490 Release 3.2.4
  • #489 Bump com.google.code.gson:gson from 2.12.0 to 2.12.1
  • #488 Add JandexReflection.loadType()
  • #487 Bump net.bytebuddy:byte-buddy from 1.16.1 to 1.17.0
  • #486 Bump com.google.code.gson:gson from 2.11.0 to 2.12.0
  • #484 Bump version.groovy from 4.0.24 to 4.0.25
  • #483 Bump net.bytebuddy:byte-buddy from 1.15.11 to 1.16.1
  • #482 Bump net.bytebuddy:byte-buddy from 1.15.10 to 1.15.11
  • #481 Bump org.junit.jupiter:junit-jupiter from 5.11.3 to 5.11.4
  • #480 Bump org.apache.maven.plugins:maven-invoker-plugin from 3.8.1 to 3.9.0
  • #478 Bump version.groovy from 4.0.23 to 4.0.24
  • #477 Bump net.bytebuddy:byte-buddy from 1.15.7 to 1.15.10
  • #476 Bump version.maven-plugin-tools from 3.15.0 to 3.15.1

3.2.3

... (truncated)

Commits
  • c9866db [maven-release-plugin] prepare release 3.3.1
  • c91bf8a Amendments before release
  • ca0f358 release 3.3.1
  • a48cd4c fix ClassInfo.simpleName()
  • 9e247ae Bump burrunan/gradle-cache-action from 2 to 3
  • 1e3dd0b add module descriptor
  • 5a9e1ae add PrimitiveType.isBox()
  • ac2f69a add MethodInfo.isAbstract()
  • 15ff1ac Bump com.google.code.gson:gson from 2.13.0 to 2.13.1
  • b973f7a CI: remove Java 23, add Java 24
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jun 19, 2025
The idea is that we'd merge updates in the "build-dependencies" group as-is, without a Jira issue.

**We would still have to adjust/re-create other update PRs** (such as Jandex) to assign them a Jira issue. We could consider limiting the dependencies covered by dependabot, but I find that grouping, at least, allows a fairly manageable rate of dependabot PRs. Runtime dependency updates should be more rare anyway, as their number is limited and they're generally less active (e.g. Jakarta Persistence doesn't release a micro every week).

The most important ones are the runtime ones, e.g. bytebuddy,
so we could consider ignoring/limiting build dependency updates if
necessary.
@yrodiere
Copy link
Owner

@dependabot recreate

Bumps [io.smallrye:jandex](https://github.com/smallrye/jandex) from 3.1.2 to 3.3.1.
- [Release notes](https://github.com/smallrye/jandex/releases)
- [Changelog](https://github.com/smallrye/jandex/blob/main/RELEASE_PROCEDURE.md)
- [Commits](smallrye/jandex@3.1.2...3.3.1)

---
updated-dependencies:
- dependency-name: io.smallrye:jandex
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the c2e1dependabot/gradle/io.smallrye-jandex-3.3.1 branch from 7645f7f to cde3c18 Compare June 19, 2025 09:39
@yrodiere yrodiere force-pushed the dependabot branch 2 times, most recently from 2dbd575 to 9fed5eb Compare June 19, 2025 10:04
Copy link
Author

dependabot bot commented on behalf of github Jul 9, 2025

A newer version of io.smallrye:jandex exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant